Skip to main content

NeuroPace Inc

For the period ended Mar 31, 2025. Filed May 13, 2025.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Mar 31, 2025 · Filed May 13, 2025

NPCE$12.50-1.5%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-09-30; filed 2024-11-12.

0001528287-24-000020

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2025-03-31; filed 2025-05-13.

0001528287-25-000013

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 438 previous paragraphs and 450 current paragraphs.

376 unchanged; 51 reworded; 16 added; 5 removed; 6 previous and 7 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (16)

Current report

•Recent changes in staffing levels at the FDA could create delays in its response to and review of our submissions for indication expansion, harming our growth potential and long range financial plans;

Current report

•With the planned expiration of our exclusive distribution agreement with DIXI Medical and loss of the associated revenue, our revenue growth, financial condition and results of operations may be materially affected, including our ability to achieve cash flow breakeven and our expected long-range revenue growth;

Current report

•Our growth prospects may be harmed if we are unable to successfully use our unique data asset and analysis capabilities, internally or through collaborations, or if our expectations with respect to our ability to leverage our unique data asset prove to be incorrect;

Current report

The current administration’s new and changing tariff framework could inhibit our ability to maintain the RNS System’s gross margin at the historical rates, which could negatively impact our long-range revenue forecast, and the results of operations. In addition, trade restrictions or other political tensions may exacerbate unfavorable macroeconomic conditions, which could adversely affect our business, results of operations, financial condition and prospects.

Current report

We manufacture and sell the vast majority of our devices in the United States and have limited supply chain activities outside the United States for our RNS System. We expect no material impact on gross margin for the RNS System and DIXI Medical SEEG products as a result of the new current tariff framework. However, our projections could be incorrect as tariff regulations continue to change, undermining our ability to maintain our projected gross margin at the historical rates, which would negatively impact the results of our operations, our revenue projections, and our business.

Current report

In addition, any trade disputes, tariffs, restrictions and other political tensions between the United States and other countries may exacerbate unfavorable macroeconomic conditions including inflationary pressures, foreign exchange volatility, financial market instability, and economic recessions or downturns. The ultimate impact of current or future tariffs and trade restrictions remains uncertain and could materially and adversely affect our business, financial condition, and prospects. While we actively monitor these risks, any prolonged economic downturn, escalation in trade tensions, or deterioration in international perception of U.S.-based companies could materially and adversely affect our business, ability to access the capital markets or other financing sources, results of operations, financial condition and prospects.

Current report

Our growth prospects may be harmed if we are unable to successfully use our unique data asset and analysis capabilities, either internally or through collaboration, or if our expectations with respect to our ability to leverage our unique data asset prove to be incorrect.

Current report

In November 2023, we entered into a collaboration with Rapport to leverage our RNS System’s unique biomarker monitoring and data analysis capabilities. We may seek to leverage our unique data asset or our data monitoring and analysis capabilities by entering into similar collaborations in the future. If we are unable to continue to build our data asset and our monitoring and analysis capabilities, either internally or through further collaborations, or if our expectations with respect to our ability to leverage our unique data asset prove to be incorrect, our growth prospects may be harmed.

Current report

Risks related to privacy, information technology and cybersecurity

Current report

We use artificial intelligence, or AI, including generative AI, and machine learning, or ML, technologies in our products and services (collectively, AI/ML). The development and use of AI/ML present various privacy and security risks that may impact our business. AI/ML are subject to privacy and data security laws, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including Europe and certain U.S. states, have proposed, enacted, or are considering laws governing the development and use of AI/ML, such as the EU’s AI Act and Colorado’s AI Act. We expect other jurisdictions will adopt similar laws. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with our use of AI/ML. These obligations may make it harder for us to conduct our business using AI/ML, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI/ML, or prevent or limit our use of AI/ML. For example, the FTC has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI/ML where they allege the company has violated privacy and consumer protection laws. If we cannot use AI/ML or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage.

Current report

Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work are vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our services.

Current report

We expend resources or may have to modify our business activities (including our clinical trial activities) to try to protect against security incidents. Additionally, certain data privacy and security obligations require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive information.

Current report

Applicable data privacy and security obligations require us, or we may voluntarily choose, to notify relevant stakeholders of certain security incidents, or to take other actions, such as providing credit monitoring and identity theft protection services. Such disclosures and related actions are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences.

Current report

In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Additionally, sensitive information of the Company could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, or vendors’ use of generative AI technologies. Any sensitive information that we input into a third-party generative AI/ML platform could be leaked or disclosed to others, including if sensitive information is used to train the third parties’ AI/ML model. Additionally, where an AI/ML model ingests personal data and makes connections using such data, those technologies may reveal other sensitive information generated by the model. Moreover, AI/ML models may create flawed, incomplete, or inaccurate outputs, some of which may appear correct. This may happen if the inputs that the model relied on were inaccurate, incomplete or flawed (including if a bad actor “poisons” the AI/ML with bad inputs or logic), or if the logic of the AI/ML is flawed (a so-called “hallucination”). We may use AI/ML outputs to make certain decisions. Due to these potential inaccuracies or flaws, the model could be biased and could lead us to make decisions that could bias certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits.

Current report

With the planned expiration of our exclusive distribution agreement with DIXI Medical, our revenue growth, financial condition and results of operations may be materially affected.

Current report

On April 2, 2025, we announced the termination of our exclusive distribution relationship with DIXI Medical for stereo electroencephalopathy products on September 30, 2025, after which we will begin winding down the relationship in the fourth quarter of 2025, with such activities continuing through the first quarter of 2026. During the wind-down period, we will have the right to continue to sell the products in our possession as of September 30, 2025 through the end of the first quarter of 2026. While we continue to believe that we have the ability to achieve cash flow breakeven on our expected timeline without revenue from the distribution agreement, our revenue growth, financial condition and results of operations may be materially affected, including our ability to achieve cash flow breakeven and our expected long-range revenue growth.
Removed paragraphs (5)

Previous report

We currently rely on our RNS System, which can only be marketed in the United States for use in adults with drug-resistant focal epilepsy, as our primary source of revenue. Our RNS System was historically recommended as well as implanted primarily at Level 4 CECs and has recently expanded outside of Level 4 CECs and into the community setting. If we are not successful in enhancing awareness of our RNS System, driving utilization and adoption across Level 4 CECs, growing utilization and adoption in the community setting, expanding referral pathways to increase referrals to Level 4 CECs, reaching beyond Level 4 CECs and expanding the population of eligible patients, our sales, business, financial condition and results of operations will be negatively affected.

Previous report

We also seek to preserve the integrity and confidentiality of our data and other confidential information by maintaining physical security of our premises and physical and electronic security of our information technology systems. While we have confidence in these individuals, organizations, systems and tools, agreements or security measures may be breached, whereby detecting the disclosure or misappropriation of confidential information and enforcing a claim that a party illegally disclosed or misappropriated confidential information is difficult, expensive and time-consuming, and the outcome is unpredictable. Further, we may not be able to obtain adequate remedies for any breach.

