CalciMedica, Inc.

Previous wording

Our other pipeline programs, which include new product candidates, are in preclinical development. As of September 30, 2024, we had an accumulated deficit of $155.5 million and net loss of $9.4 million for the nine months ended September 30, 2024. Other than the three months ended March 31, 2024, we had incurred net losses since our inception. We have never generated revenue from product sales and we expect that it will be several years, if ever, before we have a product candidate ready for commercialization. We expect to incur increasing levels of operating losses over the next several years and for the foreseeable future as we advance our product candidates through clinical development. Our prior losses, combined with expected future losses, have had and will continue to have an adverse effect on our stockholders’ equity and working capital.

Current wording

Our other pipeline programs, which include new product candidates, are in preclinical development. As of March 31, 2025, we had an accumulated deficit of $164.8 million and a net loss of $5.0 million for the three months ended March 31, 2025. Other than the three months ended March 31, 2024, we have incurred net losses since our inception. We have never generated revenue from product sales and we expect that it will be several years, if ever, before we have a product candidate ready for commercialization. We expect to incur increasing levels of operating losses over the next several years and for the foreseeable future as we advance our product candidates through clinical development. Our prior losses, combined with expected future losses, have had and will continue to have an adverse effect on our stockholders’ equity and working capital.

Previous wording

Since we commenced operations in October 2006, we have primarily financed our operations through private placements of our preferred stock, convertible promissory notes and common stock and through the Merger with Graybug. We have used substantial amounts of cash to fund our operations and expect our expenses to increase substantially for the foreseeable future. The development of drug product candidates is highly capital intensive. As our product candidates enter and advance through preclinical studies and clinical trials, we will need substantial additional funds to expand our clinical, regulatory and quality capabilities. In addition, if we obtain marketing approval for any of our product candidates, we expect to incur significant commercialization expenses related to marketing, sales, manufacturing and distribution. Accordingly, we will need to obtain substantial additional funding in connection with our continuing operations. If we are unable to raise capital when needed or on attractive terms, we could be forced to delay, reduce or eliminate our research and development programs or any future commercialization efforts.

Current wording

Since we commenced operations in October 2006, we have primarily financed our operations through private placements of our preferred stock, convertible promissory notes, promissory notes, warrants, and common stock and through the Merger. We have used substantial amounts of cash to fund our operations and expect our expenses to increase substantially for the foreseeable future. The development of drug product candidates is highly capital intensive. As our product candidates enter and advance through preclinical studies and clinical trials, we will need substantial additional funds to expand our clinical, regulatory and quality capabilities. In addition, if we obtain marketing approval for any of our product candidates, we expect to incur significant commercialization expenses related to marketing, sales, manufacturing and distribution. Accordingly, we will need to obtain substantial additional funding in connection with our continuing operations. If we are unable to raise capital when needed or on attractive terms, we could be forced to delay, reduce or eliminate our research and development programs or any future commercialization efforts.

Previous wording

As of September 30, 2024, we had $14.6 million in cash, cash equivalents and short-term investments. Based on our current operating plans, we believe our existing resources, including proceeds from the 2024 Follow-On, will be sufficient to fund our current operations through certain clinical milestones into the first half of 2026. However, our current cash, cash equivalents and short-term investments will not be sufficient to fund any of our product candidates through regulatory approval, nor will it be sufficient to pursue additional indications for Auxora like AHRF, nor will it be sufficient to fund clinical trials on other product candidates in our portfolio aside from Auxora, and we will need to raise substantial additional capital to complete the development and any commercialization of our product candidates.

Current wording

As of March 31, 2025, we had $24.6 million in cash, cash equivalents and short-term investments. Based on our current operating plans, we believe our existing resources, including the net proceeds of $9.7 million from the Loan and Security Agreement with Avenue Venture Opportunities Fund entered into on February 28, 2025, will be sufficient to fund our current operations through certain clinical milestones into the middle of 2026. However, our current cash, cash equivalents and short-term investments will not be sufficient to fund any of our product candidates through regulatory approval, nor will it be sufficient to pursue additional indications for Auxora like AHRF, nor will it be sufficient to fund clinical trials on other product candidates in our portfolio aside from the ongoing KOURAGE trial of Auxora, and we will need to raise substantial additional capital to complete the development and any commercialization of our product candidates.

Previous wording

our ability to enter into contract manufacturing arrangements for supply of API and manufacture of drug product for our product candidates and the terms of such arrangements;

Current wording

our ability to enter into contract manufacturing arrangements for supply of active pharmaceutical ingredient (“API”) and manufacture of drug product for our product candidates and the terms of such arrangements;

Previous wording

the impacts of the ongoing conflicts between Ukraine and Russia and in the Middle East and potential future bank failures; and

Current wording

the impacts of the ongoing or future international conflicts and potential future bank failures and international tariffs; and

Previous wording

Because we do not expect to generate revenue from product candidate sales for many years, if at all, we will need to obtain substantial additional funding in connection with our continuing operations and expected increases in expenses. Until such time as we can generate significant revenue from sales of our product candidates, if ever, we expect to finance our cash needs through equity offerings, debt financings or other capital sources, including potentially grants, collaborations, licenses or other similar arrangements. Accordingly, we will need to continue to rely on additional financing to achieve our business objectives. Adequate additional financing may not be available to us on acceptable terms, or at all. In addition, we may seek additional capital due to favorable market conditions or strategic considerations, even if we believe we have sufficient funds for our current or future operating plans. The impacts of the ongoing conflicts between Ukraine and Russia and in the Middle East and potential future bank failures on capital markets may affect the availability, amount and type of financing available to us in the future. If we are unable to raise capital when needed or on attractive terms, we would be forced to delay, reduce or eliminate our research and development programs or future commercialization efforts.

Current wording

Because we do not expect to generate revenue from product candidate sales for many years, if at all, we will need to obtain substantial additional funding in connection with our continuing operations and expected increases in expenses. Until such time as we can generate significant revenue from sales of our product candidates, if ever, we expect to finance our cash needs through equity offerings, debt financings or other capital sources, including potentially grants, collaborations, licenses or other similar arrangements. Accordingly, we will need to continue to rely on additional financing to achieve our business objectives. Adequate additional financing may not be available to us on acceptable terms, or at all. In addition, we may seek additional capital due to favorable market conditions or strategic considerations, even if we believe we have sufficient funds for our current or future operating plans. The impacts of the ongoing or future international conflicts and potential future bank failures and international tariffs on capital markets may affect the availability, amount and type of financing available to us in the future. If we are unable to raise capital when needed or on attractive terms, we would be forced to delay, reduce or eliminate our research and development programs or future commercialization efforts.

