Skip to main content

Phreesia, Inc.

For the period ended Apr 30, 2025. Filed May 28, 2025.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Apr 30, 2025 · Filed May 28, 2025

PHR$12.62-0.7%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 270 previous paragraphs and 274 current paragraphs.

163 unchanged; 88 reworded; 21 added; 13 removed; 6 previous and 2 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (21)

Current report

•changes in healthcare utilization and spending trends;

Current report

From time to time, we are subject to various legal proceedings that could adversely affect our business, financial condition and results of operations.

Current report

From time to time, we are or may become involved in claims, lawsuits (whether class actions or individual lawsuits), arbitration proceedings, governmental investigations, and other legal or regulatory proceedings involving commercial, corporate and securities matters; privacy, marketing and communications practices; labor and employment matters; alleged infringement of third-party patents and other intellectual property rights; and other matters. The results of any such claims, lawsuits, arbitration proceedings, government investigations, or other legal or regulatory proceedings cannot be predicted with any degree of certainty. Any claims against us, whether meritorious or not, could be time-consuming, result in costly litigation, require significant management attention, and divert significant resources. Determining reserves for our pending litigation is a complex and fact-intensive process that requires significant subjective judgment and speculation. It is possible that a resolution of one or more such proceedings could result in substantial damages, settlement costs, fines, and penalties. These proceedings could also result in harm to our reputation and brand, sanctions, consent decrees, injunctions, or other orders requiring a change in our business practices. Any of these consequences could adversely affect our business, financial condition, and results of operations. Further, under certain circumstances, we have contractual and other legal obligations to indemnify and to incur legal expenses on behalf of our business, customers, and commercial partners and current and former directors and officers. In addition, certain litigation or the resolution of certain litigation may affect the availability or cost of some of our insurance coverage, which could adversely impact our results of operations and cash flows, expose us to increased risks that would be uninsured, and adversely impact our ability to attract directors and officers. Notwithstanding the terms of our agreements with our customers, it is possible that one or more of our customers could breach their obligations, which in the aggregate, could adversely affect our business, financial condition, or results of operations. For example, if a customer defaults on its obligations under a customer agreement or terminates a customer agreement prior to the contractual termination date, we may be required to assert a claim to acquire the amount in full due under the customer agreement, which we may choose not to pursue. However, if we choose to pursue any such claim, we may incur substantial costs to resolve claims or enter into litigation or arbitration, and even if we were to prevail in the event of claims, litigation or arbitration, such claims, litigation, or arbitration could be costly and time-consuming and divert the attention of our management and other employees from our business operations.

Current report

Any restrictions on our use of, or ability to license and integrate, third-party technologies could have a material adverse effect on our business, financial condition and results of operations.

Current report

Additionally, while we do not allow any third-party cookies, tags or trackers (collectively, “cookies”) to be placed in our software solutions, we utilize cookies on some of our public websites to collect data about visitors to our websites in order to administer our sites, enhance users’ web-browsing experience, analyze trends and gather information about users’ activities on our sites. Our ability to collect, analyze, use and share information collected via cookies is governed by U.S. and foreign laws and regulations which change from time to time, such as those regulating the level of consumer notice and consent required before a company can employ cookies to collect data about interactions with users online.

Current report

In recent years, there has been increasing public and regulatory scrutiny of the use of cookies by companies in the healthcare space. For example, the FTC has brought enforcement actions against online healthcare services and service providers, and there has been an increase in litigation alleging the unauthorized collection and sharing of sensitive health information in violation of federal and state privacy laws. While we do not collect HIPAA-regulated PHI via the use of cookies on our websites, and we believe our use of cookies on those websites complies with all applicable laws, we may from time to time receive public or regulatory inquiries about our use of tracking technologies. Continued regulation of cookies, changes in the interpretation and enforcement of existing laws and regulations, and increased scrutiny of the use of cookies by healthcare technology companies could restrict our ability to engage in certain activities or require changes to our practices. If we are believed or found to have not complied with our obligations under applicable laws, we may also be subject to litigation, substantial financial penalties, injunctive actions and reputational harm. All of the above could impact our business, financial condition or results of operations.

Current report

In addition, on December 27, 2024, HHS-OCR issued a Notice of Proposed Rulemaking to modify the HIPAA Security Rule to enhance cybersecurity protections for electronic protected health information. The proposed rule would modify the HIPAA Security Rule to require covered entities and business associates to strengthen cybersecurity protections for individuals’ protected health information. Key proposals include removing the distinction between “required” and “addressable” implementation specifications and mandating the development and revision of a technology asset inventory and a network map. Given the recent change in presidential administration, it is difficult to anticipate when the proposed rule will be finalized or if the NPRM will be withdrawn. If the NPRM is finalized, we may be subject to additional compliance obligations and incur additional costs in connection with compliance.

Current report

We may be subject to risks related to government contracts and related procurement regulations.

Current report

We derive revenues from contracts with the U.S. federal government, state and local governments. Our contracts with federal, state, local and foreign government entities are subject to various procurement regulations and other requirements relating to their formation, administration and performance. We are from time to time subject to audits and investigations relating to our government contracts, and any violations could result in various civil and criminal penalties and administrative sanctions, including termination of contracts, refunding or suspending of payments, forfeiture of profits, payment of fines and suspension or debarment from future government business. In addition, such contracts may provide for termination by the government at any time, without cause. In addition, many federal, state, local and foreign governments and their agencies are facing increased pressure to reduce spending, and demand and payment for our services may be impacted by public sector budgetary cycles and funding authorizations. These factors may combine to potentially limit the revenue we derive from government contracts in the future. Additionally, government contracts generally have requirements that are more complex than those found in commercial enterprise agreements and therefore are more costly to comply with. Any of these risks related to contracting with government entities could adversely impact our future sales and operating results.

Current report

Our business is dependent in part on phone, email and text messaging channels, and any technical, legal or other restrictions on the sending of such correspondence or a decrease in consumer willingness to receive such correspondence could adversely affect our business.

Current report

Our business is dependent in part on phone, email and other messaging channels, such as text messages. Actions taken by third parties that block, impose restrictions on or charge more for the delivery of these communications could harm our business. For example, from time to time, internet service providers or other third parties may block bulk communications or otherwise experience difficulties that result in our inability to successfully deliver communications to patients. In addition, our use of email and text messaging channels to send communications to patients, potential patients, clients and potential clients may result in legal claims against us, which if successful might limit or prohibit our ability to send such communications.

Current report

Our product relies on a third-party service provider for delivery of calls, emails, text messages and other forms of electronic communication. If we were unable to use any one of our current service providers, alternate providers are available; however, we believe our revenue could be impacted for some period as we transition to a new provider, and the new provider may be unable to provide equivalent or satisfactory services. Any disruption or restriction on the distribution of our communications, termination or disruption of our relationships with our third-party service providers or any increase in the associated costs, may be beyond our control and would adversely affect our business.

Current report

Artificial intelligence (“AI”) presents risks and challenges that can impact our business, including by posing security risks to our confidential information, proprietary information and personal data, increasing our regulatory and compliance burden and increasing competition.

Current report

As with many technological innovations, AI presents opportunities for enhanced productivity and innovation, but also presents risks and challenges that could impact our business. Issues in the development and use of artificial intelligence, combined with an uncertain regulatory environment, may result in reputational harm, liability or other adverse consequences to our business operations. We currently incorporate a limited number of AI technologies into certain of our products, and we may continue to adopt and integrate AI, including generative AI, into our products in the future for specific use cases reviewed by legal and information security. Additionally, our employees, vendors and third-party partners could use AI to perform their work. Our vendors could in turn incorporate AI tools into their offerings, and the providers of these AI tools may not meet existing or rapidly evolving regulatory or industry standards, including with respect to privacy and data security. If we, our vendors, or our third-party partners experience an actual or perceived data breach or cybersecurity incident because of the use of generative AI, we may lose valuable intellectual property, personal data and/or confidential information, and our reputation and the public perception of the effectiveness of our security measures could be harmed. Further, bad actors around the world use increasingly sophisticated methods, including the use of AI, to engage in illegal activities involving the theft and misuse of personal information, confidential information, and intellectual property. Any of these outcomes could damage our reputation, subject us to legal liability, result in the loss of valuable property and information, and adversely impact our business.

Current report

The rapid evolution of artificial intelligence will require the application of significant resources to design, develop, test and maintain such systems to help ensure that artificial intelligence is implemented in accordance with applicable law and regulation and in a socially responsible manner and to minimize any real or perceived unintended harmful impacts. For example, AI systems can present risks of bias, errors and false or “hallucinatory” inferences or outputs. The use of certain artificial intelligence technologies can also give rise to intellectual property risks, including by disclosing or otherwise compromising our confidential or proprietary intellectual property, or by undermining our ability to assert or defend ownership rights in intellectual property created with the assistance of artificial intelligence tools.

