Item 9A. Controls and Procedures
ITEM 9A. CONTROLS AND PROCEDURES.
As of February 28, 2026, the Company carried out an evaluation, under the supervision and with the participation of the Company’s management, including the Company’s Chief Executive Officer and its Chief Financial Officer, of the effectiveness of the design and operation of the Company’s disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the U.S. Exchange Act. Based on that evaluation, the Chief Executive Officer and the Chief Financial Officer have concluded that, as of such date, the Company’s disclosure controls and procedures were effective to give reasonable assurance that the information required to be disclosed by the Company in reports that it files or submits under the U.S. Exchange Act is (i) recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms, and (ii) accumulated and communicated to management, including its principal executive and principal financial officers, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.
Management’s Report on Internal Control Over Financial Reporting
Management of the Company is responsible for establishing and maintaining adequate internal control over financial reporting. Internal control over financial reporting is defined in Rule 13a-15(f) and 15d-15(f) under the U.S. Exchange Act as a process designed by, or under the supervision of, the Company’s principal executive and principal financial officers and effected by the Board, management and other personnel to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with U.S. GAAP and includes those policies and procedures that:
• pertain to the maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of the assets of the Company;
• provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with U.S. GAAP, and that receipts and expenditures of the Company are being made only in accordance with authorizations of management and directors of the Company; and
• provide reasonable assurance regarding the prevention or timely detection of unauthorized acquisitions, use or dispositions of the Company’s assets that could have a material effect on the Company’s financial statements.
Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Projections of any evaluation of effectiveness to future periods are subject to the risks that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.
Management assessed the effectiveness of the Company’s internal control over financial reporting as of February 28, 2026. In making this assessment, management used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) in its Internal Control-Integrated Framework (2013). Based on this assessment, management concluded that, as of February 28, 2026, the Company’s internal control over financial reporting was effective.
The effectiveness of the Company’s internal control over financial reporting as of February 28, 2026 has been audited by PricewaterhouseCoopers LLP, an independent registered public accounting firm, as stated in their report which appears herein.
Changes in Internal Control Over Financial Reporting
During the three months ended February 28, 2026, no changes were made to the Company’s internal control over financial reporting that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.
ITEM 9B. OTHER INFORMATION
Rule 10b5-1 and Non-Rule 10b5-1 Trading Arrangements
During the three months ended February 28, 2026, none of the officers or directors of the Company adopted or terminated trading arrangements for the purchase or sale of the Company’s common shares.
ITEM 9C. DISCLOSURE REGARDING FOREIGN JURISDICTIONS THAT PREVENT INSPECTIONS
Not applicable.
108
PART III
ITEM 10. DIRECTORS, EXECUTIVE OFFICERS AND CORPORATE GOVERNANCE
A list of the Company’s executive officers appears in Part I, Item 1 to this Annual Report on Form 10-K.
The information required by this item will be included in the Company’s 2026 Proxy Statement, which will be filed with the SEC within 120 days after the end of the Company’s fiscal year ended February 28, 2026, and is incorporated herein by reference.
Audit and Risk Management Committee
The Audit and Risk Management Committee’s purpose is to provide assistance to the Board in fulfilling its legal and fiduciary obligations with respect to matters involving the accounting, auditing, financial reporting, internal control, and legal compliance and risk management functions of the Company and its subsidiaries. It is the objective of the Audit and Risk Management Committee to maintain free and open means of communications among the Board, the independent auditors and the financial and senior management of the Company. The full text of the Audit and Risk Management Committee’s Charter can be viewed on the Company’s website at https://investors.blackberry.com/governance-documents.
Applicable securities laws require that, subject to certain exceptions, all members of the Audit and Risk Management Committee be “independent” under Sections 1.4 and 1.5 of National Instrument 52-110 of the Canadian Securities Administrators - Audit Committees and the rules and regulations of the NYSE, and “financially literate”, meaning that the committee member has the ability to read and understand a set of financial statements that present a breadth and level of complexity of accounting issues that are generally comparable to those issues reasonably expected to be raised by the Company’s financial statements. Ms. Disbrow (Chair), Ms. O’Neill and Mr. Wouters are the members of the Audit and Risk Management Committee, and each is an independent director of the Company and financially literate, based on his or her education and experience as described below. The Audit and Risk Management Committee has also developed, in conjunction with the Company’s Chief Financial Officer and other accounting personnel, an orientation and continuing education program that will provide new members of the Audit and Risk Management Committee from time to time with additional information and understanding about the accounting and financial presentation issues underlying the Company’s financial statements.