Previous wording

Attempting to secure additional financing may also divert our management from our day-to-day activities, which may impair or delay our ability to develop our proprietary platform. In addition, demands on our cash resources may change as a result of many factors currently unknown to us including, but not limited to, any unforeseen costs we may incur as a result of preclinical study or clinical trial delays, or disruptions in the manufacturing of our product candidates, due to the ongoing conflicts between Ukraine and Russia and in the Middle East, potential future bank failures or other causes, and we may need to seek additional funds sooner than planned. If we are unable to obtain funding on a timely basis or at all, we may be required to significantly curtail or stop one or more of our research or development programs.

Current wording

Attempting to secure additional financing may also divert our management from our day-to-day activities, which may impair or delay our ability to develop our proprietary platform. In addition, demands on our cash resources may change as a result of many factors currently unknown to us including, but not limited to, any unforeseen costs we may incur as a result of preclinical study or clinical trial delays, or disruptions in the manufacturing of our product candidates, due to the ongoing or future international conflicts, potential future bank failures, international tariffs or other causes, and we may need to seek additional funds sooner than planned. If we are unable to obtain funding on a timely basis or at all, we may be required to significantly curtail or stop one or more of our research or development programs.

Previous wording

In addition, if we engage in acquisitions or strategic partnerships, we may issue dilutive securities, assume or incur debt obligations, incur large one-time expenses or acquire intangible assets that could result in significant future amortization expense. Moreover, we may not be able to locate suitable acquisition opportunities, and this inability could impair our growth or limit access to technology or drugs that may be important to the development of our business.

Current wording

In addition, if we engage in acquisitions or strategic partnerships, we may issue dilutive securities, assume or incur debt obligations, incur large one-time expenses or acquire intangible assets that could result in significant future amortization expense.

Previous wording

We are seeking to identify and develop a broad pipeline of product candidates using our proprietary CRAC channel inhibitor science to address acute critical illness and chronic inflammatory and immunologic diseases where there are no effective therapies. Our lead product candidate, Auxora, is currently in Phase 2 clinical development and we have only completed one randomized, blinded placebo-controlled trial with Auxora to date. We are not aware of any FDA approved therapeutics utilizing similar technology. Further, the scientific evidence to support the feasibility of developing therapeutic treatments based on our proprietary CRAC channel inhibition science is both preliminary and limited. Additionally, there are no drugs currently approved for the treatment of AP and as a result the FDA has not established the endpoints that will be required for approval in this indication. As a result, we are exposed to a number of unforeseen risks and it is difficult to predict the types of challenges and risks that we may encounter during development of our product candidates.

Current wording

We are seeking to identify and develop a broad pipeline of product candidates using our proprietary CRAC channel inhibitor science to address acute critical illness and chronic inflammatory and immunologic diseases where there are no effective therapies. Our lead product candidate, Auxora, recently completed a Phase 2b clinical trial and we have only completed two randomized, blinded placebo-controlled trials with Auxora to date. We are not aware of any FDA approved therapeutics utilizing similar technology. Further, the scientific evidence to support the feasibility of developing therapeutic treatments based on our proprietary CRAC channel inhibition science is both preliminary and limited. Additionally, there are no drugs currently approved for the treatment of AP and as a result the FDA has not established the endpoints that will be required for approval in this indication. As a result, we are exposed to a number of unforeseen risks and it is difficult to predict the types of challenges and risks that we may encounter during development of our product candidates.

Previous wording

In addition, disruptions caused by the ongoing conflicts between Ukraine and Russia and in the Middle East may increase the likelihood that we encounter such difficulties or delays in initiating, enrolling, conducting or completing our planned and ongoing clinical trials. Any inability to successfully complete preclinical and clinical development could result in additional costs to us or impair our ability to raise capital, generate revenues from product candidate sales and enter into or maintain collaboration arrangements. For example, if enrollment in a clinical trial is slowed, certain of our expenses related to the trial would not decrease and therefore the overall costs to complete the trial would increase. In addition, if we make manufacturing changes to our product candidates, we may need to conduct additional studies to bridge our modified product candidates to earlier versions. Clinical trial delays could also shorten any periods during which we may have the exclusive right to commercialize our product candidates or allow our competitors to bring product candidates to market before we do, which could impair our ability to successfully commercialize our product candidates and may harm our business and results of operations.

Current wording

In addition, disruptions caused by international conflicts may increase the likelihood that we encounter such difficulties or delays in initiating, enrolling, conducting or completing our planned and ongoing clinical trials. Any inability to successfully complete preclinical and clinical development could result in additional costs to us or impair our ability to raise capital, generate revenues from product candidate sales and enter into or maintain collaboration arrangements. For example, if enrollment in a clinical trial is slowed, certain of our expenses related to the trial would not decrease and therefore the overall costs to complete the trial would increase. In addition, if we make manufacturing changes to our product candidates, we may need to conduct additional studies to bridge our modified product candidates to earlier versions. Clinical trial delays could also shorten any periods during which we may have the exclusive right to commercialize our product candidates or allow our competitors to bring product candidates to market before we do, which could impair our ability to successfully commercialize our product candidates and may harm our business and results of operations.

Previous wording

One of our product candidates is, and potential future product candidates may be, developed for the treatment of a pediatric population, for which safety concerns may be particularly scrutinized by regulatory agencies. Trials involving pediatric populations can be difficult to conduct, can be quite costly and, like other clinical trials, may not yield the anticipated results. In addition, pediatric trials are more dependent on a smaller number of specialized clinical trial sites, which in turn can limit site availability and make the trials more expensive to conduct. In addition, as interest in pediatric indications grows as a result of the RACE Act and other market forces, trial recruitment may become even more difficult due to competition for eligible patients. Moreover, it may be challenging to ensure that pediatric or adolescent patients adhere to clinical trial protocols.

Current wording

One of our product candidates is, and potential future product candidates may be, developed for the treatment of a pediatric population, for which safety concerns may be particularly scrutinized by regulatory agencies. Trials involving pediatric populations can be difficult to conduct, can be quite costly and, like other clinical trials, may not yield the anticipated results. In addition, pediatric trials are more dependent on a smaller number of specialized clinical trial sites, which in turn can limit site availability and make the trials more expensive to conduct. In addition, as interest in pediatric indications grows as a result of the Research to Accelerate Cures and Equity Act and other market forces, trial recruitment may become even more difficult due to competition for eligible patients. Moreover, it may be challenging to ensure that pediatric or adolescent patients adhere to clinical trial protocols.

