Our Bond, Inc. 10-K

Item 1A. Risk Factors Investing in our common stock involves a high degree of risk. Before you invest in our common stock, you should carefully consider the following risks, as well as general economic and business risks, and all of the other information contained in this Form 10-K. Any of the following risks could harm our business, operating results and financial condition and cause the trading price of our common stock to decline, which would cause you to lose all or part of your investment. When determining whether to invest, you should also refer to the other information contained in this Form 10-K including our financial statements and the related notes thereto. 10 Risks Related to Our Business and Industry Our technology continues to be developed, and it is unlikely that we will ever develop our technology to a point at which no further development is required. In addition, our technology requires constant updates and maintenance which implies that, even if we do not develop additional functionality, we will need to maintain and update the code in relation to the numerous ecosystem technologies on which the technology runs (Apple and Google phone operating systems, Amazon AWS, etc.). Maintaining the technology requires a multidisciplinary team of engineers. We operate and maintain complex technology that requires significant technical and regulatory expertise to develop, commercialize and update to meet evolving market and regulatory requirements. Our technology also requires constant updates and maintenance which implies that, even if we do not develop additional functionality, we will need to maintain and update the code in relation to the numerous ecosystem technologies on which the technology runs (Apple and Google phone operating systems, Amazon AWS, etc.). Maintaining our technology requires a multidisciplinary team of engineers and is a costly, complex and time-consuming process. We might face difficulties or delays in the update, development and maintenance processes that will result in our inability to timely offer products that satisfy the market. We anticipate making significant investments in to both research and development relating to our products and services and updates to/ maintenance of our current technology, but such investments are inherently speculative and require substantial capital expenditures. Any unforeseen technical obstacles and challenges that we encounter in our research and development process or maintenance of our technology could result in delays in or the abandonment of product commercialization, which may substantially increase development costs to be able to provide products and services which would be competitive and sustainable for our potential customers, and these potential costs may negatively affect our results of operations. If our security measures are breached or unauthorized access to individually identifiable biometric or other personally identifiable information is otherwise obtained, our reputation may be harmed, and we may incur significant liabilities. In the ordinary course of our business, we may collect and store sensitive data, including personally identifiable information (“ PII ”), owned or controlled by ourselves or our customers, and other parties. We communicate sensitive data electronically, and through relationships with multiple third-party vendors and their subcontractors. These applications and data encompass a wide variety of business-critical information, including commercial information, and business and financial information. We face a number of risks relative to protecting this critical information, including loss of access risk, inappropriate use or disclosure, inappropriate modification, and the risk of our being unable to adequately monitor, audit, and modify our controls over our critical information. This risk extends to the third-party vendors and subcontractors we use to manage this sensitive data. As a custodian of this data, we therefore inherit responsibilities related to this data, exposing the Company to potential threats. Data breaches occur at all levels of corporate sophistication (including at companies with significantly greater resources and security measures than our own) and the resulting fallout stemming from these breaches can be costly, time-consuming, and damaging to a company’s reputation. Further, data breaches need not occur from malicious attacks or phishing only. Often, employee carelessness can result in sharing PII with a much wider audience than intended. The consequences of such data breaches could result in fines, litigation expenses, costs of implementing better systems, and the damage of negative publicity, all of which could have a material adverse effect on our business operations and financial condition. Our collection, processing, use and disclosure of individually identifiable biometric or other personally identifiable information is subject to evolving and expanding privacy and security regulations both in the U.S. and internationally. Data privacy remains an evolving landscape, with new regulations coming into effect at both the domestic and international level. For example, various states, such as California, Massachusetts, and others, have implemented similar privacy laws and regulations, such as the California Consumer Privacy Act, which took effect January 1, 2020 (the “ CCPA ”), and creates new data privacy rights for users. The CCPA requires covered businesses that process personal information of California residents to disclose their data collection, use and sharing practices. Further, the CCPA provides California residents with new data privacy rights (including the ability to opt out of certain disclosures of personal data), imposes new operational requirements for covered businesses, provides for civil penalties for violations as well as a private right of action for data breaches and statutory damages (which is expected to increase data breach class action litigation and result in significant exposure to costly legal judgements and settlements). Aspects of the CCPA and its interpretation and enforcement remain uncertain. In addition, the California Privacy Rights Act of 2020 (the “ CPRA ”), which took effect January 1, 2023, expanded the CCPA. The CPRA, among other things, gives California residents the ability to limit use of certain sensitive personal information, further restricts the use of cross-contextual advertising, establishes restrictions on the retention of personal information, expands the types of data breaches subject to the CCPA’s private right of action, provides for increased penalties for CPRA violations concerning California residents under the age of 16, and establishes a new California Privacy Protection Agency to implement and enforce the CPRA. The CCPA and other similar laws could impact our business activities depending on how they are interpreted. New legislation proposed or enacted in various other states will continue to shape the data privacy environment nationally. For example, Virginia recently passed its Consumer Data Protection Act, and Colorado recently passed the Colorado Privacy Act, both of which differ from the CPRA and became effective in 2023. Additional states have since also passed comprehensive privacy laws with additional obligations and requirements on businesses. Certain state laws may be more stringent or broader in scope, or offer greater individual rights, with respect to confidential, sensitive and personal information than federal, international or other state laws, and such laws may differ from each other, which may complicate compliance efforts. 11 Additionally, all U.S. states and the District of Columbia have enacted breach notification laws that may require that we notify customers, employees or regulators in the event of unauthorized access to or disclosure of personal or confidential information experienced by us or our service providers. These laws are not consistent, and compliance in the event of a widespread data breach is difficult and may be costly. Moreover, states have been frequently amending existing laws, requiring attention to changing regulatory requirements. We also may be contractually required to notify customers of a security breach. Although we may have contractual protections with our service providers, any actual or perceived security breach could harm our reputation and brand, expose us to potential liability or require us to expend significant resources on data security and in responding to any such actual or perceived breach. Any contractual protections we may have from our service providers may not be sufficient to adequately protect us from any such liabilities and losses, and we may be unable to enforce any such contractual protections. In addition to government regulation, privacy advocates and industry groups have and may in the future propose self-regulatory standards from time to time. These and other industry standards may legally or contractually apply to us, or we may elect to comply with such standards. In the European Union, the General Data Protection Regulation of 2018 (the “ GDPR ”) significantly expanded the rules on using personal data and increased the risks of processing personal data. Some of the new requirements include: ● accountability and transparency requirements, which require those who control data to demonstrate and record compliance and provide certain detailed information to users regarding the ways in which data is used and processed; ● enhanced data consent requirements, which includes “explicit” consent with regard to information the regulation classifies as sensitive data; ● obligations to consider data privacy as new products, services and systems are developed, including ways to limit accessibility of data as well as the amount of information collected, processed, and stored; ● constraints on using data to profile users; ● obligations to provide users with personal data in a usable format on request and to erase personal data in certain circumstances; and ● reporting to data protection authorities of potential breaches without undue delay (72 hours, where feasible). Other foreign jurisdictions in which the Company operates, or in which it has services available, have implemented, or are considering implementing, data privacy laws and regulations, many of which are similar to the GDPR. Although we attempt to stay current with such developments in the jurisdictions in which we or our subsidiaries operate, our policies and procedures for compliance with data privacy laws and regulations, may not be up-to-date or implemented correctly or our management, employees or agents. thereby not complying with current procedures. Moreover, our third-party agents in foreign jurisdictions may likewise not implement policies and procedures that are the most current for their jurisdiction, thereby creating a risk factor for us. Failure to comply with data privacy laws and regulations may have serious financial consequences. We could face significant sanctions, statutory damages, and damage to our reputation resulting in a material adverse effect on our results of operations, business, or financial condition. 