Skip to main content

Personalis Inc

For the period ended Sep 30, 2024. Filed Nov 6, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Sep 30, 2024 · Filed Nov 6, 2024

PSNL$15.79+1.5%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 356 previous paragraphs and 355 current paragraphs.

328 unchanged; 24 reworded; 1 added; 3 removed; 1 previous and 2 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (1)

Current report

If our information technology systems or data, or those of third parties with whom we work, are or were compromised, we could experience adverse consequences resulting from such compromise, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences.*
Removed paragraphs (3)

Previous report

The process of opening our new laboratory facilities in Fremont, California has diverted and could continue to divert management’s attention and has disrupted and could continue to disrupt our ongoing business.

Previous report

We have relocated our corporate headquarters and all laboratory facilities to Fremont, California. These efforts have involved significant tenant improvements, construction and regulatory compliance activities to be undertaken. Such efforts have distracted and may continue to distract management from current operations, have disrupted and may continue to disrupt planned research, development or regulatory compliance activities, and have resulted in and may continue to result in greater than expected liabilities and expenses, any of which could result in a material adverse effect on our business prospects, financial condition, or results of operations. For example, delays in the completion of updates to our new corporate headquarters in Fremont delayed our previously planned move-in date. Additionally, from January 2023 through April 2023, we experienced substantial disruption to our use of the Fremont facility due to a failure of an electrical bus duct serving the facility. We used backup generators to power our laboratories and emergency lights at the facility through February 2023 but were unable to use the office portions of the facility, or use the facility's heating, ventilation and air conditioning system during this time. We were able to restore full power to the facility on a temporary basis during March 2023 and April 2023 using additional generators, and regular electrical service to the facility has since been restored. However, we may experience additional disruptions in the future. We incurred costs in maintaining temporary power to the facility and in attempting to permanently remedy the problem, including obtaining additional backup generators, equipment, and back up batteries, and purchasing fuel for the generators on a daily basis. If we experience additional disruptions to our power supply, it may result in a loss in productivity, including delays to research and development programs, and could render it difficult or impossible for us to sell or perform certain of our services for some period of time. Additionally, if the backup generators were to fail, it could result in damage to biological samples stored within the Fremont facility, which may include certain customer samples. See “—If our facilities become damaged or inoperable, or we are required to vacate the facilities, our ability to sell and provide our services and pursue our research and development efforts may be jeopardized."

Previous report

In addition, while it is our policy to require our employees and contractors who may be involved in the conception or development of intellectual property to execute agreements assigning such intellectual property to us, we may be unsuccessful in executing such an agreement with each party who, in fact, conceives or develops intellectual property that we regard as our own. The assignment of intellectual property rights may not be self-executing, or the assignment agreements may be breached, and we may be forced to bring claims against third parties, or defend claims that they may bring against us, to determine the ownership of what we regard as our intellectual property. Such claims could have a material adverse effect on our business, financial condition, results of operations, and prospects.
Reworded paragraphs (24)

Previous wording

Our operations and financial results are subject to various risks and uncertainties including those described below. You should consider carefully the risks and uncertainties described below, in addition to other information contained in this Quarterly Report on Form 10-Q, including our unaudited condensed consolidated financial statements and related notes. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, may also become important factors that adversely affect our business. If any of the following risks or others not specified below materialize, our business, financial condition, and results of operations could be materially and adversely affected. In that case, the trading price of our common stock could decline. The risk factors set forth below that are marked with an asterisk (*) contain changes to the similarly titled risk factors included in, or did not appear as separate risk factors in, Item 1A of our Annual Report on Form 10-K for the year ended December 31, 2023 (Annual Report), which was filed with the SEC on February 28, 2024; provided, however, no asterisk is included if the only changes are to reflect our most recently reported financial information and/or one or more insignificant changes.

Current wording

Our operations and financial results are subject to various risks and uncertainties including those described below. You should consider carefully the risks and uncertainties described below, in addition to other information contained in this Quarterly Report on Form 10-Q, including our unaudited consolidated financial statements and related notes. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, may also become important factors that adversely affect our business. If any of the following risks or others not specified below materialize, our business, financial condition, and results of operations could be materially and adversely affected. In that case, the trading price of our common stock could decline. The risk factors set forth below that are marked with an asterisk (*) contain changes to the similarly titled risk factors included in, or did not appear as separate risk factors in, Item 1A of our Annual Report on Form 10-K for the year ended December 31, 2023 (Annual Report), which was filed with the SEC on February 28, 2024; provided, however, no asterisk is included if the only changes are to reflect our most recently reported financial information and/or one or more insignificant changes.

Previous wording

We have incurred net losses since our inception. For the years ended December 31, 2023, 2022, and 2021 we had net losses of $108 million, $113 million and $65 million, respectively. For the six months ended June 30, 2024, we had a net loss of $26 million. As of June 30, 2024, we had an accumulated deficit of $494 million. To date, we have not generated sufficient revenue to achieve profitability, and we may never achieve or sustain profitability. In addition, we expect to continue to incur net losses for the foreseeable future, and we expect our accumulated deficit to continue to increase as we focus on scaling our business and operations. Our efforts to sustain and grow our business may be more costly than we expect, and we may not be able to increase our revenue sufficiently to offset our higher operating expenses. Our prior losses and expected future losses have had and will continue to have an adverse effect on our stockholders’ equity and working capital. Our failure to achieve and sustain profitability in the future would negatively affect our business, financial condition, results of operations, and cash flows, and could cause the market price of our common stock to decline.

Current wording

We have incurred net losses since our inception. For the years ended December 31, 2023, 2022, and 2021 we had net losses of $108 million, $113 million and $65 million, respectively. For the nine months ended September 30, 2024, we had a net loss of $64.9 million. As of September 30, 2024, we had an accumulated deficit of $534 million. To date, we have not generated sufficient revenue to achieve profitability, and we may never achieve or sustain profitability. In addition, we expect to continue to incur net losses for the foreseeable future, and we expect our accumulated deficit to continue to increase as we focus on scaling our business and operations. Our efforts to sustain and grow our business may be more costly than we expect, and we may not be able to increase our revenue sufficiently to offset our higher operating expenses. Our prior losses and expected future losses have had and will continue to have an adverse effect on our stockholders’ equity and working capital. Our failure to achieve and sustain profitability in the future would negatively affect our business, financial condition, results of operations, and cash flows, and could cause the market price of our common stock to decline.