The members of the Audit and Risk Management Committee bring significant skill and experience to their responsibilities including professional experience in accounting, business, management and governance, and finance. The specific education and experience of each member that is relevant to the performance of his or her responsibilities as such member of the Audit and Risk Management Committee are set out below:
Lisa Disbrow (Chair) – Ms. Disbrow has a BA from the University of Virginia, an MA from The George Washington University in International Relations, and an MS from The National War College in National Strategy. Ms. Disbrow is Chair of CACI International Inc., a director of Mercury Systems, and a director and past Chair of the NobleReach Foundation. In addition, she is a Senior Fellow at the Johns Hopkins University Applied Physics Lab and the Chair of the National Defense Industrial Association. Previously, she served over 30 years in senior civilian and military positions in the U.S. government, and was the Senate-confirmed Under Secretary of the United States Air Force. She also served as Acting Secretary of the U.S. Air Force and was the Senate-confirmed chief financial officer of the Air Force, as the Assistant Secretary for Financial Management and Comptroller.
Lori O’Neill – Ms. O’Neill has a BComm (Honours) from Carleton University and is a holder of the CPA, CA designation, the U.S. CPA designation and the ICD.D designation from the Institute of Corporate Directors. Ms. O’Neill is a FCPA, FCA, corporate director and independent financial consultant and currently serves on the boards of Topicus.com Inc. and Calian Group Ltd. She has served as a director of numerous public and private technology companies, including Constellation Software Inc., and of Crown corporations and non-profit organizations. Previously, Ms. O’Neill was a leader in the Canadian national technology, media and communications audit practice at Deloitte LLP, where she served for 24 years.
The Hon. Wayne Wouters – Mr. Wouters has a BComm (Honours) from the University of Saskatchewan and an MA in economics from Queen’s University. From 2009 to 2014, Mr. Wouters was the Clerk of the Privy Council of Canada and held the roles of Deputy Minister to the Prime Minister, Secretary to the Cabinet and Head of the Public Service. Prior to his tenure as Clerk, Mr. Wouters was Secretary of the Treasury Board of Canada and served in deputy ministerial and other senior positions in the Canadian public service. He is a Strategic and Policy Advisor to McCarthy Tétrault LLP and a director of Canadian Utilities Limited and Foran Mining Corporation, and a former director of Champion Iron Limited. He was inducted by the Prime Minister as a member of the Privy Council in 2014 and was he was invested into the Order of Canada as an officer in 2017. Mr. Wouters has extensive experience with economic policy and international trade matters, which included oversight of multi-billion dollar budgets on behalf of the Government of Canada.
The Board has also determined that each of Ms. Disbrow and Ms. O’Neill is an audit committee financial expert within the meaning of General Instruction B(8)(a) of Form 10-K under the U.S. Securities Exchange Act of 1934, as amended. The SEC
109
has indicated that the designation of a person as an audit committee financial expert does not make such person an “expert” for any purpose, impose any duties, obligations or liability on such person that are greater than those imposed on members of the Audit Committee and the Board who do not carry this designation or affect the duties, obligations or liability of any other member of the audit committee or the Board.
Enterprise Risk Management
The Company recognizes that risks are associated with delivering on its strategy and achieving its corporate objectives. Managing these risks is an essential part of the Company’s business and the Company aims to promote a culture of risk management and compliance at all levels in the organization. The Company has defined and implemented an approach to manage its exposure to risk, consisting of: (i) a risk management framework to regularly identify, assess, treat, monitor and report on current and potential risks, and (ii) a governance structure that clearly defines the responsibilities of the Board, the senior leadership team, employees and other stakeholders to support the risk management framework. This approach to enterprise risk management is integral to the Company’s business activities and is designed to:
• promote effective corporate governance and decision-making by enabling the consistent identification and evaluation of risk on a consolidated basis;
• ensure that risks are managed proactively and appropriately in the context of the Company’s strategy and objectives;
• support the development of internal controls;
• facilitate the reliability and transparency of financial and operational reporting;
• assist in compliance with laws, regulations, policies, and contracts; and
• reduce harm to financial performance and safeguard the Company’s assets.
Risk Management Framework Policy
The Company’s risk management framework policy defines responsibilities for the identification, assessment, management and reporting of risks, and sets out expectations for ownership, resource assignment and compliance. The scope of the framework embraces internal functions as well as those activities for which the Company engages support from third parties.
Risk Governance and Oversight
The Company utilizes a “three lines of defence” governance structure to define how the responsibility for risk management activities is assigned:
• The first line of defence for managing risks resides with the management of each business group. Risk exposures are identified and mitigated at a granular level through various ongoing management activities including business planning, operations management, reporting, and process improvement projects.