12 We are subject to government regulation related to security agencies, and our failure or inability to comply with these regulations could materially restrict our operations and subject us to substantial penalties. We are subject to a number of state occupational licensing laws that apply to private security officers and security agencies. Most states have laws requiring qualification, training and registration of security officers. Any liability we may have from our failure to comply with these regulations may materially affect our business by restricting our operations and subjecting us to substantial penalties. In addition, our current and future operations may be subject to additional regulation as a result of, among other factors, new statutes and regulations and changes in the manner in which existing statutes and regulations are or may be interpreted. Our success is highly dependent on our ability to attract and retain highly skilled executive officers and employees globally. To succeed, we must recruit, retain, manage and motivate qualified technical and management personnel, and we face significant competition for experienced personnel. We are highly dependent on the principal members of our management. If we do not succeed in attracting and retaining qualified personnel, particularly at the management level, it could adversely affect our ability to execute our business plan and harm our operating results. In particular, the loss of one or more of our executive officers could be detrimental to us if we cannot recruit suitable replacements in a timely manner. We could in the future have difficulty attracting experienced personnel to our company and may be required to expend significant financial resources in our employee recruitment and retention efforts. Many of the other technology companies that we compete against for qualified personnel have greater financial and other resources, different risk profiles and a longer operating history than we do. They also may provide more diverse opportunities and better prospects for career advancement. Some of these characteristics may be more appealing to high-quality candidates than what we have to offer. If we are unable to continue to attract and retain high-quality personnel, the rate and success at which we develop and commercialize our products and services could be limited and our potential for successfully growing our business could be harmed. Additionally, we hire various employees, contractors and advisors outside of the United States which presents several risks for our operations. These include compliance challenges with foreign labor and tax laws, potential misclassification of workers and complications around data privacy and international IP ownership. Differences in employment regulations and enforcement across jurisdictions can expose the company to legal and financial liabilities. Moreover, cross-border communication and management can create operational inefficiencies or delays. Privacy and data security laws and regulations could require us to make changes to our business, impose additional costs on us and reduce the demand for our software solutions. Our business model contemplates that we will transmit a significant amount of PII through our platform . Privacy and data security have become significant issues in the United States and in other jurisdictions where we may offer our video surveillance solutions. The regulatory framework relating to privacy and data security issues worldwide is evolving rapidly and is likely to remain uncertain for the foreseeable future. Federal, state and foreign government bodies and agencies have in the past adopted, or may in the future adopt, laws and regulations regarding the collection, use, processing, storage and disclosure of personal or identifying information obtained from customers and other individuals. In addition to government regulation, privacy advocates and industry groups may propose various self-regulatory standards that may legally or contractually apply to our business. Because the interpretation and application of many privacy and data security laws, regulations and applicable industry standards are uncertain, it is possible that these laws, regulations and standards may be interpreted and applied in a manner inconsistent with our existing privacy and data management practices. As we expand into new jurisdictions or verticals, we will need to understand and comply with various new requirements applicable in those jurisdictions or verticals. To the extent applicable to our business or the businesses of our customers, these laws, regulations and industry standards could have negative effects on our business, including by increasing our costs and operating expenses, and delaying or impeding our deployment of new core products or services. Compliance with these laws, regulations and industry standards requires significant management time and attention, and failure to comply could result in negative publicity, subject us to fines or penalties or result in demands that we modify or cease existing business practices. In addition, the costs of compliance with, and other burdens imposed by, such laws, regulations and industry standards may adversely affect our customers’ ability or desire to collect, use, process and store PII using our products and services, which could reduce overall demand for them. Even the perception of privacy and data security concerns, whether or not valid, may inhibit market acceptance of our products and services in certain verticals. In particular, some regulatory bodies have recently become more interested in technologies that we employ including artificial intelligence and face recognition. Any of these outcomes could adversely affect our business and operating results. 13 If our products and services do not achieve broad acceptance both domestically and internationally, we will not be able to achieve our anticipated level of growth. Our revenues are primarily derived from a cloud-based services model for our products and technology. We also receive services revenue from offering physical world services such as drone services, security guard services, Executive Protection (bodyguard) services, security assessments, cyber threat evaluations and similar services. We cannot accurately predict the future growth rate or the size of the market for our products and services. The expansion of the market for our solutions depends on a number of factors, such as: ● the cost, performance and reliability of our products and services and the solutions offered by our competitors; ● customers’ perceptions regarding the benefits of cloud-based video surveillance solutions; ● public perceptions regarding the intrusiveness of Bond’s Preventative Personal Security services. ● public perceptions regarding the confidentiality of private information; ● proposed or enacted legislation related to privacy of information; ● customers’ satisfaction regarding our services; and ● marketing efforts and publicity regarding our solutions. Even if our products and services gain wide market acceptance, our solutions may not adequately address market requirements and may not continue to gain market acceptance. If cloud-based personal security solutions generally or our solutions specifically do not gain wide market acceptance, we may not be able to achieve our anticipated level of growth and our revenues and results of operations would suffer. We rely on other companies to provide certain hardware and software solutions for our products. We depend on certain third-party suppliers and subcontractors to meet our contractual obligations to our customers and conduct our business. While we are not dependent on any one supplier for any of our hardware or software solutions, our ability to meet our obligations to our customers may be adversely affected if one or more suppliers or subcontractors does not provide the agreed-upon supplies or perform the agreed-upon services in compliance with customer requirements and in a timely and cost-effective manner. Likewise, the quality of our products and services may be adversely impacted if companies to whom we delegate manufacture of major components or subsystems for our products, or from whom we acquire such items, do not provide major components and subsystems which meet required specifications and perform to our and our customers’ expectations. If we encounter problems with one or more of these parties and they fail to perform to expectations, it could have a material adverse effect on our business operations and financial condition. We depend on AWS servers to operate our Bond Preventative Personal Security Platform with online features and our online services. If we were to lose server functionality for any reason, our business may be negatively impacted. Our business relies on the continuous operation of servers, most of which are owned and operated by AWS and other third parties. Although we strive to maintain more than sufficient server capacity, and provide for active redundancy in the event of limited hardware failure, any broad-based catastrophic server malfunction, a significant service-disrupting attack or intrusion by hackers that circumvents security measures, a failure of disaster recovery service or the failure of a company on which we are relying for server capacity to provide that capacity for whatever reason could degrade or interrupt the functionality of our platform, and could prevent the operation of our platform for both in-person and online experiences. We also rely on networks operated by third parties to support content on our Bond Preventative Personal Security Platform, including networks owned and operated by other software publishers. An extended interruption to any of these services could adversely affect the use of our platform, which would have a negative impact on our business. Further, insufficient server capacity could also negatively impact our business. Conversely, if we overestimate the amount of server capacity required by our business, we may incur additional operating costs. 