Forward-Looking Statements and Risk Factors

Statements contained in this annual report on Form 10-K, or Annual Report, regarding our expectations, beliefs, estimates, intentions or strategies are forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. Any statements contained herein that are not statements of historical fact may be deemed to be forward-looking statements. For example, words such as "may," "will," "should," "estimates," "predicts," "potential," "continue," "strategy," "believes," "anticipates," "plans," "expects," "intends," and similar expressions are intended to identify forward-looking statements. You should not place undue reliance on these forward-looking statements. Actual results and trends may differ materially from historical results and those projected in any such forward-looking statements depending on a variety of factors. These factors include, but are not limited to:

• market acceptance of new or existing services and features,
• customer acceptance and demand for our cloud communication and collaboration services,
• changes in the competitive dynamics of the markets in which we compete,
• the quality and reliability of our services,
• customer cancellations and rate of churn,
• our ability to scale our business,
• customer acquisition costs,
• our reliance on infrastructure of third-party network services providers,
• risk of failure in our physical infrastructure,
• risk of failure of our software,
• our ability to maintain the compatibility of our software with third-party applications and mobile platforms,
• continued compliance with industry standards and regulatory requirements in the United States and foreign countries in which we make our software solutions available, and the costs of such compliance,
• risks relating to our strategies and objectives for future operations, including the execution of integration plans and realization of the expected benefits of our acquisitions,
• the amount and timing of costs associated with recruiting, training and integrating new employees,
• timing and extent of improvements in operating results from increased spending in marketing, sales, and research and development,
• introduction and adoption of our cloud software solutions in markets outside of the United States,
• risk of cybersecurity breaches,
• general economic conditions that could adversely affect our business and operating results,
• implementation and effects of new accounting standards and policies in our reported financial results, and
• potential future intellectual property infringement claims and other litigation that could adversely effect our business and operating results.

The forward-looking statements may also be impacted by the additional risks faced by us as described in this Annual Report, including those set forth under the section entitled "Risk Factors." All forward-looking statements included in this Annual Report are based on information available to us on the date hereof, and we assume no obligation to update any such forward-looking statements. Readers are urged to carefully review and consider the various disclosures made in this Annual Report, which attempt to advise interested parties of the risks and factors that may affect our business, financial condition, results of operations and prospects.

Our fiscal year ends on March 31 of each calendar year. Each reference to a fiscal year in this Annual Report, refers to the fiscal year ended March 31 of the calendar year indicated (for example, fiscal 2018 refers to the fiscal year ended March 31, 2018). Unless the context requires otherwise, references to "we," "us," "our," "8x8" and the "Company" refer to 8x8, Inc. and its consolidated subsidiaries.

ITEM 1A. RISK FACTORS

If any of the following risks actually occur, our business, results of operations and financial condition could suffer significantly.

Our future success depends on our ability to significantly increase revenue generated from sales of our cloud software solutions to business customers, including small and mid-size businesses (SMBs) and mid-market and larger distributed enterprises. To increase our revenue, we must add new customers and encourage existing customers to continue their subscriptions (on terms favorable to us), increase their usage of our services, and/or purchase additional services from us. For customer demand and adoption of our cloud communications solutions to grow, the quality, cost and feature benefits of these services must compare favorably to those of competing services. For example, our cloud unified communications and contact center services must continue to evolve so that high-quality service and features can be consistently offered at competitive prices. As our target markets mature, or as competitors introduce lower cost and/or more differentiated products or services that compete or are perceived to compete with ours, we may be unable to renew or extend our agreements with existing customers or attract new customers, or new business from existing customers, on favorable terms, which could have an adverse effect on our revenue and growth.

The rate at which our existing customers purchase any new or enhanced services we may offer depends on a number of factors, including general economic conditions, the importance of these additional features and services to our customers, the quality and performance of our cloud communications solutions, and the price at which we offer them. If our customers react negatively to our new or enhanced service offerings, such as our new X series suite of products, or our efforts to upsell are otherwise not as successful as we anticipate, our business may suffer. Our sales strategies must also continue to evolve and adapt as our market matures, for example through the offering of additional customer self-service tools and automation for the SMB segment and the development of new and more sophisticated sales channels that leverage the strengths of our partners. In addition, marketing and selling new and enhanced features and services may require increasingly sophisticated and costly sales and marketing efforts that may require us to incur additional expenses and negatively impact the results of our operations.

To support the successful marketing and sale of our services to new and existing customers, we must continue to offer high-quality training, deployment, and customer support. Providing these services effectively requires that our customer support personnel have industry-specific technical knowledge and expertise, which may make it difficult and costly for us to locate and hire qualified personnel, particularly in the competitive labor market in Silicon Valley where we are headquartered. Our support personnel also require extensive training on our products, which may make it difficult to scale up our support operations rapidly. The importance of high-quality customer support will increase as we expand our business globally and pursue new mid-market and distributed enterprise customers. If we do not help our customers quickly resolve post-deployment issues and provide effective ongoing support, our ability to sell additional features and services to existing customers will suffer and our reputation may be harmed.

We currently derive a majority of our revenues from sales of our cloud software solutions to mid-market and larger distributed enterprises, and we believe increasing our sales to these customers is key to our future growth. Our sales cycle, which is the time between initial contact with a potential customer and the ultimate sale to that customer, is often lengthy and unpredictable for larger enterprise customers. Many of our prospective enterprise customers do not have prior experience with cloud-based communications and, therefore, typically spend significant time and resources evaluating our solutions before they purchase from us. Similarly, we typically spend more time and effort determining their requirements and educating these customers about the benefits and uses of our solutions. Enterprise customers also tend to demand more customizations, integrations and additional features than SMB customers. As a result, we may be required to divert more sales and engineering resources to a smaller number of large transactions than we have in the past, which means that we will have less personnel available to support other segments or that we will need to hire additional personnel, which would increase our operating expenses.

12

It is often difficult for us to forecast when a potential enterprise sale will close, the size of the customer's initial service order and the period over which the deployment will occur, which impacts our recognition of revenue. Enterprise customers may delay their purchases from one quarter to another as they assess their budget constraints, negotiate early contract terminations with their existing providers or wait for us to develop new features. Any delay in closing, or failure to close, a large enterprise sales opportunity in a particular quarter or year could significantly harm our projected growth rates and cause the amount of new sales we book to vary significantly from quarter to quarter. We also may have to delay revenue recognition on some of these transactions until the customer's technical or implementation requirements have been met.

In some cases, we may enter into a contract with a large enterprise customer, such as a preferred vendor agreement, that has little or no minimum purchase commitment but establishes the terms on which the customer's affiliates, clients or franchisees (as the case may be) may order services from us in the future. We may expend significant time and resources becoming a preferred vendor without booking significant sales from the opportunity until months or years after we sign the initial agreement. If we are unsuccessful in selling our services to the prospective purchasers under these agreements, we may not recognize revenue in excess of the expenses we incur in pursuing these opportunities, which could adversely impact our profitability and cash flow.

We have a limited history of selling our services to larger businesses and have experienced, and may continue to experience, new challenges in deploying and providing ongoing support for the solutions we sell to large customers.

Larger customers' networks are often more complex than those of smaller customers and generally require participation from the customer information technology (IT) team, and there is no guarantee that resources with adequate expertise will be available when we deploy our services. The lack of local resources may prevent us from ensuring the proper deployment of our services, which can in turn adversely impact the quality of services that we deliver over our customers' networks, and/or may result in delays in the implementation of our services. This may create a public perception that we are unable to deliver high quality of service to our customers, which could harm our reputation and make it more difficult to attract new customers and retain existing customers. Moreover, larger customers tend to require higher levels of customer service and individual attention (including periodic business reviews and in-person visits, for example), which may increase our costs for implementing and delivering services. If a customer is unsatisfied with the quality of services we provide or the quality of work performed by us or a third party, we may decide to incur costs beyond the scope of our contract with the customer in order to address the situation and protect our reputation, which may in turn reduce or eliminate the profitability of our contract with the customer. In addition, negative publicity related to our larger customer relationships, regardless of its accuracy, could harm our reputation and make it more difficult for us to compete for new business with current and prospective customers.

We also face challenges building and training an integrated sales force capable of addressing the services and features of our comprehensive product suite, as well as a staff of expert engineering and customer support personnel capable of addressing the full range of installation and deployment issues that tend to arise more frequently with larger customers. Also, we have only limited experience in developing and managing sales channels and distribution arrangements for larger businesses. If we fail to effectively execute the sale, deployment and ongoing support of our services to mid-market and larger distributed enterprises, our results of operations and our overall ability to grow our customer base could be materially and adversely affected.

The cloud communications industry is competitive, and we expect it to become increasingly competitive in the future. We may also face competition from companies in adjacent or overlapping industries.

