Risk Factors Dashboard
Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.
View risk factors by ticker
Search filings by term
Risk Factors - CDXS
-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing
ITEM 1A. RISK FACTORS
Key elements of our cybersecurity risk management program include but are not limited to the following elements. As of the date of this report, we are not aware of any risks from cybersecurity threats that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations and financial condition. Despite the implementation of our cybersecurity program, our security measures cannot guarantee that a cyberattack will not occur. A cyberattack on our information technology systems could have significant consequences to the business. A successful attack on our information technology systems could have significant consequences to the business. While we devote resources to our security measures to protect our systems and information, these measures cannot provide absolute security. See “Risk Factors – General Risk Factors” for additional information about the risks to our business associated with a breach or compromise to our information technology systems.
Senior management has appointed a Cybersecurity Council that is responsible for identifying, escalating, and facilitating the assessment and determination of the materiality of cybersecurity incidents and threats. The Cybersecurity Council is made up of representatives of IT, Legal and Finance, as well as ad hoc additional members depending on the circumstances of the incident or threat. The members of the Cybersecurity Council do not have specific expertise in cybersecurity risk other than the Vice President of Information Technology (“VP of IT”) who has more than 20 years of experience and engages with trusted third-party experts for support and guidance when additional expertise is required. The Company’s cybersecurity capability continues to utilize an external cybersecurity specialist with extensive experience managing cybersecurity functions, including overseeing cybersecurity strategy and operations, incident response, threat intelligence, security awareness training programs, risk assessments and remediation, and regulatory and compliance matters. This specialist has extensive experience managing cybersecurity functions in his prior external roles, where he was responsible for overseeing cybersecurity strategy and operations, including incident response, threat intelligence, security awareness training programs, risk assessments and remediation, and regulatory and compliance matters.
You should carefully consider the risks described below together with the other information set forth in this Annual Report on Form 10-K, which could materially affect our business, financial condition or future results. The risks described below are not the only risks facing our company. Risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially adversely affect our business, financial condition and/or operating results.
Risks Related to Our Business and Strategy
We have a history of net losses and we may not achieve or maintain profitability.
We have incurred net losses since our inception, including losses of $44.0 million, $65.3 million, and $76.2 million for the years ended December 31, 2025, 2024, and 2023, respectively. As of December 31, 2025, we had an accumulated deficit of $606.8 million. If we are unable to continue to successfully develop and commercialize products in our pharma biocatalysis business, increase sales of existing products and services, develop and commercialize our ECO Synthesis manufacturing platform, develop new products or services, or otherwise expand our business, whether through new or expanded collaborations or other products and services, our net losses may increase and we may never achieve profitability. If we are unable to continue to successfully develop and commercialize products in our pharma biocatalysis business, increase sales of existing products and services, develop and commercialize our ECO Synthesis manufacturing platform, and or develop new products or services, or otherwise expand our business, whether through new or expanded collaborations or other products and services, our net losses may increase and we may never achieve profitability. In addition, some of our agreements, including the agreements with GlaxoSmithKline plc (“GSK”), Merck Sharp & Dohme (“Merck”), Novartis Pharma AG (“Novartis”), Nestlé Health Science (“Nestlé”), Aldevron LLC, Roche Sequencing Solutions, Inc., Crosswalk Therapeutics and Alphazyme LLC, provide for milestone payments, usage payments, and/or future royalty or other payments, which we will only receive if we and/or our collaborators develop and commercialize products or achieve technical milestones. We also intend to continue to fund the development of additional proprietary performance enzyme products and advance new technologies like our ECO Synthesis manufacturing platform. There can be no assurance that any of these products or services will become commercially viable or that we will ever achieve profitability on a quarterly or annual basis. If we fail to achieve profitability, or if the time required to achieve profitability is longer than we anticipate, we may not be able to continue our business. Even if we do achieve profitability, we may not be able to sustain or increase profitability on a quarterly or annual basis.
Therapeutics development programs are highly regulated and expensive, and our enzyme products are complex and subject to quality control requirements. The ability of our customers, future customers or collaborators, including any company developing RNAi and other RNA-based therapeutics, to advance product candidates utilizing our products to clinical trials and to ultimately receive regulatory approvals is highly uncertain.
We develop enzyme products, including our ECO Synthesis manufacturing platform, that are used by our customers, and that may be used by our future customers or collaborators in connection with their biotherapeutic product candidates. The successful development of biotherapeutic candidates involves many risks and uncertainties, requires long timelines and may lead to uncertain results.
Our customers are subject to extensive regulations by the FDA and similar regulatory authorities in other countries for conducting clinical trials and commercializing products for therapeutic, vaccine or diagnostic use. These regulations result in our customers imposing quality requirements on us for the manufacture of our enzyme products through supplier qualification processes and customer contracts and specifications.
To market a biologic or drug product in the United States, our customers, future customers or collaborators must undergo the following process required by the FDA:
•completion of extensive preclinical laboratory tests and preclinical animal studies, certain of which must be performed in accordance with the FDA's Good Laboratory Practice requirements;
•submission to the FDA of an Investigational New Drug Application, which must become effective before human clinical studies may begin in the United States;
•approval by an independent institutional review board or ethics committee representing each clinical site before the clinical study may be initiated at the site;
•performance of adequate and well-controlled human clinical studies in accordance with Good Clinical Practice requirements to establish the safety, purity and potency (or efficacy) of the product candidate for each proposed indication;
•preparation of and submission to the FDA of a New Drug Application (“NDA”) or Biologics License Application (“BLA”) after completion of all clinical studies;
15
•potential review of the product candidate by an FDA advisory committee;
•satisfactory completion of an FDA pre-approval inspection of the manufacturing facilities where the product candidate is produced to assess compliance with current Good Manufacturing Practice (“cGMP”) requirements;
•FDA review and approval of a BLA or NDA prior to any commercial marketing or sale of the product in the United States; and
•any post-approval requirements, if applicable.
The regulatory approval processes of the FDA and comparable foreign authorities are lengthy, time consuming and the results are inherently unpredictable. If our customers, future customers or collaborators are ultimately unable to obtain regulatory approval for their biotherapeutic product candidates utilizing our enzyme products, our business may be harmed. In addition, if our customers, future customers or collaborators fail to comply with applicable FDA or other regulatory requirements at any time during the drug development process, clinical testing, the approval process or after approval, they may become subject to administrative or judicial penalties, including the FDA’s refusal to approve a pending application, withdrawal of an approval, warning letters, product recalls and additional enforcement actions, any of which may have an adverse effect on our financial condition.
We believe that our products are exempt from FDCA requirements, but FDA or other regulators may disagree and find that our products are subject to such requirements.
We believe our enzyme products are exempt from compliance with the FDCA and the FDA’s GMP implementing regulations, as our products are further processed and not incorporated into final drug or biologic products by our customers and as we do not make claims related to our products’ safety or effectiveness.We believe our enzyme products are exempt from compliance with the FDCA and the implementing GMP regulations of the FDA, as our products are further processed and incorporated into final drug or biologic products by our customers and we do not make claims related to their safety or effectiveness. Our products are currently manufactured following the voluntary quality standards of ISO 9001:2015, and we have collaborations with a number of CDMOs, and anticipate signing and announcing additional partnerships to provide enzymatically synthesized, GMP-grade siRNA to customers in the near term. Our products are currently manufactured following the voluntary quality standards of ISO 9001:2015, and we anticipate signing and announcing a partnership with a CDMO to provide enzymatically synthesized, GMP-grade siRNA to customers in the near term. Our collaboration with CDMOs may not come to fruition and, even if it does, may not scale up as anticipated. Our planned collaboration with a CDMO may not come to fruition and, even if it does, may not scale up as anticipated. Even if the scale up plans succeed, we or the CDMO may incur delays in production or have insufficient product for customers. And, in the event we, or our suppliers, produce products that fail to comply with voluntary quality standards or GMP standards imposed by customers, we may incur delays in fulfilling orders, write-downs or other losses, damages resulting from product liability claims and harm to our reputation.
In the future, our products could become subject to more onerous regulation, or the FDA could disagree with our assessment that our enzyme products are exempt from cGMP regulations. In addition, the FDA could conclude that the products we provide to our customers are actually subject to the pharmaceutical, drug or biologic quality-related regulations for manufacturing, processing, packing or holding of drugs, biologics, or finished pharmaceuticals, and could take enforcement action against us, including requiring us to stop distribution of our products until we are in compliance with applicable regulations, which would reduce our revenue, increase our costs and adversely affect our business, prospects, results of operations and financial condition.
We are dependent on a limited number of customers.
Although we continue to expand our customer base, our current revenues are derived from a limited number of key customers. For the years ended December 31, 2025 and 2024, customers that each individually contributed 10% or more of our total revenue accounted for 51% of our total revenues. We expect a limited number of customers to continue to account for a significant portion of our revenues for the foreseeable future. This customer concentration increases the risk of quarterly fluctuations in our revenues and operating results. The loss or reduction of business from one or a combination of our significant customers could materially adversely affect our revenues, financial condition and results of operations.
16
Some of our product supply agreements with customers, if in place, have finite duration, may not be extended or renewed and generally do not require the customer to purchase any particular quantity or quantities of our products.
Our product supply agreements with customers generally have a finite duration, may not be extended or renewed and generally do not require the customer to purchase any particular quantity or quantities of our products. Additionally, some customers order our products on a quote and purchase order basis under standard terms and conditions, with no guarantee of future orders. While our products are not considered commodities and may not be easily substituted for by our customers, particularly when our products are used in the manufacture of active pharmaceutical ingredients, our customers may nevertheless terminate or fail to renew their product supply agreements with us or significantly curtail their purchases thereunder under certain circumstances. We are working to develop new relationships with existing or new customers, but despite these efforts we may not, at the time that any of our existing product supply agreements expire or are terminated, or purchases thereunder curtailed, have other contracts in place generating similar or material revenue. Any such expiration, termination or reduction could materially adversely affect our revenues, financial condition and results of operations. For the year ended December 31, 2025, we derived a majority of our product revenue from these product supply agreements.
The demand for our products depends in part on our customers’ research and development and the clinical and market success of their products. Our business, financial condition, and results of operations may be harmed if our customers spend less on, or are less successful in, these activities. In addition, customer spending may be affected by, among other things, general market and economic conditions beyond our control.
Our customers are engaged in research, development, production, and marketing of pharmaceutical products and intermediates. The amount our customers spend on research, development, production, and marketing, as well as the outcomes of such research, development, and marketing activities, have a large impact on our sales and profitability, particularly the amount our customers choose to spend on our offerings. Available resources, the need to develop new products, and consolidation in the industries in which our customers operate may have an impact on such spending. Our customers and potential customers finance their research and development spending from private and public sources. A reduction in available financing for and spending by our customers, for these reasons or because of continued unstable or unpredictable economic and marketplace conditions, could have a material adverse effect on our business, financial condition, and results of operations. If our customers are not successful in attaining or retaining product sales due to market conditions, reimbursement issues, or other factors, our results of operations may be materially adversely affected.
If we are unable to develop and commercialize new products for the pharmaceutical and life science tools markets, our business and prospects will be harmed.If we are unable to develop and commercialize new products for the pharmaceutical, biotherapeutics, diagnostics and life science tools markets, our business and prospects will be harmed.