Previous wording

From time to time, we may publicly disclose preliminary, interim or topline data from our preclinical studies and clinical trials, which is based on a preliminary analysis of then-available data, and the results and related findings and conclusions are subject to change as participant enrollment and treatment continues and more data become available. Our data to date is based on a small number of subjects, and as a result, data from additional subjects can have a significant impact on the overall data viewed as a whole. Adverse differences between previous preliminary or interim data and future interim or final data could significantly harm our business prospects. We may also announce topline data following the completion of a preclinical study or clinical trial, which may be subject to change following a more comprehensive review of the data related to the particular study or trial. We also make assumptions, estimations, calculations and conclusions as part of our analyses of data, and we may not have received or had the opportunity to fully and carefully evaluate all data. As a result, the interim, topline or preliminary results that we report may differ from future results of the same studies, or different conclusions or considerations may qualify such results, once additional data have been received and fully evaluated. Topline data also remain subject to audit and verification procedures that may result in the final data being materially different from the preliminary data we previously published. As a result, interim, topline and preliminary data should be viewed with caution until the final data are available.

Current wording

We may also announce topline data following the completion of a preclinical study or clinical trial, which may be subject to change following a more comprehensive review of the data related to the particular study or trial. We also make assumptions, estimations, calculations and conclusions as part of our analyses of data, and we may not have received or had the opportunity to fully and carefully evaluate all data. As a result, the interim, topline or preliminary results that we report may differ from future results of the same studies, or different conclusions or considerations may qualify such results, once additional data have been received and fully evaluated. Topline data also remain subject to audit and verification procedures that may result in the final data being materially different from the preliminary data we previously published. As a result, interim, topline and preliminary data should be viewed with caution until the final data are available.

Previous wording

We may attempt to secure approval from the FDA or comparable foreign regulatory authorities through the use of accelerated approval pathways. If we are unable to obtain such approval, we may be required to conduct additional clinical trials beyond those that we contemplate, which could increase the expense of obtaining, and delay the receipt of, necessary marketing approvals. Even if we receive accelerated approval from the FDA, if our confirmatory trials do not verify clinical benefit, or if we do not comply with rigorous post-marketing requirements, the FDA may seek to withdraw accelerated approval.

Current wording

We may attempt to secure approval from the FDA or comparable foreign regulatory authorities through the use of accelerated approval pathways. If we are unable to obtain such approval, we may be required to conduct additional clinical trials beyond those that we contemplate, which could increase the expense of obtaining, and delay the receipt of, necessary marketing approvals. Even if we receive accelerated approval from the FDA or other regulatory authorities, if our confirmatory trials do not verify clinical benefit, or if we do not comply with rigorous post-marketing requirements, the FDA or foreign regulatory authorities may seek to withdraw accelerated approval.

Previous wording

Disruptions at the FDA and other government agencies caused by funding shortages or global health concerns could hinder their ability to hire, retain or deploy key leadership and other personnel, or otherwise prevent new or modified products from being developed, or approved or commercialized in a timely manner or at all, which could negatively impact our business.

Current wording

Disruptions at the FDA and other government agencies caused by funding shortages, statutory, regulatory and policy changes, or global health concerns could hinder their ability to hire, retain or deploy key leadership and other personnel, or otherwise prevent new or modified products from being developed, or approved or commercialized in a timely manner or at all, which could negatively impact our business.

Previous wording

The ability of the FDA to review and approve new products can be affected by a variety of factors, including government budget and funding levels, statutory, regulatory, and policy changes, the FDA’s ability to hire and retain key personnel and accept the payment of user fees, and other events that may otherwise affect the FDA’s ability to perform routine functions. Average review times at the agency have fluctuated in recent years as a result. In addition, government funding of other government agencies such as the EMA, following its relocation to Amsterdam and corresponding staff changes, that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable. Disruptions at the FDA and other agencies may also slow the time necessary for product candidates to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, over the last several years, including for 35 days beginning on December 22, 2018, the U.S. government has shut down several times and certain regulatory agencies, such as the FDA, have had to furlough critical FDA employees and stop critical activities.

Current wording

The ability of the FDA to review and approve new products can be affected by a variety of factors, including government budget and funding levels, statutory, regulatory, and policy changes, including executive orders, the FDA’s ability to hire and retain key personnel and accept the payment of user fees, and other events that may otherwise affect the FDA’s ability to perform routine functions. Average review times at the agency have fluctuated in recent years as a result. In addition, government funding of other government agencies such as the EMA, following its relocation to Amsterdam and corresponding staff changes, that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable. Disruptions at the FDA and other agencies may also slow the time necessary for product candidates to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, over the last several years, including for 35 days beginning on December 22, 2018, the U.S. government has shut down several times and certain regulatory agencies, such as the FDA, have had to furlough critical FDA employees and stop critical activities.

Previous wording

Our business depends upon our ability to identify, develop and commercialize product candidates. A key element of our strategy is to discover and develop additional product candidates based upon our CRAC channel inhibitor science. We are seeking to do so through our internal research programs, and may also explore strategic collaborations for the discovery of new product candidates. Research programs to identify product candidates require substantial technical, financial and human resources, whether or not any product candidates are ultimately identified. In addition, targets for different indications may require changes to our manufacturing processes, which may slow down development or make it impossible to manufacture our product candidates. Our research programs may initially show promise in identifying potential product candidates, yet fail to yield product candidates for clinical development for many reasons, including the following:

Current wording

Research programs to identify product candidates require substantial technical, financial and human resources, whether or not any product candidates are ultimately identified. In addition, targets for different indications may require changes to our manufacturing processes, which may slow down development or make it impossible to manufacture our product candidates. Our research programs may initially show promise in identifying potential product candidates, yet fail to yield product candidates for clinical development for many reasons, including the following:

Previous wording

We do not have the ability to conduct most aspects of our preclinical studies or clinical trials in-house. As a result, we are and expect to remain dependent on third parties to conduct or otherwise support our ongoing clinical trials and any future clinical trials of our product candidates. Specifically, CROs, clinical investigators, and consultants play a significant role in the conduct of these trials and the subsequent collection and analysis of data. However, we will not be able to control all aspects of their activities. Nevertheless, we are responsible for ensuring that each of our trials is conducted in accordance with the applicable protocol and legal, regulatory and scientific standards, and our reliance on the CROs and other third parties does not relieve us of our regulatory responsibilities. We and our CROs are required to comply with GCP requirements, which are regulations and guidelines enforced by the FDA, the Competent Authorities of the member states of the European Economic Area (“EEA”), and comparable foreign regulatory authorities for all of our product candidates in clinical development. Regulatory authorities enforce these GCP requirements through periodic inspections of trial sponsors, clinical trial investigators and clinical trial sites. If we or any of our CROs or clinical trial sites fail to comply with applicable GCP requirements, the data generated in our clinical trials may be deemed unreliable, and the FDA or comparable foreign regulatory authorities may require us to perform additional clinical trials before approving our marketing applications. In addition, our clinical trials must be conducted with investigational product produced under cGMP regulations (and similar foreign requirements). Our failure to comply with these regulations may require us to stop and/or repeat clinical trials, which would delay the marketing approval process.

