SOUNDTHINKING, INC.

Current report

If our information technology systems or data, or those of third parties with whom we work, are or were compromised, our customers may be harmed and we could experience adverse consequences resulting from such compromise, including, but not limited to, regulatory investigations or actions; litigation or mass arbitration demands; fines and penalties; disruptions of our business operations; reputation harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences.

Current report

We identified material weaknesses in our internal control over financial reporting as of December 31, 2025. If we are unable to develop and maintain an effective system of internal control over financial reporting, we may not be able to accurately report our financial results in a timely manner, which may adversely affect investor confidence in us and materially and adversely affect our business and operating results.

Current report

We and the third parties with whom we work are subject to stringent and evolving U.S. and foreign laws, regulations, and rules, contractual obligations, industry standards, policies and other obligations related to data privacy and security. Our (or the third parties with whom we work) actual or perceived failure to comply with such obligations could lead to regulatory investigations or actions; litigation (including class claims) and mass arbitration demands; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse business consequences.

Previous report

Any interruptions or delays in service from our third-party providers could impair our ability to make our solutions available to our customers, resulting in customer dissatisfaction, damage to our reputation, loss of customers, limited growth and reduction in revenue.

Previous report

We may require additional capital to fund our business and support our growth, and our inability to generate and obtain such capital on acceptable terms, or at all, could harm our business, operating results, financial condition and prospects.

Previous report

Changes in the availability of federal funding to support local law enforcement efforts could impact our business.

Previous report

As a result of our use of outdoor acoustic sensors and cameras, we are subject to governmental regulation and other legal obligations, particularly related to data privacy, data protection and information security, and our actual or perceived failure to comply with such obligations could harm our business. Compliance with such laws could impair our efforts to maintain and expand our customer base, and thereby decrease our revenues.

Previous report

Systems and Organizations Controls 2 (“SOC2”), Criminal Justice Information Services (“CJIS”) and Health Insurance Portability and Accountability Act (“HIPAA") requirements could potentially cause obligations that we are not able to completely perform which could adversely affect our reputation and sales, as well as the availability of our solutions in certain markets.

Previous report

Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties upon which we rely. These attacks could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our products and services.

Previous report — wording carried elsewhere

If we are unable to further penetrate the public safety market, our revenues may not grow.