How to Read a 10-K: The 5 Sections That Actually Matter

What is a 10-K?

A 10-K is the most complete document a US public company files all year. It is required by the Securities Exchange Act of 1934, it contains audited financial statements, and it follows a fixed structure, so every 10-K puts the same information in the same place. It is also long: often more than 100 pages of business description, accounting notes and legal boilerplate.

The good news is that you do not need to read all of it. Once you know which five sections carry the weight, you can pull the signal out of a 200-page filing in about twenty minutes. Foreign companies listed in the US file a similar annual report called a 20-F instead.

The anatomy of a 10-K

Every 10-K is divided into four Parts, and each Part into numbered Items. The numbering comes from SEC Regulation S-K, which is why Item 1A is always Risk Factors whether you are reading Apple or a small regional bank.

Parts I and II hold almost everything an investor cares about. Part III covers governance and executive pay, and most companies satisfy it by pointing to their proxy statement (the DEF 14A). Part IV is the exhibit list. So the reading you actually do lives in the first two Parts.

1. Item 1: Business

This is the company in its own words: what it sells, who buys it, how it makes money, who it competes with and how it is regulated. For a company you do not already know, start here. It is the one section written to explain the business rather than to satisfy a disclosure rule, so it reads the most like plain English.

Read it for the revenue model (subscription, hardware, transaction fees), customer concentration (accounting rules require disclosing any customer that brings in 10% or more of revenue), the segments management reports, and employee count. A new segment or a new product line given prominent space is often the first hint of where the company is heading.

2. Item 1A: Risk Factors

Risk Factors lists everything that could go wrong. Much of it is defensive boilerplate written by lawyers, which is why many readers skip it. That is a mistake, because the boilerplate is stable from year to year, and that stability is exactly what makes changes visible.

NVIDIA's fiscal 2026 10-K is a good example. Its risk section described a $4.5 billion charge tied to US export controls on its H20 chips, a preliminary finding by Chinese antitrust regulators, two direct customers accounting for 22% and 14% of revenue, and foundry lead times of more than 12 months. None of those are generic risks. Each one is specific, recent and measurable, which is what to look for.

3. Item 7: Management's Discussion and Analysis

MD&A is management explaining the numbers: why revenue grew or shrank, what happened to margins, how each segment performed, where cash came from and went, and what they expect next. It is the bridge between the business description and the financial statements.

Focus on segment results, gross and operating margin changes and the explanation management gives for them, liquidity and capital resources (debt maturities, buybacks, capital spending), and critical accounting estimates, where management describes the judgment calls that most affect reported profit. A change in tone, from confident to cautious, often shows up here first.

4. Item 8: Financial Statements

Item 8 holds the audited income statement, balance sheet, cash flow statement and statement of shareholders' equity, plus the auditor's report and the notes. You do not need to read every note. Check that revenue, operating income and operating cash flow move in the same direction, and read the notes on revenue recognition, debt and commitments and contingencies.

Companies also tag these numbers in XBRL, a machine-readable format the SEC requires. That is how SignalX pulls revenue, net income, margins and cash flow for thousands of companies without manual entry, and why the numbers match the filing exactly.

5. Item 3: Legal Proceedings

Item 3 lists material lawsuits, government investigations and regulatory actions. Most entries are routine and roll over from year to year. What matters is anything new, anything that moved from "investigation" to "charges" or "settlement", and any proceeding large enough that management quantifies a possible loss.

Compare it with last year's 10-K

The single most useful habit is reading a 10-K next to the prior year's. Because the structure and much of the wording repeat, differences jump out: a new risk factor, a segment that was renamed or merged, a customer that crossed the 10% line, a lawsuit that appeared. Companies rarely announce these changes. They simply show up in the text.

• Risk Factors: new headings and rewritten paragraphs. A section that grew sharply in length is worth a closer look.
• MD&A: new explanations for margin changes and new language about demand or pricing.
• Notes: changes in revenue recognition, segment definitions or debt covenants.

Read it faster with AI

SignalX parses every 10-K it collects into its sections and writes a short summary of each one: Business, Risk Factors and MD&A, in 3 to 5 bullets, with numbers drawn only from the filing. It pairs those bullets with the XBRL financials and links back to the original document on SEC EDGAR, so you can verify anything that matters. For the next step, see how the 10-K fits with the quarterly 10-Q and the event-driven 8-K in our guide to 10-K vs 10-Q vs 8-K.