---

---

---

•	Protecting users from the advanced attacks that target them via email, social media, and mobile apps;

•	Preventing the theft or inadvertent loss of sensitive information and, in turn, ensuring compliance with regulatory data protection mandates;

•	Collecting, retaining, supervising and discovering sensitive data for compliance and litigation support; and

•	Enabling organizations to respond quickly to security issues, providing both the intelligence and the context to prioritize incidents and orchestrate remediation actions.

---

•

Superior protection against both advanced and targeted threats.  We use a combination of proprietary technologies for big data analytics, machine learning, deep content inspection, dynamic malware analysis, threat correlation, threat intelligence extraction, and virtual execution environments to predictively and actively detect and stop targeted "spear phishing" and other sophisticated advanced and next-generation threat attacks, including APTs, that employ malicious attachments, polymorphic threats, zero-day exploits, user-transparent “drive-by” downloads and other penetration tactics. By processing, analyzing and correlating billions of data points on a daily basis, we can recognize anomalies in order to predictively detect targeted attacks before users are exposed. Our deep content inspection technology enables us to identify malicious message attachments and distinguish between valid messages and "phishing" messages designed to look authentic and trick the end-user into divulging sensitive data or clicking on a malicious web link. Our machine learning technology enables us to detect targeted "zero-hour" attacks in real-time, even if they have not been seen previously at other locations, and quarantine them appropriately. Our dynamic malware analysis and virtual execution environment technologies enable us to examine web site destinations and downloadable files to identify and block potentially hostile code that would otherwise compromise end-user computers, even in cases where the web sites are considered reputable or the attachment’s malicious payload is obfuscated or otherwise disguised. Our threat correlation technologies enable us to rapidly confirm and contain threats, providing rapid, automated protection.

•

Comprehensive, integrated data protection, compliance, and eDiscovery suite.  We offer a comprehensive solution for data protection and governance through an integrated, security-as-a-service platform that is comprised of five main suites: Proofpoint Enterprise Protection, Proofpoint Information Protection, Proofpoint Enterprise Archive, Proofpoint Social Media Security & Compliance, and Proofpoint Essentials. Together, these solutions can improve an organization's ability to detect and mitigate inbound and outbound threats and securely archive and discover communication across all major communication channels including on-premise and cloud-based email, instant messaging, social media and other web-based applications. In addition, our common policy framework and reporting systems enable organizations to comply with complex regulatory mandates, implement consistent data governance policies and ensure end-to-end incident response across the enterprise.

•

Designed to empower end-users.  Unlike legacy offerings that simply block communication or report audit violations, our solutions actively enable secure business-to-business and business-to-consumer communications. Our easy-to-use policy-based email encryption service automatically encrypts sensitive emails and delivers them to any PC or mobile device. In addition, our secure file-transfer solution makes it easy for end-users to securely share various forms of documents and other content that are typically too large to send through traditional e-mail systems. All of our solutions provide mobile-optimized capabilities to empower the growing number of people who use mobile devices as their primary computing platform.

•

Security optimized cloud architecture.  Our multi-tenant security-as-a-service solution leverages a distributed, scalable architecture deployed in our global data centers for deep content inspection, global threat correlation and analytics, high-speed search, secure storage, encryption key management, software updates, intelligent message routing, and other core functions. Customers can choose to deploy optional physical or virtual points-of-presence behind their firewalls for those who prefer to deploy certain functionality inside their security perimeter. This architecture enables us to leverage the benefits of the cloud to cost-effectively deliver superior security and compliance, while optimizing each deployment for the customer's unique threat environment.

•

Extensible security-as-a-service platform.  The key components of our security-as-a-service platform, including services for secure storage, content inspection, reputation, big data analytics, encryption, key management, and identity and policy, can be exposed through application programming interfaces, or APIs, to integrate with internally developed applications as well as with those developed by third-parties. In

---

---

•

Threat detection.  Uses our Proofpoint MLX machine learning technology and reputation data to examine millions of possible attributes in every message, including envelope headers and structure, embedded web links, images, attachments and sender reputation, as well as unstructured content in the message body, to block phishing and spear phishing attacks, spam and other forms of malicious or objectionable content. This solution also includes sophisticated policy and routing controls designed to ensure security and the effective handling of all classifications of content.

