Profound Medical Corp.

Previous wording

We commenced operations in June 2008 and only began generating revenues in 2017. As of December 31, 2024, we had an accumulated deficit of $245,170,000 and had cash and cash equivalents of $54,912,000. Since inception, we have incurred significant losses each year. For the year ended December 31, 2024, we recorded a net loss of $27,816,000, and for the year ended December 31, 2023, we recorded a net loss of $28,323,000. We expect to incur significant operating losses even as we begin to commercialize the TULSA-PRO system in the United States following our FDA clearance, which will require significant expenditures to increase our sales and marketing capabilities and expand our manufacturing and distribution capacity, as well as other expenses related to increasing reimbursement coverage and gaining market acceptance among patients, physicians/clinicians and others in the medical community. In addition, we plan to continue product research and development and clinical trials and may pursue additional regulatory approvals. We expect to have sufficient cash to finance our operations for at least the next 18 months. There is no assurance that we will ever successfully commercialize our systems, generate significant revenues from our approved products or achieve profitability. Even if profitability is achieved, we may not be able to sustain or increase profitability. Our failure to achieve or maintain profitability could negatively impact the value of the Common Shares.

Current wording

We commenced operations in June 2008 and only began generating revenues in 2017. As of December 31, 2025, we had an accumulated deficit of $287,740,000 and had cash and cash equivalents of $59,723,000. Since inception, we have incurred significant losses each year. For the year ended December 31, 2025, we recorded a net loss of $42,570,000, and for the year ended December 31, 2024, we recorded a net loss of $27,816,000. We have incurred and we expect to incur additional significant operating losses even as we commercialize the TULSA-PRO system in the United States, which requires significant expenditures to increase our sales and marketing capabilities and expand our manufacturing and distribution capacity, as well as other expenses related to increasing reimbursement coverage and gaining market acceptance among patients, physicians/clinicians and others in the medical community. In addition, we plan to continue product research and development and clinical trials and may pursue additional regulatory approvals. While we currently expect to have sufficient cash to finance our operations for at least the next 18 months, our cash runway is based on a number of assumptions that may prove inaccurate, including the timing and level of product sales and gross margins, the pace of hiring and investments in commercial and manufacturing scale-up, and the timing and magnitude of clinical and regulatory expenditures. A shortfall in expected cash inflows or higher-than-anticipated cash outflows could require us to curtail, delay or eliminate planned activities and/or to seek additional financing sooner than we anticipate. There is no assurance that we will ever successfully commercialize our systems, generate significant revenues from our approved products or achieve profitability. Even if profitability is achieved, we may not be able to sustain or increase profitability. Our failure to achieve or maintain profitability could negatively impact the value of the Common Shares.

Previous wording

Our business requires substantial capital investment in order to commercialize our approved products, in particular to expand our sales and marketing capabilities and increase our manufacturing capacity, as well as to conduct research and development and to obtain regulatory approvals for existing products and future product candidates. In order to secure financing, if available, it is likely that we would need to sell additional Common Shares and/or securities that are exchangeable for or convertible into Common Shares, incur additional indebtedness and/or enter into development, manufacturing, distribution and/or licensing relationships. Our CIBC Credit Agreement includes covenants which require us to achieve certain financial performance measures and contains restrictions on our ability to incur additional debt. Any future equity financing may be dilutive to existing shareholders. Any future debt financing arrangements we enter into would likely contain restrictive covenants that would impose significant operating and/or financial restrictions on us. The availability of equity or debt financing will be affected by, among other things, our commercial progress and market acceptance in respect of the TULSA-PRO system and other approved products, as well as the results of our research and development, our ability to obtain regulatory approvals, the state of the capital markets generally, strategic alliance agreements, and other relevant considerations.

Current wording

Our business requires substantial capital investment in order to commercialize our approved products, in particular to expand our sales and marketing capabilities and increase our manufacturing capacity, as well as to conduct research and development and to obtain regulatory approvals for existing products and future product candidates. In order to secure financing, if available, it is likely that we would need to sell additional Common Shares and/or securities that are exchangeable for or convertible into Common Shares, incur additional indebtedness and/or enter into development, manufacturing, distribution and/or licensing relationships. Our Amended and Restated Credit Agreement, dated March 3, 2025, between us and Canadian Imperial Bank of Commerce (“CIBC”) (the “CIBC Credit Agreement”) (which amended and restated our original credit agreement with CIBC entered into on November 3, 2022 (the “Original CIBC Credit Agreement”)), includes covenants which require us to achieve certain financial performance measures and contains restrictions on our ability to incur additional debt. Any future equity financing may be dilutive to existing shareholders. Any future debt financing arrangements we enter into would likely contain restrictive covenants that would impose significant operating and/or financial restrictions on us. The availability of equity or debt financing will be affected by, among other things, our commercial progress and market acceptance in respect of the TULSA-PRO system and other approved products, as well as the results of our research and development, our ability to obtain regulatory approvals, the state of the capital markets generally, strategic alliance agreements, and other relevant considerations.

Previous wording

new ones. Any failure on our part to raise additional funds on terms favorable to us, or at all, may require us to significantly change or curtail current or planned operations in order to conserve cash until such time, if ever, that sufficient proceeds from operations are generated, and could result in us not taking advantage of business opportunities, in the termination or delay of clinical trials for one or more of our product candidates, in curtailment of our product development programs designed to identify new product candidates, and/or in the sale or assignment of rights to our technologies, products or product candidates. Any of the foregoing could have a material adverse effect on our business, financial condition and results of operations.

Current wording

Our cash outflows are expected to consist primarily of expenditures to increase our commercial capacity, particularly in sales and marketing, as well as in manufacturing and distribution. In addition, we intend to continue internal and external research and development efforts to develop and expand our product pipeline, as well as incur general and administrative expenditures to support our corporate infrastructure. If we do not obtain sufficient additional capital, there may be substantial doubt about our ability to continue as a going concern and realize assets and pay liabilities as they become due. Depending upon the results of our research and development programs and the availability of financial resources, we could decide to accelerate, terminate or reduce certain projects, or commence new ones. Any failure on our part to raise additional funds on terms favorable to us, or at all, may require us to significantly change or curtail current or planned operations in order to conserve cash until such time, if ever, that sufficient proceeds from operations are generated, and could result in us not taking advantage of business opportunities, in the termination or delay of clinical trials for one or more of our product candidates, in curtailment of our product development programs designed to identify new product candidates, and/or in the sale or assignment of rights to our technologies, products or product candidates. Any of the foregoing could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

We may set goals for and make public statements regarding the timing of the accomplishment of objectives material to our success, such as the timing and extent of product launches in the jurisdictions where they are approved for marketing and sale, in particular our expected commercialization of the TULSA-PRO system following FDA clearance in the United States; third-party reimbursement for our approved products; the timing and terms of any collaborations, partnerships, licenses, acquisitions or other agreements; the commencement and completion of clinical trials, including follow-up data on our TACT Pivotal Clinical Trial and CAPTAIN trial; and anticipated regulatory submission and approval dates for our products in additional jurisdictions, and for future product candidates. The actual timing of these events can vary dramatically due to factors such as the uncertainties inherent in the arrangements sufficient to commercialize our products, including in respect of manufacturing, distribution and marketing, as well as market competition and

Current wording

We may set goals for and make public statements regarding the timing of the accomplishment of objectives material to our success, such as the timing and extent of product launches in the jurisdictions where they are approved for marketing and sale, in particular our expected commercialization of the TULSA-PRO system following FDA clearance in the United States; third-party reimbursement for our approved products; the timing and terms of any collaborations, partnerships, licenses, acquisitions or other agreements; the commencement and completion of clinical trials, including follow-up data on our TACT Pivotal Clinical Trial and CAPTAIN trial; and anticipated regulatory submission and approval dates for our products in additional jurisdictions, and for future product candidates. The actual timing of these events can vary dramatically due to factors such as the uncertainties inherent in the arrangements sufficient to commercialize our products, including in respect of manufacturing, distribution and marketing, as well as market competition and adverse results from our clinical trials, and other factors as described herein, many of which are beyond our control. There can be no assurance that we will achieve our commercialization goals in respect of the TULSA-PRO system in the United States, or that future efficacy and safety results from our TACT Pivotal Clinical Trial and CAPTAIN trial will be favorable. If we fail to commercialize the TULSA-PRO system in the United States or any other approved products in the time frame and to the extent that we anticipate, our business, results of operations and financial condition may be materially adversely affected, and the price of the Common Shares could decline.