Previous report

If our distribution agreement with DIXI Medical is not renewed, it may have an adverse effect on our financial condition.

Previous report

In August 2022, we entered into the distribution agreement with DIXI Medical, pursuant to which we became the exclusive U.S. distributor of DIXI Medical’s stereo electroencephalography product line. The distribution agreement has an initial term of three years, which expires September 30, 2025, and which may be automatically renewed for additional one-year terms, unless either party provides written notice to the other party of its intention to not renew at least 180 days prior to the expiration of the then-current term. If we and DIXI Medical do not agree to extend our exclusive distribution relationship or otherwise negotiate a new agreement, it will negatively impact our overall revenue growth, financial condition and results of operations, and our stock price may decline

Previous report

In addition, the Biden administration has indicated an increased focus on enforcement of federal consumer protection laws and appoint consumer-oriented regulators. It is possible that regulators in the administration could promulgate rulemakings and bring enforcement actions that materially impact our business and the business of our customers. These regulators may, for example, augment requirements that apply to the medical device approval process, impose additional clinical studies requirements, or change privacy rules that impact how we maintain, use, and share sensitive healthcare data, and could otherwise revise or create new regulatory requirements that apply to us.
Reworded paragraphs (51)

Previous wording

•We currently rely on our RNS System, which can only be marketed in the United States for use in adults with drug-resistant focal epilepsy, as our primary source of revenue. Our RNS System was historically recommended as well as implanted primarily at Level 4 CECs and has recently expanded outside of Level 4 CECs and into the community setting. If we are not successful in enhancing awareness of our RNS System, driving utilization and adoption across Level 4 CECs, growing utilization and adoption in the community, expanding referral pathways to increase referrals to Level 4 comprehensive epilepsy centers, or CECs, reaching beyond Level 4 CECs and expanding the population of eligible patients, our sales, business, financial condition and results of operations will be negatively affected;

Current wording

•We currently rely on our RNS System, which can only be marketed in the United States for use in adults with drug-resistant focal epilepsy, as our primary source of revenue. If we fail to successfully market and sell our RNS System cost effectively and maintain and expand our market share, our sales, business, financial condition and results of operations will be negatively affected;

Previous wording

Our commercial success will continue to depend on attaining significant market acceptance of our RNS System among patients, clinicians and hospital facilities and increasing the number of patients treated. If we are unable to successfully achieve substantial market acceptance and adoption of our RNS System, our sales, business, financial condition and results of operations would be harmed.

Current wording

•Our commercial success will continue to depend on attaining significant market acceptance of our products and increasing the number of patients treated. If we are unable to successfully achieve substantial market acceptance and drive adoption of our RNS System both within Level 4 comprehensive epilepsy centers and in the community, our sales, business, financial condition and results of operations would be harmed;

Previous wording

If adequate reimbursement becomes unavailable for the procedures to implant our RNS System and for clinicians to provide ongoing care for patients treated with our RNS System, it could diminish our sales or affect our ability to sell our RNS System profitably.

Current wording

•If adequate reimbursement becomes unavailable or if reimbursement changes are unfavorable for the procedures to implant our RNS System and for clinicians to provide ongoing care for patients treated with our RNS System, it could diminish our sales or affect our ability to sell our RNS System profitably;

Previous wording

Our collection, use, storage, disclosure, transfer and other processing of sensitive and personal information may subject us to stringent and evolving U.S. and foreign laws, regulations and rules, contractual obligations, industry standards, policies and other obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations could lead to significant costs, liabilities and other risks, including as a result of investigations, inquiries, litigation, fines, legislative and regulatory action and negative press about our data privacy and security practices, which may disrupt our business operations and harm our business and reputation, financial conditions, results of operations and prospects and cause other adverse business consequences.

Current wording

•Our actual or perceived failure to comply with data privacy and security laws and regulations could lead to significant costs, liabilities and other risks, including as a result of investigations, inquiries, litigation, fines, legislative and regulatory action and negative press about our data privacy and security practices, which may disrupt our business operations and harm our business and reputation, financial condition, results of operations and prospects and cause other adverse business consequences;

Previous wording

Future legislation, potential changes in federal regulatory agency leadership, and new policies and priorities under the Biden Administration may adversely impact our company.

Current wording

•Future legislation, potential changes in federal regulatory agency leadership, and new policies and priorities under the current Administration may adversely impact our company.

Previous wording

Our business currently depends primarily on our ability to successfully market our RNS System, which includes increasing the number of patients treated at CECs, increasing adoption of our RNS System across CECs and in the community setting, as well as driving utilization by clinicians within CECs and in the community setting. Currently, our RNS System can only be marketed for use in adults with drug-resistant focal epilepsy in the United States. Historically our RNS System was primarily recommended and implanted at Level 4 CECs, which provide advanced diagnosis and management of epilepsy. We only recently began expanding our commercial efforts to target and be able to qualify the additional 1,800 epileptologists outside of Level 4 CECs and the entire population of functional neurosurgeons as a result of the FDA approval of a PMA-S in 2023, which updated the qualification criteria for centers and clinicians that may prescribe and implant the RNS System. Therefore, we have been dependent on widespread market adoption of our RNS System within a limited number of accounts. We are aiming to increase awareness about our RNS System, including earlier in the diagnostic process through our partnership with DIXI Medical, expand the population of patients we can treat with our RNS System, and increase utilization and adoption across physicians that prescribe and implant our RNS System both within Level 4 CECs and outside of Level 4 CECs, in the community setting, but there can be no assurance that we will succeed.

Current wording

Our business currently depends primarily on our ability to successfully market our RNS System, which includes increasing the number of patients treated at CECs, increasing adoption of our RNS System across CECs and in the community setting, as well as driving utilization by clinicians within CECs and in the community setting. Currently, our RNS System can only be marketed for use in adults with drug-resistant focal epilepsy in the United States. Historically our RNS System was primarily recommended and implanted at Level 4 CECs, which provide advanced diagnosis and management of epilepsy. We only recently began expanding our commercial efforts to target and be able to qualify the additional 1,800 epileptologists outside of Level 4 CECs and the entire population of functional neurosurgeons as a result of the FDA approval of a PMA-S in 2023, which updated the qualification criteria for centers and clinicians that may prescribe and implant the RNS System. Therefore, we have been dependent on widespread market adoption of our RNS System within a limited number of accounts. We are aiming to increase awareness about our RNS System, expand the population of patients we can treat with our RNS System, and increase utilization and adoption across physicians that prescribe and implant our RNS System both within Level 4 CECs and outside of Level 4 CECs, in the community setting, but there can be no assurance that we will succeed.

