Skip to main content

RxSight, Inc.

For the period ended Mar 31, 2025. Filed May 7, 2025.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Mar 31, 2025 · Filed May 7, 2025

RXST$4.540.0%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 493 previous paragraphs and 493 current paragraphs.

445 unchanged; 36 reworded; 9 added; 5 removed; 7 previous and 3 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (9)

Current report

Additionally, the current inflationary environment may materially affect our business and operating results by increasing the costs of our supplies and may drive the U.S. Federal Reserve system to increase interest rates, which in turn may increase our overhead costs. Rising interest rates could make it more difficult to obtain traditional financing on acceptable terms, if at all. Additionally, the general consensus among economists suggests that we should expect a higher recession risk to continue over the next year, which, together with the foregoing, could result in further economic uncertainty and volatility in the capital markets in the near term and, as a result could negatively affect our operations. Furthermore, such economic conditions have produced downward pressure on share prices. Although we do not believe that inflation has had a material impact on our financial positions or results of operations to date, additional high inflation could increase our operating costs, including our labor costs and research and development costs. These costs may also be negatively impacted due to supply chain constraints, global geopolitical tensions, worsening macroeconomic conditions and employee availability and wage increases, which may result in additional stress on our working capital. We import from China certain materials and other components for use in our products, and such goods are subject to tariffs. Increases in tariffs could result in increased costs.

Current report

Changes in United States trade policy, including recently announced tariffs, could have a material adverse impact on our business, financial condition, and results of operations.

Current report

Changes in United States trade policy, including recently announced tariffs, could have a material adverse impact on our business, financial condition, and results of operations. The imposition of retaliatory or new tariffs or increases in existing tariffs on goods imported from countries where we source our products could result in increased material costs for our products. If we are unable to mitigate these risks through supply chain adjustments, such as changing vendors, pricing strategies, or other measures could adversely effect our gross margins, business, financial condition and results of operations.

Current report

Our internal computer systems, contractors or consultants or potential future collaborators, may fail or suffer actual or suspected security or privacy breaches or incidents or other unauthorized or improper access to, use of, or destruction of our proprietary or confidential data, employee data, or personal data, which could result in additional costs, loss of revenue, significant liabilities, harm our brand and cause material disruption to our operations.

Current report

Despite the implementation of security measures in an effort to protect systems that store our information, given their size and complexity and the increasing amounts of information maintained on our internal information technology systems and external processing and storage systems (e.g., hosting), contractors and consultants and other third-party service providers, these systems are potentially vulnerable to breakdown or other damage or interruption. Our systems and the systems of third parties who support our operations are vulnerable to service interruptions, system malfunction, natural disasters, terrorism, war (such as the ongoing conflicts in the Middle East and between Ukraine and Russia) and telecommunication and electrical failures, as well as security breaches and incidents arising from or caused by inadvertent or intentional actions by our employees, contractors, consultants, business partners, and/or other third parties, or from cyber-attacks by malicious third parties (including the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information), which may compromise our system infrastructure or lead to unauthorized access to or disruption of our or third-party systems used in our business and the unauthorized access to, misuse, disclosure, loss, destruction, alteration or dissemination of, or damage to, our data, including trade secrets or other confidential information, intellectual property, proprietary business information, and personal information. For example, companies have experienced an increase in phishing and social engineering attacks from third parties in recent years. Our employees generally work in a hybrid model in our offices and from home, and we may need to adjust our working model from time to time. As a result, we have increased cyber security and data security risks, due to increased use of home wi-fi networks and virtual private networks, as well as increased disbursement of physical machines.

Current report

Further, under the new leadership at the HHS under the Trump administration, agency reorganization, departure of high-profile regulators at the FDA, and reduction in force (RIF) initiative, or layoffs, may impact the normal operations at the FDA as well as other federal agencies. FDA may lack adequate staff and resources to meet current review, approval, and inspection schedules, which could delay our anticipated timelines. In January 2025, President Trump issued an executive order entitled “Unleashing Prosperity Through Deregulation”, which calls for at least 10 existing regulations to be repealed whenever an executive department or agency publicly proposes for notice and comment or otherwise promulgates a new regulation. It is unclear how our industry and our clinical programs will be impacted by policies and regulations implemented under the Trump administration and the new FDA commissioner, Dr. Martin Makary, or other executive orders. There is significant uncertainty in the industry and how federal agencies like the FDA will change in the coming years under the Trump administration. To the extent the agency reorganization and other agency changes lead to disruptions in FDA’s operations, including changes resulting from executive orders; freeze on hiring, federal funding for research, and external communications; layoffs; return-to-office policies, and changes in funding for certain programs at the FDA, correspondence and regulatory review processes with the FDA may be materially delayed.

Current report

research published by securities or industry analysts about our business and prospects;

Current report

On February 25, 2025, we filed a registration statement on Form S-8 under the Securities Act to register the issuance of 1,617,128 shares of common stock subject to options or other equity awards reserved for future issuance under the 2021 Plan. The number of shares to be registered represents the annual evergreen increase calculated as 4% of the outstanding shares of our common stock on the last day of fiscal year 2024 under our 2021 Plan.

Current report

Factors such as geopolitical events (including the conflicts in Eastern Europe and the Middle East), inflationary pressures, public health crises, and U.S. election cycles have caused extreme volatility and disruptions in the capital and credit markets in recent years. Uncertainty or unfavorable global economic conditions could result in a variety of impacts to our business, including weakening demand for our products, and adversely impacting our ability to raise additional capital when needed on acceptable terms, if at all. A weak or declining economy has strained in the past and may in the future strain our manufacturers or suppliers, possibly resulting in supply disruption, or cause our customers to delay making payments for our products. Further, the Trump administration has proposed or enacted tariffs and substantial changes to trade policies, which could adversely affect our business. For example, the Trump administration has imposed tariffs on certain foreign products, including most recently from Canada, Mexico and China, that in the past have resulted in and may result in future retaliatory tariffs on U.S. goods and products. We cannot predict whether these policies will continue, or if new policies will be enacted, or the impact, if any, that any policy changes could have on our business. Any of the foregoing could harm our business and we cannot anticipate all of the ways in which the economic climate and financial market conditions could adversely affect our business.
Removed paragraphs (5)

Previous report

In addition, certain of our future agreements with third parties may limit or delay our ability to consummate certain transactions, may impact the value of those transactions, or may limit our ability to pursue certain activities.

Previous report

For example, we may in the future enter into license agreements that are not assignable or transferable, or that require the licensor’s express consent in order for an assignment or transfer to take place.

Previous report

We have incurred increased costs as a result of operating as a public company, and our management devotes substantial time to new compliance initiatives and corporate governance practices. Additionally, if we fail to maintain proper and effective internal controls, our ability to produce accurate financial statements on a timely basis could be impaired.

Previous report

As a public company we are incurring significant legal, accounting and other expenses and these expenses may increase since after December 31, 2023, we are no longer considered an “emerging growth company.” We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Protection Act, as well as rules adopted, and to be adopted, by the SEC and Nasdaq. Our management and other personnel will need to devote a substantial amount of time and effort to these compliance initiatives. Moreover, we expect these rules and regulations to substantially increase our legal and financial compliance costs and to make some activities more time-consuming and costly, which will increase our operating expenses. For example, we expect these rules and regulations to make it more difficult and more expensive for us to obtain director and officer liability insurance and we may be required to incur substantial costs to maintain sufficient coverage. We cannot accurately predict or estimate the amount or timing of additional costs we may incur to respond to these requirements. The impact of these requirements could also make it more difficult for us to attract and retain qualified employees and persons to serve on our Board of Directors, our board committees or as executive officers.

Previous report

In addition, Section 203 of the General Corporation Law of the State of Delaware, (“DGCL”), prohibits a publicly-held Delaware corporation from engaging in a business combination with an interested stockholder, generally a person which together with its affiliates owns, or within the last three years has owned, 15% of our voting stock, for a period of three years after the date of the transaction in which the person became an interested stockholder, unless the business combination is approved in a prescribed manner.
Reworded paragraphs (36)

Previous wording

We have incurred losses from operations since our inception and expect to continue to incur losses from operations in the future. We reported losses from operations of $50.1 million and $63.3 million for the years ended December 31, 2023 and 2022, respectively, and $9.2 million for the three months ended September 30, 2024. As a result of these losses, as of September 30, 2024, we had an accumulated deficit of $616.2 million. We expect to continue to incur significant sales and marketing, research and development, regulatory and other expenses as we expand our marketing efforts to increase adoption of our products, expand existing relationships with our customers, obtain regulatory clearances or approvals for our planned or future products, conduct clinical trials on our existing and planned or future products and develop new products or add new features to our existing products. In addition, we expect our general and administrative expenses to increase due to the costs associated with being a public company.