Current report

A growing number of legislators and regulators are adopting laws and regulations and have focused enforcement efforts on the adoption of artificial intelligence and the use of such technologies in compliance with ethical standards and societal expectations. These developments may increase our compliance burden and costs in connection with the use of artificial intelligence and lead to legal liability if we fail to meet evolving legal standards or if use of such technologies results in harms or other causes of action we did not predict. For example, several states, including Colorado and California, passed laws that will take effect in 2026 to regulate various uses of artificial intelligence, including to make consequential decisions. In addition, various federal regulators have issued guidance and focused enforcement efforts on the use of AI in regulated sectors. If we develop or use AI systems governed by these laws or regulations, we will need to meet higher standards of data quality, transparency, monitoring and human oversight, and we would need to adhere to specific and potentially burdensome and costly ethical, accountability, and administrative requirements. These obligations may make it harder for us to offer services that incorporate AI or conduct our business using AI. We may not be able to anticipate how to respond to these rapidly evolving standards, and we may need to expend resources to adjust our service offerings in certain jurisdictions if the laws, regulations, or decisions are not consistent across jurisdictions. We also could face the potential for significant enforcement or litigation in the event of any perceived non-compliance. Any of these effects could damage our reputation, result in the loss of valuable property and information, cause us to breach applicable laws and regulations, and adversely impact our business.

Current report

Our future success will depend, in part, on our ability to leverage AI responsibly, effectively and in compliance with laws and regulations. Because AI technology is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI.

Current report

•Our subsidiary, Insignia, receives a portion of its revenue from customers that are governmental agencies or funded by government programs. As a federal government contractor, Insignia’s government contracts and subcontracts subject Insignia to the Federal Acquisition Regulation (“FAR”) and, among other requirements, the following: (a) termination when appropriated funding for the current fiscal year is exhausted; (b) termination for the governmental customer’s convenience, subject to a negotiated settlement for costs incurred and profit on work completed, along with the right to place contracts out for bid before completion of the full contract term, as well as the right to make unilateral changes in contract requirements, subject to negotiated price adjustments; (c) compliance and reporting requirements related to, among other things, agency-specific policies and regulations, information security, subcontracting requirements, equal employment opportunity, affirmative action for veterans and workers with disabilities and accessibility for the disabled; (d) broad audit rights; (e) specialized remedies for breach and default, including setoff rights, retroactive price adjustments and civil or criminal fraud penalties under the False Claims Act (as described below), re-procurement expenses, as well as mandatory administrative dispute resolution procedures instead of state contract law remedies; and (f) requirements to calculate overhead rates in accordance with the accounting procedures and internal controls required under the FAR standards.

Current report

•trading activity by stockholders who together beneficially own a significant portion of our outstanding common stock, as well as other institutional or activist investors; and

Current report

We cannot guarantee that our stock repurchase program will enhance long-term stockholder value. Share repurchases could also increase the volatility of our stock price and diminish our cash reserves.

Current report

On March 12, 2025, our Board of Directors authorized a stock repurchase program. Under the program, we may repurchase up to 2.5 million shares of our common stock from time to time. The stock repurchase program does not obligate us to repurchase a specified number or dollar value of shares, and the program may be modified, suspended or discontinued at any time without prior notice. Our ability to return capital to stockholders through stock repurchases principally depends upon the amount of cash we generate from our operations, which will fluctuate from quarter to quarter based on, among other things, cash received from customers and cash paid to employees and suppliers, and other factors impacting our financial condition, some of which are beyond our control. The existence of the stock repurchase program could cause our common stock to trade at a higher price than it otherwise would. Although the program is intended to enhance long-term stockholder value, there is no assurance it will do so because the market price of our common stock may decline below the levels at which we repurchased shares and short-term stock price fluctuations could reduce the effectiveness of the program. Any failure to repurchase our common stock after we have announced our intention to do so may negatively impact our reputation and investor confidence in us and may negatively impact our stock price. Repurchasing our common stock will reduce the amount of cash we have available to fund working capital, capital expenditures, strategic acquisitions, or business opportunities and other general corporate purposes, and we may fail to realize the anticipated long-term stockholder value of the stock repurchase program. Further, the timing and amount of any repurchases, if any, will be subject to liquidity, market and economic conditions, compliance with applicable legal requirements such as Delaware surplus and solvency tests and other relevant factors. In addition, our stock repurchase program may be suspended or discontinued at any time and may not enhance long-term stockholder value. Additionally, the Inflation Reduction Act of 2022 provides for the imposition of a 1% non-deductible U.S. federal excise tax (the “Stock Buyback Tax”) on certain repurchases of stock by publicly traded U.S. corporations.
Removed paragraphs (13)

Previous report

•changes in the regulatory environment related to healthcare;

Previous report

We may become subject to litigation, which could have a material adverse effect on our business, financial condition and results of operations.

Previous report

We may become subject to material litigation in the future. Some of these claims may result in significant defense costs and potentially significant judgments against us, some of which we are not, or cannot be, insured against. We generally intend to defend ourselves vigorously; however, we cannot be certain of the ultimate outcomes of any claims that may arise in the future. Resolution of these types of matters against us may result in our having to pay significant fines, judgments or settlements, which, if uninsured, or if the fines, judgments and settlements exceed insured levels, could adversely impact our earnings and cash flows, thereby having a material adverse effect on our business, financial condition, results of operations, cash flow and per share trading price of our common stock. For example, while we attempt to limit, by contract, our liability for damages arising from our negligence, errors, mistakes or security breaches, and maintain liability insurance coverage, including coverage for cybersecurity and errors and omissions, claims may exceed the amount of our applicable insurance coverage or this coverage may not continue to be available on acceptable terms or in sufficient amounts. Certain litigation or the resolution of certain litigation may affect the availability or cost of some of our insurance coverage, which could adversely impact our results of operations and cash flows, expose us to increased risks that would be uninsured and adversely impact our ability to attract directors and officers.

Previous report

We depend upon licenses from third parties for some of the technology and data used in our applications, and for some of the technology platforms upon which these applications are built and operate. We expect that we may need to obtain additional licenses from third parties in the future in connection with the development of our products and services. In addition, we obtain a portion of the data that we use from government entities, public records and our partners for specific partner engagements. We believe that we have all rights necessary to use the data that is incorporated into our products and services. However, we cannot assure you that our licenses for information will allow us to use that information for all potential or contemplated applications and products. In addition, our ability to use data to support existing products and services and to develop new products and services is largely dependent upon the contractual rights we secure. For example, certain of our products depend on maintaining our data and analytics platform, which is populated with data disclosed to us by healthcare services clients, life sciences companies and their respective patients and other partners with their consent. If these clients, patients or partners revoke their consent for us to maintain, use, de-identify and share this data, consistent with applicable law, our data assets could be degraded.

Previous report

In the future, data providers could withdraw their data from us or restrict our usage for any reason, including if there is a competitive reason to do so, if legislation is passed restricting the use of the data or if judicial interpretations are issued restricting use of the data that we currently use in our products and services. In addition, data providers could fail to adhere to our quality control standards in the future, causing us to incur additional expense to appropriately utilize the data. If a substantial number of data providers were to withdraw or restrict their data, or if they fail to adhere to our quality control standards, and if we are unable to identify and contract with suitable alternative data suppliers and integrate these data sources into our service offerings, our ability to provide products and services to our partners would be materially adversely impacted, which could have a material adverse effect on our business, financial condition and results of operations.

Previous report

We also expect that there will continue to be new or amended laws, regulations, standards and obligations proposed and enacted in various jurisdictions. Many countries around the world have enacted comprehensive privacy and data protection laws that can impact our business. For example, with respect to Europe, organizations that are collecting or otherwise processing personal data in connection with (a) the activities of a business establishment within the European Economic Area/United Kingdom; or (b) offering goods or services to/monitoring the behavior of individuals within the European Economic Area/United Kingdom, are subject to, the General Data Protection Regulation, or EU GDPR (with respect to EEA personal data) and the UK General Data Protection Regulation UK GDPR, or UK GDPR (with respect to UK personal data), as well as other supplementary national data protection legislation in force in EEA member states and the UK (including the UK Data Protection Act 2018), together referred to as the “GDPR” in this Quarterly Report. The GDPR imposes stringent data protection requirements and requires businesses subject to it to give more detailed disclosures about how they collect, use, and share personal information; contractually commit to data protection measures in contracts; maintain adequate data security measures; notify regulators and affected individuals of certain data breaches; obtain consent to collect sensitive personal information such as health information or ensuring another appropriate legal basis or condition applies to the processing of personal information; meet extensive privacy governance and documentation requirements; and honor individuals’ data protection rights. The GDPR also prohibits the transfer of personal information to countries outside of the European Economic Area, or EEA and United Kingdom, or UK to jurisdictions that do not have “adequate” data protection laws by appropriate authorities, including the United States in certain circumstances. Unless a valid transfer mechanism is implemented, such as the Standard Contractual Clauses (SCCs) published by the EC, the UK International Data Transfer Agreement (UK IDTA) published by the ICO binding corporate rules or certification to the EU-U.S. Data Privacy Framework that the EC adopted on July 10, 2023 (along with its UK and Swiss extensions.) Where relying on the SCCs or UK IDTA for data transfers, we may also be required to carry out transfer impact assessments to assess whether the recipient is subject to local laws which allow public authority access to personal data. Evolving laws and decisions surrounding transfers of EU personal information have increased the legal risks and liabilities, and compliance and operational costs, of lawfully making such transfers. Companies that violate the GDPR can face private litigation, restrictions, or prohibitions on data processing, and fines of up to the greater of 20 million Euros (17.5 million GBP for the UK) or 4% of worldwi…

Excerpt shortened here; the source contains the full paragraph.

