OneSpan Inc.

Unless otherwise noted, references in this Quarterly Report on Form 10-Q to “OneSpan,” “Company,” “we,” “our,” and “us,” refer to OneSpan Inc. and its subsidiaries.

Note 1 –Description of the Company and Basis of Presentation

Description of the Company

OneSpan helps organizations build secure, seamless, and trusted digital experiences throughtwo solution portfolios: Cybersecurity and Digital Agreements. Our cybersecurity solutions protect identities, secure mobile apps, and safeguard access through advanced high-assurance authentication, threat intelligence, fraud prevention, and mobile app protection, defending users, devices, and applications against sophisticated attacks. Our digital agreement solutions streamline agreement workflows with secure e-signatures, identity verification, and smart digital forms, built to enable speed, compliance and exceptional customer experiences. Trusted by leading global enterprises, including more than 60% of the world’s 100 largest banks, OneSpan processes over a hundred million digital agreements and billions of secure authentication transactions across more than 120 countries each year. OneSpan has operations in Austria, Australia, Belgium, Canada, China, France, Germany, India, Japan, The Netherlands, Singapore, Spain, Switzerland, the United Arab Emirates, the United Kingdom (U.K.), and the United States (U.S.).

Dividends

During the three months ended September 30, 2026, the Company paid its quarterly cash dividend declared on September 4, 2026 as part of a recurring quarterly dividend program. The quarterly cash dividend of $0.13 per share was paid to shareholders of record as of the close of business on August 14, 2026. The declaration and payment of future dividends is subject to the sole discretion of the Board of Directors.

Share Repurchase Program

During the nine months ended September 30, 2026, the Company repurchased 0.2 million shares of its common stock for $2.9 million under its new share repurchase program adopted in May 2026. As of September 30, 2026, approximately $47.1 million remained available for potential future repurchases under the repurchase program.

Basis of Presentation and Principles of Consolidation

The accompanying unaudited condensed consolidated financial statements include the accounts of OneSpan and have been prepared pursuant to the rules and regulations of the Securities and Exchange Commission (“SEC”) regarding interim financial reporting. Accordingly, they do not include all of the information and notes required by generally accepted accounting principles in the United States of America (“U.S. GAAP”) for complete financial statements and should be read in conjunction with the audited consolidated financial statements included in the Company’s Annual Report on Form 10-K for the year ended December 31, 2025.

In the opinion of management, the accompanying unaudited condensed consolidated financial statements have been prepared on the same basis as the audited consolidated financial statements, and include all adjustments, consisting only of normal recurring adjustments, necessary for the fair presentation of the results of the interim periods presented. Operating results for the three and nine months ended September 30, 2026 are not necessarily indicative of the results to be expected for any future period or the entire fiscal year.

The condensed consolidated financial statements include the accounts of the Company. All intercompany accounts and transactions have been eliminated in consolidation.

Estimates and Assumptions

The preparation of the condensed consolidated financial statements in conformity with U.S. GAAP requires management to make estimates and assumptions that affect the reported amounts of assets and liabilities and disclosure of contingent assets and liabilities at the date of the financial statements and the reported amounts of revenue and expenses during the reporting period. Actual results could differ from those estimates.

Foreign Currency Translation and Transactions

The financial position and results of operations of the majority of the Company’s foreign subsidiaries are measured using the local currency as the functional currency. Accordingly, assets and liabilities are translated into U.S. Dollars using current exchange rates as of the balance sheet date. Revenue and expenses are translated at average exchange rates prevailing during the year. Translation adjustments arising from differences in exchange rates are charged or credited to other comprehensive income (loss). Gains and losses resulting from foreign currency transactions are included in the condensed consolidated statements of operations in other income (expense), net. Foreign exchange transaction losses aggregated to $0.1 million and $0.8 million for the three and nine months ended September 30, 2026, respectively. Foreign exchange transaction losses aggregated to $0.2 million and $1.3 million for the three and nine months ended September 30, 2025, respectively.