In connection with our unified communication services, we face competition from other providers of cloud communication services, such as RingCentral, Fuze, Vonage, Dialpad, Nextiva and Shoretel (acquired by Mitel in 2017). In connection with our cloud contact center services, we face competition from other providers of cloud and premise-based contact center software services, such as NICE/inContact, Five9 and Interactive Intelligence.

In addition, because many of our target customers have historically purchased communications services from incumbent telephone companies along with legacy on-premises communication equipment, we compete with these customers' existing providers. These competitors include, for example, AT&T, CenturyLink, Comcast and Verizon Communications in the United States, as well as local incumbent communications providers in the international markets where we operate, such as Vodafone, Telefonica, Orange,

13

America Movil and Deutsche Telekom, all in conjunction with on-premises hardware solutions from companies like Avaya, Cisco and Mitel. We may face competition from large Internet and cloud service companies such as Google Inc., Amazon Inc., Oracle Corporation and Microsoft Corporation, any of which might launch a new cloud-based business communications service, expand its existing offerings or acquire other cloud-based business communications companies in the future.

Many of our current and potential competitors have longer operating histories, significantly greater resources and brand awareness, and a larger base of customers than we have. As a result, these competitors may have greater credibility with our existing and potential customers. They also may be able to adopt more aggressive pricing policies and devote greater resources to the development, promotion and sale of their products. Our competitors may also offer bundled service arrangements that present a more differentiated or better integrated product to customers. Increased competition could require us to lower our prices, reduce our sales revenue, lower our gross profits and/or cause us to lose market share. In addition, many of our customers are not subject to long-term contractual commitments and have the ability to switch from our services to our competitors' offerings on relatively short notice. Given the significant price competition in the markets for our services, we may be at a disadvantage compared with those competitors who have substantially greater resources than us or may otherwise be better positioned to withstand an extended period of downward pricing pressure. The adverse impact of a shortfall in our revenues may be magnified by our inability to adjust our expenses to compensate for such shortfall. Announcements, or expectations, as to the introduction of new products and technologies by our competitors or us could cause customers to defer purchases of our existing products, which also could have a material adverse effect on our business, financial condition or operating results.

We operate in an emerging market that is characterized by rapid changes in customer requirements, frequent introductions of new and enhanced products and services, and continuing and rapid technological advancement. To compete successfully in this emerging market, we must continue to design, develop, manufacture, and sell highly scalable new and enhanced cloud software solutions products and services that provide higher levels of performance and reliability at lower cost. If we are unable to develop new products and services that address our customers' needs, to deliver our cloud software solutions applications in one seamless integrated product offering that addresses our customers' needs, or to enhance and improve our products and services in a timely manner, we may not be able to achieve or maintain adequate market acceptance of our services. Our ability to grow is also subject to the risk of future disruptive technologies. Access and use of our products and services is provided via the cloud, which, itself, has been disruptive to the previous premises-based model.

If new technologies emerge that are able to deliver communications and collaboration solutions services at lower prices, more efficiently, more conveniently or more securely, such technologies could adversely impact our ability to compete.

If we are unable to develop new features and services internally due to factors such as competitive labor markets, high employee turnover, lack of management ability or a lack of other research and development resources, we may miss market opportunities. Further, many of our competitors have historically spent a greater amount of funds on their research and development programs, and those that do not may be acquired by larger companies that would allocate greater resources to our competitors' research and development programs. In addition, there is no guarantee that our research and development efforts will succeed, or that our new products and services will enable us to maintain or grow our revenue or recover our development costs. Our failure to maintain adequate research and development resources, to compete effectively with the research and development programs of our competitors and to successfully monetize our research and development efforts could materially and adversely affect our business and results of operations.

We announced in March 2018 that we would be launching our new product line, branded "X Series," in or around June 2018. We expect to market X-Series as an array of prepackaged services (designated X2, X4, X5, etc.), which start at the most basic version of our unified communications solution, and add engagement capabilities at each new level, with the top-tier X Series packages combining unified communications and contact center services into a single offering. Customer demand for our X Series product line will depend on a number of factors, including, for example, factors inherent to the product itself, such as quality of service, reliability, feature availability, and ease of use; and factors relating to our ability to implement, support and market and sell the service effectively. More fundamentally, the success of X Series may depend on whether the market for unified communications, collaborations and contact center services is trending towards convergence of these three solutions into a single system, as we are predicting. We cannot be certain that this market trend will occur according to the timeline we are expecting, or at all. For example, if the various components of our service were to become commoditized and standardized in a way that diminishes the benefits of a single platform for customers, there may be less demand for a unified suite of services like X Series. Low customer demand could make it more difficult for us to win the business of new customers or gain additional business from existing customers, either of which in turn could cause our service revenue to grow more slowly than we expect, or to remain flat or even decrease in future periods.

We recorded an operating loss of approximately $104 million for the fiscal year ended March 31, 2018 and ended the period with an accumulated deficit of approximately $201 million. We expect to incur operating losses in our current fiscal year as we continue to invest in growth. As we expand our geographic reach and range of service offerings, and further invest in research and development, sales and marketing, and other areas of our business, we will need to increase revenues in order to generate sustainable operating profit. Given our history of fluctuating revenues and operating losses, we cannot be certain that we will be able to achieve or maintain operating profitability on an annual basis or on a quarterly basis in the future.

14

Our churn rate may increase in future periods due to customer cancellations or other factors, which may adversely impact our revenue or require us to spend more money to grow our customer base.

Our customers generally do not have long-term contracts with us and may discontinue their subscriptions for our services after the expiration of their initial subscription period, which typically range from one to three years. In addition, our customers may renew for lower subscription amounts or for shorter contract lengths. We may not accurately predict cancellation rates for our customers. Our cancellation rates may increase or fluctuate as a result of a number of factors, including customer usage, pricing changes, number of applications used by our customers, customer satisfaction with our service, the acquisition of our customers by other companies and deteriorating general economic conditions. If our customers do not renew their subscriptions for our service or decrease the amount they spend with us, our revenue will decline and our business will suffer.

Our average monthly business service revenue churn was less than 1% over the past two fiscal years. Our method of computing this revenue churn rate may be different from methods used by our competitors and other companies in our industry to compute their publicly disclosed churn rates. As a result, only limited reliance can be placed on our churn rate when attempting to compare it with other companies. Also, our churn rate can vary based on events that may not be indicative of actual trends in our business. Our churn rate could increase in the future if customers are not satisfied with our service. Other factors, including increased competition from other providers of communications and collaborations services, alternative technologies, and adverse business conditions also influence our churn rate.

Because of churn, we must acquire new customers on an ongoing basis to maintain our existing level of customers and revenues. As a result, marketing expenditures are an ongoing requirement of our business. If our churn rate increases, we will have to acquire even more new customers in order to maintain our existing revenues. We incur significant costs to acquire new customers, and those costs are an important factor in determining our net profitability. Therefore, if we are unsuccessful in retaining customers or are required to spend significant amounts to acquire new customers beyond those budgeted, our revenue could decrease and our net loss could increase.

Our rate of customer cancellations may increase in future periods due to a number of factors, some of which are beyond our control, such as the financial condition of our customers or the state of credit markets. In addition, a single, protracted service outage or a series of service disruptions, whether due to our services or those of our carrier partners, may result in a sharp increase in customer cancellations.

Due to the length of our sales cycle, especially in adding new mid-market and larger distributed enterprises as customers, we may also experience delays in acquiring new customers to replace those that have terminated our services. Such delays would be exacerbated if general economic conditions worsen. An increase in churn, particularly in challenging economic times, could have a negative impact on the results of our operations.

As usage of our cloud software solutions by mid-market and larger distributed enterprises expands and as customers continue to integrate our services across their enterprises, we are required to devote additional resources to improving our application architecture, integrating our products and applications across our technology platform, integrating with third-party systems, and maintaining infrastructure performance. As our customers gain more experience with our services, the number of users and transactions managed by our services, the amount of data transferred, processed and stored by us, the number of locations where our service is being accessed, and the volume of communications managed by our services have in some cases, and may in the future, expand rapidly. In addition, we will need to appropriately scale our internal business systems and our services organization, including customer support and services and regulatory compliance, to serve our growing customer base. Any failure of or delay in these efforts could cause impaired system performance and reduced customer satisfaction. These issues could reduce the attractiveness of our cloud software solutions to customers, resulting in decreased sales to new customers, lower renewal rates by existing customers, the issuance of service credits, or requested refunds, which could hurt our revenue growth and our reputation. These system upgrades and the expansion of our support and services have been and will continue to be expensive and complex, requiring management time and attention and increasing our operating expenses. We could also face inefficiencies or operational failures as a result of our efforts to scale our infrastructure and information technology systems.There are inherent risks associated with upgrading, improving and expanding our information technology systems and we cannot be sure that the expansion and improvements to our infrastructure and systems will be fully or effectively implemented on a timely basis, if at all. These efforts may reduce revenue and our margins and adversely impact our financial results.

