Item 1A. Risk Factors.

Our business involves significant risks, some of which are described below. You should carefully consider these risks, as well as the other information in this Annual Report on Form 10-K, including our audited financial statements and the related notes and “Management’s Discussion and Analysis of Financial Condition and Results of Operations.” The occurrence of any of the events or developments described below could have a material adverse effect on our business, results of operations, financial condition, prospects and stock price. Additional risks and uncertainties not presently known to us or that we currently deem immaterial may also impair our business operations. You should not interpret our disclosure of any of the following risks to imply that such risks have not already materialized.

Risks related to operational, regulatory, commercial and manufacturing matters

We currently rely on our RNS System, which can only be marketed in the United States for use in adults with drug-resistant focal epilepsy, as our primary source of revenue. If we fail to successfully market and sell our RNS System cost effectively and maintain and expand our market share, our sales, business, financial condition and results of operations will be negatively affected.

Our business currently depends primarily on our ability to successfully market our RNS System, which includes increasing the number of patients treated at CECs, increasing adoption of our RNS System across CECs and in the community setting, as well as driving utilization by clinicians within CECs and in the community setting. Currently, our RNS System can only be marketed for use in adults with drug-resistant focal epilepsy in the United States. Historically our RNS System was primarily recommended and implanted at Level 4 CECs, which provide advanced diagnosis and management of epilepsy. We are expanding our commercial efforts to target and be able to qualify the additional 1,800 epileptologists outside of Level 4 CECs and the entire population of functional neurosurgeons as a result of the FDA approval of a PMA-S in 2023, which updated the qualification criteria for centers and clinicians that may prescribe and implant the RNS System. Therefore, we have been dependent on widespread market adoption of our RNS System within a limited number of accounts. We are aiming to increase awareness about our RNS System, expand the population of patients we can treat with our RNS System, and increase utilization and adoption across physicians that prescribe and implant our RNS System both within Level 4 CECs and outside of Level 4 CECs, in the community setting, but there can be no assurance that we will succeed.

The commercial success of our RNS System will continue to depend on a number of factors, including the following:

•the degree to which drug-resistant epilepsy remains a chronic and debilitating condition;

•the actual and perceived effectiveness, safety and reliability, and clinical benefit, of our RNS System, especially relative to alternative neuromodulation devices such as Vagus Nerve Stimulation, or VNS, or Deep Brain Stimulation, or DBS;

•the prevalence and severity of any adverse patient events involving our RNS System;

•our ability to provide earlier awareness of and education about our RNS System to patients and clinicians;

•the degree to which clinicians, patients and hospital facilities, including at CECs and outside of CECs, in the community setting, adopt our RNS System;

•the availability, relative cost and perceived advantages and disadvantages of alternative technologies or treatment methods for epilepsy;

•the results of additional clinical and other studies relating to the health, safety, economic or other benefits of our RNS System;

•whether key thought leaders in the medical community accept that our clinical efficacy and safety results are sufficiently meaningful to influence their decision to adopt our RNS System over other neuromodulation therapies;

•the extent to which we are successful in educating clinicians, patients, and hospital facilities about the benefits of our RNS System, including as a result of the extended battery life of the neurostimulator;

•our reputation among clinicians, patients and hospital facilities;

•our ability to predict product performance;

•the strength of our marketing and distribution infrastructure, including our ability to increase adoption and utilization of our RNS System, our ability to expand referral pathways to CECs and beyond, and our ability to grow the market outside of Level 4 CECs, in the community;

•our ability to obtain, maintain, protect, enforce and defend our intellectual property rights, including in and to our RNS System;

•our ability to maintain compliance with all legal and regulatory requirements, including those applicable to our RNS System;

•our ability to continue to maintain a commercially viable manufacturing process at our manufacturing facility that is compliant with current Good Manufacturing Practices and QMSR;

•our ability to maintain our contractual relationships with our vendors and component suppliers, including single-source vendors and suppliers, through which we obtain critical components for our RNS System;

•the continued coverage of and adequate payment for the implantation procedure and for clinicians to provide ongoing care for patients implanted with our RNS System by third-party payors, including both private and government payors; and

•our ability to continue to attract and retain key talent.

If we fail to successfully market and sell our RNS System cost-effectively and maintain and expand our market share, our sales, business, financial condition and results of operations will be negatively affected.

Our commercial success will continue to depend on attaining significant market acceptance of our products and increasing the number of patients treated. If we are unable to successfully achieve substantial market acceptance and increase adoption of our RNS System both within Level 4 CECs and in the community, our sales, business, financial condition and results of operations would be harmed.

Our commercial success will depend in large part on the further acceptance by clinicians, patients and hospital facilities of our RNS System as safe, useful, and cost-effective, and increasing the number of patients treated at Level 4 CECs and in the community setting. We cannot predict how quickly, if at all, additional clinicians, patients, and hospital facilities will adopt our RNS System over continued noninterventional therapies or competing neuromodulation devices or surgical treatment options. For example, clinicians may be reluctant to use our RNS System due to familiarity with neuromodulation devices that are more established. Alternatively, in the community setting, neuromodulation may not be a common practice, if it is done at all. Clinicians, patients, and hospital facilities may continue to prefer noninvasive therapeutic options, resective or ablative surgery, or alternative neuromodulation therapies such as VNS and DBS. Moreover, we cannot predict how quickly, if at all, those currently living with epilepsy but who are not being treated will seek treatment. Our ability to grow sales of our RNS System and increase market acceptance will depend on successfully educating clinicians, patients, and hospital facilities of the relative benefits of our RNS System.

Additionally, patients rely on their healthcare providers, including epileptologists and neurosurgeons, to recommend a course of treatment. If we are unable to successfully achieve substantial market acceptance and adoption of our RNS System by additional clinicians, patients, and hospital facilities, or to expand the clinicians’ perspective as to the types of patients that can benefit from our RNS System, patients may be reluctant to use our products over alternative neuromodulation therapies. If we are unable to successfully increase patient interest in our RNS System, our business, financial condition and results of operations would be harmed.

Our commercial success will depend on a continued flow of patient referrals to CECs from treating primary care physicians, neurologists, and other healthcare providers and from caregiver support of such referrals. If we are unable to successfully expand our referral pathways to achieve an increased patient referral pipeline into CECs or develop opportunities outside of Level 4 CECs, in the community setting, our sales, business, financial condition and results of operations would be harmed.

Our commercial success will depend in large part on continued referrals of appropriate patients from treating primary care physicians, neurologists, and other healthcare providers to epileptologists, neurosurgeons, and other clinicians, primarily at Level 4 CECs. We cannot predict how quickly, if at all, we can grow utilization and adoption at the Level 4 CECs and in the community setting to build a pipeline through our sales and marketing efforts and whether primary care physicians, neurologists, and other healthcare providers, as well as whether caregivers will support use of our RNS System in the community setting or patient referrals to epileptologists and neurosurgeons at CECs over other therapy options.

Primary care physicians, neurologists, and other healthcare providers may continue to prefer traditional treatments, such as additional attempts to treat with new therapeutic drugs that become available from time to time, including for fear of losing management of the patient’s care. If we are unable to educate clinicians to follow national guidelines, which recommend that patients whose seizures have not been brought under control after three months of care by a primary care physician or after 12 months of seeing a general neurologist be referred to a CEC, or that patients that are considered drug resistant because they failed to achieve sustained seizure freedom after trying two antiseizure medications be referred to a tertiary epilepsy center to evaluate potential interventions, or if we are unable to convince them as to the merits of our RNS System inside a CEC or in the community setting, we may be unable to successfully build our patient pipeline. This could harm our business, financial condition and results of operations.

Various factors outside our direct control may negatively impact our manufacturing of our RNS System, which could harm our business, financial condition, and results of operations.

We manufacture our RNS System at our manufacturing facility in Mountain View, California. This facility supports our production operations, including manufacturing, quality control, and raw material and finished goods storage. We believe that we currently have adequate manufacturing capacity and supplies for our products sufficient to meet our demand forecasts. If demand for our RNS System increases more rapidly than we anticipate, if we encounter problems with one or more of our suppliers, or if we secure regulatory approval to commercialize our products in additional geographies or indications, we may need to either expand our manufacturing capabilities, qualify new suppliers, or outsource to other manufacturers.

Manufacturers of medical device products often encounter difficulties in production, including difficulties with production costs and yields, quality control, quality assurance testing, shortages of qualified personnel, as well as compliance with strictly enforced FDA requirements, other federal and state regulatory requirements, and foreign regulations, to the extent applicable. Our manufacturing and distribution operations are subject to the regulatory requirements of the FDA’s Quality Management System Regulation, or QMSR, for medical devices sold in the United States. The QMSR superseded the QSR on February 2, 2026, amending the current good manufacturing practice requirements of the Quality System Regulation under 21 CFR 820 to align more closely with the international consensus standard for Quality Management Systems for medical devices used by many other regulatory authorities around the world. We believe that we are sufficiently compliant with the QMSR. However, if we fail to manufacture our products in compliance with the QMSR, or if our manufacturing facility suffers disruptions, supply chain issues, machine failures, slowdowns or disrepair, we may not be able to fulfill customer demand and our business would be harmed. Further, we typically do not maintain more than several months of inventory on hand and we manufacture our products using near-term demand forecasts. As a result, deviations from our forecasts could cause us to fail to meet demand for our products.

Since we produce our products in one manufacturing facility, any contamination of the controlled environment, equipment malfunction, supply issues, personnel issues, including human error, or failure to strictly follow procedures can significantly reduce our yield. A drop in yield can increase our cost to manufacture our products or, in more severe cases, require us to halt the manufacture of our products until the problem is resolved. Identifying

and resolving the cause of a drop in yield can require substantial time and resources. In addition, if demand for our products shifts such that our manufacturing facility is operated below our forecasts for an extended period, we may adjust our manufacturing operations to reduce fixed costs, which could lead to uncertainty and delays in manufacturing times and quality during any transition period.

The manufacturing, sterilization and distribution of our products are technically challenging. Changes that our suppliers may make, or additional requirements from regulatory agencies, outside of our direct control can have an impact on our processes, on quality and on the successful or timely delivery of our products to our customers. Mistakes and mishandling may occur, which can affect supply and delivery. As a result, our dependence on third-party, including single source, suppliers, subjects us to a number of risks that could impact our ability to manufacture our products and harm our business, financial condition, and results of operations, including:

•interruption of supply resulting from modifications to, or discontinuation of, a supplier’s operations;

•delays in product shipments resulting from uncorrected defects, reliability issues or a supplier’s failure to produce components that consistently meet our quality specifications;

•delays in analytical results or failure of analytical techniques that we depend on for quality control and release of our products;

•price fluctuations due to a lack of long-term supply arrangements with our suppliers for key components;

•inability to obtain adequate supply in a timely manner or on commercially reasonable terms;

•difficulty identifying and qualifying alternative suppliers for components in a timely manner;

•inability of suppliers to comply with applicable provisions of the QMSR or other applicable laws or regulations enforced by the FDA and other Federal and state regulatory authorities;

•delays in regulatory approvals of any changes to manufacturing, including the use of new suppliers;

•latent defects that may become apparent after our products have been released and that may result in an adverse event or a recall of such products;

•inclusion of vendors of raw materials not in compliance with regulatory requirements;

•natural or other disasters, global pandemics, labor disputes, financial distress, lack of raw material supply, issues with facilities and equipment, international conflict or war, or other forms of disruption to business operations affecting our manufacturer or its suppliers;

•production delays related to the evaluation and testing of our products or the use of components from alternative suppliers;

•failure to complete sterilization on time or in compliance with the required regulatory standards; and

•delays in delivery by our suppliers of components, materials, or services due to changes in demand from us or their other customers.

The occurrence of any of these issues could significantly harm our ability to manufacture our products and maintain sufficient quality standards, which would negatively impact our sales, business, financial condition, and results of operations.

We depend on a limited number of single-source suppliers and vendors in connection with the manufacture of our RNS System, which makes us vulnerable to supply shortages and price fluctuations that could harm our business, financial condition, and results of operations.

We source and rely upon materials, components, and sub-assemblies of our RNS System, as well as manufacturing services from approved suppliers, most of which are single-source suppliers. For example, Micro Systems Technologies Management AG and Integer Holdings Corporation (formally known as Greatbatch Ltd) are

single-source suppliers of several key components of our products, including printed circuit assemblies and batteries. In addition, certain of our suppliers are not under long-term contracts with us.