Current wording

We have incurred losses from operations since our inception and expect to continue to incur losses from operations in the future. We reported losses from operations of $36.9 million and $50.1 million for the years ended December 31, 2024 and 2023, respectively, and $10.7 million for the three months ended March 31, 2025 and 2024, respectively. As a result of these losses, as of March 31, 2025, we had an accumulated deficit of $630.3 million. We expect to continue to incur significant sales and marketing, research and development, regulatory and other expenses as we expand our marketing efforts to increase adoption of our products, expand existing relationships with our customers, obtain regulatory clearances or approvals for our planned or future products, conduct clinical trials on our existing and planned or future products and develop new products or add new features to our existing products.

Previous wording

As of September 30, 2024 and December 31, 2023, we had $237.1 million and $127.2 million, respectively, in cash, cash equivalents and short-term investments. While we believe that our existing cash, cash equivalents and short-term investments and anticipated cash generated from sales of our products will be sufficient to meet our anticipated cash needs for at least 12 months following the date of this report, we cannot assure you that we will be able to generate sufficient liquidity as and when needed. Further, although we do not anticipate the need to raise additional capital or incur additional debt in order to reach profit from operations, as such metric may be disclosed in the Company’s future Annual Reports on Form 10-K or Quarterly Reports on Form 10-Q filed with the SEC, though we may opportunistically seek to raise capital under advantageous circumstances from time to time in order to support the expansion of our sales and operations in the U.S. and internationally and to pursue other business opportunities. We have based this estimate on assumptions that may prove to be wrong, and we could use our capital resources sooner than we currently expect. Changing circumstances, some of which may be beyond our control, could cause us to consume capital significantly faster than we currently anticipate, and we may need to seek additional funds sooner than planned. We cannot assure you that we will be able to generate sufficient liquidity as and when needed.

Current wording

As of March 31, 2025 and December 31, 2024, we had $229.3 million and $237.2 million, respectively, in cash, cash equivalents and short-term investments. While we believe that our existing cash, cash equivalents and short-term investments and anticipated cash generated from sales of our products will be sufficient to meet our anticipated cash needs for at least 12 months following the date of this report, we cannot assure you that we will be able to generate sufficient liquidity as and when needed. Further, although we do not anticipate the need to raise additional capital or incur additional debt in order to reach profit from operations, as such metric may be disclosed in the Company’s future Annual Reports on Form 10-K or Quarterly Reports on Form 10-Q filed with the SEC, we may opportunistically seek to raise capital under advantageous circumstances from time to time in order to support the expansion of our sales and operations in the U.S. and internationally and to pursue other business opportunities. We have based this estimate on assumptions that may prove to be wrong, and we could use our capital resources sooner than we currently expect. Changing circumstances, some of which may be beyond our control, could cause us to consume capital significantly faster than we currently anticipate, and we may need to seek additional funds sooner than planned. We cannot assure you that we will be able to generate sufficient liquidity as and when needed.

Previous wording

Global economic, political and market conditions, including downgrades of the U.S. credit rating, may adversely affect our business, results of operations and financial condition, including our revenue growth and profitability.

Current wording

Global economic, political and market conditions, including downgrades of the U.S. credit rating, and inflation may adversely affect our business, results of operations and financial condition, including our revenue growth and profitability.

Previous wording

Deterioration in the economic conditions globally resulting in instability in global financial markets, including the following, may pose a risk to our business: inflation and rising interest rates, large sovereign debts and fiscal deficits of several countries in Europe and in emerging markets’ jurisdictions, levels of non-performing loans on the balance sheets of European banks, the effect of the United Kingdom leaving the European Union, and instability in the capital markets.

Current wording

Deterioration in the economic conditions globally resulting in instability in global financial markets, including: inflation and rising interest rates and instability in the capital markets.

Previous wording

Our ability to grow our revenue in future periods will depend on our ability to successfully penetrate our target markets and increase sales of our RxSight system and any new product or product indications that we introduce, which will, in turn, depend in part on our success in growing our user base and driving increased use of our products. New products or product indications will also need to be approved or cleared by the FDA and comparable non-U.S. regulatory agencies in any international markets we target in order to commercialize them. If we cannot achieve revenue growth or achieve or sustain profitability, it could have a material adverse effect on our business, financial condition and results of operations.

Current wording

If we fail to successfully market and sell our products, we will not be able to grow our revenue or achieve profitability, which will have a material adverse effect on our business, financial condition and results of operations. Our ability to grow our revenue in future periods will depend on our ability to successfully penetrate our target markets and increase sales of our RxSight system and any new product or product indications that we introduce, which will, in turn, depend in part on our success in growing our user base and driving increased use of our products. New products or product indications will also need to be approved or cleared by the FDA and comparable non-U.S. regulatory agencies in any international markets we target in order to commercialize them. If we cannot achieve revenue growth or achieve or sustain profitability, it could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

Our success will depend, in part, on the acceptance of our RxSight system as safe, effective and, with respect to doctors, cost-effective. We cannot predict how quickly, if at all, patients, doctors, or payors will accept our RxSight system or, if accepted, how frequently it will be used. Our RxSight system and planned or future products we may develop or market may never gain broad market acceptance for some or all of our targeted indications. Patients and doctors must believe that our products offer benefits over alternative treatment methods. To date, a substantial majority of our product sales and revenue have been derived from a limited number of customers who have adopted our RxSight system. Our future growth and profitability largely depend on our ability to increase doctors’ awareness of our RxSight system and our products and on the willingness of patients and doctors to adopt them. These parties may not adopt our products unless they are able to determine, based on experience, clinical data, medical society recommendations and other analyses, that our products are safe, effective and, with respect to providers, cost-effective, on a stand-alone basis and relative to competitors’ products. Patients and doctors must believe that our products offer benefits over alternative treatment methods. Even if we are able to raise awareness, doctors tend to be slow in changing their medical treatment practices and may be hesitant to select our products for recommendation to their patients for a variety of reasons, including:

Current wording

Our success will depend, in part, on the acceptance of our RxSight system as safe, effective and, with respect to doctors, cost-effective. We cannot predict how quickly, if at all, patients, doctors, or payors will accept our RxSight system or, if accepted, how frequently it will be used. Our RxSight system and planned or future products we may develop or market may never gain broad market acceptance for some or all of our targeted indications. Patients and doctors must believe that our products offer benefits over alternative treatment methods. To date, a substantial majority of our product sales and revenue have been derived from current customers that have adopted our RxSight system. Our future growth and profitability largely depend on our ability to increase other doctors’ awareness of our RxSight system and our products and on the willingness of doctors and patients to adopt them. These parties may not adopt our products like our current customers have unless they are able to determine, based on experience, clinical data, medical society recommendations and other analyses, that our products are safe, effective and, with respect to providers, cost-effective, on a stand-alone basis and relative to competitors’ products. Patients and doctors must believe that our products offer benefits over alternative treatment methods. Even if we are able to raise awareness, doctors tend to be slow in changing their medical treatment practices and may be hesitant to select our products for recommendation to their patients for a variety of reasons, including:

Previous wording

The medical device industry is intensely competitive, subject to rapid change and significantly affected by new product introductions and other market activities of industry participants. We compete with manufacturers and distributors of premium and conventional IOLs. Our most significant competitors in the IOL field include Alcon, Johnson & Johnson Vision and Bausch + Lomb. Many of our competitors are large, well-capitalized companies with significantly greater market share and resources than we have. Therefore, they can spend more on product development, marketing, sales and other product initiatives than we can. We also compete with smaller medical device companies that have a single product or a limited range of products. In addition, patients who receive an LAL will be required to wear UV protective glasses until final lock-in which is approximately four to five weeks after surgery. They will also be required to return for an additional two to three clinic visits compared to traditional monofocal cataract surgery. The additional clinic visits are non-surgical but do require the patient’s eyes to be dilated. Due to these additional requirements, market acceptance of the LAL may be impacted. We believe the principal competitive factors in our markets include:

Current wording

The medical device industry is intensely competitive, subject to rapid change and significantly affected by new product introductions and other market activities of industry participants. We compete with manufacturers and distributors of premium and conventional IOLs. Our most significant competitors in the IOL field include Alcon, Johnson & Johnson and Bausch + Lomb. Many of our competitors are large, well-capitalized companies with significantly greater market share and resources than we have. Therefore, they can spend more on product development, marketing, sales and other product initiatives than we can. We also compete with smaller medical device companies that have a single product or a limited range of products. In addition, patients who receive an LAL will be required to wear UV protective glasses until final lock-in which is approximately four to five weeks after surgery. They will also be required to return for an additional two to three clinic visits compared to traditional monofocal cataract surgery. The additional clinic visits are non-surgical but do require the patient’s eyes to be dilated. Due to these additional requirements, market acceptance of the LAL may be impacted. We believe the principal competitive factors in our markets include:

Previous wording

Doctor learning curves and willingness to adopt new technologies;

Current wording

Doctor learning curves and willingness to adopt new technologies, particularly during competitive launch periods;

Previous wording

We currently maintain our research and development, manufacturing and administrative operations in Aliso Viejo, California, and we do not have redundant facilities. We operate in four separate facilities, designated as a single manufacturing facility, and should any one of these facilities be significantly damaged or destroyed by natural or man-made disasters, such as earthquakes, fires (both of which are prevalent in California) or other events, it could take months to relocate or rebuild, during which time our employees may seek other positions, our research, development and manufacturing would cease or be delayed and our products may be unavailable. A major interruption in the manufacturing operations at this facility would materially impact our ability to operate. Because of the time required to authorize manufacturing in a new facility under federal, state and non-U.S. regulatory requirements, we may not be able to resume production on a timely basis even if we are able to replace production capacity. While we maintain property and business interruption insurance, such insurance has limits and would not cover all damages, including losses caused by earthquakes or losses we may suffer due to our products being replaced by competitors’ products. The inability to perform our research, development and manufacturing activities if our facilities become inoperable, combined with our limited inventory of materials and components and manufactured products, may cause doctors to discontinue using our products or harm our reputation, and we may be unable to re-establish relationships with such doctors in the future. Consequently, a catastrophic event at our current facility or any future facilities could have a material adverse effect on our business, financial condition and results of operations.

