Skip to main content

Phreesia, Inc.

For the period ended Jan 31, 2026. Filed Mar 31, 2026.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2026 · Filed Mar 31, 2026

PHR$12.62-0.7%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2025-01-31; filed 2025-03-13.

0001412408-25-000010

Item 1A. Risk Factors

Current report: 10-K

Period ended 2026-01-31; filed 2026-03-31.

0001412408-26-000079

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 265 previous paragraphs and 279 current paragraphs.

165 unchanged; 93 reworded; 17 added; 5 removed; 2 previous and 4 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (17)

Current report

•the extent to which developments in AI may reduce demand for our solutions;

Current report

•changes in healthcare, utilization and spending trends, including as a result of changes to healthcare policy and the One Big Beautiful Bill Act (“OBBBA”);

Current report

•our access to capital;

Current report

We may be unable to successfully integrate the business acquired in the AccessOne Acquisition, integration may be more difficult, costly or time-consuming than expected, and we may fail to realize all of the anticipated benefits of the AccessOne Acquisition on the anticipated time frame or at all.

Current report

We believe that there are significant benefits that may be realized through the AccessOne Acquisition. However, the efforts to realize these benefits is a complex process and may disrupt both companies’ existing operations if not implemented in a timely and efficient manner. The integration may be more difficult, costly or time-consuming than expected. We have incurred substantial expenses in connection with the AccessOne Acquisition, including legal, financial advisory, accounting, consulting, and other advisory fees, employee benefit-related costs, filing fees and other regulatory fees, closing, integration and other related costs. The anticipated benefits of the AccessOne Acquisition, including anticipated sales or growth opportunities and cross-selling opportunities, may not be realized as expected or may not be achieved within the anticipated time frame or at all. In addition, we are required to devote significant attention and resources to successfully integrate the operations of the acquired business. This process may disrupt the businesses and, if ineffective, would limit the anticipated benefits of the AccessOne Acquisition.

Current report

Additionally, the success of the AccessOne Acquisition will depend in part on our ability to retain key employees of the acquired business. If we are unable to retain key employees, including management, whose contributions are important to the successful integration and future operations of the companies, we could face disruptions in AccessOne’s operations, loss of existing clients, loss of key information, expertise or know-how and unanticipated additional recruitment costs. We may not be able to locate or retain suitable replacements for any key employees who decide not to remain employed with us.

Current report

Failure to successfully integrate or achieve the anticipated benefits of the AccessOne Acquisition could adversely affect our business, results of operations and financial condition, decrease or delay any accretive effects of the AccessOne Acquisition and negatively impact the price of our common stock.

Current report

Risks relating to our payment processing business

Current report

Specifically, regulators and legislators in the U.S. are increasingly scrutinizing and restricting certain personal data transfers and transactions involving foreign countries. For example, the Department of Justice’s January 8, 2025, rule, “Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons,” as implemented by Department of Justice regulations issued in December 2024, prohibits data brokerage transactions involving certain sensitive personal data categories, including health data, genetic data, and biospecimens, to countries of concern, including China. The regulations also restrict certain investment agreements, employment agreements, and vendor agreements involving such data and countries of concern, absent specified cybersecurity controls. Actual or alleged violations of these regulations may be punishable by criminal and/or civil sanctions, and may result in exclusion from participation in federal and state programs. While Phreesia does not currently transfer data to these countries of concern, we are continuing to monitor the applicability of these new regulations and similar rules that may be enacted from time to time.

Current report

Artificial intelligence presents risks and challenges that can impact our business, including by increasing competition, posing security risks to our confidential information, proprietary information and personal data, and increasing our regulatory and compliance burden.

Current report

Developments in AI have impacted the software industry and we expect this impact to continue. AI has become increasingly prevalent in the markets in which we operate and may result in changes in the demand for our solutions, including, but not limited to, reducing the difficulty and cost for competitors to build and launch competitive products or by making aspects of our solutions obsolete. Our competitive position could be harmed if we fail to adopt and integrate AI effectively into our operations and product offerings. The successful implementation of AI technologies requires significant investment in talent, infrastructure, and ongoing research and development. While we have made, and expect to continue to make, significant investments to integrate AI into our solutions and operations, AI technologies are rapidly evolving and there can be no guarantee that our solutions will remain competitive as new AI technologies are developed and adopted. Market acceptance, understanding, and valuation and consumer perceptions of platforms, products, and programs that incorporate AI technologies is uncertain, and the perceived value of AI technologies could be inaccurate. Developing, testing and deploying AI systems may also increase the cost profile of our solutions due to the nature of the computing costs involved in such systems.

Current report

We use AI technologies licensed from third parties, including in our solutions, and our ability to continue to use such third-party AI technologies at the scale we need may be dependent on access to specific third-party software and infrastructure. We cannot control the availability or pricing of such third-party AI technologies, especially in a highly competitive environment, and we may be unable to negotiate favorable economic terms with the applicable providers. Additionally, we, or our clients, may choose, or be required, not to use certain AI technologies due to security, compliance, reputational or other considerations. If our use of such AI technologies is restricted, if such AI technologies become incompatible with our solutions and programs or unavailable for use, or if the providers of such models unfavorably change the terms on which their AI technologies are offered or terminate their relationship with us, and no comparable alternative is available, our solutions may become less appealing to our clients and our business may be adversely affected. In addition, to the extent any third-party AI technologies are used as a hosted service, any disruption, outage, or loss of information through such hosted services could disrupt our operations or solutions, damage our reputation, cause a loss of confidence in our solutions, or result in legal claims or proceedings, for which we may be unable to recover damages from the affected AI provider.

Current report

The rapid evolution of AI will require the application of significant resources to help ensure that AI is implemented in accordance with applicable law and regulation and in a socially responsible manner and to minimize any real or perceived unintended harmful impacts. Use of this technology could pose cybersecurity, data privacy, IT, intellectual property, regulatory, legal, operational, competitive, reputational and other risks and challenges that could affect our business. Specifically, AI systems can present risks related to accuracy, bias, errors, discrimination, harmful content, misinformation, fraud, scams, targeted attacks (including model poisoning or data poisoning), surveillance, data leakage, inequality, environmental harms, false or “hallucinatory” inferences or outputs, and other harms may flow from our development, use, or deployment of AI technologies. For example, if the content, analyses, or recommendations that AI systems assist in producing are, or are alleged or perceived to be inaccurate, deficient, or biased, our reputation, competitive position, business, financial condition, and results of operations may be adversely affected. The use of certain AI technologies can also give rise to intellectual property risks, including by disclosing or otherwise compromising our confidential or proprietary intellectual property, or by undermining our ability to assert or defend ownership rights in intellectual property created with the assistance of AI tools. Any of these effects could damage our reputation, result in the loss of valuable property and information, and adversely impact our business.

Current report

Our future success will depend, in part, on our ability to leverage AI responsibly, effectively and in compliance with laws and regulations. Because AI technology is highly complex and rapidly developing, it is not possible to predict all of the legal, operational, competitive or technological risks that may arise relating to the use of AI.

Current report

•Financial services regulation. Our payment solutions must comply with certain laws, including the BSA, as amended by the PATRIOT Act, the Customer Due Diligence Rule, and the AMLA, which, among other things, contain anti-money laundering and financial transparency laws and mandate the implementation of various regulations applicable to all financial institutions, including standards for verifying client identification at account opening, and obligations to monitor client transactions and report suspicious activities. Additionally, our subsidiary, AccessOne MedCard receives a portion of its revenue from consumer lending activities. AccessOne MedCard is licensed or registered to engage in consumer lending in multiple states in the United States, subjecting it to extensive state regulatory oversight. For example, AccessOne MedCard must comply with consumer lending laws and regulations governing aspects of its operations, including disclosures, interest and fee limitations, and reporting obligations in each relevant state, creating significant compliance complexity and costs. Changes in state-level consumer lending laws, or changes in or additions to AccessOne MedCard’s product offerings, could require AccessOne MedCard to obtain licenses in additional states, increasing our compliance costs. AccessOne MedCard’s consumer lending activities are also subject to federal lending regulations, including the Truth in Lending Act, the Equal Credit Opportunity Act, the Fair Credit Billing Act, the Military Lending Act and the Servicemembers’ Civil Relief Act, among others, and rules promulgated by the CFPB. Failure to comply with applicable state or federal requirements could result in regulatory investigations, enforcement actions, civil or criminal penalties, license suspension or revocation, reputational harm, and increased compliance costs, any of which could materially adversely affect our business, financial condition, and results of operations. State attorneys general may also exercise enforcement authority under both state and federal law. Additionally, financial regulatory bodies may enact new laws or promulgate new regulations or interpret laws and regulations differently than they have in the past, or commence investigations or inquiries into our business practices. Potential new laws, regulations or interpretive guidance, such as stricter standards regarding the marketing, origination, or servicing of medical financing products, enacted at either the state or federal level could impose significant compliance costs and legal risks, or require AccessOne MedCard to alter its product offerings, modify fee structures or change its relationships with healthcare provider clients. Further, heightened regulatory scrutiny or negative publicity surrounding medical financing products could make AccessOne MedCard’s solutions less attractive to potential clients or cause existing clients to discontinue use of the solutions to avoid perceived regulatory risks o…

Excerpt shortened here; the source contains the full paragraph.