Note 2 –Summary of Significant Accounting Policies

There have been no changes to the significant accounting policies described in the Annual Report on Form 10-K for the year ended December 31, 2025 filed with the SEC on February 26, 2026 that impact the Company’s condensed consolidated financial statements and related notes.

Other Accrued Expenses

Other accrued expenses consist of the following:

(1) Includes the deferred consideration of $0.5 million held back as a buffer for adjustments to the purchase consideration. See Note 6 –Business Acquisitions, for additional information.

Recently Issued Accounting Pronouncements

From time to time, new accounting pronouncements are issued by the Financial Accounting Standards Board (FASB) or other standard setting bodies that are adopted by the Company as of the specified effective date.

In November 2024, the FASB issued ASU 2024-03, Comprehensive Income (Topic 220) –Disaggregation of Income Statement Expenses, to improve financial reporting by requiring disclosures in the notes to financial statements about specific types of expenses included in the expense captions presented on the face of the statement of operations. The requirements of the ASU are effective for annual reporting periods beginning after December 15, 2026, and for interim reporting periods beginning after December 15, 2027, with early adoption permitted. The requirements are able to be applied prospectively with the option for retrospective application. The Company is evaluating the impact the adoption of this guidance will have on its consolidated financial statements and related disclosures.

In September 2025, the FASB issued ASU 2025-06, Intangible – Goodwill and Other – Internal–Use Software (Subtopic 350-40) –Targeted Improvements to the Accounting for Internal Use Software, to improve the guidance for the costs to develop software for internal use. Within the updated guidance, the FASB removed reference to prescriptive sequential software development stages. Instead, management will begin capitalizing eligible costs when (i) management has authorized and committed to funding the software project, and (ii) it is probable that the project will be completed and the software will be used to perform the function intended. This update is effective for annual reporting periods beginning after December 15, 2027. This update can be applied on a prospective basis, on a modified basis for in-process projects, or on a retrospective basis. The Company is evaluating the impact the adoption of this guidance will have on its consolidated financial statements and related disclosures.

Note 3 –Segment Information

Segments are defined as components of a company that engage in business activities from which they may earn revenues and incur expenses, and for which separate financial information is available and regularly provided to the chief operating decision maker ("CODM"), in deciding how to allocate resources and in assessing performance. The Company’s CODM is its Chief Executive Officer. The Company's reportable segments are business units that offer different products and services and are as follows:

•Cybersecurity. Cybersecurity, formerly Security Solutions, consists of our broad portfolio of software products, software development kits ("SDKs") and Digipass authenticator devices that are used to build applications designed to defend against attacks on digital transactions across online environments, devices, and applications. The software products and SDKs included in the Cybersecurity segment are delivered through on-premises and cloud-based deployment models and include standards-based authentication technologies such as Fast Identity Online ("FIDO") authentication and passkeys, multi-factor authentication, transaction signing solutions and mobile application security.

•Digital Agreements. Digital Agreements consists of solutions that enable our clients to secure and automate business processes associated with their digital agreement and customer transaction lifecycles that require consent, non-repudiation and compliance. These solutions, which are cloud-based, include OneSpan Sign e-signature, OneSpan Notary, and Identity Verification.

Segment operating income (loss) consists of the revenues generated by a segment, less the direct costs of revenue, sales and marketing, research and development expenses, general and administrative expenses, restructuring and other related charges, and amortization of intangible assets expense that are incurred directly by a segment. Sales and marketing and research and development expenses were determined to be significant segment expenses. Unallocated corporate costs include costs related to administrative functions that are performed in a centralized manner that are not directly attributable to a particular segment.

The tables below set forth information about the Company’s operating segments for the three and nine months ended September 30, 2026 and 2025, along with the items necessary to reconcile the segment information to the totals reported in the accompanying condensed consolidated financial statements.

*Percentage not meaningful.

(1)Cybersecurity other segment items includes general and administrative expense andamortization of intangiblesfor the three months ended September 30, 2026, andgeneral and administrative expense, write-off of assets, andamortization of intangiblesfor the nine months ended September 30, 2026. Cybersecurity other segment items includes general and administrative expense and restructuring and other related charges for the three and nine months ended September 30, 2025.