We plan to continue to innovate new technologies for use in the pharmaceutical and life science tools markets. These efforts are subject to numerous risks, including the following:
•customers in these markets may be reluctant to adopt new manufacturing processes that use our enzymes;
•we may be unable to successfully develop the enzymes or manufacturing processes for our products in a timely and cost-effective manner, if at all;
•we may face difficulties in transferring the developed technologies to our customers and the contract manufacturers that we may use for commercial scale production of intermediates and enzymes in these markets;
•the biotherapeutics products that use our tools may not receive regulatory approval or be commercially viable;
•the contract manufacturers that we may use may be unable to scale their manufacturing operations to meet the demand for these products and we may be unable to secure additional manufacturing capacity;
•customers may not be willing to purchase these products for these markets from us on favorable terms, if at all;
•we may face product liability litigation, unexpected safety or efficacy concerns and product recalls or withdrawals;
•our customers’ products may experience adverse events or face competition from new products, which would reduce demand for our products;
•we may face pressure from existing or new competitive products; and
•we may face pricing pressures from existing or new competitors, some of which may benefit from government subsidies or other incentives.
17
A reduction or delay in government funding of research and development for our customers may adversely affect our business.
A portion of our revenue is derived from customers whose funding is partially dependent on both the level and timing of funding from government sources, which funding can be difficult to forecast. Government funding of research and development is subject to the political process, which is inherently fluid and unpredictable. Our revenue may be adversely affected if our customers delay or limit purchases as a result of uncertainties surrounding the approval of government budget proposals, including reduced allocations to government agencies that fund research and development activities. If government proposals to reduce or eliminate budgetary deficits result in reduced allocations to government agencies that fund research and development activities, our results of operations may be materially adversely affected.
With respect to customers purchasing our products for use in manufacturing APIs for which they have exclusivity due to patent protection, the termination or expiration of such patent protection and any resulting generic competition may materially and adversely affect our revenues, financial condition or results of operations.With respect to customers purchasing our products for the manufacture of APIs for which they have exclusivity due to patent protection, the termination or expiration of such patent protection and any resulting generic competition may materially and adversely affect our revenues, financial condition or results of operations.
With respect to customers purchasing our products for the manufacture of API, or to lead to the manufacture of API, for which exclusivity due to patent protection has or is about to expire, we can expect that the quantity of our products sold to such customers for such products may decline as generic competition for the API increases.19With respect to customers purchasing our products for the manufacture of API, or lead to the manufacture of API, for which exclusivity due to patent protection has or is about to expire, we can expect that the quantity of our products sold to such customers for such products may decline as generic competition for the API increases. While we anticipate that we may, in some cases, also be able to sell products to these generic competitors for the manufacture of these APIs, or lead to the manufacture of these APIs, the overall effect on our revenues, financial condition and results of operations could be materially adverse.
The services and offerings we provide are highly complex, and if we encounter problems providing the services or support required, our business could suffer.
The offerings we provide are highly complex, due in part to strict regulatory requirements and the inherent nature of services we provide, including exacting manufacturing processes. A failure of our quality control systems in our facilities could cause problems in connection with facility operations for a variety of reasons, including equipment malfunction, viral contamination, failure to follow specific manufacturing instructions, protocols and standard operating procedures, problems with raw materials or environmental factors. In addition, any failure to meet required quality standards may result in our failure to timely deliver products to our customers which, in turn, could damage our reputation for quality and service. Any such incident could, among other things, lead to increased costs, lost revenue, reimbursement to customers for lost drug substances, damage to and possibly termination of customer relationships, time and expense spent investigating and remediating the cause and, depending on the cause, similar losses with respect to other manufacturing runs. In addition, such issues could subject us to litigation, the cost of which could be significant. These risks will be intensified in connection with the build-out of our Innovation Lab, through which we expect to continue scaling specific manufacturing processes of our customers’ specific therapeutic assets and, eventually, expect to manufacture GLP-grade RNAi therapeutic material in sufficient quantities to support customers’ preclinical development.
Any productivity issues or higher-than-expected costs at our facilities could result in material and adverse impacts on our financial condition and results of operations.
As we continue to scale up our manufacturing processes in connection with the completed build-out of our Innovation Lab and our anticipated partnership with a CDMO to provide enzymatically synthesized, GMP-grade siRNA to customers, we may face manufacturing capacity constraints or higher-than-expected costs at our facilities, including our Innovation Lab. There can be no assurance that revenue lost due to productivity issues or capacity constraints will be recovered on expected timeframes or at all. If we are unsuccessful in remedying any productivity issues at our facilities or those of our CDMO, if we are unable to recover revenue from unproduced batches when expected or at all, or if costs at our facilities are higher than expected, we may experience material and adverse impacts on our financial condition and results of operations.
We are dependent on a limited number of third-party contract manufacturers for large scale production of substantially all of our enzymes.
We manufacture our enzymes primarily in four locations: our in-house facility in Redwood City, California, and at three third-party contract manufacturing organizations (“CMOs”): Lactosan in Kapfenberg, Austria, ACS Dobfar S.p.A. (“ACSD”) (formerly known as DPhar S.p.A.) in Anagni, Italy, and Sekisui Diagnostics in Maidstone, United Kingdom. Generally, we perform smaller scale manufacturing in-house and outsource the larger scale manufacturing to these contract manufacturers. We have limited internal capacity to manufacture enzymes. As a result, we are dependent upon the performance and capacity of third-party manufacturers for the larger scale manufacturing of the enzymes used in our pharmaceutical and life sciences businesses.
18
Accordingly, we face risks of difficulties with, and interruptions in, performance by third-party manufacturers, the occurrence of which could adversely impact the availability, launch and/or sales of our enzymes in the future. Enzyme manufacturing capacity limitations at our third-party manufacturers and manufacturing delays could negatively affect our business, reputation, results of operations and financial condition. The failure of any contract manufacturer to supply us our required volumes of enzyme on a timely basis, or to manufacture our enzymes in compliance with our specifications or applicable quality requirements or in volumes sufficient to meet demand, would adversely affect our ability to sell pharmaceutical and complex chemicals products, could harm our relationships with our customers or collaborators and could negatively affect our revenues and operating results. We may be forced to secure alternative sources of supply, which may be unavailable on commercially acceptable terms, and could cause interruptions or delays in our ability to deliver products to our customers, increase our costs and decrease our profit margins. We may be forced to secure alternative sources of supply, which may be unavailable on commercially acceptable terms, and could cause delays in our ability to deliver products to our customers, increase our costs and decrease our profit margins.
We currently have supply agreements in place with Lactosan, ACSD and Sekisui. In the absence of a supply agreement, a contract manufacturer will be under no obligation to manufacture our enzymes and could elect to discontinue their manufacture at any time. If we require additional manufacturing capacity and are unable to obtain it in sufficient quantity, we may not be able to increase our product sales, or we may be required to make substantial capital investments to build that capacity or to contract with other manufacturers on terms that may be less favorable than the terms we currently have with our suppliers. If we choose to build our own additional manufacturing facility, it could take several years or longer before our facility is able to produce commercial volumes of our enzymes. Any resources we expend on acquiring or building internal manufacturing capabilities could be at the expense of other potentially more profitable opportunities. In addition, if we contract with other manufacturers, we may experience delays of several months in qualifying them, which could harm our relationships with our customers or collaborators and could negatively affect our revenues or operating results.
Furthermore, as we currently,and may in the future, rely on foreign CMOs, such foreign CMOs may be subject to U.S. legislation, sanctions, trade restrictions and other foreign regulatory requirements which could increase the cost or reduce the supply of material available to us, delay the procurement or supply of such material or have an adverse effect on our ability to secure significant commitments from governments to purchase our potential therapies. For example, the U.S. BIOSECURE Act, which was enacted in December 2025, prohibits federal agencies from procuring or using any biotechnology equipment or services from “biotechnology companies of concern”, or entering into, extending, or renewing any contracts with entities that use such biotechnology equipment or services from “biotechnology companies of concern”. Congress has interpreted a “biotechnology company of concern” as an entity that is under the control of a foreign adversary and that poses a risk to national security based on its research or multiomic data collection (e.g., collection of genomic information). While the U.S. BIOSECURE Act has a grandfathering period of five years for existing contracts, and has carveouts for manufacture of drugs for supply under Medicaid and Medicare Part B, subject to the Secretary of Veterans Affairs’ discretion, the impact of the U.S. BIOSECURE Act on the biotechnology industry is uncertain. This and similar laws could have the potential to restrict the ability of biopharmaceutical companies like us to purchase services or products from, or otherwise collaborate with, certain biotechnology companies “of concern” without losing the ability to contract with, or otherwise receive funding from, the U.S. government. It is possible some of our contractual counterparties could be impacted by this or future legislation.
We are dependent on our collaborators, and our failure to successfully manage these relationships could prevent us from developing and commercializing many of our products and achieving or sustaining profitability.
Our ability to maintain and manage collaborations in our markets is fundamental to the success of our business. We currently have license agreements, research and development agreements, supply agreements and/or distribution agreements with various collaborators. We may have limited or no control over the amount or timing of resources that any collaborator is able or willing to devote to our partnered products or collaborative efforts. Any of our collaborators may fail to perform its obligations. These collaborators may breach or terminate their agreements with us or otherwise fail to conduct their collaborative activities successfully and in a timely manner. Further, our collaborators may not develop products arising out of our collaborative arrangements or devote sufficient resources to the development, manufacture, marketing or sale of these products. If any of these events occur, especially if they occur in our collaborations with GSK, Merck or Novartis, or if we fail to maintain our agreements with our collaborators, we may not be able to commercialize our existing and potential products or grow our business or generate sufficient revenues to support our operations, we may not receive contemplated milestone payments and royalties under the collaboration, and we may be involved in litigation. Our collaboration opportunities could be harmed and our financial condition and results of operations could be negatively affected if:
•we or our collaborators do not achieve our research and development objectives under our collaboration agreements in a timely manner, or at all;
19
•we develop products and processes or enter into additional collaborations that conflict with the business objectives of our other collaborators;
•our collaborators and/or our contract manufacturers do not receive the required regulatory and other approvals necessary for the commercialization of the applicable product;
•we are unable to manage multiple simultaneous collaborations;
•our collaborators or licensees are unable or unwilling to implement or use the technology or products that we provide or license to them;
•our collaborators become competitors of ours or enter into agreements with our competitors;
•our collaborators become unable or less willing to expend their resources on research and development or commercialization efforts due to general market conditions, their financial condition or other circumstances beyond our control; or
•our collaborators experience business difficulties, which could eliminate or impair their ability to effectively perform under our agreements.
Even after collaboration relationships expire or terminate, some elements of the collaboration may survive. For instance, certain rights, licenses and obligations of each party with respect to intellectual property and program materials may survive the expiration or termination of the collaboration.
Finally, our business could be negatively affected if any of our collaborators or suppliers undergoes a change of control or were to otherwise assign the rights or obligations under any of our agreements.
We have invested significant resources to enable enzymatic nucleic acid synthesis, which is based on novel ideas and technologies that are largely unproven. Failure to validate performance at scale, demonstrate regulatory acceptance, or overcome other challenges with the new technologies could impede customer adoption and our revenues.
Our ECO Synthesis manufacturing platform is designed to enable the commercial-scale manufacture of RNAi and other RNA-based therapeutics through an enzymatic route. While we believe enzymatic nucleic acid synthesis will offer certain improvements over phosphoramidite chemistry, including with respect to required infrastructure investments, batch size limitations and waste disposal challenges, the enzymatic route is novel and has not yet been commercialized. As such, we may be faced with unforeseen results, delays and setbacks, in addition to the other foreseeable risks and uncertainties associated with the ongoing development of the ECO Synthesis manufacturing platform and other products.