Current report

In connection with the closing of the AccessOne Acquisition, we entered into the Bridge Loan and used the net proceeds thereof to fund a portion of the consideration for the AccessOne Acquisition. As of January 31, 2026, we had $90 million outstanding principal balance under the Bridge Loan, and no outstanding borrowings under the Existing Capital One Credit Facility, with available borrowing capacity of $50.0 million. On March 13, 2026, subsequent to the end of the fiscal year, we completed the Refinancing, pursuant to which we entered into the New Capital One Credit Facility and repaid all outstanding indebtedness and obligations under the Bridge Loan, and terminated the Bridge Loan and the Existing Capital One Credit Facility without penalty. The unused borrowing capacity of the New Capital One Credit Facility is available to the Company for working capital, capital expenditures, permitted acquisitions and other general corporate purposes.

Current report

•new laws or regulations or new interpretations of existing laws or regulations applicable to our business or the healthcare industry generally;
Removed paragraphs (5)

Previous report

•our ability to hire and retain qualified personnel, including the rate of expansion of our sales force;

Previous report

•changes in the regulatory environment related to healthcare;

Previous report

Risks relating to our payments business

Previous report

Adverse developments affecting the financial services industry, such as actual events or concerns involving liquidity, defaults or non-performance by financial institutions or transactional counterparties, could adversely affect our current and projected business operations and our financial condition and results of operations.

Previous report

These and other factors may cause the market price and demand for our common stock to fluctuate substantially, which may limit or prevent investors from readily selling their shares of common stock and may otherwise negatively affect the liquidity of our common stock. In addition, in the past, when the market price of a stock has been volatile, holders of that stock have instituted securities class action litigation against the company that issued the stock. If any of our stockholders brought a lawsuit against us, we could incur substantial costs defending the lawsuit. Such a lawsuit could also divert the time and attention of our management from our business.
Reworded paragraphs (93)

Previous wording

The market for our products and services is fragmented, competitive and characterized by rapidly evolving technology standards, evolving regulatory requirements, changes in client needs and the frequent introduction of new products and services, including as a result of artificial intelligence (“AI”) technologies. Our competitors range from smaller niche companies to large, well-financed and technologically-sophisticated entities, including the EHR and PM systems with which we integrate. As costs fall and technology improves, increased market saturation may change the competitive landscape in favor of competitors with greater scale than we currently possess.

Current wording

The market for our solutions and services is fragmented, competitive and characterized by rapidly evolving technology standards, evolving regulatory requirements, changes in client needs and the frequent introduction of new products and services, including as a result of AI technologies. Our competitors range from smaller niche companies to large, well-financed and technologically-sophisticated entities, including the EHR and PM systems with which we integrate. As costs fall and technology improves, increased market saturation may change the competitive landscape in favor of competitors with greater scale than we currently possess, including as a result of new or better use of evolving AI technologies.

Previous wording

The success of our business and growth strategy depend upon our continued ability to maintain and expand a network of healthcare services clients, which also requires us to provide and develop new high-quality products and services that are helpful to our clients and used and positively received by patients. If we are unable to attract and retain healthcare services clients, including because we are unable to adapt to new industry standards in developing new products and services, it would have a material adverse effect on our business and ability to grow and would adversely affect our results of operations. Additionally, if we do not maintain our current client network, or if we have to renegotiate existing contracts, our business, financial condition and results of operations may be harmed.

Current wording

The success of our business and growth strategy depend upon our continued ability to maintain and expand a network of healthcare services clients, which also requires us to provide and develop new high-quality products and services that are helpful to our clients and used and positively received by patients. If we are unable to attract and retain healthcare services clients, including because we are unable to adapt to new industry standards in developing new solutions and services, it would have a material adverse effect on our business and ability to grow and would adversely affect our results of operations. Additionally, if we do not maintain our current client network, or if we have to renegotiate existing contracts on terms less favorable to us, our business, financial condition and results of operations may be harmed.

Previous wording

We believe demand for our products and services has been driven in large part by increasing patient responsibility, engagement and consumerism. Our ability to streamline the intake process and critical workflows in order to improve healthcare services organization, staff efficiency and patient engagement to allow for optimal allocation of resources will be critical to our business. Our success also depends on the ability of our solutions to increase patient engagement, and our ability to demonstrate the value of our solutions to healthcare services clients, patients and life sciences companies. If our existing clients do not recognize or acknowledge the benefits of our solutions or our solutions do not drive patient engagement, then the market for our products and services might develop more slowly than we expect, which could adversely affect our operating results.

Current wording

We believe demand for our solutions and services has been driven in large part by increasing patient responsibility, engagement and consumerism. Our ability to streamline critical workflows in order to improve healthcare services clients’ operations and patient engagement to allow for optimal allocation of resources will be critical to our business. Our success also depends on the ability of our solutions to increase patient engagement, and our ability to demonstrate the value of our solutions to healthcare services clients, patients and life sciences companies. If our existing clients do not recognize or acknowledge the benefits of our solutions or our solutions do not drive patient engagement, then the market for our products and services might develop more slowly than we expect, which could adversely affect our operating results.

Previous wording

In addition, as we and the EHR and PM solutions with which we integrate, grow and expand product offerings, the EHR and PM solutions with which we integrate could offer more competitive services or make it more cost prohibitive to do business with them. Some of these EHR and PM systems offer, or may begin to offer, services, including patient intake and engagement services, payment processing tools and direct patient communication services, in the same or similar manner as we do. Although there are many potential opportunities for, and applications of, these services, these EHR and PM systems may seek opportunities or target new clients in areas that may overlap with those that we have chosen to pursue. Such competition from these EHR and PM systems may adversely affect our business, market share and results from operations.

Current wording

In addition, as we and the EHR and PM solutions with which we integrate, grow and expand product offerings, the EHR and PM solutions with which we integrate could offer more competitive services or make it more cost prohibitive to do business with them. Some of these EHR and PM systems offer, or may begin to offer, services, including patient intake and engagement services, payment processing tools, patient financing options and direct patient communication services, in the same or similar manner as we do. Although there are many potential opportunities for, and applications of, these services, these EHR and PM systems may seek opportunities or target new clients in areas that may overlap with those that we have chosen to pursue. Such competition from these EHR and PM systems may adversely affect our business, market share and results from operations.

Previous wording

We compete on the basis of several factors. Some of our competitors have greater name recognition, longer operating histories and significantly greater resources than we do. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards or client requirements or provide faster implementations. As a result, even if our services are more effective than the products and services that our competitors offer, potential customers might select competitive products and services in lieu of purchasing our services. In addition, current and potential competitors have established, and may in the future establish, cooperative relationships with vendors of complementary products, technologies or services to increase the availability of their products to the marketplace. Accordingly, new competitors or providers of EHR and PM solutions may emerge that have greater market share, larger client bases, more widely adopted proprietary technologies, greater marketing expertise, greater financial resources and larger sales forces than we have, which could put us at a competitive disadvantage. We also may be subject to pricing pressures as a result of, among other things, competition within the industry, consolidation of healthcare industry participants, practices of managed care organizations, government action and financial stress experienced by our clients. If our pricing experiences significant downward pressure, our business will be less profitable and our results of operations will be adversely affected. We cannot be certain that we will be able to retain our current client base in this competitive environment. If we do not retain current clients or expand our client base, or if we have to renegotiate existing contracts, our business, financial condition and results of operations will be harmed. Moreover, we expect that competition will continue to increase as a result of consolidation in both the healthcare information technology and healthcare industries. If one or more of our competitors or potential competitors were to merge or partner with another of our competitors, the change in the competitive landscape could also adversely affect our ability to compete effectively and could harm our business, financial condition and results of operations.