(2) Cybersecurity operating income includes $1.1 million and $2.8 million of total amortization and depreciation expense for the three and nine months ended September 30, 2026, respectively. Cybersecurity operating income includes $0.4 million and $0.7 million of total amortization and depreciation expense for the three and nine months ended September 30, 2025, respectively.

Cybersecurity operating income doesnot include any restructuring and other related charges for the three and nine months ended September 30, 2026. Cybersecurity operating income includes less than $0.1 million and $0.3 million of restructuring and other related charges for the three and nine months ended September 30, 2025, respectively.

(3) Digital Agreements other segment items includes general and administrative expense and amortization of intangibles for the three and nine months ended September 30, 2026. Digital Agreements other segment items includes general and administrative expense and restructuring and other related charges for thethree and nine months ended September 30, 2025.

(4) Digital Agreements operating income includes $2.1 million and $6.4 million of total amortization and depreciation expense for the three and nine months ended September 30, 2026, respectively. Digital Agreements operating income includes $1.9 million and $5.5 million of total amortization and depreciation expense for the three and nine months ended September 30, 2025, respectively.

Digital Agreements operating income doesnot include any restructuring and other related charges for the three and nine months ended September 30, 2026.

Digital Agreements operating income includes less than $0.1 million and $0.2 million of restructuring and other related charges for the three and nine months ended September 30, 2025, respectively.

The following tables illustrate the disaggregation of revenues by category and services, including a reconciliation of the disaggregated revenues to revenues from the Company’stwo reportable operating segments for the three and nine months ended September 30, 2026 and 2025:

(1) Cybersecurity subscription revenue during the three and nine months ended September 30, 2025 includes $6.6 million and $17.6 million, respectively, of term maintenance that has been reclassified from maintenance and services to align with the revised presentation of revenue described in Note 4 below. Digital Agreements subscription revenue during the three and nine months ended September 30, 2025 includes less than $0.1 million for all periods related to the reclassification from maintenance and services to align with the revised presentation of revenue.

Asset information by segment is not reported to or reviewed by the CODM to allocate resources, and therefore, the Company has not disclosed asset information for the segments.

Note 4 –Revenue from Contracts with Customers

The following tables present the Company’s revenues disaggregated by major products and services, geographical region and timing of revenue recognition. Certain prior period amounts for disaggregated revenues by major products and services have been reclassified to conform with the current year's presentation. The Company historically had reported revenue derived from maintenance contracts on an aggregated basis, encompassing maintenance associated with both perpetual license products and term‑based license arrangements. In connection with the Company's strategic focus on expanding its subscription‑based offerings and in response to changing customer purchasing preferences, an increasing proportion of customer contracts related to perpetual license products have transitioned to term‑based contracts. As a result, the Company has revised its presentation within the revenue‑by‑products tables to include term-based maintenance revenue within subscription revenue. Additionally, maintenance revenue associated with perpetual licenses and services revenue are now presented together, which reflects the steady decline in perpetual license arrangements. This reclassification had no impact on total revenue, operating income, or cash flows, and prior period results have been updated for comparability.

Revenue by major products and services

(1) Subscription revenue during the three and nine months ended September 30, 2025 includes $6.6 million and $17.6 million, respectively, of term maintenance revenue that has been reclassified from maintenance and services to align with the revised presentation of revenue described above.

Revenue by location of customer

We classify our sales by customer location inthree geographic regions: 1) the Americas, which includes North, Central, and South America; 2) EMEA, which includes Europe, Middle East and Africa; and 3) Asia Pacific (APAC), which includes Australia and New Zealand. The breakdown of revenue in each of our major geographic areas was as follows:

Timing of revenue recognition

Contract balances

The following table provides information about receivables, contract assets, and contract liabilities from contracts with customers as of September 30, 2026 and December 31, 2025:

Contract assets relate primarily to multi-year term license arrangements and the remaining contractual billings. These contract assets are transferred to receivables when the right to bill occurs over a 2 to 5 year period. The contract liabilities primarily relate to the advance consideration received from customers for subscription and maintenance services. Revenue is recognized for these services over time.