Previous report

Although the EU GDPR and the UK GDPR currently impose substantially similar obligations, it is possible that over time the UK GDPR could become less aligned with the EU GDPR. The UK government has announced plans to reform the data protection legal framework in the UK in its Data Reform Bill, which will introduce significant changes from the EU GDPR. This may lead to additional compliance costs and could increase our overall risk exposure as we may no longer be able to take a unified approach across the EEA and the UK. This lack of clarity on future UK laws and regulations and their interaction with EU laws and regulations could add legal risk, uncertainty, complexity and cost to our handling of EU personal information and our privacy and data security compliance programs and could require us to implement different compliance measures for the UK and the EU.

Previous report

Although the UK is regarded as a third country under the EU’s GDPR, the European Commission (the “EC”), has now issued a decision recognizing the UK as providing adequate protection under the EU GDPR and, therefore, transfers of personal data originating in the EU to the UK remain unrestricted. Like the EU GDPR, the UK GDPR restricts personal data transfers outside the UK to countries not regarded by the UK as providing adequate protection. The UK government has confirmed that personal data transfers from the UK to the EEA remain free flowing.

Previous report

In addition to the GDPR and UK GDPR, the EU e-Privacy Directive (2002/58/EC) and the UK Privacy and Electronic Communications Regulations 2003 govern marketing messages we send to customers based in the EEA and UK.

Previous report

Healthcare laws and regulations are rapidly evolving and may change significantly in the future, which could adversely affect our financial condition and results of operations. For example, in 2010, the Patient Protection and Affordable Care Act ("ACA") was adopted, which is a healthcare reform measure that provides healthcare insurance for millions of Americans. The ACA includes a variety of healthcare reform provisions and requirements that became effective at varying times through 2018 and substantially changes the way healthcare is financed by both governmental and private insurers, which may significantly impact our industry and our business. Since its enactment, there have been numerous judicial, administrative, executive, and legislative challenges to certain aspects of the ACA. It is unclear how other healthcare reform measures of the Biden administration or other efforts, if any, to challenge, repeal or replace the ACA will impact our business.

Previous report

The Final Rule focuses on patients enrolled in Medicare Advantage plans, Medicaid and Children's Health Insurance Program ("CHIP") fee-for-service programs, Medicaid managed care plans, CHIP managed care entities, and qualified health plans on the federally-facilitated exchanges, and enacts measures to enable patients to have both their clinical and administrative information travel with them.

Previous report

We or the providers of EHR and PM solutions with which we contract may terminate or seek to amend our agreements in order to incorporate the Final Rules promulgated in 2020 by the HHS, ONC, and CMS, which is further described above and is aimed at supporting seamless and secure access, exchange, and use of EHI by increasing innovation and competition by giving patients and their healthcare service providers secure access to health information and new tools, allowing for more choice in care and treatment.

Previous report

Adverse developments affecting the financial services industry, such as actual events or concerns involving liquidity, defaults or non-performance by financial institutions or transactional counterparties, could adversely affect our current and projected business operations and our financial condition and results of operations.
Reworded paragraphs (88)

Previous wording

We operate in a highly competitive industry, and if we are not able to compete effectively, including with the EHR and PM systems with which we integrate, our business and results of operations will be harmed.

Current wording

We operate in a highly competitive industry, and if we are not able to compete effectively, including with the EHR and PM systems with which we integrate, our business and results of operations may be harmed.

Previous wording

The market for our products and services is fragmented, competitive and characterized by rapidly evolving technology standards, evolving regulatory requirements, changes in client needs and the frequent introduction of new products and services. Our competitors range from smaller niche companies to large, well-financed and technologically-sophisticated entities, including the EHR and PM systems with which we integrate. As costs fall and technology improves, increased market saturation may change the competitive landscape in favor of competitors with greater scale than we currently possess.

Current wording

The market for our products and services is fragmented, competitive and characterized by rapidly evolving technology standards, evolving regulatory requirements, changes in client needs and the frequent introduction of new products and services, including as a result of artificial intelligence (“AI”) technologies. Our competitors range from smaller niche companies to large, well-financed and technologically-sophisticated entities, including the EHR and PM systems with which we integrate. As costs fall and technology improves, increased market saturation may change the competitive landscape in favor of competitors with greater scale than we currently possess.

Previous wording

In order to remain competitive, we are continually involved in a number of projects to compete with new market entrants by developing new services, growing our client base and penetrating new markets. These projects carry risks, such as cost overruns, delays in delivery, performance problems and lack of acceptance by our clients.

Current wording

In order to remain competitive, we are continually involved in a number of projects to compete with new market entrants by developing new services, expanding offerings to our existing client base, growing our client base and penetrating new markets. These projects carry risks, such as cost overruns, delays in delivery, performance problems and lack of acceptance by our clients.

Previous wording

The success of our business and growth strategy depend upon our continued ability to maintain and expand a network of healthcare services clients, which also requires us to provide and develop new high-quality products and services that are helpful to our clients and used and positively received by patients. If we are unable to attract and retain healthcare services clients, including because we are unable to adapt to new industry standards in developing new products and services, it would have a material adverse effect on our business and ability to grow and would adversely affect our results of operations. Additionally, if we do not maintain our current client network, or if we have to renegotiate existing contracts, our business, financial condition and results of operations will be harmed.

Current wording

The success of our business and growth strategy depend upon our continued ability to maintain and expand a network of healthcare services clients, which also requires us to provide and develop new high-quality products and services that are helpful to our clients and used and positively received by patients. If we are unable to attract and retain healthcare services clients, including because we are unable to adapt to new industry standards in developing new products and services, it would have a material adverse effect on our business and ability to grow and would adversely affect our results of operations. Additionally, if we do not maintain our current client network, or if we have to renegotiate existing contracts, our business, financial condition and results of operations may be harmed.

Previous wording

We compete on the basis of several factors. Some of our competitors have greater name recognition, longer operating histories and significantly greater resources than we do. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards or client requirements. In addition, current and potential competitors have established, and may in the future establish, cooperative relationships with vendors of complementary products, technologies or services to increase the availability of their products to the marketplace. Accordingly, new competitors or providers of EHR and PM solutions may emerge that have greater market share, larger client bases, more widely adopted proprietary technologies, greater marketing expertise, greater financial resources and larger sales forces than we have, which could put us at a competitive disadvantage. We also may be subject to pricing pressures as a result of, among other things, competition within the industry, consolidation of healthcare industry participants, practices of managed care organizations, government action and financial stress experienced by our clients. If our pricing experiences significant downward pressure, our business will be less profitable and our results of operations will be adversely affected. Moreover, we expect that competition will continue to increase as a result of consolidation in both the healthcare information technology and healthcare industries. If one or more of our competitors or potential competitors were to merge or partner with another of our competitors, the change in the competitive landscape could also adversely affect our ability to compete effectively and could harm our business, financial condition and results of operations.

Current wording

We compete on the basis of several factors. Some of our competitors have greater name recognition, longer operating histories and significantly greater resources than we do. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards or client requirements or provide faster implementations. Additionally, AI technologies may make it easier for competitors to enter our market due to lower up-front costs. As a result, even if our services are more effective than the products and services that our competitors offer, potential customers might select competitive products and services in lieu of purchasing our services. In addition, current and potential competitors have established, and may in the future establish, cooperative relationships with vendors of complementary products, technologies or services to increase the availability of their products to the marketplace. Accordingly, new competitors or providers of EHR and PM solutions may emerge that have greater market share, larger client bases, more widely adopted proprietary technologies, greater marketing expertise, greater financial resources and larger sales forces than we have, which could put us at a competitive disadvantage. We also may be subject to pricing pressures as a result of, among other things, competition within the industry, consolidation of healthcare industry participants, practices of managed care organizations, government action and financial stress experienced by our clients. If our pricing experiences significant downward pressure, our business will be less profitable and our results of operations will be adversely affected. We cannot be certain that we will be able to retain our current client base in this competitive environment. If we do not retain current clients or expand our client base, or if we have to renegotiate existing contracts, our business, financial condition and results of operations will be harmed. Moreover, we expect that competition will continue to increase as a result of consolidation in both the healthcare information technology and healthcare industries. If one or more of our competitors or potential competitors were to merge or partner with another of our competitors, the change in the competitive landscape could also adversely affect our ability to compete effectively and could harm our business, financial condition and results of operations.

Previous wording

We have grown rapidly in recent periods. If we fail to manage our growth effectively, our revenue may not increase, and we may be unable to implement our business strategy.

Current wording

If we fail to manage our future growth effectively, our revenue may not increase, and we may be unable to implement our business strategy.

Previous wording

We have experienced significant growth in recent periods. Rapid expansion puts strain on our business, operations and employees. We anticipate that our operations will continue to expand. As we continue to grow, both organically and through acquisitions, we must effectively integrate, develop, and manage an increasingly distributed employee base in a fully remote working environment. We may find it challenging to maintain the same level of employee productivity while executing our growth plan, fostering collaboration, and maintaining the beneficial aspects of our culture, and any such failures could negatively affect our future success, including our ability to attract and retain highly qualified employees and to achieve our business objectives. If we do not manage the demands of our growing operations effectively, our efficiency may decline, our operations could be disrupted, and we may not be able to meet our financial projections, which could adversely affect our business performance and stock price.