Previous wording

•our ability to provide earlier awareness of and education about our RNS System to patients and clinicians, including through our partnership with DIXI Medical;

Current wording

•our ability to provide earlier awareness of and education about our RNS System to patients and clinicians;

Previous wording

•Our commercial success will continue to depend on attaining significant market acceptance of our products among patients, clinicians and hospital facilities and increasing the number of patients treated. If we are unable to successfully achieve substantial market acceptance and adoption of our RNS System, our sales, business, financial condition and results of operations would be harmed;

Current wording

Our commercial success will continue to depend on attaining significant market acceptance of our products and increasing the number of patients treated. If we are unable to successfully achieve substantial market acceptance and drive adoption of our RNS System both within Level 4 CECs and in the community, our sales, business, financial condition and results of operations would be harmed.

Previous wording

Additionally, patients rely on their healthcare providers, including epileptologists and neurosurgeons to recommend a course of treatment. If we are unable to successfully achieve substantial market acceptance and adoption of our RNS System by additional clinicians, patients, and hospital facilities, or to expand the clinicians’ perspective as to the types of patients that can benefit from our RNS System, patients may be reluctant to use our products over alternative neuromodulation therapies. If we are unable to successfully drive patient interest in our RNS System, including through our partnership with DIXI Medical, our business, financial condition and results of operations would be harmed.

Current wording

Additionally, patients rely on their healthcare providers, including epileptologists and neurosurgeons to recommend a course of treatment. If we are unable to successfully achieve substantial market acceptance and adoption of our RNS System by additional clinicians, patients, and hospital facilities, or to expand the clinicians’ perspective as to the types of patients that can benefit from our RNS System, patients may be reluctant to use our products over alternative neuromodulation therapies. If we are unable to successfully drive patient interest in our RNS System, our business, financial condition and results of operations would be harmed.

Previous wording

We do not maintain large amounts of excess inventory at any given time. To ensure adequate supply, we must forecast inventory needs and manufacture our products based on our estimates of future demand. Our ability to accurately forecast demand for our products, including our sales of DIXI Medical products, could be negatively affected by many factors, including our failure to accurately manage our expansion strategy, product introductions by competitors, our inability to forecast the lifecycle of our products, an increase or decrease in customer demand for our products or for competitor products, our failure to accurately forecast customer adoption of new products, unanticipated changes in general market conditions or regulatory matters and weakening of economic conditions or consumer confidence in future economic conditions. Inventory levels in excess of customer demand may result in inventory write-downs or write-offs, which would cause our gross margin to be adversely affected and could impair the strength of our brand. Conversely, if we underestimate customer demand for our products, our manufacturing team, or that of DIXI Medical, may not be able to deliver products to meet our requirements, and this could result in damage to our reputation and customer relationships. In addition, if we experience a significant increase in demand, additional supplies of components, materials, or services, or additional manufacturing capacity may not be available when required on terms that are acceptable to us, or at all, which may negatively affect our business, financial condition, and results of operations.

Current wording

We do not maintain large amounts of excess inventory at any given time. To ensure adequate supply, we must forecast inventory needs and manufacture our products based on our estimates of future demand. Our ability to accurately forecast demand for our products, could be negatively affected by many factors, including our failure to accurately manage our expansion strategy, product introductions by competitors, our inability to forecast the lifecycle of our products, an increase or decrease in customer demand for our products or for competitor products, our failure to accurately forecast customer adoption of new products, unanticipated changes in general market conditions or regulatory matters and weakening of economic conditions or consumer confidence in future economic conditions. Inventory levels in excess of customer demand may result in inventory write-downs or write-offs, which would cause our gross margin to be adversely affected and could impair the strength of our brand. Conversely, if we underestimate customer demand for our products, our manufacturing team may not be able to deliver products to meet our requirements, and this could result in damage to our reputation and customer relationships. In addition, if we experience a significant increase in demand, additional supplies of components, materials, or services, or additional manufacturing capacity may not be available when required on terms that are acceptable to us, or at all, which may negatively affect our business, financial condition, and results of operations.

Previous wording

We dedicate significant financial and other resources to our customer outreach and training programs, which may require us to incur significant upfront costs. For example, we may need to conduct additional physician trainings across hospital facilities, both at CECs and as we expand into the community setting. Our sales force may also need to develop additional efficiencies and approaches to address potential growth as we expand referral pathways, expand into additional existing Level 4 CECs as well as new CECs, grow our presence in the community setting, offer new products, including those distributed through our partnership with DIXI Medical, increase the number of epileptologists recommending, and neurosurgeons implanting, our RNS System, and increase the numbers and types of patients being prescribed and implanted with the RNS System by current clinicians. Our business would be harmed if our programs and associated expenditures do not generate a corresponding increase in revenue.

Current wording

We dedicate significant financial and other resources to our customer outreach and training programs, which may require us to incur significant upfront costs. For example, we may need to conduct additional physician trainings across hospital facilities, both at CECs and as we expand into the community setting. Our sales force may also need to develop additional efficiencies and approaches to address potential growth as we expand referral pathways, expand into additional existing Level 4 CECs as well as new CECs, grow our presence in the community setting, offer new products, increase the number of epileptologists recommending, and neurosurgeons implanting, our RNS System, and increase the numbers and types of patients being prescribed and implanted with the RNS System by current clinicians. Our business would be harmed if our programs and associated expenditures do not generate a corresponding increase in revenue.

Previous wording

As of September 30, 2024, we had 184 employees. As our sales and marketing strategies evolve and as we continue operating as a public company, we may need additional managerial, operational, sales, marketing, financial and other personnel. Future growth would impose significant added responsibilities on members of management, including:

Current wording

As of March 31, 2025, we had 195 employees. As our sales and marketing strategies evolve and as we continue operating as a public company, we may need additional managerial, operational, sales, marketing, financial and other personnel. Future growth would impose significant added responsibilities on members of management, including:

Previous wording

We are seeking expanded FDA labeling for our RNS System to be able to treat patients with generalized drug-resistant epilepsy as well as patients between the age of 12 and 17 with drug-resistant focal epilepsy, but if we are unable to broaden the indications for our RNS System to include these patients, our growth potential could be harmed.

Current wording

We are seeking expanded FDA labeling for our RNS System to be able to treat patients with generalized drug-resistant epilepsy as well as patients between the age of 12 and 17 with drug-resistant focal epilepsy, but if we are unable to broaden the indications for our RNS System to include these patients, or if the recent FDA staffing changes delay reviews of our applications for indication expansion, our growth potential could be harmed.

Previous wording

If clinical studies do not produce results necessary to support regulatory clearance or approval to expand our indications to include patients with generalized drug-resistant epilepsy as well as patients age 12 to 17 with drug- resistant focal epilepsy, we will be unable to obtain and maintain necessary approvals to expand our indications to include these patients in accordance with our expected timelines, which could harm our growth potential. Furthermore, we could incur substantial costs and the attention of management could be diverted throughout this process.