As a practical expedient, the Company does not adjust the promised amount of consideration for the effects of a significant financing component when it is expected, at contract inception, that the period between the Company's transfer of a promised product or service to a customer and when the customer pays for that product or service will be one year or less. Extended payment terms are not typically included in contracts with customers.

Revenue recognized during the nine months ended September 30, 2026 included $63.7 million that was included on the December 31, 2025 consolidated balance sheet in contract liabilities. Deferred revenue decreased in the same period due to timing of annual renewals.

Transaction price allocated to the remaining performance obligations

Remaining performance obligations represent the revenue that is expected to be recognized in future periods related to performance obligations that are unsatisfied, or partially unsatisfied, as of the end of the period. The following table includes expected revenue to be recognized in the future related to performance obligations that are unsatisfied (or partially unsatisfied) as of September 30, 2026:

The Company applies practical expedients and does not disclose information about remaining performance obligations (a) that have original expected durations of one year or less, or (b) where revenue is recognized as invoiced.

Costs of obtaining a contract

The Company incurs incremental costs related to commissions, which can be directly tied to obtaining a contract. The Company capitalizes commissions associated with certain new contracts and amortizes the costs over a period of up to 7 years, which is the determined benefit period based on the estimated customer relationship period or customer benefit period. The Company determined the period of benefit by taking into consideration the customer contracts, its technology and other factors, including customer attrition. Commissions are earned upon invoicing to the customer. For contracts with multiple year payment terms, because the commissions that are payable after year 1 are payable based on continued employment, they are expensed when incurred. Commissions and amortization expense are included in “Sales and Marketing” expense in the condensed consolidated statements of operations.

As a practical expedient, the Company recognizes the incremental costs of obtaining contracts as an expense when incurred if the amortization period for the assets that the Company otherwise would have recognized is one year or less. These costs are included in “Sales and Marketing” expense in the condensed consolidated statements of operations.

The following tables provide information related to the capitalized costs and amortization recognized in the current and prior period within "Other current assets" and "Other assets" on the condensed consolidated balance sheets:

Note 5 –Inventories, net

Inventories, net, consisting principally of hardware and component parts, are stated at the lower of cost or net realizable value. Cost is determined using the first-in, first-out (FIFO) method.

Inventories, net consist of the following:

Note 6 –Business Acquisitions

2026 - Build38 Acquisition

On February 27, 2026, the Company completed the acquisition of Build38 GmbH ("Build38") pursuant to a merger agreement (the "B38 Merger Agreement") entered into on December 23, 2025 that resulted in the Company purchasing all of the outstanding equity interests of Build38. Build38 is a provider of next-generation mobile application protection solutions and will extend the Company's investment in advanced mobile security technologies. The acquisition is expected to enhance OneSpan’s App Shielding offering by adding SDK-based security solutions that integrate in-app, cloud, and AI technologies. These enhancements are designed to provide businesses with strong protection against the growing wave of attacks targeting the mobile channel, as well as critical intelligence and telemetry on the mobile devices where the applications are deployed. The acquisition was accounted for as a business combination in accordance with ASC 805, Business Combinations, using the acquisition method of accounting. Under this method, the Company recognized the identifiable assets acquired and liabilities assumed at their estimated fair values as of the acquisition date.

Pursuant to the terms of the B38 Merger Agreement, the total provisional purchase consideration for the acquisition was $37.9 million, consisting of $34.6 million in cash consideration paid, $0.9 million in cash acquired, and $2.4 million in deferred consideration. Of the deferred amount, $1.9 million (the "Holdback Amount") has been held back as security for certain potential liabilities of Build38. Any unused portion of the Holdback Amount will be released to Build38 security holders 18 months after the closing date. The remaining deferred amount of $0.5 million has been held back as a buffer for adjustments to the purchase consideration based upon the closing date financial statements, which are expected to be settled in the fourth quarter of 2026. The Company incurred transaction related expenses of $2.1 million in connection with the acquisition of Build38, of which $1.6 million was expensed on the consolidated statement of operations for the year ended December 31, 2025 while the remaining $0.5 million was expensed during the nine months ended September 30, 2026.