Previous wording

In addition, the success of any new product will depend on our ability to either successfully build our in-house sales and marketing capabilities or to maintain or secure new, or to realize the benefits of existing or future arrangements with, third-party marketing or distribution partners. See “Risk Factors—We intend to rely primarily on our in-house sales and marketing capabilities for our commercialization strategy, which will require substantial build-up and commitment of resources” and “Risk Factors—We currently rely on our collaborative partners, and we may rely on additional collaborative partnerships, to assist in the sales and marketing and/or distribution of our approved products” below. If we are unable to commercialize new products successfully, whether through a failure to achieve market acceptance, a failure to build our own in-house sales and marketing capabilities, a failure to maintain or secure new or existing marketing partners or to realize the benefits of our arrangements with our marketing and distribution partners, there may be

Current wording

In addition, the success of any new product will depend on our ability to either successfully build our in-house sales and marketing capabilities or to maintain or secure new, or to realize the benefits of existing or future arrangements with, third-party marketing or distribution partners. See “Risk Factors—We intend to rely primarily on our in-house sales and marketing capabilities for our commercialization strategy, which will require substantial build-up and commitment of resources” and “Risk Factors—We currently rely on our collaborative partners, and we may rely on additional collaborative partnerships, to assist in the sales and marketing and/or distribution of our approved products” below. If we are unable to commercialize new products successfully, whether through a failure to achieve market acceptance, a failure to build our own in-house sales and marketing capabilities, a failure to maintain or secure new or existing marketing partners or to realize the benefits of our arrangements with our marketing and distribution partners, there may be a material adverse effect on our business, financial condition and results of operations and it could cause the market value of our Common Shares to decline.

Previous wording

We have designed our TULSA-PRO system to be capable of integration with some of the MRI scanners from three of the major MRI manufacturers (Philips, Siemens and GE Healthcare), and the Sonalleve system with one MRI manufacturer (Philips). Although we believe that our approved products can be used by the vast majority of hospitals and treatment facilities, not all such facilities utilize MRI scanners that are compatible with the TULSA-PRO and Sonalleve systems, and such facilities would be required to acquire (or outsource to other facilities that already have) compatible MRI equipment, which may increase their costs and which could restrict or delay utilization of our systems by such facilities. Accordingly, we intend to expand compatibility of the systems with other MRI scanners in the future, which would require design changes to our systems, collaboration with the manufacturer of the MRI scanner and may require additional regulatory approvals. We may be unsuccessful in making the necessary design changes and, if required, receiving the necessary regulatory approvals for such changes, and the terms of any such arrangements that we may enter into in the future with

Current wording

We have designed our TULSA-PRO system to be capable of integration with some of the MRI scanners from three of the major MRI manufacturers (Philips, Siemens and GE Healthcare), and the Sonalleve system with one MRI manufacturer (Philips). Although we believe that our approved products can be used by the vast majority of hospitals and treatment facilities, not all such facilities utilize MRI scanners that are compatible with the TULSA-PRO and Sonalleve systems, and such facilities would be required to acquire (or outsource to other facilities that already have) compatible MRI equipment, which may increase their costs and which could restrict or delay utilization of our systems by such facilities. Accordingly, we intend to expand compatibility of the systems with other MRI scanners in the future, which would require design changes to our systems, collaboration with the manufacturer of the MRI scanner and may require additional regulatory approvals. We may be unsuccessful in making the necessary design changes and, if required, receiving the necessary regulatory approvals for such changes, and the terms of any such arrangements that we may enter into in the future with the MRI scanner manufacturers may not be on as favorable terms. Accordingly, we can provide no assurance that we will be successful in any such expansion of the compatibility of our products to other MRI scanners.

Previous wording

Successful commercialization of our products for which we obtain marketing authorization, including our TULSA-PRO system, depends largely upon the cost of the system and the availability of coverage and adequate reimbursement for the system, and the medical procedure associated with its use, from third-party payers, such as government healthcare programs, private health insurers and other organizations, such as health maintenance organizations and managed care organizations. We expect that our systems will be purchased by healthcare providers, including clinics and hospitals that use MRI scanners that are compatible with our systems, and that these providers will subsequently bill various third-party payers or will be responsible for covering the costs of the system through the provider’s operating budget. Although we expect there to be an out-of-pocket market for our authorized products, an out-of-pocket market alone is unlikely to be sufficient to support successful commercialization of such products. To date we have not secured significant coverage or reimbursement for any of our products from government or third-party payers in the jurisdictions where we have obtained regulatory authorizations, including our TULSA-PRO system in the United States. We can provide no assurance that third-party payers will provide coverage and adequate reimbursement for our TULSA-PRO system to treat our targeted indications based on our existing clinical data (such as our TACT and CAPTAIN data) or the results of any future clinical trials, or at all. See “Risk Factors—Data from our clinical trials may not support regulatory approvals or clearances and/or coverage and reimbursement for our products” below. Accordingly, we likely will need to conduct additional research and successfully complete additional clinical trials in order to obtain such coverage (e.g., follow-up data from our TACT Pivotal Clinical Trial and CAPTAIN trial). Such additional research and clinical trials may require significant time and resources, and may not be successful, which could result in the postponement of or inability to obtain coverage and reimbursement for our authorized products, which could significantly delay or otherwise negatively affect our commercialization strategy. Any of the foregoing could, in turn, have a material adverse effect on our business, results of operations and financial condition.

Current wording

Successful commercialization of our products for which we obtain marketing authorization, including our TULSA-PRO system, depends largely upon the cost of the system and the availability of coverage and adequate reimbursement for the system, and the medical procedure associated with its use, from third-party payers, such as government healthcare programs, private health insurers and other organizations, such as health maintenance organizations and managed care organizations. We expect that our systems will be purchased by healthcare providers, including clinics and hospitals that use MRI scanners that are compatible with our systems, and that these providers will subsequently bill various third-party payers or will be responsible for covering the costs of the system through the provider’s operating budget. Although we expect there to be an out-of-pocket market for our authorized products, an out-of-pocket market alone is unlikely to be sufficient to support successful commercialization of such products. We can provide no assurance that third-party payers will provide coverage and adequate reimbursement for our TULSA-PRO system to treat our targeted indications based on our existing clinical data (such as our TACT and CAPTAIN data) or the results of any future clinical trials, or at all. See “Risk Factors—Data from our clinical trials may not support regulatory approvals or clearances and/or coverage and reimbursement for our products” below. Accordingly, we likely will need to conduct additional research and successfully complete additional clinical trials in order to obtain such coverage (e.g., follow-up data from our TACT Pivotal Clinical Trial and CAPTAIN trial). Such additional research and clinical trials may require significant time and resources, and may not be successful, which could result in the postponement of or inability to obtain coverage and reimbursement for our authorized products, which could significantly delay or otherwise negatively affect our commercialization strategy. Any of the foregoing could, in turn, have a material adverse effect on our business, results of operations and financial condition.

Previous wording

We currently intend to partner with one or more additional QSR-compliant and FDA-registered contract manufacturers for our TULSA-PRO systems in the United States. However, we may not be successful in establishing or maintaining such partnerships on acceptable terms or in the timeframe necessary to commercialize our products successfully, or at all.

Current wording

We currently intend to partner with one or more additional cGMP-compliant and FDA-registered contract manufacturers for our TULSA-PRO systems in the United States. However, we may not be successful in establishing or maintaining such partnerships on acceptable terms or in the timeframe necessary to commercialize our products successfully, or at all.

Previous wording

We believe that third-party payers, in determining reimbursement coverage for our products, including the TULSA-PRO system, generally would rely upon our clinical trial results, such as TACT and CAPTAIN, that were obtained in support of our applications for regulatory authorization; however, we may be required to provide additional data from our existing trials and/or conduct additional

Current wording

We believe that third-party payers, in determining reimbursement coverage for our products, including the TULSA-PRO system, generally would rely upon our clinical trial results, such as TACT and CAPTAIN, that were obtained in support of our applications for regulatory authorization; however, we may be required to provide additional data from our existing trials and/or conduct additional clinical trials prior to obtaining reimbursement coverage for the TULSA-PRO system and other authorized products, which would likely involve significant time and expense, and may have a material adverse effect on our business, results of operations and financial condition.