Current wording

We do not have the ability to conduct most aspects of our preclinical studies or clinical trials in-house. As a result, we are and expect to remain dependent on third parties to conduct or otherwise support our ongoing clinical trials and any future clinical trials of our product candidates. Specifically, CROs, clinical investigators, and consultants play a significant role in the conduct of these trials and the subsequent collection and analysis of data. However, we will not be able to control all aspects of their activities. Nevertheless, we are responsible for ensuring that each of our trials is conducted in accordance with the applicable protocol and legal, regulatory and scientific standards, and our reliance on the CROs and other third parties does not relieve us of our regulatory responsibilities. We and our CROs are required to comply with GCP requirements, which are regulations and guidelines enforced by the FDA, the Competent Authorities of the member states of the EEA, and comparable foreign regulatory authorities for all of our product candidates in clinical development. Regulatory authorities enforce these GCP requirements through periodic inspections of trial sponsors, clinical trial investigators and clinical trial sites. If we or any of our CROs or clinical trial sites fail to comply with applicable GCP requirements, the data generated in our clinical trials may be deemed unreliable, and the FDA or comparable foreign regulatory authorities may require us to perform additional clinical trials before approving our marketing applications. In addition, our clinical trials must be conducted with investigational product produced under cGMP regulations (and similar foreign requirements). Our failure to comply with these regulations may require us to stop and/or repeat clinical trials, which would delay the marketing approval process.

Previous wording

In addition, with respect to investigator-sponsored trials that are being conducted and may be conducted in the future, we do not and would not control the design or conduct of these trials, and it is possible that the FDA will not view these investigator-sponsored trials as providing adequate support for future clinical trials or market approval, whether controlled by us or third parties, for any one or more reasons, including elements of the design or execution of the trials or safety concerns or other trial results. We expect that such arrangements will provide us certain information rights with respect to the investigator-sponsored trials, including access to and the ability to use and reference the data, including for our own regulatory submissions, resulting from the investigator-sponsored trials. However, we would not have control over the timing and reporting of the data from investigator-sponsored trials, nor would we own the data from the investigator-sponsored trials. If we are unable to confirm or replicate the results from the investigator-sponsored trials or if negative results are obtained, we would likely be further delayed or prevented from advancing further clinical development. Further, if investigators or institutions breach their obligations with respect to the clinical development of our product candidates, or if the data proves to be inadequate compared to the firsthand knowledge we might have gained had the investigator-sponsored trials been sponsored and conducted by us, then our ability to design and conduct any future clinical trials ourselves may be adversely affected. The investigators may design clinical trials with clinical endpoints that are more difficult to achieve, or in other ways that increase the risk of negative clinical trial results compared to clinical trials that we may design on our own. Negative results in investigator- sponsored clinical trials could have a material adverse effect on our efforts to obtain regulatory approval for our product candidates and the public perception of our product candidates. Additionally, the FDA may disagree with the sufficiency of our right of reference to the preclinical or clinical data generated by these investigator-sponsored trials, or our interpretation of preclinical, manufacturing or clinical data from these investigator-sponsored trials. If so, the FDA may require us to obtain and submit additional preclinical or clinical data.

Current wording

In addition, with respect to investigator-sponsored trials that are being conducted with Auxora (the CRSPA trial with SJCRH) and may be conducted in the future, we do not and would not control the design or conduct of these trials, and it is possible that the FDA will not view these investigator-sponsored trials as providing adequate support for future clinical trials or market approval, whether controlled by us or third parties, for any one or more reasons, including elements of the design or execution of the trials or safety concerns or other trial results. We expect that such arrangements will provide us certain information rights with respect to the investigator-sponsored trials, including access to and the ability to use and reference the data, including for our own regulatory submissions, resulting from the investigator-sponsored trials. However, we would not have control over the timing and reporting of the data from investigator-sponsored trials, nor would we own the data from the investigator-sponsored trials. If we are unable to confirm or replicate the results from the investigator-sponsored trials or if negative results are obtained, we would likely be further delayed or prevented from advancing further clinical development. Further, if investigators or institutions breach their obligations with respect to the clinical development of our product candidates, or if the data proves to be inadequate compared to the firsthand knowledge we might have gained had the investigator-sponsored trials been sponsored and conducted by us, then our ability to design and conduct any future clinical trials ourselves may be adversely affected. The investigators may design clinical trials with clinical endpoints that are more difficult to achieve, or in other ways that increase the risk of negative clinical trial results compared to clinical trials that we may design on our own. Negative results in investigator- sponsored clinical trials could have a material adverse effect on our efforts to obtain regulatory approval for our product candidates and the public perception of our product candidates. Additionally, the FDA may disagree with the sufficiency of our right of reference to the preclinical or clinical data generated by these investigator-sponsored trials, or our interpretation of preclinical, manufacturing or clinical data from these investigator-sponsored trials. If so, the FDA may require us to obtain and submit additional preclinical or clinical data.

Previous wording

We do not have any manufacturing facilities. We produce in our laboratory relatively small quantities of product for evaluation in our research programs. We rely on third parties for the manufacture of most of our product candidates for preclinical testing and all of our product candidates for clinical testing and we will continue to rely on such third parties for commercial manufacture if any of our product candidates are approved. We currently have limited manufacturing arrangements for preclinical and clinical trial materials for each of our product candidates, including Auxora, and one component of the latter is provided by a single source supplier in China and will continue to be for the intermediate future. In addition, our single source supplier in China and any other foreign suppliers we may utilize in the future may be subject to U.S. legislation, including the proposed BIOSECURE Act, sanctions, trade restrictions and other foreign regulatory requirements, which may limit, delay, prevent or impair our ability to obtain preclinical and clinical trial materials for our product candidates. This reliance increases the risk that we will not have sufficient quantities of our product candidates or products, if approved, or such quantities at an acceptable cost or quality, which could delay, prevent or impair our development or commercialization efforts.

Current wording

We do not have any manufacturing facilities. We produce in our laboratory relatively small quantities of product for evaluation in our research programs. We rely on third parties for the manufacture of most of our product candidates for preclinical testing and all of our product candidates for clinical testing and we will continue to rely on such third parties for commercial manufacture if any of our product candidates are approved. We currently have limited manufacturing arrangements for preclinical and clinical trial materials for each of our product candidates, including Auxora, and one component of the latter is provided by a single source supplier in China, and will continue to be for the intermediate future. In addition, our single source supplier in China and any other foreign suppliers we may utilize in the future may be subject to U.S. legislation, similar to what is proposed in the BIOSECURE Act considered by Congress in 2024, sanctions, trade restrictions and other foreign regulatory requirements, which may limit, delay, prevent or impair our ability to obtain preclinical and clinical trial materials for our product candidates. This reliance increases the risk that we will not have sufficient quantities of our product candidates or products, if approved, or such quantities at an acceptable cost or quality, which could delay, prevent or impair our development or commercialization efforts.