Previous wording

Some of our present or potential competitors, including Adela, Inc., BostonGene Corporation, Caris Life Sciences, Inc., Foresight Diagnostics Inc. (“Foresight”), Freenome, Inc., Fulgent Genetics, Inc., Geneseeq Technology Inc., GRAIL, Guardant Health, Inc., Haystack Oncology, Inc., which was acquired by Quest Diagnostics Incorporated in June 2023, Invitae Corporation, MedGenome Inc., Myriad Genetics, Inc., Natera, NeoGenomics, Inc., Novogene Corporation, Predicine, Inc., Roche Molecular Systems, Inc., Tempus, and Veracyte, Inc. may have more widespread brand recognition or substantially greater financial or technical resources, development or production capacities, or marketing capabilities than we do. They may be able to devote greater resources to the development, promotion and sale of their products and services than we do or sell their products and services at prices designed to win more significant levels of market share. Also, we have had, and may have in the future, customer or supply relationships with our present or potential competitors. For example, we have an agreement with Natera to provide advanced tumor analysis for use in Natera’s MRD testing offerings. During the three and six months ended June 30, 2024, revenue under our agreement accounted for 35% and 38% of our total revenue, respectively. See “—We currently derive a substantial portion of our revenue from DNA sequencing and data analysis services that we provide to Natera. We expect our commercial relationship with Natera to wind down by the end of 2024 and, if we are unable to grow our customer base and diversify our revenue concentration, our business, financial condition, revenue and other operating results, and cash flows may be materially harmed.” In addition, our present or potential competitors may be acquired by, receive investments from, or enter into other commercial relationships with larger, more well-established and well-financed companies. Others may develop lower-priced, less complex products and services that pharmaceutical companies could view as functionally equivalent to our current or planned future services, which could force us to lower the price of our services and impact our operating margins and our ability to achieve and maintain profitability. In addition, companies or governments that control access to genetic testing and related services through umbrella contracts or regional preferences could promote our competitors or prevent us from performing certain services. In addition, technological innovations that result in the creation of enhanced products or diagnostic tools that are more sensitive or specific than ours may enable other clinical laboratories, hospitals, physicians, or medical providers to provide specialized products or services similar to ours in a more patient-friendly, efficient, or cost-effective manner than is currently possible. If we cannot compete successfully against current or future competitors, or if we cannot maintain succ…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Some of our present or potential competitors, including Adela, Inc., BostonGene Corporation, Caris Life Sciences, Inc., Foresight Diagnostics Inc. (“Foresight”), Freenome, Inc., Fulgent Genetics, Inc., Geneseeq Technology Inc., GRAIL, Guardant Health, Inc., Haystack Oncology, Inc., which was acquired by Quest Diagnostics Incorporated in June 2023, Invitae Corporation, MedGenome Inc., Myriad Genetics, Inc., Natera, NeoGenomics, Inc., Novogene Corporation, Predicine, Inc., Roche Molecular Systems, Inc., Tempus, and Veracyte, Inc. may have more widespread brand recognition or substantially greater financial or technical resources, development or production capacities, or marketing capabilities than we do. They may be able to devote greater resources to the development, promotion and sale of their products and services than we do or sell their products and services at prices designed to win more significant levels of market share. Also, we have had, and may have in the future, customer or supply relationships with our present or potential competitors. For example, we have an agreement with Natera to provide advanced tumor analysis for use in Natera’s MRD testing offerings. During the nine months ended September 30, 2024, revenue under our agreement accounted for 31% of our total revenue, respectively. See “—We currently derive a substantial portion of our revenue from DNA sequencing and data analysis services that we provide to Natera. We expect our commercial relationship with Natera to wind down by the end of 2024 and, if we are unable to grow our customer base and diversify our revenue concentration, our business, financial condition, revenue and other operating results, and cash flows may be materially harmed.” In addition, our present or potential competitors may be acquired by, receive investments from, or enter into other commercial relationships with larger, more well-established and well-financed companies. Others may develop lower-priced, less complex products and services that pharmaceutical companies could view as functionally equivalent to our current or planned future services, which could force us to lower the price of our services and impact our operating margins and our ability to achieve and maintain profitability. In addition, companies or governments that control access to genetic testing and related services through umbrella contracts or regional preferences could promote our competitors or prevent us from performing certain services. In addition, technological innovations that result in the creation of enhanced products or diagnostic tools that are more sensitive or specific than ours may enable other clinical laboratories, hospitals, physicians, or medical providers to provide specialized products or services similar to ours in a more patient-friendly, efficient, or cost-effective manner than is currently possible. If we cannot compete successfully against current or future competitors, or if we cannot maintain successful custo…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Like other genomic profiling companies that sell to the pharmaceutical industry, we have substantial customer concentration. We currently derive a significant portion of our revenue from Natera, which accounted for 38% of our revenue for the six months ended June 30, 2024. We also derive a significant portion of our revenue from Moderna, which accounted for 25% of our revenue for the six months ended June 30, 2024. We previously derived a significant portion of our revenue from the VA MVP, which more recently accounted for less than 10% of our revenue for the six months ended June 30, 2024. Our top five customers, including Natera, Moderna, and the VA MVP, accounted for 81% of our revenue for the six months ended June 30, 2024. There are inherent risks whenever a large percentage of revenue is concentrated with a limited number of customers. While we have attempted to grow our customer base and diversify our revenue concentration beyond Natera, Moderna, and the VA MVP, we may not be able to successfully do so in the future. Our predictions regarding the future level of demand for our services that will be generated by these customers may be wrong. In addition, revenue from our larger customers have historically fluctuated and may continue to fluctuate based on the commencement and completion of clinical trials or other projects, the timing of which may be affected by market conditions or other factors, some of which may be outside of our control. Some of our customers have in the past suspended or terminated clinical trials or projects, received less funding than expected, experienced declining or delayed sales, or otherwise decided to reduce or eliminate their use of our services, and these and other customers may also do so in the future. As a result, we could be pressured to reduce the prices we charge for our services, which would have an adverse effect on our margins and financial position, and which would likely negatively affect our revenue and results of operations. In particular, if we do not win future VA MVP renewals with a value comparable to that of our historical contracted orders, it may have a material adverse effect on our revenue, cash position, and results of operations. Similarly, if the VA MVP was eliminated, awarded its contract to one of our competitors, further reduced the size of our contract or failed to renew our contract in the future, then our revenue, cash position, and results of operations would be materially adversely impacted. Likewise, if Natera, Moderna or any of our other significant customers were to reduce or cease their use of our services, then our revenue, cash position, and results of operations may be materially adversely impacted. Further, if any of our significant customers were to stop payment for our services, it would have a material adverse effect on our accounts receivable, increasing our credit risk. The failure of these customers to pay their balances, or any customer to pay future outstanding …

Excerpt shortened here; the source contains the full paragraph.