Previous wording

We, the FDA or other regulatory authorities may suspend or terminate a clinical trial at any time if it is determined that enrolled subjects may be or are being exposed to unacceptable health risks, including the risk of death, that our devices are not manufactured under acceptable conditions or with acceptable quality, or that the trial is not being conducted according to the protocol and in compliance with Good Clinical Practice and regulatory requirements. Further, success in nonclinical studies and early clinical trials does not mean that future clinical trials will be successful because medical devices and/or treatment options in later stage clinical trials may fail to demonstrate sufficient safety and efficacy to the satisfaction of the FDA and other regulatory authorities despite having progressed through initial clinical trials. We cannot be sure that the later trials will replicate the results of prior trials.

Current wording

We, the FDA or other regulatory authorities may suspend or terminate a clinical trial at any time if it is determined that enrolled subjects may be or are being exposed to unacceptable health risks, including the risk of death, that our devices are not manufactured under acceptable conditions or with acceptable quality, or that the trial is not being conducted according to the protocol and in compliance with GCP and other regulatory requirements. Further, success in nonclinical studies and early clinical trials does not mean that future clinical trials will be successful because medical devices and/or treatment options in later stage clinical trials may fail to demonstrate sufficient safety and efficacy to the satisfaction of the FDA and other regulatory authorities despite having progressed through initial clinical trials. We cannot be sure that the later trials will replicate the results of prior trials.

Previous wording

Our reliance on these third parties for research and development activities will reduce our control over these activities but will not relieve us of our responsibilities. For example, we will remain responsible for ensuring that each of our clinical trials is conducted in accordance with the general investigational plan and protocols for the trial. Moreover, the FDA and other regulatory authorities require us to comply with good clinical practice regulations and international standards relating to the conduct, recording and reporting the results of clinical trials to assure that data and reported results are credible and accurate and that the rights, integrity and confidentiality of trial participants are protected. Our reliance on third parties, over which we have limited control, to manage those operations does not relieve us of these responsibilities and requirements. Our failure or any failure by these third parties to comply with these regulations or to recruit a sufficient number of patients may require us to repeat clinical trials, which would delay the marketing authorization process. Moreover, our business may be implicated if any of these third parties violates federal or state fraud and abuse or false claims laws and regulations or healthcare privacy and security laws. We also are required to register ongoing clinical trials and post the results of certain completed clinical trials on certain government-sponsored databases, such as ClinicalTrials.gov in the United States, within specified timeframes. Failure to do so can result in fines, adverse publicity and civil and criminal sanctions.

Current wording

Our reliance on these third parties for research and development activities will reduce our control over these activities but will not relieve us of our responsibilities. For example, we will remain responsible for ensuring that each of our clinical trials is conducted in accordance with the general investigational plan and protocols for the trial. Moreover, the FDA and other regulatory authorities require us to comply with GCP regulations and international standards relating to the conduct, recording and reporting the results of clinical trials to assure that data and reported results are credible and accurate and that the rights, integrity and confidentiality of trial participants are protected. Our reliance on third parties, over which we have limited control, to manage those operations does not relieve us of these responsibilities and requirements. Our failure or any failure by these third parties to comply with these regulations or to recruit a sufficient number of patients may require us to repeat clinical trials, which would delay the marketing authorization process. Moreover, our business may be implicated if any of these third parties violates federal or state fraud and abuse or false claims laws and regulations or healthcare privacy and security laws. We also are required to register ongoing clinical trials and post the results of certain completed clinical trials on certain government-sponsored databases, such as ClinicalTrials.gov in the United States, within specified timeframes. Failure to do so can result in fines, adverse publicity and civil and criminal sanctions.

Previous wording

qualified personnel in the medical device field. Therefore, we may not be able to attract and retain the qualified personnel necessary for the development of our business. We must continue to retain, motivate and recruit executives and other key employees. The failure to motivate, or the loss of the services of, existing personnel, as well as the failure to recruit additional key managerial personnel in a timely manner, would harm our business development programs, and our ability to manage day-to-day operations, attract collaboration partners, attract and retain other employees, generate revenues, and could have a material adverse impact on our business, financial condition and results of operations.

Current wording

We are highly dependent upon our small team of managerial personnel, particularly that of our Chief Executive Officer, Arun Menawat. We do not maintain any “key man” insurance policies on Dr. Menawat or any other members of senior management. Our anticipated growth will require additional expertise and the addition of new qualified personnel. There is intense competition for qualified personnel in the medical device field. Therefore, we may not be able to attract and retain the qualified personnel necessary for the development of our business. We must continue to retain, motivate and recruit executives and other key employees. The failure to motivate, or the loss of the services of, existing personnel, as well as the failure to recruit additional key managerial personnel in a timely manner, would harm our business development programs, and our ability to manage day-to-day operations, attract collaboration partners, attract and retain other employees, generate revenues, and could have a material adverse impact on our business, financial condition and results of operations.

Previous wording

with an acquisition, could have a material adverse effect on our business, financial condition, results of operations and cash flows. Acquisitions or other strategic transactions may also result in dilution to our existing shareholders if we issue additional equity securities as consideration or partial consideration as well as in the incurrence of indebtedness if we borrow funds to finance such transactions.

Current wording

We cannot assure you that we will be successful in overcoming these risks or any other problems we may encounter in connection with the Sonalleve Transaction or potential future acquisitions. Our inability to successfully integrate the operations of an acquired business, including a successful implementation of the technologies and assets we acquire, and realize anticipated benefits associated with an acquisition, could have a material adverse effect on our business, financial condition, results of operations and cash flows. Acquisitions or other strategic transactions may also result in dilution to our existing shareholders if we issue additional equity securities as consideration or partial consideration as well as in the incurrence of indebtedness if we borrow funds to finance such transactions.

Previous wording

Our products are regulated as medical devices in the United States and other jurisdictions. We and our products are subject to extensive regulation in the United States and elsewhere, including by the FDA and its foreign counterparts. The FDA and foreign regulatory agencies regulate, among other things, with respect to medical devices: design, development and manufacturing; testing, labeling, content and language of instructions for use and storage; clinical trials; product safety; establishment registration and device listing; marketing, sales and distribution; pre-market clearance, classification and approval; recordkeeping procedures; advertising and promotion; recalls and field safety corrective actions; post-market surveillance, including reporting of deaths or serious injuries and malfunctions that, if they were to recur, could lead to death or serious injury; post-market approval trials; and product import and export.

Current wording

Our products are regulated as medical devices in the United States and other jurisdictions. We and our products are subject to extensive regulation in the United States and elsewhere, including by the FDA and its foreign counterparts. The FDA and foreign regulatory agencies regulate, among other things, with respect to medical devices: design, development and manufacturing; testing, labeling, content and language of instructions for use and storage; clinical trials; product safety; establishment registration and device listing; marketing, sales and distribution; pre-market clearance, classification and approval; record keeping procedures; advertising and promotion; recalls and field safety corrective actions; post-market surveillance, including reporting of deaths or serious injuries and malfunctions that, if they were to recur, could lead to death or serious injury; post-market approval trials; and product import and export.

Previous wording

even longer, from the time the application is submitted to the FDA. In addition, PMAs and De Novo classification requests generally require the applicant to have conducted one or more clinical trials. Despite the time, effort and cost expended in seeking a marketing authorization, there is no assurance that the FDA will grant it. Any delay or failure to obtain necessary regulatory marketing authorizations could harm our business. Furthermore, even if we are granted such marketing authorizations, they may include significant limitations on the indicated uses for the device, which may limit the potential commercial market for the device.

Current wording

The PMA approval, 510(k) clearance and De Novo classification processes can be expensive, lengthy and uncertain. The FDA’s 510(k) clearance process can take anywhere from three to 12 months or longer to complete. The process of obtaining PMA approval or De Novo classification is much more costly and uncertain than the 510(k) clearance process and generally takes from one to three years, or even longer, from the time the application is submitted to the FDA. In addition, PMAs and De Novo classification requests generally require the applicant to have conducted one or more clinical trials. Despite the time, effort and cost expended in seeking a marketing authorization, there is no assurance that the FDA will grant it. Any delay or failure to obtain necessary regulatory marketing authorizations could harm our business. Furthermore, even if we are granted such marketing authorizations, they may include significant limitations on the indicated uses for the device, which may limit the potential commercial market for the device.

