CBLL US Equity☆

Item 1A. Risk Factors.

Investing in our common stock involves a high degree of risk. You should carefully consider the risks described below, as well as the other information in this Annual Report, including our financial statements and the related notes and “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” before deciding whether to invest in our common stock. The occurrence of any of the events or developments described below could have a material adverse effect on our business, financial condition, results of operations, and prospects. In such an event, the market price of our common stock could decline, and you may lose all or part of your investment. Additional risks and uncertainties not presently known to us or that we currently believe are not material may also impair our business, financial condition, results of operations, and prospects.

Business and Industry Risk Factors

We have a limited operating history and have experienced rapid growth, which may strain our resources and make it difficult to evaluate our business and future prospects. If we are unable to manage our expansion effectively, our business could be materially and adversely affected.

We were founded in 2014 and began selling Ceribell headbands, recorder, and portal in 2018. Since our formation in 2014, we have achieved several key operational milestones that we believe position us for continued growth and success, including our receipt of 510(k) clearance from the FDA for our recorder and headband in 2017, our first commercial sales in 2018, our receipt of 510(k) clearance from the FDA for an early version of Clarity in 2019, and our growth to over 300 employees as of December 31, 2025. Accordingly, we have a limited operating history, which makes evaluation of our future prospects difficult. In that time, we have experienced periods of significant growth in revenue and employees and rapid changes in our business, which have required us to scale the size of our organization and infrastructure.

Any growth that we experience in the future will require us to further expand our sales and marketing and research and development personnel (including those with software and hardware expertise), our manufacturing operations, and our general and administrative infrastructure. In addition to the need to scale our operational capacity, future growth will impose significant added responsibilities on management, including the need to identify, recruit, train, and integrate additional employees. Rapid expansion in personnel could impact our capacity to manufacture, market, sell, and support our products, which could result in inefficiencies, unanticipated costs, and disruptions to our operations, and could also pose challenges to retaining our existing employees, including through increased reliance on overtime that could result in greater attrition and reduced productivity. While our quarterly revenues have generally increased since our commercial launch, our results of operations have fluctuated in the past, and our future quarterly and annual results of operations may fluctuate as we focus on increasing demand for our products. We may need to make business decisions that could adversely affect our results of operations and prospects, such as modifications to our pricing and reimbursement strategy, business structure, or operations.

The challenges we face in managing our business, including the changing reimbursement and regulatory landscapes, place significant demands on our management, financial, operational, manufacturing, technological, and other resources, and we expect that managing our business will continue to require us to develop and improve our operational, financial and other internal controls, reporting systems, and procedures at a pace consistent with our growth. Continued growth increases challenges in areas such as recruiting and retaining sufficient skilled personnel, providing adequate training and supervision to maintain high-quality product standards and regulatory compliance, and preserving our culture and values. We have also had, and may in the future experience, delays with onboarding new accounts due to scheduling and other logistical issues. We may not be able to address these challenges in a cost-effective manner, or at all. As we grow, we may also need to invest significant resources to improve and expand our manufacturing capabilities and technology, and we may not be able to do so in a cost-effective manner or at all. We cannot assure you that changes in scale, quality, or compliance assurance, including those related to any future additional indications for the Ceribell System, will be successfully implemented or that appropriate personnel will be available to facilitate the management of our business. Failure to implement necessary quality and compliance procedures, transition to new manufacturing processes or supply chains, or hire or maintain necessary personnel could result in higher costs or an inability to meet demand. In addition, our business is affected by general macroeconomic and business conditions around the world, including the impacts of inflation, increased interest rates, market instability, geopolitical conditions and conflicts, health crises, and natural disasters. If we do not effectively manage our growth and the various challenges we face, we may not be able to execute on our business plan, respond to competitive pressures, take advantage of market opportunities, satisfy customer requirements, or maintain high-quality products, which could have a material adverse effect on our business, financial condition, results of operations, and prospects.

We have a history of net losses, and we expect to incur additional substantial losses in the foreseeable future.

We have incurred net losses since inception, and we expect to incur additional substantial losses in the foreseeable future. For the fiscal year ended December 31, 2025, we incurred a net loss of $53.4 million. As of December 31, 2025, we had an accumulated deficit of $220.4 million. We also expect our operating expenses to increase in future periods, and if our revenue growth does not increase to

29

more than offset these anticipated increases in our operating expenses, we may not be able to achieve or maintain profitability, and our business, financial condition, results of operations, and prospects will be harmed. Since inception, we have spent significant amounts to develop the Ceribell System and related algorithms, to fund clinical studies, to develop and build our manufacturing capacities, to scale our commercial operations, and to recruit and retain key talent.

We have encountered and will continue to encounter risks and difficulties frequently experienced by growing companies, including increasing expenses as we continue to grow our business. We expect our operating expenses to increase significantly over the next several years as we continue to expand our operations and infrastructure and continue to develop the Ceribell System and related algorithms, including for any future additional indications. In addition to the anticipated costs of growing our business, we also expect to incur additional legal, accounting, and other expert expenses as we grow. These investments may be more costly than we expect, and if we do not achieve the benefits anticipated from these investments, or if the realization of these benefits is delayed, they may not result in increased revenue or growth in our business. If our growth rate were to decline significantly or become negative, it could adversely affect our business, financial condition, results of operations, and prospects.

We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain or increase profitability. Our prior losses, combined with potential future losses, have had and will continue to have an adverse effect on our stockholders’ equity and working capital.

We depend on sales from the use of the Ceribell System for our revenue. If we are unable to successfully achieve substantial market acceptance and adoption of the Ceribell System, or any of our future products, or if confidence in our products is diminished, our business, financial condition, results of operations, and prospects would be harmed.

We expect that revenue from sales of the Ceribell System will continue to account for almost all of our revenue for the foreseeable future. Continued and widespread market acceptance of alternatives to conventional EEG systems, particularly in the acute care setting, is critical to our future success. The size of our customer base and our ability to acquire new customers is critical to our success as well. Thus, our commercial success will depend in large part on further adoption of the Ceribell System by hospital customers and healthcare professionals and an increase in the number of patients evaluated with it in the acute care setting, as well as on our ability to retain existing customers. Existing customers may choose to terminate or not renew their subscription typically on 30 days’ notice to us without payment of a penalty or termination fee, and we may not be able to replace any customers that elect to terminate or not renew their subscriptions with us.

We spend significant amounts on marketing and brand-building initiatives to increase market awareness of the Ceribell System, reinforce the importance of prompt diagnosis of non-convulsive status epilepticus, and highlight the limitations of conventional EEG systems. We believe these programs are essential to increasing adoption; however, these initiatives may not be successful or cost-effective. If our marketing efforts prove less successful than anticipated, we may not be able to recover our spend, and our rates of customer acquisition or retention may fail to meet market expectations.

Various factors can contribute to our ability to effectively engage and retain customers and their use of our products. For example, hospitals and healthcare professionals may be reluctant to purchase or use the Ceribell System due to familiarity with conventional EEG systems that are well-established and known to them, and because they must continue to use conventional EEG systems outside of the acute care setting. Our ability to grow sales of the Ceribell System and drive market acceptance will depend on successfully educating hospitals and healthcare professionals of the relative benefits of the Ceribell System compared to the standard of care, which includes conventional EEG systems in the acute care setting, as well as educating such hospitals or healthcare professionals regarding the uses and limitations of the Ceribell System.

If healthcare professionals do not perceive our products to be useful, effective, reliable, and trustworthy, or if we are unable to provide sufficient training to healthcare professionals or harmonize our products with hospital information technology systems, we may not be able to attract or retain customers. Healthcare professionals may perceive the Ceribell System to be less useful if they do not subscribe for access to the Clarity algorithm as part of their use of the Ceribell System, whether because of incremental cost, lack of familiarity or trust in the algorithm’s diagnostic accuracy, or if, for similar reasons, they do not rely on the Clarity algorithm (including automated alerts) to interpret the EEG results produced by the Ceribell System. In addition, building a strong brand is critical to our success, but negative clinical research results or publicity or an adverse change to published or unpublished guidelines or recommendations from third parties (including, without limitation, medical societies) relating to the use, clinical benefit, or risk profile of the Ceribell System or AI-enabled devices, or reduced montage EEGs or rapid EEGs in general could result in negative perception by healthcare professionals and affect our brand and reputation. For example, Villamar et al. (2023), a study that retrospectively reviewed EEG recordings for 21 patients who were admitted to a medical intensive care unit after cardiac arrest, found that the Clarity algorithm that was in use at the time of the study did not detect seizures in the four patients who were experiencing them. While we constantly work to improve the Ceribell algorithm and overall Ceribell System, the technologies we work with are novel and complex, and we cannot assure you that there will not be additional negative reports on the Ceribell System in the future. Further, customers who are

30

dissatisfied with their experiences with the Ceribell System may post negative reviews, and we have been, and may in the future become, the subject of blog, forum, or other social media postings that contain negative statements about us, which are outside of our control and may be inaccurate. Any negative publicity, whether real or perceived, disseminated by word-of-mouth, the general media, electronic or social networking platforms, competitor materials, or other methods, could harm our reputation and brand and could severely diminish consumer confidence in our products. Further, a shortage of neurologists or other clinicians (if any) available to read the results of the Ceribell System, could negatively affect the timely assessment of data from the Ceribell System. Lack of support for our products from healthcare professionals can affect how receptive physicians will be to use our products for their patients and could result in decreased demand for our products. Negative healthcare professional perception could also render us less attractive to future hospital customers, which could result in decreased sales of our products. A number of other factors, including the impacts of economic conditions and regulatory changes on hospital budgets and spending patterns, could potentially negatively affect new customer acquisitions and demand for our products.

We operate in a highly competitive industry, and competitive pressures could have a material adverse effect on our business, financial condition, results of operations, and prospects.

The market for EEG alternatives is competitive in terms of development, availability, pricing, product quality, and time-to-market. Our primary competition is from conventional EEG systems, which are used in the majority of hospitals in the United States that have resources to purchase and support EEG systems. These competitors have greater name and brand recognition, greater market share, greater resources, stronger financial profiles, and may have larger sales forces than we do, as well as legacy status among hospitals. For example, the two primary conventional EEG providers in the United States are Natus and Nihon Kohden, both of which have much longer operating histories than we do. We also face competition from companies that provide or are developing rapid EEG systems, including Nihon Kohden, Natus, and other companies, that can be used in the acute care and other settings (e.g., home and ambulance), or EEG systems specifically for use in the acute care setting, and conventional EEG providers may also seek to develop additional EEG systems. Our competitors may be able to offer products similar or superior to ours at a more attractive price than we can. Our competitors could also be better positioned to serve certain segments of our market, which could create additional price pressure. In light of these factors, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, or customer requirements. As a result, even if the Ceribell System is more effective than our competitors’ products, current or potential customers may accept competitive products, including conventional EEG systems and rapid EEG systems that can be used in multiple settings, in lieu of purchasing and using our products. In addition, because the Ceribell System is supplemental to, and not a replacement for, conventional EEG systems for rapid acute care diagnosis, customers may view our products as an additional expense and choose to purchase and maintain only conventional EEG systems. If we are unable to successfully compete, our business, financial condition, results of operations, and prospects could be materially and adversely affected.

Adapting our manufacturing and production capacities to evolving patterns of demand is expensive, time-consuming, and subject to significant uncertainties. We may not be able to adequately predict emerging customer trends and may be unable to adjust our production and inventory levels in a timely manner.

We market the Ceribell System directly to potential customers in the United States, where we face the risk of significant changes in the demand for our products, including demand for our disposable Wearables based on usage rates. If demand decreases, we will need to implement capacity and cost reduction measures involving restructuring costs. If demand increases, we will be required to make capital expenditures related to increased production and expenditures to hire and train production, sales and marketing, and product support personnel. This would put pressure on our internal and third-party manufacturing capabilities. For example, a sudden increase in demand could require increased production of components, such as our disposable Wearables that are intended for single patient use, so that our customers can timely deliver care to their patients. Adapting to changes in demand inherently lags behind the actual changes because it takes time to identify the change the market is undergoing and to implement any measures to take as a result. Finally, capacity adjustments are inherently risky because there is imperfect information, and sales trends may rapidly intensify, ebb, or even reverse. We may be unable to accurately or timely predict trends in demand and customer behavior or to take appropriate measures to mitigate risks and react to opportunities resulting from such trends. Any inability in the future to identify or to adequately and effectively react to changes in demand could have a material adverse effect on our business, financial condition, results of operations, and prospects.

In addition, we may experience challenges managing the inventory of components of the Ceribell System, which can lead to excess inventory. Inventory levels in excess of customer demand may result in inventory write-downs or write-offs, which could impact our gross margins. Reserves and write-downs for discounts, promotions, and excess inventory are recorded based on our strategic plans and forecast of future demand. Actual future demand could be less than our forecast, which may result in additional reserves and write-downs in the future, or actual demand could be stronger than our forecast, which may result in a reduction to previously recorded reserves and write-downs in the future and increase the volatility of our operating results.