Current wording

If our clinical studies and collaborations with the National Evaluation System for health Technology to pursue the use of real-world data from the Pediatric Epilepsy Research Consortium do not produce results necessary to support regulatory clearance or approval to expand our indications to include patients with generalized drug-resistant epilepsy as well as patients age 12 to 17 with drug-resistant focal epilepsy, we will be unable to obtain and maintain necessary approvals to expand our indications to include these patients in accordance with our expected timelines, which could harm our growth potential. Furthermore, we could incur substantial costs and the attention of management could be diverted throughout this process. Recent cuts and staffing changes at the FDA could further delay our efforts to expand indications by creating significant and costly delays in the review process for our regulatory submissions; these delays would negatively impact our growth potential and ability to expand our market reach according to our financial plans.

Previous wording

In addition, there can be no guarantee that we will receive approval to sell our RNS System in every international market we target, nor can there be any guarantee that any sales would result even if such approval is received. Approval in the United States, or in any other jurisdiction, does not ensure approval in other jurisdictions. Obtaining foreign approvals could result in significant delays, difficulties and costs for us and require additional studies and additional expenses. Regulatory requirements can vary widely from country to country and could delay the introduction of our RNS System in those countries. If we fail to comply with these regulatory requirements or to obtain and maintain required approvals, our target market will be reduced and our ability to generate revenue will be diminished. Our inability to successfully enter all our desired international markets and manage business on a global scale could harm our growth potential.

Current wording

In addition, there can be no guarantee that we will receive approval to sell our RNS System in every international market we target, nor can there be any guarantee that any sales would result even if any such approval is received. Approval in the United States, or in any other jurisdiction, does not ensure approval in other jurisdictions. Obtaining foreign approvals could result in significant delays, difficulties and costs for us and require additional studies and additional expenses. Regulatory requirements can vary widely from country to country and could delay the introduction of our RNS System in those countries. If we fail to comply with these regulatory requirements or to obtain and maintain required approvals, our target market will be reduced and our ability to generate revenue will be diminished. Our inability to successfully enter all our desired international markets and manage business on a global scale could harm our growth potential.

Previous wording

We have adopted a code of conduct, employee handbook, and compliance policies, but it is not always possible to identify and deter misconduct by our employees and other third parties, and the precautions we take to detect and prevent these activities may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in the imposition of significant fines or other sanctions, including the imposition of civil, criminal and administrative penalties, damages, monetary fines, disgorgement, imprisonment, reporting and oversight obligations, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, diminished profits and future earnings and curtailment of operations, any of which could adversely affect our ability to operate our business and our results of operations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in integrity issues, or a negative impact to our reputation or brand. Whether or not we are successful in defending against any such actions or investigations, we could incur substantial costs, including legal fees, and divert the attention of management in defending ourselves against any of these claims or investigations, which could harm our business, financial condition and results of operations.

Current wording

We have adopted a code of conduct, employee handbook, compliance policies, and compliance training programs for all employees, but it is not always possible to identify and deter misconduct by our employees and other third parties, and the precautions we take to detect and prevent these activities may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in the imposition of significant fines or other sanctions, including the imposition of civil, criminal and administrative penalties, damages, monetary fines, disgorgement, imprisonment, reporting and oversight obligations, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, diminished profits and future earnings and curtailment of operations, any of which could adversely affect our ability to operate our business and our results of operations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in integrity issues, or a negative impact to our reputation or brand. Whether or not we are successful in defending against any such actions or investigations, we could incur substantial costs, including legal fees, and divert the attention of management in defending ourselves against any of these claims or investigations, which could harm our business, financial condition and results of operations.

Previous wording

Our operations are subject to pervasive and continuing FDA regulatory requirements, and failure to comply with these requirements could harm our business, financial condition and results of operations.

Current wording

Our operations are subject to pervasive and continuing FDA regulatory requirements, and failure to comply with these requirements could harm our growth potential, and our business, financial condition and results of operations.

Previous wording

In the process of obtaining PMA approval, which was required for our RNS System, the FDA must determine that a proposed device is safe and effective for its intended use based, in part, on extensive data, including, but not limited to, technical, preclinical, clinical study, manufacturing and labeling data. The PMA process is typically required for devices that are deemed to pose the greatest risk, such as life-sustaining, life-supporting or implantable device.

Current wording

In the process of obtaining PMA approval, which was required for our RNS System, the FDA must determine that a proposed device is safe and effective for its intended use based, in part, on extensive data, including, but not limited to, technical, preclinical, clinical study, manufacturing and labeling data. The PMA process is typically required for devices that are deemed to pose the greatest risk, such as life-sustaining, life-supporting or implantable device. The FDA could decline to approve any supplemental application that we submit in the future to expand the indications for which our RNS System can be used, which would harm our growth potential.

Previous wording

In the course of our operations, we receive, collect, use, generate, store, disclose, transfer, make accessible, protect, secure, dispose of, transmit, share and otherwise process (collectively, process) an increasing volume of sensitive and personal information, including proprietary and confidential business data, trade secrets, intellectual property, data we collect about trial participants in connection with clinical trials, and detailed recordings of iEEGs from patients as well as information from our employees and third parties with whom we conduct business. Our data processing activities may subject us to numerous data privacy and security obligations, such as various laws, rules, regulations, guidance and industry standards, external and internal privacy and security policies, contractual requirements, and other obligations relating to data privacy and security.

Current wording

In the course of our operations, we receive, collect, use, generate, store, disclose, transfer, make accessible, protect, secure, dispose of, transmit, share and otherwise process (collectively, process) an increasing volume of sensitive and personal information, including proprietary and confidential business data, trade secrets, intellectual property, data we collect about trial participants in connection with clinical trials, and detailed recordings of iEEGs from patients as well as information from our employees and third parties with whom we conduct business. Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, rules, regulations, guidance and industry standards, external and internal privacy and security policies, contractual requirements, and other obligations relating to data privacy and security.