Previous wording

To be able to continue to place our CE Marked devices on the EU market, if we decide to do so, such products must be re-certified under the New EU MDR before the applicable extended deadline of December 31, 2028. The re-certification requires us to present documentation and other evidence demonstrating that the performance and the safety of the system has been maintained and that the

Current wording

To be able to continue to place our CE Marked devices on the EU market, if we decide to do so, such products must be re-certified under the New EU MDR before the applicable extended deadline of December 31, 2028. The re-certification requires us to present documentation and other evidence demonstrating that the performance and the safety of the system has been maintained and that the system continues to meet existing regulations and standards. Otherwise, the marketing and sale of our TULSA-PRO and Sonalleve systems in EU member states may be temporarily or permanently prohibited. Significant modifications to the our authorized products, if any, will require certification under the New EU MDR and cannot be implemented during the extended transition period.

Previous wording

Clinical trials are subject to extensive monitoring, recordkeeping and reporting requirements. Clinical trials must be conducted under the oversight of an IRB and must comply with FDA regulations, including but not limited to those relating to good clinical practices. To conduct a clinical trial, we must also obtain each subject’s informed consent which must comply with FDA requirements, state and federal privacy regulations and human subject protection regulations. We, the FDA or the IRB could suspend a clinical trial at any time for various reasons, including a belief that the risks to study subjects outweigh the anticipated benefits. Additionally, we may decide at any time, for business or other reasons, to terminate a clinical trial. Following completion of a clinical trial, we would need to collect, analyze and present the data in an appropriate submission to the FDA. Even if a study is completed and submitted to the FDA, the results of clinical testing may not adequately demonstrate the safety and efficacy of the device for its intended use, or may be equivocal or otherwise not be sufficient to obtain FDA clearance or approval of our product. In addition, the FDA may perform a bioresearch monitoring inspection of a study, and if it finds deficiencies, we will need to expend resources to correct those deficiencies, which may delay clearance or approval or the deficiencies may be so great that the FDA could refuse to accept all or part of the data or could trigger enforcement action.

Current wording

Clinical trials are subject to extensive monitoring, recordkeeping and reporting requirements. Clinical trials must be conducted under the oversight of an IRB and must comply with FDA regulations, including but not limited to those relating to GCP requirements. To conduct a clinical trial, we must also obtain each subject’s informed consent which must comply with FDA requirements, state and federal privacy regulations and human subject protection regulations. We, the FDA or the IRB could suspend a clinical trial at any time for various reasons, including a belief that the risks to study subjects outweigh the anticipated benefits. Additionally, we may decide at any time, for business or other reasons, to terminate a clinical trial. Following completion of a clinical trial, we would need to collect, analyze and present the data in an appropriate submission to the FDA. Even if a study is completed and submitted to the FDA, the results of clinical testing may not adequately demonstrate the safety and efficacy of the device for its intended use, or may be equivocal or otherwise not be sufficient to obtain FDA clearance or approval of our product. In addition, the FDA may perform a bioresearch monitoring inspection of a study, and if it finds deficiencies, we will need to expend resources to correct those deficiencies, which may delay clearance or approval or the deficiencies may be so great that the FDA could refuse to accept all or part of the data or could trigger enforcement action.

Previous wording

Our authorized products, and any other products for which we obtain regulatory clearance or approval, as well as the respective manufacturing processes, postmarket surveillance and reporting, post-approval clinical testing and promotional activities for such products, are subject to continued regulatory review, oversight and periodic inspections by the FDA and other regulatory bodies (and Notified Bodies, as applicable). In particular, we and some of our suppliers are required to comply with the QSR and international standards for the manufacture of products and other regulations which cover the methods and documentation of the design, testing, production, control, quality assurance, labeling, packaging, storage and shipping of any product for which we obtain regulatory clearance

Current wording

Our authorized products, and any other products for which we obtain regulatory clearance or approval, as well as the respective manufacturing processes, postmarket surveillance and reporting, post-approval clinical testing and promotional activities for such products, are subject to continued regulatory review, oversight and periodic inspections by the FDA and other regulatory bodies (and Notified Bodies, as applicable). In particular, we and some of our suppliers are required to comply with cGMP standards for the manufacture of medical devices and other regulations which cover the methods and documentation of the design, testing, production, control, quality assurance, labeling, packaging, storage and shipping of any product for which we obtain regulatory clearance or approval. Regulatory bodies, such as the FDA, enforce device cGMP requirements, such as the QSR and QMSR in the United States, and other regulations through periodic announced or unannounced inspections. We and our contract manufacturers have been, and anticipate in the future being, subject to such inspections.

Previous wording

In the United States, the FDA and other federal and state agencies, including the U.S. Department of Justice, closely regulate compliance with all requirements governing medical device products, including requirements pertaining to marketing and promotion of devices in accordance with the provisions of the approved labeling and manufacturing of products in accordance with QSR requirements. Violations of such requirements may lead to investigations alleging violations of the FFDCA and other statutes, including the False Claims Act and other federal and state healthcare fraud and abuse laws as well as state consumer protection laws. The failure by us or one of our suppliers to comply with applicable statutes and regulations administered by the FDA and other regulatory bodies, the failure to timely and adequately respond to any adverse inspectional observations or product safety issues, or the later discovery of previously unknown adverse events or other problems with our products could result in, among other things, any of the following enforcement actions:

Current wording

In the United States, the FDA and other federal and state agencies, including the U.S. Department of Justice, closely regulate compliance with all requirements governing medical device products, including requirements pertaining to marketing and promotion of devices in accordance with the provisions of the approved labeling and manufacturing of products in accordance with cGMP requirements. Violations of such requirements may lead to investigations alleging violations of the FFDCA and other statutes, including the False Claims Act and other federal and state healthcare fraud and abuse laws as well as state consumer protection laws. The failure by us or one of our suppliers to comply with applicable statutes and regulations administered by the FDA and other regulatory bodies, the failure to timely and adequately respond to any adverse inspectional observations or product safety issues, or the later discovery of previously unknown adverse events or other problems with our products could result in, among other things, any of the following enforcement actions:

Previous wording

We have developed and maintain a quality management system for medical devices intended to ensure quality of our products and activities. The system is designed to be in compliance with regulations in many different jurisdictions, including the QSR mandated by the FDA in the United States and the requirements of the MDD and New EU MDR in the European Union, including the international standard ISO 13485 required by the member states in Europe that recognize the CE Mark. The FDA issued a final rule on January 31, 2024 describing revisions to the QSR to harmonize it with ISO 13485:2016. The harmonized regulations, which will be called the Quality Management System Regulation, or QMSR, will become effective on February 2, 2026.

Current wording

We have developed and maintain a quality management system for medical devices intended to ensure quality of our products and activities. The system is designed to be in compliance with regulations in many different jurisdictions, including the QSR, and the new QMSR effective as of February 2, 2026, mandated by the FDA in the United States and the requirements of the MDD and New EU MDR in the European Union, including the international standard ISO 13485 required by the member states in Europe that recognize the CE Mark.

Previous wording

Our contract manufacturers must comply with applicable FDA, EU, Health Canada and other applicable foreign regulations, which include quality control and quality assurance requirements, as well as the corresponding maintenance of records and documentation and manufacture of devices according to the specifications contained in the applicable regulatory file. The manufacturing practices of our third-party suppliers are subject to ongoing regulation and periodic inspection. In the United States, the methods used in, and the facilities used for, the manufacture of medical devices must comply with the QSR, which is a complex regulatory scheme that covers the procedures and documentation of the design, testing, production, process controls, quality assurance, labeling, packaging, handling, storage, distribution, installation, and servicing of medical devices. Furthermore, we will be required to verify that our suppliers maintain facilities, procedures and operations that comply with our quality standards and applicable regulatory requirements. The FDA enforces the QSR through periodic announced or unannounced inspections of medical device manufacturing facilities, which may include the facilities of subcontractors. Our authorized device products also subject to similar state regulations and various laws and regulations of other countries governing manufacturing. If our contract manufacturers do not or cannot comply with these requirements, our ability to commercialize our approved products may be adversely affected.

Current wording

Our contract manufacturers must comply with applicable FDA, EU, Health Canada and other applicable foreign regulations, which include quality control and quality assurance requirements, as well as the corresponding maintenance of records and documentation and manufacture of devices according to the specifications contained in the applicable regulatory file. The manufacturing practices of our third-party suppliers are subject to ongoing regulation and periodic inspection. In the United States, the methods used in, and the facilities used for, the manufacture of medical devices must comply with the QSR, and starting on February 2, 2026 the new QMSR, which is a complex regulatory scheme that covers the procedures and documentation of the design, testing, production, process controls, quality assurance, labeling, packaging, handling, storage, distribution, installation, and servicing of medical devices. Furthermore, we will be required to verify that our suppliers maintain facilities, procedures and operations that comply with our quality standards and applicable regulatory requirements. The FDA enforces the QSR/QMSR through periodic announced or unannounced inspections of medical device manufacturing facilities, which may include the facilities of subcontractors. Our authorized device products also subject to similar state regulations and various laws and regulations of other countries governing manufacturing. If our contract manufacturers do not or cannot comply with these requirements, our ability to commercialize our approved products may be adversely affected.