•	Virus protection.  Combats email-borne viruses, worms and trojans with a solution that combines efficient message handling, comprehensive reporting, and robust policy management with leading third-party antivirus scanning engines.

•	Zero-hour threat detection.  Protects enterprises against new phishing attacks, viruses and other forms of malicious code during the critical period after new attacks are released and before full information is available to characterize the threat.

•	Smart search.  Offers an easy-to-use interface that provides real-time visibility into message flows across an organization's messaging infrastructure, using built-in logging and reporting capabilities with advanced message tracing, forensics and log analysis capabilities.

•	Targeted attack protection. Enterprises are protected against advanced persistent threats such as phishing and other targeted email attacks by the use of big data analysis, predictive, virtual execution and dynamic malware analysis techniques to identify and apply additional security controls against suspicious messages and any associated links to the web.

•	Threat response. Provides threat information and Indicators of Compromise correlation, aggregating across Proofpoint and other third-party security products, to confirm and contain system compromises. By taking advantage of this automated incident response, enterprises can minimize exfiltration windows and leverage staff for breach prevention and mitigation.

•	Superior protection from advanced threats, spam and viruses.  Protects against advanced threats, spam and other malicious code such as viruses, worms and spyware.

•	Comprehensive outbound threat protection.  Analyzes all outbound email traffic to block spam, viruses and other malicious content from leaving the corporate network, and pinpoint the responsible compromised systems.

•	Automated Incident Response.  Analyzes and correlates incident data to confirm system compromises, then acts to contain systems to help minimize and mitigate exposure.

•	Effective, flexible policy management and administration.  Provides a user-friendly, web-based administration interface and robust reporting capabilities that make it easy to define, enforce and manage an enterprise's messaging policies.

•	Easy-to-use end-user controls.  Gives email users easy, self-service control over their individual email preferences within the parameters of corporate-defined messaging policies.

---

•

Advanced data loss prevention.  Our advanced data loss prevention solution identifies regulated private content, valuable corporate assets and confidential information before it leaves the organization via email, web-based applications, or our Secure Share solution. Pre-packaged smart identifiers and dictionaries automatically and accurately detect a wide range of regulated content such as social security numbers, health records, credit card numbers, and driver's license numbers. In addition to regulated content, our machine learning technology can identify confidential, organization-specific content and assets. Once identified and classified, sensitive data can be blocked, encrypted and transmitted or re-routed internally based on content and identity-aware policies.

•

Flexible remediation and supervision.  Content, identity and destination-aware policies enable effective remediation of potential data breaches or regulatory violations. Remediation options include stopping the transfer completely, automatically forcing data-encryption, or routing to a compliance supervisor or the end-user for disposition. The solution also provides comprehensive reporting on potential violations and remediation using our analytics capabilities.

•	Policy-based encryption.  Automatically encrypts regulated and other sensitive data before it leaves an organization's security perimeter without requiring cumbersome end-user key management. This enables authorized external recipients, whether or not they are our customers, to quickly and easily decrypt and view content from most devices.

•	Secure file transfer.  Provides secure, large file transfer capabilities that enables end-users to send large files quickly, easily, and securely while eliminating the impact of large attachments on an email infrastructure.

•	Secure share. Cloud-based security-focused solution designed to enable enterprise users to securely exchange large files with ease while staying compliant with enterprise data policies.

•	Data Discover. Automated discovery and remediation solution that identifies sensitive content across the enterprise and enables corrective action; reduces risk of data breaches and compliance violations.

•	Regulatory compliance.  Enables outbound messages to comply with national and state government and industry-specific privacy regulations.

•	Superior malicious and accidental data loss protection.  Protects against the loss of sensitive data, whether from a cybercriminal attempting to exfiltrate valuable data from a compromised system, or from an employee accidentally distributing a file to the wrong party through email, webmail, social media, file sharing, or other Internet-based mechanisms for publishing content.

•	Easy-to-use secure communication.  Allows corporate end-users to easily share sensitive data without compromising security and privacy, and enables authorized external recipients to transparently decrypt and read the communications from any device. Our mobile-optimized interfaces provide an easy experience for the rapidly growing number of recipients on smartphones and tablets.

•	Reduction in “attack surface”. Enables the automated protection of sensitive data, reducing the amount of critical information potentially exposed to an attacker in a breach scenario.