Previous wording

We are subject to many diverse laws and regulations relating to data privacy and security. In the United States, various federal and state regulators have adopted, or are considering adopting, laws and regulations concerning personal information and data security, including data breach notification laws. In the past few years, numerous U.S. states—including California, Virginia, Colorado, Connecticut, and Utah—have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal information. As applicable, such rights may include the right to access, correct, or delete certain personal information, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal information, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. Additionally, our customers may be subject to additional federal and state privacy and security laws, rules, regulations and standards, including HIPAA, that they may require us to comply with through contractual obligations. This patchwork of legislation and regulation may give rise to conflicts or differing views of personal privacy rights. For example, the CCPA applies to personal information of consumers, business representatives, and employees, and requires businesses to provide specific disclosures in privacy notices and honor requests of California residents to exercise certain privacy rights. The CCPA provides for fines of up to $7,500 per intentional violation and allows private litigants affected by certain data breaches to recover significant statutory damages. Although the CCPA exempts some data processed in the context of clinical trials, the CCPA increases compliance costs and potential liability with respect to other personal information we maintain about California residents. In addition, the California Privacy Rights Act of 2020, or CPRA, expands the CCPA’s requirements, including by adding a new right for individuals to correct their personal information and establishing a new regulatory agency to implement and enforce the law. While the laws and regulations of other states also exempt some data processed in the context of clinical trials, these developments further complicate compliance efforts, and increase legal risk and compliance costs for us, and the third parties upon whom we rely.

Current wording

U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal information. As applicable, such rights may include the right to access, correct, or delete certain personal information, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal information, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the CCPA applies to personal information of consumers, business representatives, and employees, and requires businesses to provide specific disclosures in privacy notices and honor requests of California residents to exercise certain privacy rights. The CCPA provides for fines per intentional violation and allows private litigants affected by certain data breaches to recover significant statutory damages. Although the CCPA exempts some data processed in the context of clinical trials, the CCPA increases compliance costs and potential liability with respect to other personal information we maintain about California residents. In addition, the California Privacy Rights Act of 2020, or CPRA, expands the CCPA’s requirements, including by adding a new right for individuals to correct their personal information and establishing a new regulatory agency to implement and enforce the law. While the laws and regulations of other states also exempt some data processed in the context of clinical trials, these developments further complicate compliance efforts, and increase legal risk and compliance costs for us, and the third parties with whom we work. Additionally, our customers may be subject to additional federal and state privacy and security laws, rules, regulations and standards, including HIPAA, that they require us to comply with through contractual obligations. This patchwork of obligations may give rise to conflicts or differing views of personal privacy rights.

Previous wording

We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. For example, certain privacy laws, such as the GDPR and the CCPA, require our customers to impose specific contractual restrictions on their service providers. We publish privacy policies, marketing materials, and other statements regarding data privacy and security. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences. In addition to data privacy and security laws, we are contractually subject to industry standards adopted by industry groups and, we are, or may become subject to such obligations in the future.

Current wording

We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. For example, certain privacy laws, such as the GDPR and the CCPA, require our customers to impose specific contractual restrictions on their service providers. We publish privacy policies, marketing materials, and other statements regarding data privacy and security. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences. In addition to data privacy and security laws, we are contractually subject to industry standards adopted by industry groups and, we are or may become subject to such obligations in the future.

Previous wording

We or the third parties upon which we rely may at times fail (or be perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties on whom we rely may fail to comply with such obligations, which could negatively impact our business operations. If we or the third parties on which we rely fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans on processing personal information; and orders to destroy or not use personal information. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; inability to process personal information or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Current wording

We or the third parties with whom we work may at times fail (or be perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties with whom we work may fail to comply with such obligations, which could negatively impact our business operations. If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans on processing personal information; and orders to destroy or not use personal information. For example, one of our primary competitors has been subject to class action lawsuits and government investigations in connection with their alleged failure to comply with their privacy and security obligations. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; inability to process personal information or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Previous wording

Disruptions in our information technology systems or data or those of third parties upon which we rely, whether through breaches or failures of our systems, ransomware, unauthorized access or otherwise, may result in both an adverse impact to our products, as well as the unauthorized use, disclosure, modification or misappropriation of patient or other personal or sensitive information, the occurrence of fraudulent activity, or other information security-related incidents, all of which could result in adverse consequences, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences, which could have a material and adverse impact on our business, financial condition and results of operations.

Current wording

Disruptions in our information technology systems or data or those of third parties with whom we work, whether through breaches or failures of our systems, ransomware, unauthorized access or otherwise, may result in both an adverse impact to our products, as well as the unauthorized use, disclosure, modification or misappropriation of patient or other personal or sensitive information, the occurrence of fraudulent activity, or other information security-related incidents, all of which could result in adverse consequences, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations; reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences, which could have a material and adverse impact on our business, financial condition and results of operations.

Previous wording

We are dependent on complex information technology systems for the functioning of our business, including the manufacture, distribution and maintenance of our products, as well as for accounting, data storage, compliance, purchasing and inventory management purposes. We process and collect data about trial participants in connection with clinical trials and patient data, such as detailed recordings of iEEGs to help clinicians make more informed treatment decisions and optimize their patients’ care. These data are recorded by our RNS System and can be viewed by the physician during regular patient visits using the Physician Tablet or on demand through a secure website. Further, in the ordinary course of our business, we and the third parties upon which we rely process a growing volume of personal information and confidential, proprietary and sensitive information, which may include procedure-based information and sensitive healthcare data, credit card and other financial information, and insurance information.

Current wording

We are dependent on complex information technology systems for the functioning of our business, including the manufacture, distribution and maintenance of our products, as well as for accounting, data storage, compliance, purchasing and inventory management purposes. We process and collect data about trial participants in connection with clinical trials and patient data, such as detailed recordings of iEEGs to help clinicians make more informed treatment decisions and optimize their patients’ care. These data are recorded by our RNS System and can be viewed by the physician during regular patient visits using the Physician Tablet or on demand through a secure website. Further, in addition to clinical trial and patient data, we and the third parties with whom we work process a growing volume of personal information and confidential, proprietary and sensitive information, which include procedure-based information and sensitive healthcare data, credit card and other financial information, and insurance information (collectively, sensitive information).

Previous wording

Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties upon which we rely. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and originate from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, cyber criminals, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors.

Current wording

Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and originate from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, cyber criminals, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors.

Previous wording

We and the third parties upon which we rely are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software and zero-day vulnerabilities, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats.

Current wording

We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which are increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software and zero-day vulnerabilities, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats.

Previous wording

In addition, our reliance on third-party service providers could introduce new cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations. We rely on third-party service providers and technologies to operate critical business systems to process sensitive information in a variety of contexts, such as and without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions. We also rely on third-party service providers to provide other products, services, parts, or otherwise to operate our business. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If our third-party service providers experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised.

Current wording

In addition, our reliance on third parties could introduce new cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations. We rely on third parties and third-party technologies to operate critical business systems to process sensitive information in a variety of contexts, such as and without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions. We also rely on third parties to provide other products, services, parts, or otherwise to operate our business. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if these third parties fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised.

Previous wording

While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely). We may not, however, detect and remediate all such vulnerabilities on a timely basis. Further, we may experience delays in deploying remedial measures designed to address any such identified vulnerabilities. Any of the previously identified or similar threats could cause a security incident or other interruption that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties upon whom we rely. A security incident or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our services.