Build38 is allocated entirely to the Company's Cybersecurity reportable operating segment. The following table summarizes the preliminary fair values of the assets acquired and liabilities assumed:

As part of the purchase price allocation, the Company determined intangible assets were developed technology and customer relationships. The fair value of the intangible assets was estimated using an income based approach for the technology and replacement cost approach for the customer relationships. The estimated useful lives over which intangible assets will be amortized are as follows: developed technology (7 years) and customer relationships (1 year).

The excess of the provisional purchase price over the estimated fair value of the tangible and intangible assets acquired and liabilities assumed has been recorded as goodwill, which is primarily attributable to expected growth opportunities, potential synergies from combining the acquired business into the Company’s existing businesses and an assembled workforce. Goodwill is not expected to be deductible for tax purposes.

Deferred revenue was recorded under ASC 606 in accordance with ASU 2021-08, Business Combinations (Topic 805), Accounting for Contract Assets and Contract Liabilities from Contracts with Customers; therefore, a reduction in deferred revenues related to the estimated fair values of the acquired deferred revenues was not required.

The Build38 operating results since completion of the acquisition are not material and are included in the condensed consolidated financial statements. The Company has not presented pro forma results of operations for the acquisition since the financial impact was not material to the condensed consolidated financial statements.

The initial accounting for the acquisition is not complete, and measurement period adjustments may be recorded in fiscal year 2026, but no later than one year from the acquisition date. The areas that remain provisional primarily relate to (i) the assessment of deferred income tax assets and (ii) the finalization of the net working capital adjustment, which is required to be settled within 90 days of the acquisition date, subject to seller shareholder approval and requests for extensions, and may impact the total purchase consideration. The Company believes the information currently available provides a reasonable basis for the provisional fair values of assets acquired and liabilities assumed. The Company will continue to evaluate these items and record necessary adjustments within the allowable measurement period.

2025 - Nok Nok Labs, Inc. Acquisition

On June 4, 2025, the Company acquired Nok Nok Labs, Inc ("Nok Nok Labs") pursuant to a merger agreement (the "NNL Merger Agreement") that resulted in the Company purchasing all of the outstanding equity interests of Nok Nok Labs. Nok Nok Labs is a leading provider of passwordless software authentication solutions that use FIDO (Fast IDentity Online) authentication protocols. The technology acquired in the acquisition is expected to provide OneSpan's customers with a wider range of flexible, adaptable authentication options. The acquisition was accounted for as a business combination in accordance with ASC 805, Business Combinations, using the acquisition method of accounting. Under this method, the Company recognized the identifiable assets acquired and liabilities assumed at their fair values as of the acquisition date.

Pursuant to the terms of the NNL Merger Agreement, the total purchase consideration for the acquisition was $19.2 million, consisting of $14.7 million in cash consideration paid, $1.8 million in cash acquired, and $2.7 million in deferred consideration. The $2.7 million (the "Holdback Amount") was held back as security for potential indemnity claims made by the Company. Any unused portion of the Holdback Amount will be released to Nok Nok Labs security holders 18 months after the acquisition date.

Note 7 –Goodwill

The following table presents the changes in goodwill during the nine months ended September 30, 2026:

(1) Represents goodwill recorded in conjunction with the acquisition of Build38 for the nine months ended September 30, 2026. See Note 6 –Business Acquisitions, for additional information.

No impairment of goodwill was recorded during the nine months ended September 30, 2026 and 2025.

Note 8 –Intangible Assets, net

Intangible assets, net as of September 30, 2026 and December 31, 2025 consist of the following:

Amortization expense was $1.2 million and $3.3 million for the three and nine months ended September 30, 2026, respectively, compared to $0.7 million and $2.0 million for the three and nine months ended September 30, 2025, respectively. Amortization expense includes cost of sales amortization expense directly related to delivering cloud subscription revenue of $0.4 million and $1.0 million for the three and nine months ended September 30, 2026, respectively. There wasno cost of sales amortization expense for the three and nine months ended September 30, 2025. Costs included in cost of sales are recorded in "Services and other cost of goods sold" on the condensed consolidated statements of operations.