31

Changes in trade policy, tariffs, and our reliance on international manufacturing and supply chain operations expose us to foreign operational and trade risks that may adversely affect our business, results of operations, and financial condition.

The U.S. government has implemented or proposed changes to international trade policy through the renegotiation or potential termination of existing trade agreements and the imposition of tariffs on a wide range of products from China, Vietnam, countries in EMEA, and other regions. In response, China and other countries have imposed or proposed additional tariffs and trade restrictions on imports from the United States. Trade relations between the United States and China remain volatile and uncertain. In 2025, the U.S. imposed additional tariffs on imports from China, Vietnam, and other regions and announced and subsequently paused implementation of certain tariffs. These actions and related retaliation have created significant market uncertainty and may affect the prices of and demand for our products, negatively impacting our results of operations.

We rely on manufacturing facilities and third-party suppliers outside the United States, including in China and Vietnam, for the primary assembly and inspection of our Wearables and for a significant portion of our components. We rely on two primary contract manufacturers in China and maintain contractors in China who perform monitoring and quality inspection services. Our operations also depend on the availability of raw materials and components.

Our suppliers and manufacturers in China expose us to political, legal, and economic risks, including deterioration of U.S.–China relations and changes in U.S. and Chinese laws and regulations relating to sanctions, taxation, import and export restrictions, tariffs, environmental protection, intellectual property, currency controls, cybersecurity, labor and human rights practices, privacy, and public health. Tariffs on products imported from China could adversely affect our suppliers’ operations, potentially causing disruptions or requiring us to transition to alternative manufacturers.

In addition, the Uyghur Forced Labor Prevention Act could prohibit the importation of products or components if any portion of our supply chain is determined to involve forced labor in the Xinjiang Uyghur Autonomous Region. Trade regulations in China remain fluid, and sustained geopolitical tensions could result in additional tariffs, trade restrictions, or a global economic slowdown.

Increased tariffs and countermeasures could raise costs, limit material availability, disrupt global supply chains, increase market volatility, and create operational challenges, materially adversely affecting our sales, gross margins, and customer demand.

Although we have engaged vendors and a contract manufacturer in Vietnam to mitigate certain supply chain risks, these efforts may not be effective, may increase capital and operating costs, and could adversely affect our operating results. Labor costs in China have increased and may continue to rise, and shortages of qualified workers could further constrain production and increase costs passed on to us.

Our international operations also expose us to risks including logistics disruptions, higher component costs, quality control issues, political and economic instability, outbreaks of contagious diseases, regulatory restrictions, intellectual property protection challenges, currency fluctuations, adverse tax consequences, lack of long-term supplier commitments, supplier failures, and labor disputes or natural disasters.

If we cannot innovate at the pace of our competitors, we may not be able to develop or exploit new technologies in time to remain competitive.

For us to remain competitive, it is essential to be at the forefront of new technologies, including in the rapidly evolving area of AI. If we are unable to meet customer demands for new technology, or if the technologies we introduce are viewed less favorably than our competitors’ products, our results of operations and future prospects may be negatively affected. To meet our customers’ needs in these areas, we must continuously work on our product design, develop our algorithms, and invest in and develop new technologies. We will also need to anticipate customer demand with respect to these technologies and which technological advances are most desirable in the EEG monitoring products and any future additional products we market. This need will require our employees to continue learning and adapting to new technologies, and will require us to compete for highly skilled talent in a competitive market. Our operating results depend to a significant extent on our ability to anticipate and adapt to technological changes in the EEG monitoring market, maintain innovation, maintain a strong product pipeline, and reduce or maintain low costs for producing high-quality EEG monitoring products. Any inability to do so could have a material adverse effect on our business, financial condition, results of operations, and prospects.

Artificial intelligence presents risks and challenges that can impact our business, including by posing security risks to our confidential information, proprietary information, and personal data.

Issues in the development and use of artificial intelligence, including the algorithms used in the Clarity platform and other AI-enabled features of the Ceribell System, combined with an uncertain regulatory environment, may result in reputational harm, liability, or other adverse consequences to our business operations. As with many technological innovations, artificial intelligence presents risks and challenges that could impact our business. We may adopt and integrate artificial intelligence tools, including generative artificial

32

intelligence tools, for specific use cases reviewed by legal and information security. Our vendors may incorporate generative artificial intelligence tools into their offerings without disclosing this use to us, and the providers of these generative artificial intelligence tools may not meet existing or rapidly evolving regulatory or industry standards with respect to privacy and data protection and may inhibit our or our vendors’ ability to maintain an adequate level of service and experience.

If we, our vendors, or our third-party partners experience an actual or perceived breach or privacy or security incident because of the use of artificial intelligence, we may lose valuable intellectual property and confidential information and our reputation and the public perception of the effectiveness of our security measures could be harmed. Further, bad actors around the world use increasingly sophisticated methods, including the use of artificial intelligence, to engage in illegal activities involving the theft and misuse of personal information, confidential information, and intellectual property. Any of these outcomes could damage our reputation, result in the loss of valuable property and information, and have a material adverse effect on our business, financial condition and results of operations.

Any future sales in international markets will subject us to additional costs and risks that may have a material adverse effect on our business, financial condition, results of operations, and prospects.

To date, all of our sales have been to customers in the United States. We intend to enter into international markets in the future, and there are significant costs and risks inherent in conducting business in international markets. Upon our expansion into foreign markets, we will be subject to new business risks, in addition to regulatory risks. See the risk factor titled, “We face risks related to obtaining necessary foreign regulatory clearance or approvals.” In addition, expansion into foreign markets will impose additional burdens on our executive and administrative personnel, finance and legal teams, sales and marketing teams, and general managerial resources.

We have limited experience with international regulatory regimes and market practices, and we may not be able to penetrate or successfully generate sales in new markets. We may also encounter difficulty expanding into international markets because of limited brand recognition in certain parts of the world, leading to delayed acceptance of our products by potential customers in these international markets. In addition, international markets may have different reimbursement pathways that present additional challenges and make those markets less commercially viable. If we are unable to expand internationally and manage the complexity of international sales operations successfully, it could have a material adverse effect on our business, financial condition, results of operations, and prospects. If our efforts to introduce our products into foreign markets are not successful, we may have expended significant resources without realizing the expected benefit. Ultimately, the investment required for expansion into foreign markets could exceed the results of operations generated from this expansion.

If we fail to attract and retain senior management and other key personnel, our business may be materially and adversely affected.

Our success depends in part on our continued ability to attract, retain, and motivate highly qualified management, sales and marketing, and research and development personnel, including those with hardware expertise and software expertise, in particular in the area of AI. We are highly dependent upon our senior management team as well as our senior technology personnel. We have experienced, and may in the future experience, planned or unplanned departures of members of our senior management team or senior technology personnel. Any loss of services, whether planned or unplanned, of any of the members of our senior management team could adversely affect our business until a suitable replacement can be found.

Competition for qualified personnel in the medical device field in general and the EEG field specifically is intense, due to the limited number of individuals who possess the training, skills, and experience required by our industry. We intend to continue to review and, where necessary, strengthen our senior management as the needs of our business develop, including through internal promotion and external hires. However, there may be a limited number of people with the requisite competencies to serve in these positions, and we cannot assure you that we will be able to locate or employ such qualified personnel on terms acceptable to us or at all. We also face significant competition for personnel where our main office is located in the San Francisco Bay Area. To attract and maintain key personnel, we need to remain competitive in our “total rewards” offers to employees, including attractive cash compensation, equity, and benefits packages. While we regularly assess market trends for any changes in compensation across all functions, we need to remain diligent in our compensation benchmarking, especially for key personnel, to ensure we are providing attractive offers to new employees and compensating existing employees well. Therefore, the loss of one or more of our key personnel, whether planned or unplanned, or our failure to attract and retain additional key personnel, could have a material adverse effect on our business, financial condition, results of operations, and prospects. In addition, to the extent we hire personnel from competitors, we have been, and may in the future be, subject to allegations that they have been improperly solicited or that they have divulged proprietary or other confidential information, or that their former employers own their research output.

If we fail to maintain our culture, our business may be negatively affected.

Maintaining a positive company culture is necessary to enable us to retain and hire key talent and have a cohesive, aligned employee base. Our ability to maintain this culture will directly affect the continued growth and success of our company. Our culture could face sustainability challenges as we continue to grow. Potential obstacles include reduced adoption of our culture by new

33

employees, limited ability to maintain consistency of culture within business teams, and failure to attract and retain leaders who are mission-minded and support our culture.

If we are unable to successfully develop new products and effectively manage their introduction or improve our existing products, our business may be adversely affected.

We must successfully manage introductions of new or enhanced products or new or enhanced features of the Ceribell System and Clarity, including those related to any future indications in addition to seizure. Introductions of new products or features of the Ceribell System and Clarity could also adversely impact the sales of our existing products to customers. For instance, the introduction or announcement of a new or advanced Ceribell System could shorten the life cycle of our existing devices or reduce demand for them, potentially reducing any benefits of successful new product or enhancement introductions and leading to challenges in managing the inventory of existing products. In addition, new or enhanced products may have higher manufacturing, marketing, information technology, or other costs than our existing products, or lower market acceptance, which could negatively impact our gross margins and operating results. As the technological complexity of our products increases, the infrastructure to support our products, such as our design and manufacturing processes and technical support for our products, may also become more complex. Accordingly, if we fail to effectively manage introductions of new or advanced products, our business may be adversely affected.

Our products are complex to design and manufacture and can contain defects. The production and sale of defective products could adversely affect our business, financial condition, results of operations, and prospects. If product liability lawsuits are brought against us, we may incur substantial liabilities and may be required to limit sales of our products.

The Ceribell System contains highly complex electronic components, which are sourced from external third parties, and there is an inherent risk that defects may occur in the production of any of our products. Although we rely on the suppliers’ internal procedures designed to minimize risks that may arise from quality issues, there can be no assurance that we or our suppliers will be able to eliminate or mitigate occurrences of these issues and associated liabilities. In addition to the risk of product returns by our customers due to product defects, we face exposure to product liability claims in the event that any of our devices are alleged to have resulted in personal injury, over- or under-reporting of seizures resulting in inappropriate diagnosis or treatment, damage to property, or otherwise to have caused harm. We may be sued if any of our devices allegedly causes injury or is found to be otherwise unsuitable during product testing, manufacturing, marketing, sale, or use. For example, Clarity is not designed to detect all short seizures, and users of the Ceribell System may allege the failure to detect all short seizures is a defect. Any such product liability claims may include allegations of defects in manufacturing, defects in design, a failure to warn of dangers or limitations inherent in the product, negligence, strict liability, and a breach of warranty. If we cannot successfully defend ourselves against product liability claims, we may incur substantial liabilities or be required to limit sales of our products. Even successful defense would require significant financial and management resources. Regardless of the merits or eventual outcome, liability claims may result in:

•

decreased demand for our current or future products;

•

injury to our reputation;

•

costs to defend the related litigation;

•

a diversion of management’s time and our resources;

•

substantial monetary awards to customers and patients;

•

regulatory investigations, product recalls, withdrawals or labeling, marketing or promotional restrictions;

•

loss of revenue; and

•

the inability to sell our current or any future products.

Our inability to obtain and maintain sufficient product liability insurance at an acceptable cost and scope of coverage to protect against potential product liability claims could prevent or inhibit the sale of our current or any future products we develop. Although we currently carry product liability insurance, any claim that may be brought against us could result in a court judgment or settlement in an amount that is not covered, in whole or in part, by our insurance or that is in excess of the limits of our insurance coverage. Our insurance policies also have various exclusions and deductibles, and we may be subject to a product liability claim for which we have no coverage. We will have to pay any amounts awarded by a court or negotiated in a settlement that exceed our coverage limitations or that are not covered by our insurance, and we may not have, or be able to obtain, sufficient funds to pay such amounts. Moreover, in the future, we may not be able to maintain insurance coverage at a reasonable cost or in sufficient amounts to protect us against losses. The production and sale of defective products in the future could have a material adverse effect on our business, financial condition, results of operations, and prospects.

34

The size and expected growth of our addressable market has not been established with precision, and may be smaller than we estimate.

Our estimates of the addressable market for our current products and any future products are based on a number of internal and third-party estimates and assumptions, including the prevalence of seizures in the acute care setting and additional indications we intend to expand into, and the level of underutilization of EEG in the acute care setting. While we believe our assumptions and the data underlying our estimates are reasonable, these assumptions and estimates may not be correct. As a result, our estimates of the addressable market for our current or future products may prove to be incorrect. If the actual number of patients who would benefit from our products and services, the price at which we can sell future products or services or the addressable market for our products or services is smaller than we estimate, it could have a material adverse effect on our business, financial condition, results of operations, and prospects.