Other challenges with a new technology such as our ECO Synthesis manufacturing platform include having an unknown and unproven development and regulatory path, uncertainty around the value that we can realize from the technology, uncertainty around the timeline for adoption of the technology by customers, and uncertainty around our ability to secure supply of necessary materials or to manufacture at GMP at scale and partner with customers on manufacturing and utilizing the technology. We may also be unable to achieve the expected benefits of the ECO Synthesis manufacturing platform in a timely manner, or at all.
There can be no assurance that these events we may experience in the future related to enzymatic synthesis will not cause significant delays or unanticipated costs, or that such development problems can be solved. Any delay or difficulties in developing and commercializing our ECO Synthesis manufacturing platform or any of our other current or future products could adversely affect our business and operations.
Competitors and potential competitors who have greater resources and experience than we do may develop products and technologies that make ours obsolete or may use their greater resources to gain market share at our expense.
The biocatalysis and performance enzyme industries and each of our target markets are characterized by rapid technological change. Our future success will depend on our ability to maintain a competitive position with respect to technological advances. In addition, as we enter new markets, we will face new competition and will need to adapt to competitive factors that may be different from those we face today.
20
We face competitive challenges related to our ECO Synthesis manufacturing platform. The current industry standard for manufacturing RNAi therapeutics is a well-established, chemical-based method, solid-phase oligonucleotide synthesis, utilizing phosphoramidite chemistry. The current industry standard for manufacturing RNAi therapeutics is a well-established, chemical-based method, SPOS, utilizing phosphoramidite chemistry. Primary competitors in this space include CDMOs, such as Agilent Technologies, which has made significant capital investment to expand their RNA manufacturing capabilities using phosphoramidite chemistry. In addition, CDMOs and large pharmaceutical companies are seeking to make incremental improvements to phosphoramidite chemistry, including the development of ligation-based approaches, liquid-phase synthesis, and solvent recycling. There are also multiple early-stage competitors who are pursuing fully enzymatic approaches to the manufacture of RNA, including EnPlusOne Biosciences, a private startup company, and a UK-based consortium led by CPI and consisting of multiple academic and research organizations, including The University of Manchester and large pharmaceutical companies, including AstraZeneca plc and Novartis.
We are aware that other companies, including Ginkgo Bioworks, BRAIN Biotech AG, and Enzymicals AG, have alternative methods for obtaining and generating genetic diversity or use mutagenesis techniques to produce genetic diversity. We are aware that other companies, including Ginkgo Bioworks, BRAIN, and Enzymicals AG, have alternative methods for obtaining and generating genetic diversity or use mutagenesis techniques to produce genetic diversity. Some companies, including Biomatter Designs, Arzeda Corp., and Enzymaster, leverage predictive computational algorithms to guide enzyme engineering efforts. In addition, academic institutions such as the California Institute of Technology, University of Washington, University of Manchester, and the Austrian Centre of Industrial Biotechnology are also working in this field. Technological development by others may result in our technology, products and services, as well as products developed by our customers using our biocatalysts, becoming obsolete.
Our primary competitors in the performance enzymes for the pharmaceutical products markets include (i) companies marketing either conventional, non-enzymatic processes or biocatalytic enzymes; (ii) manufacturers of pharmaceutical intermediates and APIs; and (iii) existing in-house technologies (both biocatalysts and conventional catalysts) within our client and potential client companies. The principal methods of competition and competitive differentiation in this market are price, product quality and performance, including manufacturing yield, safety and environmental benefits, and speed of delivery of product. Pharmaceutical manufacturers that use biocatalytic processes can face increased competition from manufacturers that use more conventional processes and/or manufacturers that are based in regions (such as India and China) with lower regulatory, safety and environmental costs.
The market for the manufacture and supply of APIs and intermediates is large with many established companies. These companies include many of our large innovator and generic pharmaceutical customers, such as Merck, GSK, Novartis, Pfizer Inc. These companies include many of our large innovator and generic pharmaceutical customers, such as Merck, GSK, Novartis, Pfizer, Bristol-Myers, Kyorin, Urovant, and Teva which have significant internal research and development efforts directed at developing processes to manufacture APIs and intermediates. , Bristol-Myers Squibb, Kyorin Pharmaceutical Corporation, and Teva Pharmaceuticals, which have significant internal research and development efforts directed at developing processes to manufacture APIs and intermediates. The processes used by these companies include classical conventional organic chemistry reactions, chemo catalytic reactions, biocatalytic reactions or combinations thereof. Our biocatalytic based manufacturing processes must compete with these internally developed routes. Additionally, we also face competition from companies developing and marketing conventional catalysts such as Solvias Inc., BASF and Takasago International Corporation.
The market for supplying enzymes is fragmented.22The market for supplying enzymes for use in pharma biocatalysis is fragmented. There is competition from large industrial enzyme companies, such as Novozymes and DuPont, as well as subsidiaries of larger contract research/CMOs, such as DSM-Firmenich AG, Cambrex Corporation, Lonza Group, WuXi STA and Almac Group Ltd. There is competition from large industrial enzyme companies, such as Novozymes and DuPont, as well as subsidiaries of larger contract research/contract manufacturing organizations, such as DSM, Cambrex Corporation, Lonza, WuXi STA and Almac Group Ltd. Some fermentation pathway design companies, like Ginkgo Bioworks, whose traditional focus has been to design microorganisms that express small molecule chemicals, could extend into designing organisms that express enzymes. Some fermentation pathway design companies, like Ginkgo Bioworks (who recently acquired Zymergen), whose traditional focus has been to design microorganisms that express small molecule chemicals, could extend into designing organisms that express enzymes. There is also competition in the enzyme customization and optimization area from several smaller companies, such as BRAIN Biotech AG, Arzeda Corp., and c-LEcta GmbH.
Our ability to compete successfully in any of these markets will depend on our ability to develop proprietary products that reach the market in a timely manner and are technologically superior to and/or are less expensive than other products on the market. Many of our competitors have substantially greater production, financial, research and development, personnel and marketing resources than we do. They also started developing products earlier than we did, which may allow them to establish blocking intellectual property positions or bring products to market before we can. In addition, certain of our competitors may also benefit from local government subsidies and other incentives that are not available to us. As a result, our competitors may be able to develop competing and/or superior technologies and processes, compete more aggressively and sustain that competition over a longer period of time than we could. As a result, our competitors may be able to develop competing and/or superior technologies and processes and compete more aggressively and sustain that competition over a longer period of time than we could. Our technologies and products may be rendered obsolete or uneconomical by technological advances or entirely different approaches developed by one or more of our competitors. We cannot be certain that any products we develop in the future will compare favorably to products offered by our competitors or that our existing or future products will compare favorably to any new products that are developed by our competitors. As more companies develop new intellectual property in our markets, the possibility of a competitor acquiring patent or other rights that may limit our products or potential products increases, and could additionally lead to litigation.
21
Our limited resources relative to many of our competitors may cause us to fail to anticipate or respond adequately to new developments and other competitive pressures. This failure could reduce our competitiveness and market share, adversely affect our results of operations and financial position, and prevent us from obtaining or maintaining profitability.
Ethical, legal and social concerns about genetically engineered products and processes could limit or prevent the use of our technology, products and processes and limit our revenues.
Some of our technology, products and services, such as our ECO Synthesis manufacturing platform, are genetically engineered or involve the use of genetically engineered products or genetic engineering technologies. If we and/or our collaborators are not able to overcome the ethical, legal, and social concerns relating to genetic engineering, our technology, products and services may not be accepted. Any of the risks discussed below could result in increased expenses, delays, or other impediments to our programs or the public acceptance and commercialization of products and processes dependent on our technologies or inventions. Our ability to develop and commercialize one or more of our technologies, products, or processes could be limited by the following factors:
•public attitudes about the safety and environmental hazards of, and ethical concerns over, genetic research and genetically engineered products and processes, which could influence public acceptance of our technologies, products and processes;
•public attitudes regarding, and potential changes to laws governing ownership of, genetic material, which could harm our intellectual property rights with respect to our genetic material and/or discourage collaborators from supporting, developing, or commercializing our technology, products and services; and
•governmental reaction to negative publicity concerning genetically modified organisms, which could result in greater government regulation of genetic research and derivative products.
The subject of genetically modified organisms has received negative publicity, which has aroused public debate. This adverse publicity could lead to greater regulation and trade restrictions on imports of genetically altered products. The biocatalysts that we develop have significantly enhanced characteristics compared to those found in naturally occurring enzymes or microbes. While we produce our biocatalysts only for use in a controlled industrial environment, the release of such biocatalysts into uncontrolled environments could have unintended consequences. Any adverse effect resulting from such a release could have a material adverse effect on our business and financial condition, damage our reputation, and/or expose us to liability for any resulting harm.
As a result of our refined focus on certain programs and business lines, we may fail to capitalize on other opportunities that may be more profitable or for which there is a greater likelihood of success.
Because we have limited financial and managerial resources, we have recently focused our efforts on developing certain programs and business lines. As a result, we may forego or delay pursuit of business opportunities that later prove to have greater commercial potential. Further our resource allocation decisions may cause us to fail to capitalize on viable commercial products or profitable market opportunities. In addition, our spending on current and future research and development programs, such as our ECO Synthesis manufacturing platform, may not yield any commercially viable products. In addition, our spending on current and future research and development programs, such as ECO Synthesis manufacturing platform that is in development, may not yield any commercially viable products. If we do not accurately evaluate the commercial potential or target market for a particular program or business line, our business and results of operations could be harmed.
We may receive limited revenue or no future value from certain of our existing license agreements.
While we have historically invested significant time and financial resources in the development of biotherapeutics assets, we have terminated investment in our biotherapeutics business and in other programs. As a result, it remains uncertain as to whether we will receive any value or benefit from these license agreements going forward.
22
The timing of our customer orders and related product revenue recognition is unpredictable and may cause our operating results to vary significantly from quarter to quarter, which could adversely affect our stock price.
A majority of our product revenue is derived from purchase orders or supply agreements and is recognized either at a point in time when the control of the product has been transferred to the customer or over time as the product is manufactured. The occurrence and timing of any transfer of control of product sold to our customers can be difficult to predict, and the recognition of revenue can vary widely depending on timing of product deliveries and satisfaction of other obligations. Product orders during any given period may be concentrated in relatively few contracts, intensifying the amplitude and irregularity of our revenue streams from quarter to quarter. In addition, the timing of contract or order commencements and completions may exacerbate the uneven pattern. Moreover, our revenue or operating expenses in one period may be disproportionately higher or lower relative to the others due to, among other factors, revenue fluctuations or increases in expenses as we invest in key technology development projects and improvements, develop and commercialize new and existing products and expand our business development and collaboration with new customers. If such fluctuations occur or if our operating results deviate from our expectations or the expectations of investors or securities analysts, our stock price could be adversely affected.
We use hazardous materials in our business, and we must comply with environmental laws and regulations. Any claims relating to improper handling, storage or disposal of these materials or noncompliance of applicable laws and regulations could be time consuming and costly and could adversely affect our business and results of operations.