Certain intangible assets are denominated in functional currencies besides the U.S. Dollar and are subject to currency fluctuations.

There wasno impairment of intangible assets recorded during the nine months ended September 30, 2026 and 2025.

Note 9 –Property and Equipment, net

The following table presents the major classes of property and equipment, net, as of September 30, 2026 and December 31, 2025:

Depreciation expense was $2.2 million and $6.7 million for the three and nine months ended September 30, 2026, respectively, compared to $1.8 million and $5.2 million for the three and nine months ended September 30, 2025, respectively. Depreciation expense includes cost of sales depreciation expense directly related to delivering cloud subscription revenue of $1.7 million and $5.2 million for the three and nine months ended September 30, 2026, respectively, and $1.3 million and $3.7 million for the three and nine months ended September 30, 2025, respectively, and are recorded in "Services and other cost of goods sold" on the condensed consolidated statements of operations.

The Company wrote-off internal capitalized software of $0.3 million during the nine months ended September 30, 2026 related to an in process software project similar to the mobile application protection solution acquired in the Build38 acquisition. As a result, the Company determined this software project to have no future benefit.

Note 10 –Fair Value Measurements

The fair values of cash equivalents, accounts receivable, and accounts payable approximate their carrying amounts due to their short duration. The fair value of the Company's variable rate revolving credit facility approximates its carrying value and is based on Level 2 inputs as it is estimated using observable markets inputs such as current interest rates and credit spreads for similar instruments. The fair value hierarchy is based on inputs to valuation techniques that are used to measure fair value that are either observable or unobservable. Observable inputs reflect assumptions market participants would use in pricing an asset or liability based on market data obtained from independent sources while unobservable inputs reflect a reporting entity’s pricing base upon its own market assumptions.

The estimated fair value of financial instruments has been determined by using available market information and appropriate valuation methodologies, as defined in ASC 820, Fair Value Measurements. The fair value hierarchy consists of the following three levels:

•Level 1 – Inputs are quoted prices in active markets for identical assets or liabilities.

•Level 2 – Inputs are quoted prices for similar assets or liabilities in an active market, quoted prices for identical or similar assets or liabilities in markets that are not active, inputs other than quoted prices that are observable and market-corroborated inputs which are derived primarily from or corroborated by observable market data.

•Level 3 – Inputs are derived from valuation techniques in which one or more significant inputs or value drivers are unobservable.

The following tables summarize the Company’s financial assets by level in the fair value hierarchy as of September 30, 2026 and December 31, 2025:

The Company didnot have any financial liabilities that are measured at fair value on a recurring basis as of September 30, 2026 and December 31, 2025.

The Company’s non-financial assets and liabilities, which include goodwill and long-lived assets held and used, are not required to be measured at fair value on a recurring basis. However, if certain triggering events occur, or if an annual impairment test is required, the Company would evaluate the non-financial assets and liabilities for impairment. If an impairment was to occur, the asset or liability would be recorded at its estimated fair value.

Note 11 –Allowance for Credit Losses

In accordance with accounting standards updates ("ASU") No. 2016-13, “Financial Instruments - Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments,” the Company evaluates its allowance based on expected losses rather than incurred losses, which is known as the current expected credit loss (“CECL”) model. The allowance is determined using the loss rate approach and is measured on a collective (pool) basis when similar risk characteristics exist. Where financial instruments do not share risk characteristics, they are evaluated on an individual basis. The allowance is based on relevant available information, from internal and external sources, relating to past events, current conditions, and reasonable and supportable forecasts.