Previous wording

Furthermore, all entities involved in the preparation of product candidates for clinical trials or commercial sale, including our existing contract manufacturers for our product candidates, are subject to extensive regulation. Components of a finished therapeutic product approved for commercial sale or used in clinical trials must be manufactured in accordance with cGMP requirements. These regulations govern manufacturing processes and procedures, including record keeping, and the implementation and operation of quality systems to control and assure the quality of investigational products and products approved for sale. Poor control of production processes can lead to the introduction of contaminants, or to inadvertent changes in the properties or stability of our product candidates that may not be detectable in final product testing. We or our contract manufacturers must supply all necessary documentation in support of an

Current wording

Furthermore, all entities involved in the preparation of product candidates for clinical trials or commercial sale, including our existing contract manufacturers for our product candidates, are subject to extensive regulation. Components of a finished therapeutic product approved for commercial sale or used in clinical trials must be manufactured in accordance with cGMP requirements. These regulations govern manufacturing processes and procedures, including record keeping, and the implementation and operation of quality systems to control and assure the quality of investigational products and products approved for sale. Poor control of production processes can lead to the introduction of contaminants, or to inadvertent changes in the properties or stability of our product candidates that may not be detectable in final product testing. We or our contract manufacturers must supply all necessary documentation in support of an NDA on a timely basis and must adhere to the FDA’s GLP regulations and cGMP regulations enforced by the FDA through its facilities inspection program. Comparable foreign regulatory authorities may require compliance with similar requirements. Our facilities and quality systems, and those of our third-party contract manufacturers, must pass a pre-approval inspection for compliance with the applicable regulations as a condition of marketing approval of our product candidates. We do not control the manufacturing activities of, and are completely dependent on, our contract manufacturers for compliance with cGMP regulations, although the FDA will hold us responsible for any such non-compliance with respect to our product candidates and any future approved products.

Previous wording

In the event that any of our contracted third parties fails to comply with such requirements or to perform their obligations to us in relation to quality, timing or otherwise, or if our supply of components or other materials becomes limited or interrupted for other reasons, including due to the ongoing conflicts between Ukraine and Russia and in the Middle East or other geopolitical or macroeconomic situations, we may be forced to manufacture the materials ourselves, for which we currently do not have the capabilities or resources, or enter into an agreement with another third-party, which we may not be able to do on commercially reasonable terms, if at all. In particular, any replacement of a third-party contractor could require significant effort and expertise because there may be a limited number of qualified replacements. In some cases, the technical skills or technology required to manufacture a certain aspect of our product candidates may be unique or proprietary to the third-party performing such process and we may have difficulty transferring such skills or technology to another third-party and a feasible alternative may not exist. In addition, certain of our product candidates and our own proprietary methods have never been produced or implemented outside of our company, and we may therefore experience delays to our development programs if we attempt to establish new third-party arrangements for these product candidates or methods. If we are required to or voluntarily change a third-party contractor for any reason, we will be required to verify that the new third party maintains facilities, processes and procedures that comply with quality standards and with all applicable regulations and guidelines. The delays associated with the verification of a new manufacturer could negatively affect our ability to develop product candidates in a timely manner or within budget.

Current wording

In the event that any of our contracted third parties fails to comply with such requirements or to perform their obligations to us in relation to quality, timing or otherwise, or if our supply of components or other materials becomes limited or interrupted for other reasons, including due to the ongoing or future international conflicts or other geopolitical or macroeconomic conditions, including international tariffs, we may be forced to manufacture the materials ourselves, for which we currently do not have the capabilities or resources, or enter into an agreement with another third-party, which we may not be able to do on commercially reasonable terms, if at all. In particular, any replacement of a third-party contractor could require significant effort and expertise because there may be a limited number of qualified replacements. In some cases, the technical skills or technology required to manufacture a certain aspect of our product candidates may be unique or proprietary to the third-party performing such process and we may have difficulty transferring such skills or technology to another third-party and a feasible alternative may not exist. In addition, certain of our product candidates and our own proprietary methods have never been produced or implemented outside of our company, and we may therefore experience delays to our development programs if we attempt to establish new third-party arrangements for these product candidates or methods. If we are required to or voluntarily change a third-party contractor for any reason, we will be required to verify that the new third party maintains facilities, processes and procedures that comply with quality standards and with all applicable regulations and guidelines. The delays associated with the verification of a new manufacturer could negatively affect our ability to develop product candidates in a timely manner or within budget.

Previous wording

For example, Auxora is an injectable emulsion drug product that must be administered intravenously over four hours, and this dosing regimen may be inconvenient for physicians or patients.

Current wording

For example, Auxora is an injectable emulsion drug product that must be administered intravenously over four hours, and this dosing regimen may be inconvenient for some physicians or patients.

Previous wording

Our Chief Executive Officer and member of our Board of Directors, Dr. Leheny, and our Chief Business Officer and member of our Board of Directors, Mr. Roberts, are the co-founders of Valence Life Sciences (“Valence”), are employed as managing directors of Valence and beneficially own the shares of the company held by Valence. Entities affiliated with Valence together with Dr. Leheny and Mr. Roberts beneficially owned approximately 13.8% of our common stock as of March 31, 2024. Although we expect that each of Dr. Leheny and Mr. Roberts will devote on average at least 40 hours per week to our company and remain highly active in our management, they will also continue to devote time to Valence. Because Dr. Leheny and Mr. Roberts are not required to work exclusively for us, their attention to other activities could slow our operations, which could adversely affect our business. In addition, although we do not believe Valence currently has any investments that conflict with our interests, in the future Valence may invest in companies that may compete with us for business opportunities or develop products that are competitive with ours. As a result, Dr. Leheny’s and Mr. Roberts’ interests may not be aligned with the interests of our other stockholders, and they may from time to time be incentivized to take certain actions that benefit their other interests and that our other stockholders do not view as being in their interest as investors in our company.

Current wording

Our Chief Executive Officer and member of our Board of Directors, Dr. Leheny, and our Chief Business Officer and member of our Board of Directors, Mr. Roberts, are the co-founders of Valence Life Sciences (“Valence”), are employed as managing directors of Valence and beneficially own the shares of the company held by Valence. Entities affiliated with Valence together with Dr. Leheny and Mr. Roberts beneficially own a significant portion of our common stock. Although we expect that each of Dr. Leheny and Mr. Roberts will devote on average at least 40 hours per week to our company and remain highly active in our management, they will also continue to devote time to Valence. Because Dr. Leheny and Mr. Roberts are not required to work exclusively for us, their attention to other activities could slow our operations, which could adversely affect our business. In addition, although we do not believe Valence currently has any investments that conflict with our interests, in the future Valence may invest in companies that may compete with us for business opportunities or develop products that are competitive with ours. As a result, Dr. Leheny’s and Mr. Roberts’ interests may not be aligned with the interests of our other stockholders, and they may from time to time be incentivized to take certain actions that benefit their other interests and that our other stockholders do not view as being in their interest as investors in our company.