Current wording

Like other genomic profiling companies that sell to the pharmaceutical industry, we have substantial customer concentration. We currently derive a significant portion of our revenue from Natera, which accounted for 31% of our revenue for the nine months ended September 30, 2024. We also derive a significant portion of our revenue from Moderna, which accounted for 28% of our revenue for the nine months ended September 30, 2024. We previously derived a significant portion of our revenue from the VA MVP, which more recently accounted for 11% of our revenue for the nine months ended September 30, 2024. Our top five customers, including Natera, Moderna, and the VA MVP, accounted for 84% of our revenue for the nine months ended September 30, 2024. There are inherent risks whenever a large percentage of revenue is concentrated with a limited number of customers. While we have attempted to grow our customer base and diversify our revenue concentration beyond Natera, Moderna, and the VA MVP, we may not be able to successfully do so in the future. Our predictions regarding the future level of demand for our services that will be generated by these customers may be wrong. In addition, revenue from our larger customers have historically fluctuated and may continue to fluctuate based on the commencement and completion of clinical trials or other projects, the timing of which may be affected by market conditions or other factors, some of which may be outside of our control. Some of our customers have in the past suspended or terminated clinical trials or projects, received less funding than expected, experienced declining or delayed sales, or otherwise decided to reduce or eliminate their use of our services, and these and other customers may also do so in the future. As a result, we could be pressured to reduce the prices we charge for our services, which would have an adverse effect on our margins and financial position, and which would likely negatively affect our revenue and results of operations. In particular, if we do not win future VA MVP renewals with a value comparable to that of our historical contracted orders, it may have a material adverse effect on our revenue, cash position, and results of operations. Similarly, if the VA MVP was eliminated, awarded its contract to one of our competitors, further reduced the size of our contract or failed to renew our contract in the future, then our revenue, cash position, and results of operations would be materially adversely impacted. Likewise, if Natera, Moderna or any of our other significant customers were to reduce or cease their use of our services, then our revenue, cash position, and results of operations may be materially adversely impacted. Further, if any of our significant customers were to stop payment for our services, it would have a material adverse effect on our accounts receivable, increasing our credit risk. The failure of these customers to pay their balances, or any customer to pay futur…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

In February 2021, we entered into a partnership in the field of personalized oncology with Natera, pairing our NeXT tumor profiling and diagnostic services and products with Natera’s personalized ctDNA platform Signatera™ for treatment monitoring and MRD assessment. Under this non-exclusive agreement, Natera is responsible for validating the design of, and commercialization of, Signatera personalized ctDNA assays using matched tumor and normal exome sequence data from us. The agreement covers MRD testing for both clinical use and research use. Since that time, Natera’s sample volumes have increased such that we currently derive a significant portion of our revenue from sales of our DNA sequencing and data analysis services to Natera under our agreement. For example, revenue under our agreement accounted for 38% of our total revenue for the six months ended June 30, 2024. In November 2023, we amended our agreement to extend minimum volume commitments through the end of 2024. Upon expiration of the term of the amended agreement, we expect our commercial relationship with Natera to terminate as we are aware that Natera plans to bring such services in-house in lieu of purchasing such services from us. We are also aware of at least one third party supplier of DNA sequencing and analysis services, such that Natera has elected, and may continue to elect in the future, to send a portion (or all) of its samples to its other supplier(s) instead of us, which it is not contractually prohibited from doing, given the non-exclusive nature of our agreement. Our agreement with Natera requires us to achieve certain quality and turnaround time metrics for Natera samples. Recently, the volumes of samples sent to us by Natera have fluctuated significantly and may continue to do so for the remainder of the term of the agreement, which could cause us to experience difficulty in achieving such metrics from time to time, or to meet our other obligations under our agreement.

Current wording

In February 2021, we entered into a partnership in the field of personalized oncology with Natera, pairing our NeXT tumor profiling and diagnostic services and products with Natera’s personalized ctDNA platform Signatera™ for treatment monitoring and MRD assessment. Under this non-exclusive agreement, Natera is responsible for validating the design of, and commercialization of, Signatera personalized ctDNA assays using matched tumor and normal exome sequence data from us. The agreement covers MRD testing for both clinical use and research use. Since that time, Natera’s sample volumes have increased such that we currently derive a significant portion of our revenue from sales of our DNA sequencing and data analysis services to Natera under our agreement. For example, revenue under our agreement accounted for 31% of our total revenue for the nine months ended September 30, 2024. In November 2023, we amended our agreement to extend minimum volume commitments through the end of 2024. Upon expiration of the term of the amended agreement, we expect our commercial relationship with Natera to terminate as we are aware that Natera plans to bring such services in-house in lieu of purchasing such services from us. We are also aware of at least one third party supplier of DNA sequencing and analysis services, such that Natera has elected, and may continue to elect in the future, to send a portion (or all) of its samples to its other supplier(s) instead of us, which it is not contractually prohibited from doing, given the non-exclusive nature of our agreement. Our agreement with Natera requires us to achieve certain quality and turnaround time metrics for Natera samples. Recently, the volumes of samples sent to us by Natera have fluctuated significantly and may continue to do so for the remainder of the term of the agreement, which could cause us to experience difficulty in achieving such metrics from time to time, or to meet our other obligations under our agreement.