Current wording

We have experienced significant growth in the past. Rapid expansion has historically placed, and may in the future place, strain on our business, operations and employees. We anticipate that our operations will continue to expand. As we continue to grow, both organically and through acquisitions, we must effectively integrate, develop, and manage an increasingly distributed employee base in a fully remote working environment. We may find it challenging to maintain the same level of employee productivity while executing our growth plan, fostering collaboration, and maintaining the beneficial aspects of our culture, and any such failures could negatively affect our future success, including our ability to attract and retain highly qualified employees and to achieve our business objectives. If we do not manage the demands of our growing operations effectively, our efficiency may decline, our operations could be disrupted, and we may not be able to meet our financial projections, which could adversely affect our business performance and stock price.

Previous wording

Our operating results have in the past and may continue to fluctuate significantly and if we fail to meet the expectations of analysts or investors, our stock price and the value of your investment could decline substantially.

Current wording

Our operating results have fluctuated and may continue to fluctuate significantly and if we fail to meet the expectations of analysts or investors, our stock price and the value of your investment could decline substantially.

Previous wording

•technical difficulties or interruptions in our services, like the one we experienced with ConnectOnCall;

Current wording

•technical difficulties or interruptions in our services, like the one we experienced with ConnectOnCall in 2024;

Previous wording

Privacy concerns, cyber-attacks, security breaches or incidents relating to our SaaS-based solutions could result in economic loss, damage to our reputation, deterring users from using our products, and exposure to legal penalties and liability.

Current wording

Privacy concerns, cyber-attacks, data breaches or cybersecurity incidents relating to our SaaS-based solutions could result in economic loss, damage to our reputation, deterring users from using our products, and exposure to legal penalties and liability.

Previous wording

We collect, process and store significant amounts of sensitive, confidential and proprietary information, including personally identifiable information, such as payment data and protected health information, of patients received in connection with the utilization of our solutions. Attacks on information technology systems are increasing in their frequency, levels of persistence, sophistication and intensity, they are being conducted by increasingly sophisticated and organized groups and individuals with a wide range of motives and expertise, and they may remain undetected for an extended period of time. Like many healthcare companies, we recently experienced an interruption in our operations as a result of unauthorized access to one of our services, and we may experience such interruptions again in the future. Although we do not believe the security incident has had a material impact on our business to date, any disclosure, loss, processing or other compromise of personal information or individually identifiable health information (violating certain privacy laws such as HIPAA) or confidential information, or event that jeopardizes the confidentiality, integrity, or availability of our solutions, could result in a material disruption to our solutions and our business operations. In addition to extracting sensitive information, such attacks could include the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. The prevalent use of mobile devices also increases the risk of data security incidents. While we believe we have taken reasonable steps to protect such data, techniques used to gain unauthorized access to data and systems, disable or degrade service, or sabotage systems, are constantly evolving, and we may be unable to anticipate such techniques or implement adequate preventative measures to avoid unauthorized access or other adverse impacts to such data or our systems.

Current wording

We collect, process and store significant amounts of sensitive, confidential and proprietary information, including personally identifiable information, such as payment data and protected health information, of patients received in connection with the utilization of our solutions. Attacks on information technology systems are increasing in their frequency, levels of persistence, sophistication and intensity, they are being conducted by increasingly sophisticated and organized groups and individuals with a wide range of motives and expertise, and they may remain undetected for an extended period of time. Like other companies in our industry, we, and our third party vendors, have experienced threats and cybersecurity incidents relating to our information technology systems and infrastructure. For example, in 2024, we experienced a cybersecurity incident which impacted our ConnectOnCall product. Although we do not believe this, or any other cybersecurity incident, has had a material impact on our business to date, any interruption in our business or disclosure, loss, processing or other compromise of personal information or individually identifiable health information (violating certain privacy laws such as HIPAA) or confidential information, or event that jeopardizes the confidentiality, integrity, or availability of our solutions, could result in a material disruption to our solutions and our business operations, require us to expend significant resources and subject us to litigation, fines and penalties. In addition to extracting sensitive information, such attacks could include the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering fraud (including phishing attacks), and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. While we aim to maintain a robust security program for all of our products to protect such data, techniques used to gain unauthorized access to data and systems, disable or degrade service, or sabotage systems, are constantly evolving, and may be the result of criminal groups, state sponsored or other malicious actors. We may be unable to anticipate such techniques or implement adequate preventative measures to avoid unauthorized access or other adverse impacts to such data or our systems.

Previous wording

In addition, some of our third-party service providers and partners, such as Change Healthcare and other clearinghouses, also collect and/or store our sensitive information and our clients' data on our behalf, and these service providers and partners are subject to similar threats of cyber-attacks and other malicious internet-based activities, which could also expose us to risk of loss, litigation, and potential liability. Even though we may have contractual protections with such vendors, contractors, or other organizations, notifications and follow-up actions related to a cybersecurity breach could impact our reputation, cause us to incur significant costs, including legal expenses, harm customer confidence, expose us to government enforcement action, hurt our expansion into new markets, cause us to incur remediation costs, or cause us to lose existing customers. The risk of state-supported and geopolitical-related cyber-attacks may increase in connection with political unrest or wars and any related political or economic responses and counter-responses. We may not discover all such incidents or activity or be able to respond or otherwise address them promptly, in sufficient respects or at all.

Current wording

In addition, some of our third-party service providers and partners, such as Change Healthcare and other clearinghouses, also collect and/or store our sensitive information and our clients' data on our behalf, and these service providers and partners have in the past, and may in the future be subject to similar threats of cyber-attacks and other malicious internet-based activities, which could also expose us to risk of loss, litigation, and potential liability. Even though we may have contractual protections with such vendors, contractors, or other organizations, notifications and follow-up actions related to a cybersecurity incident or data breach could impact our reputation, cause us to incur significant costs, including legal expenses, harm customer confidence, expose us to government enforcement action, hurt our expansion into new markets, cause us to incur remediation costs, or cause us to lose existing customers. The risk of state-supported and geopolitical-related cyber-attacks may increase in connection with political unrest or wars and any related political or economic responses and counter-responses. We may not discover all such cybersecurity incidents, data breaches, or other activity or be able to respond or otherwise address them promptly, in sufficient respects or at all.

Previous wording

We may be subject to state laws requiring notification of affected individuals and state regulators in the event of a breach of personal information, which is a broader class of information than the health information protected by HIPAA (as defined below). Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our business and/or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information. Patients about whom we obtain health information, as well as the healthcare services clients who share this information with us, may have statutory or contractual rights that limit our ability to use and disclose the information. We may be required to expend significant capital and other resources to ensure ongoing compliance with applicable privacy and data security laws. Claims that we have violated individuals’ privacy rights, violated applicable privacy laws and regulations or breached our contractual obligations, even if we are not found liable, could be expensive and time-consuming to defend and could result in adverse publicity that could harm our business.

Current wording

We are subject to state laws requiring notification of affected individuals and state regulators in the event of a breach of personal information. Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our business and/or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information. Patients about whom we obtain health information, as well as the healthcare services clients who share this information with us, may have statutory or contractual rights that limit our ability to use and disclose the information. We may be required to expend significant capital and other resources to ensure ongoing compliance with applicable privacy and data security laws. Claims that we have violated individuals’ privacy rights, violated applicable privacy laws and regulations or breached our contractual obligations, even if we are not found liable, could be expensive and time-consuming to defend and could result in adverse publicity that could harm our business. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our privacy and data security obligations. Further, although we maintain cyber liability insurance, this insurance may not provide adequate coverage against potential liabilities related to any experienced cybersecurity incident or breach.

Previous wording

Like all internet services, our service is vulnerable to software bugs, computer viruses, internet worms, break-ins, phishing attacks, attempts to overload servers with denial-of-service, or other attacks or similar disruptions from unauthorized use of our and third-party computer systems, any of which could lead to system interruptions, delays, or shutdowns, causing loss of critical data or the unauthorized access of data. Though it is difficult to determine what, if any, harm may directly result from any specific interruption or attack, any failure to maintain performance, reliability, security and availability of our products, or failure to prevent software bugs, to the satisfaction of our clients or the health and safety of their patients, such events may harm our reputation and our ability to retain existing clients, and negatively affect our clients and their patients. We have in place systems and processes that are designed to protect our data, prevent data loss, disable undesirable accounts and activities on our platform and prevent or detect security breaches, however, we cannot assure you that such measures will provide absolute security.

Current wording

Like all internet services, our service is vulnerable to software bugs, computer viruses, internet worms, break-ins, phishing attacks, attempts to overload servers with denial-of-service, wrongful or inadvertent conduct by insider employees or vendors, or other attacks or similar disruptions from unauthorized use of our and third-party computer systems, any of which could lead to system interruptions, delays, or shutdowns, causing loss of critical data or the unauthorized access of data. Though it is difficult to determine what, if any, harm may directly result from any specific interruption or attack, any failure to maintain performance, reliability, security and availability of our products, or failure to prevent software bugs, to the satisfaction of our clients or the health and safety of their patients, such events may harm our reputation and our ability to retain existing clients, and negatively affect our clients and their patients. We have in place systems and processes that are designed to protect our data, prevent data loss, disable undesirable accounts and activities on our platform and prevent or detect cybersecurity incidents or data breaches, however, we cannot assure you that such measures will provide absolute security.