Previous wording

If a substantial change is made to a device relying on an MDD certificate it will no longer benefit from the transition period set out in the New EU MDR. In this case the product would need to be CE marked under the New EU MDR to be placed on the market. Once CE marked under the New EU MDR these changes must be disclosed to our Notified Body in the EU before implementation. The Notified Body will then assess the changes and verify whether they affect the products’ conformity with the General Safety and Performance Requirements. If the assessment is favorable the Notified Body will issue a new CE Certificate of Conformity or an

Current wording

If a substantial change is made to a device relying on an MDD certificate it will no longer benefit from the transition period set out in the New EU MDR. In this case the product would need to be CE marked under the New EU MDR to be placed on the market. Once CE marked under the New EU MDR these changes must be disclosed to our Notified Body in the EU before implementation. The Notified Body will then assess the changes and verify whether they affect the product’s conformity with the General Safety and Performance Requirements. If the assessment is favorable the Notified Body will issue a new CE Certificate of Conformity or an addendum to the existing certificates attesting compliance with the General Safety and Performance Requirements. We may also be required to assess the new manufacturer’s compliance with all applicable regulations and guidelines, which could further impede our ability to manufacture our products in a timely manner. As a result, we could incur increased production costs, experience delays in deliveries of our products, suffer damage to our reputation, and experience a material adverse effect on our business, financial condition, and results of operations.

Previous wording

In the European Union, incidents and serious incidents must be reported to the relevant authorities of the European Union Member States, and manufacturers are required to take FSCAs, to reduce a risk of death or serious deterioration in the state of health associated with the use of a medical device that is already placed on the market (such FSCAs must also be reported to relevant authorities). The timing and means of making the report depend on the severity of the incident (for example, serious incidents that resulted in death or serious deterioration require immediate reporting to competent authorities, whereas incidents might be included in the periodic safety update report and/or trend reporting). For purposes of these regulations, an “incident” is defined as any malfunction or deterioration in the characteristics or performance of a device made available on the market, including use-error due to ergonomic features, as well as any inadequacy in the information supplied by the manufacturer and any undesirable side-effect. “Serious incident” is defined as any incident that directly or indirectly led, might have led or might lead to any of the following: (a) the death of a patient, user or other person, (b) the temporary or permanent serious deterioration of a patient’s, user’s or other person’s state of health, (c) a serious public health threat. An FSCA is defined as a corrective action taken by a manufacturer for technical or medical reasons to prevent or reduce the risk of a serious incident in relation to a device made available on the market. A FSCA may include the recall, modification, exchange, destruction or retrofitting of the device. In addition, governmental or other competent bodies or authorities have the authority to require the recall of products in the event of material deficiencies or defects in design or manufacture. Manufacturers may, under their own initiative, recall a product if any material deficiency in a device is found.

Current wording

In the European Union, incidents and serious incidents must be reported to the relevant authorities of the European Union Member States, and manufacturers are required to take FSCAs, to reduce a risk of death or serious deterioration in the state of health associated with the use of a medical device that is already placed on the market (such FSCAs must also be reported to relevant authorities). The timing and means of making the report depend on the severity of the incident (for example, serious incidents that resulted in death or serious deterioration require immediate reporting to competent authorities, whereas incidents might be included in the periodic safety update report and/or trend reporting). For purposes of these regulations, an “incident” is defined as any malfunction or deterioration in the characteristics or performance of a device made available on the market, including use-error due to ergonomic features, as well as any inadequacy in the information supplied by the manufacturer and any undesirable side-effect. “Serious incident” is defined as any incident that directly or indirectly led, might have led or might lead to any of the following: (a) the death of a patient, user or other

Previous wording

Under FDA medical device reporting regulations, manufacturers are required to report to the FDA information that reasonably suggests that one of their marketed devices may have caused or contributed to a death or serious injury or has malfunctioned and that the device or a similar device marketed by the manufacturer would likely cause or contribute to death or serious injury if the malfunction were to recur. If we fail to report these events to the FDA within the required timeframes, or at all, the FDA could take enforcement action against us. Similar enforcement action could be taken by the competent authorities in the European Union if we do not comply with our medical devices vigilance obligations. In addition, our EU Notified Body could decide to suspend or withdraw our CE Certificates of Conformity. Any such adverse event involving the TULSA-PRO or Sonalleve systems also could result in future voluntary corrective actions, such as recalls or customer notifications, or agency action, such as inspection, audit or enforcement action. Any corrective action, whether voluntary or involuntary, as well as defending ourselves in a lawsuit, will require the dedication of

Current wording

Under FDA medical device reporting regulations, manufacturers are required to report to the FDA information that reasonably suggests that one of their marketed devices may have caused or contributed to a death or serious injury or has malfunctioned and that the device or a similar device marketed by the manufacturer would likely cause or contribute to death or serious injury if the malfunction were to recur. If we fail to report these events to the FDA within the required timeframes, or at all, the FDA could take enforcement action against us. Similar enforcement action could be taken by the competent authorities in the European Union if we do not comply with our medical devices vigilance obligations. In addition, our EU Notified Body could decide to suspend or withdraw our CE Certificates of Conformity. Any such adverse event involving the TULSA-PRO or Sonalleve systems also could result in future voluntary corrective actions, such as recalls or customer notifications, or agency action, such as inspection, audit or enforcement action. Any corrective action, whether voluntary or involuntary, as well as defending ourselves in a lawsuit, will require the dedication of personnel time and capital, distract management from operating the business and may harm our reputation and could have a material adverse effect on our business, financial condition and operating results.

Previous wording

The governments and regulatory authorities in the United States, the European Commission, Canada and other markets in which we expect to sell our devices may propose and adopt new legislation and regulatory requirements relating to medical product approval criteria, manufacturing and marketing requirements. In addition, regulations and guidance promulgated by the FDA, the European Commission, and other regulatory bodies are often revised or reinterpreted by the agency and other relevant regulatory bodies in ways that may significantly affect our business and products. It is impossible to predict whether legislative changes will be enacted or regulations, guidance or interpretations changed and what the impact of such changes, if any, may be. Such legislation or changes in regulatory requirements, or the failure to comply with such, could adversely impact our operations and could have a material adverse effect on our business, financial condition and results of operations.

Current wording

The governments and regulatory authorities in the United States, the European Union, Canada and other markets in which we expect to sell our devices may propose and adopt new legislation and regulatory requirements relating to medical product approval criteria, manufacturing and marketing requirements. In addition, regulations and guidance promulgated by the FDA, the European Commission, Health Canada, and other regulatory bodies are often revised or reinterpreted by the agency and other relevant regulatory bodies in ways that may significantly affect our business and products. It is impossible to predict whether legislative changes will be enacted or regulations, guidance or interpretations changed and what the impact of such changes, if any, may be. Such legislation or changes in regulatory requirements, or the failure to comply with such, could adversely impact our operations and could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

In December 2022, the U.S. Congress enacted the Consolidated Appropriations Act for 2023, an omnibus appropriations bill, which included amendments to the FDDCA under the Food and Drug Omnibus Reform Act of 2022, or FDORA. In addition to the requirement that sponsors of pivotal trials submit diversity action plans for pivotal trials (see “Government Regulation-Regulatory Landscape in the United States-Device Clinical Studies”), FDORA included new requirements for cyber devices, defined as any medical device that is or includes software that is validated, installed, or authorized by the manufacturer; can connect to the internet; and may be vulnerable to cybersecurity threats. Under the FDORA amendments to the DFDCA, any application for marketing authorization of the cyber device must include a software bill of materials and a cybersecurity plan describing the methods by which the manufacturer will monitor, identify and address cybersecurity vulnerabilities. Any failure by a cyber device manufacturer to comply with applicable cybersecurity requirements is considered a violation of the FDDCA and will subject the manufacturer to enforcement actions and possibly legal sanctions. The growth of overall healthcare costs as a percentage of gross domestic product in many countries means that governments and payers are under intense pressure to control healthcare spending even more tightly. As a result, our businesses and the healthcare industry in general are operating in an ever more challenging environment with very significant pricing pressures. In recent years, national, federal, provincial, state and local officials and legislators have proposed, or are reportedly considering proposing, a variety of price-based reforms to the healthcare systems in the United States, the European Union and other countries. Some proposals include measures that would limit or eliminate payments for certain medical procedures and treatments or subject pricing to government control. In addition, proposed legislation may limit access to healthcare insurance coverage, which could reduce the volume of medical procedures involving our authorized device products. Furthermore, in certain foreign markets, the pricing or profitability of healthcare products is subject to government controls and other measures that have been prepared by legislators and government officials. While we cannot predict whether any such legislative or regulatory proposals or reforms will be adopted, the adoption of any such proposals or reforms could adversely affect the commercial viability of our existing and potential products. In addition, any changes of, or uncertainty with respect to, coverage or reimbursement rates relating to our authorized products, or procedures involving such products, could affect demand for our products, which in turn could impact our ability to successfully commercialize our authorized products and have a material adverse effect on our business, financial condition and resu…

Excerpt shortened here; the source contains the full paragraph.