The changes in the allowance for credit losses during the nine months ended September 30, 2026 were as follows:

Note 12 –Debt

On June 23, 2025, the Company entered into a $100.0 million credit agreement (the “Credit Agreement") with MUFG Bank, Ltd ("MUFG"), as administrative agent, swingline lender and L/C issuer, and other lenders party thereto. The Credit Agreement provides for a $100.0 million revolving credit facility with a $10.0 million letter of credit sublimit and a $10.0 million swingline loan sublimit. As of September 30, 2026, the Company had $0.4 million letters of credit outstanding and $5.0 million of borrowings outstanding under the Credit Agreement. Any outstanding letters of credit reduce the availability of funds to borrow. On October 6, 2026, the Company repaid in full the total amount of borrowings outstanding under the Credit Agreement.

The proceeds of borrowings under the Credit Agreement may be used for general corporate purposes. The Company may borrow, repay and reborrow funds under the revolving credit facility until its maturity on June 23, 2030. Revolving loans may be prepaid by the Company, subject to notice and minimum threshold requirements, without penalty or premium, subject to customary breakage costs. The Company is required to pay a commitment fee on the daily unused amount of the revolving credit facility commitments ranging from 0.25% to 0.30% per annum, depending on its consolidated net leverage ratio.

At the Company's election, borrowings under the credit facility will bear interest at either (i) the base rate, defined as the highest of (a) the MUFG prime rate, (b) the federal funds rate plus 0.50%, and (c) term SOFR plus 1.00%, in each case, subject to a 1.00% floor, (ii) the term SOFR rate, (iii) the alternative currency daily rate, or (iv) the alternative currency term rate, in each case, plus the applicable rate. The applicable rate varies based on the Company's consolidated net leverage ratio and will range from 1.00% to 1.50% for base rate loans and 2.00% to 2.50% for term SOFR and alternative currency loans. With respect to term SOFR and alternative currency term rate loans, the Company may elect an interest period of one (1), three (3) or six (6) months.

The Credit Agreement also provides that the Company may, with the agreement of the lenders and/or new lenders and subject to certain conditions and limitations, add one or more incremental revolving facilities to increase commitments under the credit facility in an aggregate amount not to exceed the greater of (x) $100.0 million and (y)100% of Consolidated EBITDA (as defined in the Credit Agreement) for the four consecutive fiscal quarters most recently ended for which financial statements have been delivered pursuant to the terms of the Credit Agreement.

All of the Company's obligations under the Credit Agreement are secured by a first-priority lien and security interest in substantially all of the Company's tangible and intangible assets. The material subsidiaries of OneSpan Inc., subject to certain exclusions, have guaranteed the obligations under the Credit Agreement and granted a lien and pledge, as applicable, on substantially all of their tangible and intangible property to secure the obligations under the Credit Agreement.

The Credit Agreement contains certain representations and warranties, affirmative covenants, negative covenants and conditions that are customarily required for similar financings. The negative covenants include limitations on indebtedness, liens, investments, fundamental changes, asset dispositions, restricted payments and transactions with affiliates, as well as financial covenants that require the maintenance of (i) a consolidated net leverage ratio (as defined in the Credit Agreement) of not more than 3.25 to 1.00 at any time during any period of four consecutive fiscal quarters, subject to certain exceptions and (ii) a minimum consolidated interest coverage ratio (as defined in the Credit Agreement) of not less than 3.00 to 1.00 as of the end of any fiscal quarter.

The Company capita lized $1.9 million of lender and third-party debt issuance costs incurred in connection with the Credit Agreement and will amortize these costs to interest expense over the term of the revolving credit facility. For the three and nine months ended September 30, 2026, the amortization of debt issuance costs was $0.1 million and $0.3 million. As of September 30, 2026, the current portion of the debt issuance costs were $0.4 millionand are included in the "Other current assets" line in the consolidated balance sheets and the non-current portion of the debt issuance costs were $1.0 million and are included in the "Other assets" line in the consolidated balance sheets.

Note 13 –Leases

Operating lease cost details for the three and nine months ended September 30, 2026 and 2025 are as follows:

At September 30, 2026, the Company’s weighted average remaining lease term for its operating leases is 4.2 years, and the weighted average discount rate for its operating leases is 6%.

During the nine months ended September 30, 2026, there were $2.6 million of operating cash payments for lease liabilities and $2.5 million of right-of-use assets obtained in exchange for new lease liabilities.