14 Our technology platform utilizes numerous third-party technologies, systems and subsystems (like Twilio, Bandwidth, ChatGPT etc.). Any disruption to such systems and subsystems could interrupt our business, impact our ability to provide service, harm our reputation, cause us to lose customers and end-users, cause end-users harm (at the hands of perpetrators) that we would hypothetically not be able to detect and address in a timely manner, which could materially and adversely affect our business, financial condition and results of operations . Our business partially depends on services provided by, and relationships with, various third parties, including Twilio, Bandwidth, cloud hosting, app stores provided by Google Play and Apple, and broadband providers, among others. To this end, when our service providers, cloud hosts and other vendors experience outages, our services will be negatively impacted and alternative resources will not be immediately available. In addition, certain third-party software we use in our operations is currently publicly available free of charge. If the owner of any such software decides to charge users or no longer makes the software publicly available, we may need to incur significant costs to obtain licensing, find replacement software or develop it on our own. If we are unable to obtain licensing, find or develop replacement software at a reasonable cost, or at all, our business and operations may be adversely affected. We exercise no control over the third-party vendors that we rely upon for our overall technology platform operations, cloud hosting, broadband and software services. If such third parties increase their prices, fail to provide their services effectively, terminate their service or agreements or discontinue their relationships with us, we could suffer service interruptions, reduced revenues or increased costs, any of which may have a material adverse effect on our business, financial condition and results of operations. Additionally, we use open-source AI products and services such as ChatGPT that carry several risks that require careful management. Security vulnerabilities may be introduced if the code is not regularly updated or properly reviewed. Since open-source projects are often community-maintained, there may be limited or no formal support when issues arise. Licensing terms can also be unclear or restrictive, potentially leading to legal exposure if not properly understood or followed. Additionally, there may be challenges in ensuring compliance with data protection regulations, especially if the AI models are trained on publicly sourced or unverified datasets. Quality, reliability, and long-term maintenance can also vary significantly across different open-source projects. Cost of insurance is a significant part of our expenses and it is subject to market fluctuations, as well as to fluctuations due to our track record. This price can therefore increase unexpectedly and our insurance may not adequately cover our future operating risk. We have insurance to protect our assets, future operations and employees. While we believe our insurance coverage addresses all material risks to which we may be exposed and is adequate and customary according to our current projections for our future operations, such insurance is subject to coverage limits and exclusions and may not be available for the risks and hazards to which we may be exposed. In addition, no assurance can be given that such insurance will be adequate to cover our liabilities or will be generally available in the future or, if available, that premiums will be commercially justifiable. If we were to incur substantial liability and such damages were not covered by insurance or were in excess of policy limits, or if we were to incur such liability at a time when we are not able to obtain liability insurance, our business, results of operations and financial condition could be materially adversely affected. Additionally, the cost of insurance coverage may increase upon the commencement of our operations, such increase may have a negative impact on our business and financial position. Our lack of commercial operating history in an emerging area may make it difficult to obtain insurance policies at competitive rates. Insurance that is otherwise readily available, such as workers’ compensation, general liability, title insurance and directors’ and officers’ insurance, is more difficult for us to find and more expensive because of our involvement in emerging areas. There are no guarantees that we will be able to find insurance coverage at otherwise competitive, or even economically viable terms. Our online Bond Preventative Personal Security Platform and services offered through our platform may contain defects. Our online Bond Preventative Personal Security Platform and the services offered through our platform are extremely complex and are difficult to develop and distribute. We have quality controls in place to detect defects in our platform before updates are released. Nonetheless, these quality controls are subject to human error, overriding, and reasonable resource or technical constraints. Further, we have undertaken independent third-party testing, verification or analysis of our data security and privacy controls. Therefore, our platform and quality controls and preventative measures we have implemented may not be effective in detecting all defects in our platform. In the event a significant defect in our platform and associated systems and controls is realized, we could be required to offer refunds, suspend the availability of our services, or expend significant resources to cure the defect, each of which could significantly harm our business and operating results. 15 We rely on AWS to deliver our offerings to users on our platform, and any disruption of or interference with our use of AWS could adversely affect our business, financial condition, results of operations and prospects. We currently host our Bond Preventative Personal Security Platform and support our operations using Amazon Web Services, or AWS, a third-party provider of cloud infrastructure services, along with other service providers traditionally used by AWS. We do not, and will not, have control over the operations of the facilities or infrastructure of the third-party service providers that we use. Such third parties’ facilities are vulnerable to damage or interruption from natural disasters, cybersecurity attacks, terrorist attacks, power outages and similar events or acts of misconduct. Our platform’s continuing and uninterrupted performance will be critical to our success. We have experienced, and we expect that in the future we will experience interruptions, delays, and outages in service and availability from these third-party service providers from time to time due to a variety of factors, including infrastructure changes, human or software errors, website hosting disruptions and capacity constraints. In addition, any changes in these third parties’ service levels may adversely affect our ability to meet the requirements of our users. Since our platform’s continuing and uninterrupted performance is critical to our success, sustained or repeated system failures would reduce the attractiveness of our offerings. It may become increasingly difficult to maintain and improve our performance, especially during peak usage times, as we expand and the usage of our offerings increases. Any negative publicity arising from these disruptions could harm our reputation and brand and may adversely affect the usage of our offerings. Our commercial agreement with AWS will remain in effect until terminated by AWS or us. Either party may terminate this Agreement for cause if the other party is in material breach of this Agreement and the material breach remains uncured for a period of 30 days from receipt of notice by the other party. No later than the Termination Date, we must close our account. AWS may also terminate this Agreement immediately upon notice (A) for cause if AWS has the right to suspend under certain circumstances as set forth in the AWS customer agreement, (B) if AWS’ relationship with a third-party partner who provides software or other technology AWS uses to provide the Service Offerings expires, terminates or requires us to change the way AWS provides the software or other technology as part of the Services, or (C) in order to comply with the law or requests of governmental entities. In the event that our agreement with AWS is terminated or we add additional cloud infrastructure service providers, we may experience significant costs or downtime in connection with the transfer to, or the addition of, new cloud infrastructure service providers. Although alternative providers could host our platform on a substantially similar basis to AWS, transitioning the cloud infrastructure currently hosted by AWS to alternative providers could potentially be disruptive and we could incur significant one-time costs. Any of the above circumstances or events may harm our reputation and brand, reduce the availability or usage of our platform, lead to a significant loss of revenue, increase our costs and impair our ability to attract new users, any of which could adversely affect our business, financial condition and results of operations. Certain acquisitions could adversely affect our financial results. We may pursue strategic acquisitions as part of our business strategy. There is no assurance that we will be able to find suitable acquisition candidates or be able to complete acquisitions on favorable terms, if at all. We may also discover liabilities or deficiencies associated with any companies acquired that were not identified in advance, which may result in unanticipated costs. The effectiveness of our due diligence review and ability to evaluate the results of such due diligence may depend upon the accuracy and completeness of statements and disclosures made or actions taken by the target companies or their representatives. As a result, we may not be able to accurately forecast the financial impact of an acquisition transaction, including tax and accounting charges. In addition, we may not be able to successfully integrate acquired businesses and may incur significant costs to integrate and support acquired companies. Any of these factors could adversely affect our financial results. 