SERA PROGNOSTICS INC

Previous wording

•If third-party payers do not adequately reimburse for the PreTRM test or any new tests we may develop, such tests may not be purchased or used, which may adversely affect our revenue and profits.

Current wording

•If third-party payers do not adequately reimburse for the PreTRM test or any new products we may develop, such products may not be purchased or used, which may adversely affect our revenue and profits.

Previous wording

•New reimbursement methodologies applicable to the PreTRM test, and other future tests, including new CPT codes, may decrease reimbursement rates from third-party payers.

Current wording

•New reimbursement methodologies applicable to the PreTRM test, and other future products, including new CPT codes, may decrease reimbursement rates from third-party payers.

Previous wording

March 31, 2024 and 2023 was $8.1 million and $10.6 million, respectively. As of March 31, 2024, we had an accumulated deficit of $255.0 million. Our losses may continue to increase in the future as we continue to devote a substantial portion of our resources to efforts to increase the adoption of, and reimbursement for, the PreTRM test, make improvements to this product, and research, develop, and commercialize new products and services.

Current wording

We have incurred net losses each year since our inception in 2008. To date, we have financed our operations primarily through private placements of our equity and debt securities, bank loans and the sale and issuance of Class A common stock in our initial public offering (“IPO”), which was completed in July 2021. Our net loss for the six months ended June 30, 2024 and 2023 was $16.4 million and $21.1 million, respectively. As of June 30, 2024, we had an accumulated deficit of $263.3 million. Our losses may continue to increase in the future as we continue to devote a substantial portion of our resources to efforts to increase the adoption of, and reimbursement for, the PreTRM test, make improvements to this product, and research, develop, and commercialize new products and services.

Previous wording

We currently receive substantially all of our revenues from the sales of the PreTRM test and expect to continue to receive revenue from sales of the PreTRM test and our other pipeline products and services, if approved, in the future. It is possible that we will not generate sufficient revenue from the sales of any of our products and services to cover our costs, including research and development expenses related to furthering our product pipeline, and achieve or sustain profitability. A significant element of our business strategy is to increase and maintain our in-network coverage with third-party payers. However, third-party payers, such as commercial insurers and government health care programs, may decide not to reimburse for the PreTRM test or other tests we may develop, may not reimburse for uses of the PreTRM test or our other tests for the pregnant patient population, or may set the amounts of such reimbursements at prices that do not allow us to cover our expenses. Many third-party payers currently either have negative coverage determinations or otherwise do not reimburse for low-risk patient preterm birth screening tests. State Medicaid programs currently do not reimburse for our tests; third-party payers are increasingly requiring that prior authorization be obtained prior to conducting testing as a condition to reimbursing for it, which may reduce and/or delay the reimbursement amounts.

Current wording

We currently receive substantially all of our revenues from the sales of the PreTRM test and expect to continue to receive revenue from sales of the PreTRM test and our other pipeline products and services in the future. It is possible that we will not generate sufficient revenue from the sales of any of our products and services to cover our costs, including research and development expenses related to furthering our product pipeline, and achieve or sustain profitability. A significant element of our business strategy is to increase and maintain our in-network coverage with third-party payers. However, third-party payers, such as commercial insurers and government health care programs, may decide not to reimburse for the PreTRM test or other tests we may develop, may not reimburse for uses of the PreTRM test or our other tests for the pregnant patient population, or may set the amounts of such reimbursements at prices that do not allow us to cover our expenses. Many third-party payers currently either have negative coverage determinations or otherwise do not reimburse for low-risk patient preterm birth screening tests. State Medicaid programs currently do not reimburse for our tests; third-party payers are increasingly requiring that prior authorization be obtained prior to conducting testing as a condition to reimbursing for it, which may reduce and/or delay the reimbursement amounts.

Previous wording

If third-party payers do not adequately reimburse for the PreTRM test or any new tests we may develop, such tests may not be purchased or used, which may adversely affect our revenue and profits.

Current wording

If third-party payers do not adequately reimburse for the PreTRM test or any new products we may develop, such products may not be purchased or used, which may adversely affect our revenue and profits.

Previous wording

New reimbursement methodologies applicable to the PreTRM test, and other future tests, including new CPT codes, may decrease reimbursement rates from third-party payers.

