Skip to main content

Health Catalyst Inc

For the period ended Dec 31, 2024. Filed Feb 26, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2024 · Filed Feb 26, 2025

HCAT$1.46-2.7%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2023-12-31; filed 2024-02-22.

0001636422-24-000016

Item 1A. Risk Factors

Current report: 10-K

Period ended 2024-12-31; filed 2025-02-26.

0001636422-25-000028

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 282 previous paragraphs and 301 current paragraphs.

211 unchanged; 56 reworded; 22 added; 6 removed; 9 previous and 12 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (22)

Current report

•the extent to which our clients opt for non-recurring project-based work rather than FTE subscription contracts since non-recurring, project-based fees are less predictable than our recurring services and can drive fluctuations in quarterly professional services revenues and in our new Dollar-based Retention Rate metric and in prior period comparisons;

Current report

Our increasing reliance on AI and machine learning technologies may expose us to significant risks, including development and deployment challenges, regulatory uncertainties, and potential third-party claims, which could adversely affect our reputation, business, results of operations, and financial condition.

Current report

We use AI and generative AI, machine learning, and automated decision-making technologies, including proprietary AI and machine learning algorithms and models, (collectively, AI Technologies) throughout our business, and are making investments in this area.

Current report

We expect that increased investment will be required in the future to continuously improve our use of AI Technologies. As with many technological innovations, there are significant risks involved in developing, maintaining, and deploying these technologies and there can be no assurance that the usage of or our investments in such technologies will always enhance our Solution, platform and service offerings or be beneficial to our business, including our efficiency or profitability.

Current report

AI Technologies have been known to produce false or “hallucinatory” inferences or outputs and may subject us to new or heightened legal, regulatory, ethical, or other challenges. In particular, if the models underlying our AI Technologies are: incorrectly designed or implemented; trained or reliant on incomplete, flawed, inadequate, inaccurate, biased, or otherwise poor quality data, or on data to which we do not have sufficient rights or in relation to which we and/or the providers of such data have not implemented sufficient legal compliance measures; used without sufficient oversight and governance to ensure their responsible use; and/or adversely impacted by unforeseen defects, technical challenges, cybersecurity threats or material performance issues, any of which may not be easily detectable, the performance of our Solution, and business, as well as our reputation and the reputations of our clients, could suffer or we could incur liability resulting from the violation of laws or contracts to which we are a party or civil claims.

Current report

In addition, market acceptance, understanding, and valuation of and consumer perceptions of platforms, products, and programs that incorporate AI Technology is uncertain and the perceived value of our AI Technologies could be inaccurate. For example, inappropriate or controversial data practices by developers and end-users, or other factors adversely affecting public opinion of AI Technologies, could impair the acceptance of such AI Technologies, including those incorporated in our Solution. Our failure to successfully develop AI Technologies and apply AI Technologies to our Solution could depress the market price of our stock and impair our ability to: raise capital; expand our business; provide, improve, and diversify our Solution, platform and service offerings; continue our operations and efficiently manage our operating expenses; and respond effectively to competitive developments.

Current report

In addition to our proprietary AI Technologies, we use AI Technologies licensed from third parties, including in our Solution, and our ability to continue to use such third-party AI Technologies at the scale we need may be dependent on access to specific third-party software and infrastructure. We cannot control the availability or pricing of such third-party AI Technologies, especially in a highly competitive environment, and we may be unable to negotiate favorable economic terms with the applicable providers. If any such third-party AI Technologies become incompatible with our Solution and programs or unavailable for use, or if the providers of such models unfavorably change the terms on which their AI Technologies are offered or terminate their relationship with us, our Solution may become less appealing to our clients and our business will be harmed.

Current report

In addition, to the extent any third-party AI Technologies are used as a hosted service, any disruption, outage, or loss of information through such hosted services could disrupt our operations or solutions, damage our reputation, cause a loss of confidence in our Solution, or result in legal claims or proceedings, for which we may be unable to recover damages from the affected provider.

Current report

Already, certain existing legal regimes, such as various U.S. governmental and regulatory agencies relating to data privacy, regulate certain aspects of AI Technologies, and various U.S. states and other foreign jurisdictions are applying, or are considering applying, their platform moderation, cybersecurity, and data protection laws to AI Technologies or are considering general legal frameworks for the regulation of AI Technologies. In the United States, the Trump administration has rescinded an executive order relating to the safe and secure development of AI Technologies that was previously implemented by the Biden administration. The Trump administration then issued a new executive order that, among other things, requires certain agencies to develop and submit to the President action plans to “sustain and enhance America’s global AI dominance,” and to specifically review rulemaking taken pursuant to the rescinded Biden executive order and, if possible, rescind any such rulemaking to the extent it is consistent with, or presents a barrier to, the Trump administration’s new executive order. Thus, the Trump administration may continue to rescind other existing federal orders and/or administrative policies relating to AI Technologies, or may implement new executive orders and/or other rule making relating to AI Technologies in the future. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive. Legislation related to AI Technologies has also been introduced at the federal level and is advancing at the state level. For example, the California Privacy Protection Agency is currently in the process of finalizing regulations under the California Consumer Privacy Act, as amended by the California Privacy Rights Acct (collectively, the CCPA) regarding the use of automated decision-making. California also enacted several new laws in 2024 that further regulate use of AI Technologies and provide consumers with additional protections around companies’ use of AI Technologies, such as requiring companies to disclose certain uses of generative AI. Other states have also passed AI-focused legislation, such as Colorado’s Artificial Intelligence Act, which will require developers and deployers of “high risk” AI systems to implement certain safeguards against algorithmic discrimination, and Utah’s Artificial Intelligence Policy Act, which establishes disclosure requirements and accountability measures for the use of generative AI in certain consumer interactions. Such additional regulations may impact our ability to develop and use AI Technologies in the future.

Current report

It is possible that further new laws and regulations will be adopted in the United States and in other non-U.S. jurisdictions, or that existing laws and regulations, including competition and antitrust as well as scope of practice laws, may be interpreted in ways that would limit our ability to use AI Technologies for our business, or require us to change the way we use AI Technologies in a manner that negatively affects the performance of our Solution and business and the way in which we use AI Technologies. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our Solution, platform and service offerings in certain jurisdictions if the laws, regulations, or decisions are not consistent across jurisdictions. Further, because AI Technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI. The cost to comply with such laws, regulations, or decisions and/or guidance interpreting existing laws, could be significant and would increase our operating expenses (such as by imposing additional reporting obligations regarding our use of AI Technologies or limiting our use of AI Technologies to support our care team). Such an increase in operating expenses, as well as any actual or perceived failure to comply with such laws and regulations, could harm our business, results of operations, and financial condition.

Current report

•AI Technologies: In addition, we use AI Technologies in our business. The regulatory framework for AI Technologies is rapidly evolving as many federal, state, and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations. Additionally, existing laws and regulations may be interpreted in ways that would affect the operation of AI Technologies. As a result, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, standards, or market perception of their requirements may have on our business and may not always be able to anticipate how to respond to these laws or regulations. It is possible that new laws and regulations will be adopted in the United States and in other non-U.S. jurisdictions, or that existing laws and regulations, including competition and antitrust laws, may be interpreted in ways that would limit our ability to use AI Technologies for our business, or require us to change the way we use AI Technologies in a manner that negatively affects the performance of our products, services, and business and the way in which we use AI Technologies.

Current report

We may need to expend resources to adjust our Solution or services in certain jurisdictions if the laws, regulations, or decisions are not consistent across jurisdictions. Further, the cost to comply with such laws, regulations, or decisions and/or guidance interpreting existing laws, could be significant and would increase our operating expenses (such as by imposing additional reporting obligations regarding our use of AI Technologies). Such an increase in operating expenses, as well as any actual or perceived failure to comply with such laws and regulations, could adversely affect our business, financial condition and results of operations.

Current report

Risks Related to Our Indebtedness

Current report

Our indebtedness could adversely affect our financial condition and prevent us from fulfilling our existing or future debt obligations, and we may not generate sufficient cash flow from our business to pay our debt.

Current report

In addition, on July 16, 2024, we entered into the Credit Agreement, which provides for a five-year term loan facility (the Term Loan Facility) in an aggregate principal amount of up to $225 million, consisting of an initial term loan in the aggregate principal amount of $125 million, which was funded in full at closing, and a delayed draw term loan facility in the aggregate principal amount of $100 million, which was undrawn as of the closing. We had the option to draw up to $40.0 million under the delayed draw facility within six months after the Closing Date and on October 29, 2024, we drew an additional principal amount of $37.7 million. We also have the option to draw up to an additional $60.0 million under the delayed draw facility within eighteen months after the Closing Date, subject to satisfaction of certain conditions, including a minimum liquidity threshold, and a maximum recurring revenue/leverage ratio. Borrowings under the Credit Agreement are expected to bear interest at a rate per annum equal to the secured overnight financing rate (SOFR) plus 6.5%.

Current report

Our outstanding and any future debt obligations could make us more vulnerable to adverse changes in general U.S. and worldwide economic conditions, including rising interest rates, regulatory, and competitive conditions. We may not use the cash proceeds from the Notes and/or the Term Loan Facility in an optimally productive and profitable manner. Our ability to satisfy our debt obligations will depend on market conditions and our future performance, which is subject to economic, financial, competitive, and other factors, including those described in these risk factors, many of which are beyond our control.

Current report

Since inception, our business has generated net losses, and we may continue to incur significant losses. As a result, we may not have enough available cash or be able to obtain financing at the time we are required to make payments owed under the Notes and/or the Term Loan Facility. If we are unable to satisfy our debt obligations, we may be required to seek funds from external sources, which may not be available on acceptable terms, if at all, and which could intensify the risks related to our indebtedness and further restrict our operating and financial flexibility. Further, any repayment of our debt with equity would dilute the ownership interests of our existing stockholders. In the event of a default on our debt obligations, we may be required to repurchase the Notes, amounts owed under our Term Loan Facility may be accelerated, and assets serving as collateral under our Term Loan Credit Facility may be subject to foreclosure. Any default under the Indenture or the Credit Agreement could also lead to a default under our future indebtedness and could have a material adverse effect on our business, results of operations, and financial condition. Further, if we are liquidated, the lender’s rights to repayment would be senior to the rights of the holders of our common stock to receive any proceeds from the liquidation.

