System1 Inc

Current report

Item 1A. Risk Factors.

Current report

Investing in our Class A common stock involves a high degree of risk. You should consider carefully the risks and uncertainties described below, together with all of the other information contained in this Annual Report on Form 10-K, including the Consolidated Financial Statements and the related notes and Management’s Discussion and Analysis of Financial Condition and Results of Operations, before making investment decisions related to our Class A common stock. If any of the following risks are realized, our business, financial condition, results of operations and prospects could be materially and adversely affected. In that event, the market price of our Class A common stock could decline and you could lose part or all of your investment.

Current report

Risks Related to Our Business Strategy and Industry Generally

Current report

S1 Holdco was formed in 2013 and, as a result, has only a limited operating history upon which our business and prospects may be evaluated. Although we have experienced substantial revenue growth in our limited operating history, we may not be able to sustain this rate of growth or maintain our current revenue levels. We have encountered and will continue to encounter risks and challenges frequently experienced by growing companies in rapidly developing industries, including risks related to our ability to:

Current report

• build and maintain a reputation for providing a superior platform for monetizing consumer intent, and for creating trust and maintaining long-term relationships with consumers and platform customers;

Current report

• drive consumers with relevant commercial intent to our owned and operated websites and to websites operated by our advertisers;

Current report

• maintain and expand our relationships with suppliers of quality advertising inventory;

Current report

• distinguish ourselves from competitors;

Current report

• develop, offer, maintain and continually improve a competitive customer acquisition marketing platform that meets the evolving needs of our consumers and platform customers;

Current report

• scale our business efficiently to keep pace with demand for services such as RAMP and other digital media and advertising technology offerings;

Current report

• create new revenue opportunities through acquiring new businesses and successfully integrate and meaningfully grow those businesses;

Current report

• respond to evolving industry standards and the enactment of government regulations that impact our business, particularly in the areas of data collection and consumer privacy;

Current report

• prevent or mitigate failures or breaches of data security and our technology infrastructure

Current report

• expand our businesses internationally; and

Current report

• hire and retain qualified and motivated employees.

Current report

We cannot be certain that we will be successful in addressing these and other challenges we may face in the future. If we are unable to do so, our business may suffer, our revenue and operating results may decline and we may not be able to achieve further growth or sustain profitability.

Current report

If RAMP does not acquire users with the relevant commercial intent to our websites via acquisition marketing channels, we may not be able to profitability monetize users. Our revenue and operating results depend on our ability to generate revenue from advertisers and advertising networks by cost-effectively acquiring consumer Internet traffic and then directing these intent-driven consumers to our advertising partners. If we are unable to cost- effectively acquire users or provide value to our advertising partners based on their traffic acquisition costs, they may decline to utilize us to acquire and monetize users, which would harm our revenue and operating results.

Current report

We have multiple services agreements with Google pursuant to which we display and syndicate paid listings provided by Google in response to search queries generated through some of our businesses. In exchange for making our search traffic available to Google, we receive a share of the revenue generated by the paid listings supplied to us, as well as other search related services. For the year ended December 31, 2024, 78% of our total revenue was attributable to our agreements with Google.

Current report

The amount of revenue we receive from Google depends on a number of factors outside of our control, including the amount Google charges third parties for the display or delivery of advertisements, the efficiency of Google’s system in attracting advertisers and serving up paid listings in response to search queries and parameters established by Google regarding the time period for and scope of chargebacks or credits sought by advertisers on the basis of fraudulent and/or low quality clicks, clawbacks for bad traffic brought by our Network Partners, and placement of paid listings displayed in response to search queries that are not contextually relevant to the applicable search query.

Current report

Changes to the amount Google charges advertisers, the efficiency of Google’s paid listings network, Google’s judgment about the relative attractiveness to advertisers of clicks on paid listings from our websites or to the parameters applicable to the display of paid listings generally could result in a decrease in the amount of revenue we receive from Google, which would adversely affect our business, financial condition and results of operations. Such changes could be driven by a number of factors, including general market conditions, competition or policy and operating decisions made by Google.

Current report

Our agreements with Google also require that we comply with certain guidelines for the use of Google brands and services, which govern whether our platform may access Google services or be distributed through its Chrome Web Store, and the manner in which Google’s paid listings are displayed within search results across various third party platforms and products (including our websites). Google may generally unilaterally update its policies and guidelines without advance notice, which could in turn require modifications to, or prohibit or render obsolete, certain of our services or business practices. Such changes could be costly to address or otherwise adversely affect our business, financial condition and results of operations. Noncompliance with Google’s guidelines by us or the third parties to whom we are permitted to syndicate paid listings or through which we secure distribution arrangements for the businesses could result in the suspension of some or all Google services to us (or the websites of our third party partners) or the termination of our agreements by Google.

Current report

The termination of our agreements by Google, the curtailment of our rights under the agreements (including the failure to allow our platform to access Google services, whether pursuant to the terms thereof or otherwise), the failure of Google to perform its obligations under the agreements or policy changes implemented by Google under the agreements or otherwise would have an adverse effect on our business, financial condition and results of operations. If any of these events were to occur, we may not be able to find another suitable alternate provider of paid listings (or if an alternate provider were found, the economic and other terms of the agreement and the quality of paid listings may be inferior relative to our current arrangements).

Current report

We collect, process, store, share, disclose and use consumer information and other data, and our actual or perceived failure to protect such information and data or respect users’ privacy could damage our reputation and brand and harm our business and operating results.

Current report

Use of our technology solutions involves the storage and transmission of certain consumers’ information, including limited amounts of personally identifiable information. Security breaches could expose us to a risk of loss or exposure of this information, which could result in potential liability, litigation (including class action litigation) and remediation costs, as well as reputational harm, all of which could materially adversely affect our business and financial results. For example, unauthorized parties could steal our users’ names, email addresses, physical addresses, phone numbers and other information that we collect when providing referrals. While we use encryption and authentication technology licensed from third parties designed to effect secure transmission of such information, we cannot guarantee the security of the transfer and storage of the personal information we collect from advertisers.

Current report

Our websites and information systems are vulnerable to computer viruses, break-ins, phishing and/or impersonation attacks, attempts to overload our servers with denial-of-service or other hacking attacks, ransomware and similar incidents or disruptions from unauthorized use of our computer systems, as well as unintentional incidents causing data leakage, any of which could lead to interruptions, delays or website shutdowns, or could cause loss of critical data or the unauthorized disclosure, access, acquisition, alteration or use of personal or other confidential information. The security measures we use internally, which are designed to detect unauthorized activity and prevent or minimize security breaches, may not function as expected or may not be sufficient to protect against certain attacks. There can also be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our IT Systems. Additionally, we may face delays in identifying or responding to security breaches or other security incidents. Further, outside parties may attempt to fraudulently induce employees, consumers or advertisers to disclose sensitive information in order to gain access to our information or consumers’ or advertisers’ information.

Current report

Any or all of the issues above could adversely affect our ability to attract new users and increase engagement by existing users, cause existing users to curtail or stop use of our software products and/or visit our portfolio of websites, cause existing advertisers to stop using our platform and cancel their contracts or subject us to governmental or third-party lawsuits, investigations, regulatory fines or other actions or liability. Such issues may harm our business, results of operations and financial condition. In addition, we rely on third-party service providers to host or otherwise process some of such data, and any failure by a third party, or any other entity in our collective supply chain, to prevent or mitigate data security breaches or improper access to, or use, acquisition, disclosure, alteration, or destruction of, such data could have similar adverse consequences for us. Although we are not aware of any material information security incidents to date, we have detected common types of attempts to attack our information systems and data using means that have included viruses and phishing.

Current report

Data security breaches could also expose us to liability under various laws and regulations across jurisdictions and increase the risk of litigation and governmental or regulatory investigation. Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies have adopted breach notification and other requirements in the event that information subject to such laws is accessed by unauthorized persons and additional regulations regarding security of such data are possible. We may need to notify governmental authorities and affected individuals with respect to such incidents. For example, laws in all 50 U.S. states may require businesses to provide notice to individuals whose personal information has been disclosed as a result of a data security breach. Complying with such numerous and complex regulations in the event of a data security breach would be expensive and difficult, and failure to comply with these regulations could subject us to regulatory scrutiny and additional liability. We may also be contractually required to notify customers or other counterparties of a security incident, including a data security breach. Regardless of our contractual protections, any actual or perceived data security breach, or breach of our contractual obligations, could harm our reputation and brand, expose us to potential liability or require us to expend significant resources on data security and in responding to any such actual or perceived breach. As we expand our operations, we may also assume liabilities for data security breaches experienced by the companies we acquire.

Current report

There are numerous federal, state and local laws in the United States and around the world regarding privacy and the collection, processing, storing, sharing, disclosing, using, cross-border transfer and protecting of personal information and other data, the scope of which are changing, subject to differing interpretations, and which may be costly to comply with, may result in regulatory fines or penalties, and may be inconsistent between countries and jurisdictions or conflict with other current or pending rules.