15

To provide our services, we rely on third parties for all of our network connectivity and co-location facilities.

We currently use the infrastructure of third-party network service providers, including the services of Equinix, Inc., and Level 3 Communications, Inc., to provide all of our cloud services over their networks rather than deploying our own networks.

We also rely on third-party network service providers to originate and terminate substantially all of the PSTN calls using our cloud-based services. We leverage the infrastructure of third-party network service providers to provide telephone numbers, PSTN call termination and origination services, and local number portability for our customers rather than deploying our own network throughout the United States and internationally. This decision has resulted in lower capital and operating costs for our business in the short-term, but has reduced our operating flexibility and ability to make timely service changes. If any of these network service providers cease operations or otherwise terminate the services that we depend on, the delay in switching our technology to another network service provider, if available, and qualifying this new service provider could have a material adverse effect on our business, financial condition or operating results. The rates we pay to our network service providers may also increase, which may reduce our profitability and increase the retail price of our service.

There can be no assurance that these service providers will be able or willing to supply cost-effective services to us in the future or that we will be successful in signing up alternative or additional providers. Although we believe that we could replace our current providers, if necessary, our ability to provide service to our subscribers could be impacted during any such transition, which could have an adverse effect on our business, financial condition or results of operations. The loss of access to, or requirement to change, the telephone numbers we provide to our customers also could have a material adverse effect on our business, financial condition or operating results.

Due to our reliance on these service providers, when problems occur in a network, it may be difficult to identify the source of the problem. The occurrence of hardware and software errors, whether caused by our service or products or those of another vendor, may result in the delay or loss of market acceptance of our products and any necessary revisions may force us to incur significant expenses. Under the terms of the "end-to-end" service level commitments that we make for the benefit of qualifying customers, we are potentially at risk for service problems experienced by these service providers. Customers who do not qualify for these enhanced service level commitments may nevertheless hold us responsible for these service issues and seek service credits, early termination rights or other remedies. Accordingly, service issues experienced by our service provider partners may harm our reputation as well as our business, financial condition or operating results.

Our products and services depend on the ability of our users to access the Internet, and certain of our products require significant bandwidth to work effectively. In addition, users who access our services and applications through mobile devices, such as smartphones and tablets, must have a high-speed connection, such as Wi-Fi, 3G, 4G or LTE, to use our services and applications. Currently, this access is provided by companies that have significant and increasing market power in the broadband and Internet access marketplace, including incumbent telephone companies, cable companies and mobile communications companies. Some of these providers offer products and services that directly compete with our own offerings, which give them a significant competitive advantage. Some of these broadband providers have stated that they may exempt their own customers from data-caps or offer other preferred treatment to their customers. Other providers have stated that they may take measures that could degrade, disrupt or increase the cost of user access to certain of our products by restricting or prohibiting the use of their infrastructure to support or facilitate our offerings, or by charging increased fees to us or our users to provide our offerings, while others, including some of the largest providers of broadband Internet access services, have committed to not engaging in such behavior. These providers have the ability generally to increase their rates, which may effectively increase the cost to our customers of using our cloud software solutions.

On January 4, 2018, the Federal Communications Commission, or FCC, released an order that largely repeals rules that the FCC had in place which prevented broadband internet access providers from degrading or otherwise disrupting a broad range of services provisioned over consumers' and enterprises' broadband internet access lines. The FCC's January 4, 2018, Order is not yet effective and there are efforts in Congress to prevent the Order from becoming effective.  Additionally, a number of state attorneys' general have filed an appeal of the FCC's January 4, 2018, Order and others may also appeal the Order. We cannot predict whether the FCC's January 4, 2018, Order will become effective or whether it will withstand appeal.

16

Many of the largest providers of broadband services, like cable companies and traditional telephone companies, have publicly stated that they will not degrade or disrupt their customers' use of applications and services, like ours.  If such providers were to degrade, impair or block our services, it would negatively impact our ability to provide services to our customers, likely result in lost revenue and profits, and we would incur legal fees in attempting to restore our customers' access to our services. Broadband internet access providers may also attempt to charge us or our customers additional fees to access services like ours that may result in the loss of customers and revenue, decreased profitability, or increased costs to our offerings that may make our services less competitive. We cannot predict the potential impact of the FCC's January 4, 2018, Order on us at this time.  

Our leased network and data centers are subject to various points of failure. Problems with cooling equipment, generators, uninterruptible power supply, routers, switches, or other equipment, whether or not within our control, could result in service interruptions for our customers as well as equipment damage. Because our services do not require geographic proximity of our data centers to our customers, our infrastructure is consolidated into a few large data center facilities. Any failure or downtime in one of our data center facilities could affect a significant percentage of our customers. The total destruction or severe impairment of any of our data center facilities could result in significant downtime of our services and the loss of customer data. Because our ability to attract and retain customers depends on our ability to provide customers with highly reliable service, even minor interruptions in our service could harm our reputation. Additionally, in connection with the expansion or consolidation of our existing data center facilities from time to time, there is an increased risk that service interruptions may occur as a result of server relocation or other unforeseen construction-related issues.

We have experienced interruptions in service in the past. While we have not experienced a material increase in customer attrition following these events, the harm to our reputation is difficult to assess. We have taken and continue to take steps to improve our infrastructure to prevent service interruptions, including upgrading our electrical and mechanical infrastructure. However, service interruptions continue to be a significant risk for us and could materially impact our business.

Any future service interruptions could:

• cause our customers to seek service credits, or damages for losses incurred;
• require us to replace existing equipment or add redundant facilities;
• affect our reputation as a reliable provider of communications services;
• cause existing customers to cancel or elect to not renew their contracts; or
• make it more difficult for us to attract new customers.

Any of these events could materially increase our expenses or reduce our revenue, which would have a material adverse effect on our operating results.

We may be required to transfer our servers to new data center facilities in the event that we are unable to renew our leases on acceptable terms, or at all, or the owners of the facilities decide to close their facilities, and we may incur significant costs and possible service interruption in connection with doing so. In addition, any financial difficulties, such as bankruptcy or foreclosure, faced by our third-party data center operators, or any of the service providers with which we or they contract, may have negative effects on our business, the nature and extent of which are difficult to predict. Additionally, if our data centers are unable to keep up with our increasing needs for capacity, our ability to grow our business could be materially and adversely impacted.

We rely on third-party vendors for IP phones and software endpoints required to utilize our service. We currently do not have long-term supply contracts with any of these vendors. As a result, most of these third-party vendors are not obligated to provide products or services to us for any specific period, in any specific quantities or at any specific price,

17

except as may be provided in a particular purchase order. The inability of these third-party vendors to deliver IP phones of acceptable quality and in a timely manner, particularly the sole source vendors, could adversely affect our operating results or cause them to fluctuate more than anticipated. Additionally, some of our products may require specialized or high-performance component parts that may not be available in quantities or in time frames that meet our requirements.

The functionality and popularity of our cloud software solutions depends, in part, on our ability to integrate our services with third-party applications and platforms, including enterprise resource planning, customer relations management, human capital management and other proprietary application suites. Third-party providers of applications and application programmable interfaces, or APIs, may change the features of their applications and platforms, restrict our access to their applications and platforms or alter the terms governing use of their applications and APIs and access to those applications and platforms in an adverse manner. Such changes could functionally limit or terminate our ability to use these third-party applications and platforms in conjunction with our services, which could negatively impact our offerings and harm our business. If we fail to integrate our software with new third-party back-end enterprise applications and platforms used by our customers, we may not be able to offer the functionality that our customers need, which would negatively impact our ability to generate revenue and adversely impact our business. 

Our services also allow our customers to use and manage our cloud software solutions on smartphones, tablets and other mobile devices. As new smart devices and operating systems are released, we may encounter difficulties supporting these devices and services, and we may need to devote significant resources to the creation, support, and maintenance of our mobile applications. In addition, if we experience difficulties in the future integrating our mobile applications into smartphones, tablets or other mobile devices or if problems arise with our relationships with providers of mobile operating systems, such as those of Apple Inc. or Google Inc., our future growth and our results of operations could suffer.