Current report

Our Credit Agreement contains covenants and other provisions that restrict our ability to take certain actions and may limit our ability to operate or grow our business in the future.

Current report

The Credit Agreement contains certain affirmative covenants and negative covenants, including covenants that restrict our ability to take certain actions including, among other things and subject to certain exceptions, the incurrence of debt, the granting of liens, engaging in mergers and other fundamental changes, the making of investments, entering into transactions with affiliates, the payment of dividends and other restricted payments, the prepayment of other indebtedness and the sale of assets.

Current report

The Credit Agreement also requires us to comply with a minimum liquidity threshold, a maximum recurring revenue-based ratio and a maximum EBITDA-based net leverage ratio. In addition, payments of amounts owed under the Term Loan Facility will require us to dedicate cash flow from operations or cash on hand, which will reduce the amounts available to fund working capital, capital expenditures, transactions (including pursuing strategic initiatives), and other general corporate purposes. Such limitations could limit our flexibility to plan for or react to changes in our business or industry; place us at a disadvantage compared to our competitors that have less debt; limit our ability to borrow or otherwise raise additional capital as needed; or otherwise have a material adverse effect on our business, results of operations, and financial condition.

Current report

We are exposed to interest rate risks with regard to our Term Loan Facility and any future refinancing thereof.

Current report

Outstanding principal amounts under our Term Loan Facility are expected to accrue interest at a floating rate equal to SOFR plus 6.5% per year. In the event that SOFR is unavailable, interest will accrue at a floating rate equal to the alternate base rate plus 5.5% per year. Accordingly, whenever we have amounts outstanding under our Term Loan Facility, our cash flows and results of operations will be subject to interest rate risk exposure associated with the debt balance outstanding. We currently are not a party to an interest rate swap contract or other derivative instrument designed to hedge our exposure to interest rate fluctuation risk.
Removed paragraphs (6)

Previous report

Risks Related to Our Outstanding Convertible Notes

Previous report

Servicing our Notes may require a significant amount of cash, and we may not have sufficient cash or the ability to raise the funds necessary to settle conversions of the Notes in cash, repay the Notes at maturity, or repurchase the Notes as required.

Previous report

In addition, our ability to repurchase or to pay cash upon conversion or at maturity of the Notes may be limited by law or regulatory authority or by other agreements governing our future indebtedness. Our failure to repurchase Notes upon the occurrence of certain events or to pay cash upon conversion or at maturity of the Notes as required by the Indenture would constitute a default under the Indenture.

Previous report

A default under the Indenture or the occurrence of certain events that allow Noteholders to require repurchase could also lead to a default under agreements governing our future indebtedness and could have a material adverse effect on our business, results of operations, and financial condition. If the payment of the related indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay the indebtedness and repurchase the Notes or to pay cash upon conversion or at maturity of the Notes.

Previous report

If we raise additional capital through debt financing, the terms of any new debt could further restrict our ability to operate our business.

Previous report

If we raise any additional debt financing, the terms of such additional debt could further restrict our operating and financial flexibility by subjecting us to customary affirmative and negative covenants, indemnification provisions, and events of default. Further, if we are liquidated, the lender’s rights to repayment would be senior to the rights of the holders of our common stock to receive any proceeds from the liquidation. Any declaration by a lender of an event of default could significantly harm our business and prospects and could cause the price of our common shares to decline.
Reworded paragraphs (56)

Previous wording

We face competition from industry-agnostic analytics companies, EHR companies, such as Epic Systems and Cerner, point solution vendors, and healthcare organizations that perform their own analytics. These competitors include large, well-financed, and technologically sophisticated entities. Some of our current large competitors, such as Optum Analytics and IBM, have greater name recognition, longer operating histories, significantly greater resources than we do, and/or more established distribution networks and relationships with healthcare providers. As a result, our current and potential competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, or client requirements. In addition, current and potential competitors have established, and may in the future establish, cooperative relationships with vendors of complementary products or services to increase the availability of their products or services to the marketplace. Current or future competitors may consolidate to improve the breadth of their products, directly competing with our Solution. Accordingly, new competitors may emerge that have greater market share, larger client bases, greater breadth and volume of data, more widely adopted proprietary technologies, broader offerings, greater marketing expertise, greater financial resources, and larger sales forces than we have, which could put us at a competitive disadvantage.

Current wording

We face competition from industry-agnostic analytics companies, electronic health records (EHR) companies, such as Epic Systems and Oracle Health, point solution vendors, and healthcare organizations that perform their own analytics. These competitors include large, well-financed, and technologically sophisticated entities. Some of our current large competitors, such as Optum Analytics and IBM, have greater name recognition, longer operating histories, significantly greater resources than we do, and/or more established distribution networks and relationships with healthcare providers. As a result, our current and potential competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, or client requirements. In addition, current and potential competitors have established, and may in the future establish, cooperative relationships with vendors of complementary products or services to increase the availability of their products or services to the marketplace. Current or future competitors may consolidate to improve the breadth of their products, directly competing with our Solution. Accordingly, new competitors may emerge that have greater market share, larger client bases, greater breadth and volume of data, more widely adopted proprietary technologies, broader offerings, greater marketing expertise, greater financial resources, and larger sales forces than we have, which could put us at a competitive disadvantage.

Previous wording

Macroeconomic challenges (including high inflationary and/or high interest rate environments, or market volatility caused by bank failures and measures taken in response thereto) and any new public health crisis could harm our business, results of operations, and financial condition.

Current wording

Macroeconomic challenges (including high inflationary and/or high interest rate environments, new tariffs, or market volatility and measures taken in response thereto), the tight labor market and any natural disasters or new public health crises could harm our business, results of operations, and financial condition.

Previous wording

Recent macroeconomic challenges (including the high inflationary and/or high interest rate environments), and the tight labor market continue to adversely affect workforces, organizations, governments, clients, economies, and financial markets globally and have disrupted the normal operations of many businesses, including our business. These factors have and could further decrease healthcare industry spending, adversely affect demand for our Solution, cause one or more of our clients to file for bankruptcy protection or go out of business, cause one or more of our clients to fail to renew, terminate, or renegotiate their contracts, impact expected spending from new clients, negatively impact collections of accounts receivable, and harm our business, results of operations, and financial condition.

Current wording

Recent macroeconomic challenges (including high inflationary and/or high interest rate environments, new tariffs, or market volatility and measures taken in response thereto), and the tight labor market continue to adversely affect workforces, organizations, governments, clients, economies, and financial markets globally and have disrupted the normal operations of many businesses, including our business. These factors have and could further decrease healthcare industry spending, adversely affect demand for our Solution, cause one or more of our clients to file for bankruptcy protection or go out of business, cause one or more of our clients to fail to renew, terminate, or renegotiate their contracts, impact expected spending from new clients, negatively impact collections of accounts receivable, and harm our business, results of operations, and financial condition.

Previous wording

Further, the sales cycle for a new DOS Subscription Client, which we estimate to typically be approximately one year, could lengthen, as we started to experience in 2022, resulting in a potentially longer delay between increasing operating expenses and the generation of corresponding revenue, if any. We cannot predict with any certainty whether and to what degree the disruption caused by any new public health crisis, the high inflationary environment, rising interest rates, market volatility caused by bank failures and measures taken in response thereto, and reactions to any of the foregoing will continue and expect to face difficulty accurately predicting our internal financial forecasts. Further, it is not possible for us to predict the duration or magnitude of the adverse results of public health crises, and macroeconomic challenges (including the high inflationary and/or high interest rate environments), and their effects on our business, results of operations, or financial condition at this time. Further, market volatility as a result of future failures of financial institutions, similar to the failures of Silicon Valley Bank and Signature Bank, could lead to market-wide liquidity shortages, impair the ability of companies to access near-term working capital needs and create additional market and economic uncertainty. In the event of a failure of any of the financial institutions where we maintain our cash and cash equivalents, there can be no assurance that we would be able to access uninsured funds in a timely manner or at all. Any inability to access or delay in accessing these funds could adversely affect our business and financial position.

Current wording

Further, the sales cycle for a new Platform Client, which we estimate to typically be approximately one year, could lengthen, as we experienced in 2022 and 2023, resulting in a potentially longer delay between increasing operating expenses and the generation of corresponding revenue, if any. While we have limited operating history selling Health Catalyst Ignite, we believe its sales cycle generally may be shorter than DOS. We cannot predict with any certainty whether and to what degree the disruption caused by any natural disasters, new public health crises, the high inflationary environment, rising interest rates, new tariffs, market volatility and measures taken in response thereto, and reactions to any of the foregoing will continue and expect to face difficulty accurately predicting our internal financial forecasts. Further, it is not possible for us to predict the duration or magnitude of the adverse results of natural disasters, new public health crises, and macroeconomic challenges (including high inflationary and/or high interest rate environments, and new tariffs), and their effects on our business, results of operations, or financial condition at this time. Further, market volatility could lead to market-wide liquidity shortages, impair the ability of companies to access near-term working capital needs and create additional market and economic uncertainty. In the event of a failure of any of the financial institutions where we maintain our cash and cash equivalents, there can be no assurance that we would be able to access uninsured funds in a timely manner or at all. Any inability to access or delay in accessing these funds could adversely affect our business and financial position.