Current wording

We compete on the basis of several factors. Some of our competitors have greater name recognition, longer operating histories and significantly greater resources than we do. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies (including evolving AI technologies), standards or client requirements or provide faster implementations. Additionally, AI technologies may make it easier for competitors to enter our market due to lower up-front costs. As a result, even if our solutions are more effective than the products and services that our competitors offer, potential clients might select competitive products and services in lieu of purchasing our solutions. In addition, current and potential competitors have established, and may in the future establish, cooperative relationships with vendors of complementary products, technologies or services to increase the availability of their products to the marketplace. Accordingly, new competitors or providers of EHR and PM solutions may emerge that have greater market share, larger client bases, more widely adopted proprietary technologies, greater marketing expertise, new or better AI technologies, greater financial resources and larger sales forces than we have, which could put us at a competitive disadvantage and could render our existing or future products less competitive or obsolete. We also may be subject to pricing pressures as a result of, among other things, competition within the industry, consolidation of healthcare industry participants, practices of managed care organizations, government action and financial stress experienced by our clients. If our pricing experiences significant downward pressure, our business will be less profitable and our results of operations will be adversely affected. We cannot be certain that we will be able to retain our current client base in this competitive environment. If we do not retain current clients or expand our client base, or if we have to renegotiate existing contracts unfavorably, our business, financial condition and results of operations will be harmed. Moreover, we expect that competition will continue to increase as a result of consolidation in both the healthcare information technology and healthcare industries. If one or more of our competitors or potential competitors were to merge or partner with another of our competitors, the change in the competitive landscape could also adversely affect our ability to compete effectively and could harm our business, financial condition and results of operations.

Previous wording

In addition, to manage our current and anticipated future growth effectively, we must continue to maintain and enhance our IT infrastructure, financial and accounting systems and controls and continue to build our qualified work force in key areas of our company. A key element of how we manage our growth is our ability to scale our capabilities and satisfactorily implement solutions for our clients’ needs. Our healthcare services clients often require specific features or functions unique to their organizational structure, which, at a time of significant growth or during periods of high demand, may strain our implementation capacity and hinder our ability to successfully implement our solutions for our clients in a timely manner. If we are unable to address the needs of our healthcare services clients or our healthcare services clients are unsatisfied with the quality of our solutions or our services due to our inability to manage our rapid growth, they may not renew their contracts, seek to cancel or terminate their relationship with us or renew on less favorable terms, any of which could adversely affect our business.

Current wording

In addition, to manage our current and anticipated future growth effectively, we must continue to maintain and enhance our IT infrastructure, financial and accounting systems and controls and continue to build our qualified workforce in key areas of our company. A key element of how we manage our growth is our ability to scale our capabilities and satisfactorily implement solutions for our clients’ needs. Our healthcare services clients often require specific features or functions unique to their organizational structure, which, at a time of significant growth or during periods of high demand, may strain our implementation capacity and hinder our ability to successfully implement our solutions for our clients in a timely manner. If we are unable to address the needs of our healthcare services clients or our healthcare services clients are unsatisfied with the quality of our solutions or our services due to our inability to manage our rapid growth, they may not renew their contracts, seek to cancel or terminate their relationship with us or renew on less favorable terms, any of which could adversely affect our business. Additionally, our ability to grow our financing business is in part dependent on our access to capital for the securitization of cardholder receivables. If we are unable to maintain or expand our access to capital on favorable terms or at all, we may be unable to offer our financing solutions to a greater number of existing or potential healthcare services clients.

Previous wording

•the timing, size and integration success of recent and potential future acquisitions;

Current wording

•the timing, size and integration success of recent and potential future acquisitions, including the AccessOne Acquisition;

Previous wording

Privacy concerns, cyber-attacks, data breaches or cybersecurity incidents relating to our SaaS-based solutions could result in economic loss, damage to our reputation, deterring users from using our products, and exposure to legal penalties and liability.

Current wording

Privacy concerns, cyber-attacks, data breaches or cybersecurity incidents relating to our solutions could result in economic loss, damage to our reputation, deterrence of users from using our products, and exposure to legal penalties and liability.

Previous wording

We collect, process and store significant amounts of sensitive, confidential and proprietary information, including personally identifiable information, such as payment data and protected health information, of patients received in connection with the utilization of our solutions. Attacks on information technology systems are increasing in their frequency, levels of persistence, sophistication and intensity, they are being conducted by increasingly sophisticated and organized groups and individuals with a wide range of motives and expertise, and they may remain undetected for an extended period of time. Like other companies in our industry, we, and our third party vendors, have experienced threats and cybersecurity incidents relating to our information technology systems and infrastructure. For example, in 2024, we experienced a cybersecurity incident which impacted our ConnectOnCall product. Although we do not believe this, or any other cybersecurity incident, has had a material impact on our business to date, any interruption in our business or disclosure, loss, processing or other compromise of personal information or individually identifiable health information (violating certain privacy laws such as HIPAA) or confidential information, or event that jeopardizes the confidentiality, integrity, or availability of our solutions, could result in a material disruption to our solutions and our business operations, require us to expend significant resources and subject us to litigation, fines and penalties. In addition to extracting sensitive information, such attacks could include the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering fraud (including phishing attacks), and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. While we aim to maintain a robust security program for all of our products to protect such data, techniques used to gain unauthorized access to data and systems, disable or degrade service, or sabotage systems, are constantly evolving, and may be the result of criminal groups, state sponsored or other malicious actors. We may be unable to anticipate such techniques or implement adequate preventative measures to avoid unauthorized access or other adverse impacts to such data or our systems.

Current wording

We collect, process and store significant amounts of sensitive, confidential and proprietary information, including personally identifiable information, such as payment data and protected health information, of patients received in connection with the utilization of our solutions. Attacks on information technology systems are increasing in their frequency, levels of persistence, sophistication and intensity, they are being conducted by increasingly sophisticated and organized groups and individuals with a wide range of motives and expertise, and they may remain undetected for an extended period of time. For instance, as AI technologies, including generative AI models, develop rapidly, threat actors are using these technologies to create sophisticated new attack methods that are increasingly automated, targeted, coordinated and difficult to defend against. Like other companies in our industry, we, and our third-party vendors, have experienced threats and cybersecurity incidents relating to our information technology systems and infrastructure. For example, in 2024, we experienced a cybersecurity incident which impacted our ConnectOnCall product. Although we do not believe this, or any other cybersecurity incident, has had a material impact on our business to date, any interruption in our business or disclosure, loss, processing or other compromise of personal information or individually identifiable health information (implicating certain privacy laws such as the federal Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information and Technology for Economic and Clinical Health Act (“HITECH Act”) and their implementing regulations, collectively referred to as “HIPAA”) or confidential information, or event that jeopardizes the confidentiality, integrity, or availability of our solutions, could result in a material disruption to our solutions and our business operations, require us to expend significant resources and subject us to litigation, fines and penalties. In addition to extracting sensitive information, such attacks could include the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering fraud (including phishing attacks), and other means to affect service reliability and threaten the confidentiality, integrity and availability of information. While we maintain a security program that is designed to protect our products and such data, techniques used to gain unauthorized access to data and systems, disable or degrade service, or sabotage systems, are constantly evolving, and may be the result of criminal groups, state sponsored or other malicious actors. We may be unable to anticipate such techniques or implement adequate preventative measures to avoid unauthorized access or other adverse impacts to such data or our systems.

Previous wording

In addition, some of our third-party service providers and partners, such as Change Healthcare and other clearinghouses, also collect and/or store our sensitive information and our clients' data on our behalf, and these service providers and partners have in the past, and may in the future be subject to similar threats of cyber-attacks and other malicious internet-based activities, which could also expose us to risk of loss, litigation, and potential liability. Even though we may have contractual protections with such vendors, contractors, or other organizations, notifications and follow-up actions related to a cybersecurity incident or data breach could impact our reputation, cause us to incur significant costs, including legal expenses, harm customer confidence, expose us to government enforcement action, hurt our expansion into new markets, cause us to incur remediation costs, or cause us to lose existing customers. The risk of state-supported and geopolitical-related cyber-attacks may increase in connection with political unrest or wars and any related political or economic responses and counter-responses. We may not discover all such cybersecurity incidents, data breaches, or other activity or be able to respond or otherwise address them promptly, in sufficient respects or at all.