Alternative technologies or therapies addressing seizure, non-convulsive status epilepticus or other indications we intend to expand into could materially adversely affect our business, financial condition, results of operations, and prospects.

If medical research were to lead to the discovery of alternative therapies or technologies that address seizure, status epilepticus or other indications we intend to expand into in a way that is or is perceived to be more accurate, reliable, cost-effective, or otherwise improved relative to the Ceribell System, for example through alternative monitoring or testing technologies, medication, or therapies, the demand for our products could decrease significantly, leading to a material adverse effect on our business, financial condition, results of operations, and prospects.

We may in the future be deemed to manufacture or contract to manufacture products that contain conflict minerals.

We may in the future be deemed to manufacture or contract to manufacture products that contain certain minerals that have been designated as “conflict minerals” under the Dodd-Frank Wall Street Reform and Consumer Protection Act. As a result, in future periods, we may be required to diligence the origin of such minerals and disclose and report whether or not such minerals originated in the Democratic Republic of the Congo or adjoining countries. The implementation of these new requirements could adversely affect the sourcing, availability, and pricing of materials used in the manufacture of our products. In addition, we may incur additional costs to comply with the disclosure requirements, including costs related to determining the source of any relevant minerals and metals used in our products.

Macroeconomic conditions could materially adversely affect our business, financial condition, results of operations, and prospects.

Macroeconomic conditions, such as high inflationary pressure, changes to monetary policy, high interest rates, volatile currency exchange rates, credit and debt concerns, decreasing consumer confidence and spending, including capital spending, concerns about the stability and liquidity of certain financial institutions, the introduction of or changes in tariffs or trade barriers, and global recessions can adversely impact demand for our products, which could negatively impact our business, financial condition, results of operations, and prospects. Recent macroeconomic conditions have been adversely impacted by geopolitical instability and military hostilities in multiple geographies and monetary and financial uncertainties.

The impacts of these macroeconomic conditions, and the actions taken by governments, central banks, companies, and consumers in response, have resulted in, and may continue to result in, higher inflation in the United States and globally, which is likely, in turn, to lead to an increase in costs and may cause changes in fiscal and monetary policy, including additional increases in interest rates. Other adverse impacts of recent macroeconomic conditions have been, and may continue to be, supply chain constraints, logistics challenges, liquidity concerns in the broader financial services industry, and fluctuations in labor availability.

In a higher inflationary environment, we may be unable to raise the prices of our products sufficiently to keep up with the rate of inflation. A higher inflationary environment can also negatively impact raw material, component, and logistics costs that, in turn, may increase the costs of producing and distributing our products.

Hospitals, in particular, are experiencing and may continue to experience financial and operational pressures as a result of staffing shortages, the supply chain environment, and high inflation, which could impact their ability to access capital markets and other funding sources, increase the cost of funding, or impede their ability to comply with debt covenants, all of which could impede their ability to provide patient care and impact their profitability. To the extent that hospitals face financial pressures, delayed access, or loss of access to uninsured deposits, reductions in government spending or higher interest rates, hospitals’ ability or willingness to spend on equipment may be adversely impacted, all of which could have a material adverse effect on our business, financial condition, results of operations, and prospects.

Also, we have experienced, and may continue to experience, supply chain constraints, including difficulties obtaining a sufficient supply or increased prices of component materials used in our products. Increased interest rates may make access to credit more difficult,

35

which may result in the insolvency of key suppliers, which would exacerbate supply chain challenges. Such supply chain constraints could cause us to fail to meet product demand or maintain our margins.

Shutdowns of the U.S. federal government could materially adversely affect our business, financial condition, results of operations, and prospects.

The U.S. federal government has shut down multiple times in the past, and certain regulatory agencies, including the FDA, the Centers for Medicare & Medicaid Services (“CMS”), the USITC, the U.S. Patent and Trademark Office (“USPTO”), the U.S. Department of Defense, and the U.S. Department of Veterans Affairs, have had to furlough employees and suspend some of their activities. A prolonged shutdown could delay regulatory reviews and approvals, litigation proceedings, or government program implementations and could ultimately disrupt or delay our research and development, manufacturing, commercialization, or intellectual property enforcement activities. Any such delays or disruptions could have a material adverse effect on our business, financial condition, results of operations, and prospects.

Risk Related to Regulatory Matters

If adequate reimbursement becomes unavailable for the diagnostic tests using our products, it could diminish our sales or affect our ability to sell the Ceribell System profitably.

Diagnostic tests performed with the Ceribell System are generally reimbursed under existing physician and hospital codes. Our ability to increase sales of the Ceribell System depends, in significant part, on the availability of adequate coverage and reimbursement from third-party payers, including governmental payers (such as the Medicare and Medicaid programs in the United States), managed care organizations, and private health insurers. Third-party payers decide which diagnostic tests they will cover and establish reimbursement rates for those tests. We do not bill any third-party payers for the Ceribell System. Instead, we invoice healthcare providers and the cost is bundled into the reimbursement received by healthcare providers for the tests using the Ceribell System.

We expect the Ceribell System will continue to be purchased by hospitals who will then seek reimbursement from third-party payers. Reimbursement for the hospital services during an inpatient stay generally is made under a prospective payment system that is determined by a classification system known as diagnosis-related groups, which are assigned using a number of factors including the principal diagnosis, major procedures, discharged status, patient age, and complicating secondary diagnoses, among other things. In August 2023, CMS approved an NTAP under the Medicare inpatient prospective payment system for our newest Clarity algorithm, effective October 1, 2023. The NTAP designation for a product lasts for no more than three years for a specific indication. Once our new Clarity algorithm is no longer eligible for NTAP, the additional cost associated with the use of our products could affect our customers’ profit margin. In light of the potential additional associated cost, some of our target customers may be unwilling to adopt our products and some of our existing customers may terminate their contracts with us.

While third-party payers currently cover and provide reimbursement for tests using the Ceribell System, we can give no assurance that these third-party payers will continue to provide coverage and adequate reimbursement, or that current reimbursement levels for the tests will continue. Third-party payers, whether foreign or domestic, or governmental or commercial, are developing increasingly sophisticated methods of controlling healthcare costs. In addition, no uniform policy of coverage and reimbursement for tests using our products exists among third-party payers. Therefore, coverage and reimbursement for tests using our products can differ significantly from payer to payer. Other competitive products may be more widely covered or subject to different reimbursement policies and requirements, which could impact demand for our products.

Furthermore, the overall amount of reimbursement available for EEG monitoring and seizure diagnosis could decrease in the future. We cannot be sure that the reimbursement amounts available for hospital services and tests using the Ceribell System will not reduce or otherwise negatively impact the demand for our products. Further, coverage policies and third-party reimbursement rates may change at any time. Even if favorable coverage and reimbursement status is attained, less favorable coverage policies and reimbursement rates may be implemented in the future. Failure by users of the Ceribell System to obtain adequate reimbursement for these tests would have a material adverse effect on our business, financial condition, results of operations, and prospects.

The continued commercialization of our products depends in part on the extent to which governmental authorities and health insurers provide coverage and adequate reimbursement levels. Failure to obtain and maintain coverage and adequate reimbursement for our products could limit our ability to market those products and decrease our ability to generate revenue.

While third-party payers generally currently cover and provide reimbursement for diagnostic tests using the Ceribell System, there is significant uncertainty related to the insurance coverage and reimbursement of newly approved and launched products. In the United States, third-party payers, including private and governmental payers, such as the Medicare and Medicaid programs, play an important role in determining the extent to which new devices will be covered. The Medicare and Medicaid programs increasingly are used as

36

models in the United States for how private payers and other governmental payers develop their coverage and reimbursement policies for medical devices. Some third-party payers may require pre-approval of coverage for new or innovative devices before they will reimburse healthcare providers who use such devices.

In addition, customers that use our products may be subject to reimbursement claim denials upon submission of their claims. Customers may also be subject to recovery of overpayments if a payer makes payment for the claim and subsequently determines that the payer’s coding, billing, or coverage policies were not followed. These events, or any other decline in the amount payers are willing to reimburse our customers, could make it difficult for existing customers to continue using or to adopt our products and could create additional pricing pressure for us. If we are forced to lower the price we charge for our products, our gross margins will decrease, which could have a material adverse effect on our business, financial condition, results of operations, and prospects.

Obtaining coverage and reimbursement can be a time-consuming process that could require us to provide supporting scientific, clinical, and cost-effectiveness data for the use of our products. We may not be able to provide data sufficient to satisfy governmental and other third-party payers that diagnostic tests using our products should be covered and reimbursed. In addition, payers continually review new and existing technologies for possible coverage and can, without notice, deny or reverse coverage for new or existing products and tests. There can also be no assurance that third-party payer policies will provide coverage for tests using our products.

Further, we believe that future coverage and reimbursement may be subject to increased restrictions, such as additional prior authorization requirements, both in the United States and in international markets, which may impact utilization of our products and have a material adverse effect on our business, financial condition, results of operations, and prospects. In Europe, reimbursement is entirely regulated at member state level, varies significantly between countries, and member states are facing increased pressure to limit public healthcare spending. Third-party coverage and reimbursement for our products or any of our products in development for which we may receive regulatory clearance, certification, or approval may not be available or adequate in either the United States or international markets. If demand for our products is adversely affected by third-party reimbursement policies and decisions, it could have a material adverse effect on our business, financial condition, results of operations, and prospects.

We are subject to certain federal and state fraud and abuse laws and transparency laws, and any failure to comply could subject us to substantial penalties or other adverse consequences. In addition, any challenge to or investigation into our practices under these laws could cause adverse publicity and be costly to respond to, and thus could harm our business.

There are numerous U.S. federal and state laws pertaining to healthcare fraud and abuse, including anti-kickback, false claims, and transparency laws regarding payments and other transfers of value made to physicians and other healthcare professionals. Our business practices and relationships with providers are subject to scrutiny under these laws. The healthcare laws and regulations that may affect our ability to operate include, but are not limited to:

•

The federal Anti-Kickback Statute, which prohibits, among other things, persons and entities from soliciting, offering, receiving, or providing remuneration, directly or indirectly, in cash or in kind, to induce either the referral of an individual or furnishing or arranging for a good or service, for which payment may be made, in whole or in part, under federal healthcare programs, such as Medicare and Medicaid. The U.S. government has interpreted this law broadly to apply to the marketing and sales activities of medical device manufacturers. In addition, a person or entity does not need to have actual knowledge of the statute or specific intent to violate it to have committed a violation;

•

The federal civil and criminal false claims laws and civil monetary penalties laws, including the federal civil False Claims Act, which prohibit, among other things, individuals or entities from knowingly presenting, or causing to be presented, claims for payment from Medicare, Medicaid, or other federal healthcare programs that are false or fraudulent; knowingly making, using, or causing to be made or used, a false record or statement material to a false or fraudulent claim, or knowingly making a false statement to avoid, decrease, or conceal an obligation to pay money to the federal government. In addition, certain marketing practices that, for example, induce providers to upcode to a higher reimbursement service or site of service, may also violate false claims laws. Moreover, the government may assert that a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the federal civil False Claims Act. Private individuals can bring False Claims Act “qui tam” actions, on behalf of the government and such individuals, commonly known as “whistleblowers,” may share in amounts paid by the entity to the government in fines or settlement;

•

The federal Civil Monetary Penalties Law, which prohibits, among other things, offering or transferring remuneration to a federal healthcare beneficiary that a person knows or should know is likely to influence the beneficiary’s decision to order or receive items or services reimbursable by the government from a particular provider or supplier;

•

The Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act of 2009, and regulations implemented thereunder (collectively, “HIPAA”), which, in

37

addition to privacy protections applicable to healthcare providers and other entities, prohibits, among other things, executing a scheme to defraud any healthcare benefit program and making false statements relating to healthcare matters. Similar to the federal Anti-Kickback Statute, a person or entity does not need to have actual knowledge of the statute or specific intent to violate it to have committed a violation;

•

The federal Physician Payments Sunshine Act, which requires certain applicable manufacturers of drugs, devices, biologics, and medical supplies for which payment is available under certain federal healthcare programs, to monitor and report to CMS, certain payments and other transfers of value to physicians (defined to include doctors, dentists, optometrists, podiatrists, and chiropractors), certain other non-physician practitioners (physician assistants, nurse practitioners, clinical nurse specialists, anesthesiologist assistants, certified registered nurse anesthetists, anesthesiology assistants, and certified nurse midwives), and teaching hospitals, and to report annually ownership and investment interests held by physicians and their immediate family members;

•

U.S. federal consumer protection and unfair competition laws, which broadly regulate marketplace activities and activities that potentially harm customers; and

•

Analogous state law equivalents of each of the above federal laws, state anti-kickback, and false claims laws; state laws requiring device companies to comply with specific compliance standards, restrict payments made to healthcare providers and other potential referral sources, and report information related to payments and other transfers of value to healthcare providers or marketing expenditures; and state laws related to insurance fraud in the case of claims involving private insurers.

These laws and regulations, among other things, constrain our business, marketing and other promotional and research activities by limiting the kinds of financial arrangements, including sales programs, we may have with hospitals, physicians, or other potential purchasers of our products. In particular, these laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, sales commission, customer incentive programs, and other business arrangements, as well as interactions with healthcare professionals through consultant arrangements, product training, sponsorships, or other activities. Efforts to ensure that our business arrangements with third parties will comply with applicable healthcare and other laws and regulations will involve substantial costs. It is possible that governmental authorities will conclude that our business practices, including arrangements with teleneurology providers and customers for the provision of remote EEG interpretation services or agreements we have entered into with physicians who are paid, in part, in the form of stock or stock options, do not comply with current or future statutes, regulations, agency guidance, or case law involving applicable fraud and abuse or other healthcare laws and regulations. Due to the breadth of these laws, the narrowness of statutory exceptions and regulatory safe harbors available, and the range of interpretations to which they are subject, governmental authorities may possibly conclude that our business practices may not comply with healthcare laws and regulations.

To enforce compliance with the healthcare regulatory laws, certain enforcement bodies have recently increased their scrutiny of interactions between healthcare companies and healthcare providers, which has led to a number of investigations, prosecutions, convictions, and settlements in the healthcare industry. Responding to investigations can be time-and resource-consuming and can divert management’s attention from the business. We may be subject to private qui tam actions brought by individual whistleblowers on behalf of the federal or state governments, with potential liability under the federal False Claims Act including mandatory treble damages and significant per-claim penalties. In addition, as a result of these investigations and qui tam actions, we may have to agree to additional compliance and reporting requirements as part of a consent decree or corporate integrity agreement. Any such investigation or settlement could increase our costs or otherwise have a material adverse effect on our business, financial condition, results of operations, and prospects. Even an unsuccessful challenge or investigation into our practices could cause adverse publicity and be costly to respond to.

If our operations are found to be in violation of any of the federal and state laws described above or any other current or future fraud and abuse or other healthcare laws and regulations that apply to us, we may be subject to significant penalties, including significant criminal, civil, and administrative penalties, damages, fines, exclusion from participation in government programs, such as Medicare and Medicaid, imprisonment, contractual damages, reputation harm, oversight if we become subject to a consent decree or corporate integrity agreement, or disgorgement, and we could be required to curtail, restructure or cease our operations. Any of the foregoing consequences will have an adverse effect on our business, financial condition, results of operations, and prospects.

Our employees, consultants and other commercial partners may engage in misconduct or other improper activities, including non-compliance with regulatory standards and requirements.

We are exposed to the risk that our employees, consultants, and other commercial partners and business associates may engage in fraudulent or illegal activity. Misconduct by these parties could include intentional, reckless, or negligent conduct or other unauthorized activities that violate the regulations of the FDA and other regulators (both domestic and foreign), including those laws requiring the reporting of true, complete, and accurate information to such regulators, manufacturing standards, healthcare fraud and abuse laws, and regulations in the United States and internationally or laws that require the true, complete, and accurate reporting of financial information

38

or data. In particular, sales, marketing, and business arrangements in the healthcare industry, including the sale of medical devices, are subject to extensive laws and regulations intended to prevent fraud, misconduct, kickbacks, self-dealing, and other abusive practices. It is not always possible to identify and deter misconduct by our employees, consultants, and other third parties, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to comply with these laws or regulations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in the imposition of significant fines or other sanctions, including the imposition of civil, criminal, and administrative penalties, damages, monetary fines, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, reputational harm, diminished profits and future earnings, oversight if we become subject to a consent decree or corporate integrity agreement, and curtailment of operations, any of which could adversely affect our business, financial condition, results of operations, and prospects. Whether or not we are successful in defending against such actions or investigations, we could incur substantial costs, including legal fees and reputational harm, and divert the attention of management in defending ourselves against any of these claims or investigations.

Healthcare policy changes, including recently enacted legislation reforming the U.S. healthcare system, could have a material adverse effect on our business, financial condition, results of operations, and prospects.

In the United States, there have been and continue to be a number of legislative and regulatory initiatives to contain healthcare costs. Federal and state lawmakers regularly propose and, at times, enact legislation that would result in significant changes to the healthcare system, some of which are intended to contain or reduce the costs of medical products and services. Current and future legislative proposals to further reform healthcare or reduce healthcare costs may limit coverage of or lower reimbursement for the diagnostic tests associated with the use of our products. The cost containment measures that payers and providers are instituting and the effect of any healthcare reform initiative implemented in the future could impact our revenue from the sale of our products.

By way of example, in the United States, the Affordable Care Act (the “ACA”) made a number of substantial changes in the way healthcare is financed by both governmental and private insurers. Among other ways in which it may affect our business, the ACA implemented payment system reforms including a national pilot program on payment bundling to encourage hospitals, physicians, and other providers to improve the coordination, quality, and efficiency of certain healthcare services through bundled payment models; and expanded the eligibility criteria for Medicaid programs. There have been executive, judicial, and Congressional challenges to certain aspects of the ACA. On June 17, 2021, the U.S. Supreme Court dismissed the most recent challenge on procedural grounds that argued the ACA is unconstitutional in its entirety because the “individual mandate” was repealed by Congress.

In addition, other legislative changes have been proposed and adopted since the ACA was enacted. The Budget Control Act of 2011, among other things, reduced Medicare payments to providers, effective on April 1, 2013 and, due to subsequent legislative amendments to the statute, will remain in effect through 2032, unless additional Congressional action is taken. In addition, the American Taxpayer Relief Act of 2012, among other things, further reduced Medicare payments to several providers, including hospitals, and increased the statute of limitations period for the government to recover overpayments to providers from three to five years.

More recently, the One Big Beautiful Bill Act (the “OBBBA”) was signed into law, which included significant reforms to Medicaid, including an estimated $1 trillion in reduced federal Medicaid spending from 2025 through 2034, the imposition of work requirements for certain adult enrollees, more frequent eligibility redeterminations and increased cost-sharing for beneficiaries. These changes are expected to reduce overall Medicaid enrollment and access to care. Although the effect on our business is currently unknown, any decrease in the number of insured patients or reimbursement levels for our products could adversely affect our revenue and commercial prospects.

We expect additional state and federal healthcare policies and reform measures to be adopted in the future, any of which could limit reimbursement for healthcare products and services or otherwise result in reduced demand for our products or additional pricing pressure and have a material adverse effect on our industry generally and on our customers. We cannot predict what other healthcare programs and regulations will ultimately be implemented at the federal or state level or the effect of any future legislation or regulation in the United States may negatively affect our business, financial condition, results of operations, and prospects. The continuing efforts of the government, insurance companies, managed care organizations, and other payers of healthcare services to contain or reduce costs of healthcare may adversely affect our ability to set a price that we believe is fair for our products, our ability to generate revenue and achieve or maintain profitability, and the availability of capital.

Any changes of, or uncertainty with respect to, future coverage or reimbursement rates could affect demand for our products, which could have a material adverse effect on our business, financial condition, results of operations, and prospects.

39

Our products and operations are subject to extensive government regulation and oversight in the United States, and our failure to comply with applicable requirements could harm our business.

Our products are regulated as medical devices in the United States. Medical devices and their manufacturers and product developers are subject to extensive regulation in the United States, including by the FDA. The FDA regulates, among other things, with respect to medical devices: design, development, and manufacturing; testing, labeling, content, and language of instructions for use and storage; clinical trials; product safety; establishment registration and device listing; marketing, sales, and distribution; premarket clearance, classification, and approval or certification; recordkeeping procedures; advertising and promotion; recalls and field safety corrective actions; post-market surveillance, including reporting of deaths or serious injuries and malfunctions that, if they were to recur, could lead to death or serious injury; post-market studies; and product import and export.

The regulations to which we are subject are complex, burdensome to understand and apply and have tended to become more stringent over time. Regulatory changes could result in restrictions on our ability to carry on or expand our operations, higher than anticipated costs or lower than anticipated sales. The FDA enforces its regulatory requirements through, among other means, periodic unannounced inspections. We do not know whether we or any of our contract manufacturers will be found compliant in connection with any future FDA or foreign inspections. Failure to comply with applicable regulations could jeopardize our ability to sell our products and result in enforcement actions such as: warning letters; fines; injunctions; civil penalties; termination of distribution; import alerts; recalls or seizures of products; delays in the introduction of products into the market; total or partial suspension of production; refusal to grant future clearances or approvals; withdrawals or suspensions of clearances or approvals, resulting in prohibitions on sales of our products; and in the most serious cases, criminal penalties.

Failure to maintain marketing authorizations for our products, or to timely obtain necessary marketing authorizations for our future products, may have a material adverse effect on our business, financial condition, results of operations, and prospects.

In the United States, before we can market a new medical device, or a new use of, or other significant modification to an existing, marketed medical device, we must first receive either clearance under Section 510(k) of the Federal Food, Drug and Cosmetic Act (the “FDCA”), approval of a premarket approval application (“PMA”), or grant of a de novo classification request from the FDA, unless an exemption applies. In the 510(k) clearance process, before a device may be marketed, the FDA must determine that a proposed device is “substantially equivalent” to a legally-marketed “predicate” device, which includes a device that has been previously cleared through the 510(k) process, a device that was legally marketed prior to May 28, 1976 (pre-amendments device), a device that was originally on the U.S. market pursuant to an approved PMA and later down-classified, or a 510(k)-exempt device. To be “substantially equivalent,” the proposed device must have the same intended use as the predicate device, and either have the same technological characteristics as the predicate device or have different technological characteristics and not raise different questions of safety or effectiveness than the predicate device. Clinical data are sometimes required to support substantial equivalence. In the process of obtaining PMA approval, the FDA must determine that a proposed device is safe and effective for its intended use based, in part, on extensive data, including, but not limited to, technical, pre-clinical, clinical trial, manufacturing, and labeling data. The PMA process is typically required for devices that are deemed to pose the greatest risk, such as life-sustaining, life-supporting, or implantable devices. In the de novo classification process, a manufacturer whose novel device under the FDCA would otherwise be automatically classified as Class III and require the submission and approval of a PMA prior to marketing is able to request down-classification of the device to Class I or Class II on the basis that the device presents a low or moderate risk. If the FDA grants the de novo classification request, the applicant will receive authorization to market the device. This device type may be used subsequently as a predicate device for future 510(k) submissions.

The PMA approval, 510(k) clearance and de novo classification processes can be expensive, lengthy, and uncertain. The FDA’s 510(k) clearance process usually takes from three to 12 months, but can take longer. The process of obtaining a PMA is much more costly and uncertain than the 510(k) clearance process and generally takes from one to three years, or even longer, from the time the application is submitted to the FDA. In addition, a PMA generally requires the performance of one or more clinical trials. Clinical data may also be required in connection with an application for 510(k) clearance or a de novo request. Despite the time, effort and cost, a device may not obtain marketing authorization by the FDA. We have obtained 510(k) clearances for our commercialized medical devices, and we must obtain marketing authorization for any future devices we develop, unless they are exempt. Marketing authorizations for any of our future products, if granted, may include significant limitations on the indicated uses for the device, which may limit the potential commercial market for the device.

In the United States, any modification to a medical device for which we have obtained marketing authorization may require us to submit a new 510(k) premarket notification and obtain clearance, to submit a PMA and obtain FDA approval, or to submit a de novo request prior to implementing the change. For example, any modification to a 510(k)-cleared device that could significantly affect its safety or effectiveness, or that would constitute a major change in its intended use, design or manufacture, generally requires a new 510(k) clearance or other marketing authorization. The FDA requires every manufacturer to make such determinations in the first instance, but the FDA may review any manufacturer’s decision. The FDA may not agree with a manufacturer’s decisions regarding whether new clearances or approvals are necessary. We may make modifications or add additional features in the future to our medical

40

devices that we believe do not require a new 510(k) clearance, de novo request, or approval of a PMA. If the FDA disagrees with our determination and requires us to seek new marketing authorizations for the modifications for which we have concluded that new marketing authorizations are unnecessary, we may be required to cease marketing or to recall the modified product until we obtain such marketing authorization, and we may be subject to significant regulatory fines or penalties. If the FDA requires us to go through a lengthier, more rigorous examination for future products or modifications to existing products than we had expected, product introductions or modifications could be delayed or canceled, which could adversely affect our business.

The FDA can delay, limit or deny marketing authorization of a device for many reasons, including:

•

our inability to demonstrate to the satisfaction of the FDA that our products are substantially equivalent to a predicate device or are safe and effective for their intended uses;

•

the disagreement of the FDA with the design or implementation of our clinical trials or the interpretation of data from preclinical studies or clinical trials;

•

serious and unexpected adverse device effects experienced by participants in our clinical trials;

•

the data from our preclinical studies and clinical trials may be insufficient to support clearance, de novo classification, or approval, where required;

•

our inability to demonstrate that the clinical and other benefits of the device outweigh the risks;

•

the manufacturing process or facilities we use may not meet applicable requirements; and

•

the potential for marketing authorization regulations of the FDA to change significantly in a manner rendering our clinical data or regulatory filings insufficient for marketing authorization.

In addition, in January 2026, we received Breakthrough Device Designation from the FDA for our Ceribell LVO System, a portable EEG-based stroke detection and monitoring system in development intended for use in hospital settings to monitor adult patients for whom a reliable neurological exam for LVO stroke are often challenging and to notify medical professionals of suspected LVO stroke, which notifications are intended to be confirmed by CT or MR angiography prior to initiation of treatment. Breakthrough Device Designation provides certain benefits, including more interactive and timely communications with FDA staff, potential use of post-market data collection to facilitate expedited development and review, opportunities for more efficient and flexible clinical study design, and prioritized review of premarket submissions. However, there can be no guarantee that these benefits will materialize or significantly impact our development and regulatory approval process. Even where our product candidates have received Breakthrough Device Designation, we may not experience a faster development process, review, or approval compared to conventional FDA procedures. Breakthrough Device Designation does not alter the regulatory standards for marketing authorization or guarantee that we will ultimately obtain FDA clearance or approval for the designated indication. Furthermore, the FDA may rescind Breakthrough Device Designation if it believes that the designation is no longer supported by data from our clinical development program. As with all FDA marketing authorizations, we will need to continue to comply with applicable regulations and standards, which may change over time.

Even if we successfully apply for marketing authorization for future products, there is no guarantee that we will obtain the marketing authorizations within the expected timeline, or at all. Staff reductions in the FDA office charged with regulating devices may cause delay.

Our clinical testing process is complex, lengthy, can be expensive, and carries uncertain outcomes. Future trials and studies by us or others may fail to replicate positive results observed to date.

We conduct our own clinical studies and provide support for third party–initiated trials that evaluate different aspects of the Ceribell System. Clinical testing is difficult to design and implement, can take many years, can be expensive, and carries uncertain outcomes. The results of preclinical studies and clinical trials of our products conducted to date and ongoing or future studies and trials of our current, planned, or future products may not be predictive of the results of later clinical trials or real-world performance, and interim results of a clinical trial do not necessarily predict final results. The data and results from our clinical studies do not ensure that we will achieve similar results in future clinical trials, are not head to head studies and not directly comparable with each other, as they have different sample sizes, designs, limitations, assumptions, and objectives, and are conducted on different patient populations at different sites by different researchers. In addition, as some of these studies are prospective studies, they may not reflect real-world performance. Some of our studies have not been peer reviewed or published, and peer reviewers may disagree with the methodologies or conclusions of such studies and may not deem them worthy of publication. In addition, preclinical and clinical data are often susceptible to various interpretations and analyses, and many companies that have believed their products performed satisfactorily in

41

preclinical studies and earlier clinical trials have nonetheless failed to replicate results in later clinical trials, or have viewed such data in different ways than regulators.

The risk that future trials and studies of the Ceribell System fail to replicate positive results observed to date is increased because most of our studies and trials are conducted on small samples, not powered for statistical significance, controlled for other clinical variables, or have other design limitations and almost all such studies were conducted or sponsored by us. Independent studies with larger samples or different designs may not replicate results observed to date. In addition, the performance of the Clarity algorithm is typically evaluated by comparing the algorithm results to a retrospective review of the EEG by a panel of neurologists. There is a high degree of inter-rater variability in the interpretation of EEGs by clinicians, such that Ceribell System study results may vary from study to study depending on the size and composition of the neurologist panel. Clinical studies or investigations on the Ceribell System have produced, and may in the future produce, negative or inconclusive results. Furthermore, others, including healthcare professionals and regulators, may perceive a conflict of interest with studies supported, sponsored, or funded by us or conducted by our employees or consultants, and may not find results of such studies to be compelling or credible. As a result of the foregoing, we may decide, or regulators may require us, to conduct additional clinical and nonclinical testing in addition to those we have planned. The initiation and completion of clinical studies may be prevented, delayed, or halted for numerous reasons. We may experience delays in our clinical trials for a number of reasons, which could adversely affect the costs, timing, or successful completion of our clinical trials, including related to the following:

•

regulators may disagree as to the design or implementation of our clinical trials;

•

regulators and/or institutional review boards (“IRBs”), or other bodies may not authorize us or our investigators to commence a clinical trial, or to conduct or continue a clinical trial at a prospective or specific trial site;

•

we may not reach agreement on acceptable terms with third-party researchers, clinical trial sites, or prospective contract research organizations (“CROs”), the terms of which can be subject to extensive negotiation and may vary significantly among different researchers, trial sites, and CROs;

•

the number of subjects or patients required for clinical trials may be larger than we anticipate, enrollment in these clinical trials may be insufficient or slower than we anticipate, and the number of clinical trials being conducted at any given time may be high and result in fewer available patients for any given clinical trial, or patients may drop out of these clinical trials at a higher rate than we anticipate;

•

our third-party contractors may fail to comply with regulatory requirements or meet their contractual obligations to us in a timely manner or at all;

•

we might have to suspend or terminate clinical trials for various reasons, including occurrence of adverse events or other findings that the subjects in our clinical trials are being exposed to unacceptable health risks;

•

we may have to amend clinical trial protocols or conduct additional studies to reflect changes in regulatory requirements or guidance, which we may be required to submit to an IRB, or other bodies and/or regulatory authorities for re-examination;

•

regulators, IRBs, other bodies, or other parties may require or recommend that we or our investigators suspend or terminate clinical research for various reasons, including safety signals or noncompliance with regulatory requirements;

•

the cost of clinical trials may be greater than we anticipate;

•

clinical sites may not adhere to the clinical protocol or may drop out of a clinical trial;

•

we may be unable to recruit a sufficient number of clinical trial sites;

•

regulators, IRBs, or other bodies may fail to approve or subsequently find fault with our manufacturing processes or facilities of third-party manufacturers with which we enter into agreements for clinical and commercial supplies, the supply of devices or other materials necessary to conduct clinical trials may be insufficient, inadequate or not available at an acceptable cost, or we may experience interruptions in supply;

•

marketing authorization or regulations of FDA may change in a manner rendering our clinical data insufficient for marketing authorization;

•

we may be required to submit an investigational device exemption (“IDE”) application to the FDA, which must become effective prior to commencing certain human clinical trials of medical devices, and the FDA may reject our IDE application and notify us that we may not begin clinical trials, or place restrictions on the conduct of such trials; similar requirements may apply in foreign jurisdictions; and

•

our current or future products may have undesirable side effects or other unexpected characteristics.

42

Any of these occurrences may significantly harm our business, financial condition, results of operations, and prospects. In addition, many of the factors that cause, or lead to, a delay in the commencement or completion of clinical trials may also ultimately lead to the denial of marketing authorization of any medical device.

Patient enrollment in clinical trials, and completion of patient follow-up, if applicable, depend on many factors, including the size of the patient population, the nature of the trial protocol, the eligibility criteria for the clinical trial, competing clinical trials, and clinicians’ and patients’ perceptions as to the potential advantages of the product being studied. Patients participating in our clinical trials may drop out before completion of the trial or experience adverse medical events unrelated to an investigational device. Delays in patient enrollment or failure of patients to continue to participate in a clinical trial may delay commencement or completion of the clinical trial, cause an increase in the costs of the clinical trial and delays, or result in the failure of the clinical trial.

Clinical trials must be conducted in accordance with the laws and regulations of the FDA and other applicable regulatory authorities’ legal requirements, regulations, or guidelines, and are subject to oversight by these governmental agencies and IRBs, or other bodies at the medical institutions where the clinical trials are conducted. In addition, clinical trials must be conducted with supplies of our devices produced under current good manufacturing practice (“cGMP”) or similar foreign requirements, and other regulations applicable to the location where the clinical trial is conducted. We rely on third-party researchers and clinical trial sites, and may in the future rely on CROs, to ensure the proper and timely conduct of our clinical trials, and while we have agreements governing their committed activities, we have limited influence over their actual performance. We depend on these third parties to conduct our clinical trials in compliance with good clinical practice (“GCP”), requirements. To the extent they fail to enroll participants for our clinical trials, fail to conduct the study to GCP standards or are delayed for a significant time in the execution of trials, including achieving full enrollment, we may be affected by increased costs, trial delays or both. In addition, if we conduct clinical trials in other countries in the future, we may be subject to further delays and expenses as a result of increased shipment costs and additional regulatory requirements, and the engagement of non-U.S. third-party contractors may expose us to risks associated with clinical investigators who are unknown to the FDA, and different standards of diagnosis, screening, and medical care. See the risk factor titled, “We rely on third parties to conduct and support our preclinical studies and clinical trials. These third parties may not properly and successfully carry out their contractual duties or meet expected deadlines, which could harm our ability to obtain marketing authorization of or commercialize future products we develop.”

Interim, “top-line,” and preliminary data from our clinical trials that we announce or publish from time to time may change as more patient data become available and are subject to audit and verification procedures that could result in material changes in the final data.

From time to time, we may publicly disclose interim, top-line or preliminary data from our clinical trials, which is based on a preliminary analysis of then-available data, and the results and related findings and conclusions are subject to change following a more comprehensive review of the data related to the particular trial or additional data collected at a later time. We also make assumptions, estimations, calculations, and conclusions as part of our analyses of data, and we may not have received or had the opportunity to fully and carefully evaluate all data. As a result, the interim, top-line, or preliminary results that we report may differ from future results of the same trial, or different conclusions or considerations may qualify such results, once additional data have been received and fully evaluated. Interim, top-line, or preliminary data also remain subject to audit and verification procedures that may result in the final data being materially different from the interim, top-line, or preliminary data we previously announced. As a result, interim, top-line, and preliminary data should be viewed with caution until the final data are available. Adverse differences between interim data and final data could significantly harm our business prospects. Further, disclosure of interim data by us or by our competitors could result in volatility in our share price.

Further, others, including regulatory agencies or other bodies, may not accept or agree with our assumptions, estimates, calculations, conclusions, or analyses or may interpret or weigh the importance of data differently, which could impact the value of the particular trial, or the approvability or potential for commercialization of the particular medical device. In addition, the information we choose to publicly disclose regarding a particular study or clinical trial is based on what is typically extensive information, and others may not agree with what we determine is material or otherwise appropriate information to include in our disclosure. The interim, top-line, or preliminary data that we report may differ from final results, and regulatory authorities and other bodies may disagree with the conclusions reached, which may harm our ability to obtain marketing authorization for, and commercialize, our future products, which could harm our business, financial condition, results of operations, and prospects.

43

We are subject to ongoing regulatory review and scrutiny. Failure to comply with post-marketing regulatory requirements could subject us to enforcement actions, including substantial penalties, and might require us to recall or withdraw a product from the market.

We are subject to ongoing and extensive regulatory requirements governing, among other things, the manufacture, marketing, advertising, medical device reporting, sale, promotion, import, export, registration, and listing of devices. For example, medical device manufacturers must submit certain reports to the FDA and keep required records as a condition of obtaining and maintaining marketing authorization. These reports include information about failures and certain adverse events potentially associated with the device after its marketing authorization. Failure to submit such reports, or failure to submit the reports in a timely manner, could result in enforcement action by the FDA. Following its review of the periodic reports, the FDA might ask for additional information or initiate further investigation.

Regulatory changes could result in restrictions on our ability to continue or expand our operations, higher than anticipated costs, or lower than anticipated sales. We have ongoing responsibilities under FDA regulations, and the FDA and state regulatory authorities have broad enforcement powers. Our failure to comply with applicable regulatory requirements could result in enforcement action by the FDA or state regulatory authorities, which may include any of the following or other sanctions:

•

untitled letters or warning letters;

•

fines, injunctions, consent decrees, and civil penalties;

•

recalls, termination of distribution, administrative detention, or seizure of our products;

•

customer notifications or repair, replacement, or refunds;

•

operating restrictions or partial suspension or total shutdown of production;

•

delays in or refusal to grant our requests for future clearances, de novo classifications or approvals, or comparable foreign marketing authorizations of new products, new intended uses, or modifications to existing products;

•

withdrawals or suspensions of any granted marketing authorizations, resulting in prohibitions on sales of our products;

•

FDA refusal to issue certificates to foreign governments needed to export products for sale in other countries; and

•

criminal prosecution.

Any of these sanctions could result in negative publicity, higher than anticipated costs or lower than anticipated sales and have a material adverse effect on our reputation, business, financial condition, results of operations, and prospects.

In addition, the FDA may change its marketing authorization policies affecting future products, adopt additional regulations or revise existing regulations, or take other actions, which may prevent or delay marketing authorization of any products under development or impact our ability to modify any products authorized for market on a timely basis. Such changes may also occur in foreign jurisdictions where we may market our products in the future. Such changes could impose additional requirements upon us that could delay our ability to obtain future marketing authorizations, increase the costs of compliance, or restrict our ability to maintain any marketing authorizations we have obtained. See the risk factor titled, “Legislative or regulatory reforms in the United States may make it more difficult and costly for us to manufacture, market, or distribute our products, or to obtain marketing authorizations for any future products.”

Our products must be manufactured in accordance with applicable laws and regulations, and we could be forced to recall our devices or terminate production if we fail to comply with these regulations.

In the United States, the methods used in, and the facilities used for, the manufacture of medical devices must comply with the FDA’s cGMPs for medical devices, known as the QMSR, which is a complex regulatory scheme that covers the procedures and documentation of the design, testing, production, process controls, quality assurance, labeling, packaging, handling, storage, distribution, installation, servicing, and shipping of medical devices. Furthermore, we are required to verify that our suppliers maintain facilities, procedures, and operations that comply with our quality standards and applicable regulatory requirements. The FDA enforces the QMSR through periodic announced or unannounced inspections of medical device manufacturing facilities, which may include the facilities of subcontractors. Our products are also subject to similar state regulations governing manufacturing.

Our third-party manufacturers may not take the necessary steps to comply with applicable regulations, which could cause delays in the delivery of our medical devices. In addition, failure to comply with applicable FDA requirements or later discovery of previously unknown problems with our products or manufacturing processes could result in, among other things: warning letters or untitled letters; fines, injunctions, or civil penalties; suspension or withdrawal of marketing authorizations; seizures or recalls of our products; total or

44

partial suspension of production or distribution; administrative or judicially imposed sanctions; the FDA’s refusal to grant pending or future clearances or approvals for our products or similar decisions by foreign regulatory authorities or notified bodies; clinical holds; refusal to permit the import or export of our products; and criminal prosecution of us, our suppliers, or our employees. If any of these events occurs, our reputation could be harmed, we could be exposed to product liability claims and we could lose customers and experience reduced sales and increased costs.

Our products may cause or contribute to adverse medical events which we may be required to report to the FDA, and if we fail to do so, we would be subject to sanctions that could harm our reputation, business, financial condition, results of operations, and prospects. In addition, the discovery of serious safety issues with our products, or a recall of our products either voluntarily or at the direction of the FDA, could have a negative impact on us.

It is possible that there may be side effects and adverse events associated with the use of our medical devices or any future devices we develop. For example, the Ceribell System has in certain instances issued false alarms, i.e., report seizure activity when there is no seizure, and in other instances has failed to report or under-reported seizure activity when there is seizure, and may continue to do so, all of which may lead to patients being misdiagnosed, receiving unnecessary medical procedures or treatments, or experiencing delays in receiving necessary medical procedures or treatments. Additionally, the Wearables used as part of the Ceribell System may cause skin irritation to patients or break down sooner than expected. Use of the Ceribell System, including both the Wearables and EEG recorder, may present infection control hazards to both patients and healthcare staff. The EEG recorder may also present additional hazards to patients and healthcare staff, including mechanical hazards, electrical hazards, and thermal hazards relating to the device’s integrated lithium-ion battery. Failure of the EEG recorder to transmit data to our portal due to software or hardware problems, incorrect setup or configuration, network incompatibility, or user error may lead to patients experiencing delays in receiving necessary medical procedures or treatments. The FDA’s medical device reporting regulations require us to assess reportability of adverse events that come to our attention and report to the FDA when we receive or become aware of information that reasonably suggests that one or more of our products may have caused or contributed to a death or serious injury or malfunctioned in a way that, if the malfunction were to recur, it could cause or contribute to a death or serious injury. The timing of our obligation to report is triggered by the date we become aware of the event as well as the nature of the event. We may fail to report events of which we become aware within the prescribed timeframe. We may also fail to recognize that we have become aware of a reportable event, especially if it is not reported to us as an adverse event or if it is an adverse event that is unexpected or removed in time from the use of the product. The FDA may also disagree with our determinations that an event was not reportable. To date, we have not filed any medical device reports with the FDA. If we fail to comply with our reporting obligations, the FDA could take action, including warning letters, untitled letters, administrative actions, criminal prosecution, imposition of civil monetary penalties, revocation of our marketing authorizations, seizure of our products, or delay in obtaining marketing authorizations for our future products.

The FDA has the authority to require the recall of commercialized products in the event of material deficiencies or defects in design or manufacture of a product or in the event that a product poses an unacceptable risk to health. The FDA’s authority to require a recall must be based on a finding that there is reasonable probability that the device could cause serious injury or death. We may also choose to voluntarily recall a product if any material deficiency is found. A government-mandated or voluntary recall by us could occur as a result of an unacceptable risk to health, component failures, malfunctions, manufacturing defects, labeling or design deficiencies, packaging defects, or other deficiencies or failures to comply with applicable regulations. Product defects or other errors may occur in the future.

Depending on the corrective action we take to redress a product’s deficiencies or defects, the FDA may require, or we may decide, that we will need to obtain new marketing authorizations for the device before we may market or distribute the corrected device. Seeking such clearances or approvals may delay our ability to replace the recalled devices in a timely manner. Moreover, if we do not adequately address problems associated with our devices, we may face additional regulatory enforcement action, including FDA warning letters, product seizure, injunctions, administrative penalties, or civil or criminal fines.

Companies are required to maintain certain records of recalls and corrections, even if they are not reportable to the FDA. We may initiate voluntary withdrawals or corrections for our products in the future that we determine do not require notification of the FDA. If the FDA disagrees with our determinations, it could require us to report those actions as recalls and we may be subject to enforcement action. A future recall announcement could harm our reputation with customers, potentially lead to product liability claims against us, and negatively affect our sales. Any corrective action, whether voluntary or involuntary, as well as defending ourselves in a lawsuit, will require the dedication of our time and capital, distract management from operating our business, and may harm our reputation, business, financial condition, results of operations, and prospects.

The misuse or off-label use of our products may result in injuries that harm patients and lead to product liability suits, harm our reputation in the marketplace, or result in costly investigations, fines, or sanctions by regulatory bodies if we are deemed to have engaged in the promotion of these uses, any of which could be costly to our business.

45

Our commercial products, and any marketing authorization we may receive for future products, are, and will be, limited to specified indications for use. Our sales and marketing personnel, as well as our direct sales force, are trained to not promote our devices for uses outside of the FDA-authorized indications for use, known as “off-label uses.” We cannot, however, prevent a healthcare professional from using our devices off-label, when in the healthcare professional’s independent professional judgment he or she deems it appropriate. There may be increased risk of injury to patients if healthcare professionals attempt to use our devices off-label, which could harm our reputation in the marketplace among healthcare professionals and patients.

If the FDA determines that our promotional materials or training constitute promotion of an off-label use, it could request that we modify our training or promotional materials or subject us to regulatory or enforcement actions, including the issuance or imposition of an untitled letter, which is used for violators that do not necessitate a warning letter, injunction, seizure, civil fine, or criminal penalties. It is also possible that other federal or state enforcement authorities might take action under other regulatory authority, such as false advertising and consumer protection laws, or false claims laws, if they consider our business activities to constitute promotion of an off-label use, which could result in significant penalties, including, but not limited to, criminal, civil, and administrative penalties, damages, fines, disgorgement, exclusion from participation in government healthcare programs, and the curtailment of our operations.

In addition, healthcare professionals may misuse our products or use improper techniques if they are not adequately trained, potentially leading to injury and an increased risk of product liability. For example, healthcare professionals may misuse our single use, disposable headbands by using them on more than one patient. If our devices are misused or used with improper technique, we may become subject to costly litigation by our customers or their patients. As described above, product liability claims could divert management’s attention from our core business, be expensive to defend, and result in sizeable damage awards against us that may not be covered by insurance, all of which would have a material adverse effect on our business, financial condition, results of operations, and prospects.

Legislative or regulatory reforms in the United States may make it more difficult and costly for us to manufacture, market, or distribute our products, or to obtain marketing authorizations for any future products.

From time to time, legislation is drafted and introduced in Congress that could significantly change the statutory provisions governing the regulation of medical devices. In addition, the FDA may change its policies, adopt additional regulations, or revise existing regulations, or take other actions, which may prevent or delay marketing authorization of any future products under development or impact our ability to modify any products for which we have already obtained marketing authorizations on a timely basis. For example, on February 2, 2026, the FDA’s final rule implementing the FDA’s QMSR became effective. The QMSR, which replaced the FDA’s former Quality System Regulation (“QSR”), sets forth the FDA’s cGMP requirements for medical devices, and among other things, incorporates by reference certain elements of the quality management system requirements of ISO 13485:2016. Although the FDA has stated that the standards contained in ISO 13485 2016 are substantially similar to those set forth in the QSR, and although our quality management system is designed to comply with ISO 13485, the FDA has indicated that ISO:13485 certification alone will not ensure compliance under the QMSR, nor will ISO certification exempt manufacturers from FDA inspection. The QMSR also includes certain compliance obligations, such as those relating to unique device identification, product traceability, and maintenance of complaint and service records, that align more closely with the FDA’s existing medical device requirements than with ISO standards. Accordingly, it remains unclear the extent to which the QMSR may impose additional or different regulatory requirements on us that could increase the costs of compliance or otherwise negatively affect our business.

In addition, FDA regulations and guidance are often revised or reinterpreted by the FDA in ways that may significantly affect our business and our products. Any new statutes, regulations or revisions or reinterpretations of existing regulations may make it more difficult and costly to manufacture, market, or distribute our commercialized products, or may impose additional costs, lengthen marketing authorization review times, or make it more difficult to obtain marketing authorizations for any future products we develop. If we are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are not able to maintain regulatory compliance, we may be subject to enforcement action and we may not achieve or sustain profitability.

We face risks related to obtaining necessary foreign regulatory clearance or approvals.

We intend to enter into international markets in the future. Upon our expansion into foreign markets, we will be subject to foreign regulatory requirements that we have limited experience with and vary widely from country to country and from the United States. The time required to obtain clearances or approvals required by other countries may be longer than that required for FDA clearance or approval, and requirements for such approvals may differ from FDA requirements. We may be unable to obtain regulatory approvals and may also incur significant costs in attempting to obtain foreign regulatory approvals. If we experience delays in receipt of approvals to market our products in new jurisdictions, or if we fail to receive these approvals, we may be unable to market our products in international markets in a timely manner, if at all, which could materially impact our international expansion and adversely affect our

46

business as a whole. If any of these risks were to materialize, they could limit our expected international growth and profitability, which could have a material adverse effect on our business, financial condition, results of operations, and prospects.

Failure to comply with the Foreign Corrupt Practices Act (the “FCPA”), economic and trade sanctions regulations, and similar laws could subject us to penalties and other adverse consequences.

We are subject to the FCPA and other laws in the United States and elsewhere that prohibit improper payments or offers of payments to foreign governments and their officials and political parties for the purpose of obtaining or retaining business. Certain suppliers and manufacturers of our devices and components of our devices arelocated in countries known to experience corruption. Business activities in these countries create the risk of unauthorized payments or offers of payments by one of our employees, contractors, or agents that could be in violation of various laws, including the FCPA and anti-bribery laws in these countries, even though these parties are not always subject to our control. While we have implemented policies and procedures designed to discourage these practices by our employees, consultants, and agents and to identify and address potentially impermissible transactions under such laws and regulations, we cannot assure you that none of our employees, consultants, and agents will take actions in violation of our policies, for which we may be ultimately responsible.

We are also subject to certain economic and trade sanctions programs that are administered by the U.S. Department of the Treasury’s Office of Foreign Assets Control which prohibit or restrict transactions to or from or dealings with specified countries, their governments, and in certain circumstances, their nationals, and with individuals and entities that are specially-designated nationals of those countries, narcotics traffickers and terrorists or terrorist organizations. For example, in December 2021, the U.S. Congress enacted the Uyghur Forced Labor Prevention Act in an effort to prevent what it views as forced labor and human rights abuses in the Xinjiang Uyghur Autonomous Region (the “XUAR”). If it is determined that our third-party suppliers and manufacturers produce or manufacture our components or products wholly or in part from the XUAR, then we could be prohibited from importing such components or products into the United States.

Failure to comply with any of these laws and regulations or changes in this regulatory environment, including changing interpretations and the implementation of new or varying regulatory requirements by the government, may result in significant financial penalties or reputational harm, which could adversely affect our business, financial condition, results of operations, and prospects.

Risks Related to Our Reliance on Third Parties

Various factors outside our direct control may negatively impact our manufacturing of the Ceribell System, which could have a material adverse effect on our business, financial condition, results of operations, and prospects.

We manufacture the Ceribell System at our manufacturing facilities in Sunnyvale, California, using Wearables supplied by third-party manufacturers located in China and Vietnam and components for our recorder procured from various suppliers and shipped to our facility for final assembly. While we believe that we currently have adequate manufacturing capacity and supplies for our products sufficient to meet our demand forecasts, if demand for the Ceribell System increases more rapidly than we anticipate, if we encounter problems with one or more of our manufacturers, including as a result of trade restrictions related to China, or if we secure regulatory approval to commercialize our products in additional geographies or indications, we may need to either expand our manufacturing capabilities, qualify new suppliers, or outsource to other manufacturers.

Our third-party manufacturers may not take the necessary steps to comply with applicable regulations, which could cause delays in the delivery of our medical devices. The methods used in, and the facilities used for, the manufacture of medical devices sold in the United States must comply with the QMSR. See the risk factor titled, “Our products must be manufactured in accordance with applicable laws and regulations, and we could be forced to recall our devices or terminate production if we fail to comply with these regulations.”Manufacturers of medical device products often encounter difficulties in production, including difficulties with production costs and yields, quality control, quality assurance testing, shortages of qualified personnel, as well as compliance with strictly enforced FDA requirements, other federal and state regulatory requirements and foreign regulations, to the extent applicable. If we fail to manufacture our products in compliance with the QMSR, or if our or our third-party suppliers’ manufacturing facilities suffer disruptions, supply chain issues, machine failures, slowdowns, or disrepair, we may not be able to fulfill customer demand and our business would be harmed.

Any contamination of the controlled environment, equipment malfunction, supply issues, natural disasters (including wildfires or earthquakes, to which our manufacturing facility in Sunnyvale, California may be especially susceptible), public health emergencies, personnel issues, including human error, or failure to strictly follow procedures can significantly reduce our yield. A drop in yield can increase our cost to manufacture our products or, in more severe cases, require us to halt the manufacture of our products until the problem is resolved. Identifying and resolving the cause of a drop in yield can require substantial time and resources. In addition, if demand for our products shifts such that our manufacturing facilities are operated below our forecasts for an extended period, we may

47

adjust our manufacturing operations to reduce fixed costs, which could lead to uncertainty and delays in manufacturing times and quality during any transition period.

The manufacturing and distribution of our products are technically challenging. Changes that our suppliers may make, or additional requirements from regulatory agencies, outside of our direct control can have an impact on our processes, on quality and on the successful or timely delivery of our products to our customers. Mistakes and mishandling may occur, which can affect supply and delivery. As a result, our dependence on third-party, including single-source suppliers, subjects us to a number of risks that could impact our ability to manufacture our products and harm our business, financial condition, and results of operations, including:

•

interruption of supply resulting from modifications to, or discontinuation of, a supplier’s operations;

•

delays in product shipments resulting from uncorrected defects, reliability issues, or a supplier’s failure to produce components that consistently meet our quality specifications;

•

delays in analytical results or failure of analytical techniques that we depend on for quality control and release of our products;

•

price fluctuations due to a lack of long-term supply arrangements with our suppliers for key component or other supply chain constraints;

•

inability to obtain adequate supply in a timely manner or on commercially reasonable terms;

•

difficulty identifying and qualifying alternative suppliers for components in a timely manner;

•

inability of suppliers to comply with applicable provisions of the QMSR or other applicable laws or regulations enforced by the FDA and other regulatory authorities;

•

delays in regulatory approvals of any changes to manufacturing, including the use of new suppliers;

•

latent defects that may become apparent after our products have been released and that may result in an adverse event or a recall of such products;

•

inclusion of vendors of raw materials not in compliance with regulatory requirements;

•

natural or other disasters, global pandemics, labor disputes, financial distress, lack of raw material supply, issues with facilities and equipment, international conflict or war, or other forms of disruption to business operations affecting our manufacturing operations and those of our third-party manufacturers and suppliers;

•

production delays related to the evaluation and testing of our products or the use of components from alternative suppliers; and

•

delays in delivery by our suppliers of components, materials or services due to changes in demand from us or their other customers.

The occurrence of any of these issues could significantly harm our ability to manufacture our products and maintain sufficient quality standards, which would have a material adverse effect on our business, financial condition, results of operations, and prospects.

We depend on a number of manufacturers and suppliers in connection with the manufacture of the Ceribell System, which makes us vulnerable to supply shortages and price fluctuations that could have a material adverse effect on our business, financial condition, results of operations, and prospects.

We source and rely upon components and sub-assemblies of the Ceribell System, as well as manufacturing services from approved manufacturers and suppliers, some of which are single-source suppliers.

These components, sub-assemblies and services are critical to us, and there are relatively few alternative sources of supply. Our suppliers generally are not under long-term contracts with us, and may experience delays or issues, stop producing our components or sub-assemblies, increase the prices they charge us, or elect to terminate their relationships with us. In any of these cases, we could face a delay of several months to identify, perform appropriate testing and qualify alternative manufacturers and suppliers with regulatory authorities, as we currently have transition plans for some but not all of our manufacturers and suppliers. In addition, the failure of our third-party manufacturers and suppliers to maintain acceptable quality requirements could result in quality issues, including recalls of our products. If one of our manufacturers or suppliers fails to maintain acceptable quality requirements, we may have to identify and qualify a new manufacturer or supplier. Although we require our third-party manufacturers and suppliers to supply us with materials, components, and services that meet our specifications and comply with applicable provisions of the QMSR and other applicable legal and regulatory requirements in our agreements and contracts, and we perform incoming inspection, testing, or other acceptance activities

48

to ensure the materials and components meet our requirements, there is a risk that they may not supply components that meet our requirements or supply components in a timely manner.

We do not have complete control over all aspects of the manufacturing process of, and are dependent on, our manufacturing partners for compliance with cGMP regulations applicable to certain components of our products. Third-party manufacturers may not be able, or fail, to comply with cGMP regulations. If our third-party manufacturers cannot successfully manufacture our products that conform to our specifications and the strict regulatory requirements of the FDA, they will not be able to secure and/or maintain registration for their manufacturing facilities. In addition, we do not have complete control over the ability of our third-party manufacturers to maintain adequate quality control, quality assurance and qualified personnel. The failure of our manufacturing partners to maintain acceptable quality requirements could result in quality issues, including recalls of our products. If one of our manufacturing partners fails to maintain acceptable quality requirements or perform as agreed, we may have to identify and qualify a new supplier or develop in-house manufacturing capabilities, which could require significant capital investments.

The number of third-party manufacturers and suppliers with the necessary manufacturing and regulatory expertise and facilities to produce our device components is limited and certification of a new manufacturer or supplier may be complex and time consuming. Any delay or interruption would likely lead to a delay or interruption in our manufacturing operations. The inclusion of substitute components must meet our product specifications and could require us to qualify the new manufacturer or supplier with the appropriate regulatory authorities, including the FDA. The added time and cost to arrange for alternative manufacturers or suppliers could harm our business. New manufacturers of any planned product would be required to qualify under applicable regulatory requirements and would need to have sufficient rights under applicable intellectual property laws to the method of manufacturing the planned product. Obtaining the necessary FDA or international approvals or other qualifications under applicable regulatory requirements and ensuring non-infringement of third-party intellectual property or other proprietary rights could result in a significant interruption of supply and could require the new manufacturer to bear significant additional costs that may be passed on to us.

We rely on third parties to conduct and support our preclinical studies and clinical trials. These third parties may not properly and successfully carry out their contractual duties or meet expected deadlines, which could harm our ability to obtain marketing authorization of or commercialize future products we develop.

We utilize and depend upon independent investigators and collaborators, such as third-party researchers, medical institutions, and strategic partners, to conduct and support portions of our preclinical studies and clinical trials under agreements with us, and may in the future rely on CROs. For some clinical research projects, we provide funding and for others, such as those supported by grants, we only provide access to our data or supply the Ceribell System at a discount. The terms of these agreements generally include joint publication rights and sole ownership of background intellectual property, as well as indemnification and insurance terms so that risk of injury or damages claims is appropriately allocated, guidelines for dispute resolution to address conflicts, and grounds for contract termination by each party.

We negotiate budgets and contracts with these third parties and may not be able to do so on favorable terms, which may result in delays to our development timelines and increased costs. We have relied heavily on these third parties for our preclinical studies and expect to continue to do so, and we control only certain aspects of their activities. As a result, we have less direct control over the conduct, timing, and completion of these preclinical studies and clinical trials and the management of data developed through preclinical studies and clinical trials than would be the case if we were relying entirely upon our own staff. Nevertheless, we are responsible for ensuring that each of our studies is conducted in accordance with applicable protocol, legal and regulatory requirements, and scientific standards and our reliance on third parties does not relieve us of our regulatory responsibilities. We and these third parties are required to comply with GCP requirements, which are regulations and guidelines enforced by the FDA and comparable foreign regulatory authorities for medical devices in clinical development. Regulatory authorities enforce these GCP requirements through periodic inspections of trial sponsors, principal investigators and trial sites.

If we or any of these third parties fail to comply with applicable GCP regulations, the clinical data generated in our clinical trials may be deemed unreliable, and the FDA or other bodies may require us to perform additional clinical trials. We cannot assure you that, upon inspection, such regulatory authorities will determine that any of our clinical trials comply with the GCP regulations. In addition, our investigational devices must be produced in accordance with cGMP requirements known as the QSR. Our failure or any failure by these third parties to comply with these regulations or to recruit a sufficient number of patients may require us to repeat clinical trials, which would delay the marketing authorization process. Moreover, our business may be implicated if any of these third parties violates federal, state or foreign fraud and abuse or false claims laws and regulations or healthcare privacy and security laws.

Third parties conducting or supporting portions of our clinical trials are not our employees and, except for remedies available to us under our agreements with such third parties, we cannot control whether or not they devote sufficient time and resources to our investigational products. These third parties may also have relationships with other commercial entities, including our competitors, for

49

whom they may also be conducting clinical trials, or other product development activities, which could affect their performance on our behalf. These third parties may not successfully carry out their contractual duties or obligations or meet expected deadlines. They may need to be replaced or the quality or accuracy of the clinical data they obtain may be compromised due to the failure to adhere to our clinical protocols or regulatory requirements or for other reasons. Accordingly, our clinical trials may be extended, delayed or terminated and we may not be able to complete development of, obtain marketing authorizations for or successfully commercialize our future devices.

Switching or adding third parties to conduct or support portions of our preclinical studies and clinical trials involves substantial cost and requires extensive management time and focus. In addition, there is a natural transition period when a new third party commences work. As a result, delays may occur, which could have an adverse impact on our product development, results of operations, and prospects.

Data Privacy Risk Factors

Actual or perceived failures to comply with applicable data privacy and security laws, regulations, standards and other requirements could adversely affect our business, financial condition, results of operations, and prospects.

The global data protection landscape is rapidly evolving, and we, and the third-party service providers on which we rely, are or may become subject to numerous state, federal, and foreign laws, requirements, and regulations, as well as contractual obligations and research protocols governing the collection, use, disclosure, retention, processing, maintenance, transfer, and security of personal information, such as information that we and our third-party service providers collect in connection with the use and development of the Ceribell System and the Clarity algorithm and in clinical trials or studies, including patient EEG data. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, standards, or perception of their requirements may have on our business. This evolution may create uncertainty in our business; affect us or our service providers’ and contractors’ ability to operate in certain jurisdictions or to collect, store, transfer, use, process, and share personal information; necessitate the acceptance of more onerous obligations in our contracts; result in liability; impose additional costs on us; necessitate changes to our information technologies, systems and practices and those of third parties that process personal information on our behalf; and may require us to change our business model.

In the United States, numerous state and federal laws, regulations, standards, and other legal obligations, including consumer protection laws and regulations, which govern the collection, dissemination, use, access to, confidentiality, security, transfer, disclosure, and processing of personal information, including health-related information, could apply to our operations or the operations of our customers. For example, HIPAA imposes privacy, security, and breach notification obligations on certain healthcare providers, health plans, and healthcare clearinghouses, known as covered entities, as well as their business associates that perform certain services that involve creating, receiving, maintaining, or transmitting individually identifiable health information for or on behalf of such covered entities, and their covered subcontractors. Among other requirements, HIPAA requires business associates to develop and maintain policies with respect to the protection of, use and disclosure of protected health information (“PHI”), including the adoption of administrative, physical, and technical safeguards to protect such information, certain notification requirements in the event of a breach of unsecured PHI, and requirements to report breaches of unsecured PHI to covered entities within 60 days of discovery of the breach by the business associate or its agents. Depending on the facts and circumstances, we could be subject to significant civil, criminal, and administrative fines and penalties and/or additional reporting and oversight obligations if found to be in violation of HIPAA.

Certain states have also adopted comparable privacy and security laws and regulations, which govern the privacy, collection, use, processing, disclosure, and protection of health-related and other personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our customers. For example, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”) requires covered businesses that process the personal information of California residents to, among other things: (i) provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; (ii) receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt out of certain disclosures of their personal information; and (iii) enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. Additional compliance investment and potential business process changes may also be required. Similar laws have been passed in other states and are continuing to be proposed at the state and federal level, reflecting a trend toward more stringent privacy legislation in the United States. For example, Washington State enacted the Washington My Health My Data Act, which broadly defines consumer health data, creates a private right of action to allow individuals to sue for violations of the law, imposes stringent consent requirements, and grants consumers certain rights with respect to their health data, including to request deletion of their information. The enactment of such laws could have potentially conflicting requirements that would make compliance challenging. In the event that we are subject to or affected by HIPAA, the CCPA, or other domestic privacy and data protection laws, any liability from failure to comply with the requirements of these laws could adversely affect our financial condition.

50

We may in the future become subject to rapidly evolving data protection laws, rules and regulations in foreign jurisdictions, many of which have developed privacy and data protection requirements that impose requirements that differ substantially from those that apply within the United States. For example, in Europe, the European Union General Data Protection Regulation (the “EU GDPR”) and the United Kingdom General Data Protection Regulation and Data Protection Act 2018 (the “UK GDPR” and together with the EU GDPR referred to as the “GDPR”) governs the collection, use, disclosure, transfer, and other processing of personal data of individuals within the European Economic Area (the “EEA”) and United Kingdom (the “UK”) and imposes stringent requirements for data processors and controllers of such personal data or in the context of their activities within the EEA or UK. Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to €20 million or 4% of the annual global revenues of the noncompliant undertaking, whichever is greater. In addition to fines, a breach of the GDPR may result in regulatory investigations, reputational damage, orders to cease/ change our data processing activities, enforcement notices, assessment notices (for a compulsory audit), and/or civil claims (including class actions). The processing of “special category personal data” (such as personal data related to health and genetic information), which could become relevant to our operations in the context of our conduct of clinical trials, may also impose heightened compliance burdens under European data protection laws and is of interest to relevant regulators. Among other requirements, the GDPR regulates transfers of personal data subject to the GDPR to third countries that have not been found to provide adequate protection to such personal data, including the United States, and the efficacy and longevity of current transfer mechanisms between the EEA, and the United States remains uncertain. As we continue to expand into other foreign countries and jurisdictions, we may be subject to additional laws and regulations that may affect how we conduct business. As we expand into foreign countries and jurisdictions, we will become subject to additional laws and regulations that will affect how we conduct business, and we expect the existing legal complexity and uncertainty regarding international personal data transfers to continue. As the regulatory guidance and enforcement landscape in relation to data transfers continue to develop, we could suffer additional costs, complaints and regulatory investigations or fines, and/or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we operate our business, the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results.

The Federal Trade Commission (the “FTC”) also has authority to initiate enforcement actions against entities that mislead customers about HIPAA compliance, make deceptive statements about privacy and data sharing in privacy policies, fail to limit third-party use of health information, fail to implement policies to protect health information, or engage in other unfair practices that harm customers or that may violate Section 5 of the FTC Act. Even when HIPAA does not apply, failing to take appropriate steps to keep consumers’ personal information secure may constitute unfair acts or practices in or affecting commerce under the FTC Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business and the cost of available tools to improve security and reduce vulnerabilities. Additionally, federal and state consumer protection laws are increasingly being applied by FTC and states’ attorneys general to regulate the collection, use, storage, and disclosure of health-related and other personal information, through websites or otherwise, and to regulate the presentation of website content.

Although we work to comply with applicable laws, regulations and standards, our contractual obligations, research protocols, and other legal obligations, these requirements are evolving and may be modified, interpreted and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another or other legal obligations with which we must comply. Any actual or perceived failure by us or our employees, representatives, contractors, consultants, or other third parties to comply with such requirements or adequately address data privacy and security concerns, even if unfounded, could result in, among other adverse impacts, significant regulatory penalties and fines, our compliance with contracts entered into with our partners, collaborators, and other third-party payors, damage to our reputation, loss of customer confidence in our security measures, withdrawal or withholding of customer consent for using patient data, government investigations, and enforcement actions and litigation and claims by third parties, any of which could have a material adverse effect on our reputation, business, financial condition, results of operations, and prospects.

We may face risks associated with our use and development of AI and machine learning models.

We use and develop AI, machine learning and automated decision-making technologies, including proprietary AI and machine learning algorithms and models (collectively, “AI Technologies”), throughout our business, and are making significant investments in this area. For example, we use AI Technologies to power our Clarity algorithm and drive continuous improvements in the performance of the Ceribell System. New products that we develop, including expansion into new indications, are also likely to incorporate AI Technologies.

We expect that increased investment will be required in the future to continuously improve our use and development of AI Technologies. As with many technological innovations, there are significant risks involved in developing, maintaining, and deploying these technologies and there can be no assurance that the usage of or our investments in such technologies will always enhance our products or be beneficial to our business, including our efficiency or results of operations.

51

In particular, if the models underlying our AI Technologies are: incorrectly designed or implemented; trained or reliant on incomplete, inadequate, inaccurate, biased, or otherwise poor quality data, or on data to which we do not have sufficient rights or in relation to which we and/or the providers of such data have not implemented sufficient legal compliance measures; used without sufficient oversight and governance to ensure their responsible use; misused or used outside of scope of applicable regulatory authorizations; and/or adversely impacted by unforeseen defects, technical challenges, cybersecurity threats, or material performance issues, the performance of our products and business, as well as our reputation and the reputations of our customers, could suffer or we could incur liability resulting from the violation of laws or contracts to which we are a party, regulatory enforcement actions, or civil claims.

For the Clarity algorithm, as well as for any potential future AI Technology driven products, performance of the algorithm is generally assessed by comparing the output of the algorithm against a clinically derived reference standard (“ground truth”) for a specified dataset. This applies to internal evaluation of an algorithm’s performance, supporting external presentations and publications, and testing to support regulatory submissions. The Clarity algorithm output will not always agree with the opinion of a qualified neurologist, and in some cases multiple qualified neurologists will not agree with each other. While we constantly work to improve our product and algorithm, the AI Technologies we work with are novel and complex, and we cannot assure you that our AI Technologies will be able to perform as intended under all circumstances.

For example, an earlier version of the Clarity algorithm was found to be unable to detect seizure or status epilepticus in certain ICU patients who had cardiac arrest. Further, the data that we use to train our AI Technologies includes data collected from EEGs performed on patients by our customers, and we are dependent upon our ability to obtain the right to use such patient data to continue to develop our products, including within appropriate time frames and on commercially reasonable terms. If we are unable to obtain sufficient rights to use such data under applicable regulatory frameworks or our agreements with our customers, or our customers were to withdraw or withhold their data from us, our ability to continue to develop our products and services to our customers, and our revenue prospects, could be materially adversely impacted.

The regulatory framework for AI Technologies is rapidly evolving as many federal, state and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations. The FDA has issued guidance documents relating to the incorporation of AI Technologies into medical devices. In addition, existing laws and regulations may be interpreted in ways that would affect the operation of our AI Technologies or could be rescinded or amended as new administrations take differing approaches to evolving AI Technologies. As a result, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, standards, or market perception of their requirements may have on our business and may not always be able to anticipate how to respond to these laws or regulations.

In the United States, the Trump administration has rescinded an executive order relating to AI Technologies that was previously implemented by the Biden administration. The Trump administration may continue to rescind other existing federal orders and/or administrative policies relating to AI Technologies, or may implement new executive orders and/or other rule-making relating to AI Technologies in the future. Any such changes at the federal level could require us to expend significant resources to modify our products, services, or operations to ensure compliance or remain competitive. U.S. legislation related to AI Technologies has also been introduced at the federal level and is advancing at the state level. Such additional regulations may impact our ability to develop, use, and commercialize AI Technologies in the future.

It is possible that further new laws and regulations will be adopted in the United States and in other non-U.S. jurisdictions, or that existing laws and regulations, including competition and antitrust laws, may be interpreted in ways that would limit our ability to use AI Technologies for our business, or require us to change the way we use AI Technologies in a manner that negatively affects the performance of the Ceribell System and business and the way in which we use AI Technologies. We may need to expend resources to adjust the Ceribell System in certain jurisdictions if the laws, regulations, or decisions are not consistent across jurisdictions. Further, the cost to comply with such laws, regulations or decisions and/or guidance interpreting existing laws, could be significant and would increase our operating expenses (such as by imposing additional reporting obligations regarding our use of AI Technologies). Such an increase in operating expenses, as well as any actual or perceived failure to comply with such laws and regulations, could materially and adversely affect our business, financial condition, results of operations, and prospects.

Our business and operations may suffer in the event of information technology system failures, cyber attacks, or deficiencies in our cybersecurity.

We collect and maintain information in digital form that is necessary to conduct our business, and we are increasingly dependent on information technology systems and infrastructure to operate our business. In the ordinary course of our business, we collect, store, transmit, and process large amounts of confidential information, including intellectual property, proprietary business information, preclinical and clinical trial data, and personal information of clinical trial participants, patients of our customers, and our employees and contractors (collectively, “Confidential Information”). We may also share Confidential Information with our partners or other third

52

parties in conjunction with our business. It is critical that we do so in a secure manner to maintain the confidentiality and integrity of such Confidential Information.

Our information technology systems and those of our customers, third-party service providers, manufacturers, and other contractors or consultants are vulnerable to attack, damage and interruption from computer viruses and malware (e.g. ransomware), misconfigurations, “bugs” or other vulnerabilities, malicious code, natural disasters, terrorism, war, telecommunication and electrical failures, hacking, cyber attacks, phishing attacks and other social engineering schemes, employee theft or misuse, human error, unauthorized access, fraud, denial or degradation of service attacks, and sophisticated nation-state and nation-state-supported actors. We have also outsourced elements of our information technology infrastructure, and as a result a number of third-party vendors may or could have access to our confidential information. The risk of a security breach or disruption, particularly through cyber attacks or cyber intrusion, including by computer hackers, foreign governments and cyber terrorists, has generally increased as the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased and evolved. If we or our third-party vendors were to experience a significant cybersecurity breach of our or their information systems or data, the costs associated with the investigation, remediation and potential notification of the breach to counter-parties and data subjects could be material. In addition, our remediation efforts may not be successful. If we do not allocate and effectively manage the resources necessary to build and sustain the proper technology and cybersecurity infrastructure, we could suffer significant business disruption, including transaction errors, supply chain or manufacturing interruptions, processing inefficiencies, data loss or the loss of or damage to intellectual property or other proprietary information. There can also be no assurance that our and our customers’, third-party service providers’, contractors’, and consultants’ cybersecurity risk management programs and processes, including policies, controls, or procedures, will be fully implemented, complied with or effective in protecting our systems, networks, and Confidential Information.

Attacks upon information technology systems are increasing in their frequency, levels of persistence, sophistication, and intensity, and are being conducted by sophisticated and organized groups and individuals with a wide range of motives and expertise. Furthermore, because the techniques used to obtain unauthorized access to, or to sabotage, information technology systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period. Even if identified, we may be unable to adequately investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques – including artificial intelligence – that are designed to circumvent controls, to avoid detection, and to remove or obfuscate forensic evidence.

We and certain of our customers and service providers may be subject to cyber attacks and security incidents from time to time. While we do not believe that we have experienced any significant information technology system failure, accident, or security breach to date, if such an event were to occur and cause interruptions in our operations, it could result in a material disruption of our development programs and our business operations, whether due to a loss, corruption or unauthorized disclosure or misappropriation of our trade secrets, personal information, patient data collected from our customers or other Confidential Information or other similar disruptions. It could also expose us to risks, including an inability to provide our services and fulfill contractual demands, and could cause management distraction and the obligation to devote significant financial and other resources to mitigate such problems, which would increase our future information security costs, including through organizational changes, deploying additional personnel, reinforcing administrative, physical and technical safeguards, further training of employees, changing third-party vendor control practices, and engaging third-party subject matter experts and consultants and reduce the demand for our technology and services. If a security breach or other incident were to result in the unauthorized access to or unauthorized use, disclosure, release, or other processing of personal information, including the patient data of our customers, it may be necessary to notify individuals, governmental authorities, supervisory bodies, the media, and other parties pursuant to privacy and security laws and the costs associated with the investigation, remediation, and potential notification of the breach to third-parties and data subjects could be material.