---

•

Secure cloud storage.  With our proprietary double blind encryption technology and the associated data storage architecture, all email messages, files and other content are encrypted with keys controlled by the customer before the data enters the Proofpoint Enterprise Archive. This ensures that even our employees and law-enforcement agencies cannot access a readable form of the customer data without authorized access by the customer to the encryption keys stored behind the customer's firewall.

•	Search performance.  By employing parallel, big data search techniques, we are able to deliver search performance measured in seconds, even when searching hundreds of terabytes of archived data. Traditional on-premise solutions can take hours or even days to return search results to a complex query.

•	Flexible policy enforcement.  Enables organizations to easily define and automatically enforce data retention and destruction policies necessary to comply with regulatory mandates or internal policies that can vary by user, group, geography or domain.

•	Active legal-hold management.  Enables administrators or legal professionals to easily designate specific individuals or content as subject to legal-hold. Proofpoint Enterprise Archive then provides active management of these holds by suspending normal deletion policies and automatically archiving subsequent messages and files related to the designated matter.

•	End-user supervision.  Leveraging our flexible workflow capabilities, Proofpoint Enterprise Archive analyzes all electronic communications, including email and communications from leading instant messaging and social networking sites, for potential violations of regulations, such as those imposed by Financial Industry Regulatory Authority ("FINRA") and the SEC in the financial services industry.

•	Regulatory compliance.  Helps organizations meet regulatory requirements by archiving all messages and content according to compliance retention policies and enabling staff to systematically review messages for compliance supervision.

•	Proactive data governance.  Allows organizations to create, maintain and consistently enforce a clear corporate data retention policy, reducing the risk of data loss and the cost of eDiscovery.

•	Efficient litigation support.  Provides advanced search features that reduce the cost of eDiscovery and allow organizations to more effectively manage the litigation hold process.

•	Reduced storage and management costs.  Helps to simplify mailbox and file system management by automatically moving storage-intensive attachments and files into cost-effective cloud storage.

•	Discovery: Using a native cloud-based platform, customers can quickly find the social media applications, accounts, and properties that are affiliated with their brands, measure the footprint and activity for their accounts, benchmark that against competitors, identify key content and risks and report on aspects of security and compliance.

•	Monitoring: Leveraging social media APIs, the platform can monitor and apply content policies to the brand’s owned social media accounts for security, compliance and acceptable use.

•	Protection: Using proprietary Deep Social Linguistic Analysis (DSLA) technology, social media and brand managers can aggregate content from across their enterprise and review it for security, risk and compliance

---

•	Abuse prevention: Scans social networks to discover and track an organization’s accounts and detect fraudulent social media accounts. Automatically protects social media channels from malware, spam, hacks, abusive and offensive content. Effectively scales account moderation with automated, accurate identification of bad content.

•	Additional security: Detects unauthorized changes and anomalous behavior on social account profiles. Locks down pages and accounts in the event of vandalism or hack. Catches and logs unauthorized changes to accounts and associated applications.

•	Enhanced compliance: Reduces potential liability from inadvertent posting of sensitive data and demonstrates compliance with more than 35 standards and industry regulations. Automates compliance review processes and social advocate programs through seamless integration with leading social media management suites.

•	Content inspection.  Applies our Proofpoint MLX machine learning techniques to understand the meaning of email, documents and social networking communications and to identify and classify content as malicious, sensitive or relevant to a litigation matter for threat protection, data loss prevention and discovery.

•	Reputation.  Leverages machine learning and big data analytics to analyze and correlate billions of requests per day to create a dynamic reputation profile of hundreds of millions of IP addresses, domains, web links and other Internet content. This database of reputation profiles is used to help identify and block malicious attacks.

•	Encryption and key management.  Securely encrypts data and stores and indexes hundreds of thousands of individual encryption keys without requiring cumbersome key-exchange or other end-user set-up. Enables authorized users to quickly and easily decrypt and view content from a wide variety of devices.

•	Notification and workflow.  Creates notifications and an enabling workflow to alert administrators and compliance officers of an incident and enable subsequent review, commentary, tracking, escalation and remediation of each event.