Current wording

We currently maintain our research and development, manufacturing and administrative operations in Aliso Viejo, California, and we do not have redundant facilities. We operate in four separate facilities, designated as a single manufacturing facility, and should any one of these facilities be significantly damaged or destroyed by natural or man-made disasters, such as earthquakes, and/or fires (both of which are prevalent in California) or other events, it could take months to relocate or rebuild, during which time our employees may seek other positions, our research, development and manufacturing would cease or be delayed and our products may be unavailable. A major interruption in the manufacturing operations at this facility would materially impact our ability to operate. Because of the time required to authorize manufacturing in a new facility under federal, state and non-U.S. regulatory requirements, we may not be able to resume production on a timely basis even if we are able to replace production capacity. While we maintain property and business interruption insurance, such insurance has limits and would not cover all damages, including losses caused by earthquakes or losses we may suffer due to our products being replaced by competitors’ products. The inability to perform our research, development and manufacturing activities if our facilities become inoperable, combined with our limited inventory of materials and components and manufactured products, may cause doctors to discontinue using our products or harm our reputation, and we may be unable to re-establish relationships with such doctors in the future. Consequently, a catastrophic event at our current facility or any future facilities could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

Furthermore, the current leases on our four facilities expire or have options to extend until January 31, 2031, with two options to extend for five years each. We may be unable to renew our leases or find a new facility on commercially reasonable terms, or at all. If we were unable or unwilling to renew at the proposed rates, relocating our manufacturing facility would involve significant expense in connection with the movement and installation of key manufacturing equipment and any necessary recertification with regulatory bodies, and we cannot assure you that such a move would not delay or otherwise adversely affect our manufacturing activities or operating results. If our manufacturing capabilities were impaired by any such move, we may not be able to manufacture and ship our products in a timely manner, which would adversely impact our business.

Current wording

Furthermore, the current leases on our four facilities expire on January 31, 2031, with two options to extend for five years each. We may be unable to renew our leases or find a new facility on commercially reasonable terms, or at all. If we were unable or unwilling to renew at the proposed rates, relocating our manufacturing facility would involve significant expense in connection with the movement and installation of key manufacturing equipment and any necessary recertification with regulatory bodies, and we cannot assure you that such a move would not delay or otherwise adversely affect our manufacturing activities or operating results. If our manufacturing capabilities were impaired by any such move, we may not be able to manufacture and ship our products in a timely manner, which would adversely impact our business.

Previous wording

We have limited data and experience regarding the safety and efficacy of our RxSight system. Results of earlier studies may not be predictive of future clinical trial results, and planned studies may not establish an adequate safety or efficacy profile for our RxSight system and other planned or future products, which would affect market acceptance of our RxSight system.

Current wording

Results of earlier studies may not be predictive of future clinical trial results, and planned studies may not establish an adequate safety or efficacy profile for our RxSight system and other planned or future products, which would affect market acceptance of our RxSight system.

Previous wording

For example, as previously disclosed, on May 2, 2024, an unauthorized actor targeted the personal cell phone number of an RxSight employee. On May 3, 2024, the unauthorized actor obtained unauthorized access to the employee’s cloud-based work account and to e-mails and files that were accessible from that account. We discovered the incident on the same day, May 3, 2024, promptly disabled the employee’s account, initiated response and investigation procedures, contacted our insurance provider, and retained external cybersecurity experts to assist in our response and investigation. While the unauthorized actor accessed and acquired copies of e-mail messages and other materials that were accessible from the employee’s cloud-based work account, our information systems were never interrupted and remained operational during this unauthorized access, and we have not observed any aspect of this incident will have a material impact on our operations, financial systems, or financial condition. However, there can be no assurance as to whether the incident will have a future material impact on our operations, financial systems, or financial condition and we remain subject to various risks due to the incident.

Current wording

For example, as previously disclosed, on May 2, 2024, an unauthorized actor targeted the personal cell phone number of an RxSight employee. On May 3, 2024, the unauthorized actor obtained unauthorized access to the employee’s cloud-based work account and to e-mails and files that were accessible from that account. We discovered the incident on the same day, May 3, 2024, promptly disabled the employee’s account, initiated response and investigation procedures, contacted our insurance provider, and retained external cybersecurity experts to assist in our response and investigation. While the unauthorized actor accessed and acquired copies of e-mail messages and other materials that were accessible from the employee’s cloud-based work account, our information systems were never interrupted and remained operational during this unauthorized access, and we have not observed any aspect of this incident that has had a material impact on our operations, financial systems, or financial condition. However, there can be no assurance as to whether the incident will have a future material impact on our operations, financial systems, or financial condition and we remain subject to various risks due to the incident.

Previous wording

We maintain information security tools and technologies, staff, policies and procedures for managing risk to our networks and information systems, and conduct employee training on cybersecurity designed to mitigate persistent and continuously evolving cybersecurity threats. Our network security controls are comprised of administrative, physical and technical controls, which include, but are not limited to, the implementation of firewalls, anti-virus protection, patches, log monitors, routine backups, off-site storage, network audits and other routine updates and modifications. We also routinely monitor and develop our internal information technology systems to address risks to our information systems. Any system failure, accident or security breach could result in disruptions to our business processes, network degradation, and system down time, along with the potential that a third-party will gain unauthorized access to, or acquire intellectual property, proprietary business information, and data related to our employees, customers, suppliers, and business partners, including personal data. To the extent that any disruption, degradation, downtime or other security event results in a loss or damage to our data or systems, or in inappropriate disclosure of confidential or personal data, it could adversely impact us and our customers, potentially resulting in, among other things, financial losses, loss of customers or business, our inability to transact business, adverse impact on our reputation, violations of applicable privacy, data protection, security and other laws, regulatory fines, penalties, litigation, reputational damage, reimbursement, or additional compliance and regulatory costs. We may also incur additional costs related to cybersecurity risk management and remediation. There can be no assurance that we or our service providers, if applicable, will not suffer losses relating to cyber-attacks or security breaches or incidents in the future or that our insurance coverage will be adequate to cover all the costs resulting from such events. No assurances can be given that our efforts to reduce the risk of such attacks or to detect attacks that occur will be successful and our failure to do so could have a material adverse effect on our business, financial condition and results of operations.

Current wording

We maintain information security tools and technologies, staff, policies and procedures for managing risk to our networks and information systems, and conduct employee training on cybersecurity designed to mitigate persistent and continuously evolving cybersecurity threats. Our network security controls are comprised of administrative, physical and technical controls, which include, but are not limited to, the implementation of firewalls, anti-virus protection, patches, log monitors, routine backups, off-site storage, network audits and other routine updates and modifications. We also routinely monitor and develop our internal information technology systems to address risks to our information systems. Any system failure, accident or security breach or incident could result in disruptions to our business processes, network degradation, and system down time, along with the potential that a third-party will gain unauthorized access to, acquire, or otherwise use, modify, or process intellectual property, proprietary business information, and data related to our employees, customers, suppliers, and business partners, including personal data, in an unauthorized manner. any disruption, degradation, or other security breach, incident, or other event that results in loss or unavailability of or damage to our data or systems, system downtime or other disruptions, or in inappropriate disclosure or other processing of confidential or personal data, could adversely impact us and our customers, potentially resulting in, among other things, financial losses, loss of customers or business, our inability to transact business, adverse impact on our reputation, actual or alleged violations of applicable privacy, data protection, security and other laws, regulatory fines, penalties, litigation, reputational damage, reimbursement, or additional compliance and regulatory costs. We may also incur additional costs related to cybersecurity risk management and remediation.

Previous wording

We have expanded, and expect to continue to expand, our organization, including expanding our sales and marketing capability and creating additional infrastructure to support our operations as a public company, and as a result, we may encounter difficulties in managing our growth, which could disrupt our operations.

Current wording

We have expanded, and may continue to expand, our organization, including expanding our sales and marketing capability and creating additional infrastructure to support our operations as a public company, and as a result, we may encounter difficulties in managing our growth, which could disrupt our operations.