Current wording

must include a software bill of materials and a cybersecurity plan describing the methods by which the manufacturer will monitor, identify and address cybersecurity vulnerabilities. Any failure by a cyber device manufacturer to comply with applicable cybersecurity requirements is considered a violation of the FDDCA and will subject the manufacturer to enforcement actions and possibly legal sanctions. The growth of overall healthcare costs as a percentage of gross domestic product in many countries means that governments and payers are under intense pressure to control healthcare spending even more tightly. As a result, our businesses and the healthcare industry in general are operating in an ever more challenging environment with very significant pricing pressures. In recent years, national, federal, provincial, state and local officials and legislators have proposed, or are reportedly considering proposing, a variety of price-based reforms to the healthcare systems in the United States, the European Union and other countries. Some proposals include measures that would limit or eliminate payments for certain medical procedures and treatments or subject pricing to government control. In addition, proposed legislation may limit access to healthcare insurance coverage, which could reduce the volume of medical procedures involving our authorized device products. Furthermore, in certain foreign markets, the pricing or profitability of healthcare products is subject to government controls and other measures that have been prepared by legislators and government officials. While we cannot predict whether any such legislative or regulatory proposals or reforms will be adopted, the adoption of any such proposals or reforms could adversely affect the commercial viability of our existing and potential products. In addition, any changes of, or uncertainty with respect to, coverage or reimbursement rates relating to our authorized products, or procedures involving such products, could affect demand for our products, which in turn could impact our ability to successfully commercialize our authorized products and have a material adverse effect on our business, financial condition and results of operations.

Previous wording

result in enforcement actions or the assessment of other penalties. The new laws and regulations could make it more difficult to obtain certain types of insurance, including directors’ and officers’ liability insurance, and we may be forced to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage. The impact of these events could also make it more difficult for us to attract and retain qualified persons to serve on our Board, or as executive officers. We may be required to hire additional personnel and utilize additional outside legal, accounting and advisory services, all of which could cause our general and administrative costs to increase beyond what we currently have planned. Although we intend to evaluate and monitor developments with respect to these rules, we cannot predict or estimate the amount of the additional costs we may incur or the timing of such costs.

Current wording

Existing and proposed changes in the laws and regulations affecting public companies may cause us to incur increased costs as we evaluate the implications of new rules and responds to new requirements. Failure to comply with the new rules and regulations could result in enforcement actions or the assessment of other penalties. The new laws and regulations could make it more difficult to obtain certain types of insurance, including directors’ and officers’ liability insurance, and we may be forced to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage. The impact of these events could also make it more difficult for us to attract and retain qualified persons to serve on our Board, or as executive officers. We may be required to hire additional personnel and utilize additional outside legal, accounting and advisory services, all of which could cause our general and administrative costs to increase beyond what we currently have planned. Although we intend to evaluate and monitor developments with respect to these rules, we cannot predict or estimate the amount of the additional costs we may incur or the timing of such costs.

Previous wording

Our operations may be directly or indirectly affected by various broad United States or foreign healthcare fraud and abuse laws. For example, healthcare laws and regulations in the United States may constrain the business or financial arrangements and relationships through which we research, market, sell and distribute any authorized products or product candidates. In particular, the United States federal Anti-Kickback Statute prohibits any person from knowingly and willfully offering, paying, soliciting or receiving remuneration, directly or indirectly, in return for or to induce the referring, ordering, leasing, purchasing or arranging for or recommending the ordering, purchasing or leasing of an item or service, for which payment may be made under United States federal healthcare programs, such as the Medicare and Medicaid programs. A person or entity does not need to have actual knowledge of the statute or specific intent to violate it to have committed a violation. This statute has been interpreted to apply to arrangements between device manufacturers on one hand and prescribers and purchasers on the other. For example, the United States government has sought to apply the Anti-Kickback Statute to device manufacturers’ financial relationships with physician consultants. Among other theories, the United States government has alleged that some such relationships are payments to induce the consultants to arrange for or recommend the ordering, purchasing or leasing of the manufacturers’ products by the hospitals, medical institutions and other entities with whom they are affiliated. Although there are a number of statutory exemptions and regulatory safe harbors protecting certain common activities from prosecution or other regulatory sanctions, the exemptions and safe harbors are drawn narrowly, and arrangements that involve remuneration that could induce prescribing, purchases, or recommendations may be subject to government scrutiny if they do not qualify for an exemption or a safe harbor.

Current wording

Our operations may be directly or indirectly affected by various broad United States or foreign healthcare fraud and abuse laws. For example, healthcare laws and regulations in the United States may constrain the business or financial arrangements and relationships through which we research, market, sell and distribute any authorized products or product candidates. In particular, the United States federal Anti-Kickback Statute prohibits any person from knowingly and willfully offering, paying, soliciting or receiving remuneration, directly or indirectly, in return for or to induce the referring, ordering, leasing, purchasing or arranging for or recommending the ordering, purchasing or leasing of an item or service, for which payment may be made under United States federal healthcare programs, such as the Medicare and Medicaid programs. A person or entity does not need to have actual knowledge of the statute or specific intent to violate it to have committed a violation. This statute has been interpreted to apply to arrangements between device manufacturers on one hand and prescribers and purchasers on the other. For example, the United States government has sought to apply the Anti-Kickback

Previous wording

Any action brought against us for violations of these laws or regulations, even if successfully defended, could cause us to incur significant legal expenses and divert our management’s attention from the operation of our business. We may be subject to private qui tam actions brought by individual whistleblowers on behalf of the federal or state governments, with potential liability under the federal False Claims Act including mandatory treble damages and significant per-claim penalties. If our operations are found to be in violation of any of these laws or any other governmental regulations that may apply to us, we may be subject to significant civil, criminal and administrative penalties, damages, fines, imprisonment, exclusion of products from government funded healthcare programs, such as Medicare and Medicaid, and the curtailment or restructuring of our operations. If any of the physicians or other healthcare providers or entities with whom we expect to do business is found to be not in compliance with applicable laws, they may be subject to criminal, civil or administrative sanctions, including exclusions from government funded healthcare programs. Any of the foregoing consequences will negatively affect our business, financial condition and results of operations.

Current wording

False Claims Act including mandatory treble damages and significant per-claim penalties. If our operations are found to be in violation of any of these laws or any other governmental regulations that may apply to us, we may be subject to significant civil, criminal and administrative penalties, damages, fines, imprisonment, exclusion of products from government funded healthcare programs, such as Medicare and Medicaid, and the curtailment or restructuring of our operations. If any of the physicians or other healthcare providers or entities with whom we expect to do business is found to be not in compliance with applicable laws, they may be subject to criminal, civil or administrative sanctions, including exclusions from government funded healthcare programs. Any of the foregoing consequences will negatively affect our business, financial condition and results of operations.

Previous wording

or the operations of our collaborators. In particular, HIPAA imposes requirements on certain healthcare providers, health plans and healthcare clearinghouses, or “covered entities,” as well as their business associates that perform services for them that involve the use or disclosure of individually identifiable health information, called protected health information (“PHI”), under HIPAA, relating to the privacy and security of PHI, including the use of mandatory contractual terms, or Business Association Agreements, in some circumstances, as well as privacy and security standards and breach notification requirements. We may obtain health information from third parties (including research institutions from which we obtain clinical trial data) that are subject to privacy and security requirements under HIPAA, as amended by HITECH, or other privacy and data security laws. Depending on the facts and circumstances, we could be subject to criminal penalties if we knowingly obtain, use, or disclose PHI maintained by a HIPAA-covered entity in a manner that is not authorized or permitted by HIPAA. However, determining whether PHI has been handled in compliance with applicable privacy standards and our contractual obligations can be complex and may be subject to changing interpretation.