Previous wording

As of September 30, 2024, we employed 13 full-time employees, six of whom were primarily engaged in research and development activities. We also engage various consultants that are primarily engaged in research and development activities. As we advance our research and development programs, we may be required to further increase the number of our employees, particularly in the areas of clinical development, quality, regulatory affairs and, if any of our product candidates receives marketing approval, sales, marketing and distribution. To manage any future growth, we must:

Current wording

As of March 31, 2025, we employed 15 full-time employees, six of whom were primarily engaged in research and development activities. We also engage various consultants that are primarily engaged in research and development activities. As we advance our research and development programs, we may be required to further increase the number of our employees, particularly in the areas of clinical development, quality, regulatory affairs and, if any of our product candidates receives marketing approval, sales, marketing and distribution. To manage any future growth, we must:

Previous wording

The key competitive factors affecting the success of all of our programs are likely to be the possibility of other companies developing drugs that address the same illnesses that we are aiming to address. Some of these markets are limited and significant competition could reduce the number of patients we are able to reach. If we are not successful in developing, commercializing and achieving higher levels of reimbursement than our competitors, we will not be able to compete against them and our business would be adversely affected.

Current wording

The key competitive factors affecting the success of all of our programs are likely to be the possibility of other companies developing drugs that address the same disease indications that we are aiming to address. Some of these markets are limited and significant competition could reduce the number of patients we are able to reach. If we are not successful in developing, commercializing and achieving higher levels of reimbursement than our competitors, we will not be able to compete against them and our business would be adversely affected.

Previous wording

Failure to comply with applicable data protection laws, regulations, and other obligations could lead to government enforcement actions (which could include civil or criminal penalties), private litigation and mass arbitration demands, and/or adverse publicity and could negatively affect our operating results and business.*

Current wording

Our (or the third parties with whom we work) actual or perceived failure to comply with applicable data protection laws, regulations, and other obligations could lead to government enforcement actions (which could include civil or criminal penalties), private litigation and mass arbitration demands, and/or adverse publicity and could negatively affect our operating results and business.

Previous wording

We and the third parties with whom we work may be subject to federal, state, and foreign data protection laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations that address privacy and data security. In the United States, numerous federal, state, and local laws and regulations, including federal and state health information privacy laws, state data breach notification laws, personal data protection laws, federal, state, and local consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws that govern the collection, use, disclosure, and protection of health-related and other personal data could apply to our operations or the operations of third parties with whom we work. In addition, we may obtain health information from third parties (including research institutions from which we obtain clinical trial data) that are subject to privacy and security requirements under the federal Health Insurance Portability and Accountability Act (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”). Depending on the facts and circumstances, we could be subject to significant penalties if we obtain, use, or disclose individually identifiable protected information provided by a HIPAA-covered entity or business associate in a manner that is not authorized or permitted by HIPAA.

Current wording

We and the third parties with whom we work may be subject to federal, state, and foreign data protection laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements, and other obligations that address privacy and data security. In the United States, numerous federal, state, and local laws and regulations, including federal and state health information privacy laws, state data breach notification laws, personal data protection laws, federal, state, and local consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws govern the collection, use, disclosure, and protection of health-related and other personal data. In addition, we obtain health information from third parties (including research institutions from which we obtain clinical trial data) that are subject to privacy and security requirements under federal HIPAA, as amended by the HITECH. Depending on the facts and circumstances, we could be subject to significant penalties if we obtain, use, or disclose individually identifiable protected information provided by a HIPAA-covered entity or business associate in a manner that is not authorized or permitted by HIPAA.

Previous wording

Additionally, new privacy laws are being enacted in the United States and globally, and existing ones are being updated and strengthened. For example, the California Consumer Privacy Act (“CCPA”) requires covered companies to provide certain disclosures to California consumers (including business representatives and employees who are California residents) and provide such consumers data protection and privacy rights, including the ability to opt-out of certain sales or sharing of personal data. The CCPA provides for administrative penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal data. This private right of action may increase the likelihood of, and risks associated with, data breach litigation. The California Privacy Rights Act (“CPRA”) expanded the CCPA’s requirements, including by adding a new right for consumers to correct their personal data and establishing a new regulatory agency to implement and enforce the law. Moreover, other states such as Virginia, Connecticut, Utah and Colorado, have enacted data protection laws, and similar laws are being considered in several other states, as well as at the federal and local levels. Although these laws may exempt some data processed in the context of clinical trials, these evolving compliance and operational requirements may further complicate compliance efforts and impose significant costs that are likely to increase over time, may require us to modify our data processing practices and policies, divert resources from other initiatives and projects, and could restrict the way products and services involving data are offered, all of which may harm our business, financial condition, results of operations and prospects.

Current wording

Additionally, new privacy rules are being enacted in the United States and globally, and existing ones are being updated and strengthened. For example, the CCPA requires covered companies to provide certain disclosures to California consumers (including business representatives and employees who are California residents) and provide such consumers data protection and privacy rights, including the ability to opt-out of certain sales or sharing of personal data. The CCPA provides for administrative penalties for violations, as well as a private right of action for certain data breaches that result in the loss of personal data. This private right of action may increase the likelihood of, and risks associated with, data breach litigation. The CPRA expanded the CCPA’s requirements, including by adding a right for consumers to correct their personal data and establishing a regulatory agency to implement and enforce the law. Moreover, a number of other states have enacted data protection laws, and similar laws are being considered in several other states, as well as at the federal and local levels. Although these laws exempt some data processed in the context of clinical trials, these evolving compliance and operational requirements impose significant costs that are likely to increase over time, may require us to modify our data processing practices and policies, divert resources from other initiatives and projects, and could restrict the way products and services involving data are offered, all of which may harm our business, financial condition, results of operations and prospects.

Previous wording

Internationally, virtually every jurisdiction in which we operate has established its own data security and privacy legal framework that may also apply to health-related and other personal data obtained outside of the United States. For example, the EU and the United Kingdom have adopted the General Data Protection Regulation (“EU GDPR” and “UK GDPR,” respectively), which imposes strict requirements for processing the personal data of individuals within the EEA and the United Kingdom. Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to 20 million euros, 17.5 million pounds sterling under the UK GDPR, or in each case, up to 4% of the annual global revenue of the noncompliant company, whichever is greater, as well as private litigation related to the processing of personal data brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests. Among other requirements, the GDPR regulates transfers of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data.