Maturities of the Company’s operating leases as of September 30, 2026 are as follows:

Note 14 –Income Taxes

The Company’s estimated annual effective tax rate for 2026 before discrete items is expected to be approximately 20%. The Company’s global effective tax rate approximates the U.S. statutory tax rate of 21% primarily due to the benefit from Foreign-Derived Deduction Eligible Income (FDDEI) and R&D credits that are offset by differences in foreign income tax rates, nondeductible expenses, and Net CFC Tested Income (NCTI), net of foreign tax credit. The ultimate tax expense will depend on the mix of earnings in various jurisdictions. Income taxes, net of refunds, of $7.0 million and $6.0 million were paid during the nine months ended September 30, 2026 and 2025, respectively.

Management assesses the need for a valuation allowance on a regular basis, weighing all positive and negative evidence to determine whether a deferred tax asset will be fully or partially realized. In evaluating the realizability of deferred tax assets, significant pieces of negative evidence such as 3-year cumulative losses are considered. Management also reviews reversal patterns of temporary differences to determine if the Company would have sufficient taxable income due to the reversal of temporary differences to support the realization of deferred tax assets.

Note 15 –Long-Term Compensation Plan and Stock Based Compensation

Under the OneSpan Inc. Amended and Restated 2019 Omnibus Incentive Plan, the Company awards restricted stock units subject to time-based vesting, restricted stock units which are subject to the achievement of future performance criteria and restricted stock units that are subject to the achievement of market conditions. The Company also awards a small amount of cash incentive awards under the Amended and Restated 2019 Omnibus Incentive Plan, as shown in the table below.

During the nine months ended September 30, 2026, the Company awarded 0.7 million restricted stock units subject to time-based vesting. The fair value of the unissued time-based restricted stock unit grants was $7.5 million at the dates of grant and the grants are being amortized over the vesting period ofthree years.

During the nine months ended September 30, 2026, the Company awarded restricted stock units subject to the achievement of service and future performance criteria, which allows for up to 0.9 million shares to be earned if the performance criteria are achieved at the target level. The fair value of these awards was $9.2 million at the dates of grant and the awards are being amortized over the requisite service period ofthree years. The Company currently believes that approximately 167% of these shares are expected to be earned.

The following table summarizes total compensation expense for the three and nine months ended September 30, 2026 and 2025:

(1) Other long-term incentive compensation consists of immaterial expense for cash incentive awards granted to employees located in jurisdictions where we do not issue stock-based compensation due to tax, regulatory or similar reasons.

Note 16 –Earnings per Share

Basic earnings per share is based on the weighted average number of shares outstanding and excludes the dilutive effect of common stock equivalents. Diluted earnings per share is based on the weighted average number of shares outstanding and includes the dilutive effect of common stock equivalents to the extent they are not anti-dilutive.

The details of the earnings per share calculations for the three and nine months ended September 30, 2026 and 2025 are as follows:

Note 17 –Legal Proceedings and Contingencies

The Company is subject to certain legal proceedings and claims that have arisen in the ordinary course of business. The Company currently does not anticipate that these matters, if resolved against the Company, will have a material adverse impact on its financial results or financial condition.

The Company accrues loss contingencies when losses become probable and are reasonably estimable. As of September 30, 2026, the Company has no probable and reasonably estimable loss contingencies.

The Company does not accrue for contingent losses that, in the judgment of the Company, are considered to be reasonably possible, but not probable. Although the Company intends to defend its legal matters vigorously, the ultimate outcome of these matters is uncertain. However, the Company does not expect the potential losses, if any, to have a material adverse impact on its operating results, cash flows, or financial condition. As of September 30, 2026, the Company does not have any reasonably possible losses for which an estimate can be made.

Note 18 –Subsequent Events

On October 29, 2026, the Board of Directors declared a quarterly cash dividend of $0.13 per share as part of the Company's recurring quarterly dividend program initiated in December 2024. This dividend will be paid on December 4, 2026 to shareholders of record as of the close of business on November 13, 2026. The declaration and payment of future dividends is subject to the sole discretion of the Board of Directors.