Current wording

While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We have not and may not in the future, however, detect and remediate all such vulnerabilities on a timely basis. Further, we have (and may in the future) experienced delays in deploying remedial measures designed to address any such identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Previous wording

If we (or a third party upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal information); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may cause customers to stop using our products and services, deter new customers from using our products and services, and negatively impact our ability to grow and operate our business.

Current wording

If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal information); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may cause customers to stop using our products and services, deter new customers from using our products and services, and negatively impact our ability to grow and operate our business.

Previous wording

Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We currently maintain a cybersecurity insurance policy and business interruption coverage to mitigate certain potential losses but this insurance is limited in amount, and we cannot be certain that such potential losses will not exceed our policy limits, or will cover all potential claims to which we are exposed and may not be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims. Therefore, failure to maintain or protect our information systems and data integrity effectively could harm our business, financial condition, and results of operations.

Current wording

Some of our contracts do not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We currently maintain a cybersecurity insurance policy and business interruption coverage to mitigate certain potential losses but this insurance is limited in amount, and we cannot be certain that such potential losses will not exceed our policy limits, or will cover all potential claims to which we are exposed and may not be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims. Therefore, failure to maintain or protect our information systems and data integrity effectively could harm our business, financial condition, and results of operations.

Previous wording

We may maintain, use, and share sensitive health information that we receive directly from patients that use our products, throughout the clinical study process, in the course of our research collaborations, and from healthcare providers in the course of using our products and systems. Most healthcare providers, including hospitals from which we obtain patient health information, are subject to privacy and security regulations promulgated under HIPAA, as amended by the Health Information Technology for Economic and Clinical Health, or HITECH. We are not currently classified as a covered entity or business associate under HIPAA and thus are not subject to its requirements or penalties. However, any person may be prosecuted under HIPAA’s criminal provisions either directly or under aiding-and-abetting or conspiracy principles. Consequently, depending on the facts and circumstances, we could face substantial criminal penalties if we knowingly receive, maintain, use, or transfer individually identifiable health information from a HIPAA-covered healthcare provider or research institution that has not satisfied HIPAA’s requirements for disclosure of individually identifiable health information. Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our operations or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information. As such, we may be subject to state laws requiring notification of affected individuals and state regulators in the event of a breach of personal information, including certain health information, which is a broader class of information than the health information protected by HIPAA.

Current wording

HIPAA, as amended by the Health Information Technology for Economic and Clinical Health, or HITECH. We are not currently classified as a covered entity or business associate under HIPAA and thus are not subject to its requirements or penalties. However, any person may be prosecuted under HIPAA’s criminal provisions either directly or under aiding-and-abetting or conspiracy principles. Consequently, depending on the facts and circumstances, we could face substantial criminal penalties if we knowingly receive, maintain, use, or transfer individually identifiable health information from a HIPAA-covered healthcare provider or research institution that has not satisfied HIPAA’s requirements for disclosure of individually identifiable health information. Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our operations or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information. As such, we may be subject to state laws requiring notification of affected individuals and state regulators in the event of a breach of personal information, including certain health information, which is a broader class of information than the health information protected by HIPAA.

Previous wording

Litigation may be necessary to defend against these and other claims challenging inventorship of our patents, trade secrets or other intellectual property. If we fail in defending any such claims, in addition to paying monetary damages, we may lose valuable intellectual property rights, such as exclusive ownership of, or right to use, intellectual property that is important to our products. If we were to lose exclusive ownership of such intellectual property, other owners may be able to license their rights to other third parties, including our competitors. We also may be required to obtain and maintain licenses from third parties, including parties involved in any such disputes. Such licenses may not be available on commercially reasonable terms, or at all, or may be non-exclusive. If we are unable to obtain and maintain such licenses, we may need to cease the development, manufacture and commercialization of one or more of our products. The loss of exclusivity or the narrowing of our patent claims could limit our ability to stop others from using or commercializing similar or identical technology and products. Even if we are successful in defending against such claims, litigation could result in substantial costs and be a distraction to management and other employees. Any of the foregoing could harm our business, financial condition and results of operations.

Current wording

Litigation may be necessary to defend against these and other claims challenging inventorship of our patents, trade secrets or other intellectual property. If we fail in defending any such claims, in addition to paying monetary damages, we may lose valuable intellectual property rights, such as exclusive ownership of, or right to use, intellectual property that is important to our products. If we were to lose exclusive ownership of such intellectual property, other owners may be able to license their rights to other third parties, including our competitors. We also may be required to obtain and maintain licenses from third parties, including parties involved in any such disputes. Such licenses may not be available on commercially reasonable terms, or at all, or may be non-exclusive. If we are unable to obtain and maintain such licenses, we may need to cease the development, manufacture and commercialization of one or more of our products. The loss of exclusivity or the narrowing of our patent claims could limit our ability to stop others from using or commercializing similar or identical technology and products.

Previous wording

In addition, our patents or the patents of our licensing partners also may become involved in inventorship, priority or validity disputes. For example, although we try to ensure that our employees, consultants and advisors are not in breach of any past contractual obligations and do not use the proprietary information or know-how of others in the work that they do for us, we may in the future become subject to claims that we or these individuals have, inadvertently or otherwise, used or disclosed intellectual property, including trade secrets or other proprietary information, of their former university or employer. Additionally, we may be subject to claims from third parties challenging intellectual property rights we regard as our own, based on claims that our agreements with employees or consultants obligating them to assign intellectual property to us are ineffective or in conflict with prior or competing contractual obligations to assign inventions to a previous employer, or to another person or entity.

Current wording

In addition, our patents or the patents of our licensing partners also may become involved in inventorship, priority or validity disputes. For example, although we try to ensure that our employees, consultants and advisors are not in breach of any past contractual obligations and do not use the proprietary information or know-how of others in the work that they do for us, we may in the future become subject to claims that we or these individuals have, inadvertently or otherwise, used or disclosed intellectual property, including trade secrets or other proprietary information, of their former university or employer. Additionally, we may be subject to claims from third parties challenging intellectual property rights we regard as our own, based on claims that our agreements with employees or consultants obligating them to assign intellectual property to us are ineffective or in conflict with prior or competing contractual obligations to assign inventions to a previous employer, or to another person or entity. Furthermore, while it is our policy to require all employees and contractors to execute agreements assigning relevant intellectual property to us, we may also be unsuccessful in executing such an agreement with each party who, in fact, conceives or develops intellectual property that we regard as our own. These assignment agreements may not be self-executing or adequate in scope, and may be breached or challenged, and we may be forced to bring claims against third parties, or defend claims that they may bring against us, to determine the ownership of what we regard as our intellectual property. We may not have adequate remedies for any such breaches, and such claims could harm our business, financial condition and results of operations.