Previous wording

Further, the security systems in place at our employees’ and service providers’ offices and homes may be less secure than those used in our offices, and while we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from their offices, homes and other remote locations, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss, and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will be completely effective or that we will not encounter risks associated with employees and service providers accessing company data and systems remotely. If an actual or perceived breach of security occurs to our systems or a third-party’s systems, we also could be required to expend significant resources to mitigate the breach of security, pay any applicable fines and address matters related to any such breach, including notifying users or regulators, and address reputational harm.

Current wording

Further, the security systems in place at our employees’ and service providers’ offices and homes may be less secure than those used in a corporate office, and while we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from their offices, homes and other remote locations, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss, and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will be completely effective or that we will not encounter risks associated with employees and service providers accessing company data and systems remotely. If an actual or perceived cybersecurity incident or data breach occurs to our systems or a third-party’s systems, we also could be required to expend significant resources to mitigate the breach of security, pay any applicable fines and address matters related to any such breach, including notifying users or regulators, defend against claims related to the breach and address reputational harm.

Previous wording

We have a subsidiary in India that performs a number of functions that were previously performed by outside contractors. While we believe our Indian operations are advantageous to our business, they also create risks that we must effectively manage. The management of our Indian operations has, and will continue to, require significant management attention and financial resources that could adversely affect our operating performance. Wages in India are increasing at a faster rate than those in many countries, including the United States. In addition, with the significant increase in the numbers of foreign businesses that have established operations in India, the competition to attract and retain employees there has increased significantly. As a result, we may be unable to cost-effectively retain our current employee base in India or hire additional new talent. In addition, India has experienced significant inflation, low growth in gross domestic product and shortages of foreign exchange. India also has experienced civil unrest and terrorism and, in the past, has been involved in conflicts with neighboring countries. The occurrence of any of these circumstances could result in disruptions to our India operations, which, if continued for an extended period of time, could have a material adverse effect on our business. Further, conducting business abroad may subject us to increased legal and regulatory compliance and oversight. A failure to comply with applicable laws and regulations could result in regulatory enforcement actions, as well as substantial civil and criminal penalties assessed against us and our employees.

Current wording

We have a subsidiary in India that performs a number of functions that were previously performed by outside contractors. While we believe our Indian operations are advantageous to our business, they also create risks that we must effectively manage. Conducting business abroad subjects us to increased legal and regulatory compliance and oversight. A failure to comply with applicable laws and regulations could result in regulatory enforcement actions, as well as substantial civil and criminal penalties assessed against us and our employees. The management of our Indian operations has, and will continue to, require significant management attention and financial resources that could adversely affect our operating performance. Wages in India are increasing at a faster rate than those in many countries, including the United States. In addition, with the significant increase in the numbers of foreign businesses that have established operations in India, the competition to attract and retain employees there has increased significantly. As a result, we may be unable to cost-effectively retain our current employee base in India or hire additional new talent. In addition, India has experienced significant inflation, low growth in gross domestic product and shortages of foreign exchange. India also has experienced civil unrest and terrorism and, in the past, has been involved in conflicts with neighboring countries. The occurrence of any of these circumstances could result in disruptions to our India operations, which, if continued for an extended period of time, could have a material adverse effect on our business.

Previous wording

We devote significant resources to establish relationships with new clients and deepen relationships with existing clients. Our efforts involve educating our clients and patients about the use, technical capabilities and benefits of our products and services. We do not provide access to our solutions and do not charge fees during this initial sales period. For clients that decide to enter into a contract with us, most of these contracts may provide for a preliminary trial period where a subset of healthcare services locations from the client is granted access to our solutions. Following any such trial period, we aim to increase the number of healthcare services locations within the client that utilize our solutions. Accordingly, our operating results depend in substantial part on our ability to deliver a successful client and patient experience and persuade our clients and patients to grow their relationship with us over time. As we expect to grow rapidly, our client acquisition costs could outpace revenue growth, and we may be unable to reduce our total operating costs through economies of scale such that we are unable to achieve profitability. Any increased or unexpected costs or unanticipated delays, including delays caused by factors outside of our control, could cause our operating results to suffer.

Current wording

We devote significant resources to establish relationships with new clients and deepen relationships with existing clients. Our efforts involve educating our clients and patients about the use, technical capabilities and benefits of our products and services. We do not provide access to our solutions and do not charge fees during this initial sales period. For clients that decide to enter into a contract with us, most of these contracts may provide for a preliminary trial period where a subset of the client’s healthcare services locations is granted access to our solutions. Following any such trial period, we aim to increase the number of the client’s healthcare services locations that utilize our solutions. Accordingly, our operating results depend in substantial part on our ability to deliver a successful client and patient experience and persuade our clients and patients to grow their relationship with us over time. If we are unable to do so, we are unlikely to recover these costs and our operating results may suffer.

Previous wording

The sales cycle for our services can be variable, typically ranging from three to six months from initial contact to contract execution. During the sales cycle, we expend time and resources, and we do not recognize any revenue to offset such expenditures. Our implementation cycle is also variable, typically ranging from one to 24 months from contract execution to completion of implementation. The variability of our sales and implementation cycle is dependent on numerous factors, including the discretionary nature of potential clients' purchasing and budget decisions and the size and complexity of the applicable client. Some of our new-client set-up projects are complex and require a lengthy delay and significant implementation work, including to educate prospective clients about the uses and benefits of our solutions. Each customer’s situation is different, and unanticipated difficulties and delays may arise as a result of failure by us or by the client to meet our respective implementation responsibilities. During the implementation cycle, we expend substantial time, effort and financial resources implementing our service, but accounting principles do not allow us to recognize the resulting revenue until the service has been implemented, at which time we begin recognition of subscription and related implementation revenue over the life of the contract. This could harm our future operating results. If implementation periods are extended, our revenue cycle will be delayed and our financial condition may be adversely affected. In addition, cancellation of any implementation after it has begun may involve loss to us of time, effort and expenses invested in the cancelled implementation process and lost opportunity for implementing paying clients in that same period of time.

Current wording

The sales cycle for our services can be variable, typically ranging from three to six months from initial contact to contract execution. During the sales cycle, we expend time and resources, and we do not recognize any revenue to offset such expenditures. Our implementation cycle is also variable, typically ranging from one to 24 months from contract execution to completion of implementation. The variability of our sales and implementation cycle is dependent on numerous factors, including the discretionary nature of potential clients' purchasing and budget decisions and the size and complexity of the applicable client. Some of our new client set-up projects are complex and require a considerable time commitment and significant implementation work, including educating prospective clients about the uses and benefits of our solutions. Each customer’s situation is different, and unanticipated difficulties and delays may arise as a result of failure by us or by the client to meet our respective implementation responsibilities. During the implementation cycle, we expend substantial time, effort and financial resources implementing our service, but accounting principles do not allow us to recognize the resulting revenue until the service has been implemented, at which time we begin recognition of subscription and related implementation revenue over the life of the contract. This could harm our future operating results. If implementation periods are extended, our revenue cycle will be delayed and our financial condition may be adversely affected. In addition, cancellation of any implementation after it has begun may involve loss to us of time, effort and expenses invested in the cancelled implementation process and lost opportunity for implementing paying clients in that same period of time.

Previous wording

In addition, the number of patients utilizing our payment processing tools, and the amounts those patients pay directly to our healthcare services clients for services, is often impacted by factors outside of our control, such as the number of patients with high deductible health plans. Accordingly, revenue under these agreements can be uncertain and unpredictable. If the number of patients utilizing our payment systems, or the aggregate amounts paid by such patients directly to our healthcare services clients through our solutions, were to be reduced by a material amount, such decrease would lead to a decrease in our revenue, which could harm our business, financial condition and results of operations.

Current wording

In addition, the number of patients utilizing our payment processing tools, and the amounts those patients pay directly to our healthcare services clients for services, is often impacted by factors outside of our control. For example, macroeconomic conditions and changes in healthcare policy may decrease the number of insured patients and result in reduced healthcare utilization and spending. Accordingly, revenue under these agreements can be uncertain and unpredictable. If the number of patients utilizing our payment systems, or the aggregate amounts paid by such patients directly to our healthcare services clients through our solutions, were to be reduced by a material amount, such decrease would lead to a decrease in our revenue, which could harm our business, financial condition and results of operations.

Previous wording

We also generate Network solutions revenue through fees charged to our life sciences and payer clients by delivering direct communications to help activate, engage and educate patients who authorize the delivery of, or "opt-in" to, such communications about topics critical to their health. The growth of our revenue stream from life sciences and payer clients is driven, in part, by our ability to grow our network of healthcare services clients and available population of patients to engage, our ability to achieve adequate patient opt-in rates, the number of newly approved drugs, the success of newly launched drugs, and the continued success of certain types of drugs, each of which is impacted by factors outside of our control. If there is a reduction in newly approved drugs, newly launched drugs are not successful, or certain drugs’ popularity decreases, this could negatively affect the ability of our life sciences clients to deliver relevant messages to patients who would have otherwise been candidates to receive such drugs, and accordingly may reduce patient opt-in rates. A reduction in the available population of patients to engage or a lack of relevant content could lead to a decrease in our Network solutions revenue, which could harm our business, financial condition and results of operations.