•

Analytics and search.  Provides an easy-to-use, web-based interface for searching and analyzing information to enable enterprises to rapidly trace inbound and outbound messages, analyze how messages were processed by a Proofpoint Enterprise deployment, report on the disposition and status of any email message, and retrieve in real-time archived communications for litigation support and eDiscovery.

•	Dynamic Malware Analysis. Detonates potentially malicious documents and URLs in a virtual “sandbox” and applies sophisticated code, behavior and code analysis techniques to identify advanced malware and credential stealing phishing pages.

---

•	Big data analytics.  Indexes and analyzes petabytes of information in real-time to discover threats, detect data leaks and enable end-users to quickly and efficiently access information distributed across their organizations.

•	Machine learning.  Builds predictive data models using our proprietary Proofpoint MLX machine learning techniques to rapidly identify and classify threats and sensitive content in real-time.

•	Identity and policy.  Enables the definition and enforcement of sophisticated data protection policies based on a wide set of variables, including type of content, sender, recipient, pending legal matters, time and date, regulatory status and more.

•	Secure storage.  Stores petabytes of data in the cloud cost-effectively using proprietary encryption methods, keeping sensitive data tamper-proof and private, yet fully searchable in real-time.

•	Virtual execution environments.  An advanced approach to threat detection wherein suspected malware is exposed to a permuted set of instrumented virtual system environments, to assess maliciousness, exploit activity and compromise processes.

•	Intelligent message routing.  Policies can be established by administrators to automatically direct email communications differently through the email network, based on aspects of the messages, for security, compliance, supervisory, system performance, or other reasons.

•	Threat intelligence correlation.  Utilizes inputs from Proofpoint, cloud, and other third-party products to assess Indicators of Compromise and confirm successful system compromises by malicious actors in near-real-time, then administers network controls to effectively contain the compromised systems.

•

Security.  Security is central to our cloud architecture and is designed into all levels of the system, including physical security, network security, application security, and security at our third-party data centers. Our security measures have met the rigorous standards of SSAE 16 certification. In addition to this commercial certification program, we have also successfully completed the FISMA certification for our cloud-based archiving and governance solution, enabling us to serve the rigorous security requirements of U.S. federal agencies.

•

Scalability and performance.  By leveraging a distributed, scalable architecture we process billions of requests against our reputation systems and hundreds of millions of messages per day, all in near real-time. Massively-parallel query processing technology is designed to ensure rapid search results over this vast data volume. In addition to this aggregate scalability across all customers, our architecture also scales to effectively meet the needs of several of our largest individual customers, each of which has millions of users and processes tens of millions of messages per day.

•	Hybrid Deployment.  Our cloud architecture enables individual customers to deploy entirely in Proofpoint's global data centers or in hybrid configurations with optional points of presence located behind the customer's firewall. This deployment flexibility enables us to deliver security, compliance and performance tailored to the unique threat profile and operating environment of each customer.

---

•	High availability.  Our services employ a wide range of technologies including redundancy, geographic distribution, real-time data replication and end-to-end service monitoring to provide 24x7 system availability.

•	Network operations control.  We employ a team of skilled professionals who monitor, manage and maintain our global data center infrastructure and its interoperability with the distributed points of presence located behind our customers' firewalls to ensure 24x7 operations.

•	4 of the 5 largest U.S. retailers

•	3 of the 5 largest U.S. aerospace and defense contractors

•	5 of the 5 largest U.S. banks

•	3 of the 5 largest global pharmaceutical companies

•	2 of the 5 largest U.S. petroleum refining companies

•

Direct sales and reseller channel.  We market and sell our solutions to large and mid-sized customers directly through our field and inside sales teams as well as indirectly through a hybrid model, where our sales organization actively assists our network of distributors and resellers. Our sales personnel are primarily located in North America, with additional personnel located in Asia-Pacific, EMEA, Japan and South America. Our reseller partners maintain relationships with their customers throughout the territories in which they operate, providing them with services and third-party solutions to help meet their evolving security requirements. As such, these partners act as a direct conduit through which we can connect with these prospective customers to offer our solutions. Our channel partners include security centric resellers such as Adaptive Solutions, CDW, Forsythe Technology, Optiv, and SHI International, as well as distributors such as Ingram Micro and Exclusive Networks.