Current wording

Internationally, virtually every jurisdiction in which we operate has established its own data security and privacy legal framework that may also apply to health-related and other personal data obtained outside of the United States. For example, the EU has adopted the EU GDPR and the United Kingdom has adopted the UK General Data Protection Regulation (collectively, “GDPR”), which imposes strict requirements for processing the personal data of individuals within the EEA and the United Kingdom. Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to 20 million euros, 17.5 million pounds sterling under the UK GDPR, or in each case, up to 4% of the annual global revenue of the noncompliant company, whichever is greater, as well as private litigation related to the processing of personal data brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests. Among other requirements, the GDPR regulates transfers of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data.

Previous wording

Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA standard contractual clauses, the United Kingdom’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA or the United Kingdom to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as Europe) at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Additionally, companies that transfer personal data out of the EEA and United Kingdom to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations.

Current wording

Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA standard contractual clauses, the United Kingdom’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers for relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA, the United Kingdom, or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as Europe) at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Additionally, companies that transfer personal data out of the EEA and United Kingdom to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR’s cross-border data transfer limitations.

Previous wording

In addition, the India Digital Personal Data Protection Act 2023 (“DPDP”) may also apply to our operations. Like the GDPR, the DPDP has extra-territorial reach and failure to comply with the DPDP may lead to substantial fines. A significant portion of our CARPO trial was conducted in India and we and certain third parties with whom we work will be subject to the DPDP.

Current wording

In addition, the new India Digital Personal Data Protection Act 2023 (“DPDP”) came into force in 2024. Like the GDPR, the DPDP has extra-territorial reach and failure to comply with the DPDP may lead to substantial fines. A significant portion of our CARPO trial was conducted in India and we and certain third parties with whom we work may be subject to the DPDP.

Previous wording

We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. We publish privacy policies, marketing materials and other statements regarding data privacy and security. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences.

Current wording

We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. For example, clinical trial subjects about whom we or the third parties with whom we work obtain information, as well as the providers who share this information with us, contractually limit our ability to use and disclose the information. We publish privacy policies, marketing materials, whitepapers, and other statements such as statements related to compliance with certain certifications or self-regulatory principles, concerning data privacy and security. Regulators in the United States are increasingly scrutinizing these statements, and if these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences.

Previous wording

Failure by us or third parties with whom we work to comply with U.S. and international data protection laws, regulations, and other obligations could result in significant consequences, including without limitation government enforcement actions (which could include investigations, civil or criminal penalties, audits inspections), private litigation or mass arbitration demands, additional reporting requirements or oversight, bans on processing personal data, data breach reporting requirements and/or adverse publicity and could negatively affect our operating results and business. Moreover, clinical trial subjects about whom we or the third parties with whom we work obtain information, as well as the providers who share this information with us, may contractually limit our ability to use and disclose the information. Claims that we have violated individuals’ privacy rights, failed to comply with data protection laws, or breached our contractual obligations, even if we are not found liable, could be expensive and time-consuming to defend and could result in adverse publicity that could harm our business.

Current wording

Obligations related to data privacy and security (and consumers’ data privacy expectations) are quickly changing, becoming increasingly stringent, and creating uncertainty. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these obligations requires us to devote significant resources, which may necessitate changes to our services, information technologies, systems, and practices and to those of any third parties that process personal data on our behalf. Failure by us or third parties with whom we work to comply with U.S. and international data protection laws, regulations, and other obligations could result in significant consequences, including without limitation government enforcement actions (which could include investigations, civil or criminal penalties, audits inspections), private litigation or mass arbitration demands, additional reporting requirements or oversight, bans on processing personal data, data breach reporting requirements and/or adverse publicity and could negatively affect our operating results and business. Claims that we have violated individuals’ privacy rights, failed to comply with data protection or privacy obligations, even if we are not found liable, could be expensive and time-consuming to defend and could result in adverse publicity that could harm our business.

Previous wording

Our information technology systems, or those of our CROs or other contractors, consultants or other third parties with whom we work, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could result in a material disruption of our product candidates’ development programs, compromise confidential information related to our business or prevent us from accessing critical information, potentially exposing us to liability or otherwise adversely affecting our business.*

Current wording

Our information technology systems, or those of our CROs, contractors, consultants, or other third parties with whom we work, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could result in a material disruption of our product candidates’ development programs, compromise sensitive information related to our business or prevent us from accessing critical information, potentially exposing us to liability or otherwise adversely affecting our business.

Previous wording

We are increasingly dependent upon information technology systems, infrastructure and data to operate our business. In the ordinary course of business, we collect, store and transmit confidential information (including but not limited to intellectual property, proprietary business information and personal data, including health-related information).

Current wording

We are increasingly dependent upon information technology systems, infrastructure and data to operate our business. In the ordinary course of business, we collect, store and transmit confidential information (including but not limited to intellectual property, proprietary business information and personal data, including health-related information) (collectively, “sensitive information”).

Previous wording

Despite our implementation of security measures, given their size and complexity and the increasing amounts of confidential information that they maintain, our information technology systems and those of our third-party CROs and other contractors, consultants, and other third parties with whom we work are potentially vulnerable to breakdown or other damage or interruption from service interruptions, system malfunction, natural disasters, terrorism, war and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our employees, contractors, consultants, business partners, sophisticated nation-state and nation-state supported actors, and/or other third parties, or from cyber-attacks by malicious third parties (including the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering attacks, malicious code, credential stuffing attacks, credential harvesting, supply-chain attacks, software bugs, and other means to affect service reliability and threaten the confidentiality, integrity and availability of information), which may compromise our or third parties’ with whom we work system infrastructure or lead to data leakage. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. To the extent that any disruption or security breach were to result in a loss of, or damage to, our data or applications (or those of the third parties with whom we work), or inappropriate disclosure of confidential information, we could incur liability and reputational damage and the further development and commercialization of our product candidates could be delayed.

Current wording

As use of digital technologies has increased, cyber incidents, including deliberate attacks and attempts to gain unauthorized access to computer systems and networks, which could result in material adverse impacts to our business, including the theft of our sensitive information, have increased in frequency and sophistication. Despite our implementation of security measures, given their size and complexity and the increasing amounts of confidential information that they maintain, our information technology systems and those of our third-party CROs, contractors, consultants, and other third parties with whom we work are potentially vulnerable to breakdown or other damage or interruption from service interruptions, system malfunction, natural disasters, terrorism, war and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our employees, contractors, consultants, business partners, sophisticated nation-state and nation-state supported actors, and/or other third parties, or from cyber-attacks by malicious third parties (including the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering attacks, malicious code, credential stuffing attacks, credential harvesting, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, attacks enhanced or facilitated by AI, and other means to affect service reliability and threaten the confidentiality, integrity and availability of our sensitive information), which may compromise our or the third parties with whom we work systems infrastructure or lead to data leakage. For example, we have experienced phishing attacks in the past and we may be a target of phishing attacks or other cyber-attacks in the future. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive information and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. To the extent that any disruption or security breach were to result in a loss of, or damage to, our sensitive information or applications (or those of the third parties with whom we work), or inappropriate disclosure of sensitive information, we could incur liability and reputational damage, and the further development and commercialization of our product candidates could be delayed. It may be difficult or costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security inci…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We also have outsourced elements of our operations to third parties, and as a result we manage a number of third parties who have access to our confidential information. We rely on these third-party service providers and technologies to operate critical business systems to process confidential information in a variety of contexts, including, without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if the third parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or that of the third parties with whom we work have not been compromised.

