10 unchanged sentences
In addition, our employees receive cybersecurity training designed to enhance awareness of cybersecurity risks.
−Removed: Our board of directors has overall oversight of enterprise risk management and Audit Committee has direct oversight responsibility for cybersecurity risk.
+Added: Our board of directors has overall oversight of enterprise risk management and the Audit Committee has direct oversight responsibility for cybersecurity risk.
The Audit Committee also reviews and discusses periodic reports prepared by the Head of Risk and Internal Audit on the effectiveness of Shopify's overall risk management programs, control processes and governance procedures, together with management’s response.
5 unchanged sentences
The CISO provides periodic reports to the Audit Committee on the cybersecurity program.
−Removed: Table of C ontents
In 2025, we did not identify any cybersecurity threats that have materially affected or are reasonably likely to materially affect our business strategy, results of operations or financial condition.
7 unchanged sentences
Not applicable.
−Removed: Table of C ontents
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.