AWARE INC /MA/ 10-K

ITEM 1A. Risk Factors While we expect the impacts of COVID-19 to have an adverse effect on our business, financial condition and results of operations, we are unable to predict the extent or nature of these impacts at this time. Due to the COVID-19 pandemic we have been limited in our ability to: (i) conduct face-to-face meetings with customers and prospective customers, (ii) present in-person demonstrations of our software solutions, (iii) attend trade shows and conferences which typically generate future sales opportunities or (iv) meet with prospective strategic partners. These effects caused by the COVID-19 pandemic adversely impacted our operating and financial results in 2021 and 2020 and will likely have an adverse impact on our operating and financial results over at least the next several quarters. The extent to which our operating and financial results will continue to be affected by the COVID-19 pandemic will depend on various factors and consequences beyond our control, such as the duration and scope of the pandemic; the impact of the emergence of new variants of the virus that causes COVID-19; additional actions by businesses and governments in response to the pandemic; and the speed and effectiveness of responses to combat the virus, including vaccine development and distribution. COVID-19, and the volatile regional and global economic conditions stemming from the pandemic, could also aggravate our other risk factors described in this Form 10-K. Our operating results may fluctuate significantly from period-to-period and are difficult to predict. Individual orders can represent a meaningful percentage of our revenues and operating results in any single quarter and the timing of the receipt of those orders is difficult to predict. The failure to close an order or the deferral or cancellation of an order can result in revenue and net income shortfalls for that quarter. We base our current and future expense levels on our internal operating plans and sales forecasts, and our operating costs are to a large extent fixed. As a result, we may not be able to sufficiently reduce our costs in any quarter to adequately compensate for an unexpected near-term shortfall in revenues, and even a small shortfall could disproportionately and adversely affect our financial results for that quarter. Our financial results may be negatively affected by a number of factors, including the following: 8 • any lack or reduction of government funding and the political, budgetary and purchasing constraints of government customers who purchase products and services directly or indirectly from us; • the terms of customer contracts that affect the timing of revenue recognition; • the size and timing of our receipt of customer orders; • significant fluctuations in demand for our products and services; • any loss of a key customer or one of its key customers; • new competitors entering our markets, or the introduction of enhanced solutions from new or existing competitors; • competitive pressures on selling prices; • any cancellations, or delays of orders or contract amendments by government customers; • higher than expected costs, asset write-offs, and other one-time financial charges; and • general economic trends and other factors, such as the COVID-19 pandemic. As a result of these factors, we believe that period-to-period comparisons of our revenue levels and operating results are not necessarily meaningful. You should not rely on our quarterly revenue and operating results to predict our future performance. We derive a significant portion of our revenue directly or indirectly from government customers, and our business may be adversely affected by changes in the contracting or fiscal policies of those governmental entities. We derive a significant portion of our revenue directly or indirectly from federal, international, state and local governments. We believe that the success and growth of our business will continue to depend on government customers purchasing our products and services either directly from us or indirectly through our channel partners. Changes in government contracting policies or government budgetary constraints may adversely affect our financial performance. Among the factors that could adversely affect our business are: • changes in fiscal policies or decreases in available government funding, • changes in government funding priorities; • changes in government programs or applicable requirements; • the adoption of new laws or regulations or changes to existing laws or regulations relating to the provision of biometrics services or the use of biometric data; • changes in political or social attitudes with respect to security and defense issues; • changes in audit policies and procedures of government entities; • potential delays or changes in the government appropriations process; and • delays in the payment of our invoices by government payment offices. These and other factors could cause government customers or our channel partners to reduce purchases of products and services from us which would have a material adverse effect on our business, financial condition and operating results. A significant commercial market for biometrics technology may not develop, and, even if it does, there can be no assurance our biometrics technology will be successful. A component of our strategy to grow our revenue includes expansion into commercial markets. To date, biometrics technology has received only limited acceptance and slow adoption in these markets. Although the recent appearance 9 of biometric readers on popular consumer products, such as smartphones, has increased interest in biometrics as a means of authenticating and/or identifying individuals, commercial markets for biometrics technology are still in the process of developing and evolving. Biometrics-based solutions compete with more traditional security methods including keys, cards, personal identification numbers , passwords and security personnel. Acceptance of biometrics as an alternative to such traditional methods depends upon a number