• Oversight of business unit management is provided by the second line of defence, the Security Risk and Compliance Committee (“SRCC”), which meets at least quarterly and is supported by various compliance, security and control functions. The SRCC is composed of manager representatives from each major business group and provides strategic direction by defining key policies, identifying emerging risk trends, and sponsoring training.
• The internal audit function comprises the third line of defence, providing independent assurance of the effectiveness of the Company’s risk management activities and internal controls related to (i) financial reporting and integrity and (ii) other areas of risk as assigned by the Audit and Risk Management Committee from time to time, including cybersecurity risk. The internal audit function may also review the governance structures and mandates of the first two lines of defence.
Additional governance and oversight is provided by the Risk Management and Compliance Council (“RMCC”), a council of internal senior leaders which oversee the risk management activities undertaken by business group management and the SRCC. The RMCC reviews the Company’s risk dashboard and monitors remediation activities to address gaps. The RMCC also promotes a culture of risk management and compliance across the Company. The RMCC meets at least quarterly with the Chief Risk Officer serving as the Chair. Phil Kurtz, the Company’s Chief Legal Officer and Head of Government Relations, serves as the Chief Risk Officer and reports to the Audit and Risk Management Committee, at least quarterly, on the activities of the RMCC.
The Board is ultimately responsible for overseeing the Company’s risk identification, assessment, management, monitoring and reporting activities. The Audit and Risk Management Committee assists the Board with the oversight of enterprise risk management at the Company, including risk assessment, risk compliance, the internal audit function and the controls, processes and policies used to manage the Company’s risk. The Compensation Committee of the Board also assists the Board with the
110
oversight of risk management and controls with respect to the Company’s compensation policies and practices, including the administration of the Company’s equity-based compensation plans.
The Company also includes risks related to the use of artificial intelligence and to environmental, social and governance considerations as part of its enterprise risk management process.
Ethical Business Conduct and Code of Business Standards and Principles
The Company maintains and follows a written code of business standards and principles (the “Code”) that applies to, and is acknowledged annually by, all of the directors, officers and employees of the Company. The Code is a statement of principles designed to promote a culture of integrity and to help ensure that the Company operates its business in an ethical and legally-compliant manner. The Code incorporates by reference a number of policies and guidelines, including the Company’s Prevention of Improper Payments Policy and Insider Trading Policy, that provide guidance to employees concerning business choices, decisions and behaviours. The Code expressly provides that acknowledgment of the Code is a condition of employment, as is completion of all assigned training related to the Code and related policies and guidelines.
The Board, through the Audit and Risk Management Committee, receives reports on compliance with the Code, including regarding the Company’s annual program to have employees acknowledge that they have read, understand and will comply with the Code. The Company maintains a whistleblower program and makes whistleblower reporting available to employees and external parties via a web and telephone hotline-based system supplied and operated by a third party that specializes in such reporting systems. The system allows individuals to make whistleblower reports, including anonymously, to the Company or directly to the Chair of the Audit and Risk Management Committee via the BlackBerry EthicsLink system and enables the Company or the Chair of the Audit and Risk Management Committee, as appropriate, to follow up directly with the reporter while maintaining his or her anonymity. Employees are advised of the whistleblower program as part of the Company’s annual Code acknowledgement program. Management reports on the status of whistleblower reports to the Audit and Risk Management Committee at its quarterly meetings.
In addition, the Board is responsible for overseeing, directly and through its committees, an appropriate compliance program for the Company. The RMCC and SRCC oversee and assist management in maintaining the Company’s compliance program and policies.
The Code is available on the Company’s website at https://investors.blackberry.com/governance-documents, or upon request to the Corporate Secretary of the Company at 2200 University Avenue East, Waterloo, Ontario, N2K 0A7. If the Company makes any substantive amendments to the Code or grants any waiver, including any implicit waiver, from a provision of the Code to the Chief Executive Officer or Chief Financial Officer, the Company will disclose the nature of the amendment or waiver on that website or in a report on Form 8-K. The Company did not grant any such waiver in fiscal 2026.
ITEM 11. EXECUTIVE COMPENSATION
The information required by this item will be included in the Company’s 2026 Proxy Statement, which will be filed with the SEC within 120 days after the end of the Company’s fiscal year ended February 28, 2026, and is incorporated herein by reference.