These components, materials, and services, which also include silicone adhesive, integrated circuits and other components, are critical, and there are relatively few alternative sources of supply. We believe our single-source suppliers are capable of continuing to meet our specifications and maintaining quality, but any significant problem experienced by one of our single-source suppliers may result in a delay or interruption in the supply of components, materials, or services to us. Our suppliers may experience manufacturing delays or issues, stop producing our components, materials, or services, increase the prices they charge us, or elect to terminate their relationships with us. In any of these cases, we could face a delay of several months to identify, perform appropriate testing, and qualify alternative suppliers and service providers with regulatory authorities, as we do not currently have supplier transition plans. In addition, the failure of our third-party suppliers and service providers to maintain acceptable quality requirements could result in the recall of our products. If one of our suppliers fails to maintain acceptable quality requirements, we may have to identify and qualify a new supplier. Although we require our third-party suppliers to supply us with materials, components and services that meet our specifications and comply with applicable provisions of the FDA’s QMSR and other applicable legal and regulatory requirements in our agreements and contracts, and we perform incoming inspection, testing or other acceptance activities to ensure the materials and components meet our requirements, there is a risk that our suppliers will not always act consistently with our best interests, and may not always supply components that meet our requirements or supply components in a timely manner.

The number of third-party suppliers with the necessary manufacturing and regulatory expertise and facilities is limited and certification of a new supplier may be complex and time consuming. Any delay or interruption would likely lead to a delay or interruption in our manufacturing operations. The inclusion of substitute components must meet our product specifications and could require us to qualify the new supplier with the appropriate regulatory authorities, including the FDA. The added time and cost to arrange for alternative suppliers could harm our business. New manufacturers of any planned product would be required to qualify under applicable regulatory requirements and would need to have sufficient rights under applicable intellectual property laws to the method of manufacturing the planned product. Obtaining the necessary FDA or international approvals or other qualifications under applicable regulatory requirements and ensuring non-infringement of third-party intellectual property or other proprietary rights could result in a significant interruption of supply and could require the new manufacturer to bear significant additional costs that may be passed on to us.

Our results of operations may be harmed if we are unable to accurately forecast customer demand for our products.

We do not maintain large amounts of excess inventory at any given time. To ensure adequate supply, we must forecast inventory needs and manufacture our products based on our estimates of future demand. Our ability to accurately forecast demand for our products, could be negatively affected by many factors, including our failure to accurately manage our expansion strategy, product introductions by competitors, our inability to forecast the lifecycle of our products, an increase or decrease in customer demand for our products or for competitor products, our failure to accurately forecast customer adoption of new products, unanticipated changes in general market conditions or regulatory matters and weakening of economic conditions or consumer confidence in future economic conditions. Inventory levels in excess of customer demand may result in inventory write-downs or write-offs, which would cause our gross margin to be adversely affected and could impair the strength of our brand. Conversely, if we underestimate customer demand for our products, our manufacturing team may not be able to deliver products to meet our requirements, and this could result in damage to our reputation and customer relationships. In addition, if we experience a significant increase in demand, additional supplies of components, materials, or services, or

additional manufacturing capacity may not be available when required on terms that are acceptable to us, or at all, which may negatively affect our business, financial condition, and results of operations.

If we fail to optimize our sales and marketing capabilities and develop widespread brand awareness cost-effectively, our growth will be impeded and our business may suffer.

We are actively expanding our presence in the United States through additional sales, education, and direct to customer marketing efforts to drive awareness of our RNS System amongst patients, clinicians and hospital facilities, to increase adoption of our RNS System at Level 4 CECs and in the community setting and to increase utilization and adoption of our RNS System within new and existing accounts. We also plan to explore regulatory and reimbursement approval pathways to expand our presence in international territories.

We take a measured approach to optimize our sales infrastructure to grow our customer base and our business. Identifying and recruiting qualified personnel and training them on the use of our RNS System, on applicable federal and state laws and regulations and on our internal policies and procedures, requires significant time, expense and attention, particularly given our strategy of having each Therapy Consultant, or sales representative, cover many accounts. It can take significant time before our Therapy Consultants are fully trained and productive and before they have established relationships with their target accounts. Our business may be harmed if our efforts to optimize do not generate a corresponding increase in revenue or result in a decrease in our operating margin. In particular, if we are unable to hire, develop and retain talented sales personnel or if new sales personnel are unable to achieve desired productivity levels in a reasonable period of time, we may not be able to realize the expected benefits of this investment or increase our revenue. Additionally, if we do not hire the correct type of or appropriate number of sales personnel as we expand into the community setting, our efforts to grow our market and business outside of the Level 4 CECs may be harmed.

We dedicate significant financial and other resources to our customer outreach and training programs, which may require us to incur significant upfront costs. For example, we may need to conduct additional physician trainings across hospital facilities, both at CECs and as we expand into the community setting. Our sales force may also need to develop additional efficiencies and approaches to address potential growth as we expand referral pathways, expand into additional existing Level 4 CECs as well as new CECs, grow our presence in the community setting, offer new products, increase the number of epileptologists recommending, and neurosurgeons implanting, our RNS System, and increase the numbers and types of patients being prescribed and implanted with the RNS System by current clinicians. Our business would be harmed if our programs and associated expenditures do not generate a corresponding increase in revenue.

In addition, we believe that developing and maintaining awareness of our brand in a cost-effective manner is critical to achieving broad acceptance of our products and attracting new customers. Brand promotion activities may not generate customer awareness or increase revenue and, even if they do, any increase in revenue may not offset the costs and expenses we incur in building our brand. If we fail to successfully promote, maintain and protect our brand, we may fail to realize a sufficient return on our brand-building efforts, or to achieve the widespread brand awareness that is critical for broad adoption of our RNS System.

We may be unable to compete successfully with other treatment options for drug-resistant focal epilepsy, which could harm our sales, business, financial condition and results of operations.

Our industry is competitive and has been evolving rapidly with not only existing treatment options, but also the introduction of new products and technologies as well as the market activities of industry participants. Our RNS System is indicated for adult patients with drug-resistant focal epilepsy in the United States, and we have historically primarily marketed our device to clinicians within Level 4 CECs that treat these patients. As a result of the approval of a PMA-S, we are now able to expand our commercial efforts to the additional epileptologists and functional neurosurgeons practicing outside of Level 4 CECs, in the community setting. In our target patient population, there are two primary treatment options (i) an ablative or resective surgery, or (ii) implantation of a neuromodulation device. Patients may also choose not to actively seek additional treatment for epilepsy or may choose to try new therapeutic drugs that become available from time to time. We estimate that approximately 80% of drug-resistant focal epilepsy patients are either not ideal candidates for ablative or resective surgery or are unwilling to undergo a

destructive surgical procedure, and we compete primarily with two manufacturers of neuromodulation devices for the treatment of these patients. Our primary competitors are LivaNova plc, which manufactures the VNS System, and Medtronic plc, which manufactures the DBS System. Third-party payors may encourage the use of competitors’ products or other neuromodulation therapies due to lower costs of competing products or alternatives. Additionally, treating physicians, including epileptologists and neurosurgeons may promote the use of other competitors’ products or alternative therapies. Further, as existing competitors and other companies develop new or improved products, we cannot predict what the standard of care will be in the future.

Our primary competitors are large, well-capitalized companies with significant market share and resources. They have more established sales and marketing programs than we do and have greater name recognition. These competitors also have long operating histories and may have more established relationships with potential customers. In addition to competing for market share, competitors may develop or acquire patents or other rights that may limit our ability to compete.

The medical device industry is intensely competitive, subject to rapid change and significantly affected by new product introductions and other market activities of industry participants. There can be no assurance that other companies or institutions will not succeed in developing or marketing devices and products that are more effective or safer than our RNS System or that would render our RNS System obsolete or noncompetitive.

We believe that the clinical advantages of our RNS System and our focus on neuromodulation will be important factors in our future success. Our continued success depends on, among other things, our ability to:

•continue to demonstrate safety and efficacy in ongoing clinical trials and in ongoing commercial use;

•expand our referral pathways;

•expand the number of CECs implanting our RNS System and increase utilization across existing clinicians using the RNS System and adoption across new clinicians within these CECs;

•increase the utilization and adoption of our RNS System outside of Level 4 CECs, in the community setting;

•drive awareness to increase the number of drug-resistant epilepsy patients referred to CECs and treated outside of CECs, in the community setting;

•maintain adequate reimbursement for implant procedures and for clinicians to provide ongoing care of patients treated with our RNS System;

•attract and retain skilled research, development, sales, marketing and clinical personnel;

•continue to innovate in order to improve therapy effectiveness and enhance the patient and provider experience;

•adequately predict product performance;

•obtain and maintain regulatory clearances and approvals, including for expanded indications;

•cost-effectively manufacture, market and sell our RNS System;

•obtain, maintain, protect, enforce and defend our intellectual property rights and operate our business without infringing, misappropriating or otherwise violating the intellectual property rights of others;

•acquire products or technologies complementary to or necessary for our business; and

•source materials, components, and sub-assemblies from suppliers on a cost-effective and timely basis.

Adoption of our RNS System depends on positive clinical data as well as clinician acceptance of the data and our products, and negative clinical data or perceptions among these clinicians would harm our sales, business, financial condition, and results of operations.

The rate of adoption and sales of our products are heavily influenced by clinical data. Although we have positive clinical data across four multi-center FDA-approved prospective clinical studies going out as far as nine years, there can be no assurance that clinical data will continue to be positive for our ongoing studies. For example, the one-year results from our NAUTILUS study to evaluate neuromodulation therapy for idiopathic generalized epilepsy did not reach statistical significance for the primary effectiveness endpoint in the overall study population, but did reach statistical significance for prespecified secondary endpoints including median seizure reduction. Additionally, there can be no assurance that future clinical studies, including those to continue demonstrating the efficacy of our products in currently approved patient populations and those to support label retention and expansion for our products will demonstrate safety and effectiveness. Unfavorable or inconsistent clinical data from ongoing or future clinical studies conducted by us, our competitors, or third parties, the negative interpretation of our clinical data internally and externally, including by customers, competitors, patients, and regulators, or findings of new or more frequent adverse events, could harm our business, financial condition, and results of operations.

The rate of adoption and sales of our products are also influenced by clinicianperceptions. Negative perceptions of our products by clinicians, including due to negative clinical data, could result in decreased adoption or use of our products, which would harm our business, financial condition, and results of operations. Additionally, if key opinion leaders who support our products cease to recommend our products, our business, financial condition and results of operations will be harmed. Further, if we cannot maintain strong working relationships with clinicians and continue to receive their advice and input, the marketing of our products could suffer, which could harm our business, financial condition and results of operations. Certain restrictions on access to clinicians as well as hospital staffing shortages have impacted, and will likely continue to impact, our ability to maintain such relationships. Finally, although we have demonstrated the safety, effectiveness and clinical advantages of our products in pivotal clinical studies, neuromodulation is still a relatively new approach to treating drug-resistant focal epilepsy. The results of clinical studies of the products conducted to date and from commercial use do not necessarily predict future results. Any negative long-term results or adverse events from use of our products that arise in the future could harm our business, financial condition, and results of operations.

Our future success also depends upon patients having an understanding of how to properly use our RNS System and an experience with our products that meets their expectations in order to increase clinician demand for our products as a result of positive feedback and word-of-mouth. Patients may be dissatisfied if their expectations of the procedure and results are not met or if they are not adequately trained on use of our RNS System. Patients may be dissatisfied if they experience adverse events or insufficient reduction in frequency of seizures. If the results of our products do not meet the expectations of the patients, or the patient experiences adverse events, it could discourage the patient from continuing to use our device or referring our products to others. Dissatisfied patients may express negative opinions through social media, advocacy, or other publicity. Any failure to meet patient expectations and any resulting negative publicity could harm our reputation and future sales.

If adequate reimbursement becomes unavailable for the procedures to implant our RNS System and for clinicians to provide ongoing care for patients treated with our RNS System, it could diminish our sales or affect our ability to sell our RNS System profitably.