of factors including: i) the performance and reliability of biometric solutions; ii) costs involved in adopting and integrating biometric solutions; iii) public concerns regarding privacy; and iv) potential privacy legislation. For these reasons, we are uncertain whether there will be significant demand for biometrics technology from commercial markets. Moreover, even if there is significant demand, there can be no assurance that our biometrics products will achieve market acceptance. We derive a significant portion of our revenue from third party channel partners. Our future results depend upon the continued successful distribution of our products through a channel of systems integrators and OEM partners. Systems integrators, including VARs, use our software products as a component of the biometrics systems they deliver to their customers. OEMs embed our software products in their technology devices or software products. These channel partners typically sell their products and services to government customers. Our failure to effectively manage our relationships with these third parties could impair the success of our sales, marketing and support activities. Moreover, the activities of these third parties are not within our direct control. The occurrence of any of the following events could have a material adverse effect on our business, financial condition and operating results: • a reduction in sales efforts by our partners; • the failure of our partners to win government awards in which our products are used; • a reduction in technical capabilities or financial viability of our partners; • a misalignment of interest between us and any of our partners; • the termination of our relationship with a major systems integrator or OEM; or • any adverse effect on a partner’s business related to competition, pricing or other factors. If the biometrics market does not experience significant growth or if our products do not achieve broad acceptance both domestically and internationally, we may not be able to grow our business. Our revenues are derived primarily from sales of biometrics products and services. We cannot accurately predict the future growth rate or the size of the biometrics market. The expansion of the biometrics market and the market for our biometrics products and services depends on a number of factors, such as: • the cost, performance and reliability of our products and services and the products and services offered by our competitors; • the continued growth in demand for biometrics solutions within the government and law enforcement markets, as well as the development and growth of demand for biometric solutions in markets outside of government and law enforcement; • customers’ perceptions regarding the benefits of biometrics solutions; • public perceptions regarding the intrusiveness of these solutions and the manner in which organizations use the biometric information collected; • public perceptions regarding the confidentiality of private information; • proposed or enacted legislation related to privacy of biometric information; • customers’ satisfaction with biometrics solutions; and • marketing efforts and publicity regarding biometrics solutions. 10 Even if biometrics solutions gain wide market acceptance, our solutions may not adequately address market requirements and may not continue to gain market acceptance. If biometrics solutions generally or our solutions specifically do not gain wide market acceptance, we may not be able to achieve our anticipated level of growth and our revenues, and our results of operations would be adversely affected. We face intense competition from other biometrics solutions providers. A significant number of established companies have developed or are developing and marketing software and hardware for biometrics products and applications that currently compete with or will compete directly with our offerings. We believe that additional competitors will enter the biometrics market and become significant long-term competitors, and that, as a result, competition will increase. Companies competing with us may introduce solutions that are competitively priced, have increased performance or functionality or incorporate technological advances we have not yet developed or implemented. Our current principal competitors include: • Diversified technology providers that offer integrated biometrics solutions to governments, law enforcement agencies and other organizations. This group of competitors includes companies such as Idemia, Thales, and NEC. • Component providers that offer biometrics software and hardware components for fingerprint, facial, iris and voice biometric identification. This group of competitors includes companies such as FaceTec, iProov, and Innovatrics. We expect competition to intensify in the near term in the biometrics market. Many current and potential competitors have substantially greater financial, marketing, and research resources than we have. Moreover, low-cost foreign competitors from third world and other countries have demonstrated a willingness to sell their products at significantly reduced prices. To compete effectively in this environment, we must continually develop and market new and enhanced solutions and technologies at competitive prices and must have the resources available to invest in significant research and development activities. Our failure to compete successfully could cause our revenues and market share to decline. The biometrics industry is characterized by rapid technological change and evolving industry standards, which could render our existing products obsolete. Our future success will depend upon our ability to develop and introduce a variety of new capabilities and enhancements to our existing products in order to address the changing and sophisticated needs of the marketplace. Frequently, technical development programs in the biometrics industry require assessments to be made of the future direction of technology, which is inherently difficult to predict. Delays in introducing new products and enhancements, the failure to choose correctly among technical alternatives or the failure to offer innovative products or enhancements at competitive prices may cause customers to forego purchases of our products and purchase our competitors’ products. We may not have adequate resources available to us or may not adequately keep pace with appropriate requirements in order to effectively compete in the marketplace. Our software products may have errors, defects or bugs, which could result in delayed or lost revenue, expensive correction, liability to our customers, and claims against us. Despite testing, complex software products such as ours may contain errors, defects, or bugs, which may only be discovered after they have been installed and used by our customers. Defects in the products that we develop and sell to our customers could require expensive corrections and result in delayed or lost revenue, adverse customer reaction and negative publicity about us or our products and services. Customers who are not satisfied with any of our products may also bring claims against us for damages, which, even if unsuccessful, would likely be time-consuming to defend, and could result in costly litigation and payment of damages. Such claims could harm our reputation, financial results and competitive position. Our business may be adversely affected by our use of open source software. The software industry is making increasing use of open source software in the development of products. We also license and integrate certain open source software components from third parties into our software. Open source software license agreements may require that the software code in these components or the software into which they are integrated be freely accessible under open source terms. Many features we may wish to add to our products in the future may be available as open source software and our development team may wish to make use of this software to reduce development costs and speed up the development process. While we carefully monitor the use of all open 11 source software and try to ensure that no open source software is used in such a way as to require us to disclose the source code to the related product, such use could inadvertently occur. If we were required to make our software freely available, our business could be seriously harmed. We rely on third-party software to develop and provide our solutions and significant defects in third-party software could harm our business. We rely on software licensed from third parties to develop and offer some of our solutions. In addition, we may need to obtain future licenses from third parties to use software or other intellectual property associated with our solutions. We cannot assure you that these licenses will be available to us on acceptable terms, without significant price increases or at all. Any loss of the right to use any such software or other intellectual property required for the development and maintenance of our solutions could result in delays in the provision of our solutions until equivalent technology is either developed by us or, if available from others, is identified, obtained, and integrated, which could harm our business. Any errors or defects in third-party software could result in errors or a failure of our solutions, which could harm our business. Part of our future business is dependent on market demand for, and acceptance of, the cloud-based model for the use of software. We expect to derive a growing percentage of our revenue from the sale of cloud-based services. As a result, widespread acceptance and use of the cloud-based business model is critical to our future growth and success. Under the perpetual or fixed term license model for software procurement, users of the software typically run applications on their hardware. Because companies are generally predisposed to maintaining control of their IT systems and infrastructure, there may be resistance to the concept of accessing the functionality that software provides as a service through a third party. If the market for cloud-based, software solutions ceases to grow or grows slower than we currently anticipate, demand for our services could be negatively affected. Our operational systems and networks and products may be subject to an increasing risk of continually evolving cybersecurity or other technological risks, which could result in the disclosure of company or customer confidential information, damage to Aware’s reputation, additional costs to Aware, regulatory penalties and financial losses. Our products, services and systems may be used in critical company, customer or third-party operations, or involve the storage, processing and transmission of sensitive data, including valuable intellectual property, other proprietary or confidential data, regulated data, and personal information of employees, customers and others. Successful breaches, employee malfeasance, or human or technological error could result in, for example, unauthorized access to, disclosure, modification, misuse, loss, or destruction of company, customer, or other third party data or systems; theft of sensitive, regulated, or confidential data including personal information and intellectual property; the loss of access to critical data or systems through ransomware, destructive attacks or other means; and business delays, service or system disruptions or denials of service. If we or third parties with which we do business were to fall victim to successful cyber-attacks or experience other cybersecurity incidents, including the loss of individually identifiable customer or other sensitive data, we may incur substantial costs and suffer other negative consequences, which may include remediation costs, such as liability for stolen assets or information, repairs of system damage, and incentives to customers or business partners in an effort to maintain relationships after an attack as well as litigation and legal risks, including regulatory actions by state and federal regulators. Our intellectual property is subject to limited protection. Because we are a