Our research and development, manufacturing, and commercial processes involve the use of hazardous materials, including chemical, radioactive and biological materials, such as acetonitrile, which is used in some of our purification processes. Our operations also produce hazardous waste. We cannot eliminate entirely the risk of accidental contamination or discharge and any resultant injury from these materials. Federal, state, local and foreign laws and regulations govern the use, manufacture, storage, handling and disposal of, and human exposure to, these materials. We may face liability for any injury or contamination that results from our use or the use by third parties of these materials, and our liability may exceed our total assets. Although we believe that our activities comply in all material respects with environmental laws, there can be no assurance that violations of environmental, health and safety laws will not occur in the future as a result of human error, accident, equipment failure or other causes. Compliance with applicable environmental laws and regulations may be expensive, and the failure to comply with past, present or future laws could result in the imposition of fines, third party property damage, product liability and personal injury claims, investigation and remediation costs, the suspension of production or a cessation of operations, and our liability may exceed our total assets. Liability under environmental laws can be joint and several and without regard to comparative fault. Environmental laws could become more stringent over time imposing greater compliance costs and increasing risks and penalties associated with violations, which could impair our research, development or production efforts and harm our business. In addition, we may be required to indemnify some of our customers or suppliers for losses related to our failure to comply with environmental laws, which could expose us to significant liabilities.
Our ability to use our net operating loss carryforwards to offset future taxable income may be subject to certain limitations.
In general, under Section 382 of the Internal Revenue Code of 1986, as amended (the “Code”), a corporation that undergoes an “ownership change” is subject to limitations on its ability to utilize its pre-change net operating loss carryforwards (“NOLs”), to offset future taxable income. If the Internal Revenue Service challenges our analysis that our existing NOLs are not subject to limitations arising from previous ownership changes, our ability to utilize NOLs could be limited by Section 382 of the Code. Future changes in our stock ownership, some of which are outside of our control, could result in an ownership change under Section 382 of the Code. Furthermore, our ability to utilize NOLs of companies that we may acquire in the future may be subject to limitations. For these reasons, we may not be able to utilize a material portion of the NOLs reflected in our financial statements, even if we attain profitability.
23
As a public reporting company, we are subject to rules and regulations established from time to time by the SEC and Nasdaq regarding our internal controls over financial reporting. We may not complete needed improvements to our internal controls over financial reporting in a timely manner, or these internal controls may not be determined to be effective, which may adversely affect investor confidence in our company and, as a result, the value of our common stock and your investment.
We are subject to the rules and regulations established from time to time by the SEC and Nasdaq. These rules and regulations require, among other things, that we establish and periodically evaluate procedures with respect to our internal controls over financial reporting. As part of these evaluations, material weaknesses in our internal controls over financial reporting may be identified. A material weakness is a deficiency, or a combination of deficiencies, in internal controls over financial reporting such that there is a reasonable possibility that a material misstatement of a company’s annual or interim consolidated financial statements will not be prevented or detected on a timely basis. While we were able to remediate previously identified material weaknesses in our internal controls over financial reporting, there can be no guarantee we will not identify similar or other material weaknesses in the future and if such material weaknesses are identified, there can be no guarantee we would be able to remediate such material weaknesses. Any material weaknesses in our internal controls may adversely affect our ability to record, process, summarize and accurately report timely financial information and, as a result, our consolidated financial statements may contain material misstatements or omissions.
Reporting obligations as a public company place a considerable strain on our financial and management systems, processes and controls, as well as on our personnel. In addition, as a public company we are required to document and test our internal controls over financial reporting pursuant to Section 404 of the Sarbanes-Oxley Act so that our management can certify as to the effectiveness of our internal controls over financial reporting. While we currently qualify as a non-accelerated filer and smaller reporting company under the SEC rules, we are not required to include an attestation report on the effectiveness of our internal control over financial reporting from our independent registered public accounting firm. For any fiscal year in which we become an accelerated filer or large accelerated filer, our independent registered public accounting firm would be required to provide such an attestation report in our Annual Report on Form 10-K. If our management is unable to certify the effectiveness of our internal controls or if our independent registered public accounting firm cannot deliver a report attesting to the effectiveness of our internal controls over financial reporting, or if we identify or fail to remediate material weaknesses in our internal controls, we could be subject to regulatory scrutiny and a loss of public confidence, which could seriously harm our reputation and the market price of our common stock. In addition, if we do not maintain adequate financial and management personnel, processes and controls, we may not be able to manage our business effectively or accurately report our financial performance on a timely basis, which could cause a decline in our common stock price and may seriously harm our business.
We may need additional capital in the future in order to expand our business.
Our future capital requirements may be substantial, particularly as we continue to develop our business. Although we believe that, based on our current level of operations, our existing cash, cash equivalents and equity securities will provide adequate funds for planned ongoing operations, capital expenditures and working capital requirements for at least the next 12 months, we may need additional capital if our current plans and assumptions change. Our need for additional capital will depend on many factors, including the financial success of our performance enzyme business, our spending to develop and commercialize new and existing enzyme products and the amount of collaboration funding we may receive to help cover the cost of such expenditures, the effect of any acquisitions of other businesses, technologies or facilities that we may make or develop in the future, our spending on new market opportunities, including the ongoing commercialization of our ECO Synthesis manufacturing platform, scaling the ECO Synthesis manufacturing platform to GMP capability, and the filing, prosecution, enforcement and defense of patent claims. If our capital resources are insufficient to meet our capital requirements, and we are unable to enter into or maintain collaborations with partners that are able or willing to fund our development efforts or commercialize any enzyme products that we develop or enable, we will have to raise additional funds to continue the development of our technology and products and complete the commercialization of products, if any, resulting from our technologies.
24
In addition, we may choose to raise additional capital due to market conditions or strategic considerations, such as funding the ongoing commercialization of our ECO Synthesis manufacturing platform and a GMP manufacturing facility, even if we believe we have sufficient funds for our current or future operating plans. We may seek to obtain such additional capital through equity offerings, including pursuant to our Controlled Equity Offering℠ Sales Agreement (the “Cantor Sales Agreement”) with Cantor Fitzgerald & Co., as sales agent (“Cantor”), debt financings, credit facilities and/or strategic collaborations. If future financings involve the issuance of equity securities, our existing stockholders would suffer dilution. In addition, under our Loan Agreement with Innovatus, we are subject to restrictive covenants that limit our ability to conduct our business and could be subject to additional covenants to the extent we seek other debt financing in the future. Strategic collaborations may also place restrictions on our business. We may not be able to raise sufficient additional funds on terms that are favorable to us, if at all. If we fail to raise sufficient funds and fail to generate sufficient revenues to achieve planned gross margins and to control operating costs, our ability to fund our operations, take advantage of strategic opportunities, develop products or technologies, or otherwise respond to competitive pressures could be significantly limited. If this happens, we may be forced to delay or terminate research or development programs or the commercialization of products resulting from our technologies, curtail or cease operations or obtain funds through collaborative and licensing arrangements that may require us to relinquish commercial rights, or grant licenses on terms that are not favorable to us. If adequate funds are not available, we will not be able to successfully execute our business plan or continue our business.
Covenants and other provisions in our Loan Agreement with Innovatus restrict our business and operations in many ways, and if we do not effectively manage our covenants, our financial conditions and results of operations could be adversely affected. In addition, our operations may not provide sufficient cash to meet the repayment obligations of our debt incurred under the Loan Agreement.
Pursuant to the Loan Agreement, Innovatus has been granted a security interest in substantially all of our assets. If an event of default occurs under the Loan Agreement, Innovatus may foreclose on its security interest and liquidate some or all of these assets, which would harm our business, financial condition and results of operations.
In the event of a default in connection with our bankruptcy, insolvency, liquidation, or reorganization, Innovatus would have a prior right to substantially all of our assets to the exclusion of our general unsecured creditors. Only after satisfying the claims of Innovatus and any unsecured creditors would any amount be available for our equity holders.
The pledge of these assets and other restrictions imposed in the Loan Agreement may limit our flexibility in raising capital for other purposes. Because substantially all of our assets are pledged to secure the Loan Agreement obligations, our ability to incur additional indebtedness or to sell or dispose of assets to raise capital may be impaired, which could have an adverse effect on our financial flexibility.
In addition, if we are unable to comply with certain financial and operating restrictions in the Loan Agreement, we may be limited in our business activities and access to credit or may default under the Loan Agreement. Provisions in the Loan Agreement impose restrictions or require prior approval on our ability, and the ability of certain of our subsidiaries to, among other things:
•sell, lease or transfer certain parts of our business or property, including equity interests of our subsidiaries;
•engage in new lines of business;
•acquire new companies and merge or consolidate;
•incur additional debt or guarantee the indebtedness of others or our subsidiaries;
•create liens or encumbrances;
•pay cash dividends and make distributions or redeem or repurchase our capital stock;
•make certain investments;
•enter into transactions with affiliates; and
•terminate or, in certain cases, amend our material agreements.
25
The Loan Agreement also contains other customary covenants. We may not be able to comply with these covenants in the future. Our failure to comply with these covenants may result in the declaration of an event of default, which, if not cured or waived, may result in the acceleration of the maturity of indebtedness outstanding under the Loan Agreement and would require us to pay all amounts outstanding. If the maturity of our indebtedness is accelerated, we may not have sufficient funds then available for repayment or we may not have the ability to borrow or obtain sufficient funds to replace the accelerated indebtedness on terms acceptable to us or at all. Our failure to repay our obligations under the Loan Agreement could result in Innovatus foreclosing on all or a portion of our assets, which could force us to curtail or cease our operations.
If we engage in any acquisitions, we will incur a variety of costs and may potentially face numerous risks that could adversely affect our business and operations.
We have made acquisitions in the past, and if appropriate opportunities become available, we may acquire additional businesses, assets, technologies, or products to enhance our business in the future.We have made acquisitions in the past, and if appropriate opportunities become available, we expect to acquire additional businesses, assets, technologies, or products to enhance our business in the future.
In connection with any future acquisitions, we could:
•issue additional equity securities, which would dilute our current stockholders;
•incur substantial debt to fund the acquisitions;
•use our cash to fund the acquisitions; or
•assume significant liabilities including litigation risk.
Acquisitions involve numerous risks, including problems integrating the purchased operations, technologies or products, unanticipated costs and other liabilities, diversion of management’s attention from our core businesses, adverse effects on existing business relationships with current and/or prospective collaborators, customers and/or suppliers, risks associated with entering markets in which we have no or limited prior experience and potential loss of key employees. We do not have extensive experience in managing the integration process and we may not be able to successfully integrate any businesses, assets, products, technologies or personnel that we might acquire in the future without a significant expenditure of operating, financial and management resources, if at all. The integration process could divert management’s time from focusing on operating our business, result in a decline in employee morale and cause retention issues to arise from changes in compensation, reporting relationships, future prospects or the direction of the business. Acquisitions may also require us to record goodwill and non-amortizable intangible assets that will be subject to impairment testing on a regular basis and potential periodic impairment charges, incur amortization expenses related to certain intangible assets, and incur large and immediate write offs and restructuring and other related expenses, all of which could harm our operating results and financial condition. In addition, we may acquire companies that have insufficient internal financial controls, which could impair our ability to integrate the acquired company and adversely impact our financial reporting. If we fail in our integration efforts with respect to any of our acquisitions and are unable to efficiently operate as a combined organization, our business and financial condition may be adversely affected.
26
Risks Related to Government Regulation
Even if our customers, future customers or collaborators obtain regulatory approval for any products utilizing our enzymes, such products will remain subject to ongoing regulatory requirements, which may result in significant additional expense.