Previous wording

We are continually executing a number of growth initiatives, strategies, and operating plans designed to enhance our business, as well as some cost reduction and restructuring initiatives. We may not be able to successfully complete these growth initiatives, strategies, operating plans, and cost reduction and restructuring initiatives, and realize all of the benefits, including growth targets and cost savings, that we expect to achieve or it may be more costly to do so than we anticipate. A variety of factors could cause us not to realize some or all of the expected benefits. These factors include, among others, delays in the anticipated timing of activities related to such growth initiatives, strategies, operating plans, and cost reduction and restructuring initiatives, increased difficulty and cost in implementing these efforts, including difficulties in complying with new regulatory requirements and the incurrence of other unexpected costs associated with operating the business.

Current wording

We are continually executing a number of growth initiatives, strategies, and operating plans designed to enhance our business, as well as some cost reduction and restructuring initiatives. We may not be able to successfully complete these growth initiatives, strategies, operating plans, and cost reduction and restructuring initiatives, and realize all of the benefits, including growth targets and cost savings, that we expect to achieve or it may be more costly to do so than we anticipate. For example, the migration of existing clients using our DOS Solution to Health Catalyst Ignite involves risk and may cause disruptions to our Solution, difficulties as clients acclimate to a new platform, or other challenges that could impair our clients’ use of our technology, any of which could lead to client dissatisfaction, lower revenue, and non-renewals. Further, costs associated with the transition to Health Catalyst Ignite have and may continue to result in higher cost of technology revenue, which may not decrease over time.

Previous wording

For example, on October 31, 2023, our board of directors authorized a reduction of our global workforce as part of a restructuring plan intended to optimize our cost structure and focus our investment of resources in key priority areas to align with strategic changes (2023 Restructuring Plan). The 2023 Restructuring Plan reduced our global workforce by approximately 10% during the fourth quarter of 2023, along with further reductions in our global workforce that occurred or are anticipated in the first quarter of 2024. We may incur additional expenses not currently contemplated due to events associated with the 2023 Restructuring, such as costs in connection with attrition beyond our intended reduction in force, the loss of institutional knowledge and expertise, other unforeseen difficulties, delays, or other impacts on other areas of our liabilities and obligations, in each case which could result in losses in future periods or which could otherwise prevent us from realizing, in full or in part, the anticipated benefits and savings from the 2023 Restructuring Plan.

Current wording

A variety of factors could cause us not to realize some or all of the expected benefits of our growth initiatives, strategies, operating plans or cost reduction and restructuring initiatives. These factors include, among others, delays in the anticipated timing of activities related to such growth initiatives, strategies, operating plans, and cost reduction and restructuring initiatives, increased difficulty and cost in implementing these efforts, including difficulties in complying with new regulatory requirements and the incurrence of other unexpected costs associated with operating the business. For example, on October 31, 2023, our board of directors authorized a reduction of our global workforce as part of a restructuring plan intended to optimize our cost structure and focus our investment of resources in key priority areas to align with strategic changes (2023 Restructuring Plan). The 2023 Restructuring Plan reduced our global workforce by approximately 10% during the fourth quarter of 2023 and the first quarter of 2024. Further, on January 25, 2025, our board of directors authorized another reduction of our global workforce as part of a restructuring plan intended to optimize our cost structure and focus our investment of resources in key priority areas to align with strategic changes (2025 Restructuring Plan). The 2025 Restructuring Plan reduced our global workforce by approximately 4% in the first quarter of 2025 and primarily focused on R&D and professional services.

Previous wording

Our continued implementation of the 2023 Restructuring Plan or any other programs may disrupt our operations and performance. As a result, we cannot assure you that we will realize these benefits. If, for any reason, the benefits we realize are less than our estimates or the implementation of these growth initiatives, strategies, operating plans, and cost reduction and restructuring initiatives adversely affect our operations or cost more or take longer to effectuate than we expect, or if our assumptions prove inaccurate, our business, financial condition, and results of operations may be materially adversely affected.

Current wording

Any other or future restructuring or cost optimizing efforts may disrupt our operations and performance. As a result, we cannot assure you that we will realize these benefits. If, for any reason, the benefits we realize are less than our estimates or the implementation of these growth initiatives, strategies, operating plans, and cost reduction and restructuring initiatives adversely affect our operations or cost more or take longer to effectuate than we expect, or if our assumptions prove inaccurate, our business, financial condition, and results of operations may be materially adversely affected.

Previous wording

Our sales process entails planning discussions with prospective clients, analyzing their existing solutions, and identifying how these potential clients can use and benefit from our Solution. The sales cycle for a new DOS Subscription Client, from the time of prospect qualification to the completion of the first sale, we estimate to typically be approximately one year and in some cases has exceeded two years. We spend substantial time, effort, and money in our sales efforts without any assurance that our efforts will result in the sale of our Solution.

Current wording

Our sales process entails planning discussions with prospective clients, analyzing their existing solutions, and identifying how these potential clients can use and benefit from our Solution. The sales cycle for a new Platform Client, from the time of prospect qualification to the completion of the first sale, we estimate to typically be approximately one year and in some cases has exceeded two years. While we have a limited operating history selling Health Catalyst Ignite, we believe its sales cycle generally may be shorter. We spend substantial time, effort, and money in our sales efforts without any assurance that our efforts will result in the sale of our Solution.

Previous wording

In addition, our sales cycle and timing of sales can vary substantially from client to client because of various factors, including the discretionary nature of potential clients’ purchasing and budget decisions, the announcement or planned introduction of new analytics applications or services by us or our competitors, and the purchasing approval processes of potential clients. Further, the sales cycle of certain Solutions with a more limited operating history, such as TEMS, can be more difficult to predict and, at times, longer than our typical sales cycle. If our sales cycle lengthens, as we started to experience in 2022, or we invest substantial resources pursuing unsuccessful sales opportunities, our results of operations and growth would be harmed.

Current wording

In addition, our sales cycle and timing of sales can vary substantially from client to client because of various factors, including the discretionary nature of potential clients’ purchasing and budget decisions, the announcement or planned introduction of new analytics applications or services by us or our competitors, and the purchasing approval processes of potential clients. Further, the sales cycles of certain Solutions with a more limited operating history, such as TEMS, can be more difficult to predict and, at times, longer than our typical sales cycle. If our sales cycle lengthens, as we experienced in 2022 and 2023, or we invest substantial resources pursuing unsuccessful sales opportunities, our results of operations and growth would be harmed.

Previous wording

•the impact of macroeconomic challenges, including the impact of the high inflationary and/or high interest rate environments, market volatility caused by bank failures and measures taken in response thereto, and the impact of any natural disasters or public health emergencies, such as the COVID-19 pandemic, upon our clients.

Current wording

•the impact of macroeconomic challenges, including the impact of high inflationary and/or high interest rate environments, new tariffs, market volatility and measures taken in response thereto, the tight labor market, and the impact of any natural disasters or public health emergencies upon our clients.

Previous wording

We generally enter into subscription contracts with our clients for access to our Solution. Many of these contracts have initial terms of one to three years. Most of our clients have no obligation to renew their subscriptions for our Solution after the initial term expires. Although we have long-term contracts with many clients, these contracts may be terminated by the client (generally, subject to providing us with prior notice) before their term expires for convenience or for certain specified reasons, including changes in the regulatory landscape, loss of certain third-party licenses, or breach of our contractual obligations, including poor performance by us in areas that include repeated failures by us to provide specified levels of service over certain performance periods. We expect that future contracts will contain similar provisions. If any of our contracts with our clients are terminated, we may not be able to recover all fees due under the terminated contract and we will lose future revenue from that client, which may adversely affect our results of operations.

Current wording

We generally enter into subscription contracts with our clients for access to our Solution. Many of these contracts have initial terms of one to three years. Most of our clients have no obligation to renew their subscriptions for our Solution after the initial term expires. Although we have long-term contracts with many clients, these contracts may be terminated by the client (generally, subject to providing us with prior notice) before their term expires for convenience or for certain specified reasons, including changes in the regulatory landscape, loss of certain third-party licenses, or breach of our contractual obligations, including poor performance by us in areas that include repeated failures by us to provide specified levels of service over certain performance periods, or dissatisfaction with changes in our Solution, such as the deployment of Health Catalyst Ignite and the migration of existing clients utilizing our DOS Solution to Health Catalyst Ignite. We expect that future contracts will contain similar provisions. If any of our contracts with our clients are terminated, we may not be able to recover all fees due under the terminated contract and we will lose future revenue from that client, which may adversely affect our results of operations.

Previous wording

•the impact of macroeconomic challenges, including the high inflationary and/or high interest rate environments, market volatility caused by bank failures and measures taken in response thereto, and public health crises, such as the COVID-19 pandemic, on our clients, partners, and business;

Current wording

•the impact of macroeconomic challenges, including the high inflationary and/or high interest rate environments, new tariffs, market volatility and measures taken in response thereto, and public health crises and natural disasters on our clients, partners, and business;

Previous wording

•technical difficulties or interruptions to our Solution, including related to updates to our technology or technology migrations;

Current wording

•technical difficulties or interruptions to our Solution, including related to updates to our technology or technology migrations, in particular, those related to our migration of DOS clients to Health Catalyst Ignite;

Previous wording

For example, we have experienced, and expect that we will continue to experience, seasonality in the number of new clients that subscribe to our Solution; specifically, new clients (DOS Subscription Clients in particular) tend to subscribe to our Solution at higher rates in the second and fourth quarters of the year. Seasonality in our business may cause period-to-period fluctuations in certain of our operating results and financial metrics, and thus limit our ability to predict our future results. As such, we believe that quarter-to-quarter comparisons of our revenue and results of operations may not be meaningful and should not be relied upon as an indication of future performance.

Current wording

Many of these factors are not within our control, and the occurrence of one or more of them might cause our results of operations to vary widely. For example, we have experienced, and expect that we will continue to experience, seasonality in the number of new clients that subscribe to our Solution; specifically, new clients (Platform Clients in particular) tend to subscribe to our Solution at higher rates in the second and fourth quarters of the year. Seasonality in our business may cause period-to-period fluctuations in certain of our operating results and financial metrics, and thus limit our ability to predict our future results. As such, we believe that quarter-to-quarter comparisons of our revenue and results of operations may not be meaningful and should not be relied upon as an indication of future performance.

Previous wording

In addition, our analytics services may be used by our clients to inform clinical decision-making, provide access to patient medical histories, and assist in creating patient treatment plans. Therefore, if data analyses are presented incorrectly in our Solution or they are incomplete, or if we make mistakes in the capture or input of these data, adverse consequences, including death, may occur and give rise to product liability, medical malpractice liability, and other claims against us by clients, clinicians, patients, or others. We often have little control over data accuracy, yet a court or government agency may take the position that our storage and display of health information exposes us to personal injury liability or other liability for wrongful delivery or handling of healthcare services or erroneous health information.

Current wording

In addition, our analytics services may be used by our clients to inform clinical decision-making, provide access to patient medical histories, and assist in creating patient treatment plans. Therefore, if data analyses are presented incorrectly in our Solution or they are incomplete, or if we make mistakes in the capture or input of these data, adverse consequences, including death, may occur and give rise to product liability, medical malpractice liability, and other claims against us by clients, clinicians, patients, or others. We often have little control over data accuracy, yet a court or government agency may take the position that our storage and display of health information exposes us to personal injury liability or other liability for wrongful delivery or handling of healthcare services or erroneous health information. Our clinical guidelines, algorithms, and protocols may be viewed as providing healthcare professionals with guidance on care management, care coordination, or treatment decisions. If our content, or content we obtain from third parties, contains inaccuracies, or we introduce inaccuracies in the process of implementing third-party content, it is possible that patients, clinicians, consumers, the providers of the third-party content, or others may sue us if they are harmed as a result of such inaccuracies. We cannot assure you that our software development, editorial, and other quality control procedures will be sufficient to ensure that there are no errors or omissions in any particular content or our software or algorithms.

Previous wording

The assertion of such claims and ensuing litigation, regardless of its outcome, could result in substantial cost to us, divert management’s attention from operations, damage our reputation, and decrease market acceptance of our Solution. We attempt to limit by contract our liability for damages, have our clients assume responsibility for clinical treatment, diagnoses, medical oversight, and dosing decisions, and require that our clients assume responsibility for medical care and approve key algorithms, clinical guidelines, clinical protocols, content, and data. Despite these precautions, the allocations of responsibility and limitations of liability set forth in our contracts may not be enforceable, be binding upon patients, or otherwise protect us from liability for damages. Furthermore, general liability and errors and omissions insurance coverage and medical malpractice liability coverage may not continue to be available on acceptable terms or may not be available in sufficient amounts to cover one or more large claims against us. In addition, the insurer might disclaim coverage as to any future claim. One or more large claims could exceed our available insurance coverage. If any of these events occur, they could materially adversely affect our business, financial condition, or results of operations.

Current wording

The assertion of such claims and ensuing litigation, regardless of its outcome, could result in substantial cost to us, divert management’s attention from operations, damage our reputation, and decrease market acceptance of our Solution. We attempt to limit by contract our liability for damages, have our clients assume responsibility for clinical treatment, diagnoses, medical oversight, and dosing decisions, and require that our clients assume responsibility for medical care and approve key algorithms, clinical guidelines, clinical protocols, content, and data. Despite these precautions, the allocations of responsibility and limitations of liability set forth in our contracts may not be enforceable, be binding upon patients, or otherwise protect us from liability for damages.

Previous wording

Historically, we have relied on a limited number of clients for a significant portion of our total revenue and accounts receivable. Our three largest clients during 2023 comprised 5.5%, 3.6%, and 3.5% of our revenue, or 12.6% in the aggregate. Our three largest clients during 2022 comprised 4.1%, 3.7%, and 3.4% of our revenue, or 11.2% in the aggregate. The sudden loss of any of our largest clients or the renegotiation of any of our largest client contracts could adversely affect our results of operations. In the ordinary course of business, we engage in active discussions and renegotiations with our clients in respect of our Solution and the terms of our client agreements, including our fees.

Current wording

Historically, we have relied on a limited number of clients for a significant portion of our total revenue and accounts receivable. Our three largest clients during 2024 comprised 5.5%, 4.4%, and 3.9% of our revenue, or 13.8% in the aggregate. Our three largest clients during 2023 comprised 5.5%, 3.6%, and 3.5% of our revenue, or 12.6% in the aggregate. The sudden loss of any of our largest clients or the renegotiation of any of our largest client contracts could adversely affect our results of operations. In the ordinary course of business, we engage in active discussions and renegotiations with our clients in respect of our Solution and the terms of our client agreements, including our fees.

Previous wording

Additionally, the proper design and assessment of internal controls over financial reporting are subject to varying interpretations, and, as a result, application in practice may evolve over time as new guidance is provided by regulatory and governing bodies and as common practices evolve. This could result in continuing uncertainty regarding the proper design and assessment of internal controls over financial reporting and higher costs necessitated by ongoing revisions to internal controls. We must continue to monitor and assess our internal control over financial reporting. If in the future we have any material weaknesses, we may not detect errors on a timely basis and our financial statements may be materially misstated. Additionally, if we are unable to comply with the requirements of Section 404 of the Sarbanes-Oxley Act, are unable to assert that our internal controls over financial reporting are effective, identify material weaknesses in our internal controls over financial reporting, or if our independent registered public accounting firm is unable to express an opinion as to the effectiveness of our internal controls over financial reporting, investors may lose confidence in the accuracy and completeness of our financial reports, and the market price of our common stock could be adversely affected, and we could become subject to investigations by the stock exchange on which our securities are listed, the SEC, or other regulatory authorities, which could require additional financial and management resources.

Current wording

If in the future we have any material weaknesses, we may not detect errors on a timely basis and our financial statements may be materially misstated. Additionally, if we are unable to comply with the requirements of Section 404 of the Sarbanes-Oxley Act, are unable to assert that our internal controls over financial reporting are effective, identify material weaknesses in our internal controls over financial reporting, or if our independent registered public accounting firm is unable to express an opinion as to the effectiveness of our internal controls over financial reporting, investors may lose confidence in the accuracy and completeness of our financial reports, and the market price of our common stock could be adversely affected, and we could become subject to investigations by the stock exchange on which our securities are listed, the SEC, or other regulatory authorities, which could require additional financial and management resources.

Previous wording

We may seek to acquire or invest in businesses, applications, services, or technologies that we believe could complement or expand our Solution, enhance our technical capabilities, or otherwise offer growth opportunities. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated. We have in the past and may in the future have difficulty integrating acquired businesses. During 2020 we acquired Able Health, Healthfinch, and Vitalware, during 2021 we acquired Twistle, during 2022 we acquired ARMUS and KPI Ninja, and during 2023 we acquired ERS. We may have difficulty cross-selling our Solution to acquired clients, and we may have difficulty integrating, or incur integration-related costs associated with, newly acquired team members.

Current wording

We expect to continue to seek to acquire or invest in businesses, applications, services, or technologies that we believe could complement or expand our Solution, enhance our technical capabilities, or otherwise offer growth opportunities. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses in identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated. We have in the past and may in the future have difficulty integrating acquired businesses. Between January 1, 2020 and January 31, 2025, we acquired Able Health, Healthfinch, Vitalware, Twistle, ARMUS, KPI Ninja, ERS, Carevive, Lumeon, Intraprise and Upfront. We may have difficulty cross-selling our Solution to acquired clients, and we may have difficulty integrating, or incur integration-related costs associated with, newly acquired team members.

Previous wording

We have limited experience in acquiring other businesses. If we acquire additional businesses, we may not be able to integrate the acquired personnel, operations, and technologies successfully, or effectively manage the combined business following the acquisition. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including, but not limited to:

Current wording

If we acquire additional businesses, we may not be able to integrate the acquired personnel, operations, and technologies successfully, or effectively manage the combined business following the acquisition. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including, but not limited to:

Previous wording

•difficulty converting the clients of the acquired business onto our DOS platform and contract terms, including disparities in the revenue, licensing, support, or professional services model of the acquired business;

Current wording

•difficulty converting the clients of the acquired business onto our Ignite platform and contract terms, including disparities in the revenue, licensing, support, or professional services model of the acquired business;

Previous wording

In addition, a significant portion of the purchase price of companies we acquire may be allocated to acquired goodwill and other intangible assets, which must be assessed for impairment at least annually. If our acquisitions do not yield expected returns or fair value estimates deteriorate, we may be required to take charges to our results of operations based on this impairment assessment process, which could adversely affect our results of operations. Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, which could adversely affect our results of operations. In addition, if an acquired business fails to meet our expectations, our business, financial condition, and results of operations may suffer.

Current wording

In addition, a significant portion of the purchase price of companies we acquire may be allocated to acquired goodwill and other intangible assets, which must be assessed for impairment at least annually. If our acquisitions do not yield expected returns or fair value estimates deteriorate, we may be required to take charges to our results of operations based on this impairment assessment process, which could adversely affect our results of operations.

Previous wording

Also, the anticipated benefit of any acquisition may not materialize or may be prohibited by contractual obligations we may enter into in the future with lenders or other third parties. Additionally, future acquisitions or dispositions could result in potentially dilutive issuances of our equity securities, the incurrence of debt, contingent liabilities, or amortization expenses or write-offs of goodwill, any of which could harm our financial condition. We cannot predict the number, timing, or size of future acquisitions, or the effect that any such transactions might have on our results of operations.

Current wording

Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, which could adversely affect our results of operations. In addition, if an acquired business fails to meet our expectations, our business, financial condition, and results of operations may suffer. Also, the anticipated benefit of any acquisition may not materialize or may be prohibited by contractual obligations we may enter into in the future with lenders or other third parties. Additionally, future acquisitions or dispositions could result in potentially dilutive issuances of our equity securities, the incurrence of debt, contingent liabilities, or amortization expenses or write-offs of goodwill, any of which could harm our financial condition. We cannot predict the number, timing, or size of future acquisitions, or the effect that any such transactions might have on our results of operations.

Previous wording

To continue to execute on our growth and operating plan, we must attract and retain highly qualified personnel, and we may modify our compensation program and practices for our team members. Competition for such personnel is intense, especially for senior sales executives and software engineers with high levels of experience in designing and developing applications and consulting and analytics services. We may not be successful in attracting and retaining qualified personnel, including due to changes to our compensation program or practices. We have from time to time in the past experienced, and we expect to continue to experience in the future, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. For example, the 2023 Restructuring Plan and other restructurings may result in attrition beyond our intended reduction in force or may adversely impact our ability to recruit and hire qualified personnel in the future. In addition, our search for replacements for departed employees may cause uncertainty regarding the future of our business, impact employee hiring and retention, and adversely impact our revenue, results of operations, and financial condition. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the Internet and high-technology industries, job candidates often consider the value of the equity awards they may receive in connection with their employment. Volatility in the price of our stock or failure to obtain stockholder approval for increases in the number of shares available for grant under our equity plans may, therefore, adversely affect our ability to attract or retain key employees. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely harmed.

Current wording

To continue to execute on our growth and operating plan, we must attract and retain highly qualified personnel, and we may modify our compensation program and practices for our team members. Competition for such personnel is intense, especially for senior sales executives and software engineers with high levels of experience in designing and developing applications and consulting and analytics services. We may not be successful in attracting and retaining qualified personnel, including due to changes to our compensation program or practices. We have from time to time in the past experienced, and we expect to continue to experience in the future, difficulty in hiring and retaining highly skilled employees with appropriate qualifications. For example, the 2023 Restructuring Plan, the 2025 Restructuring Plan and other restructurings may result in attrition beyond our intended reduction in force or may adversely impact our ability to recruit and hire qualified personnel in the future. In addition, our search for replacements for departed employees may cause uncertainty regarding the future of our business, impact employee hiring and retention, and adversely impact our revenue, results of operations, and financial condition. Many of the companies with which we compete for experienced personnel have greater resources than we have. In addition, in making employment decisions, particularly in the Internet and high-technology industries, job candidates often consider the value of the equity awards they may receive in connection with their employment. Volatility in the price of our stock or failure to obtain stockholder approval for increases in the number of shares available for grant under our equity plans may, therefore, adversely affect our ability to attract or retain key employees. If we fail to attract new personnel or fail to retain and motivate our current personnel, our business and future growth prospects could be severely harmed.

Previous wording

Our success depends largely upon the continued services of our key executive officers and recruitment of additional highly skilled employees. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives, which could disrupt our business. Several of our senior leaders are active members of the Church of Jesus Christ of Latter-Day Saints. There is a risk that in the future, one or more of these individuals could receive a call to serve in a full-time capacity for the church, which has already occurred, including with our former Chief Operating Officer, Paul Horstmeier, stepping down from his role effective March 31, 2023. Hiring executives with needed skills or the replacement of one or more of our executive officers or other key employees would likely involve significant time and costs and may significantly delay or prevent the achievement of our business objectives. In addition, competition for qualified management in our industry is intense. Many of the companies with which we compete for management personnel have greater financial and other resources than we do. We have not entered into term-based employment agreements with our executive officers.

Current wording

Our success depends largely upon the continued services of our key executive officers and recruitment of additional highly skilled employees. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives, which could disrupt our business. Several of our senior leaders are active members of the Church of Jesus Christ of Latter-Day Saints. There is a risk that in the future, one or more of these individuals could receive a call to serve in a full-time capacity for the church, which has already occurred, including with our former Chief Operating Officer, Paul Horstmeier, who stepped down from his role of Chief Operating Officer effective March 31, 2023. Hiring executives with needed skills or the replacement of one or more of our executive officers or other key employees would likely involve significant time and costs and may significantly delay or prevent the achievement of our business objectives. In addition, competition for qualified management in our industry is intense. Many of the companies with which we compete for management personnel have greater financial and other resources than we do. We have not entered into term-based employment agreements with our executive officers.

Previous wording

We have experienced, and may continue to experience, rapid growth and organizational change, which has placed, and may continue to place, significant demands on our management, operational, and financial resources. In addition, if we fail to successfully integrate new team members or fail to effectively manage organizational changes, it could harm our culture, business, financial condition and results of operations. For example, the expense reduction measures taken in connection with the 2023 Restructuring Plan may result in unintended consequences and costs, including costs associated with attrition beyond our intended reduction in force, a decrease in morale among team members following the completion of the 2023 Restructuring Plan, adverse impacts in our ability to recruit and hire qualified personnel in the future, and the loss of institutional knowledge and expertise, which could result in losses in future periods or otherwise prevent us from realizing, in full or in part, the anticipated benefits and savings from the 2023 Restructuring Plan. In addition, we must continue to maintain, and may need to enhance, our information technology infrastructure and financial and accounting systems and controls, as well as manage expanded operations in geographically distributed locations, which may include offshore and near shore, which will place additional demands on our resources and operations. We also must attract, train, and retain a significant number of qualified sales and marketing personnel, professional services personnel, software engineers, technical personnel, service offering personnel, and management personnel. At times, this will require us to invest in and commit significant financial, operational, and management resources to grow and change in these areas without undermining the corporate culture that has been critical to our growth so far. If we do not achieve the benefits anticipated from these investments or organizational changes, or if the realization of these benefits is delayed, our results of operations may be adversely affected. If we fail to provide effective client training on our Solution and high-quality client support, our business and reputation could suffer.

Current wording

We have experienced, and may continue to experience, rapid growth and organizational change, which has placed, and may continue to place, significant demands on our management, operational, and financial resources. In addition, if we fail to successfully integrate new team members or fail to effectively manage organizational changes, it could harm our culture, business, financial condition and results of operations. For example, the expense reduction measures taken in connection with the 2023 Restructuring Plan or 2025 Restructuring Plan may result in unintended consequences and costs, including costs associated with attrition beyond our intended reduction in force, a decrease in morale among team members following the completion of the 2023 Restructuring Plan or 2025 Restructuring Plan, adverse impacts in our ability to recruit and hire qualified personnel in the future, and the loss of institutional knowledge and expertise, which could result in losses in future periods or otherwise prevent us from realizing, in full or in part, the anticipated benefits and savings from the 2023 Restructuring Plan or 2025 Restructuring Plan. In addition, we must continue to maintain, and may need to enhance, our information technology infrastructure and financial and accounting systems and controls, as well as manage expanded operations in geographically distributed locations, which may include offshore and near shore, which will place additional demands on our resources and operations. We also must attract, train, and retain a significant number of qualified sales and marketing personnel, professional services personnel, software engineers, technical personnel, service offering personnel, and management personnel. At times, this will require us to invest in and commit significant financial, operational, and management resources to grow and change in these areas without undermining the corporate culture that has been critical to our growth so far. If we do not achieve the benefits anticipated from these investments or organizational changes, or if the realization of these benefits is delayed, our results of operations may be adversely affected. If we fail to provide effective client training on our Solution and high-quality client support, our business and reputation could suffer.

Previous wording

We have experienced periods of significant growth, including in the last five years. At times, our growth has moderated. Future revenue may not grow at the same rates experienced during times of significant growth or may decline. Further, larger revenue opportunities that include portions of our Solution with less operating history could cause our growth to become less predictable and/or choppier relative to prior periods. Our future growth will depend, in part, on our ability to grow our revenue from existing clients, to complete sales to potential future clients, to expand our client and member bases, to prevent churn of existing clients, and to develop new solutions. Our future growth may also be driven by expansion into adjacent markets and/or international expansion. We can provide no assurances that we will be successful in executing on these growth strategies or that we will continue to grow our revenue or to generate net income. Our historical results may not be indicative of future performance.

Current wording

We have experienced periods of significant growth, including in the last five years. At times, our growth has moderated. Future revenue may not grow at the same rates experienced during times of significant growth or may decline. Further, revenue opportunities that include portions of our Solution with less operating history could cause our growth to become less predictable and/or choppier relative to prior periods. Our future growth will depend, in part, on our ability to grow our revenue from existing clients, to complete sales to potential future clients, to expand our client and member bases, to prevent churn of existing clients, and to develop new solutions, as well as our ability to acquire other companies, as we have done from time to time in the past. Our future growth may also be driven by expansion into adjacent markets and/or international expansion. We can provide no assurances that we will be successful in executing on these growth strategies or that we will continue to grow our revenue or to generate net income. Our historical results may not be indicative of future performance.

Previous wording

Our data platform requires us to source data from multiple clinical, financial, and operational data sources, which sources are also typically third-party vendors of our clients. The functioning of our analytics applications and our ability to perform analytics services is predicated on our ability to establish interfaces that download the relevant data from these source systems on a repeated basis and in a reliable manner. We may encounter vendors that engage in information blocking practices that may inhibit our ability to access the relevant data on behalf of clients or impose new or additional costs. In 2020, the U.S. Department of Health and Human Services’ ONC and the Centers for Medicare and Medicaid Services promulgated final rules to support access, exchange, and use of electronic health information (EHI), referred to as the Final Rule. The Final Rule is intended to clarify provisions of the 21st Century Cures Act regarding interoperability and information blocking, and, subject to the interpretations of the Final Rule, and exceptions to what constitutes information blocking, may create significant new requirements for healthcare industry participants. The Final Rule requires certain electronic health record technology to incorporate standardized application programming interfaces to allow individuals to securely and easily access structured EHI using smartphone applications, provides patients with certain rights to electronic access to their EHI (structured and/or unstructured) at no cost and implements the information blocking provisions of the 21st Century Cures Act, subject to eight exceptions that will not be considered information blocking as long as specific conditions are met. In April 2023, the ONC issued a notice of proposed rulemaking that would modify certain components of the Final Rule, including modifying and expanding certain exceptions to the information blocking regulations, which are intended to support information sharing. The impact of the Final Rule on our business is unclear at this time, due to, among other things, uncertainty regarding the interpretation of safe harbors and exceptions to the Final Rule by industry participants and regulators.

Current wording

In 2020, the U.S. Department of Health and Human Services’ Office of the National Coordinator for Health Information Technology (ONC) and the Centers for Medicare and Medicaid Services promulgated final rules to support access, exchange, and use of electronic health information (EHI), referred to as the Final Rule. The Final Rule is intended to clarify provisions of the 21st Century Cures Act regarding interoperability and information blocking, and, subject to the interpretations of the Final Rule, and exceptions to what constitutes information blocking, may create significant new requirements for healthcare industry participants. The Final Rule requires certain electronic health record technology to incorporate standardized application programming interfaces to allow individuals to securely and easily access structured EHI using smartphone applications, provides patients with certain rights to electronic access to their EHI (structured and/or unstructured) at no cost and implements the information blocking provisions of the 21st Century Cures Act, subject to eight exceptions that will not be considered information blocking as long as specific conditions are met. In April 2023, the ONC issued a notice of proposed rulemaking that would modify certain components of the Final Rule, including modifying and expanding certain exceptions to the information blocking regulations, which are intended to support information sharing. The impact of the Final Rule on our business is unclear at this time, due to, among other things, uncertainty regarding the interpretation of safe harbors and exceptions to the Final Rule by industry participants and regulators.

Previous wording

Our Solution is generally hosted from and use computing infrastructure provided by third parties, including Microsoft Azure and other computing infrastructure service providers. We have migrated and expect to continue to migrate a significant portion of our DOS and analytics application computing infrastructure needs to Microsoft Azure. We have made and expect to continue to make substantial investments in transitioning DOS clients from our own managed data center to Microsoft Azure and the migration of clients to the next iteration of our DOS platform. We anticipate that this transition will increase the cost of hosting our technology and negatively impact our technology gross margin.

Current wording

Our Solution is generally hosted from and uses computing infrastructure provided by third parties, including Microsoft Azure and other computing infrastructure service providers. We have migrated and expect to continue to migrate a significant portion of our DOS and analytics application computing infrastructure needs to Microsoft Azure. We have made and expect to continue to make substantial investments in transitioning DOS clients from our own managed data center to Microsoft Azure and the migration of clients to the next iteration of our DOS platform. This transition has increased and we anticipate it will continue to increase the cost of hosting our technology and negatively impact our technology gross margin. Such migrations are risky and may cause disruptions to our Solution, service outages, downtime, or other problems and may increase our costs. Despite precautions taken during such transitions, any unsuccessful transition of technology may impair clients’ use of our technology which may cause greater costs or downtime and which may lead to, among other things, client dissatisfaction and non-renewals.

Previous wording

The reliability and performance of the Internet may be harmed by increased usage or by denial-of-service attacks. The Internet has experienced a variety of outages and other delays as a result of damages to portions of its infrastructure, and it could face outages and delays in the future. These outages and delays could reduce the level of Internet usage as well as the availability of the Internet to us for delivery of our Internet-based services.

Current wording

The reliability and performance of the Internet may be harmed by increased usage or by denial-of-service attacks. The Internet has experienced a variety of outages and other delays as a result of damages to portions of its infrastructure, and it could face outages and delays in the future. These outages and delays could reduce the level of Internet usage as well as the availability of the Internet to us for delivery of our Internet-based services. We typically provide service level commitments under our client contracts. If we fail to meet these contractual commitments, we could be obligated to provide credits or refunds for prepaid amounts related to unused subscription services or face contract terminations, which could adversely affect our results of operations. Finally, recent changes in law could impact the cost and availability of necessary Internet infrastructure. Increased costs and/or decreased availability would negatively affect our results of operations.

Previous wording

The future success of our business depends upon the continued use of the Internet as a primary medium for communication, business applications, and commerce. Federal or state government bodies or agencies have in the past adopted, and may in the future adopt, laws or regulations affecting the use of the Internet as a commercial medium. Legislators, regulators, or government bodies or agencies may also make legal or regulatory changes or interpret or apply existing laws or regulations that relate to the use of the Internet in new and materially different ways. Changes in these laws, regulations, or interpretations could require us to modify our Solution in order to comply with these changes, to incur substantial additional costs or divert resources that could otherwise be deployed to grow our business, or expose us to unanticipated civil or criminal liability, among other things.

Current wording

The future success of our business depends upon the continued use of the Internet as a primary medium for communication, business applications, and commerce. Federal or state government bodies or agencies have in the past adopted, and may in the future adopt, laws or regulations affecting the use of the Internet as a commercial medium. Legislators, regulators, or government bodies or agencies may also make legal or regulatory changes or interpret or apply existing laws or regulations that relate to the use of the Internet in new and materially different ways. Changes in these laws, regulations, or interpretations could require us to modify our Solution in order to comply with these changes, to incur substantial additional costs or divert resources that could otherwise be deployed to grow our business, or expose us to unanticipated civil or criminal liability, among other things. In addition, government agencies and private organizations have imposed, and may in the future impose, additional taxes, fees, or other charges for accessing the Internet or commerce conducted via the Internet. Internet access is frequently provided by companies that have significant market power and could take actions that degrade, disrupt, or increase the cost of our clients’ use of our Solution, which could negatively impact our business. Net neutrality rules, which were designed to ensure that all online content is treated the same by Internet service providers and other companies that provide broadband services were repealed by the Federal Communications Commission effective June 2018. The repeal of the net neutrality rules could force us to incur greater operating expenses or our clients’ use of our Solution could be adversely affected, either of which could harm our business and results of operations.

Previous wording

Although we employ practices designed to manage our compliance with open-source licenses and protect our proprietary source code, we may inadvertently use open-source software in a manner we do not intend and that could expose us to claims for breach of contract and intellectual property infringement. If we are held to have breached the terms of an open-source software license, we could be required to, among other things, seek licenses from third parties to continue offering our products on terms that are not economically feasible, pay damages to third parties, to re-engineer our products, to discontinue the sale of our products if re-engineering cannot be accomplished on a timely basis, or to make generally available, in source code form, a portion of our proprietary code, any of which could adversely affect our business, results of operations, and financial condition. The terms of many open-source licenses have not been interpreted by U.S. courts, and, as a result, there is a risk that such licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to commercialize our Solution.

Current wording

We use software modules licensed to us by third-party authors under “open-source” licenses in our Solution. Some open-source licenses contain affirmative obligations or restrictive terms that could adversely impact our business, such as restrictions on commercialization or obligations to make available modified or derivative works of certain open-source code. If we were to combine our proprietary software with certain open-source software subject to these licenses in a certain manner, we could, under certain open-source licenses, be required to release or otherwise make available the source code to our proprietary software to the public. This would allow our competitors to create similar products with lower development effort and time and ultimately could result in a loss of product sales for us. Although we employ practices designed to manage our compliance with open-source licenses and protect our proprietary source code, we may inadvertently use open-source software in a manner we do not intend and that could expose us to claims for breach of contract and intellectual property infringement. If we are held to have breached the terms of an open-source software license, we could be required to, among other things, seek licenses from third parties to continue offering our products on terms that are not economically feasible, pay damages to third parties, to re-engineer our products, to discontinue the sale of our products if re-engineering cannot be accomplished on a timely basis, or to make generally available, in source code form, a portion of our proprietary code, any of which could adversely affect our business, results of operations, and financial condition. The terms of many open-source licenses have not been interpreted by U.S. courts, and, as a result, there is a risk that such licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to commercialize our Solution.

Previous wording

Our success and ability to compete depend in part upon our intellectual property. As of December 31, 2023, we had filed applications for a number of patents, and we have fourteen issued U.S. patents, four issued Canadian patents, one issued Great Britain patent, and one issued European patent, as well as one utility patent application pending in the United States. We also had twenty-eight registered trademarks in the United States, Singapore, United Arab Emirates, and China. We also rely on copyright and trademark laws, trade secret protection, and confidentiality or license agreements with our employees, clients, partners, and others to protect our intellectual property rights. However, the steps we take to protect our intellectual property rights may be inadequate. For example, other parties, including our competitors, may independently develop similar technology, duplicate our services, or design around our intellectual property and, in such cases, we may not be able to assert our intellectual property rights against such parties.

Current wording

Our success and ability to compete depend in part upon our intellectual property. As of December 31, 2024, we had filed applications for a number of patents, and we have fourteen issued U.S. patents, four issued Canadian patents, one issued Great Britain patent, and one issued European patent, as well as one utility patent application pending in the United States. We also had thirty-nine registered trademarks in the United States, Singapore, United Arab Emirates, and China. We also rely on copyright and trademark laws, trade secret protection, and confidentiality or license agreements with our employees, clients, partners, and others to protect our intellectual property rights. However, the steps we take to protect our intellectual property rights may be inadequate. For example, other parties, including our competitors, may independently develop similar technology, duplicate our services, or design around our intellectual property and, in such cases, we may not be able to assert our intellectual property rights against such parties.

Previous wording

We make business decisions about when to seek patent protection for a particular technology and when to rely upon trade secret protection, and the approach we select may ultimately prove to be inadequate. Even in cases where we seek patent protection, there is no assurance that the resulting patents will effectively protect every significant feature of our Solution, technology, or proprietary information, or provide us with any competitive advantages. Moreover, we cannot guarantee that any of our pending patent applications will issue or be approved. The United States Patent and Trademark Office and various foreign governmental patent agencies also require compliance with a number of procedural, documentary, fee payment, and other similar provisions during the patent application process and after a patent has issued.

Current wording

Further, our contractual arrangements may not effectively prevent disclosure of our confidential information or provide an adequate remedy in the event of unauthorized disclosure of our confidential information, and we may be unable to detect the unauthorized use of, or take appropriate steps to enforce, our intellectual property rights. We make business decisions about when to seek patent protection for a particular technology and when to rely upon trade secret protection, and the approach we select may ultimately prove to be inadequate. Even in cases where we seek patent protection, there is no assurance that the resulting patents will effectively protect every significant feature of our Solution, technology, or proprietary information, or provide us with any competitive advantages. Moreover, we cannot guarantee that any of our pending patent applications will issue or be approved. The United States Patent and Trademark Office and various foreign governmental patent agencies also require compliance with a number of procedural, documentary, fee payment, and other similar provisions during the patent application process and after a patent has issued.

Previous wording

An adverse determination of any litigation proceedings could put our intellectual property at risk of being invalidated or interpreted narrowly and could put our related pending patent applications at risk of not issuing. Furthermore, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential or sensitive information could be compromised by disclosure in the event of litigation. In addition, during the course of litigation, there could be public announcements of the results of hearings, motions, or other interim proceedings or developments. If securities analysts or investors perceive these results to be negative, it could have a substantial adverse effect on the price of our common stock. Negative publicity related to a decision by us to initiate such enforcement actions against a client or former client, regardless of its accuracy, may adversely impact our other client relationships or prospective client relationships, harm our brand and business, and could cause the market price of our common stock to decline. Our failure to secure, protect, and enforce our intellectual property rights could adversely affect our brand and our business.

Current wording

An adverse determination of any litigation proceedings could put our intellectual property at risk of being invalidated or interpreted narrowly and could put our related pending patent applications at risk of not issuing. Furthermore, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential or sensitive information could be compromised by disclosure in the event of litigation. In addition, during the course of litigation, there could be public announcements of the results of hearings, motions, or other interim proceedings or developments. If securities analysts or investors perceive these results to be negative, it could have a substantial adverse effect on the price of our common stock.

Previous wording

There is considerable patent and other intellectual property development activity in our industry. Our future success depends in part on not infringing upon the intellectual property rights of others. Our competitors, as well as a number of other entities and individuals, including so-called non-practicing entities, may own or claim to own intellectual property relating to our Solution. From time to time, third parties have claimed or may claim that we are infringing upon their intellectual property rights or that we have misappropriated their intellectual property.

Current wording

There is considerable patent and other intellectual property development activity in our industry. Our future success depends in part on not infringing upon the intellectual property rights of others. Our competitors, as well as a number of other entities and individuals, including so-called non-practicing entities (NPEs), may own or claim to own intellectual property relating to our Solution. From time to time, third parties have claimed or may claim that we are infringing upon their intellectual property rights or that we have misappropriated their intellectual property.

Previous wording

For example, in some cases, very broad patents are granted that may be interpreted as covering a wide field of healthcare data storage and analytics solutions or machine learning and predictive modeling methods in healthcare. As competition in our market grows, the possibility of patent infringement, trademark infringement, and other intellectual property claims against us increases. In the future, we expect others to claim that our Solution and underlying technology infringe or violate their intellectual property rights. In a patent infringement claim against us, we may assert, as a defense, that we do not infringe the relevant patent claims, that the patent is invalid or both.

Current wording

For example, in some cases, very broad patents are granted that may be interpreted as covering a wide field of healthcare data storage and analytics solutions or machine learning and predictive modeling methods in healthcare. As competition in our market grows, the possibility of patent infringement, trademark infringement, and other intellectual property claims against us increases. In the future, we expect others to claim that our Solution and underlying technology infringe or violate their intellectual property rights. In a patent infringement claim against us, we may assert, as a defense, that we do not infringe the relevant patent claims, that the patent is invalid or both. The strength of our defenses will depend on the patents asserted, the interpretation of these patents, and our ability to invalidate the asserted patents. However, we could be unsuccessful in advancing non-infringement and/or invalidity arguments in our defense. In the United States, issued patents enjoy a presumption of validity, and the party challenging the validity of a patent claim must present clear and convincing evidence of invalidity, which is a high burden of proof. Conversely, the patent owner need only prove infringement by a preponderance of the evidence, which is a lower burden of proof.

Previous wording

We may be unaware of the intellectual property rights that others may claim cover some or all of our technology or services. Because patent applications can take years to issue and are often afforded confidentiality for some period of time there may currently be pending applications, unknown to us, that later result in issued patents that could cover one or more aspects of our technology and services. Any claims or litigation could cause us to incur significant expenses and, whether or not successfully asserted against us, could require that we pay substantial damages, ongoing royalty or license payments, or settlement fees, prevent us from offering our Solution or using certain technologies, require us to re-engineer all or a portion of our DOS platform, or require that we comply with other unfavorable terms. We may also be obligated to indemnify our clients or business partners or pay substantial settlement costs, including royalty payments, in connection with any such claim or litigation and to obtain licenses, modify applications, or refund fees, which could be costly. Even if we were to prevail in such a dispute, any litigation regarding our intellectual property could be costly and time-consuming and divert the attention of our management and key personnel from our business operations.

Current wording

We may be unaware of the intellectual property rights that others may claim cover some or all of our technology or services. Because patent applications can take years to issue and are often afforded confidentiality for some period of time there may currently be pending applications, unknown to us, that later result in issued patents that could cover one or more aspects of our technology and services. Any claims or litigation could cause us to incur significant expenses and, whether or not successfully asserted against us, could require that we pay substantial damages, ongoing royalty or license payments, or settlement fees, prevent us from offering our Solution or using certain technologies, require us to re-engineer all or a portion of our platform, or require that we comply with other unfavorable terms. We may also be obligated to indemnify our clients or business partners or pay substantial settlement costs, including royalty payments, in connection with any such claim or litigation and to obtain licenses, modify applications, or refund fees, which could be costly. Even if we were to prevail in such a dispute, any litigation regarding our intellectual property could be costly and time-consuming and divert the attention of our management and key personnel from our business operations.

Previous wording

•State data protection laws. Certain states have also adopted privacy and security laws and regulations, which govern the privacy, processing, and protection of health-related and other personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future clients and strategic partners. For example, California adopted the CCPA, which went into effect on January 1, 2020. The CCPA establishes a privacy framework for covered businesses by creating an expanded definition of personal information, establishing new data privacy rights for consumers in the state of California, imposing special rules on the collection of consumer data from minors, and creating a new and potentially severe statutory damages framework for violations of the CCPA and for businesses that fail to implement reasonable security procedures and practices to prevent data breaches. Additionally, the CPRA generally went into effect on January 1, 2023 and significantly amends the CCPA. It imposed additional data protection obligations on companies doing business in California, including additional consumer rights processes, limitations on data uses, new audit requirements for higher risk data, and opt outs for certain uses of sensitive data. It also created a new California data protection agency authorized to issue substantive regulations and could result in increased privacy and information security enforcement. Additional compliance investment and potential business process changes may be required. Similar laws have passed in other states, and are continuing to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the United States. If we fail to comply with any of these privacy laws that apply to us, and are subject to the aforementioned penalties, our business and financial results could be adversely affected.

Current wording

•State data protection laws. Certain states have also adopted privacy and security laws and regulations, which govern the privacy, processing, and protection of health-related and other personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future clients and strategic partners. For example, the CCPA requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Additional compliance investment and potential business process changes may be required. Similar laws have passed in other states, and are continuing to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the United States. If we fail to comply with any of these privacy laws that apply to us, and are subject to the aforementioned penalties, our business and financial results could be adversely affected.

Previous wording

•GDPR and foreign data privacy protection laws. In addition, many foreign governments have established or are in the process of establishing privacy and data security legal frameworks governing the collection, use and disclosure of personal information obtained from their residents. For example, in Europe, the GDPR went into effect on May 25, 2018. The GDPR imposes data protection requirements for processing the personal data of individuals within the European Economic Area (EEA) relating to the consent of the individuals to whom the personal data relates, the information provided to the individuals, the documentation we must retain, the security and confidentiality of the personal data, data breach notification and the use of third-party processors in connection with the processing of personal data. Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to €20 million or 4% of the annual global revenues of the noncompliant company, whichever is greater. The GDPR has increased our responsibility and potential liability in relation to personal data that we process, and we may be required to put in place mechanisms to ensure compliance with GDPR. In addition, the GDPR increases the scrutiny of transfers of personal data from the EEA to the United States and other jurisdictions that the European Commission does not recognize as having “adequate” data protection laws and the efficacy and longevity of current transfer mechanisms between the EEA, and the United States remain uncertain. Case law from the Court of Justice of the European Union (CJEU) states that reliance on the standard contractual clauses - a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism - alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case-by-case basis. On October 7, 2022, President Biden signed an Executive Order on ‘Enhancing Safeguards for United States Intelligence Activities’ which introduced new redress mechanisms and binding safeguards to address the concerns raised by the CJEU in relation to data transfers from the EEA to the United States and which formed the basis of the new EU-US Data Privacy Framework (DPF), as released on December 13, 2022. The European Commission adopted its Adequacy Decision in relation to the DPF on July 10, 2023, rendering the DPF effective as a GDPR transfer mechanism to U.S. entities self-certified under the DPF. The DPF also introduced a new redress mechanism for EU citizens which addresses a key concern in the previous CJEU judgments and may mean transfers under standard contractual clauses are less likely to be challenged in future. We currently maintain localized infrastructure and third-party relationships to limit the risk of data transfer of personal data outside of the EEA…

Excerpt shortened here; the source contains the full paragraph.

Current wording

•GDPR and foreign data privacy protection laws. In addition, many foreign governments have established or are in the process of establishing privacy and data security legal frameworks governing the collection, use and disclosure of personal information obtained from their residents. For example, in Europe, the GDPR went into effect on May 25, 2018. The GDPR imposes data protection requirements for processing the personal data of individuals within the European Economic Area (EEA) relating to the consent of the individuals to whom the personal data relates, the information provided to the individuals, the documentation we must retain, the security and confidentiality of the personal data, data breach notification and the use of third-party processors in connection with the processing of personal data.

Showing the first 40 of 56 pairs. Open the source sections for the rest.

Rearranged current paragraphs (12)

Current report — wording carried from elsewhere

Furthermore, general liability and errors and omissions insurance coverage and medical malpractice liability coverage may not continue to be available on acceptable terms or may not be available in sufficient amounts to cover one or more large claims against us. In addition, the insurer might disclaim coverage as to any future claim. One or more large claims could exceed our available insurance coverage. If any of these events occur, they could materially adversely affect our business, financial condition, or results of operations.

Current report — wording carried from elsewhere

Additionally, the proper design and assessment of internal controls over financial reporting are subject to varying interpretations, and, as a result, application in practice may evolve over time as new guidance is provided by regulatory and governing bodies and as common practices evolve. This could result in continuing uncertainty regarding the proper design and assessment of internal controls over financial reporting and higher costs necessitated by ongoing revisions to internal controls. We must continue to monitor and assess our internal control over financial reporting.

Current report — wording carried from elsewhere

Our data platform requires us to source data from multiple clinical, financial, and operational data sources, which sources are also typically third-party vendors of our clients. The functioning of our analytics applications and our ability to perform analytics services is predicated on our ability to establish interfaces that download the relevant data from these source systems on a repeated basis and in a reliable manner. We may encounter vendors that engage in information blocking practices that may inhibit our ability to access the relevant data on behalf of clients or impose new or additional costs.

Current report — wording carried from elsewhere

Negative publicity related to a decision by us to initiate such enforcement actions against a client or former client, regardless of its accuracy, may adversely impact our other client relationships or prospective client relationships, harm our brand and business, and could cause the market price of our common stock to decline. Our failure to secure, protect, and enforce our intellectual property rights could adversely affect our brand and our business.

Current report — wording carried from elsewhere

Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to €20 million or 4% of the annual global revenues of the noncompliant company, whichever is greater. The GDPR has increased our responsibility and potential liability in relation to personal data that we process, and we may be required to put in place mechanisms to ensure compliance with GDPR. In addition, the GDPR increases the scrutiny of transfers of personal data from the EEA to the United States and other jurisdictions that the European Commission does not recognize as having “adequate” data protection laws and the efficacy and longevity of current transfer mechanisms between the EEA, and the United States remain uncertain. Case law from the Court of Justice of the European Union (CJEU) states that reliance on the standard contractual clauses - a standard form of contract approved by the European Commission as an adequate personal data transfer mechanism - alone may not necessarily be sufficient in all circumstances and that transfers must be assessed on a case-by-case basis. On July 10, 2023, the European Commission adopted its Adequacy Decision in relation to the new EU-US Data Privacy Framework (DPF), rendering the DPF effective as a GDPR transfer mechanism to U.S. entities self-certified under the DPF.

Current report — wording carried from elsewhere

We expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. In particular, we expect the DPF Adequacy Decision to be challenged and international transfers to the United States and to other jurisdictions more generally to continue to be subject to enhanced scrutiny by regulators. As a result, we may have to make certain operational changes and we will have to implement revised standard contractual clauses. As supervisory authorities issue further guidance on personal data export mechanisms, including circumstances where the SCCs cannot be used, and/or start taking enforcement action, we could suffer additional costs, complaints and/or regulatory investigations or fines, and/or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we provide our services, the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results. Any failure by us to comply with GDPR could result in proceedings or actions against us by governmental entities or others, which may subject us to significant penalties and negative publicity, require us to change our business practices, and increase our costs and severely disrupt our business. Further, from January 1, 2021, companies have had to comply with the GDPR and also the UK GDPR, which, together with the amended UK Data Protection Act 2018, retains the GDPR in UK national law.

Current report — wording carried from elsewhere

•Canadian data privacy protection laws. Similarly, Canada’s Personal Information Protection and Electronic Documents Act provides Canadian residents with privacy protections in regard to transactions with businesses and organizations in the private sector and sets out ground rules for how private-sector organizations may collect, use, and disclose personal information in the course of commercial activities. Foreign governments may attempt to apply such laws extraterritorially or through treaties or other arrangements with U.S. governmental entities.

Current report — wording carried from elsewhere

The government has prosecuted revenue cycle management service providers for causing the submission of false or fraudulent claims in violation of the False Claims Act. In addition, the government may assert that a claim including items and services resulting from a violation of the U.S. federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the civil False Claims Act.

Current report — wording carried from elsewhere

The FDCA and related regulations govern the conditions of safety, efficacy, clearance, approval, manufacturing, quality system requirements, labeling, packaging, distribution, storage, recordkeeping, reporting, marketing, advertising, and promotion of medical devices. However, historically, the FDA has exercised enforcement discretion for certain low-risk software functions, and has issued several guidance documents outlining its approach to the regulation of software as a medical device.

Current report — wording carried from elsewhere

•Foreign Corrupt Practices Act (FCPA) and foreign anti-bribery laws. Subject to the February 2025 executive order ceasing enforcement of the FCPA, the FCPA makes it illegal for U.S. persons, including U.S. companies, and their subsidiaries, directors, officers, employees, and agents, to promise, authorize or make any corrupt payment, or otherwise provide anything of value, directly or indirectly, to any foreign official, any foreign political party or party official, or candidate for foreign political office to obtain or retain business.

Current report — wording carried from elsewhere

On April 8, 2020, concurrently with the pricing of our Notes, in a private placement to qualified institutional buyers exempt from registration under the Securities Act (Note Offering), we entered into privately negotiated capped call transactions (Base Capped Calls) with certain financial institutions (the option counterparties). In addition, in connection with the initial purchasers’ exercise in full of their option to purchase additional Notes, on April 9, 2020, we entered into additional capped call transactions (Additional Capped Calls, and, together with the Base Capped Calls, the Capped Calls) with each of the option counterparties. We used approximately $21.6 million of the net proceeds from the Note Offering to pay the cost of the Capped Calls and allocated issuance costs.

Current report — wording carried from elsewhere

There is an increasing focus from certain investors, employees, and other stakeholders concerning corporate responsibility, specifically related to environmental, social, and governance factors.
Rearranged previous paragraphs (9)

Previous report — wording carried elsewhere

Many of these factors are not within our control, and the occurrence of one or more of them might cause our results of operations to vary widely.

Previous report — wording carried elsewhere

Our clinical guidelines, algorithms, and protocols may be viewed as providing healthcare professionals with guidance on care management, care coordination, or treatment decisions. If our content, or content we obtain from third parties, contains inaccuracies, or we introduce inaccuracies in the process of implementing third-party content, it is possible that patients, clinicians, consumers, the providers of the third-party content, or others may sue us if they are harmed as a result of such inaccuracies. We cannot assure you that our software development, editorial, and other quality control procedures will be sufficient to ensure that there are no errors or omissions in any particular content or our software or algorithms.

Previous report — wording carried elsewhere

Such migrations are risky and may cause disruptions to our Solution, service outages, downtime, or other problems and may increase our costs. Despite precautions taken during such transitions, any unsuccessful transition of technology may impair clients’ use of our technology which may cause greater costs or downtime and which may lead to, among other things, client dissatisfaction and non-renewals.

Previous report — wording carried elsewhere

We typically provide service level commitments under our client contracts. If we fail to meet these contractual commitments, we could be obligated to provide credits or refunds for prepaid amounts related to unused subscription services or face contract terminations, which could adversely affect our results of operations.

Previous report — wording carried elsewhere

Finally, recent changes in law could impact the cost and availability of necessary Internet infrastructure. Increased costs and/or decreased availability would negatively affect our results of operations.

Previous report — wording carried elsewhere

In addition, government agencies and private organizations have imposed, and may in the future impose, additional taxes, fees, or other charges for accessing the Internet or commerce conducted via the Internet. Internet access is frequently provided by companies that have significant market power and could take actions that degrade, disrupt, or increase the cost of our clients’ use of our Solution, which could negatively impact our business. Net neutrality rules, which were designed to ensure that all online content is treated the same by Internet service providers and other companies that provide broadband services were repealed by the Federal Communications Commission effective June 2018. The repeal of the net neutrality rules could force us to incur greater operating expenses or our clients’ use of our Solution could be adversely affected, either of which could harm our business and results of operations.

Previous report — wording carried elsewhere

We use software modules licensed to us by third-party authors under “open-source” licenses in our Solution. Some open-source licenses contain affirmative obligations or restrictive terms that could adversely impact our business, such as restrictions on commercialization or obligations to make available modified or derivative works of certain open-source code. If we were to combine our proprietary software with certain open-source software subject to these licenses in a certain manner, we could, under certain open-source licenses, be required to release or otherwise make available the source code to our proprietary software to the public. This would allow our competitors to create similar products with lower development effort and time and ultimately could result in a loss of product sales for us.

Previous report — wording carried elsewhere

Further, our contractual arrangements may not effectively prevent disclosure of our confidential information or provide an adequate remedy in the event of unauthorized disclosure of our confidential information, and we may be unable to detect the unauthorized use of, or take appropriate steps to enforce, our intellectual property rights.

Previous report — wording carried elsewhere

The strength of our defenses will depend on the patents asserted, the interpretation of these patents, and our ability to invalidate the asserted patents. However, we could be unsuccessful in advancing non-infringement and/or invalidity arguments in our defense. In the United States, issued patents enjoy a presumption of validity, and the party challenging the validity of a patent claim must present clear and convincing evidence of invalidity, which is a high burden of proof. Conversely, the patent owner need only prove infringement by a preponderance of the evidence, which is a lower burden of proof.