XML 60 R24.htm IDEA: XBRL DOCUMENT
v3.25.1

Cybersecurity Risk Management and Strategy Disclosure | 12 Months Ended
--- | ---
Mar. 31, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items] |
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block] | 8x8 recognizes that cybersecurity is critical to the trust placed in our platform by customers, partners, and other stakeholders. The Company is committed to maintaining the confidentiality, integrity, and availability of its systems and data through a comprehensive cybersecurity risk management and governance framework. Cybersecurity Risk Management and Strategy 8x8 maintains a global cybersecurity risk management program aligned with the National Institute of Standards and Technology ("NIST") Cybersecurity Framework. This program is integrated and embedded within the Company's overall enterprise risk management, or ERM, process and designed to proactively identify, assess, and manage cybersecurity threats that could materially affect our business operations, financial condition, or reputation. Key components of the program include: •Continuous threat monitoring and intelligence, with real-time detection capabilities across cloud and on-premise environments. •Periodic risk assessments and threat modeling, covering internal assets and supply chain exposure. •Third-party penetration testing, security audits, and independent assessments conducted at least annually. •A vulnerability management lifecycle to identify, prioritize, and remediate security flaws in infrastructure and applications. •Employee cybersecurity training and phishing simulations, tailored by role and location. 8x8 engages reputable external security firms and consultants to support ongoing evaluations, and has obtained certifications and attestations across various jurisdictions and industries (including ISO/IEC 27001, CyberEssentials Plus et al, and compliance with frameworks applicable to communications and cloud service providers). To date, the Company has not experienced any cybersecurity incidents that have materially impacted its operations or financial condition. Nevertheless, cybersecurity threats continue to evolve, and the Company has developed and implemented a comprehensive Incident Response Plan to effectively manage cybersecurity incidents. The plan is regularly reviewed, tested, and updated to facilitate its effectiveness in mitigating and responding to cybersecurity threats promptly.
Cybersecurity Risk Management Processes Integrated [Flag] | true
Cybersecurity Risk Management Processes Integrated [Text Block] | 8x8 recognizes that cybersecurity is critical to the trust placed in our platform by customers, partners, and other stakeholders. The Company is committed to maintaining the confidentiality, integrity, and availability of its systems and data through a comprehensive cybersecurity risk management and governance framework.
Cybersecurity Risk Management Third Party Engaged [Flag] | true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] | true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] | true
Cybersecurity Risk Board of Directors Oversight [Text Block] | The Company's board of directors, through its Technology & Cybersecurity Committee, oversees 8x8’s cybersecurity risk management strategy. This committee meets quarterly and receives briefings from senior leadership on cybersecurity risk trends, controls testing and efficacy, compliance posture, and incident management preparedness. The full board of directors is informed at least annually on cybersecurity matters, with additional updates as needed. The Company’s Chief Information Security Officer, or CISO, leads the cybersecurity program and reports functionally to the Chief Legal Officer, and periodically to the CEO, the Executive Risk Management Committee, and the board of directors. The CISO has over 25 years of global cybersecurity, information security, disaster recovery, and business continuity experience, including leadership roles across UK national infrastructure and global Fortune 100 and 500 companies. The CISO holds an M.S. in Information Technology Security (with distinction), and is a Certified Information Security Manager, or CISM, and Certified Information Systems Security Professional, or CISSP. While the board of directors has not formally designated a cybersecurity expert under SEC regulations, the Technology & Cybersecurity Committee includes directors with backgrounds in technology, data governance, and risk oversight, and all directors participate in training sessions to continue to enhance their understanding of cybersecurity issues and their implications for the Company.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] | The Company’s Chief Information Security Officer, or CISO, leads the cybersecurity program and reports functionally to the Chief Legal Officer, and periodically to the CEO, the Executive Risk Management Committee, and the board of directors. The CISO has over 25 years of global cybersecurity, information security, disaster recovery, and business continuity experience, including leadership roles across UK national infrastructure and global Fortune 100 and 500 companies.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] | The Company's board of directors, through its Technology & Cybersecurity Committee, oversees 8x8’s cybersecurity risk management strategy. This committee meets quarterly and receives briefings from senior leadership on cybersecurity risk trends, controls testing and efficacy, compliance posture, and incident management preparedness. The full board of directors is informed at least annually on cybersecurity matters, with additional updates as needed.