The implant procedure for our RNS System and the ongoing patient care provided by clinicians, including monitoring and programming, are reimbursed under well-established physician and hospital codes. Our ability to increase sales of our RNS System depends, in significant part, on the availability of adequate financial coverage and reimbursement from third-party payors, including governmental payors (such as the Medicare and Medicaid programs in the United States), managed care organizations, and private health insurers. Third-party payors decide which treatments they will cover and establish reimbursement rates for those treatments. We do not bill any third-party payors for our RNS System. Instead, we invoice healthcare providers for our RNS System and the cost is bundled into the reimbursement received by healthcare providers for the procedures in which our RNS System is used.

We expect our RNS System will continue to be purchased by hospital facilities who will then seek reimbursement from third-party payors for brain-responsive neuromodulation for drug resistant focal epilepsy. While third-party payors currently cover and provide reimbursement for both implant procedures of our RNS System as well as for clinicians providing ongoing patient care, we can give no assurance that these third-party payors will continue to provide coverage and adequate reimbursement, or that current reimbursement levels for diagnostic, implant or replacement procedures as well as clinician-provided ongoing patient care will continue.

Furthermore, the overall amount of reimbursement available for brain-responsive neuromodulation for drug resistant focal epilepsy could decrease in the future. Changes in reimbursement may not necessarily impact our sales. Additionally, we cannot be sure that the reimbursement amounts available for brain-responsive neuromodulation for drug resistant focal epilepsy will not reduce or otherwise negatively impact the demand for our marketed RNS System. Failure by users of our RNS System to obtain coverage and adequate reimbursement for the implant procedures or for clinicians providing ongoing patient care would cause our business, financial condition, and results of operations to suffer. Additionally, a third-party payor’s decision to provide coverage for a brain-responsive neuromodulation for drug resistant focal epilepsy does not imply that an adequate reimbursement rate will be approved. Further, coverage policies and third-party reimbursement rates may change at any time. Even if favorable coverage and reimbursement status is attained, less favorable coverage policies and reimbursement rates may be implemented in the future.

Use of our RNS System requires appropriate neurosurgeon training for implantation and epileptologist training for prescribing, programming and ongoing patient care, and inadequate training may lead to negative patient outcomes, which could harm our business, financial condition, and results of operations.

The successful use of our RNS System depends in part on the training and skill of the neurosurgeon performing the implant procedure as well as the clinician, typically an epileptologist, prescribing the RNS System, performing the subsequent programming and monitoring the patient response. Clinicians, including those practicing outside of Level 4 CECs and in the community setting, could experience difficulty with the technique necessary to successfully implant and program our RNS System, and monitor patients if they do not receive appropriate training. Moreover, clinicians rely on their previous medical training and experience when recommending or implanting our RNS System, and we cannot guarantee that all neurosurgeons will have the necessary implantation skills to properly perform the procedure. We cannot be certain that physicians or healthcare providers that use our RNS System have received sufficient training, and physicians or healthcare providers who have not received adequate training may nonetheless attempt to use our RNS System with their patients. If clinicians implant or utilize our RNS System incorrectly, or without adhering to or completing all relevant training, their patient outcomes may not be consistent with the outcomes achieved in our clinical studies. Adverse safety outcomes that arise from improper or incorrect use of our RNS System may negatively impact the perception of patient benefit and safety of our RNS System, notwithstanding results from our clinical studies. These results could limit adoption of our RNS System in treatment for drug-resistant focal epilepsy, which would harm our sales, business, financial condition, and results of operations.

We are highly dependent on our senior management team and key personnel, and our business could be harmed if we are unable to attract and retain personnel necessary for our success.

We are highly dependent on our senior management and key personnel. Our success will depend on our ability to retain senior management and to attract and retain qualified personnel in the future, including sales and marketing professionals, engineers, scientists, clinical trial specialists and other highly skilled personnel and to integrate current and additional personnel in all departments.

Competition for skilled personnel in our market is intense and may limit our ability to hire and retain highly qualified personnel on acceptable terms, or at all. To induce valuable employees to remain at our company, in addition to salary and cash incentives, we have issued stock options that vest over time. The value to employees of stock options that vest over time may be significantly affected by fluctuations in our stock price that are beyond our control, and may at any time be insufficient to counteract more lucrative offers from other companies. Despite our efforts to retain valuable employees, members of our management and other key personnel may terminate their employment with us on short notice. Our employment arrangements with our employees provide for at-will

employment, which means that any of our employees could leave our employment at any time, with or without notice. We also do not maintain “key man” insurance policies on the lives of these individuals or the lives of any of our other employees.

We rely on our own direct sales force to market and sell our RNS System, and if we are unable to optimize our sales force, it could harm our business. Our operating results are directly dependent upon the sales and marketing efforts of our sales and customer support team. If our employees fail to adequately promote, market and sell our products, our sales could significantly decrease. As we launch new products, expand our product offerings and increase our marketing efforts with respect to existing products, we will need to expand the reach of our marketing and sales networks. Our future success will depend largely on our ability to continue to hire, train, retain and motivate skilled employees with significant technical knowledge in various areas. An inability to attract, hire, train and retain employees will harm our sales, business, financial condition, and results of operations.

We expect to increase the size of our organization in the future, and we may experience difficulties in managing the operational elements or timing of this growth. If we are unable to manage or appropriately time the anticipated growth of our business, our future revenue and operating results may be harmed.

As of December 31, 2025, we had 209 employees. As our sales and marketing strategies evolve and as we continue operating as a public company, we may need additional managerial, operational, sales, marketing, financial and other personnel. Future growth would impose significant added responsibilities on members of management, including:

•identifying, recruiting, integrating, maintaining and motivating additional employees;

•managing our internal development efforts effectively, while complying with our contractual obligations to contractors and other third parties; and

•improving our operational, financial and management controls, reporting systems and procedures.

Our future financial performance and our ability to successfully market and sell our RNS System will depend, in part, on our ability to effectively manage or time any future growth, and our management may also have to divert a disproportionate amount of attention away from day-to-day activities in order to devote a substantial amount of time to managing these growth activities.

As demand for our RNS System increases, we will need to continue to scale our capacity at our manufacturing facility, expand customer service, billing and systems processes and enhance our internal quality assurance program. We cannot be certain that any increases in scale, related improvements and quality assurance will be successfully implemented or that appropriate personnel will be available to facilitate the growth of our business. If we encounter difficulty meeting market demand, quality standards or physician expectations, our reputation will be harmed and our business will suffer. Furthermore, additional growth may result in higher fixed costs and may slow our ability to reduce costs in the face of a sudden decline in demand for our products.

We may not be able to achieve or maintain satisfactory pricing and margins for our RNS System, which could harm our business and results of operations.

Manufacturers of medical devices have a history of price competition, and we can give no assurance that we will be able to maintain satisfactory prices for our RNS System at the levels we have historically achieved. The pricing of our products could be impacted by several factors, including pressure to reduce prices by our customers due to a decline in the amount that third-party payors reimburse for implant procedures using our RNS System for clinicians providing ongoing patient care. A decline in the amount that third-party payors reimburse our customers for ongoing patient care could also make it difficult for programming centers to conduct ongoing patient support without a corresponding reduction in prices for our products. If we are forced to lower or are unable to increase the price we charge for our RNS System, our gross margins will decrease, which will harm our ability to invest in and grow our business. If we are unable to maintain our prices, or if our costs increase and we are unable to offset such increase with an increase in our prices, our margins could erode, which could harm our business and results of operations.

The current administration’s new and changing tariff framework could inhibit our ability to maintain the RNS System’s gross margin at the historical rates, which could negatively impact our long-range revenue forecast, and the results of operations. In addition, trade restrictions or other political tensions may exacerbate unfavorable macroeconomic conditions, which could adversely affect our business, results of operations, financial condition and prospects.

We manufacture and sell the vast majority of our devices in the United States and have limited supply chain activities outside the United States for our RNS System. We do not expect the current tariff framework to have material impact on our gross margin for the RNS System. However, our projections could be incorrect as tariff regulations continue to change, undermining our ability to maintain our projected gross margin at the historical rates, which would negatively impact the results of our operations, our revenue projections, and our business.

In addition, any trade disputes, tariffs, restrictions and other political tensions between the United States and other countries may exacerbate unfavorable macroeconomic conditions including inflationary pressures, foreign exchange volatility, financial market instability, and economic recessions or downturns. The ultimate impact of current or future tariffs and trade restrictions remains uncertain and could materially and adversely affect our business, financial condition, and prospects. While we actively monitor these risks, any prolonged economic downturn, escalation in trade tensions, or deterioration in international perception of U.S.-based companies could materially and adversely affect our business, ability to access the capital markets or other financing sources, results of operations, financial condition and prospects.

We are seeking expanded FDA labeling for our RNS System to be able to treat patients with generalized drug-resistant epilepsy as well as patients between the age of 12 and 17 with drug-resistant focal epilepsy, but if we are unable to broaden the indications for our RNS System to include these patients, or if the recent FDA staffing changes delay reviews of our applications for indication expansion, our growth potential could be harmed.

Our products are subject to extensive regulation by the FDA in the United States. Before a new medical device or a new intended use for an existing medical device can be marketed in the United States, we must first submit and receive either 510(k) clearance pursuant to Section 510(k) of the Food, Drug and Cosmetic Act, or the FDCA, or approval of a PMA application or PMA-S from the FDA, unless an exemption applies.

If our NAUTILUS Study and our collaboration with the National Evaluation System for health Technology to pursue the use of real-world data do not produce results necessary to support regulatory clearance or approval to expand our indications to include patients with generalized drug-resistant epilepsy as well as patients age 12 to 17 with drug-resistant focal epilepsy, we will be unable to obtain and maintain necessary approvals to expand our indications to include these patients in accordance with our expected timelines, which could harm our growth potential. Furthermore, we could incur substantial costs and the attention of management could be diverted throughout this process. Cuts and staffing changes at the FDA could further delay our efforts to expand indications by creating significant and costly delays in the review process for our regulatory submissions; these delays would negatively impact our growth potential and ability to expand our market reach according to our financial plans.

Our growth prospects may be harmed if we are unable to successfully use our unique data asset and analysis capabilities, either internally or through collaboration, or if our expectations with respect to our ability to leverage our unique data asset prove to be incorrect.

In November 2023, we entered into a collaboration with Rapport to leverage our RNS System’s unique biomarker monitoring and data analysis capabilities, and in June 2025, we entered into a subsequent agreement to extend this work on behalf of Rapport. We plan to continue to seek to leverage our unique data asset or our data monitoring and analysis capabilities by entering into similar collaborations with other entities in the future. If we are unable to continue to build our data asset and our monitoring and analysis capabilities, either internally or through further collaborations, or if our expectations with respect to our ability to leverage our unique data asset prove to be incorrect, our growth prospects may be harmed.

We may expand sales of our RNS System internationally in the future, but we may experience difficulties in obtaining regulatory clearance or approval or in successfully marketing our RNS System internationally even if

approved. A variety of risks associated with marketing our RNS System internationally could harm our growth potential.

While our RNS System is not yet approved for sale outside the United States, we may pursue regulatory and reimbursement approval pathways in markets outside of the United States. Sales of our RNS System outside of the United States will be subject to foreign regulatory requirements governing clinical studies and marketing approval, as well as additional post-approval requirements. We would incur substantial expenses in connection with any international expansion. Additional risks related to operating in foreign countries include:

•differing regulatory requirements in foreign countries, including with respect to data privacy and security;

•differing reimbursement regimes in foreign countries, including price controls;

•unexpected changes in tariffs, trade barriers, price and exchange controls and other regulatory requirements;

•economic weakness, including inflation, or political instability in particular foreign economies and markets;

•compliance with tax, employment, immigration and labor laws for employees living or traveling abroad;

•foreign taxes, including withholding of payroll taxes;

•foreign currency fluctuations, which could result in increased operating expenses or reduced revenue;

•difficulties staffing and managing foreign operations;

•workforce uncertainty in countries where labor unrest is more common than in the United States;

•potential liability under the U.S. Foreign Corrupt Practices Act of 1977, as amended, or the FCPA, or comparable foreign regulations;

•challenges enforcing our contractual and intellectual property rights as well as intellectual property theft or compulsory licensing, especially in those foreign countries that do not respect and protect intellectual property rights to the same extent as the United States; and

•business interruptions resulting from geopolitical actions, including tariffs, war and terrorism.