Current wording

New reimbursement methodologies applicable to the PreTRM test, and other future products, including new CPT codes, may decrease reimbursement rates from third-party payers.

Previous wording

FDA’s final rule provides that the LDT enforcement policy phase-out process will occur in gradual stages over a total period of four years, with premarket approval applications for high-risk tests to be submitted by the 3.5-year mark. Litigation challenging the agency’s authority to promulgate this final rule and to regulate laboratory-based testing under its medical device paradigm is highly likely, although the outcome of such litigation is uncertain. Litigation challenging the final rule may also have an impact on FDA’s plans to implement these new LDT requirements, making the potential implementation timeline somewhat uncertain. Affected stakeholders continue to press for a comprehensive legislative solution to create a harmonized paradigm for oversight of LDTs by both the FDA and CMS, instead of administrative agency action via FDA’s final rule approach, which may be disruptive to the industry and to patient access to certain diagnostic tests.

Current wording

On May 29, 2024, the American Clinical Laboratory Association (ACLA) and one of its members filed a complaint against the FDA in the Eastern District of Texas, alleging that the agency does not have authority to promulgate the LDT final rule and seeking to vacate the FDA’s action. The outcome of such litigation is uncertain. The ongoing litigation could potentially affect FDA’s plans to implement these new LDT requirements, making the potential implementation timeline somewhat uncertain. Affected stakeholders also continue to press for a comprehensive legislative solution to create a harmonized paradigm for oversight of LDTs by both the FDA and CMS, instead of administrative agency action via FDA’s final rule approach, which may be disruptive to the industry and to patient access to certain diagnostic tests. However, it is unclear whether any future legislative efforts would be successful.

Previous wording

If there are changes in FDA regulations or legislative authorities such that the agency begins to exercise oversight over LDTs, as has now been initiated through publication of the final rule, or if the FDA disagrees that our marketed tests are within the scope of its criteria used for defining LDTs, we may become subject to extensive regulatory requirements and may be required to stop selling our existing test or launching any other tests we may develop and to conduct additional clinical trials or take other actions prior to continuing to market our tests. If the FDA allows our tests to remain on the market but there is uncertainty about our tests, if they are labeled investigational by the FDA or if labeling claims the FDA allows us to make are very limited, orders from health care providers or reimbursement for our tests may decline.

Current wording

If there are changes in FDA regulations or legislative authorities such that the agency begins to exercise oversight over LDTs, as has now been initiated through the LDT final rule, or if the FDA disagrees that our marketed tests are within the scope of its criteria used for defining LDTs, we may become subject to extensive regulatory requirements and may be required to stop selling our existing test or launching any other tests we may develop and to conduct additional clinical trials or take other actions prior to continuing to market our tests. If the FDA allows our tests to remain on the market but there is uncertainty about our tests, if they are labeled investigational by the FDA or if labeling claims the FDA allows us to make are very limited, orders from health care providers or reimbursement for our tests may decline.

Previous wording

Moreover, if the FDA were to disagree with our conclusion that the PreTRM test falls within the scope of the agency’s LDT definition and that the PreTRM test is thus subject to FDA’s medical device authorities and implementing regulations today, irrespective of the final rulemaking to regulate all LDTs as devices, the agency could require that we obtain premarket approval or another type of device premarket authorization in order for us to commercialize the PreTRM test. As part of this process, we may also be required to conduct additional clinical testing before applying for commercial marketing authorization. Clinical trials must be conducted in compliance with FDA regulations in order to support a marketing submission to the agency for a regulated product, or the FDA may take certain enforcement actions or reject the data. Performing additional, new clinical studies and trials in order to obtain product approval from the FDA, if any were to become necessary, would take a significant amount of time and would substantially delay our ability to commercialize the PreTRM test, any or all of which would adversely impact our business. Any such clinical trial may need to comply with recent amendments to the FD&C Act requiring sponsors of most clinical studies of investigational devices to develop and submit a diversity action plan to the FDA. If we were to be required to develop a diversity action plan for any future clinical trial, such an obligation could result in further costs and potentially delay our ability to begin such a clinical trial.

Current wording

As part of the medical device authorization process, to the extent we become subject to those requirements under FDA’s LDT final rule and new enforcement direction policies applicable to currently marketed tests, we may be required to conduct additional clinical testing before applying for commercial marketing authorization. Clinical trials must be conducted in compliance with FDA regulations in order to support a marketing submission to the agency for a regulated product, or the FDA may take certain enforcement actions or reject the data. Performing additional, new clinical studies and trials in order to obtain product approval from the FDA, if any were to become necessary, would take a significant amount of time and would substantially delay our ability to commercialize the PreTRM test, any or all of which would adversely impact our business. Any such clinical trial may need to comply with recent amendments to the FD&C Act requiring sponsors of most clinical studies of investigational devices to develop and submit a diversity action plan to the FDA. If we were to be required to develop a diversity action plan for any future clinical trial, such an obligation could result in further costs and potentially delay our ability to begin such a clinical trial.

Previous wording

In addition, as noted above, Congress has been working on legislation to create an LDT and In Vitro Diagnostic, or IVD, regulatory framework that would be separate and distinct from the existing medical device regulatory framework. For example, as drafted and re-introduced for consideration by the current Congress, reform legislation called the Verifying Accurate, Leading-edge IVCT Development (VALID) Act would codify the term “in vitro clinical test,” or IVCT, and create a new medical product category separate from medical devices to include products currently regulated as IVDs as well as LDTs, among other provisions. The VALID Act would also create a new system for laboratories to use to submit their tests electronically to the FDA for approval, which is aimed at reducing the amount of time it would take for the agency to approve such tests, and establish a new program to expedite the development of diagnostic tests that can be used to address a current unmet need for patients. The FDA’s October 2023 publication of an LDT proposed rule that would apply the existing medical device framework to laboratory-developed products renewed stakeholder calls for a more targeted approach to modernizing the federal government’s oversight of clinical diagnostic tests. Most recently, on March 21, 2024, the House Energy and Commerce held a subcommittee hearing titled “Evaluating Approaches to Diagnostic Test Regulation and the Impact of the FDA’s Proposed Rule.” The private witnesses testifying at the hearing expressed broad support for the bipartisan VALID Act instead of the FDA’s proposal to use its medical devices authorities. It remains possible that congressional action in this area could displace the need for the FDA to implement its recently finalized rulemaking.

Current wording

In addition, as noted above, Congress has been working on legislation to create an LDT and In Vitro Diagnostic, or IVD, regulatory framework that would be separate and distinct from the existing medical device regulatory framework. For example, as drafted and re-introduced for consideration by the current Congress, reform legislation called the Verifying Accurate, Leading-edge IVCT Development (VALID) Act would codify the term “in vitro clinical test,” or IVCT, and create a new medical product category separate from medical devices to include products currently regulated as IVDs as well as LDTs, among other provisions. The VALID Act would also create a new system for laboratories to use to submit their tests electronically to the FDA for approval, which is aimed at reducing the amount of time it would take for the agency to approve such tests, and establish a new program to expedite the development of diagnostic tests that can be used to address a current unmet need for patients. On March 21, 2024, the House Energy and Commerce held a subcommittee hearing titled “Evaluating Approaches to Diagnostic Test Regulation and the Impact of the FDA’s Proposed Rule.” The private witnesses testifying at the hearing expressed broad support for the bipartisan VALID Act instead of the FDA’s plan to use its medical devices authorities. More recently, following FDA’s release of the final rule at the end of April, certain members of Congress have objected strenuously to the agency’s action. The FY2025 funding bill for FDA that was passed by the House Appropriations Committee on July 17, 2024 also recommends that the agency suspend its efforts to implement the rule and to instead partner with Congress on developing legislation for the field.

Previous wording

If Congress were to pass the VALID Act or any other legislation applicable to the FDA’s regulation of LDTs, or if the FDA were to successfully implement new regulations for such products following resolution of any litigation challenging the agency’s underlying authority to issue the May 2024 LDT final rule, we will likely be subject to increased regulatory burdens such as registration and listing requirements, adverse event reporting requirements, and quality control requirements. Any legislation or formal FDA regulatory framework affecting LDTs is also likely to have premarket application requirements prohibiting commercialization without FDA authorization and controls regarding modification to the tests that may require further FDA submissions. Any such process would likely be costly and time-consuming.