Current wording

We also generate network solutions revenue through fees charged to life sciences companies and other clients by delivering direct communications to help activate, engage and educate patients who provide consent for the delivery of such communications about topics critical to their health. The growth of our revenue stream from life sciences companies and other clients is driven, in part, by our ability to grow our network of healthcare services clients and available population of patients to engage, the desirability of optional communications to patients, the number of newly approved drugs, the success of newly launched drugs, and the continued success of certain types of drugs, each of which is impacted by factors outside of our control. For example, governmental actions taken by the U.S. presidential administration, such as changes in the leadership of the FDA, mass layoffs within the federal government and executive orders related to drug pricing, could affect the ability of life sciences companies to successfully develop and market drugs. If there is a reduction in newly approved drugs, newly launched drugs are not successful, or certain drugs’ popularity decreases, this could negatively affect the ability of our life sciences clients to deliver relevant messages to patients who would have otherwise been candidates to receive such drugs. A reduction in the available population of patients to engage or a lack of relevant content could lead to a decrease in our network solutions revenue, which could harm our business, financial condition and results of operations.

Previous wording

We depend on our existing clients’ satisfaction with our products and services. We expect to derive a significant portion of our revenue from renewal of existing clients’ contracts and sales of additional applications and services to existing clients. As part of our growth strategy, we have recently focused on expanding our services amongst current clients. As a result, achieving a high client retention rate, expanding within clients and selling additional applications and services are critical to our future business, revenue growth and results of operations. We also believe that maintaining and enhancing our reputation and brand recognition is critical to our relationships with existing clients and the patients that they serve and to our ability to attract new clients. The promotion of our brand may require us to make substantial investments, and we anticipate that, as our market becomes increasingly competitive, these marketing initiatives may become increasingly difficult and expensive. In addition, the loss or dissatisfaction of any client could substantially harm our brand and reputation, inhibit widespread adoption of our solutions and impair our ability to attract new clients.

Current wording

We depend on our existing clients’ satisfaction with our products and services. We expect to derive a significant portion of our revenue from renewal of existing clients’ contracts and sales of additional applications and services to existing clients. As part of our growth strategy, we have focused on expanding our services amongst current clients. As a result, achieving a high client retention rate and selling additional applications and services to existing clients are critical to our future business, revenue growth and results of operations. We also believe that maintaining and enhancing our reputation and brand recognition is critical to our relationships with existing clients and the patients that they serve and to our ability to attract new clients. The promotion of our brand may require us to make substantial investments, and we anticipate that, as our market becomes increasingly competitive, these marketing initiatives may become increasingly difficult and expensive. In addition, the loss or dissatisfaction of any client could substantially harm our brand and reputation, inhibit widespread adoption of our solutions and impair our ability to attract new clients.

Previous wording

We typically enter into annual contracts with our clients, which have a stated initial term of one year and automatically renew for one-year subsequent terms. Most of our clients have no obligation to renew their subscriptions for our solutions after the initial term expires. In addition, our clients may negotiate terms less advantageous to us upon renewal, which may reduce our revenue from these clients and may decrease our annual revenue. If our clients fail to renew their contracts, renew their contracts upon less favorable terms or at lower fee levels or fail to purchase new products and services from us, our revenue may decline or our future revenue growth may be constrained. Should any of our clients terminate their relationship with us after implementation has begun, we would not only lose our time, effort and resources invested in that implementation, but we would also have lost the opportunity to leverage those resources to build a relationship with other clients over that same period of time.

Current wording

We typically enter into annual contracts with our clients, which have a stated initial term of one year and automatically renew for one-year subsequent terms. Our clients have no obligation to renew their subscriptions for our solutions after the initial term expires. In addition, our clients may negotiate terms less advantageous to us upon renewal, which may reduce our revenue from these clients and may decrease our annual revenue. If our clients fail to renew their contracts, renew their contracts upon less favorable terms or at lower fee levels or fail to purchase new products and services from us, our revenue may decline or our future revenue growth may be constrained. Should any of our clients terminate their relationship with us after implementation has begun, we would not only lose our time, effort and resources invested in that implementation, but we would also have lost the opportunity to leverage those resources to build a relationship with other clients over that same period of time.

Previous wording

Market estimates and growth forecasts that we disclose are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts relating to the size and expected growth of the markets for our services may prove to be inaccurate. These estimates and forecasts may be impacted by economic uncertainty that is outside our control, including international conflicts that may impact international trade and global economic performance and other macroeconomic trends, such as international and domestic supply chain risks, inflationary pressure, interest rate increases and declines in consumer confidence that impact our customers.

Current wording

Market estimates and growth forecasts that we disclose are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts relating to the size and expected growth of the markets for our services may prove to be inaccurate. These estimates and forecasts may be impacted by economic uncertainty that is outside our control, including international conflicts that may impact international trade and global economic performance and other macroeconomic trends, such as tariffs and other trade restrictions and trade protection measures, capital market disruptions, changes in governmental agencies, economic sanctions, economic slowdowns or recessions, international and domestic supply chain risks, inflationary pressure, interest rate increases and declines in consumer confidence that impact our customers.

Previous wording

The principal assumptions relating to our market opportunity include the number of healthcare services organizations currently taking appointments, the amount of annual out of pocket consumer spend for healthcare-related services, and the amount of annual spend by life sciences and payer companies on direct communications with patients at the point of care. Our market opportunity is also based on the assumption that the strategic approach that Phreesia enables for our potential clients will be more attractive in creating efficiencies in patient care than competing solutions. If these assumptions prove inaccurate, our business, financial condition and results of operations could be adversely affected.

Current wording

The principal assumptions relating to our market opportunity include the number of healthcare services organizations currently taking appointments, the amount of annual out of pocket consumer spend for healthcare-related services, and the amount of annual spend by life sciences companies and other organizations on direct communications with patients at the point of care. Our market opportunity is also based on the assumption that the strategic approach that Phreesia enables for our potential clients will be more attractive in creating efficiencies in patient care than competing solutions. If these assumptions prove inaccurate, our business, financial condition and results of operations could be adversely affected.

Previous wording

Our clients and patients depend on our support services to resolve any technical issues relating to our solutions and our services, and we may be unable to respond quickly enough to accommodate short-term increases in demand for support services, particularly as we increase the size of our client bases (including healthcare services clients and the number of patients that they serve). In addition, we may experience unexpected service interruptions due to cyber-attacks or other security incidents, such as the one that affected our ConnectOnCall product. In such cases, we may be unable to restore service in a timely manner, if at all. We also may be unable to modify the format of our support services to compete with changes in support services provided by competitors. It is difficult to predict client and patient demand for technical support services, and if client or patient demand increases significantly, we may be unable to provide satisfactory support services to our clients. Further, if we are unable to address the needs of our clients and their patients in a timely fashion or further develop and enhance our solutions, or if a client or patient is not satisfied with the quality of work performed by us or with the technical support services rendered, then we could incur additional costs to address the situation or be required to issue credits or refunds for amounts related to unused services, and our profitability may be impaired and clients’ or patients’ dissatisfaction with our solutions could damage our ability to expand the number of applications and services purchased by such clients. These clients may not renew their contracts, seek to terminate their relationships with us or renew on less favorable terms. Moreover, negative publicity related to our client and patient relationships, or regarding patient confidentiality and privacy in the context of technology-enabled healthcare, regardless of its accuracy, may further damage our business by affecting our reputation or ability to compete for new business with current and prospective clients. If any of these were to occur, our revenue may decline and our business, financial condition and results of operations could be adversely affected.

Current wording

Our clients and patients depend on our support services to resolve any technical issues relating to our solutions and our services, and we may be unable to respond quickly enough to accommodate short-term increases in demand for support services, particularly as we increase the size of our client bases (including healthcare services clients and the number of patients that they serve). In addition, we may experience unexpected service interruptions due to cyber-attacks or other cybersecurity incidents or data breaches, such as one that affected our ConnectOnCall product in 2024. In such cases, we may be unable to restore service in a timely manner, if at all. We also may be unable to modify the format of our support services to compete with changes in support services provided by competitors. It is difficult to predict client and patient demand for technical support services, and if client or patient demand increases significantly, we may be unable to provide satisfactory support services to our clients. Further, if we are unable to address the needs of our clients and their patients in a timely fashion or further develop and enhance our solutions, or if a client or patient is not satisfied with the quality of work performed by us or with the technical support services rendered, then we could incur additional costs to address the situation or be required to issue credits or refunds for amounts related to unused services, and our profitability may be impaired and clients’ or patients’ dissatisfaction with our solutions could damage our ability to expand the number of applications and services purchased by such clients. These clients may not renew their contracts, seek to terminate their relationships with us or renew on less favorable terms. Moreover, negative publicity related to our client and patient relationships, or regarding patient confidentiality and privacy in the context of technology-enabled healthcare, regardless of its accuracy, may further damage our business by affecting our reputation or ability to compete for new business with current and prospective clients. If any of these were to occur, our revenue may decline and our business, financial condition and results of operations could be adversely affected.