These and other risks associated with international operations may harm our ability to attain or maintain profitable operations internationally, which would harm our growth potential.

In addition, there can be no guarantee that we will receive approval to sell our RNS System in every international market we target, nor can there be any guarantee that any sales would result even if any such approval is received. Approval in the United States, or in any other jurisdiction, does not ensure approval in other jurisdictions. Obtaining foreign approvals could result in significant delays, difficulties and costs for us and require additional studies and additional expenses. Regulatory requirements can vary widely from country to country and could delay the introduction of our RNS System in those countries. If we fail to comply with these regulatory requirements or to obtain and maintain required approvals, our target market will be reduced and our ability to generate revenue will be diminished. Our inability to successfully enter all our desired international markets and manage business on a global scale could harm our growth potential.

Risks related to government regulation and our industry

If we fail to comply with U.S. federal and state laws and regulations, including fraud and abuse and other healthcare laws and regulations, such as those relating to kickbacks and false claims for reimbursement, we could face substantial penalties and our business, financial condition and results of operations could be harmed.

Healthcare providers play a primary role in the distribution, recommendation, ordering and purchasing of any medical device for which we have or obtain marketing clearance or approval. Through our arrangements with

healthcare professionals and hospital facilities, we are exposed to broadly applicable anti-fraud and abuse, anti-kickback, false claims and other healthcare laws and regulations that may constrain our business, our arrangements and relationships with customers, and how we market, sell and distribute our marketed medical devices. We have a compliance program, code of conduct and associated policies, procedures, and ongoing training, but it is not always possible to identify and deter misconduct by our employees, contractors, and other third parties, including our customers, and the precautions we take to detect and prevent noncompliance may not be effective in protecting us from governmental investigations for failure to comply with applicable fraud and abuse or other healthcare laws and regulations.

In the United States, we are subject to various state and federal anti-fraud and abuse laws, including, without limitation, the federal Anti-Kickback Statute and federal civil False Claims Act, or the FCA. Our relationships with physicians, other health care professionals and hospitals are subject to scrutiny under these laws. There are also similar laws in other countries that we may become subject to if we expand internationally.

The laws that may affect our ability to operate include, among others:

•the Anti-Kickback Statute, which prohibits, among other things, knowingly and willingly soliciting, offering, receiving or paying remuneration, directly or indirectly, overtly or covertly, in cash or in kind, to induce or reward either the referral of an individual, or the purchase, order or recommendation of, items or services for which payment may be made, in whole or in part, under a federal healthcare program, such as the Medicare and Medicaid programs;

•federal civil and criminal false claims laws, including the FCA, and civil monetary penalties laws, which prohibits, among other things, persons or entities from knowingly presenting, or causing to be presented, a false or fraudulent claim for payment of government funds and knowingly making, using or causing to be made or used, a false record or statement to get a false claim paid or to avoid, decrease or conceal an obligation to pay money to the federal government;

•the Health Insurance Portability & Accountability Act of 1996, or HIPAA, which applies to our customers and some of their downstream vendors and contractors, imposes criminal and civil liability for, among other actions, knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program, including private third-party payors, or knowingly and willfully falsifying, concealing or covering up a material fact or making a materially false, fictitious or fraudulent statement or representation, or making or using any false writing or document knowing the same to contain any materially false, fictitious or fraudulent statement or entry in connection with the delivery of or payment for healthcare benefits, items or services; and

•the federal Physician Payments Sunshine Act, also known as Open Payments, which requires manufacturers of drugs, devices, biologics and medical supplies for which payment is available under Medicare, Medicaid or the Children’s Health Insurance Program to report annually, with certain exceptions to the Centers for Medicare & Medicaid Services, or CMS, information related to payments or other “transfers of value” made to physicians, as defined by such law, other healthcare professionals (such as physician assistants and nurse practitioners), and teaching hospitals, and requires applicable manufacturers and group purchasing organizations to report annually to CMS ownership and investment interests held by physicians and their immediate family members.

State and federal regulatory and enforcement agencies continue to actively investigate violations of healthcare laws and regulations, and the U.S. Congress continues to strengthen the arsenal of enforcement tools. Enforcement agencies also continue to pursue novel theories of liability under these laws. In particular, government agencies have increased regulatory scrutiny and enforcement activity with respect to manufacturer reimbursement support activities and patient care programs, including bringing criminal charges or civil enforcement actions under the Anti-Kickback Statute, federal civil FCA and HIPAA’s healthcare fraud and privacy provisions.

Achieving and sustaining compliance with applicable federal and state anti-fraud and abuse laws may prove costly. If we or our employees are found to have violated any of the above laws we may be subjected to substantial criminal, civil and administrative penalties, including imprisonment, exclusion from participation in federal

healthcare programs, such as Medicare and Medicaid, and significant fines, monetary penalties, forfeiture, disgorgement and damages, contractual damages, reputational harm, administrative burdens, diminished profits and future earnings and the curtailment or restructuring of our operations, any of which could adversely affect our ability to operate our business and our financial results. Any action or investigation against us for the violation of these healthcare fraud and abuse laws, even if successfully defended, could result in significant legal expenses and could divert our management’s attention from the operation of our business. Companies settling federal civil FCA, Anti-Kickback Statute or civil monetary penalties law cases also may be required to enter into a Corporate Integrity Agreement with the Office of Inspector General, or OIG, in order to avoid exclusion from participation (such as loss of coverage for their products) in federal healthcare programs such as Medicare and Medicaid. Corporate Integrity Agreements typically impose substantial costs and operational burdens on companies to ensure compliance. Defending against any such actions can be detrimental to our reputation and brand and can otherwise be costly, time-consuming and may require significant personnel resources, and may harm our business, financial condition and results of operations.

In addition, the medical device industry’s relationship with physicians is under increasing scrutiny by the OIG, the U.S. Department of Justice, or the DOJ, the state attorney generals and other foreign and domestic government agencies. Our failure to comply with requirements governing the industry’s relationships with physicians or an investigation into our compliance by the OIG, the DOJ, state attorney generals and other government agencies, could harm our business, financial condition and results of operations.

Our employees, independent contractors, consultants, commercial partners and vendors may engage in misconduct or other improper activities, including noncompliance with regulatory standards and requirements, which could harm our business, financial condition and results of operations.

We are exposed to the risk that our employees, independent contractors, consultants, commercial partners and vendors may engage in fraudulent or illegal activity. Misconduct by these parties could include intentional, reckless or negligent conduct or disclosure of unauthorized activities to us that violates: (i) the laws of the FDA and other similar foreign regulatory bodies, including those laws requiring the reporting of true, complete and accurate information to such regulators; (ii) manufacturing standards; (iii) healthcare fraud and abuse laws in the United States and similar foreign fraudulent misconduct laws; or (iv) laws that require the true, complete and accurate reporting of financial information or data. These laws may impact, among other things, future sales, marketing and education programs. In particular, the promotion, sales and marketing of healthcare items and services, as well as certain business arrangements in the healthcare industry, are subject to extensive laws designed to prevent fraud, kickbacks, self-dealing and other abusive practices. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, structuring and commissions, certain customer incentive programs and other business arrangements generally. Activities subject to these laws also involve the improper use of information obtained in the course of patient recruitment for clinical studies.

We have adopted a code of conduct, employee handbook, compliance policies, and compliance training programs for all employees, but it is not always possible to identify and deter misconduct by our employees and other third parties, and the precautions we take to detect and prevent these activities may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to be in compliance with such laws or regulations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in the imposition of significant fines or other sanctions, including the imposition of civil, criminal and administrative penalties, damages, monetary fines, disgorgement, imprisonment, reporting and oversight obligations, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, diminished profits and future earnings and curtailment of operations, any of which could adversely affect our ability to operate our business and our results of operations. If any such actions are instituted against us and we are not successful in defending ourselves or asserting our rights, those actions could result in integrity issues, or a negative impact to our reputation or brand. Whether or not we are successful in defending against any such actions or investigations, we could incur substantial costs, including legal fees, and divert the attention of management in defending ourselves against any of these claims or investigations, which could harm our business, financial condition and results of operations.

Regulatory compliance is expensive, complex and uncertain, and a failure to comply could lead to enforcement actions against us and other negative consequences for our business.

The FDA and similar agencies regulate our products as medical devices. Complying with these regulations is costly, time-consuming, complex and uncertain. For instance, before a new medical device, or a new intended use for an existing device, can be marketed in the United States, a company must first submit and receive either 510(k) clearance or approval of a PMA from the FDA, unless an exemption applies. FDA regulations and regulations of similar agencies are wide-ranging and include, among other things, oversight of:

•product design, development, manufacturing (including suppliers and materials) and testing;

•laboratory, preclinical and clinical studies;

•product safety and effectiveness;

•product labeling;

•product storage and shipping;

•record keeping;

•pre-market clearance or approval;

•marketing, advertising and promotion;

•product sales and distribution;

•product changes;

•product recalls; and

•post-market surveillance and reporting of deaths or serious injuries and certain malfunctions.

Our products are subject to extensive regulation by the FDA and if we expand internationally in the future may be subject to extensive regulation by non-U.S. regulatory agencies. Further, improvements of or changes to our existing products, any potential new products, and new indications for use of our current products will be subject to extensive regulation, and we may require permission from regulatory agencies and ethics boards to conduct clinical studies, as well as clearance or approval from the FDA prior to commercial sale. In order to commercialize and distribute our products in markets outside of the United States, it will require approval from non-U.S. regulatory agencies.

The FDA and foreign regulatory bodies can delay, limit or deny clearance or approval of a device for many reasons, including:

•our inability to demonstrate to the satisfaction of the FDA or the applicable regulatory entity or notified body that our products are safe or effective for their intended uses;

•the disagreement of the FDA or the applicable foreign regulatory body with the design or implementation of our clinical studies or the interpretation of data from clinical studies;

•serious and unexpected adverse device effects experienced by participants in our clinical studies;

•the data from our preclinical studies and clinical studies may be insufficient to support clearance or approval, where required;

•our inability to demonstrate that the clinical and other benefits of the device outweigh the risks;

•the manufacturing process or facilities we use may not meet applicable requirements; and

•the potential for approval policies or regulations of the FDA or applicable foreign regulatory bodies to change significantly in a manner rendering our clinical data or regulatory filings insufficient for clearance or approval.

Failure to comply with applicable U.S. requirements regarding, for example, promoting, manufacturing or labeling our RNS System, may subject us to a variety of administrative or judicial actions and sanctions, such as Form 483 observations, warning letters, untitled letters, product recalls, product seizures, and total or partial suspension of production or distribution, injunctions, fines, civil penalties and criminal prosecution. Any enforcement action by the FDA and other comparable non-U.S. regulatory agencies could harm our business, financial condition and results of operations.

Our failure to comply with applicable regulatory requirements could result in enforcement action by the FDA or state agencies, which may include any of the following actions:

•untitled letters, warning letters, fines, injunctions, consent decrees and civil penalties;

•removal from FDA’s Voluntary Improvement Program pilot;

•unanticipated expenditures to address or defend such actions;

•form 483s, or other compliance or enforcement notices, communications or correspondence, including customer notifications for repair, replacement or refunds;

•recall, detention or seizure of our RNS System;

•operating restrictions or partial suspension or total shutdown of production;

•refusing or delaying our requests for 510(k) clearance or PMA of new products or modified products;

•operating restrictions;

•seizure or detention of products;

•withdrawing 510(k) clearances or PMAs that have already been granted;

•refusal to grant export approval for our RNS System;

•criminal prosecution; or

•civil penalties.

If any of these events were to occur, it would have a negative impact on our business, financial condition and results of operations.

The FDA also regulates the advertising and promotion of our RNS System to ensure that the claims we make are consistent with our regulatory clearances and approvals, that there are adequate and reasonable data to substantiate the claims and that our promotional labeling and advertising is neither false nor misleading in any respect. If the FDA determines that any of our advertising or promotional claims are misleading, not substantiated or not permissible, we may be subject to enforcement actions, including warning letters, and we may be required to revise our promotional claims and make other corrections or restitutions. Additionally, our manufacturing facility is required to comply with extensive requirements imposed by the FDA, including ensuring that quality control and manufacturing procedures conform to the QMSR. As such, we will be subject to continual review and inspections to assess compliance with the QMSR and adherence to commitments made in any 510(k) or PMA application.

