Cybersecurity Risk Management and Strategy Disclosure |
12 Months Ended |
|---|---|
May 31, 2026 | |
| Cybersecurity Risk Management, Strategy, and Governance [Line Items] | |
| Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block] | Cybersecurity Risk Management We, like other companies in our industry, face several cybersecurity risks in connection with our business. To date, we have not identified any cybersecurity incidents that have materially affected our business strategy, results of operations, or financial condition. During the fiscal year ended May 31, 2026, we did not identify any cybersecurity incidents that we determined to be material, individually or in the aggregate. In the ordinary course of our business, we collect and store sensitive data, including intellectual property. To effectively prevent, detect, and respond to cybersecurity threats, we maintain a cyber risk management program, which is comprised of a wide array of policies, standards, architecture, and processes. The program includes defined incident detection, response, and escalation procedures, including processes for assessing severity, containing threats, notifying appropriate stakeholders, and complying with applicable regulatory requirements. Our cybersecurity risk management program is overseen by our Vice President of Data Center Technology and our Vice President of Compliance and Enterprise Risk. The Vice President of Data Center Technology is responsible for the Company's cybersecurity strategy, technical controls, and operational cybersecurity capabilities, while the Vice President of Compliance and Enterprise Risk oversees cybersecurity governance, risk management, and compliance activities. Together, they oversee the Company's cybersecurity risk management processes and are supported by third-party cybersecurity advisors. We leverage both third-party service providers and internal personnel to support continuous monitoring, detection, and incident response activities. We maintain processes to evaluate and monitor cybersecurity risks associated with third-party service providers, including due diligence procedures, contractual security requirements, and periodic reviews based on vendor criticality. We have implemented and maintain a cybersecurity risk management program that is designed to identify, assess, and mitigate risks from cybersecurity threats to this data and our systems and ensure the effectiveness of our security controls. Our cybersecurity risk management program is intended to address applicable SOC2 and SOX requirements. Our cybersecurity risk management program incorporates several components, including information security program assessments, a risk register, continuous monitoring of critical risks from cybersecurity threats using automated tools, backup and recovery testing to support business continuity and operational resilience, periodic threat testing, and employee training. We deploy a wide range of security tools, use single sign-on, and require multi-factor authentication across all systems. We also utilize access control policies to further limit access to data within the systems, including quarterly reviews, generally, and on a weekly basis for financial operations. We periodically engage third parties, which are subject to our standards, policies and procedure, to conduct audits and risk assessments, including penetration testing and other system vulnerability analyses. As a result of these assessments and testing, we have responded to all known medium, high, and critical risks and are constantly hardening our environment. Additionally, our program includes privacy and cybersecurity training for all employees. Training occurs prior to accessing the system or performing assigned duties, when required by system changes, and annually thereafter.
|
| Cybersecurity Risk Management Processes Integrated [Flag] | true |
| Cybersecurity Risk Management Processes Integrated [Text Block] | We have implemented and maintain a cybersecurity risk management program that is designed to identify, assess, and mitigate risks from cybersecurity threats to this data and our systems and ensure the effectiveness of our security controls. Our cybersecurity risk management program is intended to address applicable SOC2 and SOX requirements. Our cybersecurity risk management program incorporates several components, including information security program assessments, a risk register, continuous monitoring of critical risks from cybersecurity threats using automated tools, backup and recovery testing to support business continuity and operational resilience, periodic threat testing, and employee training. We deploy a wide range of security tools, use single sign-on, and require multi-factor authentication across all systems. We also utilize access control policies to further limit access to data within the systems, including quarterly reviews, generally, and on a weekly basis for financial operations.
|
| Cybersecurity Risk Management Third Party Engaged [Flag] | true |
| Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] | true |
| Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] | false |
| Cybersecurity Risk Board of Directors Oversight [Text Block] | Our Board is responsible for the oversight of cybersecurity risk management. |
| Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] | Our Board is responsible for the oversight of cybersecurity risk management. The Board delegates oversight of the cybersecurity risk management program to the Audit Committee. |
| Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] | The Risk Management Committee generally provides quarterly updates to the Audit Committee on our cybersecurity risk management program, including updates on (1) any critical cybersecurity risks; (2) ongoing cybersecurity initiatives and strategies; (3) applicable regulatory requirements; and (4) industry standards. The Risk Management Committee also notifies the Board of any significant and/or material cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate. |
| Cybersecurity Risk Role of Management [Text Block] | The management of the program is the responsibility of our Risk Management Committee, comprised of our Chief Executive Officer, Chief Financial Officer, Chief Operating Officer and General Counsel. The Risk Management Committee generally provides quarterly updates to the Audit Committee on our cybersecurity risk management program, including updates on (1) any critical cybersecurity risks; (2) ongoing cybersecurity initiatives and strategies; (3) applicable regulatory requirements; and (4) industry standards. The Risk Management Committee also notifies the Board of any significant and/or material cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate. |
| Cybersecurity Risk Management Positions or Committees Responsible [Flag] | true |
| Cybersecurity Risk Management Positions or Committees Responsible [Text Block] | Our Board is responsible for the oversight of cybersecurity risk management. The Board delegates oversight of the cybersecurity risk management program to the Audit Committee. The management of the program is the responsibility of our Risk Management Committee, comprised of our Chief Executive Officer, Chief Financial Officer, Chief Operating Officer and General Counsel. The Risk Management Committee generally provides quarterly updates to the Audit Committee on our cybersecurity risk management program, including updates on (1) any critical cybersecurity risks; (2) ongoing cybersecurity initiatives and strategies; (3) applicable regulatory requirements; and (4) industry standards. The Risk Management Committee also notifies the Board of any significant and/or material cybersecurity incidents (suspected or actual) and provides updates on the incidents as well as cybersecurity risk mitigation activities as appropriate.
|
| Cybersecurity Risk Management Expertise of Management Responsible [Text Block] | Our cybersecurity risk management program is overseen by our Vice President of Data Center Technology and our Vice President of Compliance and Enterprise Risk. The Vice President of Data Center Technology is responsible for the Company's cybersecurity strategy, technical controls, and operational cybersecurity capabilities, while the Vice President of Compliance and Enterprise Risk oversees cybersecurity governance, risk management, and compliance activities. Together, they oversee the Company's cybersecurity risk management processes and are supported by third-party cybersecurity advisors. We leverage both third-party service providers and internal personnel to support continuous monitoring, detection, and incident response activities. |
| Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] | The Risk Management Committee generally provides quarterly updates to the Audit Committee on our cybersecurity risk management program, including updates on (1) any critical cybersecurity risks; (2) ongoing cybersecurity initiatives and strategies; (3) applicable regulatory requirements; and (4) industry standards. |
| Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] | true |