technology provider, our ability to protect our intellectual property and to operate without infringing the intellectual property rights of others is critical to our success. We regard our technology as proprietary. We rely on a combination of U.S. and worldwide patent, trade secret, copyright, and trademark law as well as confidentiality agreements to protect our proprietary technology. We cannot assure you that we will be able to enforce the patents we own against third parties. Some foreign countries do not currently provide effective legal protection for intellectual property and our ability to prevent the unauthorized use of our products in those countries is therefore limited. Despite our efforts, these measures can only provide limited protection. Unauthorized third parties may try to copy or reverse engineer portions of our products or otherwise obtain and use our intellectual property. If we fail to protect our intellectual property rights adequately, our competitors may gain access to our technology, and our business would thus be harmed. 12 In the future, we may be involved in legal action to enforce our intellectual property rights relating to our patents, copyrights or trade secrets. Any such litigation could be costly and time-consuming for us, even if we were to prevail. Moreover, even if we are successful in protecting our proprietary information, our competitors may independently develop technologies substantially equivalent or superior to our technology. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our intellectual property or otherwise gaining access to our technology. The misappropriation of our technology or the development of competitive technology could seriously harm our business. We may be sued by third parties for alleged infringement of their proprietary rights . We may be subject to claims that our technology and products infringe the intellectual property rights of others. A large and increasing number of participants in the technology industry, including companies known as non-practicing entities, have applied for or obtained patents. Some of these patent holders have demonstrated a readiness to commence litigation based on allegations of patent infringement. Third parties have asserted against us in the past and may assert against us in the future patent, copyright and other intellectual property rights to technologies that are important to our business. Intellectual property rights can be uncertain and involve complex legal and factual questions. Moreover, intellectual property claims, with or without merit, can be time-consuming and expensive to litigate or settle, and could divert management attention away from the execution of our business plan. If we were found to have infringed the proprietary rights of others, we could be subject to substantial damages or an injunction preventing us from conducting our business. If we are unable to attract and retain key personnel, our business could be harmed. If any of our key employees were to leave, we could face substantial difficulty in hiring qualified successors and could experience a loss in productivity while any successor obtains the necessary training and experience. Our employment relationships are at-will and we have had key employees leave in the past. We cannot assure you that one or more key employees will not leave in the future. We intend to continue to hire additional highly qualified personnel, including software engineers and sales personnel, but may not be able to attract, assimilate or retain qualified personnel in the future. Any failure to attract, integrate, motivate and retain these employees could harm our business. Our business may be affected by government laws and regulations. Extensive regulation under federal, state, and foreign law has adversely affected us and could further adversely affect us in ways that are difficult for us to predict. More specifically, we are subject to regulatory environment changes regarding privacy and data protection that could have a material impact on our results of operations. These regulatory changes may potentially involve new regulatory issues/requirements such as the EU General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act (“CCPA”), the Illinois Biometric Privacy Act, Texas Statute on the Capture or Use of Biometric Identifier, State of Washington H.B. 1493, Brazil’s General Data Protection Law (“LGPD”) and any other state, federal or foreign regulations governing the collection, use and storage of biometric data. The potential costs of compliance with or imposed by new/existing regulations and policies that are applicable to us, or fines and penalties to which we may become subject if we fail to comply with those regulations and polices, may affect the use of our products and services and could have a material adverse impact on our results of operations. In addition, our business may also be adversely affected by: i) the imposition of tariffs, duties and other import restrictions on goods and services we purchase from non-domestic suppliers; or ii) the imposition of economic sanctions on existing or potential customers or suppliers, or iii) by the imposition of export restrictions on products we sell internationally. Changes in current or future laws or regulations, in the United States or elsewhere, could seriously harm our business. Adverse economic conditions could harm our business. Unfavorable changes in economic conditions, including recessions, inflation, turmoil in financial markets, changes caused by global crisis such as the COVID-19 pandemic, the ongoing conflict between Russia and Ukraine and resulting economic sanctions, the Taliban’s takeover of Afghanistan, or other changes in economic conditions, could harm our business, results of operations, and financial conditions as a result of: • reduced demand for our products; 13 • increased risk of order cancellations or delays; • increased pressure on the prices for our products; • greater difficulty in collecting accounts receivable; and • risks to our liquidity, including the possibility that we might