16 Our business may be adversely impacted by additional leverage in connection with acquisitions. As stated above, we may pursue strategic acquisitions as part of our business strategy. If we are able to identify acquisition candidates, such acquisitions may be financed with a substantial amount of additional indebtedness. Although the use of leverage presents opportunities to increase our profitability, it has the effect of potentially increasing losses as well. If income and appreciation from acquisitions acquired through debt are less than the cost of the debt, the total return will decrease. Accordingly, any event which adversely affects the value of an acquisition will be magnified to the extent we are leveraged and we could experience losses substantially greater than if we did not use leverage. Increased indebtedness could also make it more difficult for us to satisfy our obligations with respect to any other debt agreements, increase our vulnerability to general adverse economic and industry conditions and require that a greater portion of our cash flow be used to pay indebtedness, which would reduce the availability of cash available for other purposes, and limit our flexibility in planning for, or reacting to, changes in our business and our industry. Our failure to comply with any covenants under such indebtedness could result in an event of default that, if not cured or waived, could result in an acceleration of repayment of other existing indebtedness, which in turn could materially and adversely affect our business and results of operations. We will incur increased costs as a result of operating as a public company, and our management will be required to devote substantial time to new compliance initiatives. We will be subject to financial reporting and other requirements for which our accounting and other management systems and resources may not be adequately prepared. As a public company, and particularly after we are no longer an emerging growth company, we will incur significant legal, accounting and other expenses that we did not incur as a private company. In addition, the federal securities laws, including the Sarbanes-Oxley Act of 2002 (the “ Sarbanes-Oxley Act ”), the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010, and rules and regulations subsequently implemented by the SEC and Nasdaq have imposed various requirements on public companies, including requirements to file annual, quarterly, and event driven reports with respect to their business and financial condition, and to establish and maintain effective disclosure and financial controls and corporate governance practices. These rules and regulations will increase our legal and financial compliance costs, make certain activities more time-consuming and costly, and require our management and other personnel to devote a substantial amount of time to compliance initiatives. We also expect that these rules and regulations may make it more difficult and more expensive for us to obtain director and officer liability insurance. Pursuant to Section 404 of the Sarbanes-Oxley Act, we will be required to furnish a report by our management on our internal control over financial reporting, including an attestation report on internal control over financial reporting issued by our independent registered public accounting firm, beginning with the first full year after we become a public company. However, while we remain an emerging growth company, we will not be required to include an attestation report on internal control over financial reporting issued by our independent registered public accounting firm. To achieve compliance with Section 404 of the Sarbanes-Oxley Act, we will be engaged in a process to document and evaluate our internal control over financial reporting, which is both costly and challenging. We will need to continue to dedicate internal resources, potentially engage outside consultants, adopt a detailed work plan to assess and document the adequacy of internal control over financial reporting, continue steps to improve control processes as appropriate, validate through testing that controls are functioning as documented and implement a continuous reporting and improvement process for internal control over financial reporting. Despite our efforts, there is a risk that neither we, nor our independent registered public accounting firm will be able to conclude within the prescribed time frame that our internal control over financial reporting is effective as required by Section 404 of the Sarbanes-Oxley Act. This could result in an adverse reaction in the financial markets due to a loss of confidence in the reliability of our financial statements. We could also become subject to investigations by the SEC or other regulatory authorities, which could require additional financial and management resources. 17 As a public company, we will also be required to maintain disclosure controls and procedures. Disclosure controls and procedures means our controls and other procedures that are designed to ensure that information required to be disclosed by us in the reports that we file or submit under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the rules and forms of the SEC. We do not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent or detect all errors and all fraud. We believe a control system, no matter how well-designed and operated, can provide only reasonable, not absolute, assurance that the control system’s objectives will be met. Due to the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud, if any, have been detected. The design of any system of controls is based in part on certain assumptions about the likelihood of future events, and any design may not succeed in achieving its stated goals under all potential future conditions. Over time, controls may become inadequate because of changes in conditions or deterioration in the degree of compliance with policies or procedures. Accordingly, because of the inherent limitations in our control system, misstatements due to error or fraud may occur and not be detected. Recent and potential tariffs imposed by the U.S. government or a global trade war could increase the cost of our services, which could have a material adverse effect on our business, financial condition and results of operations. The U.S. government has and continues to make significant changes in U.S. trade policy and has taken certain actions that could negatively impact U.S. trade, including imposing tariffs on certain goods imported into the United States. There is also a concern that the imposition of additional tariffs by the United States could result in the adoption of tariffs by other countries as well, leading to a global trade war, which may adversely affect the global economy and businesses of our clients, which, in turn, would also adversely affect demand for our services. A downturn in the global economy or the economies of countries in which we or our clients operate as a result of any trade dispute could adversely affect our business, financial condition and results of operations. Although we do not directly engage in international trade business, our customers may be affected by the imposition of barriers to trade or escalation of trade disputes. If we fail to manage these dynamics successfully, gross margins and profitability could be adversely affected. As of the date of this prospectus, tariffs have not had a material impact on our business, but increased tariffs or trade restrictions implemented by the United States or other countries in connection with a global trade war could have a material adverse effect on our business, financial condition and results of operations. We cannot predict what actions may ultimately be taken with respect to tariffs or trade relations between the United States and other countries, which of our customers may be subject to such actions, or what actions may be taken by the other countries in retaliation. Intellectual property rights do not necessarily address all potential threats to our competitive advantage. The degree of future protection afforded by our intellectual property rights is uncertain because intellectual property rights have limitations and may not adequately protect our business or permit us to maintain our competitive advantage. For example: ● others may be able to develop products and services that are similar to our product candidates but that are not covered by the claims of the patents that we own or license; ● we or our licensors or future collaborators might not have been the first to make the inventions covered by the issued patents or pending patent applications that we own or license; ● we or our licensors or future collaborators might not have been the first to file patent applications covering certain of our inventions; ● others may independently develop similar or alternative technologies or