Our customers use our service to manage important aspects of their businesses, and any errors, defects, disruptions to our service or other performance problems with our service could hurt our reputation and may damage our customers' businesses. Our services and the systems infrastructure underlying our cloud communications platform incorporate software that is highly technical and complex. Our software has contained, and may now or in the future contain, undetected errors, bugs, or vulnerabilities. Some errors in our software code may only be discovered after the code has been released. Any errors, bugs, or vulnerabilities discovered in our code after release could result in damage to our reputation, loss of users, loss of revenue, or liability for damages, any of which could adversely affect our business and financial results. We implement bug fixes and upgrades as part of our regularly scheduled system maintenance, which may lead to system downtime. Even if we are able to implement the bug fixes and upgrades in a timely manner, any history of defects, or the loss, damage or inadvertent release of confidential customer data, could cause our reputation to be harmed, and customers may elect not to purchase or renew their agreements with us and subject us to service performance credits, warranty claims or increased insurance costs. The costs associated with any material defects or errors in our software or other performance problems may be substantial and could materially adversely affect our operating results.

Our operations depend on our ability to protect our network from interruption by damage from unauthorized entry, computer viruses or other events beyond our control. In the past, we may have been subject to denial or disruption of service, or DDOS, and we may be subject to DDOS attacks in the future. We cannot assure you that our backup systems, regular data backups, security protocols, DDOS mitigation and other procedures that are currently in place, or that may be in place in the future, will be adequate to prevent significant damage, system failure or data loss.

Critical to our provision of service is the storage, processing, and transmission of our customers' data, which may include confidential and sensitive information. Customers may use our services to store, process and transmit a wide variety of confidential and sensitive information such as credit card, bank account and other financial information, proprietary information, trade secrets or other data that may be protected by intellectual property laws, and personally

18

identifiable information. We may be targets of cyber threats and security breaches, given the nature of the information we store, process and transmit and the fact that we provide communications services to a broad range of businesses.

In addition, we use third-party vendors which in some cases have access to our data and our customers' data. Despite the implementation of security measures by us or our vendors, our computing devices, infrastructure or networks, or our vendors computing devices, infrastructure or networks may be vulnerable to hackers, computer viruses, worms, other malicious software programs or similar disruptive problems due to a security vulnerability in our or our vendors' infrastructure or network, or our vendors, customers, employees, business partners, consultants or other internet users who attempt to invade our or our vendors' public and private computers, tablets, mobile devices, software, data networks, or voice networks. If there is a security vulnerability in our or our vendors' infrastructure or networks that is successfully targeted, we could face increased costs, liability claims, reduced revenue, or harm to our reputation or competitive position.

Depending on the evolving nature of cyber threats, we may have to increase our investment in maintaining the security of our networks and data, and our profitability may be adversely impacted, or we may have to increase the price of our services which may make our offerings less competitive with other communications providers.

If an individual obtains unauthorized access to our network, or if our network is penetrated, our service could be disrupted and sensitive information could be lost, stolen or disclosed which could have a variety of negative impacts, including legal liability, investigations by law enforcement and regulatory agencies, and exposure to fines or penalties, any of which could harm our business reputation and have a material negative impact on our business. In addition, to the extent we market our services as compliant with particular laws governing data privacy and security, such as Health Insurance Portability and Accountability Act and foreign data protection laws, or provide representations or warranties as to such compliance in our customer contracts, a security breach that exposes protected information may make us susceptible to a number of contractual claims as well as claims related to our marketing.

Many governments have enacted laws requiring companies to notify individuals of data security incidents involving certain types of personal data. In addition, some of our customers contractually require notification of any data security compromise. Security compromises experienced by our competitors, by our customers or by us may lead to public disclosures, which may lead to widespread negative publicity. Any security compromise in our industry, whether actual or perceived, could harm our reputation, erode customer confidence in the effectiveness of our security measures, negatively impact our ability to attract new customers, cause existing customers to elect not to renew their subscriptions or subject us to third-party lawsuits, regulatory fines or other action or liability, which could materially and adversely affect our business and operating results.

In contracts with larger enterprises, we often agree to assume liability for security breaches in excess of the amount of committed revenue from the contract. In addition, there can be no assurance that any limitations of liability provisions in our contracts for a security breach would be enforceable or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim. We also cannot be sure that our existing cybersecurity insurance will continue to be available on acceptable terms or will be available in sufficient amounts to cover one or more large claims, or that the insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, financial condition and operating results.

We are subject to the data privacy and protection laws and regulations adopted by federal, state and foreign governmental agencies, including GDPR. Data privacy and protection is highly regulated and may become the subject of additional regulation in the future. For example, lawmakers and regulators worldwide are considering proposals that would require companies, like us, that encrypt users' data to ensure access to such data by law enforcement authorities. Privacy laws restrict our storage, use, processing, disclosure, transfer and protection of personal information, including credit card data, provided to us by our customers as well as data we collect from our customers and employees. We strive to comply with all applicable laws, regulations, policies and legal obligations relating to privacy and data protection. However, if we fail to comply, we may be subject to fines, penalties and lawsuits, and our reputation may suffer. We may also be required to make modifications to our data practices that could have an adverse impact on our business.

19

Governmental entities, class action lawyers and privacy advocates are increasingly examining companies' data collection, processing, use, storing, sharing, transferring and transmitting or personal data and data linkable to individuals. Self-regulatory codes of conduct, enforcement actions by regulatory agencies, and lawsuits by private parties could impose additional compliance costs on us, negatively impacting our profitability, as well as subject us to unknown potential liabilities. These evolving laws, rules and practices may also curtail our current business activities which may also result in slimmer profit margins and reduce new opportunities.

We are also subject to the privacy and data protection-related obligations in our contracts with our customers and other third parties. Any failure, or perceived failure, by us to comply with federal, state, or international laws, including laws and regulations regulating privacy, data or consumer protection, or to comply with our contractual obligations related to privacy, could result in proceedings or actions against us by governmental entities, contractual parties or others, which could result in significant liability to us as well as harm to our reputation. Additionally, third parties on which we rely enter into contracts to protect and safeguard our customers' data. Should such parties violate these agreements or suffer a breach, we could be subject to proceedings or actions against us by governmental entities, contractual parties or others, which could result in significant liability to us as well as harm to our reputation.

On July 12, 2016, the European Commission adopted the "Privacy Shield" which replaced the European Union-U.S. Safe Harbor Framework. Beginning on August 1, 2016, companies were able to self-certify for inclusion in the Privacy Shield program which allows for the transfer of personal data between the EU and the U.S. We are currently participating in Privacy Shield and we also rely on other methods recognized under relevant EU law to transfer personal data between the EU and the U.S. Additionally, on May 4, 2016, the EU formally adopted the General Data Protection Regulation, or GDPR, which became effective on May 25, 2018, and will replace the Data Protection Directive 95/46/EC. The GDPR imposes new obligations on all companies, including us, and substantially increases potential liability for all companies, including us, for failure to comply with data protection rules.

The regulatory landscape applicable to data transfers between the EU and other countries with similar data protection laws, and the U.S. remains unsettled.  There is ongoing litigation in the EU, as well as calls by certain political and governmental bodies in the EU to re-evaluate data transfers between the EU and the U.S., that could negatively impact the existing legally acceptable methods for transferring data between the EU and the U.S. on which we rely as do many other companies. Moreover, while we established alternative methods to transfer data between the EU and U.S. that addressed certain legal uncertainties that previously existed, some independent data regulators have adopted the position that other forms of compliance, including the methods we rely upon now as do many other companies, are also invalid.

Although GDPR has already gone into effect, there is still considerable uncertainty as to how to interpret and implement many of its provisions. It is particularly challenging for companies operating in the cloud services space, like us, to interpret and implement the GDPR.  If we fail to properly implement the GDPR for any reason, we may be subject to fines and penalties. The GDPR may also change our business operations in ways that we cannot currently predict that could increase our operating costs, decrease our profitability, or result in increased prices for our retail offerings that may make our services less competitive. We cannot evaluate our potential liability at this time.

A fundamental requirement for operating an Internet-based, worldwide cloud software solutions and electronically billing our customers is the secure transmission of confidential information and media over public networks. Although we have developed systems and processes that are designed to protect consumer information and prevent fraudulent credit card transactions and other security breaches, failure to mitigate such fraud or breaches may subject us to costly breach notification and other mitigation obligations, class action lawsuits, investigations, fines, forfeitures or penalties from governmental agencies that could adversely affect our operating results. The law relating to the liability of providers of online payment services is currently unsettled and states may enact their own rules with which we may not comply. We rely on third-party providers to process and guarantee payments made by our subscribers up to certain limits, and we may be unable to prevent our customers from fraudulently receiving goods and services. Our liability risk will increase if a larger fraction of transactions effected using our cloud-based services involve fraudulent or disputed credit card transactions.

20

We may also experience losses due to subscriber fraud and theft of service. Subscribers have, in the past, obtained access to our service without paying for monthly service and international toll calls by unlawfully using our authorization codes or by submitting fraudulent credit card information. If our existing anti-fraud procedures are not adequate or effective, consumer fraud and theft of service could have a material adverse effect on our business, financial condition and operating results.

