3 unchanged sentences
Risk Management and Strategy .
−Removed: The consideration of cybersecurity threats are integrated into our overall risk management program.
−Removed: We engage external consultants who are experts in the field of cybersecurity and meet at regular intervals to evaluate current conditions and address any cybersecurity threats accordingly.
−Removed: We also provide continuous training to our employees regarding the risks related to cybersecurity.
−Removed: We are not aware of any risks from cybersecurity threats that have materially affected our business strategy, results of operations, or financial condition.
−Removed: Our board of directors are responsible for the oversight of risks from cybersecurity threats.
−Removed: At least annually management reports to our board of directors about such risks.
−Removed: Our chief financial officer , Thomas Chesterman, has direct management responsibility in assessing and managing such risks.
−Removed: Chesterman has prior academic and professional experience in cybersecurity.
+Added: We have implemented and maintain various information security processes designed to identify, assess and manage material risks arising from cybersecurity threats to our critical computer networks, third-party hosted services, communications systems, hardware and software, and our critical data — including intellectual property and confidential information that is proprietary, strategic or competitive in nature (collectively, our “Information Systems and Data”).
+Added: Our cross-functional cybersecurity risk management team, led by our Chief Financial Officer (“CFO”) and our Vice President of Manufacturing, helps identify, assess, and manage our cybersecurity threats and risks.
+Added: The team monitors and evaluates our threat environment using a variety of methods including manual and automated security tools, subscription-based threat intelligence reports and services, threat environment scans, evaluation of our company’s and our industry’s risk profile, formal threat assessments, and vulnerability assessments.
+Added: Based on the specific risk environment, we implement and maintain technical, physical, and organizational safeguards designed to manage and mitigate material cybersecurity risks to our Information Systems and Data.
+Added: These safeguards include, among other measures, incident detection and response capabilities;
+Added: risk assessments;
+Added: implementation of defined security standards;
+Added: data encryption;
+Added: network security controls;
+Added: data segmentation;
+Added: access controls;
+Added: asset management and secure disposal procedures;
+Added: continuous systems monitoring;
+Added: employee cybersecurity training;
+Added: physical security controls;
+Added: and cyber insurance coverage.
+Added: Our cybersecurity risk assessment and management activities are integrated into our broader enterprise risk management framework.
+Added: Management evaluates material cybersecurity risks in the context of our overall business objectives and periodically reports to the board of directors, which oversees our overall enterprise-wide risk profile.
+Added: We engage third-party service providers to perform a variety of cybersecurity functions across our business, including managed cybersecurity service providers and dark web monitoring services.
+Added: These providers assist us in identifying, assessing, and managing material risks arising from cybersecurity threats.
+Added: We also use a variety of third party service providers, including application providers and hosting companies.
+Added: Depending on the nature of the services provided, the sensitivity of the Information Systems and Data involved, and the specific provider, our vendor management processes incorporate risk-based assessments designed to help identify and evaluate cybersecurity risks associated with such provider, and may include conducting cybersecurity-focused risk assessments.
+Added: For a description of the risks from cybersecurity threats that may materially affect us and how they may do so, see our risk factors under Part I, Item 1A.
+Added: Risk Factors in this Annual Report on Form 10-K, including “ Privacy breaches and other cybersecurity risks related to our business and vulnerabilities through the use of evolving tools such as Artificial Intelligence could negatively affect our reputation, credibility, and business ”.
+Added: Our board of directors addresses our cybersecurity risk management as part of its overall oversight responsibilities.
+Added: The board of directors oversees our cybersecurity risk management framework, including the identification, assessment, and mitigation of risks arising from cybersecurity threats
+Added: Our cybersecurity risk assessment and management processes are implemented and maintained by a cross-functional management team comprised of our CFO and our Vice President of Manufacturing .
+Added: This team is responsible for approving cybersecurity budgets, helping prepare for cybersecurity incidents, approving cybersecurity policies and procedures, and reviewing security assessments and related reports.
+Added: The team also oversees the hiring of appropriate personnel, supports integrating cybersecurity risk considerations into our broader enterprise risk management strategy, and communicates key cybersecurity priorities to relevant personnel across the organization.
+Added: Both have previous academic and professional experience in the field of cybersecurity.
+Added: Our cybersecurity incident response processes are designed to escalate certain incidents to members of management based on the nature and severity of the event.
+Added: The CFO and Vice President of Manufacturing work with the incident response
+Added: team to help mitigate and remediate cybersecurity incidents of which they are notified.
+Added: In addition, our incident response framework provides for reporting certain cybersecurity incidents to our board of directors.
+Added: The board of directors receives periodic reports from our CFO regarding significant cyberse curity threats and risks, as well as the measures implemented to address them.
+Added: The board of directors also has access to various reports, summaries, or presentations related to cybersecurity threats, risk management activities and mitigation efforts.
+Added: As of December 31, 2025, we lease and occupy approximately 17,000 square feet of space in Surprise, Arizona for our corporate, manufacturing and research operations pursuant to a lease that expires in May 2035.
+Added: We believe that our existing facilities are adequate and meet our current needs for business, manufacturing and research.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.