Previous wording

We have experienced net losses in the past and we may not achieve profitability in the future.

Current wording

We have experienced net losses in the past and we may not achieve positive net income in the future.

Previous wording

We have incurred significant operating losses since our inception. For the three and nine months ended October 31, 2024 and the years ended January 31, 2024 and January 31, 2023, we had net losses of $14.4 million, $52.1 million, $136.9 million and $176.1 million, respectively, and losses from operations of $13.8 million, $50.5 million, $136.5 million and $176.6 million respectively. Our operating expenses may increase in the foreseeable future as we continue to invest to grow our business and build relationships with our clients and partners, develop new solutions and operate as a public company. In addition, to the extent we are successful in increasing our client base, we could incur increased losses because significant costs associated with entering into client agreements are generally incurred up front, while revenue is generally recognized ratably over the term of the agreement. As a result, we may need to raise additional capital through equity and debt financings in order to fund our operations, which may not be available to us on favorable terms or at all. If we are unable to effectively manage these risks and difficulties as we encounter them or effectively access the capital markets, our business, financial condition and results of operations may suffer.

Current wording

We have incurred significant operating losses since our inception. For the three months ended April 30, 2025 and the years ended January 31, 2025 and January 31, 2024, we had net losses of $3.9 million, $58.5 million and $136.9 million, respectively, and losses from operations of $3.3 million, $58.1 million and $136.5 million respectively. Our operating expenses may increase in the foreseeable future as we continue to invest to grow our business and build relationships with our clients and partners, develop new solutions and operate as a public company. In addition, to the extent we are successful in increasing our client base, we could incur increased losses because significant costs associated with entering into client agreements are generally incurred up front, while revenue is generally recognized ratably over the term of the agreement. As a result, we may need to raise additional capital through equity and debt financings in order to fund our operations, which may not be available to us on favorable terms or at all. If we are unable to effectively manage these risks and difficulties as we encounter them or effectively access the capital markets, our business, financial condition and results of operations may suffer.

Previous wording

Our success depends, in part, on the skills, working relationships and continued services of our founders, Chaim Indig (Chief Executive Officer) and Evan Roberts (Chief Operating Officer), and senior management team and other key personnel. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives, which could disrupt our business.

Current wording

Our success depends, in part, on the skills, working relationships and continued services of our founders, Chaim Indig (Chief Executive Officer) and Evan Roberts (Chief Operating Officer), and our senior management team and other key personnel. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives, which could disrupt our business.

Previous wording

Competition for qualified management and employees in our industry is intense, and identifying and recruiting qualified personnel and training them requires significant time, expense and attention. Many of the companies with which we compete for personnel have greater financial and other resources than we do. While we have entered into offer letters or employment agreements with certain of our executive officers, all of our employees are “at-will” employees, and their employment can be terminated by us or them at any time, for any reason and without notice, subject, in certain cases, to severance payment rights. The departure and replacement of one or more of our executive officers or other key employees would likely involve significant time and costs, may significantly delay or prevent the achievement of our business objectives and could materially harm our business. In addition, volatility or lack of performance in our stock price may affect our ability to attract replacement should key personnel depart.

Current wording

Competition for qualified management and employees in our industry is intense, and identifying and recruiting qualified personnel and training them requires significant time, expense and attention. Many of the companies with which we compete for personnel have greater financial and other resources than we do. Our North American employees are employed on a contract-employment basis or are “at-will” employees, and, in most cases, their employment can be terminated by us or them at any time, for any reason and without notice, subject, in certain cases, to severance payment rights. The departure and replacement of one or more of our executive officers or other key employees would likely involve significant time and costs, may significantly delay or prevent the achievement of our business objectives and could materially harm our business. In addition, volatility or lack of performance in our stock price may affect our ability to attract replacements should key personnel depart.

Previous wording

There are inherent risks in integrating and managing acquisitions, and the pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated. We cannot assure you that we will realize the anticipated benefits of these or any future acquisitions. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including, without limitation:

Current wording

There are inherent risks in integrating and managing acquisitions, and the pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated. We cannot assure you that we will realize the anticipated benefits of these or any future acquisitions. We also may not achieve the anticipated benefits from an acquired business due to a number of factors, including, without limitation:

Previous wording

•privacy concerns, cyber-attacks, security breaches or incidents relating to the acquired businesses, such as the security incident we experienced with ConnectOnCall;

Current wording

•privacy concerns, cyber-attacks, data breaches or cybersecurity incidents relating to the acquired businesses, such as the security incident we experienced with ConnectOnCall in 2024;

Previous wording

•use of substantial portions of our available cash or entail the issuance of our equity securities or the incurrence of debt to consummate the acquisition;

Current wording

•the use of substantial portions of our available cash, issuance of our equity securities or incurrence of debt to consummate the acquisition;

Previous wording

•the loss of key employees, particularly those of the acquired operations;

Current wording

•the loss of key employees, particularly those of the acquired operations; difficulty retaining or developing the acquired business’ customers;

Previous wording

We believe there are significant seasonal factors that may cause us to record higher revenue in some quarters compared with others. We believe this variability is largely due to our focus on the healthcare industry. For example, with respect to our healthcare services clients, we receive a disproportionate increase in payment processing revenue from such clients during the first two to three months of the calendar year relative to the other months of the year, which is driven, in part, by the resetting of patient deductibles at the beginning of each calendar year. Sales for our life sciences solutions are also seasonal, primarily due to the annual spending patterns of our clients. This portion of our sales is usually the highest in the fourth quarter of each calendar year. While we believe we have visibility into the seasonality of our business, our rapid growth rate over the last several years may have made seasonal fluctuations more difficult to detect. If our rate of growth slows over time, seasonal or cyclical variations in our operations may become more pronounced, and our business, results of operations and financial position may be adversely affected.

Current wording

We believe there are significant seasonal factors that may cause us to record higher revenue in some quarters compared with others. We believe this variability is largely due to our focus on the healthcare industry. For example, with respect to our healthcare services clients, we receive a disproportionate increase in payment processing revenue from such clients during the first two to three months of the calendar year relative to the other months of the year, which is driven, in part, by the resetting of patient deductibles at the beginning of each calendar year. Sales for our network solutions are also seasonal, primarily due to the annual spending patterns of our clients. This portion of our sales is usually the highest in the fourth quarter of each calendar year. While we believe we have visibility into the seasonality of our business, our rapid growth rate over the last several years may have made seasonal fluctuations more difficult to detect. If our rate of growth slows over time, seasonal or cyclical variations in our operations may become more pronounced, and our business, results of operations and financial position may be adversely affected.

Previous wording

In addition, macroeconomic challenges (including changes in inflation and interest rates) and the tight labor market have adversely affected, and may continue to adversely affect, workforces, organizations, governments, clients, economies, and financial markets globally and have disrupted the normal operations of many businesses, including our business, making it potentially very difficult for our clients and us to accurately forecast and plan future business activities. These factors have and could further decrease healthcare industry spending, adversely affect demand for our products and services, impair the ability of our clients to pay for the products and services they have already purchased from us, cause one or more of our clients to file for bankruptcy protection or go out of business, cause one or more of our clients to fail to renew, terminate, or renegotiate their contracts, impact expected spending from new clients, negatively impact collections of accounts receivable, and harm our business, results of operations, and financial condition.

Current wording

In addition, macroeconomic challenges (including tariffs and other trade restrictions, changes in inflation and interest rates) and a tight labor market have adversely affected, and may continue to adversely affect, workforces, organizations, governments, clients, economies, and financial markets globally and have disrupted the normal operations of many businesses, including our business, making it potentially very difficult for our clients and us to accurately forecast and plan future business activities. These factors have and could further decrease healthcare industry spending, adversely affect demand for our products and services, impair the ability of our clients to pay for the products and services they have already purchased from us, cause one or more of our clients to file for bankruptcy protection or go out of business, cause one or more of our clients to fail to renew, terminate, or renegotiate their contracts, impact expected spending from new clients, negatively impact collections of accounts receivable, and harm our business, results of operations, and financial condition.

Previous wording

We continue to invest in more robust technology and resources to manage those reporting requirements. Implementing the appropriate changes to our internal controls may distract our officers and employees, result in substantial costs and require significant time to complete. Any difficulties or delays in implementing these controls could impact our ability to timely report our financial results. For these reasons, we may encounter difficulties in the timely and accurate reporting of our financial results, which would impact our ability to provide our investors with information in a timely manner. As a result, our investors could lose confidence in our reported financial information, and our stock price could decline.

Current wording

We continue to invest in more robust technology and resources to manage our reporting requirements. Implementing the appropriate changes to our internal controls may distract our officers and employees, result in substantial costs and require significant time to complete. Any difficulties or delays in implementing these controls could impact our ability to timely report our financial results. For these reasons, we may encounter difficulties in the timely and accurate reporting of our financial results, which would impact our ability to provide our investors with information in a timely manner. As a result, our investors could lose confidence in our reported financial information, and our stock price could decline. In addition, any such changes do not guarantee that we will be effective in maintaining the adequacy of our internal controls, and any failure to maintain that adequacy could prevent us from accurately reporting our financial results.