Our cloud communications services rely on uninterrupted connection to the Internet through data centers and networks. Any interruption or disruption to our network, or the third parties on which we rely, could adversely impact our ability to provide service. Our network could be disrupted by circumstances outside of our control including natural disasters, acts of war, terrorist attacks or other malicious acts including, but not limited to, cyber-attacks. Our headquarters, global networks operations center and one of our third-party data center facilities are located in the San Francisco Bay Area, a region known for seismic activity. Should any of these events occur and interfere with our ability to operate our network even for a limited period of time, we could incur significant expenses, lose substantial amounts of revenue, suffer damage to our reputation, and lose customers. Such an event may also impede our customers' connections to our network, since these connections also occur over the Internet, and would be perceived by our customers as an interruption of our services, even though such interruption would be beyond our control. Any of these events could have a material adverse impact on our business.

There has been substantial litigation in the communications, cloud communication services, semiconductor, electronics, and related industries regarding intellectual property rights and, from time to time, third parties may claim that we, our customers, our licensees or parties indemnified by us are infringing, misappropriating or otherwise violating their intellectual property rights. Third parties may also claim that our employees have misappropriated or divulged their former employers' trade secrets or confidential information. Our broad range of current and former technology, including IP telephony systems, digital and analog circuits, software, and semiconductors, increases the likelihood that third parties may claim infringement by us of their intellectual property rights.

During our 2017 fiscal year, we were named as defendants in two lawsuits, each brought by a non-practicing entity and alleging infringement of a single patent. During our 2016 fiscal year, we were similarly named as defendants in two lawsuits in which we were alleged to have infringed patents. We were able to settle all four lawsuits relatively quickly, although we have in the past been involved in patent infringement lawsuits that spanned several years. Certain technology necessary for us to provide our services may, in fact, be patented by other parties either now or in the future. If such technology were held under patent by another person, we would have to negotiate a license for the use of that technology, which we may not be able to negotiate at a price that is acceptable or at all. The existence of such a patent, or our inability to negotiate a license for any such technology on acceptable terms, could force us to cease using such technology and offering products and services incorporating such technology.

If we are found to be infringing on the intellectual property rights of any third-party in lawsuits or proceedings that may be asserted against us, we could be subject to monetary liabilities for such infringement, which could be material. We could also be required to refrain from using, manufacturing or selling certain products or using certain processes, either of which could have a material adverse effect on our business and operating results. From time to time, we have received, and may continue to receive in the future, notices of claims of infringement, misappropriation or misuse of other parties' proprietary rights. There can be no assurance that we will prevail in these discussions and actions or that other actions alleging infringement by us of third-party patents will not be asserted or prosecuted against us. Furthermore, lawsuits like these may require significant time and expense to defend, may divert management's attention away from other aspects of our operations and, upon resolution, may have a material adverse effect on our business, results of operations, financial condition and cash flows.

We rely, in part, on trademark, copyright, and trade secret law to protect our intellectual property in the United States and abroad. We seek to protect our software, documentation, and other written materials under trade secret and copyright law, which afford only limited protection. We currently have several United States patent applications pending. We cannot predict whether such pending patent applications will result in issued patents, and if they do, whether such patents will effectively protect our intellectual property. The intellectual property rights we obtain may not be sufficient to provide us with a competitive advantage, and could be challenged, invalidated, infringed or misappropriated. We may not be able to protect our proprietary rights in the United States or internationally (where effective intellectual property protection may be unavailable or limited), and competitors may independently develop technologies that are similar or superior to our technology, duplicate our technology or design around any patent of ours.

21

We attempt to further protect our proprietary technology and content by requiring our employees and consultants to enter into confidentiality and assignment of inventions agreements and third parties to enter into nondisclosure agreements. These agreements may not effectively prevent unauthorized use or disclosure of our confidential information, intellectual property or technology and may not provide an adequate remedy in the event of unauthorized use or disclosure of our confidential information, intellectual property or technology.

Litigation may be necessary in the future to enforce our intellectual property rights, to determine the validity and scope of our proprietary rights or the rights of others, or to defend against claims of infringement or invalidity. Such litigation could result in substantial costs and diversion of management time and resources and could have a material adverse effect on our business, financial condition, and operating results. Any settlement or adverse determination in such litigation would also subject us to significant liability.

We also may be required to protect our proprietary technology and content in an increasing number of jurisdictions, a process that is expensive and may not be successful, or which we may not pursue in every location. In addition, effective intellectual property protection may not be available to us in every country, and the laws of some foreign countries may not be as protective of intellectual property rights as those in the United States. Additional uncertainty may result from changes to intellectual property legislation enacted in the United States and elsewhere, and from interpretations of intellectual property laws by applicable courts and agencies. Accordingly, despite our efforts, we may be unable to obtain and maintain the intellectual property rights necessary to provide us with a competitive advantage.

Companies in the cloud communications industry compete aggressively for top talent in all areas of business, but particularly sales and marketing, professional services and engineering, where employees with industry experience, technical knowledge and specialized skill sets are particularly valued. Demand can be expected to increase if cloud communications continues to gain a greater share of the global communications market. Some of our competitors may respond to these competitive pressures by increasing employee compensation, paying more on average than we pay for the same position. Any such disparity in compensation could make us less attractive to candidates as a potential employer, which in turn may make it more difficult for us to hire and retain qualified employees. Training an individual who lacks prior cloud communications experience to be successful in a sales or technical role can take months or even years.

When an employee of 8x8 leaves to work for a competitor, not only are we impacted by the loss of the individual resource, but we also face the risk that the individual will share our trade secrets with the competitor in violation of their contractual and legal obligations to us. Our competitors have in the past and may in the future target their hiring efforts on a particular department, and if we lose a group of employees to a competitor over a short time period, our day-to-day operations may be impaired. While we may have remedies available to us through litigation, they would likely take significant time and expense and divert management attention from other areas of the business.

If we increase employee compensation (beyond levels that reflect customary performance-based and/or cost-of-living adjustments) in response to competitive pressures, we may sustain greater operating losses than we predicted in the near term, and we may not achieve profitability within the timeframe we had expected, or at all.

An important component of our growth strategy involves the further expansion of our operations and customer base internationally. We have formed several subsidiaries outside the United States, including a Romanian subsidiary that contributes significantly to our research and development efforts. We have also acquired two UK-based companies. The risks and challenges associated with sales and other operations outside the United States are different in some ways from those associated with our operations in the United States, and we have a limited history addressing those risks and meeting those challenges. Our current international operations and future initiatives will involve a variety of risks, including:

• localization of our services, including translation into foreign languages and associated expenses;
• regulation of our services as traditional telecommunications services, requiring us to obtain authorizations or licenses to operate in foreign jurisdictions, or alternatively preventing us from selling our full suite of services, or any services at all, in such jurisdictions;
• changes in a specific country or region's regulatory requirements, taxes, trade laws, or political or economic conditions;
• more stringent regulations relating to data security and the unauthorized use of, access to, and transfer of, commercial and personal information, particularly in the EU;
• differing labor regulations, especially in the EU and Latin America, where labor laws are generally more advantageous to employees as compared to the United States, including deemed hourly wage and overtime regulations in these locations;
• challenges inherent in efficiently managing an increased number of employees over large geographic distances, including the need to implement appropriate systems, policies, benefits and compliance programs;
• difficulties in managing a business in new markets with diverse cultures, languages, customs, legal systems, alternative dispute systems and regulatory systems;
• increased travel, real estate, infrastructure and legal compliance costs associated with international operations;
• different pricing environments, longer sales cycles, longer accounts receivable payment cycles and other collection difficulties;
• currency exchange rate fluctuations and the resulting effect on our revenue and expenses, and the cost and risk of entering into hedging transactions if we chose to do so in the future;
• limitations on our ability to reinvest earnings from operations in one country to fund the capital needs of our operations in other countries;
• laws and business practices favoring local competitors or general preferences for local vendors;
• limited or insufficient intellectual property protection;
• political instability or terrorist activities;

22

• exposure to liabilities under anti-corruption and anti-money laundering laws, including the U.S. Foreign Corrupt Practices Act, the UK Bribery Act 2010 and similar laws and regulations in other jurisdictions; and
• adverse tax burdens and foreign exchange controls that could make it difficult to repatriate earnings and cash.

We have limited experience in operating our business internationally, which increases the risk that any potential future expansion efforts that we may undertake will not be successful. We expect to invest substantial time and resources to expand our international operations. If we are unable to do this successfully and in a timely manner, our business and operating results could be materially adversely affected.