not have access to our cash when needed. We are unable to predict whether or when any such adverse economic conditions could occur in the U.S. or other countries; and if they do occur, nor can we predict their timing, duration, or severity. The longer the duration, the greater the risks we face in operating our business. We may not realize the anticipated benefits of our acquisitions. We may make acquisitions of companies that offer complementary products, services, and technologies such as our acquisitions of FortressID in December of 2021 and AFIX in November of 2020. The ultimate success of our acquisitions depends, in part, on our ability to realize the anticipated synergies, cost savings and growth opportunities from integrating acquired businesses or assets into our existing businesses. However, the acquisition and successful integration of independent businesses or assets is a complex, costly and time-consuming process, and the benefits we realize may not exceed the costs of the acquisition. The risk and difficulties associated with acquiring and integrating companies and other assets include, among others, difficulties assimilating the operations and personnel of acquired companies, challenges in realizing the value of the acquired assets relative to the price paid, distraction of management from our ongoing businesses and potential product disruptions associated with the sale of the acquired company’s products. These factors could have a material adverse effect on our business, financial condition, operating results and cash flows. Additionally, the consideration we pay for any future acquisitions could include shares of our stock, which could cause dilution to existing shareholders and to earnings per share. We may have additional tax liabilities. We are subject to income taxes in the United States. Significant judgments are required in determining our provisions for income taxes. In the course of preparing our tax provisions and returns, we must make calculations where the ultimate tax determination may be uncertain. Our tax returns are subject to examination by the Internal Revenue Service (“IRS”) and state tax authorities. There can be no assurance as to the outcome of these examinations. If the ultimate determination of taxes owed is for an amount in excess of amounts previously accrued, our operating results, cash flows, and financial condition could be adversely affected. The market price of our common stock has been and may continue to be subject to wide fluctuations, and this may make it difficult for shareholders to resell the common stock when they want or at prices they find attractive. The market price of our common stock, like that of other technology companies, is volatile and is subject to wide fluctuations in response to a variety of factors, including: • quarterly variations in operating results; • announcements of technological innovations or new products by us or our competitors, • changes in customer relationships, such as the loss of a key customer; • recruitment or departure of key personnel; • corporate actions we may initiate, such as acquisitions, stock sales or repurchases, dividend declarations, or corporate reorganizations; and • other events or factors. Our stock price may also be affected by broader market trends unrelated to our performance. As a result, purchasers of our common stock may be unable at any given time to sell their shares at or above the price they paid for them. Moreover, companies that have experienced volatility in the market price of their stock often are subject to securities class action litigation. If we were the subject of such litigation, it could result in substantial costs and divert management's attention and resources. 14 If we are unable to maintain effective internal controls over financial reporting, investors could lose confidence in the reliability of our financial statements, which could result in a decline in the price of our common stock. As a public company, we are required to enhance and test our financial, internal and management control systems to meet obligations imposed by the Sarbanes-Oxley Act of 2002. Consistent with the Sarbanes-Oxley Act and the rules and regulations of the SEC, management's assessment of our internal controls over financial reporting is required in connection with our filing of our Annual Report on Form 10-K. If we are unable to identify, implement and conclude that we have effective internal controls over financial reporting, investors could lose confidence in the reliability of our financial statements, which could result in a decrease in the value of our common stock. Our assessment of our internal controls over financial reporting may also uncover weaknesses or other issues with these controls that could also result in adverse investor reaction. We must make judgments in the process of preparing our financial statements. We prepare our financial statements in accordance with generally accepted accounting principles and certain critical accounting policies that are relevant to our business. The application of these principles and policies requires us to make significant judgments and estimates. The most significant estimates included in the financial statements pertain to revenue recognition, reserves for doubtful accounts, valuation of acquired assets and assumed liabilities in business combination and valuation allowance for deferred income tax assets. In the event that our judgments and estimates differ from actual results, we may have to change them, which could materially affect our financial position and results of operations. Moreover, accounting standards have been subject to rapid change and evolving interpretations by accounting standards setting organizations over the past few years. The implementation of new accounting standards requires us to interpret and apply them appropriately. If our current interpretations or applications are later found to be incorrect, we may have to restate our financial statements and the price of our stock could decline. ITEM 1B. Unresolved Staff Comments Not applicable.