The 510(k) or PMA process can be expensive, lengthy and unpredictable and we will continue to expend time, money and effort in all areas of regulatory compliance, including manufacturing, production and quality control. We may not be able to obtain necessary clearances or approvals or may be unduly delayed in doing so, which would negatively affect our business, financial condition and results of operations. Furthermore, even if we are granted

regulatory clearances or approvals, they may include significant limitations on the indicated uses for the product, which may limit the market for the product. Although we have obtained PMA approval to market our RNS System, our approval can be revoked if safety or efficacy problems develop.

Our operations are subject to pervasive and continuing FDA regulatory requirements, and failure to comply with these requirements could harm our growth potential, and our business, financial condition and results of operations.

Before a new medical device or service, or a new intended use for an existing product or service, or a change to an existing product or service can be marketed in the United States, a company must first submit and receive either 510(k) clearance or PMA from the FDA, unless an exemption applies. In the 510(k) clearance process, before a device may be marketed, the FDA must determine that a proposed device is substantially equivalent to a legally-marketed predicate device, which includes a device that has been previously cleared through the 510(k) process, a device that was legally marketed prior to May 28, 1976 (pre-amendments device), a device that was originally on the U.S. market pursuant to an approved PMA and later down-classified, or a 510(k)-exempt device.

In the process of obtaining PMA approval, which was required for our RNS System, the FDA must determine that a proposed device is safe and effective for its intended use based, in part, on extensive data, including, but not limited to, technical, preclinical, clinical study, manufacturing and labeling data. The PMA process is typically required for devices that are deemed to pose the greatest risk, such as life-sustaining, life-supporting or implantable device. The FDA could decline to approve any supplemental application that we submit in the future to expand the indications for which our RNS System can be used, which would harm our growth potential.

The FDA and state and international authorities have broad enforcement powers. The medical device industry is now experiencing greater scrutiny and regulation by federal, state and foreign governmental authorities. Companies in our industry are subject to more frequent and more intensive reviews and investigations, often involving the marketing, business practices and product quality management. Such reviews and investigations may result in: civil and criminal proceedings; the imposition of substantial fines and penalties; the receipt of warning letters, untitled letters, demands for recalls or the seizure of our products; the requirement to enter into corporate integrity agreements, stipulated judgments or other administrative remedies; and result in our incurring substantial unanticipated costs and the diversion of key personnel and management’s attention from their regular duties, any of which may harm our business, financial condition and results of operations, and may result in greater and continuing governmental scrutiny of our business in the future.

Additionally, federal, state and foreign governments and entities have enacted laws and issued regulations and other standards requiring increased visibility and transparency of interactions with healthcare providers. For example, Open Payments requires us to annually report to CMS payments and other transfers of value to U.S. physicians and certain other clinicians and U.S. teaching hospitals, with the reported information made publicly available on a searchable website. Failure to comply with these legal and regulatory requirements could impact our business, and we have had and will continue to spend substantial time and financial resources to develop and implement enhanced structures, policies, systems and processes to comply with these legal and regulatory requirements, which could harm our business, financial condition and results of operations.

Modifications to our products or products we sell may require new 510(k) clearances or PMAs or may require us to recall or cease marketing these products until clearances or approvals are obtained, which could harm our business, financial condition and results of operations.

In the United States, our RNS System is marketed pursuant to a PMA order issued by the FDA. Any modifications to a PMA-approved device that could significantly affect its safety or effectiveness, including significant design and manufacturing changes, or that would constitute a major change in its intended use, manufacture, design, components, materials, or technology requires approval of a new PMA application or PMA supplement. However, certain changes to a PMA-approved device do not require submission and approval of a new PMA or PMA supplement and may only require notice to FDA in a PMA 30-Day Notice, Special PMA Supplement - Changes Being Effected or PMA Annual Report. The FDA requires every manufacturer to make this determination in the first instance, but the FDA may review any manufacturer’s decision. The FDA may not agree with our

decisions regarding whether new approvals are necessary for products that we manufacture and distribute. If the FDA disagrees with our determination and requires us to seek new PMA approvals for modifications to our previously approved products for which we have concluded that new approvals are unnecessary, we may be required to cease marketing or to recall the modified product until we obtain clearance or approval, and we may be subject to significant regulatory fines or penalties.

For products that have received 510(k) clearance, such as our Burr Hole Cover product, modifications that could significantly affect safety and effectiveness, such as changes to the intended use or technological characteristics, may require new 510(k) clearances or PMAs or require us to recall or cease marketing the modified devices until these clearances or approvals are obtained. Based on FDA published guidelines, the FDA requires device manufacturers to initially make and document a determination of whether or not a modification requires a new approval, supplemental approval or clearance; however, the FDA can review a manufacturer’s decision. Any modification to an FDA-cleared device that could significantly affect its safety or efficacy or that would constitute a major change in its intended use would require a new 510(k) clearance, or if such modification put the device into Class III, possibly a PMA. We may not be able to obtain additional 510(k) clearances or PMAs for new products or for modifications to, or additional indications for, our products in a timely fashion, or at all. Delays in obtaining required future clearances or approvals would adversely affect our ability to introduce new or enhanced products in a timely manner, which in turn would harm our future growth.

We have made modifications to our RNS System in the past and expect to make additional modifications in the future that we believe do not or will not require additional clearances or approvals. If the FDA disagrees and requires new clearances or approvals for these modifications, we may be required to recall and to stop selling or marketing such products as modified, which could harm our operating results and require us to redesign such products. In these circumstances, we may be subject to significant enforcement actions. The FDA may also change its clearance and approval policies, adopt additional regulations or revise existing regulations, or take other actions which may impact our ability to modify our currently approved or cleared products on a timely basis. Any of these actions could harm our business, financial condition and results of operations.

Our products or products we distribute may be subject to recalls after receiving FDA approval or clearance, which could divert managerial and financial resources, harm our reputation and our business.

The FDA has the authority to require the recall of our products or products we sell because of any failure to comply with applicable laws and regulations, or defects in design or manufacture. A government mandated or voluntary product recall by us could occur because of, for example, component failures, device malfunctions or other adverse events, such as serious injuries or deaths, or quality-related issues, such as manufacturing errors or design or labeling defects. Any future recalls of our products or products we distribute could divert managerial and financial resources, harm our reputation and negatively impact our business.

If we initiate a correction or removal of one of our products to reduce a risk to health posed by the device, we would be required to submit a publicly available Correction and Removal report to the FDA and, in many cases, similar reports to other regulatory agencies. This report could be classified by the FDA as a device recall which could lead to increased scrutiny by the FDA and our customers regarding the quality and safety of our products. Furthermore, the submission of these reports has been and could be used by competitors against us and could harm our reputation, which could cause customers to delay purchase decisions, cancel orders or decide not to purchase our products and could cause patients to lose trust in and decide not to implant our RNS System.

If any of our products or products that we distribute cause or contribute to a death or a serious injury or malfunction in certain ways, we will be required to report under applicable medical device reporting regulations which can result in voluntary corrective actions or agency enforcement actions and harm our reputation, business, financial condition and results of operations.

Under medical device reporting regulations, medical device manufacturers are required to report to the FDA information that a device has or may have caused or contributed to a death or serious injury or has malfunctioned in a way that would likely cause or contribute to death or serious injury if the malfunction of the device or one of our similar devices were to recur. If we fail to report events required to be reported to the FDA within the required

timeframes, or at all, the FDA could take enforcement action and impose sanctions against us. Any such adverse event involving our products also could result in future voluntary corrective actions, such as recalls or customer notifications, or agency action, such as inspection or enforcement action. Any corrective action, whether voluntary or involuntary, as well as defending ourselves in a lawsuit, would be costly, distract management from operating our business, could be used by competitors against us, and may harm our reputation, business, financial condition and results of operations.

From time to time, we engage outside parties to perform services related to certain of our clinical studies. If these third parties do not successfully carry out their contractual duties or meet expected deadlines, we may not be able to complete our clinical studies on our planned timelines, or at all, and may incur significant additional costs.

From time to time, we engage consultants to help design, monitor and analyze the results of certain of our clinical studies and trials. The consultants we engage may interact with clinical investigators to enroll patients in our clinical studies. We depend on these consultants and clinical investigators to conduct clinical studies and trials and monitor and analyze data from these studies and trials under the investigational plan and protocol for the study or trial and in compliance with applicable regulations and standards, such as the FDA’s Good Clinical Practice, or GCP, guidelines and FDA human subject protection regulations. We may face delays in completing our clinical studies if these parties do not perform their obligations in a timely, compliant or competent manner. If these third parties do not successfully carry out their duties or meet expected deadlines, or if the quality, completeness or accuracy of the data they obtain is compromised due to the failure to adhere to our clinical study protocols or for other reasons, our clinical studies or trials may need to be extended, delayed or terminated or may otherwise prove to be unsuccessful, and we may have to conduct additional studies, which would significantly increase our costs.

Healthcare reform initiatives and other administrative and legislative proposals may harm our business, financial condition, results of operations and cash flows in our key markets.

There have been and continue to be proposals by the federal government, state governments, regulators and third-party payors to control or manage the increased costs of healthcare and, more generally, to reform the U.S. healthcare system. Certain of these proposals could limit the prices we are able to charge for our products or the coverage and reimbursement available for our products and could limit the acceptance and availability of our products. The adoption of proposals to control costs could harm our business, financial condition and results of operations.

There likely will continue to be legislative and regulatory proposals at the federal and state levels directed at containing or lowering the cost of healthcare. For example, on July 4, 2025, the One, Big, Beautiful Bill Act, or OBBBA, was signed into law, which is expected to reduce Medicaid spending and enrollment by implementing work requirements for some beneficiaries, capping state-directed payments, reducing federal funding, and limiting provider taxes used to fund the program. OBBBA also narrowed access to Affordable Care Act marketplace exchange enrollment and declined to extend the Affordable Care Act enhanced advanced premium tax credits that expired at the end of 2025, which, among other provisions in the law, are anticipated to reduce the number of Americans with health insurance. Congress is considering proposed legislation intended to further reduce healthcare costs with alternatives to replace the expired Affordable Care Act subsidies. We cannot predict the initiatives that may be adopted in the future or their full impact. The continuing efforts of the government, insurance companies, managed care organizations and other payors of healthcare services to contain or reduce costs of healthcare may harm:

•our ability to set a price that we believe is fair for our products;

•our ability to generate revenue and achieve or maintain profitability; and

•the availability of capital.

Further, recently there has been heightened governmental scrutiny over the manner in which manufacturers set prices for their marketed products, which has resulted in several U.S. Congressional inquiries and proposed and enacted federal legislation designed to bring transparency to product pricing and reduce the cost of products and services under government healthcare programs.

In addition, the current administration is pursuing policies to reduce regulations and expenditures across government agencies including at U.S. Department of Health and Human Services, the FDA, CMS and related agencies. These actions, presently directed by executive orders or memoranda from the Office of Management and Budget, may propose policy changes that create additional uncertainty for our business. Recent actions, for example, include directing agencies to reduce agency workforce and cut programs and imposing tariffs on imported products. Additionally, the current administration recently called on Congress to enact “The Great Healthcare Plan,” to codify and expand Most-Favored Nation pricing, lower government subsidies to private insurance companies, increase healthcare price transparency, and enact restrictions on pharmacy benefit manager payment methodologies, among other things. These actions and policies may significantly reduce U.S. medical device prices, potentially impacting manufacturers’ global pricing strategies and profitability, while increasing their operational costs and compliance risks.

Additionally, individual states in the United States have also increasingly passed legislation and implemented regulations designed to control product pricing, including price or patient reimbursement constraints, discounts, restrictions on certain product access and marketing cost disclosure and transparency measures. Moreover, regional healthcare authorities and individual hospitals are increasingly using bidding procedures to determine what products to purchase and which suppliers will be included in their healthcare programs. Adoption of price controls and other cost-containment measures, and adoption of more restrictive policies in jurisdictions with existing controls and measures may prevent or limit our ability to generate revenue and attain profitability.

Various new healthcare reform proposals are emerging at the federal and state level. Any new federal and state healthcare initiatives that may be adopted could, among other things, limit the amounts that federal and state governments will pay for healthcare products and services, and could harm our business, financial condition and results of operations.