•	Strategic relationships.  We also sell our solutions indirectly through key technology companies that offer our solutions in conjunction with one or more of their own products or services. These companies each have their

---

---

•	Email and Advanced Threat Protection:  Cisco Systems, Inc. (through its acquisitions of IronPort, SourceFire, and ThreatGRID), Microsoft Corporation (through its acquisition of Frontbridge), FireEye, Inc., and Symantec Corporation (through its acquisitions of Brightmail and MessageLabs).

•	Archiving:  Hewlett-Packard Enterprise Company (through its acquisition of Autonomy) and Veritas Technologies LLC (through its acquisitions of KVS and LiveOffice while under the ownership of Symantec Corporation).

•	effectiveness of our protection against advanced threats;

•	comprehensiveness and integration of the solution;

•	flexibility of delivery models;

•	total cost of ownership;

•	scalability and performance;

•	customer support; and

•	extensibility of platform.

---

---

---

---

•	expenditure of significant financial and development resources in efforts to analyze, correct, eliminate or work around errors or defects or to address and eliminate vulnerabilities;

•	loss of existing or potential partners or customers;

•	loss or disclosure of our customers’ confidential information, or the inability to access such information;

•	loss of our proprietary technology;

•	our solutions being susceptible to hacking or electronic break-ins or otherwise failing to secure data;

•	delayed or lost revenue;

•	delay or failure to attain market acceptance;

•	lost market share;

•	negative publicity, which could harm our reputation; or

•	litigation, regulatory inquiries or investigations that would be costly and harm our reputation.

---

---

---

•	fluctuations in currency exchange rates, which may cause our revenues and operating results to differ materially from expectations;

•	our lack of familiarity with commercial and social norms and customs in other countries which may adversely affect our ability to recruit, retain and manage employees in these countries;

•	difficulties and costs associated with staffing and managing foreign operations;

•	the potential diversion of management’s attention to oversee and direct operations that are geographically distant from our U.S. headquarters;

•	compliance with multiple, conflicting and changing governmental laws and regulations, including employment, tax, privacy and data protection laws and regulations;

•	legal systems in which our ability to enforce and protect our rights may be different or less effective than in the United States, including more limited protection for intellectual property rights in some countries;

•	immaturity of compliance regulations in other jurisdictions, which may lower demand for our solutions;

---

•	greater difficulty with payment collections and longer payment cycles;

•	higher employee costs and difficulty terminating non-performing employees;

•	differences in work place cultures;

•	the need to adapt our solutions for specific countries;

•	our ability to comply with differing technical and certification requirements outside the United States;

•	tariffs, export controls and other non-tariff barriers such as quotas and local content rules;

•	adverse tax consequences;

•	restrictions on the transfer of funds;

•	anti-bribery compliance by us or our partners, including under the Foreign Corrupt Practices Act and similar laws of other jurisdictions; and

•	new and different sources of competition.

---

---

---

---

---

---

---

---

•	variations in our revenue, billings, gross margin, operating results, free cash flow, loss per share and how these results compare to analyst expectations;

•	forward looking guidance that we may provide regarding financial metrics such as billings, revenue, gross margin, operating results, free cash flow, and loss per share;

•	announcements of technological innovations, new products or services, strategic alliances, acquisitions or significant agreements by us or by our competitors;

•	disruptions in our cloud-based operations or services or disruptions of other prominent cloud-based operations or services;

•	the economy as a whole, market conditions in our industry, and the industries of our customers;

•	trading activity by directors, executive officers and significant stockholders, or the perception in the market that the holders of a large number of shares intend to sell their shares;

---

•	the size of our market float and significant option exercises;

•	any future issuances of securities;

•	sales and purchases of any common stock issued upon conversion of our convertible notes; and

•	any other factors discussed herein.

•	make it difficult for us to pay other obligations;

•	make it difficult to obtain favorable terms for any necessary future financing for working capital, capital expenditures, debt service requirements or other purposes;

•	require us to dedicate a substantial portion of our cash flow from operations to service the indebtedness, reducing the amount of cash flow available for other purposes; and

•	limit our flexibility in planning for and reacting to changes in our business.