Previous wording

Additionally, Natera may allege that any failures to achieve the required metrics are a breach of our agreement and seek to terminate our agreement prior to its expiration and/or pursue any remedies available to it under the agreement, at law or in equity. Relatedly, we have incurred expenses in connection with our scale-up activities under our agreement with Natera, and we may incur additional expenses to increase our laboratory’s capacity to process increased sample volumes from Natera, in addition to those from our other customers. Our activities under our agreement with Natera have had, and may continue to have, an impact on our business, including diversion of our resources and the attention of our management, including with respect to our internal research and development objectives and projects for our other customers, collaborators and/or partners. If we are unable to successfully increase our laboratory’s capacity and manage any such competing objectives and/or projects for other customers, we may be unable to meet the quality and timing requirements of our agreement with Natera or our other customers, collaborators and/or partners. We may also be unable to successfully research, develop, launch and/or commercialize our services or service capabilities. Furthermore, our NeXT Personal test is a next-generation, tumor-informed liquid biopsy assay designed to detect and quantify MRD and recurrence in patients previously diagnosed with cancer. If NeXT Personal or any of our other services is seen as competing with Signatera or any of Natera’s other services, we will still be required to fulfill our obligations to Natera under our agreement, although Natera may elect to send a portion (or all) of its samples to its other supplier(s) and/or bring such services in-house. If the volume of samples received under our agreement with Natera were to be significantly reduced or eliminated, or if our agreement with Natera were to be terminated or not renewed after expiration, and we are unable to grow our customer base and diversify our revenue concentration timely, our business, financial condition, revenue and other operating results, and cash flows may be materially harmed.

Current wording

Additionally, Natera or other customers may allege that any failures to achieve the required metrics are a breach of our agreement and seek to terminate our agreement prior to its expiration and/or pursue any remedies available to it under the agreement, at law or in equity. Relatedly, we have incurred expenses in connection with our scale-up activities under our agreement with Natera, and we may incur additional expenses in the future to increase our laboratory’s capacity to process increased sample volumes from our other customers. Our activities under our agreement with Natera have had, and activities with our other customers may in the future have, an impact on our business, including diversion of our resources and the attention of our management, including with respect to our internal research and development objectives and projects for our other customers, collaborators and/or partners. If we are unable to successfully increase our laboratory’s capacity and manage any such competing objectives and/or projects for other customers, we may be unable to meet the quality and timing requirements of our agreement with Natera or our other customers, collaborators and/or partners. We may also be unable to successfully research, develop, launch and/or commercialize our services or service capabilities. Furthermore, our NeXT Personal test is a next-generation, tumor-informed liquid biopsy assay designed to detect and quantify MRD and recurrence in patients previously diagnosed with cancer. If NeXT Personal or any of our other services is seen as competing with Signatera or any of Natera’s other services, we will still be required to fulfill our obligations to Natera under our agreement, although Natera may elect to send a portion (or all) of its samples to its other supplier(s) and/or bring such services in-house. If the volume of samples received under our agreement with Natera were to be significantly reduced or eliminated, or if our agreement with Natera were to be terminated or not renewed after expiration, and we are unable to grow our customer base and diversify our revenue concentration timely, our business, financial condition, revenue and other operating results, and cash flows may be materially harmed.

Previous wording

We have derived a substantial portion of our revenue from sales of our DNA sequencing and data analysis services to the VA MVP. In September 2017, we entered into a one-year contract with three one-year optional renewal periods with the VA for the VA MVP, pursuant to which we received contracted orders from the VA MVP in September 2017, 2018, 2019, 2020, and 2021. In September 2022, we entered into a new contract with the VA MVP to continue providing them WGS services and received an initial task order with a value of up to $10.0 million (the "2022 VA MVP Agreement"). The performance period under the new contract includes a base period of one year, with four one-year renewal option periods that may be exercised upon discretion of the VA MVP. In August 2023, we received notice of the VA MVP's intention to exercise its first renewal option period and received a second task order with a value of up to $7.5 million, subject to the receipt of samples from the VA MVP. There is no guarantee that the VA MVP will exercise any subsequent renewal option.

Current wording

We have derived a substantial portion of our revenue from sales of our DNA sequencing and data analysis services to the VA MVP. In September 2017, we entered into a one-year contract with three one-year optional renewal periods with the VA for the VA MVP, pursuant to which we received contracted orders from the VA MVP in September 2017, 2018, 2019, 2020, and 2021. In September 2022, we entered into a new contract with the VA MVP to continue providing them WGS services and received an initial task order with a value of up to $10.0 million (the "2022 VA MVP Agreement"). The performance period under the new contract includes a base period of one year, with four one-year renewal option periods that may be exercised upon discretion of the VA MVP. In September 2024, we received a third task order with a value of up to $7.5 million, subject to the receipt of samples from the VA MVP. There is no guarantee that the VA MVP will exercise any subsequent renewal option.

Previous wording

The VA MVP’s contracted orders for DNA sequencing and data analysis services have fluctuated significantly in value over time and are subject to the availability of funding, enrollment of veterans in the VA MVP study, and the VA MVP’s continued demand, if any, for our services among other factors. For example, the VA MVP contracted order received in September 2020 had a value of $30.9 million, whereas the VA MVP contracted orders received in September 2021, 2022, and 2023 had values of $9.7 million, $10.0 million, and $7.5 million, respectively, which represents a substantial decline. We have no certainty that funding will be made available for our services, or that the VA MVP will award any future contracts, contract renewals or contracted orders to us. The priorities of the VA, the VA MVP, or the U.S. government may change, including in response to a health epidemic or pandemic. For example, funding for our services may be limited or not available, and our business, financial condition, and operating results and cash flows will be materially harmed. Similarly, if we do not win future VA MVP contracts and renewals (whether due to being outbid by a competitor or the VA MVP’s decision not to award a future contract on a timely basis or at all, or to terminate for convenience or failure to renew any contract, for whatever reason) with a value comparable to that of our historical contracted orders, our business, financial condition, revenue and other operating results and cash flows may be materially harmed.

Current wording

The VA MVP’s contracted orders for DNA sequencing and data analysis services have fluctuated significantly in value over time and are subject to the availability of funding, enrollment of veterans in the VA MVP study, and the VA MVP’s continued demand, if any, for our services among other factors. For example, the VA MVP contracted order received in September 2020 had a value of $30.9 million, whereas annual orders received in subsequent years had values of $10.0 million or less, which represents a substantial decline. We have no certainty that funding will be made available for our services, or that the VA MVP will award any future contracts, contract renewals or contracted orders to us. The priorities of the VA, the VA MVP, or the U.S. government may change, including in response to a health epidemic or pandemic. For example, funding for our services may be limited or not available, and our business, financial condition, and operating results and cash flows will be materially harmed. Similarly, if we do not win future VA MVP contracts and renewals (whether due to being outbid by a competitor or the VA MVP’s decision not to award a future contract on a timely basis or at all, or to terminate for convenience or failure to renew any contract, for whatever reason) with a value comparable to that of our historical contracted orders, our business, financial condition, revenue and other operating results and cash flows may be materially harmed.

Previous wording

We have only recognized revenue under our VA MVP contract upon the receipt and processing of samples, and the timing and number of VA MVP samples we have received has been and could in the future be negatively affected by factors beyond our control, which has resulted, and may result in the future, in delaying our ability to process and recognize revenue for such samples. For example, the revenue we recognized during the contract year that began in September 2020 significantly exceeded the value of the VA MVP contracted order we received in September 2020 because we continued to receive after such date, and subsequently processed, samples under VA MVP contracted orders that remained unfulfilled as of September 2020 due to the time required for the VA to select optimal samples from its collection for research and then provide us those samples. Therefore, period-to-period comparisons of our operating results relating to VA MVP contracted orders may not be meaningful. The timing and number of VA MVP samples may also be negatively affected by a public health crisis. For example, in March 2020, the VA MVP announced that it was suspending sample collection due to the COVID-19 pandemic. In addition, we believe the COVID-19 pandemic may have been a contributing factor to the reduction in values of the September 2021 and 2022 VA MVP contracted orders compared to the September 2020 contracted order, as the VA MVP delayed new enrollment and also may have needed to divert resources to respond to the pandemic. A health epidemic or pandemic may negatively impact the value of any potential new VA MVP contract or order.

Current wording

We have only recognized revenue under our VA MVP contract upon the receipt and processing of samples, and the timing and number of VA MVP samples we have received has been and could in the future be negatively affected by factors beyond our control, which has resulted, and may result in the future, in delaying our ability to process and recognize revenue for such samples. For example, the revenue we recognized during the contract year that began in September 2020 significantly exceeded the value of the VA MVP contracted order we received in September 2020 because we continued to receive after such date, and subsequently processed, samples under VA MVP contracted orders that remained unfulfilled as of September 2020 due to the time required for the VA to select optimal samples from its collection for research and then provide us those samples. Therefore, period-to-period comparisons of our operating results relating to VA MVP contracted orders may not be meaningful. The timing and number of VA MVP samples may also be negatively affected by a public health crisis. For example, in March 2020, the VA MVP announced that it was suspending sample collection due to the COVID-19 pandemic. In addition, we believe the COVID-19 pandemic may have been a contributing factor to the reduction in values of contracted orders received in 2021 and later years compared to the September 2020 contract order, as the VA MVP delayed new enrollment and also may have needed to divert resources to respond to the pandemic. A health epidemic or pandemic may negatively impact the value of any potential new VA MVP contract or order.

Previous wording

We currently derive our revenue from our genomic analysis conducted in our laboratories. Currently, our only clinical reference or research and development laboratory facilities are in Fremont, California. Our facilities and equipment could be harmed or rendered inoperable by natural or man-made disasters, including fires, earthquakes, flooding, and power outages, which may render it difficult or impossible for us to sell or perform our services for some period of time. Northern California continues to experience serious fires and the San Francisco Bay Area is considered to lie in an area with earthquake risk. The inability to sell or to perform our sequencing and analysis services, disruptions in our operations, or the backlog of samples that could develop if our facilities are inoperable for even a short period of time, may result in the loss of customers or harm to our reputation or relationships with scientific or clinical collaborators, and we may be unable to regain those customers or repair our reputation or such relationships in the future. For example, from January 2023 through April 2023, we experienced substantial disruption to our use of the Fremont facility due to a failure of an electrical bus duct serving the facility. See “—The process of opening our new laboratory facilities in Fremont, California has diverted and could continue to divert management’s attention and has disrupted and could continue to disrupt our ongoing business.” Furthermore, our facilities and the equipment we use to perform our services and our research and development work could be costly and time-consuming to repair or replace.

Current wording

We currently derive our revenue from our genomic analysis conducted in our laboratories. Currently, our only clinical reference or research and development laboratory facilities are in Fremont, California. Our facilities and equipment could be harmed or rendered inoperable by natural or man-made disasters, including fires, earthquakes, flooding, and power outages, which may render it difficult or impossible for us to sell or perform our services for some period of time. Northern California continues to experience serious fires and the San Francisco Bay Area is considered to lie in an area with earthquake risk. The inability to sell or to perform our sequencing and analysis services, disruptions in our operations, or the backlog of samples that could develop if our facilities are inoperable for even a short period of time, may result in the loss of customers or harm to our reputation or relationships with scientific or clinical collaborators, and we may be unable to regain those customers or repair our reputation or such relationships in the future. For example, from January 2023 through April 2023, we experienced substantial disruption to our use of the Fremont facility due to a failure of an electrical bus duct serving the facility. Furthermore, our facilities and the equipment we use to perform our services and our research and development work could be costly and time-consuming to repair or replace.

Previous wording

(EU) 2017/746) (“IVDR”) entered into application, repealing and replacing the Directive on In-Vitro Diagnostic Devices (98/79/EC) (the “IVDD”). The IVDR and its associated guidance documents and harmonized standards govern, among other things, device design and development, preclinical and clinical or performance testing, premarket conformity assessment, registration and listing, manufacturing, labeling, storage, claims, sales and distribution, export and import and post-market surveillance, vigilance, and market surveillance. IVDs must comply with the General Safety and Performance Requirements set out in Annex I of the IVDR. Compliance with these requirements is a prerequisite to be able to affix the CE Mark to IVDs, without which they cannot be marketed or sold in the EEA.