ITEM 12. SECURITY OWNERSHIP OF CERTAIN BENEFICIAL OWNERS AND MANAGEMENT AND RELATED STOCKHOLDER MATTERS
The information required by this item will be included in the Company’s 2026 Proxy Statement, which will be filed with the SEC within 120 days after the end of the Company’s fiscal year ended February 28, 2026, and is incorporated herein by reference.
ITEM 13. CERTAIN RELATIONSHIPS AND RELATED TRANSACTIONS, AND DIRECTOR INDEPENDENCE
The information required by this item will be included in the Company’s 2026 Proxy Statement, which will be filed with the SEC within 120 days after the end of the Company’s fiscal year ended February 28, 2026, and is incorporated herein by reference.
ITEM 14. PRINCIPAL ACCOUNTING FEES AND SERVICES
The information required by this item will be included in the Company’s 2026 Proxy Statement, which will be filed with the SEC within 120 days after the end of the Company’s fiscal year ended February 28, 2026, and is incorporated herein by reference.
111
PART IV
ITEM 15. EXHIBIT AND FINANCIAL STATEMENT SCHEDULES
Financial Statements and Schedules
The financial statements filed as part of this filing are listed on the Index to Consolidated Financial Statements in Item 8.
Financial statement schedules have been omitted since they either are not required, not applicable, or the information is otherwise included in the Consolidated Financial Statements and accompanying notes in Item 8.
Exhibits
Exhibit Number Description of Exhibit
3.1 Articles of Amalgamation of the Registrant (incorporated by reference to Exhibit 4.2 to the Registrant’s Registration Statement on Form S-8 (File No. 333-192986), filed with the SEC on December 20, 2013)
3.2 Amended and Restated By-law No. A3 of the Registrant (incorporated by reference to Document 1 in the Registrant’s Report on Form 6-K, furnished to the SEC on May 15, 2014)
3.3 Amended and Restated By-law No. A4 of the Registrant (incorporated by reference to Document 2 in the Registrant’s Report on Form 6-K, furnished to the SEC on June 13, 2014)
4.1 Specimen Common Share Certificate (incorporated by reference to Exhibit 4.1 to the Registrant’s Registration Statement on Form S-8 (File No. 333-192986), filed with the SEC on December 20, 2013)
4.2 Description of Registered Securities (incorporated by reference to Exhibit 4.3 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232), filed with the SEC on April 7, 2020)
4.3 Indenture dated January 29, 2024 (incorporated by reference to Exhibit 4.1 to the current report on Form 8-K filed by the Company on January 29, 2024)
4.4 Form of 3.00% Convertible Senior Note due February 15, 2029 (included in Exhibit 4.3)
10.1 Amended and Restated BlackBerry Limited Equity Incentive Plan (incorporated by reference to Exhibit 10.1 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232), filed with the SEC on April 4, 2024)
10.2† Amended and Restated Deferred Share Unit Plan for Directors (incorporated by reference to Exhibit 10.2 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232), filed with the SEC on April 7, 2020)
10.3 Form of restricted share unit agreement (incorporated by reference to Exhibit 10.1 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232), filed with the SEC on April 4, 2024)
10.4 Form of performance based restricted share unit agreement (incorporated by reference to Exhibit 10.1 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232), filed with the SEC on April 4, 2024)
10.5† Form of indemnification agreement for directors and executive officers (incorporated by reference to Exhibit 10.5 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232), filed with the SEC on April 7, 2020)
10.6† Employment agreement with John J. Giamatteo, dated December 8, 2023 (incorporated by reference to Exhibit 10.1 to the Registrant’s Current Report on Form 8-K (File No. 001-38232), filed with the SEC on December 12, 2023) and amended change in control provision letter, dated August 21, 2024 (incorporated by reference to Exhibit 10. 6 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232) filed with the SEC on April 2, 2025)
10.7† Employment agreement with Tim Foote, dated July 26, 2024 (incorporated by reference to Exhibit 10.1 to the Registrant’s Current Report on Form 8-K (File No. 001-38232), filed with the SEC on July 29, 2024) and amended change in control provision letter, dated September 6, 2024 (incorporated by reference to Exhibit 10. 7 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232) filed with the SEC on April 2, 2025)