Previous wording

We have and expect to experience significant growth in the number of our employees and the scope of our operations, particularly in the areas of sales and marketing and finance and accounting. To manage our anticipated future growth, we must continue to implement and improve our managerial, operational and financial systems, expand our facilities and continue to recruit and train additional qualified personnel. Due to our limited financial resources and our limited experience in managing such anticipated growth, we may not be able to effectively manage the expansion of our operations or recruit and train additional qualified personnel. The expansion of our operations may lead to significant costs and may divert or stretch our management and business development resources in a way that we may not anticipate. Any inability to manage growth could delay the execution of our business plans or disrupt our operations.

Current wording

We have experienced growth in the number of our employees and the scope of our operations, particularly in the areas of sales and marketing and finance and accounting. To manage our anticipated future growth, we must continue to implement and improve our managerial, operational and financial systems, expand our facilities and continue to recruit and train additional qualified personnel. Due to our limited financial resources and our limited experience in managing such anticipated growth, we may not be able to effectively manage the expansion of our operations or recruit and train additional qualified personnel. The expansion of our operations may lead to significant costs and may divert or stretch our management and business development resources in a way that we may not anticipate. Any inability to manage growth could delay the execution of our business plans or disrupt our operations.

Previous wording

As of December 31, 2023, we had federal net operating loss carryforwards (“NOLs”) of approximately $311.2 million, some of which will begin to expire in various years ranging from 2024 to 2037. Our NOLs could expire unused and be unavailable to offset future income tax liabilities because of their limited duration or because of restrictions under U.S. tax law. Under the Tax Cuts and Jobs Act (“Tax Act”), as modified by the Coronavirus Aid, Relief, and Economic Security Act, or the CARES Act, our federal NOLs generated in tax years ending after December 31, 2017 may be carried forward indefinitely, but the deductibility of such federal NOLs in tax years beginning after December 31, 2020 is limited to 80% of taxable income. It is uncertain if and to what extent various states will conform to the Tax Act, as modified by the CARES Act.

Current wording

As of December 31, 2024, we had federal net operating loss carryforwards (“NOLs”) of approximately $345.2 million, some of which will begin to expire in various years ranging from 2025 to 2037. Our NOLs could expire unused and be unavailable to offset future income tax liabilities because of their limited duration or because of restrictions under U.S. tax law. Under the Tax Cuts and Jobs Act (“Tax Act”), as modified by the Coronavirus Aid, Relief, and Economic Security Act, or the CARES Act, our federal NOLs generated in tax years ending after December 31, 2017 may be carried forward indefinitely, but the deductibility of such federal NOLs, is generally limited to 80% of taxable income. It is uncertain if and to what extent various states will conform to the Tax Act, as modified by the CARES Act.

Previous wording

Furthermore, our owned and in-licensed patents may be subject to a reservation of rights by one or more third parties. For example, this could arise if the research resulting in certain of our owned or in-licensed patent rights and technology was funded in part by the United States government. As a result, the government may have certain rights, or march-in rights, to such patent rights and technology. When new technologies are developed with government funding, the government generally obtains certain rights in any resulting patents, including a non-exclusive license authorizing the government to use the invention for non-commercial purposes. These rights may permit the government to disclose our confidential information to third parties and to exercise march-in rights to use or allow third parties to use our licensed technology. The government can exercise its march-in rights if it determines that action is necessary because we fail to achieve practical application of the government-funded technology, because action is necessary to alleviate health or safety needs, to meet requirements of federal regulations, or to give preference to United States industry. In addition, our rights in such inventions may be subject to certain requirements to manufacture products embodying such inventions in the United States. Recently, the government released a draft framework that may be used by an agency when deciding to exercise its march-in rights for public comments, and as such, the framework for deciding when march-in rights are exercised may change. Any exercise by the government of such rights could harm our competitive position, business, financial condition, results of operations and prospects.

Current wording

Furthermore, our owned and in-licensed patents may be subject to a reservation of rights by one or more third parties. For example, this could arise if the research resulting in certain of our owned or in-licensed patent rights and technology was funded in part by the United States government. As a result, the government may have certain rights, or march-in rights, to such patent rights and technology. When new technologies are developed with government funding, the government generally obtains certain rights in any resulting patents, including a non-exclusive license authorizing the government to use the invention for non-commercial purposes. These rights may permit the government to disclose our confidential information to third parties and to exercise march-in rights to use or allow third parties to use our licensed technology. The government can exercise its march-in rights if it determines that action is necessary because we fail to achieve practical application of the government-funded technology, because action is necessary to alleviate health or safety needs, to meet requirements of federal regulations, or to give preference to United States industry. In addition, our rights in such inventions may be subject to certain requirements to manufacture products embodying such inventions in the United States. The United States government has released a draft framework that may be used by an agency when deciding to exercise its march-in rights for public comments, and as such, the framework for deciding when march-in rights are exercised may change. Any exercise by the government of such rights could harm our competitive position, business, financial condition, results of operations and prospects.

Previous wording

The medical device industry has been characterized by extensive litigation regarding patents, trademarks, trade secrets and other intellectual property rights, and companies in the industry have used intellectual property litigation to gain a competitive advantage. It is possible that U.S. and foreign patents and pending patent applications, copyrights, or trademarks controlled by third parties may be alleged to cover our products, or that we may be accused of misappropriating third parties’ trade secrets. Additionally, our products include components that we purchase from vendors, and may include design components that are outside of our direct control. Our competitors, many of which have substantially greater resources and have made substantial investments in patent portfolios, trade secrets, copyrights, trademarks and competing technologies, may have applied for or obtained, or may in the future apply for or obtain, patents, copyrights, or trademarks that will prevent, limit or otherwise interfere with our ability to make, use, sell and/or export our products or to use product names. Because patent applications can take years to issue and are often afforded confidentiality for some period of time, there may currently be pending applications, unknown to us, that later result in issued patents that could cover one or more of our products. Moreover, in recent years, individuals and groups that are non-practicing entities, commonly referred to as “patent trolls,” have purchased patents and other intellectual property assets for the purpose of making claims of infringement in order to extract settlements. From time to time, we may receive threatening letters, notices or “invitations to license,” or may be the subject of claims that our products and business operations infringe or violate the intellectual property rights of others. We may face patent infringement claims from non-practicing entities that have no relevant product revenue and against whom our owned or in-licensed patent portfolio may therefore have no deterrent effect. We may in the future become party to adversarial proceedings or litigation where our competitors or other third parties may assert claims against us, alleging that our products or services infringe, misappropriate or otherwise violate their intellectual property rights, including patents and trade secrets. The defense of these matters can be time consuming, be costly, divert management’s attention and resources, damage our reputation and brand and cause us to incur significant expenses or make substantial payments. Vendors from whom we purchase hardware or software may not indemnify us in the event that such hardware or software is accused of infringing a third party’s patent or trademark or of misappropriating a third party’s trade secret, or any indemnification granted by such vendors may not be sufficient to address any liability and costs we incur as a result of such claims. Additionally, we may be obligated to indem…

Excerpt shortened here; the source contains the full paragraph.

Current wording

The medical device industry has been characterized by extensive litigation regarding patents, trademarks, trade secrets and other intellectual property rights, and companies in the industry have used intellectual property litigation to gain a competitive advantage. It is possible that U.S. and foreign patents and pending patent applications, copyrights, or trademarks controlled by third parties may be alleged to cover our products, or that we may be accused of misappropriating third parties’ trade secrets. Additionally, our products include components that we purchase from vendors, and may include design components that are outside of our direct control. Our competitors, many of which have substantially greater resources and have made substantial investments in patent portfolios, trade secrets, copyrights, trademarks and competing technologies, may have applied for or obtained, or may in the future apply for or obtain, patents, copyrights, or trademarks that will prevent, limit or otherwise interfere with our ability to make, use, sell and/or export our products or to use product names. Because patent applications can take years to issue and are often afforded confidentiality for some period of time, there may currently be pending applications, unknown to us, that later result in issued patents that could cover one or more of our products. Moreover, in recent years, individuals and groups that are non-practicing entities, commonly referred to as “patent trolls,” have purchased patents and other intellectual property assets for the purpose of making claims of infringement in order to extract settlements. From time to time, we may receive threatening letters, notices or “invitations to license,” or may be the subject of claims that our products and business operations infringe or violate the intellectual property rights of others. We may face patent infringement claims from non-practicing entities that have no relevant product revenue and against whom our owned or in-licensed patent portfolio may therefore have no deterrent effect. We may in the future become party to adversarial proceedings or litigation where our competitors or other third parties may assert claims against us, alleging that our products or services infringe, misappropriate or otherwise violate their intellectual property rights, including patents and trade secrets. The defense of these matters can be time consuming, costly, divert management’s attention and resources, damage our reputation and brand and cause us to incur significant expenses or make substantial payments. Vendors from whom we purchase hardware or software may not indemnify us in the event that such hardware or software is accused of infringing a third party’s patent or trademark or of misappropriating a third party’s trade secret, or any indemnification granted by such vendors may not be sufficient to address any liability and costs we incur as a result of such claims. Additionally, we may be obligated to indemnif…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Since June 1, 2023, European applications have the option, upon grant of a patent, of becoming a Unitary Patent which will be subject to the jurisdiction of the Unitary Patent Court (“UPC”). This is a significant change in European patent practice. As the UPC is a new court system, there is no precedent for the court, increasing the uncertainty of any litigation.