Current wording

We and our current and potential collaborators may be subject to federal, state and foreign data protection laws and regulations (i.e., laws and regulations that address privacy and data security). In the United States, numerous federal and state laws and regulations, including federal health information privacy laws (e.g., HIPAA as amended by HITECH), state data breach notification laws, state health information privacy laws and federal and state consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), that govern the collection, use, disclosure and protection of health-related and other personal information could apply to our operations or the operations of our collaborators. In particular, HIPAA imposes requirements on certain healthcare providers, health plans and healthcare clearinghouses, or “covered entities,” as well as their business associates that perform services for them that involve the use or disclosure of individually identifiable health information, called protected health information (“PHI”), under HIPAA, relating to the privacy and security of PHI, including the use of mandatory contractual terms, or Business Association Agreements, in some circumstances, as well as privacy and security standards and breach notification requirements. We may obtain health information from third parties (including research institutions from which we obtain clinical trial data) that are subject to privacy and security requirements under HIPAA, as amended by HITECH, or other privacy and data security laws. Depending on the facts and circumstances, we could be subject to criminal penalties if we knowingly obtain, use, or disclose PHI maintained by a HIPAA-covered entity in a manner that is not authorized or permitted by HIPAA. However, determining whether PHI has been handled in compliance with applicable privacy standards and our contractual obligations can be complex and may be subject to changing interpretation.

Previous wording

Many state laws govern the privacy and security of personal information and data in specified circumstances, many of which differ from each other in significant ways, are often not pre-empted by HIPAA, and may have a more prohibitive effect than HIPAA, thus complicating compliance efforts. For example, the California Confidentiality of Medical Information Act (“CMIA”) imposes restrictive requirements regulating the use and disclosure of health information and other personally identifiable information. In addition to fines and penalties imposed upon violators, some of these state laws also afford private rights of action to individuals who believe their personal information has been misused. California’s patient privacy laws, for example, provide for penalties of up to $250,000 and permit injured parties to sue for damages. In addition to the CMIA, in 2018, California enacted the California Consumer Privacy Act (“CCPA”) which creates new individual privacy rights for California consumers (as defined in the law) and places increased privacy and security obligations on entities handling personal data of consumers or households. The CCPA requires covered companies to provide new disclosure to consumers about such companies’ data collection, use and sharing practices, provide such consumers new ways to opt-out of certain sales or transfers of personal information, and provide consumers with additional causes of action. While there is currently an exception for PHI that is subject to HIPAA and clinical trial regulations, as currently written, the CCPA may impact our business activities. In addition, the California Privacy Rights Act (“CPRA”) was recently enacted to strengthen elements of the CCPA and became effective on January 1, 2023. A number of other states have considered similar privacy proposals, with states like Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah and Virginia enacting their own privacy laws. These privacy laws may impact our business activities and exemplify the vulnerability of our business to the evolving regulatory environment related to personal data.

Current wording

Many state laws govern the privacy and security of personal information and data in specified circumstances, many of which differ from each other in significant ways, are often not pre-empted by HIPAA, and may have a more prohibitive effect than HIPAA, thus complicating compliance efforts. For example, the California Confidentiality of Medical Information Act (“CMIA”) imposes restrictive requirements regulating the use and disclosure of health information and other personally identifiable information. In addition to fines and penalties imposed upon violators, some of these state laws also afford private rights of action to individuals who believe their personal information has been misused. California’s patient privacy laws, for example, provide for penalties of up to $250,000 and permit injured parties to sue for damages. In addition to the CMIA, in 2018, California enacted the California Consumer Privacy Act (“CCPA”) which creates new individual privacy rights for California consumers (as defined in the law) and places increased privacy and security obligations on entities handling personal data of consumers or households. The CCPA requires covered companies to provide new disclosure to consumers about such companies’ data collection, use and sharing practices, provide such consumers new ways to opt-out of certain sales or transfers of personal information, and provide consumers with additional causes of action. While there is currently an exception for PHI that is subject to HIPAA and clinical trial regulations, as currently written, the CCPA may impact our business activities. In addition, the California Privacy Rights Act (“CPRA”) was recently enacted to strengthen elements of the CCPA and became effective on January 1, 2023. A number of other states have either enacted their own omnibus privacy laws or continued to deliberate and introduce similar privacy law proposals. These privacy laws may impact our business activities and exemplify the vulnerability of our business to the evolving regulatory environment related to personal data.

Previous wording

In the European Union, we may be subject to the General Data Protection Regulation (“GDPR”) which went into effect in May 2018 and which imposes obligations on companies that operate in our industry with respect to the processing of personal data and the cross-border transfer of such data. The GDPR applies to any company established in the EEA and to companies established outside the EEA that process personal data in connection with the offering of goods or services to data subjects in the EEA or the monitoring of the behavior of data subjects in the EEA. The GDPR establishes stringent requirements applicable to the processing of personal data, including strict requirements relating to the validity of consent of data subjects, expanded disclosures about how personal data is used, requirements to conduct data protection impact assessments for “high risk” processing, limitations on retention of personal data, special provisions affording greater protection to and requiring additional compliance measures for “special categories of personal data” including health and genetic information of data subjects, mandatory data breach notification (in certain circumstances), “privacy by design” requirements, and direct obligations on service providers acting as processors. The GDPR also prohibits the international transfer of personal data from the EEA to countries outside of the EEA unless made to a country deemed to have adequate data privacy laws by the European Commission or a data transfer mechanism has been put in place. If we or our partners’ or service providers’ privacy or data security measures fail to comply with the GDPR requirements, we may be subject to litigation, regulatory investigations,

Current wording

In the European Union, we may be subject to the General Data Protection Regulation (“GDPR”) which went into effect in May 2018 and which imposes obligations on companies that operate in our industry with respect to the processing of personal data and the cross-border transfer of such data. The GDPR applies to any company established in the EEA and to companies established outside the EEA that process personal data in connection with the offering of goods or services to data subjects in the EEA or the monitoring of the behavior of data subjects in the EEA. The GDPR establishes stringent requirements applicable to the processing of personal data, including strict requirements relating to the validity of consent of data subjects, expanded disclosures about how personal data is used, requirements to conduct data protection impact assessments for “high risk” processing, limitations on retention of personal data, special provisions affording greater protection to and requiring additional compliance measures for “special categories of personal data” including health and genetic information of data subjects, mandatory data breach notification (in certain circumstances), “privacy by design” requirements, and direct obligations on service providers acting as processors. The GDPR also prohibits the international transfer of personal data from the EEA to countries outside of the EEA unless made to a country deemed to have adequate data privacy laws by the European Commission or a data transfer mechanism has been put in place. If we or our partners’ or service providers’ privacy or data security measures fail to comply with the GDPR requirements, we may be subject to litigation, regulatory investigations, enforcement notices requiring us to change the way we use personal data and/or fines of up to 20 million Euros or up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher, as well as compensation claims by affected individuals, negative publicity, reputational harm and a potential loss of business and goodwill.

Previous wording

The GDPR may also impose additional compliance obligations relating to the transfer of data between us and our affiliates, collaborators, or other business partners. For example, on July 16, 2020, the Court of Justice of the European Union (“CJEU”), issued a landmark opinion in the caseMaximilian Schrems vs. Facebook (Case C-311/18), calledSchrems II. This decision (a) calls into question commonly relied upon data transfer mechanisms as between the European Union Member States and the United States (such as the Standard Contractual Clauses) and (b) invalidates the European Union-U.S. Privacy Shield on which many companies had relied as an acceptable mechanism for transferring such data from the European Union to the United States.

Current wording

The GDPR may also impose additional compliance obligations relating to the transfer of data between us and our affiliates, collaborators, or other business partners.

