Chewy, Inc. (CHWY)

Criticisms on file

• Climate-related operational risk exposure: fulfillment centers located in hurricane/earthquake/flood-prone areas (Florida, Texas); company acknowledges rising frequency and intensity of natural disasters and increased costs, but discloses no climate mitigation strategy or adaptation plan.

  Source: CHWY 10-K Item 1A Risk Factors: 'Business disruptions and responsive actions may adversely affect our business operations' section discussing climate change impacts on fulfillment center locations and supply-chain disruptions.

Disclosed initiatives

No disclosed initiatives on file for this pillar.

Criticisms on file

• Supply-chain concentration in China: significant portion of suppliers for private brand and non-consumable business located in China; exposed to geopolitical instability, labor problems, tariffs, and supply disruptions. No disclosed human-rights audit, conflict-minerals policy, or living-wage commitment.

  Source: CHWY 10-K Item 1A Risk Factors: 'Risks associated with our suppliers and our outsourcing partners' section detailing China supply-chain exposure and lack of direct oversight.
• International trade and tariff uncertainty: company exposed to U.S. tariff policy changes and trade restrictions; acknowledges inability to predict impact on supply-chain costs and operations.

  Source: CHWY 10-K Item 1A Risk Factors: 'Risks associated with our suppliers' section discussing tariffs and trade agreement uncertainty.
• Veterinarian-resistance risk to prescription fulfillment: some veterinarians refuse to authorize prescriptions or discourage customers from purchasing from Chewy; company acknowledges this as a material sales risk but provides no mitigation strategy.

  Source: CHWY 10-K Item 1A Risk Factors: 'Resistance from veterinarians to authorize prescriptions, or their efforts to discourage pet owners from purchasing from us' section.

Disclosed initiatives

• Pharmacy, Veterinary, and Telehealth Licensing Compliance

  Company maintains state and federal licenses for prescription pet medication dispensing and veterinary services; subject to routine administrative inquiries and regulatory oversight.

  Ensures professional liability management and regulatory adherence in pet health services; does not address social equity or labor practices.

Criticisms on file

• Dual-class share structure and BC Partners control: BCP Stockholder Parties control company direction and prevent minority shareholders from influencing significant decisions. Company classified as controlled company and relies on NYSE governance exemptions. Substantial future sales by BC Partners could depress Class A stock price; potential conflicts of interest between company and BC Partners affiliates.

  Source: CHWY 10-K Item 1A Risk Factors: 'Risks Related to Our Controlling Stockholders' and 'Risks Related to Ownership of Our Class A Common Stock' sections detailing dual-class structure and BC Partners dominance.
• Anti-takeover and exclusive-forum provisions: Company charter includes exclusive forum provisions that limit shareholders' ability to obtain favorable judicial forum for disputes with directors, officers, or employees. Anti-takeover provisions limit shareholder ability to replace or remove management and limit stock price.

  Source: CHWY 10-K Item 1A Risk Factors: 'Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of the Company more difficult' and 'Our amended and restated certificate of incorporation includes exclusive forum provisions' sections.
• Cybersecurity incident risk and third-party data center dependence: Company relies heavily on AWS for data storage, analytics, and content processing; has experienced cybersecurity incidents due to third-party service provider disruptions; cannot rapidly switch cloud providers; vulnerability to DDoS attacks, ransomware, and data breaches.

  Source: CHWY 10-K Item 1A Risk Factors: 'Our failure or the failure of third-party service providers to protect our websites, networks, and systems against cybersecurity incidents' and 'Our business depends on network and mobile infrastructure, our third-party data center hosting facilities' sections.
• Pharmacy and veterinary licensing compliance risk: Company may be subject to reprimands, sanctions, probations, fines, license suspensions or revocations related to pharmacy, veterinary, and telehealth services; subject to professional liability claims for dispensing errors and veterinary malpractice.

  Source: CHWY 10-K Item 1A Risk Factors: 'We may inadvertently not comply with various laws and regulations covering our pet health business' section.

Disclosed initiatives

• Cybersecurity Governance Framework

  Company references cybersecurity program management per Item 1C of 10-K; maintains privacy, data breach, and network security liability insurance.

  Provides risk mitigation for data security incidents; insurance may not be adequate for all liabilities.
• Product Liability and Professional Liability Insurance

  Company carries insurance for product liability claims and professional liability related to pharmacy and veterinary services.

  Risk transfer mechanism; does not address underlying product safety or operational compliance.