Current wording

Since June 1, 2023, European applications have the option, upon grant of a patent, of becoming a Unitary Patent which will be subject to the jurisdiction of the Unitary Patent Court (“UPC”). This is a significant change in European patent practice. As the UPC is a new court system, precedent is developing for the court, increasing the uncertainty of any litigation.

Previous wording

FDA-cleared device that could significantly affect its safety or efficacy or that would constitute a major change in its intended use would require a new 510(k) clearance or possibly a PMA. We may not be able to obtain the required 510(k) clearances or PMAs, or PMA supplements, or similar marketing authorization in applicable foreign jurisdictions, for new products or for modifications to, or additional indications for, our products in a timely fashion, or at all. Delays in obtaining required future clearances or approvals would adversely affect our ability to introduce new or enhanced products in a timely manner, which in turn would harm our future growth. We have made modifications to our products in the past and expect to make additional modifications in the future that we believe do not or will not require additional clearances or approvals. If the FDA or a comparable foreign regulatory authority disagrees and requires new clearances or approvals for these modifications, we may be required to recall and to stop selling or marketing such products as modified, which could harm our operating results and require us to redesign such products. In these circumstances, we may be subject to significant enforcement actions.

Current wording

Modifications that could significantly affect the safety and effectiveness of our approved or cleared products, such as changes to the intended use or technological characteristics of our products, will require new 510(k) clearances or PMAs or require us to recall or cease marketing the modified devices until these clearances or approvals are obtained. Based on FDA published guidelines, the FDA requires device manufacturers to initially make and document a determination of whether or not a modification requires a new approval, supplemental approval or clearance; however, the FDA can review a manufacturer’s decision. Any modification to an FDA-cleared device that could significantly affect its safety or efficacy or that would constitute a major change in its intended use would require a new 510(k) clearance or possibly a PMA. We may not be able to obtain the required 510(k) clearances or PMAs, or PMA supplements, or similar marketing authorization in applicable foreign jurisdictions, for new products or for modifications to, or additional indications for, our products in a timely fashion, or at all. Delays in obtaining required future clearances or approvals would adversely affect our ability to introduce new or enhanced products in a timely manner, which in turn would harm our future growth. We have made modifications to our products in the past and expect to make additional modifications in the future that we believe do not or will not require additional clearances or approvals. If the FDA or a comparable foreign regulatory authority disagrees and requires new clearances or approvals for these modifications, we may be required to recall and to stop selling or marketing such products as modified, which could harm our operating results and require us to redesign such products. In these circumstances, we may be subject to significant enforcement actions.

Previous wording

Our manufacturing and design processes and those of our third-party component suppliers are required to comply with the FDA’s QSR, which covers procedures and documentation of the design, testing, production, control, quality assurance, labeling, packaging, storage and shipping of our products in the United States. We are also subject to similar state requirements and licenses, and to ongoing ISO 13485 compliance in our operations, including design, manufacturing, and service, to maintain our CE Mark in Europe. In addition, we must engage in extensive recordkeeping and reporting and must make available our facilities and records for periodic unannounced inspections by governmental agencies, including the FDA, state authorities, EU Notified Bodies, and comparable agencies in other countries. Further, the FDA issued a final rule in February 2024 replacing the QSR with Quality Management System Regulation (“QMSR”), which incorporates by reference the quality management system requirements of ISO 13485:2016. The FDA has stated that the standards contained in ISO 13485:216 are substantially similar to those set forth in the existing QSR. The FDA will begin to enforce the QMSR requirements upon the effective date, February 2, 2026. If we or any of our suppliers or contractors fail to meet the regulatory requirements or a regulatory inspection, our operations could be disrupted and our manufacturing interrupted. Failure to take timely and adequate corrective action in response to an adverse regulatory inspection could result in, among other things, a shutdown of our manufacturing or product distribution operations, significant fines, suspension of marketing clearances and approvals, seizures or recalls of our device, operating restrictions and criminal prosecutions, any of which would cause our business to suffer. Furthermore, our key component suppliers may not currently be or may not continue to be in compliance with applicable regulatory requirements, which may result in manufacturing delays for our products and cause our revenue to decline.

Current wording

Our manufacturing and design processes and those of our third-party component suppliers are required to comply with the FDA’s QSR, which covers procedures and documentation of the design, testing, production, control, quality assurance, labeling, packaging, storage and shipping of our products in the United States. We are also subject to similar state requirements and licenses, and to ongoing ISO 13485 compliance in our operations, including design, manufacturing, and service, to maintain our CE Mark in Europe. In addition, we must engage in extensive recordkeeping and reporting and must make available our facilities and records for periodic unannounced inspections by governmental agencies, including the FDA, state authorities, EU Notified Bodies, and comparable agencies in other countries. Further, the FDA issued a final rule in February 2024 replacing the QSR with Quality Management System Regulation (“QMSR”), which incorporates by reference the quality management system requirements of ISO 13485:2016. The FDA has stated that the standards contained in ISO 13485:216 are substantially similar to those set forth in the existing QSR. The FDA will begin to enforce the QMSR requirements upon the effective date, February 2, 2026. If we or any of our suppliers or contractors fail to meet the regulatory requirements or a regulatory inspection, our operations could be disrupted and our manufacturing interrupted.

Previous wording

We can provide no assurance that we will continue to remain in material compliance with the QSR, or QSMR when it goes into effect in February 2026. If the FDA, CDPH, or any applicable notified body in the European Union or United Kingdom inspects any of our facilities and discover compliance problems, we may have to cease manufacturing and product distribution until we can take the appropriate remedial steps to correct the audit findings.

Current wording

We can provide no assurance that we will continue to remain in material compliance with the QSR, or QSMR when it goes into effect in February 2026. If the FDA, CDPH, or any applicable notified body in the European Union or United Kingdom inspects any of our facilities and discover compliance problems, we may have to cease manufacturing and product distribution until we can take the appropriate remedial steps to correct the audit findings. Taking corrective action may be expensive, time consuming and a distraction for management and if we experience a delay at our manufacturing facility, we may be unable to produce our products, which would harm our business.

Previous wording

Certain provisions of the ACA have been subject to judicial and Congressional challenges. For example, various portions of the ACA have been the subject of legal and constitutional challenges, including legal proceedings in the Fifth Circuit Court of Appeals. In June 2021, the United States Supreme Court held that Texas and other challengers had no legal standing to challenge the ACA, dismissing the case on procedural grounds without specifically ruling on the constitutionality of the ACA. Thus, the ACA will remain in effect in its current form. It is unclear how this Supreme Court decision, future litigation, and healthcare measures promulgated by the Biden administration will impact the ACA, our business, financial condition and results of operations. Complying with any new legislation or reversing changes implemented under the ACA could be time-intensive and expensive, resulting in a material adverse effect on our business.

Current wording

Certain provisions of the ACA have been subject to judicial and Congressional challenges. For example, various portions of the ACA have been the subject of legal and constitutional challenges, including legal proceedings in the Fifth Circuit Court of Appeals. In June 2021, the United States Supreme Court held that Texas and other challengers had no legal standing to challenge the ACA, dismissing the case on procedural grounds without specifically ruling on the constitutionality of the ACA. Thus, the ACA will remain in effect in its current form. It is unclear how this Supreme Court decision, future litigation, and healthcare measures promulgated by the new Trump administration will impact the ACA, our business, financial condition and results of operations. Complying with any new legislation or reversing changes implemented under the ACA could be time-intensive and expensive, resulting in a material adverse effect on our business.

Previous wording

Any change in the laws or regulations that govern the clearance and approval processes relating to our current, planned and future products could make it more difficult and costly to obtain clearance or approval for new products or to produce, market and distribute existing products. Significant delays in receiving clearance or approval or the failure to receive clearance or approval for our new products would have an adverse effect on our ability to expand our business.

Current wording

In June 2024, the U.S. Supreme Court overruled the Chevron doctrine, which gives deference to regulatory agencies’ statutory interpretations in litigation against federal government agencies where the law is ambiguous. This landmark Supreme Court decision may invite more stakeholders to bring lawsuits against the FDA and other federal agencies to challenge longstanding decisions and policies, which could lead to uncertainties in the industry. Further, changes in the leadership of the FDA and other federal agencies under the new Trump administration may lead to new policies and changes in the regulations that can increase our compliance costs. Any change in the laws or regulations that govern the clearance and approval processes relating to our current, planned and future products could make it more difficult and costly to obtain clearance or approval for new products or to produce, market and distribute existing products. Significant delays in receiving clearance or approval or the failure to receive clearance or approval for our new products would have an adverse effect on our ability to expand our business.