Previous wording

On July 10, 2023, the European Commission adopted an adequacy decision for a new mechanism for transferring data from the EU to the United States – the EU-US Data Privacy Framework (the “Framework”). The Framework provides EU individuals with several new rights, including the right to obtain access to their data, or obtain correction or deletion of incorrect or unlawfully handled data. The adequacy decision followed the signing of an executive order introducing new binding safeguards to address the points raised in theSchrems II decision. Notably, the new obligations were geared to ensure that data can be accessed by US intelligence agencies only to the extent necessary and proportionate and to establish an independent and impartial redress mechanism to handle complaints from Europeans concerning the collection of their data for national security purposes. The Commission will continually review developments in the US along with its adequacy decision. Adequacy decisions can be adapted or even withdrawn in the event of developments affecting the level of protection in the applicable jurisdiction. Future actions of EU data protection authorities are difficult to predict. Some patients or other service providers may respond to these evolving laws and regulations by asking us to make certain privacy or data-related contractual commitments that we are unable or unwilling to make. This could lead to the loss of current or prospective patients or other business relationships.

Current wording

On July 10, 2023, the European Commission adopted an adequacy decision for a new mechanism for transferring data from the EU to the United States – the EU-US Data Privacy Framework (the “Framework”). The Framework provides EU individuals with several new rights, including the right to obtain access to their data, or obtain correction or deletion of incorrect or unlawfully handled data. The adequacy decision followed the signing of an executive order introducing new binding safeguards to address points raised by the Court of Justice of the European Union in a July 2020 decision that invalidated the previous EU-US data transfer framework. Notably, the new obligations were geared to ensure that data can be accessed by U.S. intelligence agencies only to the extent necessary and proportionate and to establish an independent and impartial redress mechanism to handle complaints from Europeans concerning the collection of their data for national security purposes. The Commission will continually review developments in the U.S. along with its adequacy decision. Adequacy decisions can be adapted or even withdrawn in the event of developments affecting the level of protection in the applicable jurisdiction. Future actions of EU data protection authorities are difficult to predict. Some patients or other service providers may respond to these evolving laws and regulations by asking us to make certain privacy or data-related contractual commitments that we are unable or unwilling to make. This could lead to the loss of current or prospective patients or other business relationships.

Previous wording

It is not always possible to identify and deter misconduct by our employees and other third parties, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. Additionally, we are subject to the risk that a person could allege such fraud or other misconduct, even if none occurred. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, including the imposition of civil, criminal and administrative penalties, damages, monetary fines, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, reputational

Current wording

It is not always possible to identify and deter misconduct by our employees and other third parties, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. Additionally, we are subject to the risk that a person could allege such fraud or other misconduct, even if none occurred. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, including the imposition of civil, criminal and administrative penalties, damages, monetary fines, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, reputational harm, diminished potential profits and future earnings, and curtailment of our operations, any of which could adversely affect our business, financial condition, results of operations or prospects.

Previous wording

The ability of the FDA to review and authorize new medical products can be affected by a variety of factors, including government budget and funding levels, ability to hire and retain key personnel and accept the payment of user fees, and statutory, regulatory, and policy changes. Average review times at the agency have fluctuated in recent years as a result. In addition, government funding of the SEC and other government agencies on which our operations may rely, including those that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable. Disruptions at the FDA and other agencies may also slow the time necessary for new medical products to be reviewed and/or approved by necessary government agencies, which would adversely affect our business. For example, over the last several years, the U.S. government has shut down several times, including from December 22, 2018 through January 25, 2019, and congressional impasses periodically threaten to cause future government shutdowns. Most recently, the U.S. government nearly shutdown at the end of December 2024 due to disagreements in Congress over a continuing resolution package to fund federal government operations. When a shutdown occurs, certain regulatory agencies, such as the FDA and the SEC, have had to furlough critical FDA, SEC and other government employees and stop critical activities. Moreover, government shutdowns or slowdowns can increase the time needed for an agency to complete its review or make final approvals or other administrative decisions. If a prolonged government shutdown or slowdown occurs, it could significantly affect the ability of the FDA to timely review and process our regulatory submissions, which could have a material adverse effect on our business. Further, in our operations as a public company, future government shutdowns could impact our ability to access the public markets and obtain necessary capital in order to properly capitalize and continue our operations.

Current wording

The ability of the FDA to review and authorize new medical products can be affected by a variety of factors, including government budget and funding levels, ability to hire and retain key personnel and accept the payment of user fees, and statutory, regulatory, and policy changes. Average review times at the agency have fluctuated in recent years as a result. In addition, government funding of the SEC and other government agencies on which our operations may rely, including those that fund research and development activities is subject to the political process, which is inherently fluid and unpredictable.

Previous wording

the milestone payment of C$250,000 we paid upon obtaining FDA clearance of our TULSA-PRO system, and legal costs associated with patent application preparation, filing and maintenance. If we breach or otherwise terminate any of the agreements under which we license rights to our technology from third parties, we could lose intellectual property rights that are important to our business and incur other liabilities. Certain of our license agreements may not provide an adequate remedy for their breach by the licensor. The loss or breach of any of these license agreements could have a material adverse effect on our business, results of operations and financial condition.

Current wording

We license certain development and commercialization rights for certain technologies used in our systems and expect to enter into similar licenses in the future. For instance, we license exclusive intellectual property rights from Sunnybrook that enable us to use, manufacture, distribute and sell the TULSA-PRO system. Under this royalty-free license, we are subject to various obligations, including the milestone payment of C$250,000 we paid upon obtaining FDA clearance of our TULSA-PRO system, and legal costs associated with patent application preparation, filing and maintenance. If we breach or otherwise terminate any of the agreements under which we license rights to our technology from third parties, we could lose intellectual property rights that are important to our business and incur other liabilities. Certain of our license agreements may not provide an adequate remedy for their breach by the licensor. The loss or breach of any of these license agreements could have a material adverse effect on our business, results of operations and financial condition.

Previous wording

The patents for our technologies have varying expiration dates; although the patents for the technologies we use are not expected to expire in the near term, when these patents expire, we may be subject to increased competition and may not be able to recover our development costs or license fees. In some of the larger economic territories, such as the United States and the European Union, patent term extension/restoration may be available to compensate for time taken during aspects of a product candidate’s regulatory review. However, we cannot be certain that any extension will be granted or, if granted, what the applicable time period or the scope of patent

Current wording

The patents for our technologies have varying expiration dates; although the patents for the technologies we use are not expected to expire in the near term, when these patents expire, we may be subject to increased competition and may not be able to recover our development costs or license fees. In some of the larger economic territories, such as the United States and the European Union, patent term extension/restoration may be available to compensate for time taken during aspects of a product candidate’s regulatory review. However, we cannot be certain that any extension will be granted or, if granted, what the applicable time period or the scope of patent protection afforded during any extended period will be. If we or our licensors are unable to obtain patent term extension/restoration or some other exclusivity, we could be subject to increased competition and our opportunity to establish or maintain product revenue could be substantially reduced or eliminated. Furthermore, we may not have sufficient time to recover our development costs prior to the expiration of our or our licensors’ patents in the United States or elsewhere.

Previous wording

Our business, financial condition, cash flows and results of operations are subject to risks arising from our international operations.

Current wording

Our business, financial condition, cash flows and results of operations are subject to risks arising from our international operations, including currently imposed and potential future tariffs and trade measures.

Previous wording

The market price of our Common Shares could decline as a result of issuances of securities (including our Common Shares) by us, exercises of outstanding options or warrants for additional Common Shares or sales by our existing shareholders of Common Shares in the market, or the perception that these issuances or sales could occur. Sales of Common Shares by shareholders may make it more difficult for us to sell equity securities at a time and price that we deem appropriate. As of December 31, 2024, there were a total of 2,291,152 outstanding share options issued under our Share Option Plan, 324,621 Restricted Stock Units (“RSUs”), 91,670 Deferred Stock Units (“DSUs”) issued. In addition, as of December 31, 2024, the maximum number of Common Shares reserved for issuance under this plan is 3,905,175 Common Shares or such other number as may be approved by the holders of the voting shares of the Company.

Current wording

The market price of our Common Shares could decline as a result of issuances of securities (including our Common Shares) by us, exercises of outstanding options for additional Common Shares or sales by our existing shareholders of Common Shares in the market, or the perception that these issuances or sales could occur. Sales of Common Shares by shareholders may make it more difficult for us to sell equity securities at a time and price that we deem appropriate. As of December 31, 2025, there were a total of 2,142,522 outstanding share options issued under our Share Option Plan, 859,335 Restricted Stock Units (“RSUs”), 135,490 Deferred Stock Units (“DSUs”) issued. In addition, as of December 31, 2025, the maximum number of Common Shares reserved for issuance under this plan is 4,718,173 Common Shares or such other number as may be approved by the holders of the voting shares of the Company.