In the last four years we have acquired several businesses.   If appropriate opportunities present themselves, we may make additional acquisitions or investments or enter into joint ventures or strategic alliances with other companies. Risks commonly encountered in such transactions include:

• the difficulty of assimilating the operations and personnel of the combined companies:
• the risk that we may not be able to integrate the acquired services or technologies with our current services, products, and technologies;
• the potential disruption of our ongoing business;
• the diversion of management attention from our existing business;
• the inability of management to maximize our financial and strategic position through the successful integration of the acquired businesses;
• difficulty in maintaining controls, procedures, and policies;
• the impairment of relationships with employees, suppliers, and customers as a result of any integration;
• the loss of an acquired base of customers and accompanying revenue;
• the loss of an acquired base of customers and accompanying revenue while trying to transition the customer from the legacy systems to 8x8's technology due to mismatch of the features, usability, packaging, or pricing at the renewal times;
• the loss of an acquired base of customers and accompanying revenue due to failure and/or lack of maintenance/support for the legacy services and/or equipment/software/services being end of life;
• additional regulatory compliance obligations and costs associated with the acquired operations;
• litigation arising from or relating to the transaction;
• the assumption of leased facilities, other long-term commitments or liabilities that could have a material adverse impact on our profitability and cash flow; and
• the dilution to our existing stockholders from the issuance of additional shares of common stock or reduction of earnings per outstanding share in connection with an acquisition that fails to increase the value of our company.

As a result of these potential problems and risks, among others, businesses that we may acquire or invest in may not produce the revenue, earnings, or business synergies that we anticipate. For example, during our 2018 fiscal year, we discontinued marketing ContactNow, which we had acquired through our purchase of DXI Limited in 2015, as a stand-alone product. In addition, there can be no assurance that any potential transaction will be successfully completed or that, if completed, the acquired business or investment will generate sufficient revenue to offset the associated costs or other potential harmful effects on our business.

On June 23, 2016, voters in the United Kingdom approved an advisory referendum to withdraw from the EU.  The political uncertainty that it has raised extends to regulatory uncertainty associated with the proposed exit from the EU. Since the vote to withdraw from the EU, negotiations and arrangements between the United Kingdom, the EU and other countries outside of the EU have been, and will continue to be, complex and time consuming. The potential withdrawal could adversely impact our UK subsidiary, Voicenet Solutions Ltd., and add operational complexities that did not previously exist. Currently, the most immediate impact may be to the relevant regulatory regimes under which Voicenet operates, including the offering of communications services, as well as data privacy. The timing of the proposed exit was recently agreed upon and is now scheduled for May 2019, with a transition period running through December 2020. However, the impact on regulatory regimes remains uncertain. At this time, we cannot predict the impact that an actual exit from the EU will have on Voicenet nor the potential collateral impact it may have on our operations elsewhere including the U.S.

23

Our future operating results may vary substantially from period to period and may be difficult to predict.

Our historical operating results have fluctuated significantly and will likely continue to fluctuate in the future, and a decline in our operating results could cause our stock price to fall. On an annual and a quarterly basis, there are a number of factors that may affect our operating results, some of which are outside our control. These include, but are not limited to:

• changes in market demand;
• the timing of customer subscriptions for our cloud software solutions;
• customer cancellations;
• changes in the competitive dynamics of our market, including consolidation among competitors or customers;
• lengthy sales cycles and/or regulatory approval cycles;
• new product introductions by us or our competitors;
• extent of market acceptance of new or existing services and features;
• the mix of our customer base and sales channels;
• the mix of services sold;
• the number of additional customers, on a net basis;
• the amount and timing of costs associated with recruiting, training and integrating new employees;
• unforeseen costs and expenses related to the expansion of our business, operations and infrastructure;
• continued compliance with industry standards and regulatory requirements;
• material security breaches or service interruptions due to cyberattacks or infrastructure failures or unavailability;
• introduction and adoption of our cloud software solutions in markets outside of the United States;
• changes in the recognition pattern of revenues and operating expenses as a result of new regulations, accounting principles and their interpretations, such as Financial Accounting Standards Board's Accounting Standards Update ("ASU") No. 2014-09, Revenue from Contracts with Customers (Topic 606); and
• general economic conditions.

Due to these and other factors, we believe that period-to-period comparisons of our results of operations are not meaningful and should not be relied upon as indicators of our future performance. It is possible that in some future periods our results of operations may be below the expectations of public market analysts and investors. If any of these were to occur, the price of our common stock would likely decline significantly.

In addition, changes in regulatory and accounting principles, and our interpretation of these and judgments used in applying them to our facts and circumstances, could have a material effect on our results of operations and financial condition. We also need to revise our business processes, systems and controls which requires significant management attention and may negatively affect our financial reporting obligations.

In addition to reliability and quality standards, the market acceptance of telephony over broadband IP networks is dependent upon the adoption of industry standards so that products from multiple manufacturers are able to communicate with each other. Our cloud-based communications and collaboration services rely heavily on communication standards such as SIP, MGCP and network standards such as TCP/IP and UDP to interoperate with other vendors' equipment. There is currently a lack of agreement among industry leaders about which standard should be used for a particular application, and about the definition of the standards themselves. These standards, as well as audio and video compression standards, continue to evolve. We also must comply with certain rules and regulations of the FCC regarding electromagnetic radiation and safety standards established by Underwriters Laboratories, as well as similar regulations and standards applicable in other countries. Standards are frequently modified or replaced. As standards evolve, we may be required to modify our existing products or develop and support new versions of our products. We must comply with certain federal, state and local requirements regarding how we interact with our customers, including marketing practices, consumer protection, privacy, and billing issues, the provision of 9-1-1 or other international emergency services, including location data and the quality of service we provide to our customers. The failure of our products and services to comply, or delays in compliance, with various existing and evolving standards could delay or interrupt

24

volume production of our communications and collaboration services, subject us to fines or other imposed penalties, or harm the perception and adoption rates of our service, any of which would have a material adverse effect on our business, financial condition or operating results.

For example:

• Regulation of our services as telecommunications services may require us to obtain authorizations or licenses to operate in foreign jurisdictions and comply with legal requirements applicable to traditional telephony providers. Regulators around the world, including those in the European Union generally do not distinguish between our cloud-based communications services and traditional telephony services. By entering additional international markets we may subject ourselves to significant regulation from foreign telecommunications authorities, including obligations to obtain telecommunications licenses and authorizations, complying with consumer protection laws and cooperating with local law enforcement authorities. This regulation impacts our ability to differentiate ourselves from incumbent service providers and imposes substantial compliance costs on us. Regulation restricts our ability to compete and, in some jurisdictions, it may restrict how we are able to expand our service offerings. Moreover, the regulatory environment is constantly evolving and changes to the applicable regulations may have an adverse effect upon our business by imposing additional compliance costs, modifying our technology and operations and in general affecting our profitability.
• Reform of federal and state Universal Service Fund programs and payment of regulatory and other fees in international markets, could increase the cost of our service to our customers diminishing or eliminating our pricing advantage. The FCC and a number of states are considering reform or other modifications to Universal Service Fund programs. Furthermore, the FCC has ruled that states can require us to contribute to state Universal Service Fund programs. A number of states already require us to contribute, while others are actively considering extending their programs to include the services we provide. At the same time, foreign regulatory authorities may impose regulatory fees or other contributions on our services. Should the FCC, states or foreign regulators adopt new contribution mechanisms or otherwise modify contribution obligations that increase our contribution burden, we will either need to raise the amount we currently collect from our customers to cover these obligations or absorb the costs, which would reduce our profit margins. We currently pass-through Universal Service Fund contributions and certain other fees to our customers, which may result in our services becoming less competitive as compared to those provided by others.
• We may become subject to state regulation for certain service offerings. Certain states take the position that offerings by VoIP providers, like us, are intrastate and therefore subject to state regulation. These states argue that if the beginning and end points of communications are known, and if some of these communications occur entirely within the boundaries of a state, the state can regulate that offering. We believe that the FCC has preempted states from regulating VoIP services like ours in the same manner as providers of traditional telecommunications services. We cannot predict how this issue will be resolved or its impact on our business at this time.
• The FCC adopted rules concerning call completion rates to rural areas of the United States. It is possible that we, like other providers in the communications marketplace, may be subject to fines or other enforcement actions should the FCC determine that our call completion rates to rural areas are, or have been, unacceptable.
• The FCC and foreign regulators may require providers like us to comply with regulations related to how we present bills to customers. The adoption of such obligations may require us to revise our bills and may increase our costs of providing service which could either result in price increases or reduce our profitability.
• There may be risk associated with our ability to comply with U.S. and foreign rules concerning disabilities access requirements and the FCC and foreign regulators may expand disabilities access requirements to additional services we offer. We cannot predict whether we will be subject to additional accessibility requirements or whether any of our service offerings that are not currently subject to disabilities access requirements will be subject to such obligations. It is possible that we, like other providers in the communications marketplace, may be subject to fines or other enforcement actions if we are found not to be in compliance with the FCC's and foreign accessibility requirements.
• There may be risks associated with our ability to comply with requirements of the Telecommunications Relay Service and similar foreign statutes. The FCC requires providers of interconnected VoIP services to comply with certain regulations pertaining to people with disabilities and to contribute to the Telecommunications Relay Services fund. We are also required to offer 7-1-1 abbreviated dialing for access to relay services. At the same time, several foreign regulators also mandate accessibility requirements for people with disabilities. It is possible that we, like other providers in the communications marketplace, may be subject to fines or other enforcement actions if we are found not to be in compliance with these requirements, including the FCC's 7-1-1 abbreviated dialing obligations.