Our future revenues will depend, in part, on the ability of our customers to obtain and maintain regulatory approvals for therapeutic products utilizing our biocatalysts and other products. Any product that receives FDA approval will remain subject to ongoing regulatory requirements for manufacturing, labeling, packaging, distribution, storage, advertising, promotion, sampling, record-keeping and submission of safety and other post-market information, among other things. Any regulatory approvals received for such products may also be subject to limitations on the approved indicated uses for which they may be marketed or to the conditions of approval, or contain requirements for potentially costly post-marketing testing and surveillance studies. For example, the holder of an approved NDA or BLA in the United States is obligated to monitor and report adverse events and any failure of a product to meet the specifications in the NDA or BLA. In the United States, the holder of an approved NDA or BLA must also submit new or supplemental applications and obtain FDA approval for certain changes to the approved product, product labeling or manufacturing process. Similar provisions apply in the European Union (the “EU”). Advertising and promotional materials must comply with FDA rules and are subject to FDA review, in addition to other potentially applicable federal and state laws. Similarly, in the EU any promotion of medicinal products is highly regulated and, depending on the specific jurisdiction involved, may require prior vetting by the competent national regulatory authority. In addition, product manufacturers and their facilities are subject to payment of user fees and continual review and periodic inspections by the FDA and other regulatory authorities for compliance with cGMP requirements and adherence to commitments made in the NDA, BLA or foreign marketing application.
If our customers, future customers or our collaborators or a regulatory agency discovers previously unknown problems with a product such as adverse events of unanticipated severity or frequency or problems with the facility where the product is manufactured or disagrees with the promotion, marketing or labeling of that product, a regulatory agency may impose restrictions relative to that product, the manufacturing facility or our customers or collaborators, including requiring recall or withdrawal of the product from the market or suspension of manufacturing.
In addition, if our customers or collaborators fail to comply with applicable regulatory requirements, the FDA and other regulatory authorities may:
•issue an untitled letter or a warning letter asserting a violation of the law;
•seek an injunction, impose civil or criminal penalties, and impose monetary fines, restitution or disgorgement of profits or revenues;
•suspend or withdraw regulatory approval;
•issue safety alerts, Dear Healthcare Provider letters, press releases or other communications containing warnings or other safety information about the product;
•mandate modification of promotional materials and labeling and issuance of corrective information;
•issue consent decrees or corporate integrity agreements, or debar or exclude from federal healthcare programs;
•suspend or terminate any ongoing clinical trials or implement requirements to conduct post-marketing studies or clinical trials;
•refuse to approve a pending NDA, BLA or comparable foreign marketing application (or any supplements thereto);
•restrict the labeling, marketing, distribution, use or manufacturing of products;
•seize or detain products or otherwise require the withdrawal or recall of products from the market;
•refuse to approve pending applications or supplements to approved applications;
•refuse to permit the import or export of products; or
•refuse government contracts.
27
Any government investigation of alleged violations of law could require us to expend significant time and resources in response and could generate negative publicity. The occurrence of any event or penalty described above may also inhibit our customers or collaborators’ ability to commercialize products and our ability to generate revenues.
In addition, the FDA’s policies, and policies of foreign regulatory agencies, may change, including due to judicial challenges, and additional regulations may be enacted that could prevent, limit or delay regulatory approval of product candidates. We cannot predict the likelihood, nature or extent of government regulation that may arise from future legislation or administrative or executive action, either in the United States or abroad. If we are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are not able to maintain regulatory compliance, we may be subject to enforcement action and we may not achieve or sustain profitability.
If we or our customers fail to comply with certain healthcare laws, including fraud and abuse laws, we could face substantial penalties and our business, results of operations, financial condition and prospects could be adversely affected.
The healthcare industry is highly regulated. We, and our customers, are subject to various local, state, federal, national, and international laws and regulations, which include laws and regulations promulgated by the FDA, HHS, state boards of pharmacy, state health departments, and similar regulatory bodies in other countries. Additionally, our business operations and future arrangements with investigators, healthcare professionals, and consultants, among others, may expose us and our customers to broadly applicable fraud and abuse and other healthcare laws and regulations, including, without limitation, the federal Anti-Kickback Statute, the federal civil False Claims Act, the federal Civil Monetary Penalties Law, and analogous state laws. These laws may constrain the business or financial arrangements and relationships through which we will conduct our operations. Because of the breadth of these laws and narrowness of available statutory and regulatory exceptions, it is possible that some of our business activities could be regulated by or subject to challenge under one or more of such laws. We cannot ensure that our compliance controls, policies, and procedures will in every instance protect us from acts of our employees, agents, contractors, or collaborators that turn out to violate any of the laws described above. If we or our operations are found to be in violation of any of the laws described above or any other governmental regulations that apply to us, we may be subject to penalties, including civil and criminal penalties, damages, fines, imprisonment and the curtailment or restructuring of our operations, any of which could materially adversely affect our ability to operate our business and our financial results.
Ongoing healthcare legislative and regulatory reform measures may have a material adverse effect on our business and results of operations.
In the United States, there have been, and we expect there will continue to be, a number of legislative, regulatory, and administrative initiatives to contain healthcare costs. Some of these initiatives, such as ongoing healthcare reform, including with respect to reforming drug pricing, adverse changes in governmental or private funding of healthcare products and services, legislation or regulations governing patient access to care, and the delivery, coverage, pricing, and reimbursement of pharmaceuticals and healthcare services may cause our customers to change the amount of our offerings that they purchase from us or the price they are willing to pay us for these offerings. The timing of legislative, regulatory or executive action related to future healthcare reforms, if any, remains uncertain. The timing of legislative, regulatory or executive action related to future healthcare reforms, if any, remains uncertain, results of the 2024 US Presidential and Congressional elections, and potential subsequent developments, increase the uncertainty related to healthcare regulatory environment. If cost-containment efforts or other healthcare reform measures limit our customers’ profitability, they may decrease research and development spending, which could decrease the demand for our products and services and materially adversely affect our growth prospects. Any of these factors could harm our customers’ businesses, which, in turn, could materially adversely affect our business, financial condition, results of operations, cash flows, and prospects.
We cannot predict the likelihood, nature, or extent of other health reform initiatives that may arise from future legislative, administrative, or other action. Any substantial revision of applicable healthcare legislation or regulation could have a material adverse effect on the demand for our customers’ products, which in turn could have a negative impact on our results of operations, financial condition, or business. Changes in the healthcare industry’s pricing, selling, inventory, distribution, or supply policies or practices, or in public or government sentiment for the industry as a whole, could also significantly reduce our revenue and results of operations.
28
Compliance with European Union chemical regulations could be costly and adversely affect our business and results of operations.
Some of our products are subject to the EU regulatory regime known as The Registration, Evaluation and Authorization of Chemicals (“REACH”). REACH mandates that certain chemicals manufactured in, or imported into, the EU be registered and evaluated for their potential effects on human health and the environment. Under REACH, we and our contract manufacturers located in the EU are required to register certain of our products based on the quantity of such product imported into or manufactured in the EU and on the product’s intended end-use. The registration, evaluation and authorization process under REACH can be costly and time consuming. Problems or delays in the registration, evaluation or authorization process under REACH could delay or prevent the manufacture of some of our products in, or the importation of some of our products into, the EU, which could adversely affect our business and results of operations. In addition, if we or our contract manufacturers fail to comply with REACH, we may be subject to penalties or other enforcement actions, which could have a material adverse effect on our business and results of operations.
The biopharmaceutical industry is subject to extensive regulatory obligations and policies that may be subject to significant and abrupt change, including due to judicial challenges, election cycles, and resulting regulatory updates and changes in policy priorities.
In June 2024, the U.S. Supreme Court issued an opinion holding that courts reviewing agency action pursuant to the Administrative Procedure Act “must exercise their independent judgment” and “may not defer to an agency interpretation of the law simply because a statute is ambiguous.” The decision will have a significant impact on how lower courts evaluate challenges to agency interpretations of law, including those by HHS, the FDA, CMS and other agencies with significant oversight of the biopharmaceutical industry. The new framework is likely to increase both the frequency of such challenges and their odds of success by eliminating one way in which the government previously prevailed in such cases. As a result, significant regulatory policies will be subject to increased litigation and judicial scrutiny.
In addition, federal agency priorities, leadership, policies, rulemaking, communications, spending and staffing may be significantly impacted by election cycles. For example, the current U.S. presidential administration has committed to significantly reduce government spending through cuts to federal healthcare programs and reductions in the workforces of key government agencies, such as HHS, the FDA and CMS. Efforts by the current administration to limit federal agency budgets or personnel may result in reductions to agency budgets, employees and operations, which may lead to slower response times and longer review periods, potentially affecting the ability of our customers, future customers or collaborators to obtain regulatory approval for their product candidates utilizing our enzyme products. Any resulting changes in regulation may result in unexpected delays, increased costs, or other negative impacts on our business that are difficult to predict.
Risks Related to Intellectual Property
Our efforts to prosecute, maintain, protect and/or defend our intellectual property rights may not be successful.
We will continue to file and prosecute patent applications and maintain trade secrets in an ongoing effort to protect our intellectual property rights. It is possible that our current patents, or patents which we may later acquire, may be successfully challenged or invalidated, in whole or in part. It is also possible that we may not obtain issued patents from our pending patent applications. We sometimes permit certain patents or patent applications to lapse or go abandoned under appropriate circumstances. Due to uncertainties inherent in prosecuting patent applications, sometimes patent applications are rejected, and we subsequently abandon them. It is also possible that we may develop proprietary technology, products or services in the future that are not patentable or that the patents of others will limit or altogether preclude our ability to conduct business. In addition, any patent issued to us or to our licensor may provide us with little or no competitive advantage, in which case we may abandon such patent, license it to another entity or terminate the license agreement.
29
Our means of protecting our proprietary rights may not be adequate and our competitors may independently develop technologies, products or services that are identical or similar to ours or that compete with ours. Patent, trademark, copyright and trade secret laws afford only limited protection for our technology, products and services. The laws of many countries do not protect our proprietary rights to as great an extent as do the laws of the United States. Despite our efforts to protect our proprietary rights, unauthorized parties have in the past attempted, and may in the future attempt, to operate under the aspects of our intellectual property rights, or proprietary technology, products or services or products, or to obtain and use information that we regard as proprietary. Third parties may also design around our proprietary rights, which may render our protected technology, services and products less valuable, if the design around is favorably received in the marketplace. In addition, if any of our technology, products and services are covered by third-party patents or other intellectual property rights, we could be subject to various legal actions. For example, we are aware of certain third-party intellectual property that does or may overlap with aspects of the Company’s technology. We cannot assure that our technology, products and/or services do not infringe, violate or misappropriate any patents or other intellectual property rights owned or controlled by others or that they will not in the future.
Litigation may be necessary to enforce our intellectual property rights, to protect our trade secrets, to determine the validity and scope of the proprietary rights of others, or to defend against claims of infringement, invalidity, misappropriation, or other claims. Litigation may be necessary to enforce our intellectual property rights, to protect our trade secrets, to determine the validity and scope of the proprietary rights of others, or to defend against claims of infringement, invalidity, misappropriation, or other claims.
Any such litigation could result in substantial costs and diversion of our resources. Moreover, any settlement of or adverse judgment resulting from litigation relating to intellectual property rights could require us to obtain a license, which may be on terms that are not favorable to us, to continue to make, use, import, sell or offer for sale the technology, products or services that is the subject of the claim, or otherwise restrict or prohibit our use of the technology, products or services. Moreover, any settlement of or adverse judgment resulting from litigation relating to intellectual property rights could require us to obtain a license to continue to make, use, import, sell or offer for sale the technology, products or services that is the subject of the claim, or otherwise restrict or prohibit our use of the technology, products or services.