Cybersecurity Risk Role of Management [Text Block] | The Company's board of directors, through its Technology & Cybersecurity Committee, oversees 8x8’s cybersecurity risk management strategy. This committee meets quarterly and receives briefings from senior leadership on cybersecurity risk trends, controls testing and efficacy, compliance posture, and incident management preparedness. The full board of directors is informed at least annually on cybersecurity matters, with additional updates as needed. The Company’s Chief Information Security Officer, or CISO, leads the cybersecurity program and reports functionally to the Chief Legal Officer, and periodically to the CEO, the Executive Risk Management Committee, and the board of directors. The CISO has over 25 years of global cybersecurity, information security, disaster recovery, and business continuity experience, including leadership roles across UK national infrastructure and global Fortune 100 and 500 companies. The CISO holds an M.S. in Information Technology Security (with distinction), and is a Certified Information Security Manager, or CISM, and Certified Information Systems Security Professional, or CISSP. While the board of directors has not formally designated a cybersecurity expert under SEC regulations, the Technology & Cybersecurity Committee includes directors with backgrounds in technology, data governance, and risk oversight, and all directors participate in training sessions to continue to enhance their understanding of cybersecurity issues and their implications for the Company.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] | true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] | The Company’s Chief Information Security Officer, or CISO, leads the cybersecurity program and reports functionally to the Chief Legal Officer, and periodically to the CEO, the Executive Risk Management Committee, and the board of directors. The CISO has over 25 years of global cybersecurity, information security, disaster recovery, and business continuity experience, including leadership roles across UK national infrastructure and global Fortune 100 and 500 companies. The CISO holds an M.S. in Information Technology Security (with distinction), and is a Certified Information Security Manager, or CISM, and Certified Information Systems Security Professional, or CISSP.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] | The CISO has over 25 years of global cybersecurity, information security, disaster recovery, and business continuity experience, including leadership roles across UK national infrastructure and global Fortune 100 and 500 companies. The CISO holds an M.S. in Information Technology Security (with distinction), and is a Certified Information Security Manager, or CISM, and Certified Information Systems Security Professional, or CISSP.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] | The Company’s Chief Information Security Officer, or CISO, leads the cybersecurity program and reports functionally to the Chief Legal Officer, and periodically to the CEO, the Executive Risk Management Committee, and the board of directors. The CISO has over 25 years of global cybersecurity, information security, disaster recovery, and business continuity experience, including leadership roles across UK national infrastructure and global Fortune 100 and 500 companies. The CISO holds an M.S. in Information Technology Security (with distinction), and is a Certified Information Security Manager, or CISM, and Certified Information Systems Security Professional, or CISSP. While the board of directors has not formally designated a cybersecurity expert under SEC regulations, the Technology & Cybersecurity Committee includes directors with backgrounds in technology, data governance, and risk oversight, and all directors participate in training sessions to continue to enhance their understanding of cybersecurity issues and their implications for the Company.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] | true

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardOfDirectorsOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementExpertiseOfManagementResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph iii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph iii + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleReportToBoardFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskManagementProcessesForAssessingIdentifyingAndManagingThreatsTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementProcessesIntegratedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementProcessesIntegratedTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K + Details
Name: | cyd_CybersecurityRiskManagementStrategyAndGovernanceLineItems
Namespace Prefix: | cyd_
Data Type: | i:stringItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskManagementThirdPartyEngagedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskMateriallyAffectedOrReasonablyLikelyToMateriallyAffectRegistrantFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskProcessForInformingBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskProcessForInformingManagementOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskRoleOfManagementTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph iii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph iii + Details
Name: | cyd_CybersecurityRiskThirdPartyOversightAndIdentificationProcessesFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration