What changed in this filing

/stocks — the workspaceLOADING

Item 1B. Unresolved Staff Comments

2026-03-12 compared with 2025-03-06 · 29 added, 33 removed, 24 unchanged (72% of the section changed)

1 unchanged sentence

Cybersecurity.

collect, use, store, and transmit confidential, sensitive, proprietary, personal, and health-related information in the ordinary course

of our business.

As such, we leverage third-party information technology service providers who have implemented and maintain various

information security processes designed to identify, assess, and manage material risks from cybersecurity threats to our information

technology systems, including critical computer networks, third party hosted services, communications systems, hardware and software,

and our data residing on these systems.

Our Senior Vice President, Finance is responsible for overseeing these third-party service providers

and processes.

Cybersecurity

risks are identified by monitoring and evaluating our threat environment, and then assessed by various methods, for example, by manual

and automated tools designed to identify and combat cybersecurity threats, analyzing reports of threats, conducting scans and assessments

of the threat environment and to identify vulnerabilities, the use of detection and response services and conducting reviews of third-party

service providers, among other things.

Depending on the threat environment, we implement and maintain various technical, physical, and

organizational measures, processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats

to our information systems and data, including, for example, physical security and access controls, asset management, systems monitoring,

incident detection and response, risk assessment, the implementation of security standards and certifications, encryption of data, network

security controls, and a recovery/business continuity plan, among other mitigation tactics.

Our recovery/business continuity plan is

designed to mitigate and remediate identified cybersecurity incidents and escalate certain incidents as appropriate to management and

the Audit Committee.

We plan to conduct due diligence on and audits of key technology vendors, contract research organizations, and other

third-party contractors and suppliers.

Additionally, we conduct periodic employee training that covers cyber and information security,

among other topics.

We collect, use, store, and

transmit confidential, sensitive, proprietary, personal, and health-related information in the ordinary course of our business.

we leverage third-party information technology service providers who have implemented and maintain various information security processes

designed to identify, assess, and manage material risks from cybersecurity threats to our information technology systems, including critical

computer networks, third party hosted services, communications systems, hardware and software, and our data residing on these systems.

Our Senior Vice President, Finance is responsible for overseeing these third-party service providers and processes.

Cybersecurity risks are identified

by monitoring and evaluating our threat environment, and then assessed by various methods, for example, by manual and automated tools

designed to identify and combat cybersecurity threats, analyzing reports of threats, conducting scans and assessments of the threat environment

and to identify vulnerabilities, the use of detection and response services and conducting reviews of third-party service providers, among

other things.

Depending on the threat environment, we implement and maintain various technical, physical, and organizational measures,

processes, standards and policies designed to manage and mitigate material risks from cybersecurity threats to our information systems

and data, including, for example, physical security and access controls, asset management, systems monitoring, incident detection and

response, risk assessment, the implementation of security standards and certifications, encryption of data, network security controls,

and a recovery/business continuity plan, among other mitigation tactics.

Our recovery/business continuity plan is designed to mitigate

and remediate identified cybersecurity incidents and escalate certain incidents as appropriate to management and the Audit Committee.

We plan to conduct due diligence on and audits of key technology vendors, contract research organizations, and other third-party contractors

and suppliers.

Additionally, we conduct periodic employee training that covers cyber and information security, among other topics.

Our assessment and management

16 unchanged sentences

risks on a regular basis.

the last fiscal year, we have not identified any risks from known cybersecurity threats, including as a result of any prior cybersecurity

incidents, that have materially affected us, but we face certain ongoing cybersecurity risks or threats that, if realized, are reasonably

likely to materially affect us.

For a description of the risks from cybersecurity threats that may materially affect the Company and

how they may do so, see our “Risk Factors” under Part 1 Item 1A.

In the last fiscal year,

we have not identified any risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have

materially affected us, but we face certain ongoing cybersecurity risks or threats that, if realized, are reasonably likely to materially

For a description of the risks from cybersecurity threats that may materially affect the Company and how they may do so, see

our “Risk Factors” under Part 1 Item 1A.

Risk Factors, in this Annual Report on Form 10-K.

2 unchanged sentences

Our lease for our Menlo Park headquarters expires

on September 30, 2027 and our lease for our Waltham office expires in 2029.

We believe our current facilities are

sufficient for our needs for the foreseeable future.

on September 30, 2027 and our lease for our Waltham office expires on September 30, 2029.

We believe our current facilities are sufficient

for our needs for the foreseeable future.

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1B. Unresolved Staff Comments