Our ability to compete may decline if we do not adequately prosecute, maintain, protect and/or defend our proprietary technology, products or services or our intellectual property rights.
Our success depends in part on our ability to obtain patents and maintain adequate protection of our intellectual property rights directed to our technology, products and services in the United States and other countries. We have adopted a strategy of seeking patent protection in the United States and in foreign countries with respect to certain of the technology used in or relating to our products, services, and processes. As such, as of December 31, 2025, we owned or controlled approximately 1,600 active issued patents and pending patent applications in the United States and in various foreign jurisdictions. As of December 31, 2025, our patents and patent applications, if issued, have terms that expire between 2026 and approximately 2046. We also have license rights to a number of issued patents and pending patent applications in the United States and in various foreign jurisdictions. Our owned and licensed patents and patent applications include those directed to our enabling technology and to the methods and products that support our business in the pharmaceutical manufacturing, life sciences, oligonucleotide synthesis, and other markets. We intend to continue to apply for patents relating to our technology, methods, services and products as we deem appropriate.
Issuance of claims in patent applications and enforceability of such claims once issued involve complex legal and factual questions and, therefore, we cannot predict with any certainty whether any of our issued patents will survive invalidity claims asserted by third parties. Issued patents and patents issuing from pending applications may be challenged, invalidated, circumvented, rendered unenforceable or substantially narrowed in scope. In addition, the inventorship and ownership of the patents and patent applications may be challenged by others. Moreover, the United States Leahy-Smith America Invents Act (“AIA”), enacted in September 2011, brought significant changes to the United States patent system, which include a change to a “first to file” system from a “first to invent” system and changes to the procedures for challenging issued patents and disputing patent applications during the examination process, among other things. While interference proceedings are possible for patent claims filed prior to March 16, 2013, many of our filings will be subject to the pre- and post-grant proceedings set forth in the AIA, including citation of prior art and written statements by third parties, third party pre-issuance submissions, ex parte reexamination, inter partes review, post-grant review, and derivation proceedings. We may need to utilize the processes provided by the AIA for supplemental examination or patent reissuance. These proceedings could result in substantial cost to us even if the outcome is favorable. Even if successful, any proceeding may result in loss of certain claims. Any litigation or proceedings could divert our management's time and efforts. Even unsuccessful claims brought by third parties could result in significant legal fees and other expenses, diversion of management time, and disruption in our business. Uncertainties resulting from initiation and continuation of any patent or related litigation could harm our ability to compete.
30
Additional uncertainty may result from legal precedent handed down by the United States Federal Circuit Court and Supreme Court as they determine legal issues concerning the scope and construction of patent claims and inconsistent interpretation of patent laws by the lower courts. Accordingly, we cannot ensure that any of our pending patent applications will result in issued patents, or even if issued, predict the breadth of the claims upheld in our, our licensors', and other companies' patents. Given that the degree of future protection for our proprietary rights is uncertain, we cannot ensure that: (i) we or our licensors were the first to invent the inventions covered by each of our pending applications, (ii) we or our licensors were the first to file patent applications for these inventions, or (iii) the proprietary technology, products or services we develop will be patentable. In addition, unauthorized parties may attempt to copy or otherwise obtain and use our technology, products and services. Monitoring unauthorized use of our intellectual property rights is difficult, and we cannot be certain that the steps we have taken will prevent unauthorized use of our technology, products or services, particularly in certain foreign countries where the local laws may not protect our proprietary rights as fully as in the United States. Moreover, third parties could practice our inventions in territories where we do not have patent protection. Such third parties may then try to import products made using our inventions into the United States or other countries. If competitors are able to use our proprietary technology, products or services, our ability to compete effectively could be harmed. In addition, others may independently develop and obtain patents for technologies, products or services that are similar to or superior to our technologies, products or services. If that happens, we may need to license these technologies, products or services, and we may not be able to obtain licenses on reasonable terms, if at all, which could cause harm to our business.
Similarly, foreign courts have made, and will likely continue to make, changes in how the patent laws in their respective jurisdictions are interpreted. Changes in patent laws and regulations in other countries or jurisdictions, changes in the governmental bodies that enforce them, or changes in how the relevant governmental authority enforces patent laws or regulations may weaken our ability to obtain new patents or to enforce patents that we own or may obtain in the future. For example, in some cases, we have filed for unitary patent protection under the rules implemented on June 1, 2023, in the European Patent Office. We will continue to assess this route of protection on a case-by-case basis, as applications are filed and patents are granted through the European Patent Office. This may alter our ability to protect our patents in some European countries. Further, the laws of some foreign countries do not protect proprietary rights to the same extent or in the same manner as the laws of the United States. For example, in some foreign jurisdictions, governments have the right to compel patent owners to grant others licenses to their intellectual property under certain circumstances. In addition, any protection afforded by foreign patents may be more limited than that provided under U.S. patent and intellectual property laws. We may encounter significant problems in enforcing and defending our intellectual property both in the United States and abroad. For example, if the issuance in a given country of a patent covering an invention is not followed by the issuance in other countries of patents covering the same invention, or if any judicial interpretation of the validity, enforceability or scope of the claims or the written description or enablement in a patent issued in one country is not similar to the interpretation given to the corresponding patent issued in other countries, our ability to protect our intellectual property rights in those countries may be limited. Changes in either patent laws or in interpretations of patent laws in the United States and other countries may materially diminish the value of our intellectual property rights or narrow the scope of our patent protection. We cannot predict future changes in the interpretation of patent laws or changes to patent laws that might be enacted into law by U.S. and foreign legislative bodies. Those changes may materially affect our patents or patent applications and our ability to obtain additional patent protection in the future. Any of the foregoing could have a material adverse effect on our competitive position, business, financial condition, results of operations and prospects.
Third parties may claim that we are infringing, violating or misappropriating their intellectual property rights, which may subject us to costly and time-consuming litigation and prevent us from developing or commercializing our technology, products or services.
Our commercial success also depends in part on our ability to operate without infringing, violating or misappropriating patents and other intellectual property rights of third parties, and without breaching any licenses or other agreements that we have entered into with regard to our technologies, products or services. We cannot ensure that patents have not been issued, or will not be issued, to third parties that could block our ability to obtain patents or to operate as we would like. There may be patents in some countries that, if valid, may block our ability to make, use, sell, or offer for sale our technology, products or services in those countries, or import our products into those countries, if we are unsuccessful in circumventing or acquiring rights to these patents. There also may be claims in patent applications filed in some countries that, if granted and valid, may also block our ability to commercialize technology, products, services or processes in these countries if we are unable to circumvent or obtain rights to them.
31
The industries in which we operate and the biotechnology industry, in particular, are characterized by frequent and extensive litigation regarding patents and other intellectual property rights. Many biotechnology companies have employed intellectual property litigation as a way to gain a competitive advantage. We are aware of some patents and patent applications relating to aspects of our technologies, products or services filed by, and issued to, third parties. We cannot assure that if such third-party patents rights are asserted against us that we would ultimately prevail. Any involvement in litigation or other intellectual property proceedings inside and/or outside of the United States to defend against claims that we infringe, misappropriate or violate the intellectual property rights of others may divert our management’s time from focusing on business operations and could cause us to spend significant amounts of money. Any potential intellectual property litigation also could force us to do one or more of the following:
•stop making, using, selling, offering for sale or importing our technologies, products and services that use the subject intellectual property;
•pay monetary damages to the third party asserting claims against us;
•grant or transfer rights to third parties relating to our patents or other intellectual property rights;
•obtain from the third party asserting its intellectual property rights a license to make, sell, offer for sale, import or use the relevant technology, product or service, which license may not be available on reasonable terms, or at all; or
•redesign those technologies, products, services or processes that use any allegedly infringing, misappropriated or violated intellectual property rights, or relocate the operations relating to the allegedly infringing, misappropriated or violated intellectual property rights to another jurisdiction, which may result in significant cost or delay to us, could be technically infeasible or could prevent us from making, selling, offering for sale, using or importing some of our technologies, products or services in the United States or other jurisdictions.
We may be involved in lawsuits to protect or enforce our intellectual property rights, which could be expensive, time-consuming and unsuccessful.
Competitors may infringe, violate or misappropriate our intellectual property rights or those of our licensors. To prevent infringement, violation, misappropriation or other unauthorized use, we have in the past filed, and may in the future be required to file, enforcement claims, which can be expensive and time-consuming. In addition, in an enforcement proceeding, a court may decide that the intellectual property right that we own or control is not valid, is unenforceable and/or is not infringed, violated or misappropriated. In addition, in legal proceedings against a third party to enforce a patent directed at one of our technologies, products or services, the defendant could counterclaim that our patent is invalid and/or unenforceable in whole or in part. In patent enforcement litigation in the United States, defendant counterclaims alleging invalidity and/or unenforceability are commonplace. Grounds for a patent validity challenge include an alleged failure to meet any of several statutory requirements, including lack of novelty, obviousness or non-enablement. Grounds for an unenforceability assertion could include an allegation that someone connected with prosecution of the patent withheld relevant information from the United States Patent and Trademark Office (“USPTO”) or made a misleading statement during prosecution. Third parties may also raise similar claims before the USPTO, even outside the context of enforcement litigation. The outcome following legal assertions of invalidity and unenforceability is unpredictable, and prior art could render our patents or those of our licensors invalid. If a defendant were to prevail on a legal assertion of invalidity and/or unenforceability, we would lose at least part, and perhaps all, of the patent protection on the respective technology, products or services. Such a loss of patent protection could have a material adverse impact on our business.
Even if resolved in our favor, litigation or other legal proceedings relating to our intellectual property rights may cause us to incur significant expenses and could distract our technical and management personnel from their normal responsibilities. In addition, there could be public announcements of the results of hearings, motions or other interim proceedings or developments and if securities analysts or investors perceive these results to be negative, it could have a substantial adverse effect on the price of our common stock. Such litigation or proceedings could substantially increase our expenses and reduce the resources available for operations and research and development activities. We may not have sufficient financial or other resources to conduct such litigation or proceedings adequately. Some of our competitors may be able to sustain the costs of such litigation or proceedings more effectively than we can because of their greater financial resources. Uncertainties resulting from the initiation and continuation of patent litigation or other proceedings could compromise our ability to compete in the marketplace. Furthermore, because of the substantial amount of discovery required in connection with U.S. intellectual property litigation, there is a risk that some of our confidential information could be compromised by disclosure during this type of litigation.
32
We may not be able to enforce our intellectual property rights throughout the world.
The laws of some foreign countries where we do business do not protect intellectual property rights to the same extent as the laws of the United States. Many companies have encountered significant problems in protecting and enforcing intellectual property rights in certain foreign jurisdictions. The legal systems of certain countries, particularly certain developing countries, do not favor the enforcement of patents and other intellectual property rights, particularly those relating to biotechnology technologies. Accordingly, our efforts to protect and enforce our intellectual property rights in such countries may be inadequate. This could make it difficult for us to stop the infringement, violation or misappropriation of our patents or other intellectual property rights. Additionally, proceedings to enforce our patent rights in foreign jurisdictions could result in substantial costs and divert our efforts and attention from other aspects of our business.
If our biocatalysts, or the genes that code for our biocatalysts, are stolen, misappropriated or reverse engineered, others could use these biocatalysts or genes to produce competing products.