duplicate any of our technologies without infringing our intellectual property rights; ● it is possible that our licensors’ pending patent applications will not lead to issued patents; ● issued patents that we own or license may be held invalid or unenforceable, as a result of legal challenges by our competitors; ● our competitors might conduct research and development activities in countries where we do not have patent rights and then use the information learned from such activities to develop competitive products for sale in our major commercial markets; ● we may not develop additional proprietary technologies that are patentable; ● we cannot predict the scope of protection of any patent issuing based on our patent applications, including whether the patent applications that we own or in-license will result in issued patents with claims that cover our product candidates or uses thereof in the United States or in other foreign countries; ● the claims of any patent issuing based on our patent applications may not provide protection against competitors or any competitive advantages, or may be challenged by third parties; 18 ● if enforced, a court may not hold that our patents are valid, enforceable and infringed; ● we may need to initiate litigation or administrative proceedings to enforce and/or defend our patent rights which will be costly whether we win or lose; ● we may choose not to file a patent application in order to maintain certain trade secrets or know-how, and a third party may subsequently file a patent application and obtain an issued patent covering such intellectual property; ● we may fail to adequately protect and police our trademarks and trade secrets; and ● the patents of others may have an adverse effect on our business, including if others obtain patents claiming subject matter similar to or improving that covered by our patents and patent applications. Should any of these events occur, they could significantly harm our business, results of operations and prospects. Intellectual property litigation may lead to unfavorable publicity that harms our reputation and causes the market price of our common shares to decline. During the course of any intellectual property litigation, there could be public announcements of the initiation of the litigation as well as results of hearings, rulings on motions, and other interim proceedings in the litigation. If securities analysts or investors regard these announcements as negative, the perceived value of our existing product candidates, programs or intellectual property could be diminished. Such announcements could also harm our reputation or the market for our future product candidates, which could have a material adverse effect on our business. If we are unable to protect the confidentiality of our trade secrets, our business and competitive position would be harmed. In addition to the protection afforded by other types of intellectual property, we rely on the protection of our trade secrets, including unpatented know-how, technology and other proprietary information to maintain our competitive position. Although we have taken steps to protect our trade secrets and unpatented know-how, including entering into confidentiality agreements with third parties (including, but not limited to, contractors, collaborators, and outside scientific advisors), and confidential information and inventions agreements with employees, consultants, licensors and advisors, we cannot provide any assurances that all such agreements have been duly executed, and any of these parties may breach the agreements and disclose our proprietary information, including our trade secrets, and we may not be able to obtain adequate remedies for such breaches. We require our employees to enter into written confidentiality agreements that assign to us any inventions, developments, creative works and useful ideas of any description that are conceived of, reduced to practice or developed in the course of their employment. In addition, we require our third-party contractors to enter into a written non-disclosure agreement that requires the third party to not disclose certain of our confidential information in any manner or for any purpose other than as necessary and/or appropriate in connection with their obligations for a defined period of time, subject to certain exclusions. Enforcing a claim that a party illegally disclosed or misappropriated a trade secret is difficult, expensive and time-consuming, and the outcome is unpredictable. In addition, some courts inside and outside the United States are less willing or unwilling to protect trade secrets. We may need to share our proprietary information, including trade secrets, with our current and future business partners, collaborators, contractors and others located in countries at heightened risk of theft of trade secrets, including through direct intrusion by private parties or foreign actors, and those affiliated with or controlled by state actors. Moreover, third parties may still obtain this information or may come upon this or similar information independently, and we would have no right to prevent them from using that technology or information to compete with us. If any of these events occurs or if we otherwise lose protection for our trade secrets, the value of this information may be greatly reduced and our competitive position would be harmed. If we or our licensors do not apply for patent protection prior to such publication or if we cannot otherwise maintain the confidentiality of our proprietary technology and other confidential information, then our ability to obtain patent protection or to protect our trade secret information may be jeopardized. We may be subject to claims that our employees have wrongfully used or disclosed alleged confidential information or trade secrets of their former employers. 19 If our efforts to build a strong brand identity and maintain a high level of user satisfaction and loyalty are unsuccessful, we may not be able to attract or retain users, and our operating results may be adversely affected. We must continue to build and maintain a strong brand identity. User awareness of, and the perceived value of, our brand will depend largely on the success of our marketing efforts and our ability to provide consistent, high-quality user experience. Failure to provide our users with high-quality reservation and experiences for any reason could substantially harm our reputation and adversely affect our efforts to develop as a trusted brand. To promote our brand, we have incurred and expect to continue to incur substantial expense related to advertising and other marketing efforts, but we cannot be sure that this investment will be profitable. From time to time, our users express dissatisfaction with our service levels. To the extent dissatisfaction with our service is widespread or not adequately addressed, our reputation could be harmed, and our efforts to develop the company’s name as a trusted brand would be adversely impacted. If our efforts to promote and maintain our brand are unsuccessful, our operating results and our ability to attract and retain users may be adversely affected. Risks Related to our Management and Control Persons We are a “controlled company” within the meaning of the Nasdaq Stock Market Rules because our insiders beneficially own more than 50% of the voting power of our outstanding voting securities. Our founder and Chief Executive Officer, Doron Kempel, together with certain management officers collectively beneficially own approximately 95.76% of the voting power of our outstanding voting securities and we are a “controlled company” within the meaning of the listing rules of The Nasdaq Stock Market LLC. We may rely on certain exemptions from corporate governance rules, including an exemption from the rule that a majority of our board of directors must be independent directors. Although we currently do not intend to rely on the “controlled company” exemption under the Nasdaq listing rules, we could elect to rely on this exemption in the future. In the event that we elected to rely on the “controlled company” exemption, a majority of the members of our board of directors might not be independent directors, and our nominating and corporate governance and compensation committees might not consist entirely of independent directors. Our status as a controlled company could cause our shares of common stock to be less attractive to certain investors or otherwise harm our trading price. As a result, you would not have the same protection afforded to shareholders of companies that are subject to these corporate governance requirements. Additionally, investors may be prevented from effecting matters involving our Company, including: ● the composition of our Board and, through it, any determination with respect to our business direction and policies, including the appointment and removal of officers; ● any determination with respect to mergers or other business combinations; ● our acquisition or disposition of assets; and ● our corporate financing activities. Furthermore, this concentration of voting power could have the effect of delaying, deterring, or preventing a change of control or other business combination that might otherwise be beneficial to our stockholders. This significant concentration of share ownership may also adversely affect the trading price of our common stock because investors may perceive disadvantages in owning stock in a Company that is controlled by a small number of stockholders. Although our Company does not intend to utilize the controlled company exemptions to the Nasdaq corporate governance listing standards, if we are eligible to utilize the controlled company exemptions in the future, we may choose to do so. In such instance we would be exempted from, among other things, the requirements to have a board with a majority of independent members and the requirement that we have a nominating and governance committee and compensation committee that are composed entirely of independent directors and have written charters addressing the respective committee’s purpose and responsibilities. 