Previous wording

We have incurred losses since our inception and expect to continue to incur losses for the foreseeable future. For the nine months ended September 30, 2024 and 2023, we reported net losses of $21.9 million and $26.8 million, respectively. As a result of these losses, as of September 30, 2024, we had an accumulated deficit of approximately $525.7 million. We expect to continue to incur significant business expenses as we continue to enhance our efforts to promote our brand, increase sales, improve therapy effectiveness, enhance the patient and provider experience, and expand the population of eligible patients. In addition, we expect our selling, general and administrative expenses to increase as we continue to operate as a public company. The net losses that we incur may fluctuate significantly from period to period. We will need to generate significant additional revenue and improve our gross margins in order to achieve and sustain profitability. It is possible that we will not achieve profitability or that, even if we do achieve profitability, we may not remain profitable for any substantial period of time. Our failure to achieve or maintain profitability could negatively impact the value of our common stock.

Current wording

We have incurred losses since our inception and expect to continue to incur losses for the foreseeable future. For the three months ended March 31, 2025 and 2024, we reported net losses of $6.6 million and $8.9 million, respectively. As a result of these losses, as of March 31, 2025, we had an accumulated deficit of approximately $537.5 million. We expect to continue to incur significant business expenses as we continue to enhance our efforts to promote our brand, increase sales, improve therapy effectiveness, enhance the patient and provider experience, and expand the population of eligible patients. In addition, we expect our selling, general and administrative expenses to increase as we continue to operate as a public company. The net losses that we incur may fluctuate significantly from period to period. We will need to generate significant additional revenue and improve our gross margins in order to achieve and sustain profitability. It is possible that we will not achieve profitability or that, even if we do achieve profitability, we may not remain profitable for any substantial period of time. Our failure to achieve or maintain profitability could negatively impact the value of our common stock.

Previous wording

Our operations have consumed substantial amounts of cash since inception and we intend to continue to make significant investments to support our continued business operations and growth, respond to business challenges or opportunities, enhance our products, expand the population of eligible patients, and potentially acquire complementary businesses and technologies. For the nine months ended September 30, 2024 and 2023, our net cash used in operating activities was $13.2 million and $16.4 million, respectively. As of September 30, 2024, we had $56.8 million of cash, cash equivalents and short-term investments and $14.8 million in current liabilities.

Current wording

Our operations have consumed substantial amounts of cash since inception and we intend to continue to make significant investments to support our continued business operations and growth, respond to business challenges or opportunities, enhance our products, expand the population of eligible patients, and potentially acquire complementary businesses and technologies. For the three months ended March 31, 2025 and 2024, our net cash used in operating activities was $7.5 million and $7.5 million, respectively. As of March 31, 2025, we had $66.3 million of cash, cash equivalents and short-term investments and $14.7 million in current liabilities.

Previous wording

In general, under Section 382 of the U.S. Internal Revenue Code of 1986, as amended, or the Code, a corporation that undergoes an “ownership change” is subject to limitations on its ability to utilize its pre-change net operating losses, or NOLs, to offset future taxable income. A Section 382 “ownership change” generally occurs if one or more stockholders or groups of stockholders who own at least 5% of our stock increase their ownership by more than 50 percentage points over their lowest ownership percentage within a rolling three-year period. Similar rules may apply under state tax laws. As of December 31, 2023, we had $155.0 million of federal net operating loss carryforwards and $150.3 million of state net operating loss carryforwards. The federal and state NOL carryforwards began expiring in 2023 and 2028, for federal and state purposes, respectively. As of December 31, 2023, the amount of federal NOL carryforwards that does not expire is $103.3 million (subject to certain utilization limitations). We have conducted Section 382 studies and determined that we experienced ownership changes in 2016 and in 2021 which resulted in permanent limitation of our pre-change NOL and research and development credit carryforwards. In addition, future changes in our stock ownership, some of which are outside of our control, could result in an additional ownership change under Section 382 of the Code, further limiting our ability to utilize NOLs arising prior to such ownership change in the future. There is also a risk that due to statutory or regulatory changes, such as suspensions on the use of NOLs (including California legislation enacted in June 2020 that limited the ability to use California net operating losses to offset California income for tax years beginning after 2019 and before 2023), or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to offset future income tax liabilities.

Current wording

In general, under Section 382 of the U.S. Internal Revenue Code of 1986, as amended, or the Code, a corporation that undergoes an “ownership change” is subject to limitations on its ability to utilize its pre-change net operating losses, or NOLs, to offset future taxable income. A Section 382 “ownership change” generally occurs if one or more stockholders or groups of stockholders who own at least 5% of our stock increase their ownership by more than 50 percentage points over their lowest ownership percentage within a rolling three-year period. Similar rules may apply under state tax laws. As of December 31, 2024, we had $152.5 million of federal net operating loss carryforwards and $162.7 million of state net operating loss carryforwards. The federal and state NOL carryforwards began expiring in 2026 and 2029, respectively. As of December 31, 2024, the amount of federal NOL carryforwards that does not expire is $114.0 million (subject to certain utilization limitations). We have conducted Section 382 studies and determined that we experienced ownership changes in 2016 and in 2021 which resulted in permanent limitation of our pre-change NOL and research and development credit carryforwards. In addition, future changes in our stock ownership, some of which are outside of our control, could result in an additional ownership change under Section 382 of the Code, further limiting our ability to utilize NOLs arising prior to such ownership change in the future. There is also a risk that due to statutory or regulatory changes, such as suspensions on the use of NOLs (including California legislation enacted in June 2020 that limited the ability to use California NOLs to offset California income for tax years beginning after 2019 and before 2023), or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to offset future income tax liabilities.

Previous wording

•Our estimates of market opportunity and forecasts of market and revenue growth may prove to be inaccurate, and even if the market in which we compete achieves the forecasted growth, our business could fail to grow at similar rates, if at all; and

Current wording

Our estimates of market opportunity and forecasts of market and revenue growth may prove to be inaccurate, and even if the market in which we compete achieves the forecasted growth, our business could fail to grow at similar rates, if at all.

Previous wording

Market opportunity estimates and growth forecasts are subject to significant uncertainty. Our estimates of the annual total addressable markets for our RNS System are based on a number of internal and third-party estimates and assumptions, including, without limitation, our assumptions relative to the number of adults with drug-resistant focal epilepsy in the United States who are treated at CECs and outside of CECs each year; the number of neuromodulation procedures annually in the United States; the number and growth in number of CECs, epileptologists, and neurosurgeons, in the CECs and in the community setting; the growth in number of patients referred to CECs; the patients receiving neuromodulation therapy outside in the community setting; and the potential growth of our market opportunity with the expansion of treatment to patients in the community setting, as well as those suffering from generalized epilepsy or are under age 18.