Third parties, including our contract manufacturers, customers and those involved in shipping our biocatalysts, often have custody or control of our biocatalysts. If our biocatalysts, or the genes that code for our biocatalysts, were stolen, misappropriated or reverse engineered, they could be used by other parties who may be able to reproduce these biocatalysts for their own commercial gain. If this were to occur, it may be difficult for us to challenge this type of use, especially in countries with limited intellectual property rights protection or in countries in which we do not have patents covering the misappropriated biocatalysts.
Confidentiality and non-use agreements with employees, consultants, advisors and other third parties may not adequately prevent disclosures and non-use of trade secrets and other proprietary information.
In addition to patent protection, we also rely on other intellectual property rights, including protection of copyright, trade secrets, know-how and/or other proprietary information that is not patentable or that we elect not to patent. However, trade secrets can be difficult to protect, and some courts are less willing or unwilling to protect trade secrets. To maintain the confidentiality of our trade secrets and proprietary information, we rely in part on trade secret law and contractual agreements to protect our confidential and proprietary information and processes. We generally enter into confidentiality and invention assignment agreements with our employees, consultants and third parties working on our behalf upon their commencement of a relationship with us. However, trade secrets and confidential information are difficult to protect and we cannot guarantee that we have entered into such agreements with each party that may have or have had access to our trade secrets or proprietary technology and processes and we may not enter into such agreements with all employees, consultants and third parties who have been involved in the development of our intellectual property rights. Nevertheless, without our permission or awareness, our confidential and proprietary information may be disclosed to third parties, used by the respective individuals for purposes other than for the Company’s business, or obtained through illegal means, such that third parties could reverse engineer our biocatalysts, enzyme products and processes, to attempt to develop the same technology or develop substantially equivalent technology.
Costly and time-consuming litigation could be necessary to enforce and determine the scope of our confidential and proprietary rights, and failure to protect our trade secrets could adversely affect our competitive business position. If any of our trade secrets were lawfully obtained, we may be unable to prevent them, or those to whom they communicate it, from using that technology or information to compete with us or disclosing it publicly. Therefore, these events could have a material adverse effect on our business, financial condition and results of operations. In particular, a failure to protect our proprietary rights may allow competitors to copy our technology, which could adversely affect our pricing and market share.
In addition to contractual measures, we try to protect the confidential nature of our proprietary information by maintaining physical security of our premises and electronic security of our information technology systems. Such security measures may not, for example, in the case of misappropriation of a trade secret by an employee, consultant or other third party with authorized access or with unauthorized access but an intent to steal, provide adequate protection for our proprietary information. Our security measures may not prevent such employee, consultant or other third party from misappropriating our trade secrets and using them or providing them to a competitor, and recourse we take against such misconduct may not provide an adequate remedy to protect our interests fully. While we use commonly accepted security measures, trade secret violations are often a matter of state law in the United States, and the criteria for protection of trade secrets can vary among different jurisdictions. If the steps we have taken to maintain our trade secrets are deemed inadequate, we may have insufficient recourse against third parties for misappropriating the trade secret.
33
Risks Related to Owning our Common Stock
We are subject to anti-takeover provisions in our certificate of incorporation and bylaws and under Delaware law that could delay or prevent an acquisition of our company, even if the acquisition would be beneficial to our stockholders.
Provisions in our amended and restated certificate of incorporation and our bylaws may delay or prevent an acquisition of the Company. Among other things, our amended and restated certificate of incorporation and bylaws provide for a board of directors which is divided into three classes, with staggered three-year terms and provide that all stockholder action must be effected at a duly called meeting of the stockholders and not by a consent in writing, and further provide that only our Board of Directors (our “Board”), the chairman of our Board, our chief executive officer or president may call a special meeting of the stockholders. In addition, our amended and restated certificate of incorporation allows our Board, without further action by our stockholders, to issue up to 5,000,000 shares of preferred stock in one or more series and to fix the rights, preferences, privileges and restrictions thereof. These provisions may also frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our Board, who are responsible for appointing the members of our management team. Furthermore, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law (“DGCL”) which prohibits, with some exceptions, stockholders owning in excess of 15% of our outstanding voting stock from merging or combining with us. Finally, our charter documents establish advance notice requirements for nominations for election to our Board and for proposing matters that can be acted upon at stockholder meetings. Finally, our charter documents establish advanced notice requirements for nominations for election to our Board and for proposing matters that can be acted upon at stockholder meetings. Although we believe these provisions together provide for an opportunity to receive higher bids by requiring potential acquirers to negotiate with our Board, they would apply even if an offer to acquire our company may be considered beneficial by some stockholders.
Our bylaws designate a state or federal court located within the State of Delaware as the sole and exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders' ability to obtain a favorable judicial forum for disputes with us or our current or former directors, officers, stockholders, or other employees.
Our bylaws provide that, unless we consent in writing to the selection of an alternative forum, the Court of Chancery of the State of Delaware shall be the sole and exclusive forum for (i) any derivative action or proceeding brought on behalf of us under Delaware law, (ii) any action asserting a claim of breach of a fiduciary duty owed by any current or former director, officer, or other employee of the Company to us or our stockholders, (iii) any action asserting a claim against us or any of our directors, officers, or other employees arising pursuant to any provision of the DGCL or our certificate of incorporation or bylaws (as either may be amended from time to time), (iv) any action asserting a claim against us governed by the internal affairs doctrine, or (v) any other action asserting an “internal corporate claim,” as defined under Section 115 of the DGCL. The forgoing provisions do not apply to any claims arising under the Securities Act and, unless we consent in writing to the selection of an alternative forum, the federal district courts of the United States will be the sole and exclusive forum for resolving any action asserting a claim arising under the Securities Act.
These choice of forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or any of our current or former directors, officers, or other employees, which may discourage lawsuits with respect to such claims. There is uncertainty as to whether a court would enforce such provisions, and the enforceability of similar choice of forum provisions in other companies’ charter documents has been challenged in legal proceedings. It is possible that a court could find these types of provisions to be inapplicable or unenforceable, and if a court were to find the choice of forum provision to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, results of operations or financial condition.
Our quarterly or annual operating results may fluctuate in the future. As a result, we may fail to meet or exceed the expectations of research analysts or investors, which could cause our stock price to decline.
Our financial condition and operating results have varied significantly in the past and may continue to fluctuate from quarter to quarter and year to year in the future due to a variety of factors, many of which are beyond our control. Factors relating to our business that may contribute to these fluctuations include the following factors, as well as other factors described elsewhere in this report:
•our ability to achieve or maintain profitability;
•our dependence on a limited number of customers;
34
•some of our product supply agreements with customers have finite duration, may not be extended or renewed and generally do not require the customer to purchase any particular quantity or quantities of our products;
•the timing of customer orders and our related revenue recognition may vary significantly from quarter to quarter;
•with respect to customers purchasing our products for the manufacture of active pharmaceutical ingredients for which they have exclusivity due to patent protection, the termination or expiration of such patent protection and any resulting generic competition may materially and adversely affect our revenues, financial condition or results of operations;
•our dependence on a limited number of products in our performance enzymes business;
•our reliance on a limited number of contract manufacturers for large scale production of substantially all of our enzyme products;
•our relationships with, and dependence on, collaborators in our principal markets;
•our ability to successfully and timely develop and commercialize new products, including our ECO Synthesis manufacturing platform, for the markets we serve;
•the potential of GSK, Merck, Novartis or any other performance enzyme customer terminating their agreements with us;
•the success of our customers’ products in the market and the ability of such customers to obtain regulatory approvals for products and processes;
•our ability to deploy our technology platform in life science tools markets;
•our dependence on our collaborators or customers’ product candidates which could unexpectedly fail at any stage of preclinical or clinical development;
•our dependence on our collaborators or customers’ product candidates which may lack the ability to work as intended or cause undesirable side effects;
•our ability to successfully prosecute and protect our intellectual property;
•our ability to compete if we do not adequately protect our proprietary technologies or if we lose some of our intellectual property rights;
•our ability to avoid infringing the intellectual property rights of third parties;
•our involvement in lawsuits to protect or enforce our patents or other intellectual property rights;
•our ability to enforce our intellectual property rights throughout the world;
•our dependence on, and the need to attract and retain, key management and other personnel;
•our ability to prevent the theft or misappropriation of our biocatalysts, the genes that code for our biocatalysts, know-how or technologies;
•our ability to protect our trade secrets and other proprietary information from disclosure by employees and others;
•our ability to obtain substantial additional capital that may be necessary to expand our business;
•our ability to comply with the terms of our Loan Agreement;
•our ability to timely pay debt service obligations;
•our customers’ ability to pay amounts owed to us in a timely manner;
•our ability to avoid charges to earnings as a result of any impairment of goodwill, intangible assets or other long-lived assets;
•changes in financial accounting standards or practices may cause adverse, unexpected financial reporting fluctuations and affect our reported results of operations;
35
•our ability to maintain effective internal control over financial reporting;
•our dependency on information technology systems, infrastructure and data;
•our ability to control and to improve product gross margins;
•our ability to protect against risks associated with the international aspects of our business;
•the cost of compliance with EU chemical regulations;
•potential advantages that our competitors and potential competitors may have in securing funding or developing products;
•our ability to accurately report our financial results in a timely manner;
•results of regulatory tax examinations;
•market and economic conditions may negatively impact our business, financial condition, and share price;
•business interruptions due to natural disasters, disease outbreaks or other events beyond our control;
•public concerns about the ethical, legal and social ramifications of genetically engineered products and processes;
•our ability to integrate our current business with any businesses that we may acquire in the future;
•our ability to properly handle and dispose of hazardous materials in our business;
•potential product liability claims;
•changes to tax law and related regulations could materially affect our tax obligations and effective tax rate; and
•our ability to use our NOLs to offset future taxable income.
Due to the various factors mentioned above, and others, the results of any prior quarterly or annual periods should not be relied upon as indications of our future operating performance.
We do not intend to pay cash dividends for the foreseeable future.
We currently intend to retain our future earnings, if any, to finance the further development and expansion of our business and do not intend to pay cash dividends in the foreseeable future. Any future determination to pay dividends will be at the discretion of our Board and will depend on our financial condition, results of operations, capital requirements, restrictions contained in future agreements and financing instruments, business prospects and such other factors as our Board deems relevant.
General Risk Factors
If securities or industry analysts do not publish research or reports about our business, or publish negative reports about our business, our stock price and trading volume could decline.
The trading market for our common stock will be influenced by the research and reports that securities or industry analysts publish about us or our business. We do not have any control over these analysts. If one or more of the analysts who cover us downgrade our stock or change their opinion of our stock in a negative manner, our stock price would likely decline. If one or more of these analysts cease coverage of our company or fail to regularly publish reports on us, we could lose visibility in the financial markets, which could cause our stock price or trading volume to decline.
We face risks associated with our international business.
While we have a limited number of employees located outside of the United States, we are and will continue to be dependent upon contract manufacturers located outside of the United States. In addition, we have customers and partners located outside of the United States. Conducting business internationally exposes us to a variety of risks, including:
•changes in or interpretations of U.S. or foreign laws or regulations that may adversely affect our ability to sell our products, repatriate profits to the United States or operate our foreign-located facilities;
36
•the imposition or increase of tariffs and other trade barriers, including as a result of the U.S. presidential administration;
•the imposition of limitations on, or increase of, withholding and other taxes on remittances and other payments by foreign subsidiaries or joint ventures;
•the imposition of limitations on genetically-engineered or other products or processes and the production or sale of those products or processes in foreign countries;
•currency exchange rate fluctuations;
•uncertainties relating to foreign laws, regulations and legal proceedings including pharmaceutical, tax, import/export, anti-corruption and exchange control laws;
•the availability of government subsidies or other incentives that benefit competitors in their local markets that are not available to us;
•increased demands on our limited resources created by our operations may constrain the capabilities of our administrative and operational resources and restrict our ability to attract, train, manage and retain qualified management, technicians, scientists and other personnel;
•economic or political instability in foreign countries;
•difficulties associated with staffing and managing foreign operations; and
•the need to comply with a variety of United States and foreign laws applicable to the conduct of international business, including import and export control laws and anti-corruption laws.