Current wording

If Congress were to pass the VALID Act or any other legislation applicable to the FDA’s regulation of LDTs, or if the FDA were to successfully implement new regulations for such products following resolution of the pending ACLA lawsuit or any other litigation challenging the agency’s underlying authority to issue the May 2024 LDT final rule, we will likely be subject to increased regulatory burdens such as registration and listing requirements, adverse event reporting requirements, and quality control requirements. Any legislation or formal FDA regulatory framework affecting LDTs is also likely to have premarket application requirements prohibiting commercialization without FDA authorization and controls regarding modification to the tests that may require further FDA submissions. Any such process would likely be costly and time-consuming.

Previous wording

The global data protection landscape is rapidly evolving, and we are or may become subject to numerous state and federal laws, requirements, and regulations governing the collection, use, disclosure, retention, and security of personal information. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, or standards or perception of their requirements may have on our business. This evolution may create uncertainty in our business, affect our ability to operate in certain jurisdictions or to collect, store, transfer, use and share personal information, necessitate the acceptance of more onerous obligations in our contracts, result in liability, or impose additional costs on us. The cost of compliance with these laws, regulations, and standards is high and is likely to increase in the future. Any failure or perceived failure by us to comply with federal or state laws or regulations, our internal policies and procedures, or our contracts governing our use and disclosures of personal information could result in negative publicity, government investigations and enforcement actions, claims by third parties, and damage to our reputation, any of which could have a material adverse effect on our operations, financial performance, and business.

Current wording

The global data protection landscape is rapidly evolving, and we are or may become subject to numerous state, federal, and international laws, requirements, and regulations governing the collection, use, disclosure, retention, and security of personal information. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, or standards or perception of their requirements may have on our business. This evolution may create uncertainty in our business, affect our ability to operate in certain jurisdictions or to collect, store, transfer, use and share personal information, necessitate the acceptance of more onerous obligations in our contracts, result in liability, or impose additional costs on us. The cost of compliance with these laws, regulations, and standards is high and is likely to increase in the future. Any failure or perceived failure by us to comply with federal or state laws or regulations, our internal policies and procedures, or our contracts governing our use and disclosures of personal information could result in negative publicity, government investigations and enforcement actions, claims by third parties, and damage to our reputation, any of which could have a material adverse effect on our operations, financial performance, and business.

Previous wording

Certain states have also adopted privacy and security laws and regulations, some of which may be more stringent than HIPAA and/or regulate information other than PHI. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. At the state level, for example, California has enacted the California Consumer Privacy Act, or CCPA, an extremely comprehensive and stringent privacy law. The CCPA took effect on January 1, 2020, and became enforceable by the California Attorney General on July 1, 2020. It creates individual privacy rights for California consumers and increases the privacy and security obligations of entities handling certain personal data. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches. CCPA does not apply to health information that is protected by HIPAA or the California Confidentiality of Medical Information Act, but CCPA still applies to other types of personal information held by HIPAA covered entities, such as personnel or marketing information. The regulations issued under the CCPA have been modified several times, and there is still some uncertainty about how the law will be interpreted and enforced.

Current wording

Certain states have also adopted privacy and security laws and regulations, some of which may be more stringent than HIPAA and/or regulate information other than PHI. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. At the state level, for example, California has enacted the California Consumer Privacy Act, or CCPA, an extremely comprehensive and stringent privacy law. The CCPA took effect on January 1, 2020, and became enforceable by the California Attorney General on July 1, 2020. It creates individual privacy rights for California consumers (as that term is broadly defined) and increases the privacy and security obligations of entities handling certain personal data, including obligations to provide disclosures to California consumers that include detailed information about how their personal information is used. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches. CCPA does not apply to health information that is protected by HIPAA or the California Confidentiality of Medical Information Act, but CCPA still applies to other types of personal information held by HIPAA covered entities, such as personnel or marketing information. The regulations issued under the CCPA have been modified several times, and there is still some uncertainty about how the law will be interpreted and enforced.