Current wording

In addition, some of our third-party service providers and partners, such as Change Healthcare and other clearinghouses or vendors, also collect and/or store our sensitive information and our clients' data on our behalf, and these service providers and partners have in the past, and may in the future be subject to similar threats of cyber-attacks and other malicious internet-based activities, which could also expose us to risk of loss, litigation, and potential liability. Even though we may have contractual protections with such vendors, contractors, or other organizations, notifications and follow-up actions related to a cybersecurity incident or data breach could impact our reputation, cause us to incur significant costs, including legal expenses, harm client confidence, expose us to government enforcement action, hurt our expansion into new markets, cause us to incur remediation costs, or cause us to lose existing clients. The risk of state-supported and geopolitical-related cyber-attacks may increase in connection with political unrest or wars and any related political or economic responses and counter-responses. We may not discover all such cybersecurity incidents, data breaches, or other activity or be able to respond or otherwise address them promptly, in sufficient respects or at all.

Previous wording

We are subject to state laws requiring notification of affected individuals and state regulators in the event of a breach of personal information. Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our business and/or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information. Patients about whom we obtain health information, as well as the healthcare services clients who share this information with us, may have statutory or contractual rights that limit our ability to use and disclose the information. We may be required to expend significant capital and other resources to ensure ongoing compliance with applicable privacy and data security laws. Claims that we have violated individuals’ privacy rights, violated applicable privacy laws and regulations or breached our contractual obligations, even if we are not found liable, could be expensive and time-consuming to defend and could result in adverse publicity that could harm our business. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our privacy and data security obligations. Further, although we maintain cyber liability insurance, this insurance may not provide adequate coverage against potential liabilities related to any experienced cybersecurity incident or breach.

Current wording

We are subject to state laws requiring notification of affected individuals and state regulators in the event of a cybersecurity incident or breach of personal information. Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our business and/or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information. Patients about whom we obtain health information, as well as the healthcare services clients who share this information with us, may have statutory or contractual rights that limit our ability to use and disclose the information. Additionally, our subsidiary, AccessOne MedCard, Inc. (“AccessOne MedCard”) is subject to regulation and supervision of cybersecurity and data privacy matters by state and federal regulators, including state financial regulatory agencies, the FTC and the CFPB, including the NYDFS Part 500 Requirements, and the GLBA and Regulation P and the FTC Safeguards Rule, as well as the FTC’s Identity Theft Red Flags Rule under the Fair Credit Reporting Act, which, among other things, require financial institutions to explain their information sharing practices to their customers, safeguard sensitive data and maintain an identity theft prevention program. We may be required to expend significant capital and other resources to ensure ongoing compliance with applicable privacy and data security laws and regulatory requirements. Claims that we have violated individuals’ privacy rights, violated applicable privacy laws and regulations or breached our contractual obligations, even if we are not found liable, could be expensive and time-consuming to defend and could result in adverse publicity that could harm our business, or enforcement and other supervisory actions. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our privacy and data security obligations. Further, although we maintain cyber liability insurance, this insurance may not provide adequate coverage against potential liabilities related to any experienced cybersecurity incident or breach.

Previous wording

Like all internet services, our service is vulnerable to software bugs, computer viruses, internet worms, break-ins, phishing attacks, attempts to overload servers with denial-of-service, wrongful or inadvertent conduct by insider employees or vendors, or other attacks or similar disruptions from unauthorized use of our and third-party computer systems, any of which could lead to system interruptions, delays, or shutdowns, causing loss of critical data or the unauthorized access of data. Though it is difficult to determine what, if any, harm may directly result from any specific interruption or attack, any failure to maintain performance, reliability, security and availability of our products, or failure to prevent software bugs, to the satisfaction of our clients or the health and safety of their patients, such events may harm our reputation and our ability to retain existing clients, and negatively affect our clients and their patients. We have in place systems and processes that are designed to protect our data, prevent data loss, disable undesirable accounts and activities on our platform and prevent or detect cybersecurity incidents or data breaches, however, we cannot assure you that such measures will provide absolute security.

Current wording

Like all internet services, our service, and the services of our third-party service providers, are vulnerable to software bugs, computer viruses, internet worms, break-ins, phishing attacks, attempts to overload servers with denial-of-service, wrongful or inadvertent conduct by insider employees or vendors, or other attacks or similar disruptions from unauthorized use of our and third-party computer systems, any of which could lead to system interruptions, delays, or shutdowns, causing loss of critical data or the unauthorized access of data. Though it is difficult to determine what, if any, harm may directly result from any specific interruption or attack, any failure to maintain performance, reliability, security and availability of our products, or failure to prevent software bugs, to the satisfaction of our clients or the health and safety of their patients, may harm our reputation and our ability to retain existing clients, and negatively affect our clients and their patients. We have in place systems and processes that are designed to protect our data, prevent data loss, disable undesirable accounts and activities on our platform and prevent or detect cybersecurity incidents or data breaches, however, we cannot assure you that such measures will provide absolute security.

Previous wording

Further, the security systems in place at our employees’ and service providers’ offices and homes may be less secure than those used in a corporate office, and while we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from their offices, homes and other remote locations, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss, and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will be completely effective or that we will not encounter risks associated with employees and service providers accessing company data and systems remotely. If an actual or perceived cybersecurity incident or data breach occurs to our systems or a third-party’s systems, we also could be required to expend significant resources to mitigate the breach of security, pay any applicable fines and address matters related to any such breach, including notifying users or regulators, defend against claims related to the breach and address reputational harm.

Current wording

Further, the security systems in place at our employees’ and service providers’ offices and homes may be less secure than those used in a corporate office, and while we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from their offices, homes and other remote locations, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss, and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will be completely effective or that we will not encounter risks associated with employees and service providers accessing company data and systems remotely. If an actual or perceived cybersecurity incident or data breach occurs to our systems or a third-party’s systems, such as one that affected our ConnectOnCall product in 2024, we also could be required to expend significant resources to mitigate the breach of security, pay any applicable fines and address matters related to any such breach, including notifying users or regulators, defend against claims related to the breach and address reputational harm.

Previous wording

We have a subsidiary in India that performs a number of functions that were previously performed by outside contractors. While we believe our Indian operations are advantageous to our business, they also create risks that we must effectively manage. Conducting business abroad subjects us to increased legal and regulatory compliance and oversight. A failure to comply with applicable laws and regulations could result in regulatory enforcement actions, as well as substantial civil and criminal penalties assessed against us and our employees. The management of our Indian operations has, and will continue to, require significant management attention and financial resources that could adversely affect our operating performance. Wages in India are increasing at a faster rate than those in many countries, including the United States. In addition, with the significant increase in the numbers of foreign businesses that have established operations in India, the competition to attract and retain employees there has increased significantly. As a result, we may be unable to cost-effectively retain our current employee base in India or hire additional new talent. In addition, India has experienced significant inflation, low growth in gross domestic product and shortages of foreign exchange. India also has experienced civil unrest and terrorism and, in the past, has been involved in conflicts with neighboring countries. The occurrence of any of these circumstances could result in disruptions to our India operations, which, if continued for an extended period of time, could have a material adverse effect on our business.

Current wording

We have a subsidiary in India that performs a number of functions that were previously performed by outside contractors. While we believe our Indian operations are advantageous to our business, they also create risks that we must effectively manage. Conducting business abroad subjects us to increased legal and regulatory compliance and oversight. A failure to comply with applicable laws and regulations could result in regulatory enforcement actions, as well as substantial civil and criminal penalties assessed against us and our employees. The management of our Indian operations has, and will continue to, require significant management attention and financial resources that could adversely affect our operating performance. Wages in India are increasing at a faster rate than those in many countries, including the United States. In addition, with the significant increase in the numbers of foreign businesses that have established operations in India, the competition to attract and retain employees there has increased significantly. As a result, we may be unable to cost-effectively retain our current employee base in India or hire additional new talent. In addition, India has experienced, and may in the future experience, significant inflation, low growth in gross domestic product and shortages of foreign exchange. India also has experienced civil unrest and terrorism and, in the past, has been involved in conflicts with neighboring countries which may escalate in the future. The occurrence of any of these circumstances could result in disruptions to our India operations, which, if continued for an extended period of time, could have a material adverse effect on our business.

Previous wording

Our operating expenses incurred outside the United States and denominated in foreign currencies will increase as we expand our operations in India. Transactions denominated in foreign currencies are subject to fluctuations due to changes in foreign currency exchange rates. If we are not able to successfully hedge against the risks associated with foreign currency fluctuations, our financial condition and operating results could be adversely affected.

Current wording

Our operating expenses incurred outside the United States and denominated in foreign currencies would increase to the extent we expand our operations in India. Transactions denominated in foreign currencies are subject to fluctuations due to changes in foreign currency exchange rates. If we are not able to successfully hedge against the risks associated with foreign currency fluctuations, our financial condition and operating results could be adversely affected.

Previous wording

We devote significant resources to establish relationships with new clients and deepen relationships with existing clients. Our efforts involve educating our clients and patients about the use, technical capabilities and benefits of our products and services. We do not provide access to our solutions and do not charge fees during this initial sales period. For clients that decide to enter into a contract with us, most of these contracts may provide for a preliminary trial period where a subset of the client’s healthcare services locations is granted access to our solutions. Following any such trial period, we aim to increase the number of the client’s healthcare services locations that utilize our solutions. Accordingly, our operating results depend in substantial part on our ability to deliver a successful client and patient experience and persuade our clients and patients to grow their relationship with us over time. If we are unable to do so, we are unlikely to recover these costs and our operating results may suffer.

Current wording

We devote significant resources to establish relationships with new clients and deepen relationships with existing clients. Our efforts involve educating our clients and patients about the use, technical capabilities and benefits of our products and services. We do not provide access to our solutions and do not charge fees during this initial sales period. For healthcare services clients that decide to enter into a software subscription contract with us, most of these contracts may provide for a preliminary trial period where a subset of the client’s healthcare services locations is granted access to our solutions. Following any such trial period, we aim to increase the number of the client’s healthcare services locations that utilize our solutions. Accordingly, our operating results depend in substantial part on our ability to deliver a successful client and patient experience and persuade our clients to continue and grow their relationship with us over time. If we are unable to do so, we are unlikely to recover these costs and our operating results may suffer.

Previous wording

The sales cycle for our services can be variable, typically ranging from three to six months from initial contact to contract execution. During the sales cycle, we expend time and resources, and we do not recognize any revenue to offset such expenditures. Our implementation cycle is also variable, typically ranging from one to 24 months from contract execution to completion of implementation. The variability of our sales and implementation cycle is dependent on numerous factors, including the discretionary nature of potential clients' purchasing and budget decisions and the size and complexity of the applicable client. Some of our new client set-up projects are complex and require a considerable time commitment and significant implementation work, including educating prospective clients about the uses and benefits of our solutions. Each customer’s situation is different, and unanticipated difficulties and delays may arise as a result of failure by us or by the client to meet our respective implementation responsibilities. During the implementation cycle, we expend substantial time, effort and financial resources implementing our service, but accounting principles do not allow us to recognize the resulting revenue until the service has been implemented, at which time we begin recognition of subscription and related implementation revenue over the life of the contract. This could harm our future operating results. If implementation periods are extended, our revenue cycle will be delayed and our financial condition may be adversely affected. In addition, cancellation of any implementation after it has begun may involve loss to us of time, effort and expenses invested in the cancelled implementation process and lost opportunity for implementing paying clients in that same period of time.

Current wording

The sales cycle for our solutions can be variable, typically ranging from three to twelve months from initial contact to contract execution for healthcare services clients, and up to 18 months for financing contracts with large health systems. Network Solutions sales cycles align with annual life sciences marketing budget cycles, with contracts typically negotiated during the fourth quarter of the calendar year. During the sales cycle, we expend time and resources, and we do not recognize any revenue to offset such expenditures. Our implementation cycle is also variable, typically ranging from one to 24 months from contract execution to completion of implementation. The variability of our sales and implementation cycle is dependent on numerous factors, including the discretionary nature of potential clients' purchasing and budget decisions and the size and complexity of the applicable client. Some of our new client set-up projects are complex and require a considerable time commitment and significant implementation work, including educating prospective clients about the uses and benefits of our solutions. Each client’s situation is different, and unanticipated difficulties and delays may arise as a result of failure by us or by the client to meet our respective implementation responsibilities. During the implementation cycle, we expend substantial time, effort and financial resources implementing our service, but accounting principles do not allow us to recognize the resulting revenue until the service has been implemented, at which time we begin recognition of subscription and related implementation revenue over the life of the contract. This could harm our future operating results. If implementation periods are extended, our revenue cycle will be delayed and our financial condition may be adversely affected. In addition, cancellation of any implementation after it has begun may involve loss to us of time, effort and expenses invested in the cancelled implementation process and lost opportunity for implementing paying clients in that same period of time.

Previous wording

These factors may contribute to substantial fluctuations in our quarterly operating results, particularly in the near term and during any period in which our sales volume is relatively low. As a result, in future quarters our operating results could fall below the expectations of securities analysts or investors, in which event our stock price would likely decrease.

Current wording

These factors may contribute to substantial fluctuations in our quarterly operating results, particularly during any period in which our sales volume is relatively low. As a result, in future quarters our operating results could fall below the expectations of securities analysts or investors, in which event our stock price would likely decrease.

Previous wording

We enter into agreements with our healthcare services clients, under which a significant portion of our fees are variable, including fees which are dependent upon the number of add-on features subscribed for by our clients and the number of patients utilizing our payment processing tools. If there is a general reduction in spending by healthcare services organizations on healthcare technology solutions, it may result in a reduction in fees generated from our healthcare services clients or a reduction in the number of add-on features subscribed for by our healthcare services clients. This could lead to a decrease in our revenue, which could harm our business, financial condition and results of operations.

Current wording

We primarily generate three revenue streams. For example, we enter into agreements with our healthcare services clients, under which a significant portion of our fees are variable, including fees which are dependent upon the number of add-on features subscribed for by our clients and the number of patients utilizing our payment processing tools or financing services offered by our subsidiary, AccessOne MedCard. If there is a general reduction in spending by healthcare services organizations on healthcare technology solutions, it may result in a reduction in fees generated from our healthcare services clients or a reduction in the number of add-on features subscribed for by our healthcare services clients. This could lead to a decrease in our revenue, which could harm our business, financial condition and results of operations.

Previous wording

In addition, the number of patients utilizing our payment processing tools, and the amounts those patients pay directly to our healthcare services clients for services, is often impacted by factors outside of our control. Accordingly, revenue under these agreements can be uncertain and unpredictable. If the number of patients utilizing our payment systems, or the aggregate amounts paid by such patients directly to our healthcare services clients through our solutions, were to be reduced by a material amount, such decrease would lead to a decrease in our revenue, which could harm our business, financial condition and results of operations.

Current wording

In addition, we generate revenue from payment processing fees based on patient payment volume and from financing fees that primarily consist of finance charges and servicing fees on cardholder receivables. The number of patients utilizing our payment processing tools or financing options offered by our subsidiary, AccessOne MedCard, and the amounts those patients pay directly to our healthcare services clients for services or choose to finance with extended payment plans, are often impacted by factors outside of our control. For example, macroeconomic conditions and changes in healthcare policy may decrease the number of insured patients and result in reduced healthcare utilization and spending. In addition to economic trends impacting overall healthcare spending, the CFPB and various state attorneys general, state legislatures and state agencies have increased scrutiny of third-party providers of financing for medical services. State governments or specific healthcare institutions may review and amend criteria for charity care eligibility and may enact debt mitigation policies that expand the pool of patients qualifying for free or discounted care, reducing the amount of patient payments processed through our solutions or the demand for extended financing options offered by AccessOne MedCard. Accordingly, revenue under these agreements can be uncertain and unpredictable. If the number of patients utilizing our payment systems, or the aggregate amounts paid by such patients directly to our healthcare services clients through our solutions or financed through AccessOne MedCard, were to be reduced by a material amount, such decrease would lead to a decrease in our revenue, which could harm our business, financial condition and results of operations.

Previous wording

We also generate Network solutions revenue through fees charged to our life sciences and other clients by delivering direct communications to help activate, engage and educate patients who provide consent for the delivery of such communications about topics critical to their health. The growth of our revenue stream from life sciences and other clients is driven, in part, by our ability to grow our network of healthcare services clients and available population of patients to engage, the desirability of optional communications to patients, the number of newly approved drugs, the success of newly launched drugs, and the continued success of certain types of drugs, each of which is impacted by factors outside of our control. If there is a reduction in newly approved drugs, newly launched drugs are not successful, or certain drugs’ popularity decreases, this could negatively affect the ability of our life sciences clients to deliver relevant messages to patients who would have otherwise been candidates to receive such drugs. A reduction in the available population of patients to engage or a lack of relevant content could lead to a decrease in our Network solutions revenue, which could harm our business, financial condition and results of operations.

Current wording

We also generate network solutions revenue through fees charged to life sciences companies and other clients by delivering direct communications to help activate, engage and educate patients who provide consent for the delivery of such communications about topics critical to their health. The growth of our revenue stream from life sciences companies and other clients is driven, in part, by our ability to grow our network of healthcare services clients and available population of patients to engage, the desirability of optional communications to patients, the number of newly approved drugs, the success of newly launched drugs, and the continued success of certain types of drugs, each of which is impacted by factors outside of our control. For example, governmental actions taken by the U.S. federal government, such as changes in the leadership of the FDA, mass layoffs within the federal government, and executive orders, legislation or rulemaking initiatives related to drug pricing and pharmaceutical marketing and advertising, have affected the ability of life sciences companies to successfully develop and market drugs. If there is a reduction or delay in newly approved drugs, newly launched drugs are not successful, certain drugs’ popularity or profitability decreases (including as a result of loss of patent exclusivity), or the ability to engage in drug marketing and advertising is restricted or limited, this could negatively affect the ability of our life sciences clients to deliver relevant messages to patients. As a result, our life sciences clients have taken, and may continue to take, actions such as decreasing marketing budgets, redirecting spend to other marketing channels, seeking more flexible contract terms and increasing expectations regarding campaign performance. Any of these factors could lead to a decrease in our network solutions revenue, which could harm our business, financial condition and results of operations.

Previous wording

We depend on our existing clients’ satisfaction with our products and services. We expect to derive a significant portion of our revenue from renewal of existing clients’ contracts and sales of additional applications and services to existing clients. As part of our growth strategy, we have focused on expanding our services amongst current clients. As a result, achieving a high client retention rate and selling additional applications and services to existing clients are critical to our future business, revenue growth and results of operations. We also believe that maintaining and enhancing our reputation and brand recognition is critical to our relationships with existing clients and the patients that they serve and to our ability to attract new clients. The promotion of our brand may require us to make substantial investments, and we anticipate that, as our market becomes increasingly competitive, these marketing initiatives may become increasingly difficult and expensive. In addition, the loss or dissatisfaction of any client could substantially harm our brand and reputation, inhibit widespread adoption of our solutions and impair our ability to attract new clients.

Current wording

We depend on our existing clients’ satisfaction with our products and services. We expect to derive a significant portion of our revenue from renewal of existing clients’ contracts and sales of additional solutions and services to existing clients. As part of our growth strategy, we have focused on expanding our services amongst current clients. As a result, achieving a high client retention rate and selling additional solutions and services to existing clients are critical to our future business, revenue growth and results of operations. We also believe that maintaining and enhancing our reputation and brand recognition is critical to our relationships with existing clients and the patients that they serve and to our ability to attract new clients. The promotion of our brand may require us to make substantial investments, and we anticipate that, as our market becomes increasingly competitive, these marketing initiatives may become increasingly difficult and expensive. In addition, the loss or dissatisfaction of any client could substantially harm our brand and reputation, inhibit widespread adoption of our solutions and impair our ability to attract new clients.

Previous wording

•patient acceptance and adoption of services and utilization of our payment processing tools;

Current wording

•patient acceptance and adoption of services and utilization of our payment processing tools and payment plans;

Previous wording

•our ability to develop and sell complimentary applications and services;

Current wording

•our ability to develop and sell complimentary solutions and services;

Previous wording

We typically enter into annual contracts with our clients, which have a stated initial term of one year and automatically renew for one-year subsequent terms. Our clients have no obligation to renew their subscriptions for our solutions after the initial term expires. In addition, our clients may negotiate terms less advantageous to us upon renewal, which may reduce our revenue from these clients and may decrease our annual revenue. If our clients fail to renew their contracts, renew their contracts upon less favorable terms or at lower fee levels or fail to purchase new products and services from us, our revenue may decline or our future revenue growth may be constrained. Should any of our clients terminate their relationship with us after implementation has begun, we would not only lose our time, effort and resources invested in that implementation, but we would also have lost the opportunity to leverage those resources to build a relationship with other clients over that same period of time.

Current wording

We typically enter into annual contracts for our software solutions with our healthcare services clients, which have a stated initial term of one year and automatically renew for one-year subsequent terms. For most of our software solutions, our clients have no obligation to renew their subscriptions after the initial term expires. In addition, we typically enter into annual contracts with our network solutions clients with a term of one year, which do not auto-renew and must be renegotiated annually. Our clients may negotiate terms less advantageous to us upon renewal, which may reduce our revenue from these clients and may decrease our annual revenue. Additionally, our financing contracts with healthcare services clients are “evergreen” contracts that allow termination for convenience. If our clients fail to renew their contracts, renew their contracts upon less favorable terms or at lower fee levels, terminate their contracts or fail to purchase new products and services from us, our revenue may decline or our future revenue growth may be constrained. Should any of our clients terminate their relationship with us after implementation has begun, we would not only lose our time, effort and resources invested in that implementation, but we would also have lost the opportunity to leverage those resources to build a relationship with other clients over that same period of time.

Previous wording

Market estimates and growth forecasts that we disclose are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts relating to the size and expected growth of the markets for our services may prove to be inaccurate. These estimates and forecasts may be impacted by economic uncertainty that is outside our control, including international conflicts that may impact international trade and global economic performance and other macroeconomic trends, such as international and domestic supply chain risks, inflationary pressure, interest rate increases and declines in consumer confidence that impact our customers.

Current wording

Market estimates and growth forecasts that we disclose are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts relating to the size and expected growth of the markets for our services may prove to be inaccurate. These estimates and forecasts may be impacted by economic uncertainty that is outside our control, including international conflicts that may impact international trade and global economic performance and other macroeconomic trends, such as tariffs and other trade restrictions and trade protection measures, capital market disruptions, changes in governmental agencies, economic sanctions, economic slowdowns or recessions, international and domestic supply chain risks, inflationary pressure, interest rate increases and declines in consumer confidence that impact our clients.

Previous wording

The principal assumptions relating to our market opportunity include the number of healthcare services organizations currently taking appointments, the amount of annual out of pocket consumer spend for healthcare-related services, and the amount of annual spend by life sciences companies and other organizations on direct communications with patients at the point of care. Our market opportunity is also based on the assumption that the strategic approach that Phreesia enables for our potential clients will be more attractive in creating efficiencies in patient care than competing solutions. If these assumptions prove inaccurate, our business, financial condition and results of operations could be adversely affected.

Current wording

The principal assumptions relating to our market opportunity include the number of healthcare services organizations currently taking appointments, the amount of annual out of pocket consumer spend and out of pocket financed consumer spend for healthcare-related services, and the amount of annual spend by life sciences companies and other organizations on direct communications to patients at the point of care and to healthcare providers. Our market opportunity is also based on the assumption that the strategic approach that Phreesia enables for our potential clients will be more attractive in creating efficiencies in patient care than competing solutions. If these assumptions prove inaccurate, our business, financial condition and results of operations could be adversely affected.

Previous wording

Our clients utilize a variety of data formats, applications and infrastructure and we must support our clients’ data formats. Furthermore, the healthcare industry has shifted towards digitalized record keeping, and accordingly, many of our healthcare services clients have developed their own software, or utilize third-party software, for practice management and secure storage of electronic medical records. Our ability to develop and maintain logic-based and scalable technology for patient intake management and engagement and payment processing that successfully integrates with our clients’ software systems for practice management and storage of electronic medical records is critical. If we do not currently support a client’s required data format or appropriately integrate with clients’ systems, then we must configure our solutions to do so, which could increase our expenses. Additionally, we do not control our clients’ implementation schedules. As a result, if our clients do not allocate the internal resources necessary to meet their implementation responsibilities or if we face unanticipated implementation difficulties, the implementation may be delayed. If the client implementation process is not executed successfully or if execution is delayed, we could incur significant costs, clients could become dissatisfied and decide not to increase utilization of our services or not to implement our solutions beyond an initial period prior to their term commitment or, in some cases, revenue recognition could be delayed. In addition, competitors with more efficient operating models with lower implementation costs could jeopardize our client relationships.

Current wording

Our clients utilize a variety of data formats, applications and infrastructure and we must support our clients’ data formats. Furthermore, the healthcare industry has shifted towards digitalized record keeping, and accordingly, many of our healthcare services clients have developed their own software, or utilize third-party software, for practice management and secure storage of electronic medical records. Our ability to develop and maintain logic-based and scalable technology for patient intake management and engagement, payment processing and financing that successfully integrates with our clients’ software systems for practice management and storage of electronic medical records is critical. If we do not currently support a client’s required data format or appropriately integrate with clients’ systems, then we must configure our solutions to do so, which could increase our expenses. Additionally, we do not control our clients’ implementation schedules. As a result, if our clients do not allocate the internal resources necessary to meet their implementation responsibilities or if we face unanticipated implementation difficulties, the implementation may be delayed. If the client implementation process is not executed successfully or if execution is delayed, we could incur significant costs, clients could become dissatisfied and decide not to increase utilization of our services or not to implement our solutions beyond an initial period prior to their term commitment or, in some cases, revenue recognition could be delayed. In addition, competitors with more efficient operating models with lower implementation costs could jeopardize our client relationships.

Previous wording

We have experienced net losses in the past and we may not achieve positive net income in the future.

Current wording

We have experienced net losses in the past and we may not maintain positive net income in the future.

Previous wording

We have incurred significant operating losses since our inception. For the years ended January 31, 2025 and January 31, 2024, we had net losses of $58.5 million and $136.9 million, respectively, and losses from operations of $58.1 million and $136.5 million, respectively. Our operating expenses may increase in the foreseeable future as we continue to invest to grow our business and build relationships with our clients and partners, develop new solutions and operate as a public company. In addition, to the extent we are successful in increasing our client base, we could incur increased losses because significant costs associated with entering into client agreements are generally incurred up front, while revenue is generally recognized ratably over the term of the agreement. As a result, we may need to raise additional capital through equity and debt financings in order to fund our operations, which may not be available to us on favorable terms or at all. If we are unable to effectively manage these risks and difficulties as we encounter them or effectively access the capital markets, our business, financial condition and results of operations may suffer.

Current wording

We have incurred significant operating losses for most of our history. For the years ended January 31, 2026 and January 31, 2025, we had net income of $2.3 million and net loss of $58.5 million, respectively, and losses from operations of $6.6 million and $58.1 million, respectively. Our operating expenses may increase in the foreseeable future as we continue to invest to grow our business, including through acquisitions, and build relationships with our clients and partners, develop new solutions and operate as a public company. In addition, to the extent we are successful in increasing our client base, we could incur increased losses because significant costs associated with entering into client agreements are generally incurred up front, while revenue is generally recognized ratably over the term of the agreement. As a result, we may need to raise additional capital through equity and debt financings in order to fund our operations, which may not be available to us on favorable terms or at all. If we are unable to effectively manage these risks and difficulties as we encounter them or effectively access the capital markets, our business, financial condition and results of operations may suffer.

Previous wording

Our success depends, in part, on the skills, working relationships and continued services of our founders, Chaim Indig (Chief Executive Officer) and Evan Roberts (Chief Operating Officer), and our senior management team and other key personnel. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives, which could disrupt our business.

Current wording

Our success depends, in part, on the skills, working relationships and continued services of our founders, Chaim Indig (Chief Executive Officer) and Evan Roberts (President, Provider Solutions), and our senior management team and other key personnel. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives, which could disrupt our business.

Previous wording

We have in the past acquired, and we may continue to acquire or invest in, businesses, products or technologies that we believe could complement or expand our products and services, enhance our market coverage or technical capabilities or otherwise offer growth opportunities. This may include acquiring or investing in companies, businesses, products or technologies that are tangential to our current business and/or in which we have limited or no prior operating experience.

Current wording

We have in the past acquired, and we may continue to acquire or invest in, businesses, products or technologies that we believe could complement or expand our products and services, enhance our market coverage or technical capabilities or otherwise offer growth opportunities, such as the AccessOne Acquisition. This may include acquiring or investing in companies, businesses, products or technologies that are tangential to our current business and/or in which we have limited or no prior operating experience.

Previous wording

There are inherent risks in integrating and managing acquisitions, and the pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated. We cannot assure you that we will realize the anticipated benefits of these or any future acquisitions. We also may not achieve the anticipated benefits from an acquired business due to a number of factors, including, without limitation:

Current wording

There are inherent risks in integrating and managing acquisitions, and the pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated. We cannot assure you that we will realize the anticipated benefits of the AccessOne Acquisition or any future acquisitions. We also may not achieve the anticipated benefits from an acquired business due to a number of factors, including, without limitation:

Previous wording

•our inability to comply with the regulatory requirements applicable to the acquired business;

Current wording

•our inability to comply with legal and regulatory requirements applicable to the acquired business;

Previous wording

We believe there are significant seasonal factors that may cause us to record higher revenue in some quarters compared with others. We believe this variability is largely due to our focus on the healthcare industry. For example, with respect to our healthcare services clients, we receive a disproportionate increase in payment processing revenue from such clients during the first two to three months of the calendar year relative to the other months of the year, which is driven, in part, by the resetting of patient deductibles at the beginning of each calendar year. Sales for our life sciences solutions are also seasonal, primarily due to the annual spending patterns of our clients. This portion of our sales is usually the highest in the fourth quarter of each calendar year. While we believe we have visibility into the seasonality of our business, our rapid growth rate over the last several years may have made seasonal fluctuations more difficult to detect. If our rate of growth slows over time, seasonal or cyclical variations in our operations may become more pronounced, and our business, results of operations and financial position may be adversely affected.

Current wording

We believe there are significant seasonal factors that may cause us to record higher revenue in some quarters compared with others. We believe this variability is largely due to our focus on the healthcare industry. For example, with respect to our healthcare services clients, we receive a disproportionate increase in payment solutions revenue from such clients during the first two to three months of the calendar year relative to the other months of the year, which is driven, in part, by the resetting of patient deductibles at the beginning of each calendar year. Sales for our network solutions are also seasonal, primarily due to the annual spending patterns of our clients. This portion of our sales is usually the highest in the fourth quarter of each calendar year. While we believe we have visibility into the seasonality of our business, our rapid growth rate over the last several years may have made seasonal fluctuations more difficult to detect, and market dynamics affecting our network solutions clients have resulted in shorter visibility into spending commitments, particularly for the second half of the fiscal year. If our rate of growth slows over time, seasonal or cyclical variations in our operations may become more pronounced, and our business, results of operations and financial position may be adversely affected.

Previous wording

In addition, macroeconomic challenges (including changes in inflation and interest rates) and a tight labor market have adversely affected, and may continue to adversely affect, workforces, organizations, governments, clients, economies, and financial markets globally and have disrupted the normal operations of many businesses, including our business, making it potentially very difficult for our clients and us to accurately forecast and plan future business activities. These factors have and could further decrease healthcare industry spending, adversely affect demand for our products and services, impair the ability of our clients to pay for the products and services they have already purchased from us, cause one or more of our clients to file for bankruptcy protection or go out of business, cause one or more of our clients to fail to renew, terminate, or renegotiate their contracts, impact expected spending from new clients, negatively impact collections of accounts receivable, and harm our business, results of operations, and financial condition.