25

• There may be risks associated with our ability to comply with the requirements of U.S. and foreign law enforcement agencies. The FCC requires all interconnected VoIP providers to comply with the Communications Assistance for Law Enforcement Act, or CALEA. Similarly, foreign regulatory frameworks require VoIP providers to comply with local assistance to law enforcement laws and cooperation with local authorities in conducting wiretaps, pentraps and other surveillance activities. The FCC and other regulators may allow VoIP providers to comply with CALEA and similar statutes through the use of a service provided by a trusted third-party with the ability to extract call content and call-identifying information from a VoIP provider's network. Regardless of our reliance on a third party for compliance, it is possible that we, like other providers in the communications marketplace, may be subject to fines or other enforcement actions if we are found not to be in compliance with our obligations under CALEA or other similar assistance with law enforcement statutes.
• U.S. and foreign regulations may require us to deploy an E-911 or access to emergency service that automatically determines the location of our customers. In 2007, the FCC released a Notice of Proposed Rulemaking, in which it tentatively concluded that all interconnected VoIP providers that allow customers to use their service in more than one location (nomadic VoIP service providers, such as us), must utilize an automatic location technology that meets the same accuracy standards which apply to providers of commercial mobile radio services (mobile phone service providers). Since then, the FCC has been conducting proceedings and inquiries concerning the implementation of such a rule, including possible changes to the manner providers provision E-911 services on mobile applications. At the same time, foreign regulatory authorities, have conducted similar proceedings mandating VoIP providers in the applicable jurisdiction to provide caller location data when completing calls to the local emergency service numbers. The outcome of these proceedings cannot be determined at this time and we may or may not be able to comply with any such obligations that may be adopted. At present, we currently have no means to automatically identify the physical location of one of our customers on the Internet. We cannot guarantee that emergency calling service consistent with the FCC's order and other similar foreign orders will be available to all of our customers, especially those accessing our services from outside of the United States. Compliance with these obligations could result in service price increases and could have a material adverse effect on our business, financial condition or operating results.
• The FCC adopted orders reforming the system of payments between regulated carriers that we partner with to interface with the public switch telephone network. The FCC reformed the system under which regulated providers of telecommunications services compensate each other for various types of traffic, including VoIP traffic that terminates on the PSTN and applied new call signaling requirements to VoIP providers and other service providers. The FCC's new rules require, among other things, interconnected VoIP providers, like us, that originate interstate or intrastate traffic destined for the PSTN, to transmit the telephone number associated with the calling party to the next provider in the call path. Intermediate providers must pass calling party number or charge number signaling information they receive from other providers unaltered, to subsequent providers in the call path. While we believe we are in compliance with this rule, to the extent that we pass traffic that does not have appropriate calling party number or charge number information, we could be subject to fines, cease and desist orders, or other penalties. The FCC's Order reforming payments between carriers for various types of traffic may result in increasing the payments we make to underlying carriers to access the PSTN, which may result in us increasing the retail price of our service, potentially making our offering less competitive with traditional providers of telecommunications services, or may reduce our profitability.

Both our emergency calling service and our E-911 calling service are different, in significant respects, from the emergency calling services offered by traditional wireline telephone companies in the United States and abroad. In each case, the differences may cause significant delays, or even failures, in callers' receipt of the emergency assistance they need.

The FCC may determine that our nomadic emergency calling service does not satisfy the requirements of its VoIP E-911 order because, in some instances, our nomadic emergency calling service requires that we route an emergency call to a national emergency call center instead of connecting our customers directly to a local public-safety answering point through a dedicated connection and through the appropriate selective router. Similarly, foreign telecommunications regulators may determine that our nomadic emergency calling service does not meet applicable local emergency dialing and location requirements.

Delays our customers may encounter when making emergency services calls and any inability of the answering point to automatically recognize the caller's location or telephone number can result in life threatening consequences. Customers may, in the future, attempt to hold us responsible for any loss, damage, personal injury or death suffered as a result of any failure of our E-911 services and other emergency dialing services.

26

The New and Emerging Technologies 911 Improvement Act of 2008 provides public safety entities, interconnected VoIP providers and others involved in handling 911 calls the same liability protections when handling 911 calls from interconnected VoIP users as from mobile or wired telephone service users. The applicability of the liability protections to our national call center service is unclear at the present time.

The legal and contractual environment surrounding calling consumers and wireless phone numbers is complex and evolving. In the United States, two federal agencies, the Federal Trade Commission ("FTC") and the FCC, and various states have enacted laws including, at the federal level, the Telephone Consumer Protection Act of 1991, or TCPA, that restrict the placing of certain telephone calls and texts to residential and wireless telephone subscribers by means of automatic telephone dialing systems, prerecorded or artificial voice messages and fax machines. Internationally, we are also subject to similar laws imposing limitations on marketing calls to wireline and wireless numbers and compliance with do not call rules. These laws require companies to institute processes and safeguards to comply with these restrictions. Some of these laws can be enforced by the FTC, FCC, State Attorneys General, foreign regulators or private party litigants. In these types of actions, the plaintiff may seek damages, statutory penalties, costs and/or attorneys' fees.

It is possible that the FTC, FCC, foreign regulators, private litigants or others may attempt to hold our customers, or us as a software provider, responsible for alleged violations of these laws. In the event that litigation is brought, or fines are assessed, against us, we may not successfully enforce or collect upon any contractual indemnities we may have from our customers. Additionally, any changes to these laws or their interpretation that further restrict calling consumers, any adverse publicity regarding the alleged or actual failure by companies, including our customers and competitors, to comply with such laws, or any governmental or private enforcement actions related thereto, could result in the reduced use of our solution by our clients and potential clients, which could harm our business, financial condition, results of operations and cash flows.

We rely on IT systems to manage numerous functions of our internal operations, some of which were internally developed IT systems that were not fully integrated among themselves, or with our third-party ERP system. These IT systems require specialized knowledge for which we have to train new personnel, and if we were to experience an unusual increase in attrition of our IT personnel, we may not be adequately equipped to respond to an IT system failure. These IT systems were developed at a time when we provided services primarily to SMB customers and they may not be able to accommodate the requirements of larger enterprises as effectively as more modern and flexible solutions. Continued reliance on these systems may harm us competitively and impede our efforts to sell to larger enterprises.

Although we are in the process of upgrading a number of our IT systems, including our ERP software, our quote-to-cash software and our customer service and support software, we face risks relating to these transitions. For example, we may incur greater costs than we anticipate to train our personnel on the new systems; we may experience more errors in our records during the transition; and we may be delayed in meeting our various reporting obligations. To the extent any of these risks or events impact our customer service, we may experience an increase in customer attrition, which could have a material adverse impact on our results of operations.

Our technology platform incorporates software licensed from third parties, including some software, known as open source software, which we use without charge. Although we monitor our use of open source software, the terms of many open source licenses to which we are subject have not been interpreted by U.S. or foreign courts, and there is a risk that such licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to provide our platform to our customers. In the future, we could be required to seek licenses from third parties in order to continue offering our platform, which licenses may not be available on terms that are acceptable to us, or at all. Alternatively, we may need to re-engineer our platform or discontinue use of portions of the functionality provided by our platform. In addition, the terms of open source software licenses may require us to provide software that we develop using such software to others on unfavorable license terms. Our inability to use third-party software could result in disruptions to our business, or delays in the development of future offerings or enhancements of existing offerings, which could impair our business.

27

Decreasing telecommunications rates and increasing regulatory charges may diminish or eliminate our competitive pricing advantage versus legacy providers.

Decreasing telecommunications rates may diminish or eliminate the competitive pricing advantage of our services, while increased regulation and the imposition of additional regulatory funding obligations at the federal, state, local and foreign level could require us to either increase the retail price for our services, thus making us less competitive, or absorb such costs, thus decreasing our profit margins. International and domestic telecommunications rates have decreased significantly over the last few years in most of the markets in which we operate, and we anticipate these rates will continue to decline in all of the markets in which we do business or expect to do business. Users who select our services to take advantage of the current pricing differential between traditional telecommunications rates and our rates may switch to traditional telecommunications carriers if such pricing differentials diminish or disappear, and we will be unable to use such pricing differentials to attract new customers in the future. Continued rate decreases would require us to lower our rates to remain competitive in the United States and abroad and would reduce or possibly eliminate any gross profit from our services. In addition, we may lose subscribers for our services.