Previous wording

Further, the security systems in place at our employees’ homes may be less secure than those used in our offices, and while we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from home, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will be completely effective or that we will not encounter risks associated with employees accessing company data and systems remotely. In addition, operating remotely may negatively impact our corporate culture, including employee engagement and productivity.

Current wording

Being a fully remote company subjects us to unique operational risks. For example, technologies in our employees’ homes may not be as robust as in a corporate office and could cause the networks, information systems, applications, and other tools available to employees and service providers to be more limited or less reliable than in a corporate office. Further, the security systems in place at our employees’ homes may be less secure than those used in a corporate office, and while we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from home, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will be completely effective or that we will not encounter risks associated with employees accessing company data and systems remotely. In addition, operating remotely may negatively impact our corporate culture, including employee engagement and productivity.

Previous wording

Our payments platform is a core element of our business. For the three and nine months ended October 31, 2024 and the fiscal year ended January 31, 2024, our payments platform generated 23%,25% and 27% of our total revenue, respectively. Our future success depends in part on the continued growth and development of our payments platform. If such activities are limited, restricted, curtailed or degraded in any way, or if we fail to continue to grow and develop our payments platform, our business may be materially and adversely affected. The utilization of our payment processing tools may be impacted by factors outside of our control, such as disruptions in the payment processing industry generally. If the number of patients utilizing our payments platform, or the aggregate amounts paid by such patients directly to our healthcare services clients through our payments platform, were to be reduced as a result of disruptions in the payment processing industry or other factors, it could result in a decrease to our revenue, which could harm our business, financial condition and results of operations. In addition, some potential or existing clients may not desire to use our payment processing services or to switch from their existing payment processing vendors for a variety of reasons, such as transition costs, business disruption, and loss of accustomed functionality. There can be no assurance that our efforts to overcome these factors will be successful, and this resistance may adversely affect our growth.

Current wording

Our payments platform is a core element of our business. For the three months ended April 30, 2025 and the fiscal year ended January 31, 2025, our payments platform generated 26% and 24% of our total revenue, respectively. Our future success depends in part on the continued growth and development of our payments platform. If such activities are limited, restricted, curtailed or degraded in any way, or if we fail to continue to grow and develop our payments platform, our business may be materially and adversely affected. The utilization of our payment processing tools may be impacted by factors outside of our control, such as changes in laws governing medical bill payments or disruptions in the payment processing industry generally. If the number of patients utilizing our payments platform, the aggregate amounts paid by such patients directly to our healthcare services clients through our payments platform, or the credit card interchange fees we receive from such payments were to be reduced as a result of disruptions in the payment processing industry, laws discouraging the use of credit card payments for medical services or other factors, it could result in a decrease to our revenue. In addition, some potential or existing clients may not desire to use our payment processing services or to switch from their existing payment processing vendors for a variety of reasons, such as transition costs, business disruption, and loss of accustomed functionality. There can be no assurance that our efforts to overcome these factors will be successful, and this resistance may adversely affect our growth.

Previous wording

The attractiveness of our payment processing services may also depend on our ability to integrate emerging payment technologies, including crypto-currencies, other emerging or alternative payment methods, and credit card systems that we or our processing partners may not adequately support or for which we or they do not provide adequate processing rates. In the event such methods become popular among consumers, any failure to timely integrate emerging payment methods (such as ApplePay) into our software, anticipate client behavior changes, or contract with payment processing partners that support such emerging payment technologies could reduce the attractiveness of our payment processing services, potentially resulting in a corresponding loss of revenue.

Current wording

The attractiveness of our payment processing services may also depend on our ability to integrate emerging payment technologies, including crypto-currencies, other emerging or alternative payment methods, and credit card systems that we or our processing partners may not adequately support or for which we or they do not provide adequate processing rates. In the event such methods become popular among consumers, any failure to timely integrate emerging payment methods into our software, anticipate client behavior changes, or contract with payment processing partners that support such emerging payment technologies could reduce the attractiveness of our payment processing services, potentially resulting in a corresponding loss of revenue.

Previous wording

We pay interchange fees to the card networks or the card issuers for each transaction we process. The card networks may increase, from time to time, the fees that they charge members or service providers. Although we may attempt to pass these increases along to our clients, this may result in the loss of clients to our competitors that do not pass along the increases. A provision of the Dodd-Frank Wall Street Reform and Consumer Protection Act (the "Dodd-Frank Act") known as the Durbin Amendment empowered the Board of Governors of the Federal Reserve System, ("FRS"), to establish and regulate a cap on the interchange fees that issuers (e.g. banks) may charge or receive for electronic clearing of debit card transactions. The original regulations implementing the Durbin Amendment established standards for assessing whether debit card interchange fees received by debit card issuers were reasonable and proportional to the costs incurred by issuers for electronic debit transactions, and it established a maximum permissible interchange fee that an issuer may receive for an electronic debit transaction, limiting the fee revenue to debit card issuers and payment processors. In November 2023, the FRS proposed amendments to Regulation II that would, if adopted as proposed, significantly lower the maximum permissible interchange fee for such transactions, and such maximum would be reevaluated every two years. To the extent that HSA-linked payment cards and other exempt payment cards (or their issuing banks, such as those having assets of less than $10 billion) lose their exempt status under the current rules, or if any interchange rate caps applicable to the debit card, credit card or other payment cards are changed, any such amendment, rule-making, or legislation could impact interchange rates applicable to payment card transactions processed through our payments platform. As a result, this could decrease our revenue and profit and could have a material adverse effect on our financial condition and results of operations.

Current wording

We pay interchange fees to the card networks or the card issuers for each transaction we process. The card networks may increase, from time to time, the fees that they charge members or service providers. Although we may attempt to pass these increases along to our clients, this may result in the loss of clients to our competitors that do not pass along the increases. A provision of the Dodd-Frank Wall Street Reform and Consumer Protection Act (the "Dodd-Frank Act") known as the Durbin Amendment empowered the Board of Governors of the Federal Reserve System ("FRS"), to establish and regulate a cap on the interchange fees that issuers (e.g. banks) may charge or receive for electronic clearing of debit card transactions. The original regulations implementing the Durbin Amendment established standards for assessing whether debit card interchange fees received by debit card issuers were reasonable and proportional to the costs incurred by issuers for electronic debit transactions, and it established a maximum permissible interchange fee that an issuer may receive for an electronic debit transaction, limiting the fee revenue to debit card issuers and payment processors. If the maximum permissible interchange fee for debit cards, credit cards, or other payment cards is changed or the exempt status of HSA-linked payment cards from such maximum interchange rate caps is lost as a result of amendment to Regulation II by the FRS or any other new rulemaking, legislation, or private litigation challenge, our revenue and profit from payment card transactions processed through our payments platform could decrease, and there could be a material adverse effect on our financial condition and results of operations.

Showing the first 40 of 88 pairs. Open the source sections for the rest.

Rearranged current paragraphs (2)

Current report — wording carried from elsewhere

•changes in the healthcare regulatory and policy environment;

Current report — wording carried from elsewhere

As of January 31, 2025, we had U.S. federal and state net operating loss carryforwards ("NOLs") of $596.5 million due to prior period losses, which, subject to the following discussion, are generally available to be carried forward to offset a portion of our future taxable income, if any, until such NOLs are used or expire. In general, under Section
Rearranged previous paragraphs (6)

Previous report — wording carried elsewhere

Being a fully remote company subjects us to unique operational risks. For example, technologies in our employees’ homes may not be as robust as in our offices and could cause the networks, information systems, applications, and other tools available to employees and service providers to be more limited or less reliable than in our offices.

Previous report — wording carried elsewhere

•difficulty retaining or developing the acquired business’ customers;

Previous report — wording carried elsewhere

In addition, any such changes do not guarantee that we will be effective in maintaining the adequacy of our internal controls, and any failure to maintain that adequacy could prevent us from accurately reporting our financial results.

Previous report — wording carried elsewhere

We collect, store and display data, including patient health information, for use by healthcare services clients in handling patient intake and engagement. Our clients, their patients, or third parties provide us with most of this data.

Previous report — wording carried elsewhere

Other federal and state laws restrict the use and protect the privacy and security of personally identifiable information, in many cases, are not preempted by HIPAA and may be subject to varying interpretations by the courts and government agencies. These varying interpretations can create complex compliance issues for us and our partners and potentially expose us to additional expense, adverse publicity and liability, any of which could adversely affect our business.

Previous report — wording carried elsewhere

Although the U.S. Department of Treasury, FDIC and Federal Reserve Board have announced a program to provide up to $25 billion of loans to financial institutions secured by certain of such government securities held by financial institutions to mitigate the risk of potential losses on the sale of such instruments, widespread demands for customer withdrawals or other liquidity needs of financial institutions for immediately liquidity may exceed the capacity of such program. There is no guarantee that the U.S. Department of Treasury, FDIC and Federal Reserve Board will provide access to uninsured funds in the future in the event of the closure of other banks or financial institutions, or that they would do so in a timely fashion.