Current wording

In the European Economic Area (and Northern Ireland) (“EEA”), in order to place an in vitro diagnostic medical device ("IVD"), or an accessory to an IVD, on the market, or put it into service in the EEA, the device must be designed, developed, manufactured and marketed in compliance with the relevant legal framework. On May 26, 2022, the Regulation on In-Vitro Diagnostic Devices (Regulation (EU) 2017/746) (“IVDR”) entered into application, repealing and replacing the Directive on In-Vitro Diagnostic Devices (98/79/EC) (the “IVDD”). The IVDR and its associated guidance documents and harmonized standards govern, among other things, device design and development, preclinical and clinical or performance testing, premarket conformity assessment, registration and listing, manufacturing, labeling, storage, claims, sales and distribution, export and import and post-market surveillance, vigilance, and market surveillance. IVDs must comply with the General Safety and Performance Requirements set out in Annex I of the IVDR. Compliance with these requirements is a prerequisite to be able to affix the CE Mark to IVDs, without which they cannot be marketed or sold in the EEA.

Previous wording

In the ordinary course of our business, we, and the third parties upon which we rely, collect, process, receive, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, share and store (collectively, “process”) proprietary, confidential, and sensitive information, including protected health information (“PHI”), personal information, credit card and other financial information, intellectual property, trade secrets, medical information, biometric information and genomic information (collectively, “sensitive information”) owned or controlled by ourselves or our customers, payors, and other parties.

Current wording

In the ordinary course of our business, we, and the third parties with whom we work, collect, process, receive, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, share and store (collectively, “process”) proprietary, confidential, and sensitive information, including protected health information (“PHI”), personal information, credit card and other financial information, intellectual property, trade secrets, medical information, biometric information and genomic information (collectively, “sensitive information”) owned or controlled by ourselves or our customers, payors, and other parties.

Previous wording

Cyberattacks, malicious internet-based activity, and online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to increase, are becoming increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, including the war between Russia and Ukraine, the state of war between Israel and Hamas and the risk of a larger regional conflict, we, and the third parties upon which we rely, may be vulnerable to a heightened risk of these attacks, including retaliatory cyberattacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell, and distribute our platform, products, and services.

Current wording

Cyberattacks, malicious internet-based activity, and online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to increase, are becoming increasingly difficult to detect, and come from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyberattacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, including the war between Russia and Ukraine, the state of war between Israel and Hamas and the risk of a larger regional conflict, we, and the third parties with whom we work, may be vulnerable to a heightened risk of these attacks, including retaliatory cyberattacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell, and distribute our platform, products, and services.

Previous wording

We and the third parties upon which we rely are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, attacks enhanced or facilitated by artificial intelligence ("AI"), software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, natural disasters, terrorism, and other similar threats. In particular, ransomware attacks are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, ability to provide our services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Most of our employees are working remotely at least part of the time and such remote work has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.

Current wording

We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks, credential stuffing, credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, attacks enhanced or facilitated by artificial intelligence ("AI"), software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, natural disasters, terrorism, and other similar threats. In particular, ransomware attacks are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, ability to provide our services, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. It may be difficult and/or costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems. Most of our employees are working remotely at least part of the time and such remote work has increased risks to our information technology systems and data, as more of our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations. Future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.

Previous wording

We rely on third-party service providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, on-site systems and cloud-based data centers, systems handling human resources, financial reporting and controls, customer relationship management, regulatory compliance, and other infrastructure operations. We also communicate sensitive data, including patient data, electronically, and through relationships with multiple third-party vendors and their subcontractors. These applications and data encompass a wide variety of sensitive information, including research and development information, patient data, commercial information, and business and financial information. Our ability to monitor these third parties’ security practices is limited, and these third parties may not have adequate security measures in place. If any of our third-party service providers experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if any of our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems or the third-party information technology systems that support us and our services.

Current wording

We rely on third-parties to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, on-site systems and cloud-based data centers, systems handling human resources, financial reporting and controls, customer relationship management, regulatory compliance, and other infrastructure operations. We also communicate sensitive data, including patient data, electronically, and through relationships with multiple third-party vendors and their subcontractors. These applications and data encompass a wide variety of sensitive information, including research and development information, patient data, commercial information, and business and financial information. Our ability to monitor these third parties’ security practices is limited, and these third parties may not have adequate security measures in place. If the third-parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if the third-parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or that of the third-parties with whom we work supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems or the third-party information technology systems that support us and our services.

Previous wording

Despite the measures we have taken to prevent unanticipated problems that could affect our information technology and telecommunications systems, failures or significant downtime of our information technology or telecommunications systems or those used by our third-party service providers could prevent us from conducting tests, preparing and providing reports to our customers, billing customers, collecting revenue, handling inquiries from our customers, conducting research and development activities, and managing the administrative aspects of our business. For example, in 2018, we experienced downtime in our information technology systems in connection with the adoption of new information technology, and our results of operations in the first and second quarters of 2018 were adversely affected as a result. In 2024, we experienced downtime in our information technology systems due to human error in connection with an upgrade by one of our third-party vendors to one of our information technology systems. Our results of operations were not materially adversely affected in the case of the latter downtime. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties upon whom we rely. A security incident or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our platform, products, and services.

Current wording

Despite the measures we have taken to prevent unanticipated problems that could affect our information technology and telecommunications systems, failures or significant downtime of our information technology or telecommunications systems or those used by our third-party service providers could prevent us from conducting tests, preparing and providing reports to our customers, billing customers, collecting revenue, handling inquiries from our customers, conducting research and development activities, and managing the administrative aspects of our business. For example, in 2018, we experienced downtime in our information technology systems in connection with the adoption of new information technology, and our results of operations in the first and second quarters of 2018 were adversely affected as a result. In 2024, we experienced downtime in our information technology systems due to human error in connection with an upgrade by one of our third-party vendors to one of our information technology systems. Our results of operations were not materially adversely affected in the case of the latter downtime. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties upon whom we rely. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our platform, products, and services.

Previous wording

While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). We may not, however, detect and remediate all such vulnerabilities, including on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities, but we may not be able to detect and remediate all vulnerabilities because the threats and techniques used to exploit the vulnerability change frequently and are often sophisticated in nature. Therefore, such vulnerabilities could be exploited but may not be detected until after a security incident has occurred. Further, if the information technology systems of the third parties upon which we rely become subject to security incidents, we may have insufficient recourse against such third parties, and we may have to expend significant resources to mitigate the impact of such an event, and to develop and implement protections to prevent future events of this nature from occurring. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties upon whom we rely. A security incident or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our tests and services and otherwise conduct our business in the ordinary course.