20 Risks Related to Our Financial Condition and Capital Requirements We will require substantial additional capital to finance our operations. If we are unable to raise such capital when needed, or on acceptable terms, we may be forced to delay, reduce and/or eliminate one or more of our research and drug development programs or future commercialization efforts. Our operations have consumed substantial amounts of cash since inception, and we expect our expenses to increase in connection with our ongoing activities. The Company will continue to invest in building out its sales and marketing teams as well as maintain a robust engineering and development team. General and administrative expenses will increase as the cost of maintaining a public company is significantly higher than maintaining a privately held company. Accordingly, we will need to obtain substantial additional funding in order to maintain our continuing operations. As of December 31, 2025, we had approximately $599,000 of cash on hand and a working capital deficit of approximately $4,062,000, and our anticipated operating requirements for the next twelve months, assuming the maintenance of our current operations, exceed our available capital resources. Our estimate as to how long we expect our existing capital to be able to continue to fund our operations is based on assumptions that may prove to be wrong, and we could use our available capital resources sooner than we currently expect. Changing circumstances, some of which may be beyond our control, could cause us to consume capital significantly faster than we currently anticipate, and we may need to seek additional funds sooner than planned. Our future funding requirements will depend on many factors, including, but not limited to: ● the initiation, progress, timeline, cost and results of our products; ● the effect of competing technological and market developments; ● the payment of licensing fees, potential royalty payments and potential milestone payments; ● the cost of general operating expenses; and ● the costs of operating as a public company. Advancing the development of our product will require a significant amount of capital. In order to fund all of the activities that are necessary to complete the development of our product, we will be required to obtain further funding through equity offerings, debt financings, collaborations and licensing arrangements or other sources, which may dilute our stockholders or restrict our operating activities. Adequate additional funding may not be available to us on acceptable terms, or at all. Our failure to raise capital as and when needed or on acceptable terms would have a negative impact on our financial condition and our ability to pursue our business strategy, and we may have to delay, reduce the scope of, suspend or eliminate one or more of our research-stage programs, clinical trials or future commercialization efforts, grant rights to develop and market product candidates that we would otherwise prefer to develop and market ourselves, obtain funds through arrangement with collaborators on terms unfavorable to us or pursue merger or acquisition strategies, all of which could adversely affect the holdings or the rights of our stockholders. Our ability to sell a substantial amount of common stock in the future under the Equity Line SPA may pose a risk of significant dilution to our existing stockholders. Under the Equity Line SPA, subject to the limits and conditions of that agreement, we will have the contractual ability to sell up to $300 million worth of our common stock to Ascent over a three-year period. Any shares of common stock we chose to sell under the Equity Line SPA will generally be priced at 96% of the volume-weighted-average-price (“ WVAP ”) for our common stock over the 10 trading days prior to each closing date, subject to downward adjustment based on 96% of the VWAP for our common stock over the 10 trading days subsequent to each closing date. If our stock price were to decrease over time, the price per share we would be able to realize for sales of our common stock under the Equity Line SPA would correspondingly decrease. In the event of a sustained decline in our stock trading price, we may be required to issue a substantial number of additional shares in order to access each additional tranche of funding under the Equity Line SPA, resulting in our existing shareholders experiencing greater dilution upon each additional sale of shares under the equity line facility. Should we decide to issue a significant number of shares under the Equity Line SPA future, particularly at a time when our share price is already declining, a substantial decrease in our share price is likely to result. 21 We have a limited operating history, which may make it difficult for you to evaluate our current business and predict our future success and viability. Our Company was incorporated under the laws of the State of Delaware on April 11, 2017 as a Delaware limited liability company, converted to a Delaware corporation on June 29, 2018 as TG-17, Inc and subsequently, submitted the necessary filings to re-domicile as a Nevada corporation on August 27, 2025 under the name TG-17, Inc. dba Bond. In February 2026, the Company changed its name to Our Bond Inc. The likelihood of our creation of a successful business must be considered in light of the problems, expenses, difficulties, complications, and delays frequently encountered in connection with the growth of a business, operation in a competitive industry, and the continued development of our technology and products. We anticipate that our operating expenses will increase for the near future, and there is no assurance that we will be profitable in the near future. You should consider our business, operations, and prospects in light of the risks, expenses and challenges faced as an emerging growth company. We have historically operated at a loss, which has resulted in an accumulated deficit. For the fiscal years ended December 31, 2025 and December 31, 2024, we incurred losses of approximately $10,549,000 and approximately $11,017,000, respectively. There can be no assurance that we will ever achieve profitability. Even if we do, there can be no assurance that we will be able to maintain or increase profitability on a quarterly or annual basis. Failure to do so would continue to have a material adverse effect on our accumulated deficit, would affect our cash flows, would affect our efforts to raise capital and is likely to result in a decline in the value of your investment in our Company. We anticipate sustaining operating losses for the foreseeable future. It is anticipated that we will sustain operating losses for the foreseeable future as we expand our team, continue with research and development, and strive to gain customers and gain market share in our industry. Our ability to become profitable depends on our ability to expand our customer base. There can be no assurance that this will occur. Unanticipated problems and expenses are often encountered in offering new products which may impact whether the Company is successful. Furthermore, we may encounter substantial delays and unexpected expenses related to development, technological changes, marketing, regulatory requirements and changes to such requirements or other unforeseen difficulties. There can be no assurance that we will ever become profitable. If the Company sustains losses over an extended period of time, it may be unable to continue in business. Raising additional capital may cause dilution to our existing stockholders. We may seek additional capital through a variety of means, including through equity, debt financings, or other sources. We may seek additional capital due to favorable market conditions or strategic considerations even if we believe we have sufficient funds for our current or future operating plans. To the extent that we raise additional capital through the sale of equity or convertible debt securities, your ownership interest will be diluted, and the terms may include liquidation or other preferences and anti-dilution protections that adversely affect your rights as a stockholder. Such financing may also result in the imposition of debt covenants, increased fixed payment obligations or other restrictions that may adversely affect our ability to conduct our business. If we raise additional funds through collaborations, strategic alliances or marketing, distribution or licensing arrangements with third parties, we may have to relinquish valuable rights to our technologies, future revenue streams, research programs or product candidates, or grant licenses on terms that are not favorable to us. We may not be able to continue as a going concern without additional financing, and if such financing is not available to us or is not available to us on acceptable terms, we may be forced to cease operations. We have a limited operating history and have incurred recurring losses from operations. For the fiscal years ended December 31, 2025 and 2024, we incurred a net loss of approximately $10,549,000 and approximately $11,017,000, respectively. Our failure to generate sufficient revenues, effectively manage expenses or raise additional capital could adversely affect our ability to achieve our intended business objectives. These matters, among others, raise substantial doubt about our ability to continue as a going concern. The Company has primarily funded its operations through a combination of equity financing, venture debt, five series of convertible notes and internal cash flows, depending on the stage of its development and strategic goals. In its early stages, the Company relied on seed capital from its founder, followed by capital rounds and venture debt to support its growth and expansion. More recently, operational cash flows have become a more significant source of funding, reducing reliance on external financing. 