Previous wording

This risk is enhanced in certain jurisdictions and, as we expand our operations domestically and internationally, we may be subject to additional laws in other jurisdictions. Any failure, or perceived failure, by us to comply with privacy, data protection or security laws, rules and regulations could result in proceedings or actions against us by governmental entities or others. These proceedings or actions may subject us to significant penalties and negative publicity, require us to change our business practices, increase our costs and severely disrupt our business. In the United States, various federal and state regulators, including governmental agencies like the Consumer Financial Protection Bureau and the Federal Trade Commission, have adopted, or are considering adopting, laws, regulations or rules concerning personal information and data security and have prioritized privacy and security violations for enforcement actions. Additionally, in the United States, California adopted the CCPA in January 2020, which requires certain companies that process information of California consumers to, among other things, provide certain disclosures to California consumers and afford such consumers abilities to exercise certain rights with respect to their personal information and opt out of certain sales of personal information, in addition to severely limiting our ability to use their information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the unauthorized access and exfiltration, theft, or disclosure of personal information. Furthermore, in November 2020, California voters passed the CPRA, which became effective January 1, 2023. The CPRA imposes additional obligations on covered companies and significantly modifies the CCPA, including by expanding California residents’ rights with respect to certain sensitive personal information. Other states have proposed or enacted privacy laws that are similar to the CCPA and CPRA, further complicating the legal landscape. Further, other states have enacted laws that cover certain aspects of the collection, use, disclosure, and/or other processing of health information, such as Washington’s My Health, My Data Act, which, among other things, provides for a private right of action. It remains unclear how various provisions of the CCPA and these other new and evolving state laws will be interpreted and enforced. In addition, laws in all 50 states require businesses to provide notice to consumers whose personal information has been accessed or acquired as a result of a data breach (and, in some cases, to regulators). The effects of the CCPA, CPRA and other such privacy laws are potentially significant, and may require us to modify our practices and policies and to incur substantial costs and expenses in an effort to comply.

Current wording

This risk is enhanced in certain jurisdictions and, as we expand our operations domestically and internationally, we may be subject to additional laws in other jurisdictions. Any failure, or perceived failure, by us to comply with privacy, data protection or security laws, rules and regulations could result in proceedings or actions against us by governmental entities or others. These proceedings or actions may subject us to significant penalties and negative publicity, require us to change our business practices, increase our costs and severely disrupt our business. In the United States, various federal and state regulators, including governmental agencies like the Consumer Financial Protection Bureau and the Federal Trade Commission, have adopted, or are considering adopting, laws, regulations or rules concerning personal information and data security and have prioritized privacy and security violations for enforcement actions. Additionally, in the United States, California adopted the CCPA in January 2020, which requires certain companies that process information of California consumers to, among other things, provide certain disclosures to California consumers and afford such consumers abilities to exercise certain rights with respect to their personal information and opt out of certain sales of personal information, in addition to severely limiting our ability to use their information. The CCPA provides for civil penalties for violations, as well as a private right of action for certain data breaches that result in the unauthorized access and exfiltration, theft, or disclosure of personal information. Furthermore, in November 2020, California voters passed the CPRA, which became effective January 1, 2023. The CPRA imposes additional obligations on covered companies and significantly modifies the CCPA, including by expanding California residents’ rights with respect to certain sensitive personal information. Other states have proposed or enacted privacy laws that are similar to the CCPA and CPRA, further complicating the legal landscape. Further, other states have enacted laws that cover certain aspects of the collection, use, disclosure, and/or other processing of health information, such as Washington’s My Health, My Data Act, which, among other things, provides for a private right of action. Similar legislation has been proposed, and in certain cases enacted, in other states. It remains unclear how various provisions of the CCPA and these other new and evolving state laws will be interpreted and enforced. In addition, laws in all 50 states require businesses to provide notice to consumers whose personal information has been accessed or acquired as a result of a data breach (and, in some cases, to regulators).

Previous wording

The GDPR provides that EU member states may make their own laws and regulations limiting the (i) processing of personal data, including special categories of data (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs) and (ii) profiling and automated individual decision-making of individuals, which could limit our ability to use and share personal data or other data and could cause our costs to increase, harming our business and financial condition. Non-compliance with the GDPR is subject to significant penalties, including fines of up to €20 million or 4% of total worldwide revenue, whichever is greater. Interpretations of the GDPR by local data protection authorities in EU member states, along with the complexity of the regime itself, create uncertainty regarding the interpretation and enforcement of the law, with potential inconsistencies across EU member states. Other jurisdictions outside the EU are similarly introducing or enhancing laws and regulations relating to privacy, data protection or security, which enhances risks relating to compliance with such laws. Further, the United

Current wording

The GDPR provides that EU member states may make their own laws and regulations limiting the (i) processing of personal data, including special categories of data (e.g., racial or ethnic origin, political opinions, religious or philosophical beliefs) and (ii) profiling and automated individual decision-making of individuals, which could limit our ability to use and share personal data or other data and could cause our costs to increase, harming our business and financial condition. Non-compliance with the GDPR can be subject to significant penalties, including fines of up to €20 million or 4% of total worldwide revenue, whichever is greater. Interpretations of the GDPR by local data protection authorities in EU member states, along with the complexity of the regime itself, create uncertainty regarding the interpretation and enforcement of the law, with potential inconsistencies across EU member states. Other jurisdictions outside the EU are similarly introducing or enhancing laws and regulations relating to privacy, data protection or security, which enhances risks relating to compliance with such laws. Further, the United Kingdom has adopted the UK General Data Protection Regulation and UK Data Protection Act, which retain the GDPR in the United Kingdom’s national law and provide for a penalty structure similar to the GDPR. These developments have required us to review and modify the legal means by which we process personal data and may require us to make other modifications. The implementation and enforcement of the GDPR and other evolving legislation may subject us to enforcement risk and requirements to change certain of our data collection, data processing and other policies and practices. We could incur significant costs investigating and defending such claims and, if we are found liable, significant damages. If any of these events were to occur, our business and financial results could be adversely affected.

Previous wording

Additionally, we are subject to laws and regulations regarding cross-border transfers of personal data, including laws relating to transfer of personal data outside of the European Economic Area (“EEA”), Switzerland, and the United Kingdom. We rely on transfer mechanisms permitted under these laws, including EU Standard Contractual Clauses (“SCCs”). Such mechanisms have received heightened regulatory and judicial scrutiny in recent years. The Court of Justice of the European Union (“CJEU”) issued a decision in 2020 invalidating a transfer of personal data from the EEA and Switzerland to the U.S. and imposing additional obligations on companies using the SCCs. The European Commission has adopted new SCCs that are required to be implemented, and the United Kingdom has adopted new standard contractual clauses that also are required to be implemented. In June 2021, the European Commission issued an adequacy decision in respect of the United Kingdom’s data protection framework, enabling data transfers from EU member states to the United Kingdom to continue without requiring contractual or other additional measures. While it is intended to last for at least four years, the European Commission may revoke the adequacy decision at any point, and if this occurs it could lead to additional costs and increase our overall risk exposure. These developments and other regulatory guidance or developments may impose additional obligations with respect to the transfer of personal data from the EEA, Switzerland, and the United Kingdom, all of which could restrict our activities in those jurisdictions, limit our ability to provide our products and services in those jurisdictions, require us to modify our policies and practices, and to engage in additional contractual negotiations, or increase our costs and obligations and impose limitations upon our ability to efficiently transfer personal data from the EEA, Switzerland, and the United Kingdom to the U.S. This could adversely affect the manner in which we provide our services and thus materially affect our operations and financial results.

Current wording

Additionally, we are subject to laws and regulations regarding cross-border transfers of personal data, including laws relating to transfer of personal data outside of the European Economic Area (“EEA”), Switzerland, and the United Kingdom. We rely on transfer mechanisms permitted under these laws, including EU Standard Contractual Clauses (“SCCs”). Such mechanisms have received heightened regulatory and judicial scrutiny in recent years. The Court of Justice of the European Union (“CJEU”) issued a decision in 2020 invalidating a transfer of personal data from the EEA and Switzerland to the U.S. and imposing additional obligations on companies using the SCCs. The European Commission has adopted new SCCs and the United Kingdom has adopted its own new standard contractual clauses. In June 2021, the European Commission issued an adequacy decision in respect of the United Kingdom’s data protection framework, enabling data transfers from EU member states to the United Kingdom to continue without requiring contractual or other additional measures. the European Commission’s adequacy decision must be renewed in 2025 and is subject to revocation at any point. Any nonrenewal or revocation of, or modifications to, this adequacy decision could lead to additional costs and increase our overall risk exposure. These developments and other regulatory guidance or developments may impose additional obligations with respect to the transfer of personal data from the EEA, Switzerland, and the United Kingdom, all of which could restrict our activities in those jurisdictions, limit our ability to provide our products and services in those jurisdictions, require us to modify our policies and practices, and to engage in additional contractual negotiations, or increase our costs and obligations and impose limitations upon our ability to efficiently transfer personal data from the EEA, Switzerland, and the United Kingdom to the U.S. Any of these events, if occurring, could adversely affect the manner in which we provide our services and thus materially affect our operations and financial results.