Current wording

While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We may not, however, detect and remediate all such vulnerabilities, including on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities, but we may not be able to detect and remediate all vulnerabilities because the threats and techniques used to exploit the vulnerability change frequently and are often sophisticated in nature. Therefore, such vulnerabilities could be exploited but may not be detected until after a security incident has occurred. Further, if the information technology systems of the third parties with whom we work become subject to security incidents, we may have insufficient recourse against such third parties, and we may have to expend significant resources to mitigate the impact of such an event, and to develop and implement protections to prevent future events of this nature from occurring. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties with whom we work. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our tests and services and otherwise conduct our business in the ordinary course.

Previous wording

Applicable data privacy and security obligations, including applicable federal and/or state breach notification laws and foreign equivalents, as well as public company disclosure obligations, may require us to notify relevant stakeholders, including affected individuals, regulatory authorities and our stockholders, of certain security incidents. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. If we (or a third party upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal information); litigation (including class claims) and mass arbitration; indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may prevent or cause customers or partners to stop using our platform, products, and services, deter new customers or partners from using our platform, products, and services, and negatively impact our ability to grow and operate our business. Whether a cybersecurity incident is reportable to our stockholders may not be straightforward, may take considerable time to determine, and may be subject to change as the investigation of the incident progresses, including changes that may significantly alter any initial disclosure that we provide.

Current wording

Applicable data privacy and security obligations, including applicable federal and/or state breach notification laws and foreign equivalents, as well as public company disclosure obligations, may require us, or we may voluntarily choose, to notify relevant stakeholders, including affected individuals, regulatory authorities and our stockholders, of certain security incidents, or to take other actions, such as providing credit monitoring and identity theft protection services. Such disclosures and related actions can be costly, and the disclosure or the failure to comply with such applicable requirements could lead to adverse consequences. If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal information); litigation (including class claims) and mass arbitration; indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may prevent or cause customers or partners to stop using our platform, products, and services, deter new customers or partners from using our platform, products, and services, and negatively impact our ability to grow and operate our business. Whether a cybersecurity incident is reportable to our stockholders may not be straightforward, may take considerable time to determine, and may be subject to change as the investigation of the incident progresses, including changes that may significantly alter any initial disclosure that we provide.

Previous wording

In the ordinary course of business, we may transfer personal information from Europe and other jurisdictions to the U.S. or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. In particular, the EEA and the U.K. have significantly restricted the transfer of personal information to the U.S. and other countries whose data privacy and security laws they generally believe are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal information from the EEA and U.K. to the U.S. in compliance with law, such as the EEA’s standard contractual clauses, the U.K.'s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework (and U.K. extension thereto) (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in such framework), these mechanisms are susceptible to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal information to the U.S. If there is no lawful manner for us to transfer personal information from the EEA, the U.K. or other jurisdictions to the U.S., or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal information necessary to operate our business. Additionally, companies that transfer personal information out of the EEA and U.K. to other jurisdictions, particularly to the U.S., are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations. EEA countries may also introduce national legislation further limiting the processing of personal genetic, biometric, or health data, which could limit our ability to collect, use and share data originating from the EEA, or could cause our compliance costs to increase, require us to change our practices, adversely impact our business, and harm our financial condition.

Current wording

extension thereto) (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in such framework), these mechanisms are susceptible to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal information to the U.S. If there is no lawful manner for us to transfer personal information from the EEA, the U.K. or other jurisdictions to the U.S., or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal information necessary to operate our business. Additionally, companies that transfer personal information out of the EEA and U.K. to other jurisdictions, particularly to the U.S., are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations. EEA countries may also introduce national legislation further limiting the processing of personal genetic, biometric, or health data, which could limit our ability to collect, use and share data originating from the EEA, or could cause our compliance costs to increase, require us to change our practices, adversely impact our business, and harm our financial condition. The U.S. is also increasingly scrutinizing certain personal data transfers and may impose data localization requirements, for example, the Biden Administration’s executive order Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.

Previous wording

If we or the third parties on which we rely fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans on processing personal information; orders to destroy or not use personal information; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing data privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business operations (including, clinical trials); interruptions or stoppages of data collection needed to train our algorithms; inability to process personal information or to operate in certain jurisdictions; limited ability to develop or commercialize our platform, products, and services; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Current wording

(e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans or restrictions on processing personal information; orders to destroy or not use personal information; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing data privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business operations (including, clinical trials); interruptions or stoppages of data collection needed to train our algorithms; inability to process personal information or to operate in certain jurisdictions; limited ability to develop or commercialize our platform, products, and services; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Previous wording

The growth of our business, including services we provide under our agreement with Natera, and our expansion outside of the U.S. may increase the potential of violating these laws or our internal policies and procedures. The risk of our being found in violation of these or other laws and regulations is further increased by the fact that many have not been fully interpreted by the regulatory authorities or the courts, and their provisions are open to a variety of interpretations. Any action brought against us for violation of these or other laws or regulations, even if we successfully defend against it, could cause us to incur significant legal expenses and reputational harm and divert our management’s attention from the operation of our business. If our operations are found to be in violation of any of these laws and regulations, we may be subject to any applicable penalty associated with the violation, including significant administrative, civil and criminal penalties, damages, fines, disgorgement, imprisonment, exclusion from participation in federal healthcare programs, refunding of payments received by us, integrity oversight and reporting obligations, and curtailment or cessation of our operations. Any of the foregoing consequences could seriously harm our business and our financial results.

Current wording

The growth of our business and our expansion outside of the U.S. may increase the potential of violating these laws or our internal policies and procedures. The risk of our being found in violation of these or other laws and regulations is further increased by the fact that many have not been fully interpreted by the regulatory authorities or the courts, and their provisions are open to a variety of interpretations. Any action brought against us for violation of these or other laws or regulations, even if we successfully defend against it, could cause us to incur significant legal expenses and reputational harm and divert our management’s attention from the operation of our business. If our operations are found to be in violation of any of these laws and regulations, we may be subject to any applicable penalty associated with the violation, including significant administrative, civil and criminal penalties, damages, fines, disgorgement, imprisonment, exclusion from participation in federal healthcare programs, refunding of payments received by us, integrity oversight and reporting obligations, and curtailment or cessation of our operations. Any of the foregoing consequences could seriously harm our business and our financial results.