22 We have a substantial customer concentration, with a limited number of customers accounting for a substantial portion of our revenue. We derive a significant portion of our revenues from a few major customers. For the year ended December 31, 2025, two customers accounted for 51.20% and 14.34% of our total revenue. There are inherent risks whenever a large percentage of total revenue is derived from a limited number of customers. It is not possible for us to predict the future level of demand for our products and services that will be generated by these customers. If we experience declining or delayed sales from these customers due to market, economic or competitive conditions, we could be pressured to reduce our prices or our customers could decrease the purchase quantity of our products and services, which could have an adverse effect on our margins and financial position and could negatively affect our revenues and results of operations. If any one of our largest customers terminates the purchase of our products and services, such termination would materially negatively affect our revenues, results of operations and financial condition. Moreover, our reliance on a limited number of customers may limit our bargaining power and ability to negotiate favorable terms in future contracts. If we are unable to diversify our customer base and reduce our dependence on a small number of customers, our business, operating results, and financial condition could be adversely affected by any negative developments involving these key customers. To mitigate these risks, we are actively seeking to expand our customer base and reduce our reliance on a few significant customers. However, there can be no assurance that we will be successful in these efforts, and our financial performance may continue to be significantly influenced by our key customers. Because many of our expenses are fixed, we may be unable to limit our losses if we fail to achieve our forecasted revenue. We must invest significantly in Command Centers and engineering staff and personal security agents to continue our operations. This build-up before actual reservations exposes us to significant up-front fixed costs. If market demand for our services does not increase as quickly as we have anticipated, or if there is a rapid and unexpected decline in demand for our services, we may be unable to offset these fixed costs and to achieve economies of scale, and our operating results may be adversely affected because of high operating expenses, reduced margins, underutilization of capacity and asset impairment charges. Risks Related to Ownership of Our Common Stock Future sales of Common Stock by our existing stockholders could cause our share price to decline. We recently conducted a direct listing of our Common Stock, through which certain shares of our Common Stock were registered for resale under a registration statement. In addition, a substantial majority of the holders of our outstanding capital stock may be eligible to publicly resell their shares pursuant to Rule 144. There can be no assurance that existing stockholders will not seek to sell a significant portion of their shares of Common Stock, resulting in an oversupply of our Common Stock on Nasdaq which could significantly depress the public price of our Common Stock and/or result in significant volatility. You may be diluted by future issuances of preferred stock or additional Common Stock in connection with our incentive plans, acquisitions or otherwise; future sales of such shares in the public market, or the expectations that such sales may occur, could lower our stock price. Our articles of incorporation authorize us to issue shares of Common Stock, preferred stock, and options, rights, warrants and appreciation rights relating to our Common Stock for the consideration and on the terms and conditions established by our board of directors in its sole discretion. We could issue a significant number of shares of Common Stock in the future in connection with investments or acquisitions. Any of these issuances could dilute our existing stockholders, and such dilution could be significant. Moreover, such dilution could have a material adverse effect on the market price for the shares of our Common Stock. 23 The future issuance of shares of preferred stock with voting rights may adversely affect the voting power of the holders of shares of our Common Stock, either by diluting the voting power of our Common Stock if the preferred stock votes together with the Common Stock as a single class, or by giving the holders of any such preferred stock the right to block an action on which they have a separate class vote, even if the action were approved by the holders of our shares of our Common Stock. The future issuance of shares of preferred stock with dividend or conversion rights, liquidation preferences or other economic terms favorable to the holders of preferred stock could adversely affect the market price for our Common Stock by making an investment in the Common Stock less attractive. For example, investors may not wish to purchase Common Stock at a price above the conversion price of a series of convertible preferred stock because the holders of the preferred stock would effectively be entitled to purchase Common Stock at the lower conversion price, causing economic dilution to the holders of Common Stock. Because we have no current plans to pay cash dividends on our Common Stock, you may not receive any return on investment unless you sell your Common Stock for a price greater than that which you paid for it. We currently intend to retain all available funds and any future earnings to fund the development, commercialization and growth of our business, and therefore we do not anticipate declaring or paying any cash dividends on our Common Stock in the foreseeable future. Any future determination to declare dividends will be made at the discretion of our board of directors and will depend on our financial condition, operating results, capital requirements, general business conditions and other factors that our board of directors may deem relevant. Our future ability to pay cash dividends on our Common Stock may also be limited by the terms of any future debt securities or credit facility. As a result, capital appreciation, if any, of the Common Stock you purchase will be your sole source of gain for the foreseeable future. We are an emerging growth company and a smaller reporting company, and the reduced disclosure requirements applicable to emerging growth companies and smaller reporting companies may make our Common Stock less attractive to investors. We are an “emerging growth company,” as defined in the JOBS Act. For as long as we continue to be an emerging growth company, we may take advantage of certain exemptions and relief from various reporting requirements that are applicable to other public companies that are not emerging growth companies, including (i) not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, (ii) having the option of delaying the adoption of certain new or revised financial accounting standards, (iii) reduced disclosure obligations regarding executive compensation in this prospectus and our periodic reports and proxy statements and (iv) exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and shareholder approval of any golden parachute payments not previously approved. We may take advantage of these exemptions until such time that we are no longer an emerging growth company. Accordingly, the information contained in our SEC filings may be different than the information you receive from other public companies in which you hold stock. Further, pursuant to Section 107 of the JOBS Act, we have elected to take advantage of the extended transition period for complying with new or revised accounting standards until those standards would otherwise apply to private companies. As a result, our operating results and financial statements may not be comparable to the operating results and financial statements of other companies who have adopted the new or revised accounting standards. We will remain an emerging growth company until the earliest of (i) the last day of the fiscal year following the fifth anniversary of the effective date of our initial registration statement, (ii) the last day of the fiscal year in which we have total annual gross revenue of at least $1.235 billion, (iii) the last day of the fiscal year in which we are deemed to be a “large accelerated filer” as defined in Rule 12b-2 under the Exchange Act, which would occur if the market value of our Common Stock held by non-affiliates was $700.0 million or more as of the last business day of the second fiscal quarter of such year or (iv) the date on which we have issued more than $1.0 billion in non-convertible debt securities during the prior three-year period. 