Current wording

In addition, macroeconomic challenges (including tariffs and other trade restrictions and changes in inflation and interest rates) and a tight labor market have adversely affected, and may continue to adversely affect, workforces, organizations, governments, clients, economies, and financial markets globally and have disrupted the normal operations of many businesses, including our business, making it potentially very difficult for our clients and us to accurately forecast and plan future business activities. Additionally, increasing scrutiny of various aspects of the healthcare industry, such as drug pricing and advertising practices, the treatment of medical debt and charity care thresholds, and healthcare coverage eligibility and reimbursement practices, have resulted in, and may result in, changes to U.S. healthcare policy. These factors have and could further decrease healthcare industry spending, adversely affect demand for our products and services, impair the ability of our clients to pay for the products and services they have already purchased from us, cause one or more of our clients to file for bankruptcy protection or go out of business, cause one or more of our clients to fail to renew, terminate, or renegotiate their contracts, impact expected spending from new clients, negatively impact collections of accounts receivable, and harm our business, results of operations, and financial condition.

Previous wording

We continue to invest in more robust technology and resources to manage our reporting requirements. Implementing the appropriate changes to our internal controls may distract our officers and employees, result in substantial costs and require significant time to complete. Any difficulties or delays in implementing these controls could impact our ability to timely report our financial results. For these reasons, we may encounter difficulties in the timely and accurate reporting of our financial results, which would impact our ability to provide our investors with information in a timely manner. As a result, our investors could lose confidence in our reported financial information, and our stock price could decline. In addition, any such changes do not guarantee that we will be effective in maintaining the adequacy of our internal controls, and any failure to maintain that adequacy could prevent us from accurately reporting our financial results.

Current wording

We continue to invest in more robust technology and resources to manage our reporting requirements. Implementing the appropriate changes to our internal controls may distract our officers and employees, result in substantial costs and require significant time to complete. Any difficulties or delays in implementing these controls could impact our ability to timely report our financial results. For these reasons, we may encounter difficulties in the timely and accurate reporting of our financial results, which would impact our ability to provide our investors with information in a timely manner. As a result, our investors could lose confidence in our reported financial information, and our stock price could decline. In addition, any such changes do not guarantee that we will be effective in maintaining the adequacy of our internal controls, and any failure to maintain that adequacy could prevent us from accurately reporting our financial results. See Item 9A “Controls and Procedures” in this Annual Report on Form 10-K for more information.

Previous wording

From time to time, we are or may become involved in claims, lawsuits (whether class actions or individual lawsuits), arbitration proceedings, governmental investigations, and other legal or regulatory proceedings involving commercial, corporate and securities matters; privacy, marketing and communications practices; labor and employment matters; alleged infringement of third-party patents and other intellectual property rights; and other matters. The results of any such claims, lawsuits, arbitration proceedings, government investigations, or other legal or regulatory proceedings cannot be predicted with any degree of certainty. Any claims against us, whether meritorious or not, could be time-consuming, result in costly litigation, require significant management attention, and divert significant resources. Determining reserves for our pending litigation is a complex and fact-intensive process that requires significant subjective judgment and speculation. It is possible that a resolution of one or more such proceedings could result in substantial damages, settlement costs, fines, and penalties. These proceedings could also result in harm to our reputation and brand, sanctions, consent decrees, injunctions, or other orders requiring a change in our business practices. Any of these consequences could adversely affect our business, financial condition, and results of operations. Further, under certain circumstances, we have contractual and other legal obligations to indemnify and to incur legal expenses on behalf of our business, customers, and commercial partners and current and former directors and officers. In addition, certain litigation or the resolution of certain litigation may affect the availability or cost of some of our insurance coverage, which could adversely impact our results of operations and cash flows, expose us to increased risks that would be uninsured, and adversely impact our ability to attract directors and officers. Notwithstanding the terms of our agreements with our customers, it is possible that one or more of our customers could breach their obligations, which in the aggregate, could adversely affect our business, financial condition, or results of operations. For example, if a customer defaults on its obligations under a customer agreement or terminates a customer agreement prior to the contractual termination date, we may be required to assert a claim to acquire the amount in full due under the customer agreement, which we may choose not to pursue. However, if we choose to pursue any such claim, we may incur substantial costs to resolve claims or enter into litigation or arbitration, and even if we were to prevail in the event of claims, litigation or arbitration, such claims, litigation, or arbitration could be costly and time-consuming and divert the attention of our management and other employees from our business operations.

Current wording

From time to time, we are or may become involved in claims, lawsuits (whether class actions or individual lawsuits), arbitration proceedings, governmental investigations, and other legal or regulatory proceedings involving commercial, corporate and securities matters; privacy, marketing and communications practices; labor and employment matters; alleged infringement of third-party patents and other intellectual property rights; matters involving compliance with regulatory requirements on lending and consumer protection laws; and other matters. The results of any such claims, lawsuits, arbitration proceedings, government investigations, or other legal or regulatory proceedings cannot be predicted with any degree of certainty. Any claims against us, whether meritorious or not, could be time-consuming, result in costly litigation, require significant management attention, and divert significant resources. Determining reserves for our pending litigation is a complex and fact-intensive process that requires significant subjective judgment and speculation. It is possible that a resolution of one or more such proceedings could result in substantial damages, settlement costs, fines, and penalties. These proceedings could also result in harm to our reputation and brand, sanctions, consent decrees, injunctions, or other orders requiring a change in our business practices. Any of these consequences could adversely affect our business, financial condition, and results of operations. Further, under certain circumstances, we have contractual and other legal obligations to indemnify and to incur legal expenses on behalf of our business, clients, and commercial partners and current and former directors and officers. In addition, certain litigation or the resolution of certain litigation may affect the availability or cost of some of our insurance coverage, which could adversely impact our results of operations and cash flows, expose us to increased risks that would be uninsured, and adversely impact our ability to attract directors and officers. Notwithstanding the terms of our agreements with our clients, it is possible that one or more of our clients could breach their obligations, which in the aggregate, could adversely affect our business, financial condition, or results of operations. For example, if a client defaults on its obligations under a client agreement or terminates a client agreement prior to the contractual termination date, we may be required to assert a claim to acquire the amount in full due under the client agreement, which we may choose not to pursue. However, if we choose to pursue any such claim, we may incur substantial costs to resolve claims or enter into litigation or arbitration, and even if we were to prevail in the event of claims, litigation or arbitration, such claims, litigation, or arbitration could be costly and time-consuming and divert the attention of our management and other employees from our business operations.

Previous wording

We are a fully remote company that does not maintain a physical office presence, which subjects us to unique operational risks.

Current wording

We are a fully remote company, which subjects us to unique operational risks.

Previous wording

If our payments platform is limited, restricted, curtailed or degraded in any way, or if we fail to continue to grow and develop our payments platform, our business may be materially and adversely affected.

Current wording

If our payment processing platform is limited, restricted, curtailed or degraded in any way, or if we fail to continue to grow and develop our payments platform, our business may be materially and adversely affected.

Showing the first 40 of 93 pairs. Open the source sections for the rest.

Rearranged current paragraphs (4)

Current report — wording carried from elsewhere

•changes in the healthcare regulatory and policy environment;

Current report — wording carried from elsewhere

CPRA, which amendments went into effect on January 1, 2023. The CCPA created specific obligations with respect to processing and storing personal information, and the CPRA amendments created a state agency that is vested with authority to implement and enforce the CCPA. In addition to the CCPA, similar privacy and data security laws have been enacted in numerous other states. These new laws have and will impose similar, additional, and in some cases more restrictive requirements than the CCPA created.

Current report — wording carried from elsewhere

As with many technological innovations, AI presents opportunities for enhanced productivity and innovation but also presents risks and challenges that could impact our business. Issues in the development and use of AI, combined with an uncertain regulatory environment and emerging ethical issues, may result in competitive disadvantage, reputational harm, liability or other adverse consequences to our business operations.

Current report — wording carried from elsewhere

•the timing, size and integration success of recent and potential future acquisitions, including the AccessOne Acquisition;
Rearranged previous paragraphs (2)

Previous report — wording carried elsewhere

From time to time, card networks, including Visa, MasterCard, American Express and Discover, increase the fees that they charge acquirers, which would be passed down to processors, payment facilitators and merchants. We could attempt to pass these increases along to our clients, but this strategy might result in the loss of clients to competitors who do not pass along the increases. If competitive practices prevent us from passing along the higher fees to our clients in the future, we may have to absorb all or a portion of such increases, which may increase our operating costs and reduce our earnings.

Previous report — wording carried elsewhere

Changes in laws and regulations relating to interchange fees on payment card transactions would adversely affect our revenue and results of operations.