Certain provisions in our charter documents and Delaware law could discourage takeover attempts and lead to management entrenchment.

Our restated certificate of incorporation and amended and restated bylaws contain provisions that could have the effect of delaying or preventing changes in control or changes in our management without the consent of our board of directors, including, among other things:

• no cumulative voting in the election of directors, which limits the ability of minority stockholders to elect director candidates;
• the ability of our board of directors to issue shares of preferred stock and to determine the price and other terms of those shares, including preferences and voting rights, without stockholder approval, which could be used to significantly dilute the ownership of a hostile acquirer;
• the exclusive right of our board of directors to elect a director to fill a vacancy created by the expansion of our board of directors or the resignation, death or removal of a director, which prevents stockholders from being able to fill vacancies on our board of directors;
• a prohibition on stockholder action by written consent, which forces stockholder action to be taken at an annual or special meeting of our stockholders;
• the requirement that a special meeting of stockholders may be called only by a majority vote of our Board of Directors or by stockholders holdings shares of our common stock representing in the aggregate a majority of votes then outstanding, which could delay the ability of our stockholders to force consideration of a proposal or to take action, including the removal of directors;
• the ability of our board of directors, by majority vote, to amend our amended and restated bylaws, which may allow our board of directors to take additional actions to prevent a hostile acquisition and inhibit the ability of an acquirer to amend our amended and restated bylaws to facilitate a hostile acquisition; and
• advance notice procedures with which stockholders must comply to nominate candidates to our board of directors or to propose matters to be acted upon at a stockholders' meeting, which may discourage or deter a potential acquirer from conducting a solicitation of proxies to elect the acquirer's own slate of directors or otherwise attempting to obtain control of us.

We are also subject to certain anti-takeover provisions under the General Corporation Law of the State of Delaware, or the DGCL. Under Section 203 of the DGCL, a corporation may not, in general, engage in a business combination with any holder of 15% or more of its capital stock unless the holder has held the stock for three years or (i) our board of directors approves the transaction prior to the stockholder acquiring the 15% ownership position, (ii) upon consummation of the transaction that resulted in the stockholder acquiring the 15% ownership position, the stockholder owns at least 85% of the outstanding voting stock (excluding shares owned by directors or officers and shares owned by certain employee stock plans) or (iii) the transaction is approved by the board of directors and by the stockholders at an annual or special meeting by a vote of 66 2/3% of the outstanding voting stock (excluding shares held or controlled by the interested stockholder). These provisions in our restated certificate of incorporation and amended and restated bylaws and under Delaware law could discourage potential takeover attempts.

28

ITEM 1B. UNRESOLVED STAFF COMMENTS

None.

Our principal operations are located in San Jose, California, in two facilities that consist of approximately 140,831 square feet of combined leased office space.  The leases expire in 2019 and 2020, respectively. In January 2018, we entered into a lease for a new office building in San Jose. We intend to move our employees and operations from our two existing offices to the new office building in phases, beginning in the fourth quarter of fiscal year 2019.

Outside the United States our operations are conducted primarily in leased office space located in the United Kingdom (primarily used for sales and support in Europe) and Romania (primarily used for research and development).

In addition, we lease space from third-party datacenter hosting facilities under co-location agreements in the United States and in a number of countries across the globe, including South America, Europe, Asia, and the South Pacific.

We believe that we will be able to obtain additional space at other locations at commercially reasonable terms to support our continuing expansion. For additional information regarding our obligations under leases, see Note 5 to the consolidated financial statements contained in Part II, Item 8 of this Annual Report.

From time to time, we become involved in various legal claims and litigation that arise in the normal course of our operations. While the results of such claims and litigation cannot be predicted with certainty, we are not currently aware of any such matters that we believe would have a material adverse effect on our financial position, results of operations or cash flows.

As of May 24, 2018, the Company was not a party in any material litigation matters.

Not applicable.

Since December 8, 2017, our common stock is traded under the symbol "EGHT" and is listed on the New York Stock Exchange, Inc. (NYSE). Previous to December 8, 2017, our common stock traded under the symbol "EGHT" and was listed on the Nasdaq Global Select Market of the Nasdaq Stock Market national securities exchange.

We have never paid cash dividends on our common stock and have no plans to do so in the foreseeable future. As of May 23, 2018, there were 214 holders of record of our common stock.

29

The following table sets forth the range of high and low close prices for each period indicated:

See Item 12 of Part III of this Annual Report regarding information about securities authorized for issuance under our equity compensation plans.

The graph below shows the cumulative total stockholder return over a five year period assuming the investment of $100 on March 31, 2013 in each of 8x8's common stock, the NASDAQ Composite Index and the NASDAQ Telecommunications Index. The graph is furnished, not filed, and the historical return cannot be indicative of future performance.

30

Issuer Purchases of Equity Securities

There was no activity under the Repurchase Plan for the three months ended March 31, 2018. The dollar value of shares that may yet to be purchased under the Repurchase plan is approximately $7.1 million.

The following table sets forth selected consolidated financial data of 8x8 Inc. for each year in the five year period ended March 31, 2018.  The following selected consolidated financial data is qualified by reference to and should be read in conjunction with "Management's Discussion and Analysis of Financial Condition and Results of Operations" and with the consolidated financial statements, related notes thereto and other financial information included elsewhere in this Annual Report on Form 10-K.

31

ITEM 7. MANAGEMENT'S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS

We are a leading provider of global cloud communications and customer engagement solutions to over a million business users worldwide. Our suite of products integrates cloud communications, conferencing, collaboration and contact center solutions so today's organization can deliver exceptional employee and customer experiences. Our technology provides one integrated platform for employees and customers engagement solutions, as well as a real-time data analytics platform for constant learning and improvement.

Our total service revenue grew 19% year-over-year to $280.4 million. We continued to show an increase in our average monthly service revenue per customer (ARPU), which grew to $450, compared with $412 in fiscal 2017, as we are selling more to mid-market and enterprise customers. Service revenue from mid-market and enterprise customers represented 58% of total service revenue and grew 29% over the prior year. We also increased the number of deals where customers purchase our integrated communications and contact center solution, which we have referred to as combination deals.

In order to position ourselves for our next phase of growth, we pursued several strategic initiatives.

First, we split our internal sales operations into two separate business units-Small Business and eCommerce, aimed at businesses with 1 to 99 employees, and Mid-market and Enterprise, aimed at businesses with 100 or more employees. By establishing two separate business units for sales purposes, this will allow us to optimize our sales and marketing strategies around the specific needs of each customer segment.

Second, we expanded the scope of our channel programs. The 8x8 channel strategy has been instrumental in winning large and mid-market enterprise customers, and we believe the channel will play a key role in further scaling our business. In fiscal 2018, we expanded and enhanced our global partner program, including through the training, enablement and certification of an increasing number of partners, and in August 2017, we launched a formal channel enablement program.

Third, we continued the advancement of our technology and product development to build a comprehensive and integrated platform of solutions. We announced the upcoming launch of the X Series: a seamless integration of our contact center, meeting, and video conferencing into a unified suite. The X series will encompass a suite of products ranging from X1 through X8. It is designed to be a single system of enterprise engagement that will unlock rich data and insights that are not available to businesses that rely on multiple platforms and multiple providers for their communications, collaborations and contact center needs. ​ Artificial Intelligence and Machine Learning will be foundational elements to our X Series solutions, and our commitment to these technologies led to investments and key hires in fiscal 2018 as well as the acquisition of MarianaIQ Inc. in April 2018.

Fourth, we continued to expand our global footprint. International markets outside of the US and Canada represented 10% of total revenue in fiscal 2018. We announced our expansion into France and we continued to build sales capacity in Australia. We also enhanced our global carrier network and have customers accessing our services from over 150 countries around the world. Lastly, we grew headcount to over 1,200 employees worldwide. We hired talent across the organization with a primary focus on sales, marketing and product innovation functions in the United States and European offices.

As we continue to focus on our market opportunity, we intend to further increase our investments in engineering, marketing, sales, deployment, and customer support activities. We expect our expenses to grow materially in all of these categories, and we are targeting a year-over-year growth rate for service revenue, excluding revenue from DXI, of approximately 25% in our fourth fiscal quarter of 2019. In achieving these objectives, we face many risks, including those described under "RISK FACTORS."

We periodically review certain key business metrics, within the context of our articulated performance goals, in order to evaluate the effectiveness of our operational strategies, allocate resources and maximize the financial performance of our business. The selected operating statistics include the following:

32

____________

The following discussion should be read in conjunction with our Consolidated Financial Statements and related notes included elsewhere in this Annual Report.