Compliance with environmental laws and regulations could be expensive, and the failure to comply with these laws and regulations could subject us to significant liability.

Our research, development and manufacturing operations involve the use of hazardous substances, and we are subject to a variety of federal, state and local environmental laws and regulations relating to the storage, use, handling, generation, manufacture, treatment, discharge and disposal of hazardous substances. Our products may also contain hazardous substances, and they are subject laws and regulations relating to labeling requirements and to their sale, collection, recycling, treatment, storage and disposal. Compliance with these laws and regulations may be expensive and noncompliance could result in substantial fines and penalties. Environmental laws and regulations also impose liability for the remediation of releases of hazardous substances into the environment and for personal injuries resulting from exposure to hazardous substances, and they can give rise to substantial remediation costs and to third-party claims, including for property damage and personal injury. Liability under environmental laws and regulations can be joint and several and without regard to fault or negligence, and they tend to become more stringent over time, imposing greater compliance costs and increased risks and penalties associated with violations. We cannot be certain that violations of these laws and regulations, or releases of or exposure to hazardous substances, will not occur in the future or have not occurred in the past, including as a result of human error, accidents, equipment failure or other causes. The costs of complying with environmental laws and regulations, and liabilities that may be imposed for violating them, or for remediation obligations or responding to third-party claims, could negatively affect our business, financial condition and results of operations.

Clinical studies may be delayed, suspended or terminated for many reasons, which will increase our expenses and delay the time it takes to support label expansion for additional indications.

We plan to continue to develop and execute clinical studies to support label retention for our products and label expansion for our products into additional epilepsy populations. We may also develop and execute clinical studies for new products or for label expansion for our current products into patient populations living with other neurologic conditions. We do not know whether future clinical studies will begin on time, need to be redesigned, enroll an adequate number of patients or be completed on schedule, if at all. The commencement and completion of clinical

studies to support label retention and expansion for additional indications or for new products may be delayed, suspended or terminated as a result of many factors, including:

•the delay or refusal of regulators or Institutional Review Boards, or IRBs, to authorize us to commence a clinical study at a prospective trial site;

•changes in regulatory requirements, policies and guidelines;

•delays or failure to reach agreement on acceptable terms with prospective clinical research organizations, or CROs, and clinical study sites, the terms of which can be subject to extensive negotiation and may vary significantly among different CROs and trial sites;

•delays in patient enrollment and variability in the number and types of patients available for clinical studies and delays in or the inability to monitor enrolled patients;

•the inability to enroll a sufficient number of patients in studies to observe statistically significant treatment effects in the trial;

•having clinical sites deviate from the trial protocol or dropping out of a study;

•safety or tolerability concerns that could cause us to suspend or terminate a trial if we find that the participants are being exposed to unacceptable health risks;

•regulators or IRBs requiring that we or our investigators suspend or terminate clinical research for various reasons, including noncompliance with regulatory requirements or safety concerns, among others;

•lower than anticipated retention rates of patients and volunteers in clinical studies;

•our CROs or clinical studies sites failing to comply with regulatory requirements or meet their contractual obligations to us in a timely manner, or at all, deviating from the protocol or dropping out of a trial;

•delays relating to adding new clinical study sites; and

•exceeding budgeted costs due to difficulty in accurately predicting costs associated with clinical studies.

We could also encounter delays if a clinical study is suspended or terminated by us, by the IRBs or the Ethics Committees of institutions at which such studies are being conducted, by the Data Safety Monitoring Board for such trial or by the FDA or other regulatory authorities. Such authorities may suspend or terminate a clinical study due to a number of factors, including failure to conduct the clinical study in accordance with regulatory requirements, including GCP regulations, or our clinical protocols, inspection of the clinical study operations or trial site by the FDA resulting in the imposition of a clinical hold, unforeseen safety issues or adverse side effects, failure to demonstrate safety and effectiveness, changes in governmental regulations or administrative actions or lack of adequate funding to continue the clinical study.

In addition, we may encounter delays if the FDA concludes that our financial relationships with investigators result in a perceived or actual conflict of interest that may have affected the interpretation of a study, the integrity of the data generated at the applicable clinical study site or the utility of the clinical study itself. Principal investigators for our clinical studies may serve as scientific advisors or consultants to us from time to time and receive cash compensation and/or stock options in connection with such services. If these relationships and any related compensation to or ownership interest by the clinical investigator carrying out the study result in perceived or actual conflicts of interest, or if the FDA concludes that the financial relationship may have affected interpretation of the study, the integrity of the data generated at the applicable clinical study site may be questioned and the utility of the clinical study itself may be jeopardized, which could result in the delay or rejection by the FDA. Any such delay or rejection could prevent us from supporting label retention and expansion for our RNS System.

We may become subject to numerous laws and regulations related to anti-bribery and anti-corruption laws, such as the FCPA and the U.K. Bribery Act, in which violations of these laws could result in substantial penalties and prosecution.

We currently do not market and sell our products outside the United States. However, if we choose to conduct business outside the United States, our business will be subject to various anti-bribery and anti-corruption laws, such as the FCPA and similar laws around the world. These laws generally prohibit companies and their employees and intermediaries from directly or indirectly offering, providing, promising, authorizing or making improper payments or providing anything of value to government officials and other persons for the purpose of obtaining or retaining business or gaining any advantage. The FCPA also requires public companies to make and keep books and records that accurately and fairly reflect the transactions of a company and to devise and maintain an adequate system of internal accounting controls. We face significant risks if we, which includes our third-party business partners and intermediaries, fail to comply with the FCPA or other anti-corruption and anti-bribery laws. In many foreign countries, particularly in countries with developing economies, it may be a local custom that businesses engage in practices that are prohibited by the FCPA or other applicable laws and regulations. To that end, we may have to incur substantial costs to enhance our controls if we begin doing business outside the United States, and even so, such compliance measures ultimately may not be effective in prohibiting our employees, contractors, business partners, intermediaries or agents from violating or circumventing our policies and/or the law.

Responding to any enforcement action or related investigation may result in a significant diversion of management’s attention and resources and significant defense costs and other professional fees. Any violation of the FCPA or other applicable anti-bribery, anti-corruption or anti-money laundering laws to which we become subject could result in whistleblower complaints, adverse media coverage, investigations, loss of export privileges, severe criminal or civil sanctions and, in the case of the FCPA, suspension or debarment from U.S. government contracts, which could harm our business, financial condition and results of operations.

Risks related to privacy, information technology and cybersecurity

Our collection, use, storage, disclosure, transfer and other processing of sensitive and personal information may subject us to stringent and evolving U.S. and foreign laws, regulations and rules, contractual obligations, industry standards, policies and other obligations related to data privacy and security. Our actual or perceived failure to comply with such obligations could lead to significant costs, liabilities and other risks, including as a result of investigations, inquiries, litigation, fines, legislative and regulatory action and negative press about our data privacy and security practices, which may disrupt our business operations and harm our business and reputation, financial conditions, results of operations and prospects and cause other adverse business consequences.

In the course of our operations, we receive, collect, use, generate, store, disclose, transfer, make accessible, protect, secure, dispose of, transmit, share and otherwise process (collectively, process) an increasing volume of sensitive and personal information, including proprietary and confidential business data, trade secrets, intellectual property, data we collect about trial participants in connection with clinical trials, and detailed recordings of intracranial electroencephalograms, or iEEGs, from patients as well as information from our employees and third parties with whom we conduct business. Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, rules, regulations, guidance and industry standards, external and internal privacy and security policies, contractual requirements, and other obligations relating to data privacy and security.

In the United States, various federal and state regulators have adopted, or are considering adopting, laws and regulations concerning personal information and data security, including data breach notification laws. Numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal information. As applicable, such rights may include the right to access, correct, or delete certain personal information, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal information, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for

statutory fines for noncompliance. For example, the California Consumer Privacy Act, or CCPA, applies to personal information of consumers, business representatives, and employees, and requires businesses to provide specific disclosures in privacy notices and honor requests of California residents to exercise certain privacy rights. The CCPA provides for fines per intentional violation and allows private litigants affected by certain data breaches to recover significant statutory damages. Although the CCPA exempts some data processed in the context of clinical trials, the CCPA increases compliance costs and potential liability with respect to other personal information we maintain about California residents. In addition, the California Privacy Rights Act of 2020, or CPRA, expands the CCPA’s requirements, including by adding a new right for individuals to correct their personal information and establishing a new regulatory agency to implement and enforce the law. While the laws and regulations of other states also exempt some data processed in the context of clinical trials, these developments further complicate compliance efforts, and increase legal risk and compliance costs for us, and the third parties with whom we work. Additionally, our customers may be subject to additional federal and state privacy and security laws, rules, regulations and standards, including HIPAA, that they require us to comply with through contractual obligations. This patchwork of obligations may give rise to conflicts or differing views of personal privacy rights.

Additionally, the U.S. Department of Justice issued a rule titled the “Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons”, which places additional restriction on certain data transactions involving countries of concern (e.g., China, Russia, Iran) and covered persons (i.e., individuals and entities located in or controlled by individuals or entities located in those jurisdictions) that may impact certain business activities such as vendor engagements, sale, licensing, or sharing of data, employment of certain individuals, and investor agreements. Violations of the rule could lead to significant civil and criminal fines and penalties.

Outside the United States, an increasing number of laws, regulations, and industry standards may govern data privacy and security. For example, the EU GDPR, the United Kingdom’s GDPR, or UK GDPR, and Canada’s Personal Information Protection and Electronic Documents Act, or PIPEDA, impose strict requirements for processing personal information. Under EU GDPR, companies may face temporary or definitive bans on data processing and other corrective actions; fines of up to €20 million Euros under the EU GDPR, 17.5 million pounds sterling under the UK GDPR, or, in each case, four percent of annual global revenues, whichever is greater; or private litigation related to processing of personal information brought by classes of data subjects or consumer protection organizations authorized at law to represent their interests.

In the ordinary course of business, we transfer personal data from Europe and other jurisdictions to the United States or other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal data to other countries. In particular, the European Economic Area (EEA) and the United Kingdom (UK) have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it generally believes are inadequate. Other jurisdictions may adopt or have already adopted similarly stringent data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA standard contractual clauses, the UK’s International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers to relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA, the UK or other jurisdictions to the United States, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as Europe) at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business.

We use artificial intelligence, or AI, including generative AI, and machine learning, or ML, technologies in our product development activities and have incorporated AI/ML tools into our future product iterations, including SeizureID, the application for which is currently under review by the FDA. The development and use of AI/ML present various privacy and security risks that may impact our business. AI/ML are subject to privacy and data

security laws, as well as increasing regulation and scrutiny. Several jurisdictions around the globe, including Europe and certain U.S. states, have proposed, enacted, or are considering laws governing the development and use of AI/ML, such as the EU’s AI Act and Colorado’s AI Act. We expect other jurisdictions will adopt similar laws. Additionally, certain privacy laws extend rights to consumers (such as the right to delete certain personal data) and regulate automated decision making, which may be incompatible with our use of AI/ML. These obligations may make it harder for us to conduct our business using AI/ML, lead to regulatory fines or penalties, require us to change our business practices, retrain our AI/ML, or prevent or limit our use of AI/ML. For example, the Federal Trade Commission has required other companies to turn over (or disgorge) valuable insights or trainings generated through the use of AI/ML where they allege the company has violated privacy and consumer protection laws. If we cannot use AI/ML or that use is restricted, our business may be less efficient, or we may be at a competitive disadvantage.

We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. For example, certain privacy laws, such as the GDPR and the CCPA, require our customers to impose specific contractual restrictions on their service providers. We publish privacy policies, marketing materials, and other statements regarding data privacy and security. If these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators, or other adverse consequences. In addition to data privacy and security laws, we are contractually subject to industry standards adopted by industry groups and, we are or may become subject to such obligations in the future.

Obligations related to data privacy and security are quickly changing, becoming increasingly stringent, and creating regulatory uncertainty. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these obligations requires us to devote significant resources and may necessitate changes to our services, information technologies, systems, and practices and to those of any third parties that process personal information on our behalf.