Previous wording

Other international and geo-political events could also have a serious adverse impact on our business. For instance, in February 2022, Russia initiated military action against Ukraine and the two countries are now at war. In addition, in October 2023, Hamas attacked Israel which provoked a state of war, and there is a risk of a larger conflict. In response, the United States and certain other countries imposed significant sanctions and trade actions against Russia and could impose further sanctions, trade restrictions, and other retaliatory actions. While we cannot predict the broader consequences, the conflict and retaliatory and counter-retaliatory actions could continue to affect, and potentially materially adversely affect, global trade, currency exchange rates, inflation, regional economies, and the global economy, which in turn may increase our costs, disrupt our supply chain, impair our ability to raise or access additional capital when needed on acceptable terms, if at all, or otherwise adversely affect our business, financial condition, and results of operations.

Current wording

Other international and geo-political events could also have a serious adverse impact on our business. For instance, in February 2022, Russia initiated military action against Ukraine and the two countries are now at war. In addition, in October 2023, Hamas attacked Israel which provoked a state of war, and there is now a larger regional conflict. In response, the United States and certain other countries imposed significant sanctions and trade actions against Russia and could impose further sanctions, trade restrictions, and other retaliatory actions. While we cannot predict the broader consequences, the conflict and retaliatory and counter-retaliatory actions could continue to affect, and potentially materially adversely affect, global trade, currency exchange rates, inflation, regional economies, and the global economy, which in turn may increase our costs, disrupt our supply chain, impair our ability to raise or access additional capital when needed on acceptable terms, if at all, or otherwise adversely affect our business, financial condition, and results of operations.

Previous wording

Acting together, our directors, executive officers and their affiliates, and holders of greater than five percent of our outstanding common stock are able to exercise significant influence over our management and affairs and matters requiring stockholder approval, including the election of directors and approval of significant corporate transactions, such as mergers, consolidations or the sale of substantially all of our assets. This concentration of ownership may have the effect of delaying or preventing a third party from acquiring control of our company and could adversely affect the market price of our common stock and may not be in the best interests of our other stockholders.

Current wording

Our directors, executive officers and their affiliates, and holders of greater than five percent of our outstanding common stock, if they were to act together, would be able to exercise significant influence over our management and affairs and matters requiring stockholder approval, including the election of directors and approval of significant corporate transactions, such as mergers, consolidations or the sale of substantially all of our assets. This concentration of ownership may have the effect of delaying or preventing a third party from acquiring control of our company and could adversely affect the market price of our common stock and may not be in the best interests of our other stockholders. In addition, pursuant to the Tempus Agreement (see Note 8 to our consolidated financial statements included in this report), Tempus has agreed to certain voting commitments that require Tempus to vote the shares it acquired from exercising the Tempus Warrants in accordance with the recommendations of the majority of our board of directors with respect to director nominations for any meeting of our stockholders occurring on or before December 31, 2025, as well as various compensation-related matters. These voting commitments terminate on when the parties’ exclusivity obligations expire or terminate under the Tempus Agreement.

Previous wording

Sales of a substantial number of shares of our common stock into the public market, including sales by members of our management or board of directors or entities affiliated with such members, could occur at any time. These sales, or the perception in the market that the holders of a large number of shares intend to sell shares, could reduce the market price of our common stock and could impair our ability to raise capital through the sale of additional equity or equity-related securities. We are unable to predict the effect that such sales may have on the prevailing market price of our common stock. As of June 30, 2024, we had 53,052,847 shares of common stock outstanding, all of which shares were eligible as of such date for sale in the public market, subject in some cases to the volume limitations and manner of sale and other requirements under Rule 144. In addition, upon issuance, shares of common stock subject to outstanding options under our stock option plans as of June 30, 2024 will become eligible for sale in the public market in the future, subject to certain legal and contractual limitations. Moreover, certain holders of shares of our common stock have the right to require us to register these shares under the Securities Act pursuant to an investors’ rights agreement. If our existing stockholders sell substantial amounts of our common stock in the public market, or if the public perceives that such sales could occur, this could have an adverse effect on the market price of our common stock.

Current wording

Sales of a substantial number of shares of our common stock into the public market, including sales by members of our management or board of directors or entities affiliated with such members, could occur at any time. These sales, or the perception in the market that the holders of a large number of shares intend to sell shares, could reduce the market price of our common stock and could impair our ability to raise capital through the sale of additional equity or equity-related securities. We are unable to predict the effect that such sales may have on the prevailing market price of our common stock. As of September 30, 2024, we had 70,638,190 shares of common stock outstanding, all of which shares were eligible as of such date for sale in the public market, subject in some cases to the volume limitations and manner of sale and other requirements under Rule 144. In addition, upon issuance, shares of common stock subject to outstanding options under our stock option plans as of September 30, 2024 will become eligible for sale in the public market in the future, subject to certain legal and contractual limitations. If our existing stockholders sell substantial amounts of our common stock in the public market, or if the public perceives that such sales could occur, this could have an adverse effect on the market price of our common stock.
Rearranged current paragraphs (2)

Current report — wording carried from elsewhere

In the ordinary course of business, we may transfer personal information from Europe and other jurisdictions to the U.S. or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal information to other countries. In particular, the EEA and the U.K. have significantly restricted the transfer of personal information to the U.S. and other countries whose data privacy and security laws they generally believe are inadequate. Other jurisdictions may adopt similarly stringent interpretations of their data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal information from the EEA and U.K. to the U.S. in compliance with law, such as the EEA’s standard contractual clauses, the U.K.'s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework (and U.K.

Current report — wording carried from elsewhere

If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions
Rearranged previous paragraphs (1)

Previous report — wording carried elsewhere

In the European Economic Area (and Northern Ireland) (“EEA”), in order to place an in vitro diagnostic medical device ("IVD"), or an accessory to an IVD, on the market, or put it into service in the EEA, the device must be designed, developed, manufactured and marketed in compliance with the relevant legal framework. On May 26, 2022, the Regulation on In-Vitro Diagnostic Devices (Regulation