Previous wording

In addition, California voters also approved a new privacy law, the California Privacy Rights Act, or CPRA, on November 3, 2020 which went into effect in January 2023 with enforcement commencing in July 2023. CPRA modifies the CCPA significantly, resulting in further uncertainty, additional costs and expenses stemming from efforts to comply, and additional potential for harm and liability for failure to comply. The CPRA imposes additional obligations on companies covered by the legislation and expands consumers’ rights with respect to certain sensitive personal information. The CPRA also creates a new state agency vested with authority to implement and enforce the CCPA and the CPRA. A number of other states have enacted their own privacy laws, including Colorado, Connecticut, Delaware, Florida, Indiana,

Current wording

In addition, California voters also approved the California Privacy Rights Act, or CPRA, on November 3, 2020 which went into effect in January 2023 with enforcement commencing in July 2023. CPRA modifies the CCPA significantly, resulting in further uncertainty, additional costs and expenses stemming from efforts to comply, and additional potential for harm and liability for failure to comply. The CPRA imposes additional obligations on companies covered by the legislation and expands consumers’ rights with respect to certain sensitive personal information. The CPRA also creates a new regulatory entity, the California Privacy Protection Agency, which is vested with authority to implement and enforce the

Previous wording

The CCPA, the CPRA, and similar laws may increase our compliance costs and potential liability. Any liability from failure to comply with the requirements of these laws could adversely affect our financial condition. All U.S. states have implemented data breach notification laws that overlap and often conflict with HIPAA and apply simultaneously. We must comply with all of these laws simultaneously in the event of a data breach which is a complicated and expensive proposition.

Current wording

The CCPA, the CPRA, and similar laws may increase our compliance costs and potential liability. Any liability from failure to comply with the requirements of these laws could adversely affect our financial condition. All U.S. states have implemented data breach notification laws that overlap and often conflict with HIPAA and apply simultaneously. Additionally, various U.S. state and federal consumer protection laws and regulations govern the collection, use, disclosure and protection of health-related and other personal information. We must comply with all of these laws simultaneously in the event of a data breach which is a complicated and expensive proposition.

Previous wording

Unauthorized access, loss, or dissemination of information could disrupt our operations, including our ability to perform tests, provide test results, bill payers or patients, process claims and appeals, provide customer assistance services, conduct research and development activities, develop and commercialize tests, collect, process and prepare company financial information, provide information about our tests, educate patients and health care providers about our service, and manage the administrative aspects of our business, any of which could damage our reputation and adversely affect our business. Any breach could also result in the compromise of our trade secrets and other proprietary information, which could adversely affect our competitive position.

Current wording

Unauthorized access, loss, or dissemination of information could disrupt our operations, including our ability to perform tests, provide test results, bill payers or patients, process claims and appeals, provide customer assistance services, conduct research and development activities, develop and commercialize tests, collect, process and prepare company financial information, provide information about our tests, educate patients and health care providers about our service, and manage the administrative aspects of our business, any of which could damage our reputation and adversely affect our business. Any cybersecurity incident could also result in the compromise of our trade secrets and other proprietary information, which could adversely affect our competitive position.

Previous wording

Any failure or perceived failure by us or any third-party collaborators, service providers, contractors or consultants to comply with privacy, confidentiality, data security or similar obligations, or any data security incidents or other security breaches that result in the accidental, unlawful or unauthorized access to, use of, release of, or transfer of sensitive information, including personally identifiable information, or PHI, may result in negative publicity, harm to our reputation, governmental investigations, enforcement actions, regulatory fines, litigation or public statements against us, could cause third parties to lose trust in us or could result in claims by third parties, including class action lawsuits, any of which could have a material adverse effect on our reputation, business, financial condition or results of operations. While we have implemented data security measures intended to protect our information, data, information technology systems, applications and infrastructure, there can be no assurance that such measures will successfully prevent service interruptions or data security incidents or that these measures will be satisfactory to regulatory authorities in the event of an audit, investigation or complaint.

Current wording

Any failure or perceived failure by us or any third-party collaborators, service providers, contractors or consultants to comply with privacy, confidentiality, cybersecurity or similar obligations, or any cybersecurity incidents or other security breaches that result in the accidental, unlawful or unauthorized access to, use of, release of, or transfer of sensitive information, including personally identifiable information, or PHI, may result in negative publicity, harm to our reputation, governmental investigations, enforcement actions, regulatory fines, litigation or public statements against us, could cause third parties to lose trust in us or could result in claims by third parties, including class action lawsuits, any of which could have a material adverse effect on our reputation, business, financial condition or results of operations. While we have implemented cybersecurity measures intended to protect our information, data, information technology systems, applications and infrastructure, there can be no assurance that such measures will successfully detect or prevent service interruptions or cybersecurity incidents or that these measures will be satisfactory to regulatory authorities in the event of an audit, investigation or complaint.