Current wording

We also have outsourced elements of our operations to third parties, and as a result we manage a number of third parties who have access to our sensitive information. We rely on these third parties and technologies to operate critical business systems to process sensitive information in a variety of contexts, including, without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if the third parties with whom we work fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or the third parties with whom we work supply chains have not been compromised.

Previous wording

While we invest in our information security systems, we cannot assure you that our data protection efforts and our investment in information technology will prevent breakdowns, data leakages, breaches in our systems or other cyber incidents that could have an adverse effect upon our reputation, business, financial condition, results or operations and prospects. We may not be successful in preventing or detecting cyber-attacks or mitigating their effects, or we may be perceived as having failed to do so. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We may not, however, detect and remediate all such vulnerabilities including on a timely basis. Further, we may experience delays in developing and deploying remedial measures and patches designed to address identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident. For example, if a cyber-attack were to occur and cause interruptions in our operations, it could result in a material disruption of our programs and the development of our product candidates could be delayed. In addition, the loss of clinical trial data for our product candidates could result in delays in our marketing approval efforts and significantly increase our costs to recover or reproduce the data. Additionally, theft of our intellectual property or proprietary business information could require substantial expenditures to remedy. Furthermore, significant disruptions of our internal information technology systems or security breaches could result in the loss, misappropriation, and/or unauthorized access, use, or disclosure of, or the prevention of access to, confidential information (including trade secrets or other intellectual property, proprietary business information, and personal data), which could result in financial, legal, business, and reputational harm to us. For example, any such event that leads to unauthorized access, use, or disclosure of personal data, including personal data regarding our clinical trial subjects or employees, could harm our reputation directly, compel us to comply with federal and/or state breach notification laws and foreign law equivalents, subject us to mandatory corrective action, and otherwise subject us to liability under laws and regulations that protect the privacy and security of personal data, which could result in significant legal and financial exposure and reputational damages that could potentially have an adverse effect on our business (and that of third parties with whom we work) and our ability to provide our services..

Current wording

While we invest in our information security systems, we cannot assure you that our data protection efforts and our investment in information technology will prevent breakdowns, data leakages, breaches in our systems or other cyber incidents that could have an adverse effect upon our reputation, business, financial condition, results or operations and prospects. We may not be successful in preventing or detecting cyber-attacks or mitigating their effects, or we may be perceived as having failed to do so. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as hardware and/or software, including that of the third parties with whom we work), but we have not, and in the future may not, however, be able to detect and remediate all such vulnerabilities, including on a timely basis. Further, we have (and may in the future) experienced delays in developing and deploying remedial measures and patches designed to address any such identified vulnerabilities. Vulnerabilities [could] be exploited and result in a security incident. For example, if a cyber-attack were to occur and cause interruptions in our operations, it could result in a material disruption of our programs and the development of our product candidates could be delayed. In addition, the loss of clinical trial data for our product candidates could result in delays in our marketing approval efforts and significantly increase our costs to recover or reproduce the data. Additionally, theft of our intellectual property or proprietary business information could require substantial expenditures to remedy. Furthermore, significant disruptions of our internal information technology systems or security breaches could result in the loss, misappropriation, and/or unauthorized access, use, or disclosure of, or the prevention of access to, sensitive information (including trade secrets or other intellectual property, proprietary business information, and personal data), which could result in financial, legal, business, and reputational harm to us. For example, any such event that leads to unauthorized access, use, or disclosure of personal data, including personal data regarding our clinical trial subjects or employees, could harm our reputation directly, compel us to comply with federal and/or state breach notification laws and foreign law equivalents, subject us to mandatory corrective action, and otherwise subject us to liability under laws and regulations that protect the privacy and security of personal data, which could result in significant legal and financial exposure and reputational damages that could potentially have an adverse effect on our business (and that of the third parties with whom we work).

Previous wording

As of December 31, 2023, we had federal and state net operating loss (“NOL”) carryforwards of approximately $278.7 million and $103.5 million, respectively. $74.6 million of our federal NOLs were generated prior to 2018 and will begin to expire in 2026, unless previously utilized, but may be used to offset up to 100% of future taxable income before expiration. Under current law, our federal NOLs generated in tax years beginning after December 31, 2017, may be carried forward indefinitely, but the deductibility of such federal NOLs is limited to 80% of taxable income. It is uncertain if and to what extent various states will conform to federal tax law. We also have federal and state research and development credit carryforwards totaling $12.4 million and $2.4 million, respectively. The federal research and development credit carryforwards will begin to expire in 2027, unless previously utilized. The state research and development credits do not expire.

Current wording

As of December 31, 2024, we had federal and state net operating loss (“NOL”) carryforwards of approximately $296.8 million and nil, respectively. $102.2 million of our federal NOLs were generated prior to 2018 and will begin to expire in 2026, unless previously utilized, but may be used to offset up to 100% of future taxable income before expiration. Under current law, our federal NOLs generated in tax years beginning after December 31, 2017, may be carried forward indefinitely, but the deductibility of such federal NOLs is limited to 80% of taxable income. It is uncertain if and to what extent various states will conform to federal tax law. We also have federal and state research and development credit carryforwards totaling $13.3 million and $3.1 million, respectively. The federal research and development credit carryforwards will begin to expire in 2027, unless previously utilized. The state research and development credits do not expire.

Previous wording

In the United States and some foreign jurisdictions, there have been, and continue to be, several legislative and regulatory changes and proposed changes regarding the healthcare system that could prevent or delay marketing approval of product candidates, restrict or regulate post-approval activities, and affect our ability to profitably sell any product candidates for which we obtain marketing approval. Among policy makers and payors in the United States and elsewhere, including in the EU, there is significant interest in promoting changes in healthcare systems with the stated goals of containing healthcare costs, improving quality and/or expanding access. In the United States, the pharmaceutical industry has been a particular focus of these efforts and has been significantly affected by major legislative initiatives.

Current wording

Among policy makers and payors in the United States and elsewhere, including in the EU, there is significant interest in promoting changes in healthcare systems with the stated goals of containing healthcare costs, improving quality and/or expanding access. In the United States, the pharmaceutical industry has been a particular focus of these efforts and has been significantly affected by major legislative initiatives.