24 We are also a “smaller reporting company” as defined in the Exchange Act. We may continue to be a smaller reporting company even after we are no longer an emerging growth company. We may take advantage of certain of the scaled disclosures available to smaller reporting companies until the fiscal year following the determination that our voting and non-voting Common Stock held by non-affiliates is $250 million or more measured on the last business day of our second fiscal quarter, or our annual revenues are less than $100 million during the most recently completed fiscal year and our voting and non-voting Common Stock held by non-affiliates is $700 million or more measured on the last business day of our second fiscal quarter. It is possible that some investors will find our Common Stock less attractive as a result of the foregoing, which may result in a less active trading market for our Common Stock and higher volatility in our stock price. Our articles of incorporation provides that, unless we consent in writing to the selection of an alternative forum, a state court located within the State of Nevada and, to the extent enforceable, the federal district courts of the United States of America will be the exclusive forums for certain disputes between us and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers or employees. Our articles of incorporation provide that, unless we consent in writing to the selection of an alternative forum, a state court located within the State of Nevada (or, if a state court located within the State of Nevada does not have jurisdiction, the federal district court for the State of Nevada) shall, to the fullest extent permitted by law, be the sole and exclusive forum for: (i) any derivative action or proceeding brought on our behalf; (ii) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers or other employees to us or our stockholders; (iii) any action arising pursuant to any provision of the Nevada Revised Statutes, our articles of incorporation or our bylaws; or (iv) any action asserting a claim governed by the internal affairs doctrine. This choice of forum provision would not apply to suits brought to enforce a duty or liability created by the Exchange Act or the Securities Act or any other claim for which the federal courts of the United States have exclusive jurisdiction. Furthermore, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all Securities Act actions. Accordingly, both state and federal courts have jurisdiction to entertain such claims. To prevent having to litigate claims in multiple jurisdictions and the threat of inconsistent or contrary rulings by different courts, among other considerations, our articles of incorporation provide that the federal district courts of the United States of America shall be the exclusive forum for the resolution of any complaint asserting a cause of action arising under the Securities Act and the Exchange Act. While the Nevada courts have determined that such choice of forum provisions are facially valid, a stockholder may nevertheless seek to bring a claim in a venue other than those designated in the exclusive forum provisions. In such instance, we would expect to vigorously assert the validity and enforceability of the exclusive forum provisions of our articles of incorporation, but there can be no assurance that the provisions will be enforced by a court in those other jurisdictions. Any person or entity purchasing or otherwise acquiring any interest in any of our securities shall be deemed to have notice of and consented to these provisions. These exclusive-forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or our directors, officers or other employees, which may discourage lawsuits against us and our directors, officers and other employees. If a court were to find either exclusive-forum provision in our articles of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving the dispute in other jurisdictions, which could harm our results of operations. General Risks Reports published by analysts, including projections in those reports that differ from our actual results, could adversely affect the price and trading volume of our Common Stock. Securities research analysts may establish and publish their own periodic projections for our Company. These projections may vary widely and may not accurately predict the results we actually achieve. The price of our Common Stock may decline if our actual results do not match the projections of these securities research analysts. Similarly, if one or more of the analysts who write reports on us downgrades our stock or publishes inaccurate or unfavorable research about our business, our stock price could decline. If one or more of these analysts ceases coverage of us or fails to publish reports on us regularly, our stock price or trading volume could decline. 25 Our internal computer systems, or those of any of our manufacturers, contractors, consultants, collaborators or potential future collaborators, may fail or suffer security or data privacy breaches or other unauthorized or improper access to, use of, or destruction of our proprietary or confidential data, employee data or personal data, which could result in additional costs, loss of revenue, significant liabilities, harm to our brand and material disruption of our operations. Despite the implementation of security measures, our internal computer systems and those of our current and any future manufacturers, contractors, consultants, collaborators and third-party service providers, are vulnerable to damage from computer viruses, cybersecurity threats, unauthorized access, natural disasters, terrorism, war and telecommunication and electrical failure. Because the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period. Some of the federal, state and foreign government requirements include obligations of companies to notify individuals of security breaches involving particular personally identifiable information, which could result from breaches experienced by us or by our vendors, contractors or organizations with which we have formed strategic relationships. Notifications and follow-up actions related to a security breach could impact our reputation, cause us to incur significant costs, including legal expenses and remediation costs. To the extent that any disruption or security breach were to result in a loss of, or damage to, our data, or inappropriate disclosure of confidential or proprietary information, we could be exposed to litigation and governmental investigations, the further development and commercialization of our product candidates could be delayed, and we could be subject to significant fines or penalties for any noncompliance with certain state, federal and/or international privacy and security laws. In the ordinary course of our business, we may process, collect, store, and transmit proprietary, confidential, and sensitive data, including de-identified personal data, intellectual property, proprietary business information and trade secrets (collectively, sensitive information). We may rely upon third-party service providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, third-party providers of information technology infrastructure, cloud-based infrastructure, encryption and authentication technology, employee email, content delivery to customers, and other functions. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. We may share or receive sensitive information with or from third parties. Cyber-attacks, malicious internet-based activity, and online and offline fraud are prevalent and continue to increase. These threats are becoming increasingly difficult to detect. These threats come from a variety of sources, including traditional computer “hackers,” “hacktivists,” threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon which we rely may be vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our goods and services. We and the third parties upon which we rely may be subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats. Ransomware attacks, including by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, disruption of clinical trials, loss of data (including data related to clinical trials), and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems or the third-party information technology systems that support us and our services. 26 Remote work has become more common and has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers, and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. We may expend significant resources or modify our business activities to try to protect against security incidents. Certain data privacy and security obligations may require us to implement and maintain specific security measures, industry-standard or reasonable security measures to protect our information technology systems and sensitive information. While we have established physical, electronic and organizational security measures to safeguard and secure our systems against security incidents, and rely on commercially-available systems, software, tools, and monitoring to provide security for our information technology systems and the processing, transmission and storage of digital information, there can be no assurance that these measures will be effective. We may be unable in the future to detect vulnerabilities in our information technology systems because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security incident has occurred. Despite our efforts to identify and address vulnerabilities, if any, in our information technology systems, our efforts may not be successful. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. Applicable data privacy and security obligations may require us to notify relevant stakeholders of security incidents. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. If we (or a third party upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences. These consequences may include: government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may cause customers to stop using our products, deter new customers from using our products, and negatively impact our ability to grow and operate our business. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims. Our insurance policies may not be adequate to compensate us for the potential losses arising from any such disruption, failure or security breach. In addition, such insurance may not be available to us in the future on economically reasonable terms, or at all. Further, our insurance may not cover all claims made against us and could have high deductibles in any event, and defending a suit, regardless of its merit, could be costly and divert management attention. Our operations are vulnerable to interruption by fire, severe weather conditions, power loss, telecommunications failure, terrorist activity and other events beyond our control, which could harm our business. Our Command Centers may be located in regions which experience severe weather from time to time. We have not undertaken a systematic analysis of the potential consequences to our business and financial results from a major tornado, flood, fire, earthquake, power loss, terrorist activity or other disasters and do not have a recovery plan for such disasters. In addition, we do not carry sufficient insurance to compensate us for actual losses from interruption of our business that may occur, and any losses or damages incurred by us could harm our business. The occurrence of any of these business disruptions could seriously harm our operations and financial condition and increase our costs and expenses. 27