Previous wording

Because the interpretation and application of laws, regulations, standards and other obligations relating to privacy, data protection and security are still uncertain, it is possible that these laws, regulations, standards and other obligations may be interpreted and applied in a manner that is inconsistent with our practices and policies. Any noncompliance, or perceived noncompliance, with laws, regulations, standards and other obligations or changes in interpretations or applications of existing laws, regulations, standards and other obligations, may subject us to fines, audits, inquiries, whistleblower complaints, adverse media coverage, investigations, lawsuits, loss of export privileges, severe criminal or civil sanction or other penalties. Additionally, although we endeavor to comply with our public statements and documentation, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policies and other statements that provide notices and representations about privacy, data protection or security can subject us to potential government or legal action if they are found to be deceptive, unfair or misrepresentative of our actual practices. Any concerns about our privacy, data protection or security practices, even if unfounded, could damage the reputation of our businesses and discourage potential users from our products and services. Any of the foregoing could have an adverse effect on our business, financial condition, results of operations and prospects.

Current wording

Because the interpretation and application of laws, regulations, standards and other obligations relating to privacy, data protection and security are still uncertain, it is possible that these laws, regulations, standards and other obligations may be interpreted and applied in a manner that is, or is alleged to be, inconsistent with our practices and policies. Any noncompliance, or perceived noncompliance, with laws, regulations, standards and other obligations or changes in interpretations or applications of existing laws, regulations, standards and other obligations, may subject us to fines, audits, inquiries, whistleblower complaints, adverse media coverage, investigations, lawsuits, loss of export privileges, severe criminal or civil sanction or other penalties. Additionally, although we endeavor to comply with our public statements and documentation, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policies and other statements that provide notices and representations about privacy, data protection or security can subject us to potential government or legal action if they are found to be deceptive, unfair or misrepresentative of our actual practices. Any concerns about our privacy, data protection or security practices, even if unfounded, could damage the reputation of our businesses and discourage potential users from our products and services. Any of the foregoing could have an adverse effect on our business, financial condition, results of operations and prospects.

Previous wording

In March 2020, in response to the COVID-19 pandemic, foreign and domestic inspections of facilities were largely placed on hold, the FDA worked to resume routine surveillance, bioresearch monitoring and pre-approval inspections on a prioritized basis. During 2020 and 2021 a number of companies announced receipt of complete response letters due to the FDA’s inability to complete required inspections for their applications. While the FDA has largely caught up with domestic preapproval inspections, it continues to work through its backlog of foreign inspections. However, the FDA may not be able to continue its current inspection pace or may be unable to complete required inspections during the review period, which can delay clinical development and result in a complete response letter. On May 11, 2023, the federal government ended the COVID-19 public health emergency, which ended a number of temporary changes made to federally funded programs while some continue to be in effect. The full impact of such policy changes and the wind-down of the public health emergency on the FDA and other regulatory policies and operations is unclear. Disruptions at the FDA could significantly impact the ability of the FDA to timely review and process our regulatory submissions, which could have a material adverse effect on our business.

Current wording

Disruptions at the FDA and other agencies, including delays, travel restrictions, and staffing shortages, may also slow the time necessary for new medical devices to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, in 2018 and 2019, the U.S. government shut down several times and certain regulatory agencies such as the FDA had to furlough critical employees and stop critical activities. In March 2020, in response to the COVID-19 pandemic, foreign and domestic inspections of facilities were largely placed on hold, the FDA worked to resume routine surveillance, bioresearch monitoring and pre-approval inspections on a prioritized basis. During 2020 and 2021 a number of companies announced receipt of complete response letters due to the FDA’s inability to complete required inspections for their applications. While the FDA has largely caught up with domestic preapproval inspections, it continues to work through its backlog of foreign inspections. However, the FDA may not be able to continue its current inspection pace or may be unable to complete required inspections during the review period, which can delay clinical development and result in a complete response letter. On May 11, 2023, the federal government ended the COVID-19 public health emergency, which ended a number of temporary changes made to federally funded programs while some continue to be in effect. The full impact of such policy changes and the wind-down of the public health emergency on the FDA and other regulatory policies and operations is unclear. Disruptions at the FDA could significantly impact the ability of the FDA to timely review and process our regulatory submissions, which could have a material adverse effect on our business.

Previous wording

The expansion of global lead times has resulted in the lack of availability of raw materials, including semiconductors, computers, monitors electronic parts, metals, packaging, adhesives, chemicals, resins and subcontract painted components. Certain suppliers have passed on higher prices, surcharges and expedited shipping fees to defray the higher commodity prices they are paying due to short supply and pushed out delivery dates. Additionally, we identify and qualify new suppliers to mitigate risk due to single and sole source suppliers and to alleviate supply chain constraints we will identify and qualify new vendors or substitute components which requires testing, validations and documentation adding to internal costs and diverting engineering resources from other projects. While we have taken measures to mitigate business continuity risk, including increasing standard lead times, payment of expedite fees, issuance of a limited number of non-cancelable purchase orders, advance delivery of critical components ahead of normal delivery dates and second sourcing, our suppliers may cease producing the components we purchase from them or otherwise decide to cease doing business with us. Any supply interruption from our suppliers or failure to obtain additional suppliers for any of the components or subcomponents used in our products would limit our ability to manufacture our current and new products and could have a material adverse effect on our business, financial condition and results of operations.

Current wording

We rely on third parties, including single and sole source suppliers, to manufacture certain components and subcomponents of our products and to provide raw materials, primarily chemicals for our LAL. We do not have long-term supply agreements with, or guaranteed commitments from our suppliers, including single and sole source suppliers. We utilize purchase orders or blanket orders covering the medium term of 18-24 months for the majority of our supplier base. While we depend on our suppliers to provide us and our customers with materials in a timely manner that meet our and their quality, quantity and cost requirements, vendors will miss delivery dates, extend delivery dates or in some circumstances cancel purchase orders because these suppliers may encounter problems during manufacturing for a variety of reasons, any of which could delay or impede their ability to meet our demand. The expansion of global lead times has resulted in the lack of availability of raw materials, including semiconductors, computers, monitors electronic parts, metals, packaging, adhesives, chemicals, resins and subcontract painted components. Certain suppliers have passed on higher prices, surcharges and expedited shipping fees to defray the higher commodity prices they are paying due to short supply and pushed out delivery dates. Additionally, we identify and qualify new suppliers to mitigate risk due to single and sole source suppliers and to alleviate supply chain constraints we will identify and qualify new vendors or substitute components which requires testing, validations and documentation adding to internal costs and diverting engineering resources from other projects. While we have taken measures to mitigate business continuity risk, including increasing standard lead times, payment of expedite fees, issuance of a limited number of non-cancelable purchase orders, advance delivery of critical components ahead of normal delivery dates and second sourcing, our suppliers may cease producing the components we purchase from them or otherwise decide to cease doing business with us. Any supply interruption from our suppliers or failure to obtain additional suppliers for any of the components or subcomponents used in our products would limit our ability to manufacture our current and new products and could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

announcement of our results of operations and updates regarding our business;

Current wording

announcement of our results of operations and updates regarding our business, including financial and operational guidance;

Previous wording

general economic, industry and market conditions, including global and national events, such as the conflicts in Eastern Europe, and general economic downturns.

Current wording

general economic, industry and market conditions, including global and national events, such as the conflicts in Eastern Europe and the Middle East, and general economic downturns.

Previous wording

As of September 30, 2024, we had 40,254,105 shares of common stock issued and outstanding. All of these shares are available for sale in the public market, subject to limitations under Rule 144 with respect to affiliates of our company.

Current wording

As of March 31, 2025, we had 40,588,540 shares of common stock issued and outstanding. All of these shares are available for sale in the public market, subject to limitations under Rule 144 with respect to affiliates of our company.

Previous wording

We have filed registration statements on Form S-8 under the Securities Act registering the offer and sale of up to an aggregate of 10,660,797 shares of common stock pursuant to our Equity Plans and an aggregate of 757,694 shares of common stock pursuant to our 2021 ESPP. Our 2021 Plan and 2021 ESPP each contain an evergreen provision that may increase the number of shares available for issuance pursuant to such plans on the first day of each fiscal year. See Note 6 – Stock-Based Compensation Expense in the Notes to the unaudited condensed consolidated financial statements included in this report.

Current wording

We have filed registration statements on Form S-8 under the Securities Act registering the offer and sale of up to an aggregate of 10,660,797 shares of common stock pursuant to our Equity Plans (as defined in Note 2, “Summary of Accounting Policies – Stock-Based Compensation” in our notes to consolidated financial statements in this Annual Report on Form 10-K) and an aggregate of 757,694 shares of common stock pursuant to our 2021 ESPP. Our 2021 Plan and 2021 ESPP each contain an evergreen provision that may increase the number of shares available for issuance pursuant to such plans on the first day of each fiscal year. See Note 6 – Stock-Based Compensation Expense in the Notes to the unaudited condensed consolidated financial statements included in this report.