Current report

We are subject to the terms of our privacy policies and privacy-related obligations to third parties. Although we endeavor to ensure that our public statements are complete, accurate and fully implemented, we may fail to do so, or it may be alleged that we have failed to do so. We may be subject to potential regulatory or other legal action if such policies or statements are found to be deceptive, unfair or misrepresentative of our actual practices. We strive to comply with all applicable laws, policies, legal obligations and industry codes of conduct relating to privacy and data protection, to the extent possible. However, it is possible that these obligations may be interpreted and applied in new ways or in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules or our practices or that new regulations could be enacted. Any failure or perceived failure by us to comply with our privacy policies, our privacy-related obligations to consumers or other third parties, or our privacy-related legal obligations, or any compromise of security that results in the unauthorized release or transfer of sensitive information, which could include personally identifiable information or other user data, may result in governmental investigations, enforcement actions, regulatory fines, litigation or public statements against us by consumer advocacy groups or others, and could cause consumers and advertisers to lose trust in us, all of which could be costly and have an adverse effect on our business. In addition, new and changed rules and regulations regarding privacy, data protection and cross-border transfers of consumer information could cause us to delay planned uses and disclosures of data to comply with applicable privacy and data protection requirements. Moreover, if third parties that we work with violate applicable laws or our policies, such violations also may put consumer or advertiser information at risk and could in turn harm our reputation, business and operating results.

Current report

Consumer Internet traffic acquired and/or referred through acquisition marketing channels also provides a significant amount of the first party data that improves the predictive power of RAMP, which we leverage to deliver relevant users to our advertisers. If we are unable to maintain these relationships with these acquisition marketing channels, our business, financial condition and results of operations could be adversely affected.

Current report

Efforts designed to drive visitors to our various brands and businesses or those of our advertisers may not be successful or cost-effective.

Current report

Traffic building and conversion initiatives involve considerable expenditures for online advertising and marketing. We have made, and expect to continue to make, significant expenditures for search engine marketing (primarily in the form of developing and maintaining a database of keywords and search terms, for which we purchase advertising primarily through Google and, to a lesser extent, Microsoft and Yahoo!), online display advertising and native advertising in connection with these initiatives, which may not be successful or cost-effective. To continue to reach consumers and users, we will need to identify and devote more of our overall marketing expenditures to digital advertising channels (such as online video and other digital platforms), as well as reach consumers and users via these channels. Since these channels are constantly changing and evolving, it could be difficult to assess returns on related digital marketing investments. Historically, we have had to increase advertising and marketing expenditures over time in order to attract and convert consumers, retain users and sustain our growth.

Current report

The display, including rankings, of search results can be affected by a number of factors, many of which are not in our direct control, and may change frequently, and we may not know how (or otherwise be in a position) to influence actions taken by search engines. With respect to search results in particular, even when search engines announce the details of their methodologies, their parameters may change from time to time, be poorly defined or be inconsistently interpreted.

Current report

Our marketing efforts may not be successful.

Current report

We currently rely on performance marketing channels that must deliver against certain return on investment with respect to metrics that are selected by our advertisers and are subject to change at any time. We are unable to control how our advertisers evaluate our performance. Certain of these metrics are subject to inherent challenges in measurement, and real or perceived inaccuracies in such metrics may harm our reputation and adversely affect our business. In addition, the metrics we provide may differ from estimates published by third parties or from similar metrics of our competitors due to differences in methodology. If our advertisers do not perceive our metrics to be accurate, or if we discover material inaccuracies in our metrics, it could adversely affect our online marketing efforts and business.

Current report

We have entered into, and may in the future enter into, credit facilities which contain operating and financial covenants that restrict our business and financing activities.

Current report

We have entered into, and may in the future enter into, credit facilities which contain restrictions that limit our flexibility in operating our business. Our credit facilities contain various covenants that limit our ability to engage in specified types of transactions. Subject to limited exceptions, these covenants limit our ability to, among other things:

Current report

• sell assets or make changes to the nature of our business;

Current report

• engage in mergers or acquisitions;

Current report

• incur, assume or permit additional indebtedness;

Previous report

The following is a summary of the principal risks described below in “Item 1A. Risk Factors” included in this Annual Report on Form 10-K. We believe that the risks described in the “Risk Factors” section are material to investors, but other factors not presently known to us or that we currently believe are immaterial may also adversely affect us. The following summary should not be considered an exhaustive summary of the material risks facing us, and it should be read in conjunction with the “Risk Factors” section and the other information contained in this Annual Report on Form 10-K.