Current wording

Market opportunity estimates and growth forecasts are subject to significant uncertainty. Our estimates of the annual total addressable markets for our RNS System are based on a number of internal and third-party estimates and assumptions, including, without limitation, our assumptions relative to the number of adults with drug-resistant focal epilepsy in the United States who are treated at CECs and outside of CECs each year; the number of neuromodulation procedures annually in the United States; the number and growth in number of CECs, epileptologists, and neurosurgeons in the CECs and in the community setting; the growth in number of patients referred to CECs; the patients receiving neuromodulation therapy outside in the community setting; and the potential growth of our market opportunity with the expansion of treatment to patients in the community setting, as well as to those suffering from generalized epilepsy or who are under age 18.

Previous wording

In addition, our projections related to being the exclusive U.S. distributor of DIXI Medical products have been based on a number of estimates and assumptions, including, without limitation, information obtained from DIXI Medical related to historical performance and future projections, and annual extensions of the current distribution agreement, which occur automatically unless one of the parties notifies the other of its intention to not renew the agreement or otherwise negotiate a new agreement. While we believe our assumptions and the data underlying our estimates are reasonable, these assumptions and estimates may not be correct and the conditions supporting our assumptions or estimates may change at any time, thereby reducing the predictive accuracy of these underlying factors. As a result, our estimates of the annual total addressable market for our RNS System may prove to be incorrect. If the actual annual total addressable market for our RNS System is smaller than we have estimated, it may impair our sales growth and have an adverse impact on our business. Alternatively, if the actual annual total addressable market for our RNS System is bigger than we have estimated, we may not be ready to manage such growth, which may impair our sales and have an adverse impact on our business. Additionally, if our projections regarding the revenue we anticipate receiving from our collaboration with Rapport are inaccurate, we may not attain our revenue projections, which could harm our business, result in investors losing confidence in our financial reporting, and our stock price may decline.

Current wording

In addition, our projections related to being the exclusive U.S. distributor of DIXI Medical products through September 30, 2025 have been based on a number of estimates and assumptions, including, without limitation, information obtained from DIXI Medical related to historical performance and future projections, and annual extensions of the current distribution agreement, which occur automatically unless one of the parties notifies the other of its intention to not renew the agreement or otherwise negotiate a new agreement. While we believe our assumptions and the data underlying our estimates are reasonable, these assumptions and estimates may not be correct and the conditions supporting our assumptions or estimates may change at any time, thereby reducing the predictive accuracy of these underlying factors. As a result, our estimates of the annual total addressable market for our RNS System may prove to be incorrect. If the actual annual total addressable market for our RNS System is smaller than we have estimated, it may impair our sales growth and have an adverse impact on our business. Alternatively, if the actual annual total addressable market for our RNS System is bigger than we have estimated, we may not be ready to manage such growth, which may impair our sales and have an adverse impact on our business. Additionally, if our projections regarding the revenue we anticipate receiving from our collaboration with Rapport are inaccurate, we may not attain our revenue projections, which could harm our business, result in investors losing confidence in our financial reporting, and our stock price may decline.

Previous wording

If we cannot successfully defend ourselves against product liability claims, we may incur substantial liabilities or be required to limit or halt commercialization of our products. Even a successful defense would require

Current wording

If we cannot successfully defend ourselves against product liability claims, we may incur substantial liabilities or be required to limit or halt commercialization of our products. Even a successful defense would require significant financial and management resources. Regardless of the merits or eventual outcome, liability claims may result in:

Showing the first 40 of 51 pairs. Open the source sections for the rest.

Rearranged current paragraphs (7)

Current report — wording carried from elsewhere

•We may expand sales of our RNS System internationally in the future, but we may experience difficulties in obtaining regulatory clearance or approval or in successfully marketing our RNS System internationally even if approved. A variety of risks associated with marketing our RNS System internationally could harm our growth potential; and

Current report — wording carried from elsewhere

We currently rely on our RNS System, which can only be marketed in the United States for use in adults with drug-resistant focal epilepsy, as our primary source of revenue. If we fail to successfully market and sell our RNS System cost effectively and maintain and expand our market share, our sales, business, financial condition and results of operations will be negatively affected.

Current report — wording carried from elsewhere

In the United States, various federal and state regulators have adopted, or are considering adopting, laws and regulations concerning personal information and data security, including data breach notification laws. Numerous

Current report — wording carried from elsewhere

Certain of the previously identified or similar threats may in the future cause a security incident or other interruption that may in the future result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties with whom we work. For example, we have been the target of unsuccessful phishing attempts in the past and expect such attempts will continue in the future. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our services.

Current report — wording carried from elsewhere

We may maintain, use, and share sensitive health information that we receive directly from patients that use our products, throughout the clinical study process, in the course of our research collaborations, and from healthcare providers in the course of using our products and systems. Most healthcare providers, including hospitals from which we obtain patient health information, are subject to privacy and security regulations promulgated under

Current report — wording carried from elsewhere

Even if we are successful in defending against such claims, litigation could result in substantial costs and be a distraction to management and other employees. Any of the foregoing could harm our business, financial condition and results of operations.

Current report — wording carried from elsewhere

Future legislation, potential changes in federal regulatory agency leadership, and new policies and priorities under the current Administration may adversely impact our company.
Rearranged previous paragraphs (6)

Previous report — wording carried elsewhere

•To support our continued operations and the growth of our business, we may need access to our existing capital or to seek additional capital through new equity or debt financings, which sources of existing or additional capital may not be available to us on acceptable terms or at all. If we are unable to obtain, if needed, adequate financing or financing on terms satisfactory to us, it could harm our business and growth prospects;

Previous report — wording carried elsewhere

If we fail to comply with U.S. federal and state laws and regulations, including fraud and abuse and other healthcare laws and regulations, such as those relating to kickbacks and false claims for reimbursement, we could face substantial penalties and our business, financial condition and results of operations could be harmed.

Previous report — wording carried elsewhere

Regulatory compliance is expensive, complex and uncertain, and a failure to comply could lead to enforcement actions against us and other negative consequences for our business.

Previous report — wording carried elsewhere

Furthermore, while it is our policy to require all employees and contractors to execute agreements assigning relevant intellectual property to us, we may also be unsuccessful in executing such an agreement with each party who, in fact, conceives or develops intellectual property that we regard as our own. These assignment agreements may not be self-executing or adequate in scope, and may be breached or challenged, and we may be forced to bring claims against third parties, or defend claims that they may bring against us, to determine the ownership of what we regard as our intellectual property. We may not have adequate remedies for any such breaches, and such claims could harm our business, financial condition and results of operations.

Previous report — wording carried elsewhere

If we identify any material weaknesses or otherwise fail to maintain an effective system of internal control over financial reporting, we may not be able to accurately or timely report our financial condition or results of operations.

Previous report — wording carried elsewhere

Our history of recurring losses and anticipated expenditures as well as the significant amount of debt that we have incurred may affect our ability to operate our business and secure additional financing in the future.