•	creating a classified board of directors whose members serve staggered three-year terms;

---

•	authorizing “blank check” preferred stock, which could be issued by our board without stockholder approval which may contain voting, liquidation, dividend and other rights which are superior to our common stock;

•	limiting the liability of, and providing indemnification to, our directors and officers;

•

limiting the ability of our stockholders to call and bring business before special meetings by providing that any stockholder action must be effected at a duly called meeting of the stockholders and not by a consent in writing, and providing that only our board of directors, the chairman of our board of directors, our Chief Executive Officer or President may call a special meeting of the stockholders; and

•	requiring advance notice of stockholder proposals for business to be conducted at meetings of our stockholders and for nominations of candidates for election to our board of directors.

•	develop or enhance our application and services;

•	continue to expand our product development, sales and marketing organizations;

•	acquire complementary technologies, products or businesses;

•	expand operations, in the United States or internationally;

•	hire, train and retain employees; or

•	respond to competitive pressures or unanticipated working capital requirements.

---

---

---

---

---

(1)	Includes stock-based compensation and amortization of intangible assets as follows:

---

•	protecting users from the advanced attacks that target them via email, social media and mobile applications;

•	preventing the theft or inadvertent loss of sensitive information and, in turn, ensuring compliance with regulatory data protection mandates;

•	collecting, retaining, governing and discovering sensitive data for compliance and litigation support; and

•	enabling organizations to respond quickly to security issues, providing both the intelligence and the context to prioritize incidents and orchestrate remediation actions.

---

---

---

---

•	Billings is not a substitute for revenue, as trends in billings are not directly correlated to trends in revenue;

•

Billings is affected by a combination of factors including the timing of renewals, the sales of our solutions to both new and existing customers, the relative duration of contracts sold, and the relative amount of business derived from strategic partners. As each of these elements has unique characteristics in the relationship between billings and revenue, our billings activity is not closely correlated to revenue except over longer periods of time; and

•	Other companies, including companies in our industry, may not use billings, may calculate billings differently, or may use other financial measures to evaluate their performance ‑ all of which reduce the usefulness of billings as a comparative measure.

---

•	Adjusted EBITDA provides investors and other users of our financial information consistency and comparability with our past financial performance, facilitates period-to-period comparisons of operations and facilitates comparisons with our peer companies, many of which use similar non-GAAP financial measures to supplement their GAAP results; and

•

It is useful to exclude certain non-cash charges, such as depreciation, amortization of intangible assets and stock‑based compensation and non-core operational charges, such as acquisition‑ and litigation-related expenses, from adjusted EBITDA because the amount of such expenses in any specific period may not be directly correlated to the underlying performance of our business operations and these expenses can vary significantly between periods as a result of new acquisitions, full amortization of previously acquired tangible and intangible assets or the timing of new stock‑based awards, as the case may be.

---

---

---

---

(1)	Includes stock-based compensation and amortization of intangible assets as follows:

---

---

---

---

(1)	Includes stock-based compensation expense and amortization of intangible assets as follows:

---

---

•	An increase in amortization of intangible assets of $3.5 million due to the acquired businesses, and an increase in depreciation of fixed assets of $3.6 million due to the increase in capital expenditure;

•	Stock-based compensation expense increased $29.1 million due to the increase in headcount and valuation of grants made;

•	Amortization of debt issuance costs and accretion of debt discount increased $6.2 million due to the issuance of our convertible notes in June 2015;

•	A decrease in accounts receivable change of $2.5 million due to collections;

•	An increase in accounts payable change of $2.3 million due to the timing of the payments;

•	An increase in deferred revenue change of $20.9 million due to higher billings;

•	An increase in accrued liabilities change of $0.5 million due to the timing of compensation and other payments;

•	The increase was offset by a net loss change of $42.2 million, and a decrease in deferred rent change of $2.5 million as larger lease agreements, including tenant allowances received, were executed in prior periods.

•	An increase in amortization of intangible assets of $4.7 million due to the acquisitions made in 2014 and 2013, and an increase in depreciation of fixed assets of $3.1 million due to the increase in capital expenditure;

•	Stock-based compensation expense increased $18.9 million due to the increase in headcount and valuation of grants made;

•	Deferred income tax change increased $2.8 million primarily due to the release of valuation allowance in Canada of $3.2 million in 2013 offset by the release of the acquired deferred tax liability of $0.8 million in 2014;

•	Amortization of debt issuance costs and accretion of debt discount increased $8.3 million due to the issuance of our convertible notes in December 2013;

---

•	An increase in deferred rent of $2.8 million due to new lease agreements signed in 2014, including tenant allowances received;

•	An increase in deferred revenue change of $15.5 million due to higher billings;

•	An increase in accrued liabilities change of $2.1 million due to the timing of compensation and other payments;

•	The increase was offset by a net loss change of $36.7 million, an increase in a change in accounts receivable of $10.2 million due to the increase in billings and sales growth, an increase in prepaid expense of $1.6 million and deferred product costs of $0.9 million due to prepaid royalties, maintenance and other arrangements.