We or the third parties with whom we work may at times fail (or be perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties with whom we work may fail to comply with such obligations, which could negatively impact our business operations. If we or the third parties with whom we work fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and/or oversight; bans on processing personal information; and orders to destroy or not use personal information. For example, one of our primary competitors has been subject to class action lawsuits and government investigations in connection with their alleged failure to comply with their privacy and security obligations. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; inability to process personal information or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

Disruptions in our information technology systems or data or those of third parties with whom we work, whether through breaches or failures of our systems, ransomware, unauthorized access or otherwise, may result in both an adverse impact to our products, as well as the unauthorized use, disclosure, modification or misappropriation of patient or other personal or sensitive information, the occurrence of fraudulent activity, or other information security-related incidents, all of which could result in adverse consequences, including but not limited to regulatory investigations or actions; litigation; fines and penalties; disruptions of our business operations;

reputational harm; loss of revenue or profits; loss of customers or sales; and other adverse consequences, which could have a material and adverse impact on our business, financial condition and results of operations.

We are dependent on complex information technology systems for the functioning of our business, including the manufacture, distribution and maintenance of our products, as well as for accounting, data storage, compliance, purchasing and inventory management purposes. We process and collect data about trial participants in connection with clinical trials and patient data, such as detailed recordings of iEEGs to help clinicians make more informed treatment decisions and optimize their patients’ care. These data are recorded by our RNS System and can be viewed by the physician during regular patient visits using the Physician Tablet or on demand through a secure website. Further, in addition to clinical trial and patient data, we and the third parties with whom we work process a growing volume of personal information and confidential, proprietary and sensitive information, which include procedure-based information and sensitive healthcare data, credit card and other financial information, and insurance information (collectively, sensitive information).

Cyber-attacks, malicious internet-based activity, online and offline fraud, and other similar activities threaten the confidentiality, integrity, and availability of our sensitive information and information technology systems, and those of the third parties with whom we work. Such threats are prevalent and continue to rise, are increasingly difficult to detect, and originate from a variety of sources, including traditional computer “hackers,” threat actors, “hacktivists,” organized criminal threat actors, cyber criminals, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors.

Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties with whom we work are vulnerable to a heightened risk of these attacks, including retaliatory cyber-attacks, that could materially disrupt our systems and operations, supply chain, and ability to produce, sell and distribute our services.

We and the third parties with whom we work are subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through deep fakes, which are increasingly more difficult to identify as fake, and phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), credential harvesting, personnel misconduct or error, ransomware attacks, supply-chain attacks, software and zero-day vulnerabilities, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunications failures, earthquakes, fires, floods, and other similar threats.

In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments.

Remote work has increased risks to our information technology systems and data, as our employees utilize network connections, computers and devices outside our premises or network, including working at home, while in transit and in public locations.

Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Furthermore, we may discover security issues that were not found during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program.

In addition, our reliance on third parties could introduce new cybersecurity risks and vulnerabilities, including supply-chain attacks, and other threats to our business operations.We rely on third parties and third-party technologies to operate critical business systems to process sensitive information in a variety of contexts, such as and without limitation, cloud-based infrastructure, data center facilities, encryption and authentication technology, employee email, content delivery to customers, and other functions. We also rely on third parties to provide other products, services, parts, or otherwise to operate our business. Our ability to monitor these third parties’ information

security practices is limited, and these third parties may not have adequate information security measures in place. If the third parties with whom we work experience a security incident or other interruption, we could experience adverse consequences. While we may be entitled to damages if these third parties fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award.In addition, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties’ infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised.

We expend resources or may have to modify our business activities (including our clinical trial activities) to try to protect against security incidents. Additionally, certain data privacy and security obligations require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive information.

While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. We take steps designed to detect, mitigate and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties with whom we work). We have not and may not in the future, however, detect and remediate all such vulnerabilities on a timely basis. Further, we have (and may in the future) experienced delays in deploying remedial measures designed to address any such identified vulnerabilities. Vulnerabilities could be exploited and result in a security incident.

Certain of the previously identified or similar threats may in the future cause a security incident or other interruption that may in the future result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to our sensitive information or our information technology systems, or those of the third parties with whom we work. For example, we have been the target of unsuccessful phishing attempts in the past and expect such attempts will continue in the future. A security incident or other interruption could disrupt our ability (and that of third parties with whom we work) to provide our services.

It may be difficult and/or costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems.

Applicable data privacy and security obligations require us, or we may voluntarily choose, to notify relevant stakeholders of certain security incidents, or to take other actions, such as providing credit monitoring and identity theft protection services. Such disclosures and related actions are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences.

If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, we may experience adverse consequences, such as government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal information); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security incidents and attendant consequences may cause customers to stop using our products and services, deter new customers from using our products and services, and negatively impact our ability to grow and operate our business.

Some of our contracts do not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We currently maintain a cybersecurity insurance policy and business interruption coverage to mitigate certain potential losses but this insurance is limited in amount, and we cannot be certain that such potential losses will not exceed our policy limits, or will cover all potential claims to which we are exposed and may not be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or

that such coverage will pay future claims. Therefore, failure to maintain or protect our information systems and data integrity effectively could harm our business, financial condition, and results of operations.

In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Additionally, sensitive information of the Company could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnel’s, or vendors’ use of generative AI technologies. Any sensitive information that we input into a third-party generative AI/ML platform could be leaked or disclosed to others, including if sensitive information is used to train the third parties’ AI/ML model. Additionally, where an AI/ML model ingests personal data and makes connections using such data, those technologies may reveal other sensitive information generated by the model. Moreover, AI/ML models may create flawed, incomplete, or inaccurate outputs, some of which may appear correct. This may happen if the inputs that the model relied on were inaccurate, incomplete or flawed (including if a bad actor “poisons” the AI/ML with bad inputs or logic), or if the logic of the AI/ML is flawed (a so-called “hallucination”). We may use AI/ML outputs to make certain decisions. Due to these potential inaccuracies or flaws, the model could be biased and could lead us to make decisions that could bias certain individuals (or classes of individuals), and adversely impact their rights, employment, and ability to obtain certain pricing, products, services, or benefits.

We face potential liability related to the privacy of health information we obtain.

After obtaining appropriate patient consents, we may maintain, use, and share sensitive health information that we receive directly from patients that use our products, throughout the clinical study process, in the course of our research collaborations, and from healthcare providers in the course of using our products and systems. Most healthcare providers, including hospitals from which we obtain patient health information, are subject to privacy and security regulations promulgated under HIPAA, as amended by the Health Information Technology for Economic and Clinical Health, or HITECH. We are not currently classified as a covered entity or business associate under HIPAA, and while we voluntarily implement safeguards in a manner consistent with HIPAA, we are not subject to its requirements or penalties. However, any person may be prosecuted under HIPAA’s criminal provisions either directly or under aiding-and-abetting or conspiracy principles. Consequently, depending on the facts and circumstances, we could face substantial criminal penalties if we knowingly receive, maintain, use, or transfer individually identifiable health information from a HIPAA-covered healthcare provider or research institution that has not satisfied HIPAA’s requirements for disclosure of individually identifiable health information. Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our operations or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information. As such, we may be subject to state laws requiring notification of affected individuals and state regulators in the event of a breach of personal information, including certain health information, which is a broader class of information than the health information protected by HIPAA.

Moreover, patients about whom we or our contractors or collaborators obtain or share health information, as well as the providers who share this information with us or whom we share this data with, may have statutory or contractual rights that limit our ability to use and disclose the information. We may be required to expend significant capital and other resources to ensure ongoing compliance with applicable privacy and data security laws. Claims that we have violated individuals’ privacy rights or breached our contractual obligations, even if we are not found liable, could be expensive and time consuming to defend and could result in adverse publicity that could negatively affect our business, financial condition and results of operations. If we or third-party contractors or consultants fail to comply with applicable federal, state or local regulatory requirements, we could be subject to a range of regulatory actions that could affect our or our contractors’ ability to develop and commercialize our products and could harm or prevent sales of our products, or could substantially increase the costs and expenses of developing, commercializing and marketing our products. Any threatened or actual government enforcement action could also generate adverse publicity and require that we devote substantial resources that could otherwise be used in other aspects of our business.

Additionally, data collection, privacy and security have become the subject of increasing public concern and changing preferences towards data collection, privacy and security could adversely affect patient willingness to

consent to our collection of their health information. Patients may be reluctant or unwilling to consent to the collecting of their health information, and patients that have opted-in to the collection of their health information may revoke their consent at any time, including as a result of these concerns or as a result of changes to our data policies that we have implemented or may implement in the future. In particular, the success of our business depends in part on our ability to lawfully obtain health information from our patients. If patients choose not to consent to the collection of their health information as a result of these concerns, or our consent practices are found to be unlawful, this could negatively impact the growth potential for our business.

Risks related to our intellectual property

If we are unable to obtain, maintain, protect, enforce and defend patent or other intellectual property protection for our products, or if the scope of the patent and other intellectual property protection obtained is not sufficiently broad, or as a result of our existing or any future out-licenses of our intellectual property, our competitors could develop and commercialize products similar to or competitive with our products, our ability to continue to commercialize our RNS System, or our other products, may be harmed.

As with other medical device companies, our success depends in large part on our ability to obtain, maintain, protect, enforce and defend a proprietary position for our products, which will depend upon our success in obtaining and maintaining effective patent and other intellectual property protection in the United States and other countries into which we may expand our business in the future that covers our RNS System and any other products, their manufacturing processes and their intended methods of use. Furthermore, our success will also depend on our ability to enforce and defend those patents, as well as our other intellectual property. In some cases, we may not be able to obtain patents covering our products which are sufficient to prevent third parties, such as our competitors, from utilizing our products, or our competitors may have rights under current or future out-licenses of our intellectual property, which could result in our competitors developing and commercializing products similar to or competitive with our products. Any failure to obtain, maintain, protect, enforce or defend patent and other intellectual property protection with respect to our RNS System or other aspects of our business could harm our business, competitive position, financial condition and results of operations.

Changes in either the patent laws or their interpretation in the United States and other countries may diminish our ability to protect our inventions, obtain, maintain, protect, enforce, and defend our intellectual property rights and, more generally, could affect the value of our intellectual property or narrow the scope of our patents. Additionally, we cannot predict whether the patent applications we are currently pursuing will issue as patents in any particular jurisdiction or whether the claims of any issued patents will provide sufficient protection from competitors or other third parties.

The patent prosecution process is expensive, time-consuming and complex, and we may not be able to file, prosecute, maintain, enforce or license all necessary or desirable patent applications at a reasonable cost or in a timely manner. It is also possible that we will fail to identify patentable aspects of our research and development output in time to obtain patent protection in one, several, or all geographies. Although we enter into non-disclosure and confidentiality agreements with parties who have access to confidential or patentable aspects of our research and development output, such as our employees, corporate collaborators, outside scientific collaborators, suppliers, consultants, advisors and other third parties, any of these parties may breach the agreements and disclose such output before a patent application is filed, thereby jeopardizing our ability to seek patent protection. In addition, our ability to obtain and maintain valid and enforceable patents depends on whether the differences between our inventions and the prior art allow our inventions to be patentable over the prior art. Furthermore, the publication of discoveries in scientific literature often lags behind the actual discoveries, and patent applications in the United States and other jurisdictions are typically not published until 18 months after filing, or in some cases not at all. As such, we cannot be certain that we were the first to make the inventions claimed in any of our patents or pending patent applications, or that we were the first to file for patent protection of such inventions. Moreover, in some circumstances, we may not have the right to control the preparation, filing and prosecution of patent applications, or to maintain the patents covering technology that we license from or license to third parties, including by way of our cross-license with Medtronic, and we are therefore reliant on our licensors or licensees. Therefore, these and any of our patents and patent applications may not be prosecuted and enforced in a manner consistent with the best interests of our business. Furthermore, our license agreements may be terminated by the licensor. Defects of form in the

preparation or filing of our patents or patent applications may exist, or may arise in the future, for example, with respect to proper priority claims, inventorship and the like, although we are unaware of any such defects that we believe are of importance. If we or any of our current or future licensors or licensees fail to obtain, maintain, protect, enforce or defend such patents and other intellectual property rights, such rights may be reduced or eliminated. If any of our current or future licensors or licensees are not fully cooperative or disagree with us as to the prosecution, maintenance or enforcement of any patent rights, such patent rights could be compromised. If there are material defects in the form, preparation or prosecution of our patents or patent applications, such patents or applications may be invalid and unenforceable. Any of these outcomes could impair our ability to prevent competition from third parties, which may harm our business.

The strength of patent rights generally, and particularly the patent position of medical device companies, involves complex legal and scientific questions, can be uncertain, and has been the subject of much litigation in recent years. This uncertainty includes changes to the patent laws through either legislative action to change statutory patent law or court action that may reinterpret existing law or rules in ways affecting the scope or validity of issued patents. Our current or future patent applications may fail to result in issued patents in the United States or foreign countries with claims that cover our products, including our RNS System. Even if patents do successfully issue from our patent applications, third parties may challenge the validity, enforceability or scope of such patents, which may result in such patents being narrowed, invalidated or held unenforceable. Any successful challenge to our patents could deprive us of exclusive rights necessary for the successful commercialization of our products, including our RNS System. Furthermore, even if they are unchallenged, our patents may not adequately protect our RNS System or any other products we develop, provide exclusivity for these products or prevent others from designing around our claims. If the scope of any patent protection we obtain is not sufficiently broad, or if we lose any of our patent protection, our ability to prevent our competitors from commercializing similar or identical products could be adversely affected. If the breadth or strength of protection provided by the patents we hold or pursue with respect to our products is challenged, it could dissuade companies from collaborating with us to develop, or threaten our ability to commercialize, our products.

Patents have a limited lifespan. In the United States, the natural expiration of a utility patent is generally 20 years after its effective filing date and the natural expiration of a design patent is generally 14 years after its issue date, unless the filing date occurred on or after May 13, 2015, in which case the natural expiration of a design patent is generally 15 years after its issue date. However, the actual protection afforded by a patent varies from country to country, and depends upon many factors, including the type of patent, the scope of its coverage, the availability of regulatory-related extensions, the availability of legal remedies in a particular country and the validity and enforceability of the patent. Various extensions may be available; however, the life of a patent, and the protection it affords, is limited. Without patent protection for our products, we may be open to competition. Further, if we encounter delays in our development efforts, the period of time during which we could market our products under patent protection would be reduced and, given the amount of time required for the development, testing and regulatory review of planned or future products, patents protecting such products might expire before or shortly after such products are commercialized. As our patents expire, the scope of our patent protection will be reduced, which may reduce or eliminate any competitive advantage afforded by our patent portfolio. As a result, our patent portfolio may not provide us with sufficient rights to exclude others from commercializing products similar or identical to ours.

Moreover, the coverage claimed in a patent application can be significantly reduced before the patent is issued, and its scope can be reinterpreted after issuance. Even if patent applications we license or own, currently or in the future, issue as patents, they may not issue in a form that will provide us with any meaningful protection, prevent competitors or other third parties from competing with us, or otherwise provide us with any competitive advantage. Any patents that we own may be challenged, narrowed, circumvented or invalidated by third parties. Consequently, we do not know whether our RNS System or our other products will be protectable or remain protected by valid and enforceable patents. Our competitors or other third parties may be able to circumvent our patents by developing similar or alternative products in a non-infringing manner, which could harm our business, financial condition and results of operations.

Some of our patents and patent applications may be co-owned or cross-licensed with third parties. If we give up, do not pursue, or are unable to obtain an exclusive license to any such third-party co-owners’ or licensee’s interest in

such patents or patent applications, such co-owners may be able to license their rights to other third parties, including our competitors, and our competitors could market competing products and technology. In addition, we may need the cooperation of any such co-owners of our patents in order to enforce such patents against third parties, and such cooperation may not be provided to us. Any of the foregoing could harm our business, financial condition and results of operations.

We may not be successful in obtaining necessary rights to any products or processes we may develop through acquisitions and in-licenses.

We may find it necessary or prudent to acquire or obtain licenses to intellectual property or proprietary rights held by third parties that we may identify as necessary or important to our business operations. However, we may be unable to acquire or secure such licenses to any or all intellectual property or proprietary rights from third parties that we identify as necessary for our RNS System or any future products we may develop. The acquisition or licensing of third-party intellectual property or proprietary rights is a competitive area, and our competitors may pursue strategies to acquire or license third-party intellectual property or proprietary rights that we may consider attractive or necessary. Our competitors may have a competitive advantage over us due to their size, capital resources and greater development and commercialization capabilities. In addition, companies that perceive us to be a competitor may be unwilling to assign or license rights to us. We also may be unable to acquire or license third-party intellectual property or proprietary rights on terms that would allow us to make an appropriate return on our investment or at all. If we are unable to successfully acquire or license required third-party intellectual property or proprietary rights or maintain the existing licenses to intellectual property rights we have, we may have to spend time and resources to develop intellectual property ourselves or abandon development of the relevant product, both of which could harm our business, financial condition and results of operations.

Patents covering our products, including our RNS System could be found invalid or unenforceable if challenged in court or before administrative bodies in the United States or abroad, which could harm our business, financial condition and results of operations.

The issuance of a patent is not conclusive as to its inventorship, scope, validity or enforceability, and our patents may be challenged in the courts or patent offices in the United States and abroad. We may be subject to a third-party preissuance submission of prior art to the U.S. Patent and Trademark Office, or the USPTO, or become involved in opposition, derivation, revocation, reexamination, post-grant and inter partes review, or IPR, or interference proceedings or other similar proceedings challenging our patent rights. An adverse determination in any such submission, proceeding or litigation could reduce the scope of, or invalidate or render unenforceable, such patent rights, allow third parties to commercialize our products and compete directly with us, without payment to us, or result in our inability to manufacture or commercialize products without infringing third-party patent rights. Moreover, we may have to participate in interference proceedings declared by the USPTO to determine priority of invention or in post-grant challenge proceedings, such as oppositions in a foreign patent office, that challenge our priority of invention or other features of patentability with respect to our patents and patent applications. Such challenges may result in loss of patent rights, in loss of exclusivity, or in patent claims being narrowed, invalidated or held unenforceable, which could limit our ability to stop others from using or commercializing similar or identical products or limit the duration of the patent protection of our products. Such proceedings also may result in substantial cost and require significant time from our management, even if the eventual outcome is favorable to us.

In addition, if we initiate legal proceedings against a third party to enforce a patent covering our products, the defendant could counterclaim that such patent is invalid or unenforceable. In patent litigation in the United States, defendant counterclaims alleging invalidity or unenforceability are commonplace. Grounds for a validity challenge could be an alleged failure to meet any of several statutory requirements, including lack of novelty, obviousness or non-enablement. Grounds for an unenforceability assertion could be an allegation that someone connected with prosecution of the patent withheld relevant information from the USPTO or made a misleading statement during prosecution. Defenses of these types of claims, regardless of their merit, would involve substantial litigation expense, would result in reputational harm, and would be a substantial diversion of employee resources from our business. Third parties may also raise claims challenging the validity or enforceability of our patents before administrative bodies in the United States or abroad, even outside the context of litigation, including through re-examination, post-grant review, IPR, interference proceedings, derivation proceedings and equivalent proceedings in

foreign jurisdictions (such as opposition proceedings). Such proceedings could result in the revocation of, cancellation of or amendment to our patents in such a way that they no longer cover our products. The outcome for any particular patent following legal assertions of invalidity and unenforceability is unpredictable. With respect to the validity question, for example, we cannot be certain that there is no invalidating prior art, of which we and the patent examiner were unaware during prosecution. If a defendant or other third party were to prevail on a legal assertion of invalidity or unenforceability, we would lose at least part, and perhaps all, of the patent protection for the patents raised in such a claim. Such a loss of patent protection would harm our business, financial condition and results of operations.

The medical device industry is characterized by patent litigation and in the future we could become subject to patent or other intellectual property litigation that could be costly, result in the diversion of management’s time and efforts, require us to pay damages or prevent us from marketing our existing or future products.

Patent litigation is prevalent in the medical device and diagnostic sectors. Our commercial success depends in part upon our ability and that of our suppliers to manufacture, market, sell, and use our proprietary products without infringing, misappropriating or otherwise violating the intellectual property or proprietary rights of third parties. We may in the future become party to, or be threatened with, adversarial proceedings or litigation regarding intellectual property rights with respect to our products. Additional third parties may assert infringement claims against us based on existing or future intellectual property rights, regardless of merit. If we are found to infringe a third party’s intellectual property rights, we could be required to incur costs to obtain a license from such third party to continue developing and marketing our products. We may also elect to enter into such a license in order to settle pending or threatened litigation. However, we may not be able to obtain any required license on commercially reasonable terms, or at all. Even if we were able to obtain a license, it could be non-exclusive, thereby giving our competitors access to the same technologies licensed to us, and could require us to pay significant royalties and other fees. We could be forced, including by court order, to cease commercializing the infringing product. In addition, we could be found liable for monetary damages, which may be significant. If we are found to have willfully infringed a third-party patent, we could be required to pay treble damages and attorneys’ fees. A finding of infringement could prevent us from commercializing our planned products in commercially important territories, or force us to cease some of our business operations, which could harm our business and cause brand and reputational harm. We could also be forced to redesign those products that contain the allegedly infringing intellectual property, which could be costly, disruptive and infeasible. Many of our employees were previously employed at, and many of our current advisors and consultants are employed by, universities or other biotechnology, medical device, healthcare, or pharmaceutical companies, including our competitors or potential competitors. Although we try to ensure that our employees, advisors and consultants do not use the proprietary information or know-how of others in their work for us, we may be subject to claims that we, or these employees, have used or disclosed intellectual property, including trade secrets or other proprietary information, of any such employee’s former employer. Furthermore, although these agreements may be difficult to enforce, we may in the future be subject to claims that these individuals are violating non-compete agreements with their former employers. These and other claims that we have misappropriated the confidential information or trade secrets of third parties can have a similar negative impact on our business to the infringement claims discussed above.

Even if we are successful in defending against intellectual property claims, litigation or other legal proceedings relating to such claims may cause us to incur significant expenses, cause reputational harm, and could distract our technical and management personnel from their normal responsibilities. If we fail in defending any such claims, in addition to paying monetary damages or other settlements, we may lose valuable intellectual property rights or personnel, which could harm our business, financial condition and results of operations. In addition, there could be public announcements of the results of hearings, motions or other interim proceedings or developments and if securities analysts or investors perceive these results to be negative, it could have a substantial negative impact on the price of our common shares. Such litigation or proceedings could substantially increase our operating losses and reduce our resources available for development activities. We may not have sufficient financial or other resources to adequately conduct such litigation or proceedings. Some of our competitors may be able to sustain the costs of such litigation or proceedings more effectively than we can because of their substantially greater financial resources. Uncertainties resulting from the initiation and continuation of litigation or other intellectual property related proceedings could harm our business, financial condition and results of operations.

Obtaining and maintaining our patent protection depends on compliance with various procedural, document submission, fee payment and other requirements imposed by government patent agencies, and our patent protection could be reduced or eliminated for non-compliance with these requirements.

Obtaining and maintaining our patent protection depends on compliance with various procedural measures, document submissions, fee payments and other requirements imposed by government patent agencies, and our patent protection could be reduced or eliminated for non-compliance with these requirements.

Periodic maintenance fees, renewal fees, annuity fees and various other government fees on patents and patent applications will be due to be paid to the USPTO and various government patent agencies outside of the United States over the lifetime of our patents and applications. The USPTO and various non-U.S. government agencies require compliance with several procedural, documentary, fee payment and other similar provisions during the patent application process. In some cases, an inadvertent lapse can be cured by payment of a late fee or by other means in accordance with the applicable rules. There are situations, however, in which non-compliance can result in the abandonment or lapse of the patent or patent application, resulting in a partial or complete loss of patent rights in the relevant jurisdiction. In such an event, potential competitors might be able to enter the market with similar or identical products or technology, which could harm our business, financial condition and results of operations.

Certain of our patents are, and our future owned and in-licensed patents may be, discovered through government funded programs and thus may subject to federal regulations such as “march-in” rights, certain reporting requirements and a preference for U.S.-based companies. Compliance with such regulations may limit our exclusive rights and limit our ability to contract with non-U.S. manufacturers.

NPCE US Equity

NPCE · 10-K · period ended 2025-12-31

Item 1A. Risk Factors.

NPCE US Equity☆

NPCE · 10-K · period ended 2025-12-31

Item 1A. Risk Factors.

NPCE US Equity