Previous wording

In the ordinary course of our business, we and the third parties upon which we rely collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, process) proprietary, confidential, and sensitive data, including personal data, intellectual property, trade secrets, and other sensitive data (collectively, sensitive information). We may implement a variety of security measures designed to protect systems that store our information, given their size and complexity and the increasing amounts of information maintained on our internal information technology systems and those of our third-party service providers and suppliers, and consultants, these systems are potentially vulnerable to breakdown or other damage or interruption from service interruptions, system malfunction, natural disasters, terrorism, war, and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our employees, contractors, consultants, business partners, and/or other third parties, or from cyber-attacks by malicious third parties, which may compromise our system infrastructure or lead to the loss, destruction, alteration or dissemination of, or damage to, our data.

Current wording

In the ordinary course of our business, we and the third parties upon which we rely collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, process) proprietary, confidential, and sensitive data, including personal data, intellectual property, trade secrets, and other sensitive data (collectively, sensitive information). We may implement a variety of security measures designed to protect systems that store our information, given their size and complexity and the increasing amounts of information maintained on our internal information technology systems and those of our third-party service providers and suppliers, and consultants, these systems are potentially vulnerable to breakdown or other damage or interruption from service interruptions, system malfunction, natural disasters, terrorism, war, and telecommunication and electrical failures, as well as cybersecurity incidents from inadvertent or intentional actions by our employees, contractors, consultants, business partners, and/or other third parties, or from cyber-attacks by malicious third parties, which may compromise our system infrastructure or lead to the loss, destruction, alteration or dissemination of, or damage to, our data.

Previous wording

To the extent that any disruption or security breach were to result in loss, destruction, unavailability, alteration or dissemination of, or damage to, our data or applications, or for it to be believed or reported that any of these occurred, we could incur liability and reputational damage and the development and commercialization of our programs could be delayed. Further, our insurance policies may not be adequate to compensate us for the potential losses arising from any such disruption in, or failure or security breach of, our systems or third-party systems where information important to our business operations or commercial development is stored.

Current wording

To the extent that any disruption or cybersecurity incident were to result in, or be perceived to result in, loss, destruction, unavailability, alteration or dissemination of, or damage to, our data or applications, we could incur liability and reputational damage and the development and commercialization of our programs could be delayed. Further, our insurance policies may not be adequate to compensate us for the potential losses arising from any such disruption in, or failure or cybersecurity incident impacting, our systems or third-party systems where information important to our business operations or commercial development is stored.

Previous wording

If we (or a third party upon whom we rely) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may cause stakeholders (including investors and potential customers) to stop supporting our platform, products and services, deter new customers from products and services, and negatively impact our ability to grow and operate our business.

Current wording

If we (or a third party upon whom we rely) experience a cybersecurity incident or are perceived to have experienced a cybersecurity incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Cybersecurity incidents and attendant consequences may cause stakeholders (including investors and potential customers) to stop supporting our platform, products and services, deter new customers from products and services, and negatively impact our ability to grow and operate our business.

Previous wording

We are not currently eligible to use a short-form Form S-3 registration due to our failure to timely file a current report on Form 8‑K relating to the resignation of one of our named executive officers, which we resolved by the filing of an 8-K on July 31, 2023. As management continues to work with outside counsel to adopt formal training procedures to periodically educate the Company’s officers as to the Company’s SEC reporting responsibilities, our principal executive and principal financial officers have concluded that we had effective disclosure controls and procedures as of March 31, 2024. However, we cannot provide assurance that we will not have further lapses in our disclosure controls and procedures, which could result in our failure to provide accurate and timely disclosure to our investors.

Current wording

As management continues to work with outside counsel to adopt formal training procedures to periodically educate the Company’s officers as to the Company’s SEC reporting responsibilities, our principal executive and principal financial officers have concluded that we had effective disclosure controls and procedures as of June 30, 2024. However, we cannot provide assurance that we will not have further lapses in our disclosure controls and procedures, which could result in our failure to provide accurate and timely disclosure to our investors.