Previous wording

Because we no longer qualify as an “emerging growth company” we will incur additional expenses and management’s time may be diverted in an effort to comply with compliance-related activities to comply with the increased documentation and reporting requirements under Section 404(b) of the Sarbanes-Oxley Act of 2002. The Sarbanes-Oxley Act requires, among other things, that we assess the effectiveness of our internal control over financial reporting annually and the effectiveness of our disclosure controls and procedures quarterly. In addition, our independent registered public accounting firm will have to attest to the effectiveness of our internal control over financial reporting under Section 404(b). We have implemented improved processes for documenting and evaluating our system of internal controls required under Section 404(b) however, the rules governing the standards that must be met for management to assess our internal control over financial reporting are complex and require significant judgment, documentation, testing and possible remediation to meet the detailed standards. During the course of documenting, evaluating and testing our internal control over financial reporting, our management may identify significant deficiencies or material weaknesses which may not be remedied in time to meet the deadline imposed by the Sarbanes-Oxley Act.

Current wording

The Sarbanes-Oxley Act of 2002 requires, among other things, that we assess the effectiveness of our internal control over financial reporting annually and the effectiveness of our disclosure controls and procedures quarterly. In addition, our independent registered public accounting firm will have to attest to the effectiveness of our internal control over financial reporting under Section 404(b). We have implemented improved processes for documenting and evaluating our system of internal controls required under Section 404(b) however, the rules governing the standards that must be met for management to assess our internal control over financial reporting are complex and require significant judgment, documentation, testing and possible remediation to meet the detailed standards. During the course of documenting, evaluating and testing our internal control over financial reporting, our management may identify significant deficiencies or material weaknesses which may not be remedied in time to meet the deadline imposed by the Sarbanes-Oxley Act.

Previous wording

The Tax Act enacted many significant changes to the U.S. tax laws, the consequences of which have not yet been fully determined. Changes in corporate tax rates, the realization of net deferred tax assets relating to our U.S. operations, the taxation of foreign earnings and the deductibility of expenses contained in the Tax Act or other tax reform legislation could have a material impact on the value of our deferred tax assets, could result in significant one-time charges in the current or future taxable years and could increase our future U.S. tax expense. As an example, for taxable years beginning during or after 2022, the Tax Act eliminated the option to immediately deduct research and development expenditures currently and required taxpayers to capitalize and amortize them over five or fifteen years pursuant to Section 174 of the Code, which may impact our effective tax rate and our cash tax liability. However, recently proposed tax legislation, if enacted, would restore the ability to deduct currently domestic research and development expenditures through 2025 and would retroactively restore this benefit for 2022 and 2023. Regulatory or legislative developments may arise from various U.S. tax reform proposals, some of which include proposed changes to the U.S. tax law, which, if adopted, could result in increased taxation of our business operations. There is uncertainty regarding what changes, if any, will be enacted and the effect on our business and financial results. The foregoing items, as well as any future changes in tax laws, could have a material adverse effect on our business, cash flow, financial condition or results of operations. We will also continue to monitor and assess the impact of international tax reform, including but not limited to the 15% global minimal tax proposed by the Organisation for Economic Co-operation and Development. Finally, the Inflation Reduction Act of 2022 (the “IRA”) was effective beginning in fiscal year 2023. We do not currently expect that the IRA will have a material impact on our income tax liability.

Current wording

The Tax Act enacted many significant changes to the U.S. tax laws, the consequences of which have not yet been fully determined. Changes in corporate tax rates, the realization of net deferred tax assets relating to our U.S. operations, the taxation of foreign earnings and the deductibility of expenses contained in the Tax Act or other tax reform legislation could have a material impact on the value of our deferred tax assets, could result in significant one-time charges in the current or future taxable years and could increase our future U.S. tax expense. As an example, for taxable years beginning during or after 2022, the Tax Act eliminated the option to immediately deduct research and development expenditures currently and required taxpayers to capitalize and amortize them over five or fifteen years pursuant to Section 174 of the Code, which may impact our effective tax rate and our cash tax liability. Regulatory or legislative developments may arise from various U.S. tax reform proposals, some of which include proposed changes to the U.S. tax law, which, if adopted, could result in increased taxation of our business operations. There is uncertainty regarding what changes, if any, will be enacted and the effect on our business and financial results. The foregoing items, as well as any future changes in tax laws, could have a material adverse effect on our business, cash flow, financial condition or results of operations. We will also continue to monitor and assess the impact of international tax reform, including but not limited to the 15% global minimal tax proposed by the Organisation for Economic Co-operation and Development. Finally, the Inflation Reduction Act of 2022 (the “IRA”) was effective beginning in fiscal year 2023. We do not currently expect that the IRA will have a material impact on our income tax liability.
Rearranged current paragraphs (3)

Current report — wording carried from elsewhere

Any disruption, security incident, or security breach resulting in any loss, destruction, unavailability, alteration or dissemination of, or damage to, our data, could subject us to significant fines or penalties for any noncompliance with certain state, federal and/or international laws relating to privacy, data protection, and information security. Litigation and governmental investigations could force us to spend money in defense or settlement, divert management’s time and attention, increase our costs of doing business, and/or adversely affect our reputation. There can be no assurance that we or our service providers, if applicable, will not suffer losses relating to cyber-attacks or security breaches or incidents in the future or that our insurance coverage will be adequate to cover all the costs resulting from such events. No assurances can be given that our efforts to reduce the risks of, or to detect, such attacks, breaches or incidents that occur will be successful and our failure to do so could have a material adverse effect on our business, financial condition and results of operations.

Current report — wording carried from elsewhere

Failure to take timely and adequate corrective action in response to an adverse regulatory inspection could result in, among other things, a shutdown of our manufacturing or product distribution operations, significant fines, suspension of marketing clearances and approvals, seizures or recalls of our device, operating restrictions and criminal prosecutions, any of which would cause our business to suffer. Furthermore, our key component suppliers may not currently be or may not continue to be in compliance with applicable regulatory requirements, which may result in manufacturing delays for our products and cause our revenue to decline.

Current report — wording carried from elsewhere

The effects of the CCPA, CPRA and other laws relating to privacy, data protection and cybersecurity are potentially significant, and may require us to modify our practices and policies and to incur substantial costs and expenses in an effort to comply.
Rearranged previous paragraphs (7)

Previous report — wording carried elsewhere

If we fail to successfully market and sell our products, we will not be able to grow our revenue or achieve profitability, which will have a material adverse effect on our business, financial condition and results of operations.

Previous report — wording carried elsewhere

We may experience a significant disruption in our information technology systems or breaches of data security.

Previous report — wording carried elsewhere

Modifications that could significantly affect the safety and effectiveness of our approved or cleared products, such as changes to the intended use or technological characteristics of our products, will require new 510(k) clearances or PMAs or require us to recall or cease marketing the modified devices until these clearances or approvals are obtained. Based on FDA published guidelines, the FDA requires device manufacturers to initially make and document a determination of whether or not a modification requires a new approval, supplemental approval or clearance; however, the FDA can review a manufacturer’s decision. Any modification to an

Previous report — wording carried elsewhere

Taking corrective action may be expensive, time consuming and a distraction for management and if we experience a delay at our manufacturing facility, we may be unable to produce our products, which would harm our business.

Previous report — wording carried elsewhere

Kingdom has adopted the UK General Data Protection Regulation and UK Data Protection Act, which retain the GDPR in the United Kingdom’s national law and provide for a penalty structure similar to the GDPR. These recent developments have required us to review and modify the legal means by which we process personal data and may require us to make other modifications. The implementation and enforcement of the GDPR and other evolving legislation may subject us to enforcement risk and requirements to change certain of our data collection, processing and other policies and practices. We could incur significant costs investigating and defending such claims and, if we are found liable, significant damages. If any of these events were to occur, our business and financial results could be adversely affected.

Previous report — wording carried elsewhere

Disruptions at the FDA and other agencies, including delays, travel restrictions, and staffing shortages, may also slow the time necessary for new medical devices to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, in 2018 and 2019, the U.S. government shut down several times and certain regulatory agencies such as the FDA had to furlough critical employees and stop critical activities.

Previous report — wording carried elsewhere

We rely on third parties, including single and sole source suppliers, to manufacture certain components and subcomponents of our products and to provide raw materials, primarily chemicals for our LAL. We do not have long-term supply agreements with, or guaranteed commitments from our suppliers, including single and sole source suppliers. We utilize purchase orders or blanket orders covering the medium term of 18–24 months for the majority of our supplier base. While we depend on our suppliers to provide us and our customers with materials in a timely manner that meet our and their quality, quantity and cost requirements, vendors will miss delivery dates, extend delivery dates or in some circumstances cancel purchase orders because these suppliers may encounter problems during manufacturing for a variety of reasons, any of which could delay or impede their ability to meet our demand.