10.8† Employment agreement with Phil Kurtz, dated June 27, 2022 (incorporated by reference to Exhibit 10.9 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232), filed with the SEC on April 4, 2024) and amended change in control provision letter, dated September 6, 2024 (incorporated by reference to Exhibit 10. 9 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232) filed with the SEC on April 2, 2025)
10.9† Employment agreement with Jennifer Armstrong-Owen, dated January 8, 2024 and amended change in control provision letter, dated September 6, 2024 (incorporated by reference to Exhibit 10.10 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232) filed with the SEC on April 2, 2025)
112
10.10 Patent Sale Agreement with Malikie Innovations Limited, dated March 20, 2023 , including Exhibit A-1 thereto, Exhibit A-2 thereto and Exhibit B-1 thereto (incorporated by reference to Exhibits 10.11, 10.11 1, 10.11 2 and 10.11 3 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232) filed with the SEC on April 4, 2023)
10.11 Equity and Asset Purchase Agreement, dated December 15, 2024, by and among BlackBerry Limited, BlackBerry UK Limited, Arctic Wolf Networks, Inc. and Arctic Wolf Networks International, Inc., together with exhibits and schedules thereto (certain schedules and information within exhibits and schedules omitted pursuant to Regulation S-K Item 601(a)(5) and Item 601(b(2)(ii)) (incorporated by reference to Exhibit 10.1 to the Registrant’s Quarterly Report on Form 10-Q filed with the SEC on December 20, 2024)
10.12† Employment agreement amendment with John Giamatteo, dated as of April 1, 2025 (incorporated by reference to Exhibit 10.1 to the Registrant’s Current Report on Form 8-K (File No. 001-38232) filed with the SEC on April 7, 2025)
10.13† Separation Agreement, dated November 17, 2025, between the Company and Mattias Eriksson (incorporated by reference to Exhibit 10.1 to the Registrant’s Quarterly Report on Form 10-Q (File No. 001-38232) filed with the SEC on December 19, 2025)
19 Insider Trading Policy ( incorporated by reference to Exhibit 19 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232) filed with the SEC on April 2, 2025)
21* List of subsidiaries
23.1* Consent of PricewaterhouseCoopers LLP
31.1* Certification of Chief Executive Officer pursuant to Securities Exchange Act of 1934 Rule 13a-14(a)
31.2* Certification of Chief Financial Officer pursuant to Securities Exchange Act of 1934 Rule 13a-14(a)
32.1†† Certification of Chief Executive Officer pursuant to 18 U.S.C. Section 1350, as adopted pursuant to Section 906 of the Sarbanes-Oxley Act of 2002
32.2†† Certification of Chief Financial Officer pursuant to 18 U.S.C. Section 1350, as adopted pursuant to Section 906 of the Sarbanes-Oxley Act of 2002
97.1* Clawback Policy (incorporated by reference to Exhibit 97.1 to the Registrant’s Annual Report on Form 10-K (File No. 001-38232), filed with the SEC on April 4, 2024)
101* XBRL Instance Document – the document does not appear in the interactive data file because its XBRL tags are embedded within the Inline XBRL document
101* Inline XBRL Taxonomy Extension Schema Document
101* Inline XBRL Taxonomy Extension Calculation Linkbase Document
101* Inline XBRL Taxonomy Extension Definition Linkbase Document
101* Inline XBRL Taxonomy Extension Label Linkbase Document
101* Inline XBRL Taxonomy Extension Presentation Linkbase Document
104 Cover Page Interactive Data File – formatted as Inline XBRL and contained in Exhibit 101
______________________________
* Filed herewith
† Management contract or compensatory plan or arrangement
†† Furnished (and not filed) herewith pursuant to Item 601(b)(32)(ii) of the SEC’s Regulation S-K
ITEM 16. FORM 10-K SUMMARY
None.
113
SIGNATURES
Pursuant to the requirements of Section 13 or 15(d) the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereto duly authorized.
BLACKBERRY LIMITED
Date: April 9, 2026 By: /s/ John Giamatteo
Name: John Giamatteo
Title: Chief Executive Officer
By: /s/ Tim Foote
Name: Tim Foote
Title: Chief Financial Officer (Principal Financial and Accounting Officer)
114
Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the Registrant and in the capacities and on the dates indicated.
DIRECTORS
SIGNATURE CAPACITY DATE
/s/ PHILIP BRACE
Director April 9, 2026
Philip Brace
/s/ LISA BAHASH
Director April 9, 2026
Lisa Bahash
/s/ LISA DISBROW
Director
April 9, 2026
Lisa Disbrow
/s/ JOHN J. GIAMATTEO
Director and Chief Executive Officer (Principal Executive Officer)
April 9, 2026
John J. Giamatteo
/s/ RICHARD LYNCH
Chair and Director
April 9, 2026
Richard Lynch
/s/ BARRY MAINZ
Director April 9, 2026
Barry Mainz
/s/ LORI O’NEILL
Director
April 9, 2026
Lori O’Neill
/s/ WAYNE WOUTERS
Director April 9, 2026
Wayne Wouters
115