---

(1)	Represents the 0.75% and 1.25% convertible senior notes issued in June 2015 and December 2013, respectively. See Note 8, "Convertible Senior Notes" for further information.

(2)	Represents interest payments on the 0.75% and 1.25% senior convertible notes.

(3)	Consists of capital leases and contractual obligations under operating leases for office space and data centers.

(4)	Consists of minimum purchase commitment of products and services. Obligations under contracts that we can cancel without a significant penalty was not included in the table above.

(5)	As we are unable to reasonably predict the timing of settlement of liabilities related to unrecognized tax benefits, net, the table does not include $0.6 million of such non-current liabilities included in deferred and other tax liabilities recorded on our consolidated balance sheets as of December 31, 2015.

•	Revenue recognition;

•	Stock-based compensation expense;

•	Fair value of assets acquired and liabilities assumed in business combinations;

•	Impairment assessment of goodwill, intangible assets and other long-lived assets

•	Loss contingencies; and

•	Recognition and measurement of current and deferred income taxes.

---

•	Persuasive evidence of an arrangement exists;

•	Delivery has occurred or services have been rendered;

•	Sales price is fixed or determinable; and

•	Collectability is reasonably assured.

---

---

•	future expected cash flows from our revenue streams;

•	the acquired company’s brand and competitive position, as well as assumptions about the period of time the acquired brand will continue to be used in the combined company’s product portfolio; and

•	discount rates.

---

---

---

---

---

---

---

---

---

---

---

---

---

---

•	Persuasive evidence of an arrangement exists;

•	Delivery has occurred or services have been rendered;

•	Sales price is fixed or determinable; and

•	Collectability is reasonably probable.

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

---

•	Level 1: Quoted (unadjusted) prices in active markets for identical assets or liabilities.

•	Level 2: Observable inputs other than quoted prices included in Level 1, such as quoted prices for similar assets or liabilities in active markets; quoted prices for identical or similar assets or liabilities in markets that are not active; or other inputs that are observable or can be corroborated by observable market data for substantially the full term of the asset or liability.

•

Level 3: Unobservable inputs to the valuation methodology that are supported by little or no market activity and that are significant to the measurement of the fair value of the assets or liabilities. Level 3 assets and liabilities include those whose fair value measurements are determined using pricing models, discounted cash flow methodologies or similar valuation techniques, as well as significant management judgment or estimation.

---

---

---

---

•	during the calendar quarter commencing after September 30, 2015, if the last reported sale price of the Company's common stock is greater than or equal to 130% of the applicable conversion price on each such trading day for at least 20 trading days (whether or not consecutive) during the period of 30 consecutive trading days ending on the last trading day of the preceding calendar quarter;

•	during the 5 business day period after any 5 consecutive trading day period in which the trading price, as defined, per $1 principal amount of the 0.75% Notes for each trading day of such measurement period was less than 98% of the product of the last reported sale price of the Company's common stock and the applicable conversion rate on each such trading day;

•	upon a notice of redemption by the Company; or

•	upon the occurrence of specified corporate transactions.

---

•	during the calendar quarter commencing after March 31, 2014, if the last reported sale price of the Company's common stock is greater than or equal to 130% of the applicable conversion price on each such trading day for at least 20 trading days (whether or not consecutive) during the period of 30 consecutive trading days ending on the last trading day of the preceding calendar quarter;

•	during the 5 business day period after any 5 consecutive trading day period in which the trading price, as defined, per $1 principal amount of the 1.25% Notes for each trading day of such measurement period was less than 98% of the product of the last reported sale price of the Company's common stock and the applicable conversion rate on each such trading day;

•	upon a notice of redemption by the Company; or

•	upon the occurrence of specified corporate transactions.

---

---

---

---

---

---

---

---

---

---

---

---