Market and economic conditions may negatively impact our business, financial condition, and share price.
Concerns about inflation, energy costs, geopolitical issues, the United States mortgage market and a declining real estate market, unstable global credit markets and financial conditions, and volatile oil prices have led to periods of significant economic instability, diminished liquidity and credit availability, declines in consumers confidence and discretionary spending, diminished expectations for the global economy and expectations of slower global economic growth going forward, increased unemployment rates, and increased credit defaults in recent years. Our general business strategy may be adversely affected by any such economic downturns, volatile business environments and continued unstable or unpredictable economic and market conditions.
During 2023, the closures of Silicon Valley Bank and Signature Bank and their placement into receivership with the Federal Deposit Insurance Corporation, and the government-brokered sale of the deposits and majority of assets of First Republic Bank to JPMorgan Chase, created bank-specific and broader financial institution liquidity risk and concerns. Although government intervention ensured that depositors at these banks have access to their funds, future adverse developments with respect to specific financial institutions or the broader financial services industry may lead to market-wide liquidity shortages, impair the ability of companies to access near-term working capital needs, and create additional market and economic uncertainty. There can be no assurance that future credit and financial market instability and a deterioration in confidence in economic conditions will not occur, and we cannot predict the impact or follow-on effects of these insolvencies more broadly or on our business in particular. Further, we cannot guarantee that the government will intervene to provide depositors with access to funds if similar events occur in the future. If other banks and financial institutions enter receivership or become insolvent in the future, our ability to access our existing cash, cash equivalents, and investments may be threatened, which could have a material adverse effect on our business and financial condition.
In addition, if the market and economic conditions described above continue to deteriorate or do not improve, it may make any necessary debt or equity financing more difficult to complete, more costly, and more dilutive. Failure to secure any necessary financing in a timely manner and on favorable terms could have a material adverse effect on our growth strategy, financial performance, and stock price. Additionally, rising rates of inflation have increased the costs associated with conducting our business, including by causing substantial increases in the costs of materials, including raw materials and consumables, equipment, services, and labor. Moreover, given the unpredictable nature of the current economic climate, including future changes in rates of inflation and the potential for high tariffs or other trade barriers, it may be increasingly difficult for us to predict and control our future expenses, which may harm our ability to conduct our business.
37
International trade policies, including tariffs, sanctions and trade barriers, may adversely affect our business.
We operate in a global economy, which includes utilizing third-party suppliers in several countries outside the U.S. There is inherent risk that global trade restrictions or changes in trade policies and export regulations could adversely affect our business and operations. The current international trade and regulatory environment is subject to significant ongoing uncertainty. The U.S. government has recently announced substantial new tariffs affecting a wide range of products and jurisdictions and has indicated an intention to continue developing new trade policies. In response, certain foreign governments have announced or implemented retaliatory tariffs and other protectionist measures.
Significant changes or developments in U.S. and international laws and policies, such as laws and policies surrounding international trade, foreign affairs, manufacturing and development and investment in countries where we, our suppliers or our customers operate, could increase our costs, increase our customers’ costs and adversely impact our customers’ business and financial condition, make our technology, products and services less competitive in the U.S. and other markets affected by such actions, and materially adversely affect our business and financial condition.
Current or future tariffs will also result in increased research and development expenses, including with respect to increased costs associated with raw materials, laboratory equipment and research materials and components, for our customers, or collaborators and us. In addition, such tariffs may increase our supply chain complexity and could also potentially disrupt our existing supply chain. Increased development costs and extended development timelines could impact our customers’ ability to fund additional research and development or place us at a competitive disadvantage compared to companies operating in regions with more favorable trade relationships, which could reduce customer or investor confidence and adversely affect our competitive position, business, financial condition, results of operations or prospects.
While we continue to monitor these developments, the full impact of these risks remains uncertain and any economic downturn, escalation in trade tensions, or deterioration in international perception of U.S.-based companies could materially and adversely affect our business, results of operations, financial condition and prospects. In addition, trade developments have and may continue to heighten the risks related to the other risk factors described elsewhere in this Annual Report on Form 10-K.
Business interruptions resulting from disasters or other disturbances could delay us in the process of developing our products and could disrupt our sales. Our business continuity and disaster recovery plans may not adequately protect us from a serious disaster or other disturbance.
Our headquarters and other facilities are located in the San Francisco Bay Area, which in the past has experienced both severe earthquakes and wildfires. Earthquakes, wildfires or other natural disasters could severely disrupt our operations, and have a material adverse effect on our business, results of operations, financial condition and prospects. We are also vulnerable to other types of disasters and other events that could disrupt our operations, such as riot, civil disturbances, war, terrorist acts, public health emergencies, domestic or foreign conflicts, infections in our laboratory or production facilities or those of our customers or contract manufacturers and other events beyond our control. If a natural disaster or other event occurred that prevented us from using all or a significant portion of our headquarters, that damaged critical infrastructure, such as our enterprise financial systems or manufacturing resource planning and enterprise quality systems, or that otherwise disrupted operations, including due to impacts on our collaborators, suppliers or other third parties on which we rely, it may be difficult or, in certain cases, impossible, for us to continue our business for a substantial period of time. The disaster recovery and business continuity plans we have in place currently are limited and are unlikely to prove adequate in the event of a serious disaster or similar event, and we may incur substantial expenses as a result of the limited nature of such plans. We do not carry insurance for earthquakes and we may not carry sufficient business interruption insurance to compensate us for losses that may occur. Any losses or damages we incur could have a material adverse effect on our cash flows and success as an overall business.
We are dependent on information technology systems, infrastructure and data, and any failure of these systems could harm our business. Security breaches, loss of data and other disruptions, whether related to artificial intelligence or other means, could compromise sensitive information related to our business or individuals, or prevent us from accessing critical information and expose us to liability, which could adversely affect our business, results of operations and financial condition.
38
Information technology helps us operate efficiently, interface with customers, maintain financial accuracy and efficiency and accurately produce our financial statements. If we do not allocate and effectively manage the resources necessary to build and sustain the proper technology infrastructure, we could be subject to transaction errors, processing inefficiencies, the loss of customers, business disruptions or the loss of or damage to intellectual property or data through security breach. If our information technology systems do not effectively collect, store, process and report relevant data for the operation of our business, whether due to equipment malfunction or constraints, software deficiencies, or human error, our ability to effectively plan, forecast and execute our business plan and comply with applicable laws and regulations will be impaired, perhaps materially. Our information technology systems and those of our external vendors, strategic partners and other contractors or consultants are vulnerable to attack and damage or interruption from computer viruses and malware (e.g. ransomware), malicious code, natural disasters, terrorism, war, telecommunication and electrical failures, hacking, cyberattacks, phishing attacks and other social engineering schemes, employee theft or misuse, human error, software or hardware errors, misconfigurations, bugs, fraud, denial or degradation of service attacks, sophisticated nation-state and nation-state-supported actors or unauthorized access or use by persons inside our organization, or persons with access to systems inside our organization. ransomware), malicious code, natural disasters, terrorism, war, telecommunication and electrical failures, hacking, cyberattacks, phishing attacks and other social engineering schemes, employee theft or misuse, human error, fraud, denial or degradation of service attacks, sophisticated nation-state and nation-state-supported actors or unauthorized access or use by persons inside our organization, or persons with access to systems inside our organization. The prevalence of artificial intelligence (“AI”) tools in the global marketplace and rapid changes thereto raise the risk to our systems by making more sophisticated tools available to bad actors, and by making our data more vulnerable to inadvertent leaks or corruption by employees and others. The prevalence of artificial intelligences (“AI”) tools in the global marketplace and rapid changes thereto raise the risk to our systems by making more sophisticated tools available to bad actors, and by making our data more vulnerable to inadvertent leaks or corruption by employees and others. Any such issues could materially and adversely affect our financial condition, results of operations, cash flows and the timeliness with which we report our internal and external operating results.
Our business may require us to use and store personal information of our customers, employees, and business partners on our information technology systems.Our business may require us to use and store personal information of our customers, employees, and business partners. This may include names, addresses, phone numbers, email addresses, contact preferences, tax identification numbers and payment account information. We require usernames and passwords in order to access our information technology systems. We also use encryption and authentication technologies to secure the transmission and storage of data. However, these security measures may be compromised as a result of security breaches by unauthorized persons, employee error, malfeasance, faulty password management or other irregularity, and result in persons obtaining unauthorized access to our data or accounts. Third parties may attempt to fraudulently induce employees or customers into disclosing usernames, passwords or other sensitive information, which may in turn be used to access our information technology systems. For example, our employees have received “phishing” emails and phone calls attempting to induce them to divulge passwords and other sensitive information.
In addition, unauthorized persons may attempt to hack into our products or systems to obtain personal data relating to employees and other individuals, our confidential or proprietary information or confidential information we hold on behalf of third parties. We also rely on external vendors to supply and/or support certain aspects of our information technology systems. The systems of these external vendors may contain defects in design or manufacture or other problems that could unexpectedly compromise information security of our own systems, and we are dependent on these third parties to deploy appropriate security programs to protect their systems. If we or our third-party vendors were to experience a significant cybersecurity breach of our or their information systems or data, the costs associated with the investigation, remediation and potential notification of the breach to counterparties and data subjects could be material. Our remediation efforts may not be successful. Further, if such an event were to occur and cause interruptions in our operations, it could result in a material disruption of our development programs and our business operations, whether due to a loss, corruption or unauthorized disclosure of our trade secrets, personal information or other proprietary or sensitive information or other similar disruptions. Attacks upon information technology systems are also increasing in their frequency, levels of persistence, sophistication and intensity, and are being conducted by sophisticated and organized groups and individuals with a wide range of motives and expertise. As a result of the remote work policies we initiated in response to the COVID-19 pandemic, and our continued hybrid working environment, we may also face increased cybersecurity risks due to our reliance on internet technology and the number of our employees who are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities. Additionally, any integration of AI in our or any third party’s operations, products or services is expected to pose new or unknown cybersecurity risks and challenges. We have programs in place to detect, contain and respond to data security incidents, and we make ongoing improvements to our information-sharing products in order to minimize vulnerabilities, in accordance with industry and regulatory standards. However, because the techniques used to obtain unauthorized access to or sabotage systems change frequently and may be difficult to detect, we may not be able to anticipate and prevent these intrusions or mitigate them when and if they occur. Even if identified, we may be unable to adequately and timely investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques (such as AI) that are designed to circumvent controls, to avoid detection and to remove or obfuscate forensic evidence. Even if identified, we may be unable to adequately and timely investigate or remediate incidents or breaches due to attackers increasingly using tools and techniques that are designed to circumvent controls, to avoid detection and to remove or obfuscate forensic evidence.
39
We and certain of our external vendors are from time to time subject to cyberattacks and security incidents. While we do not believe that we have experienced any significant system failure, accident, or security breach to date, if such an event were to occur, it could result in the unauthorized access to or unauthorized use, disclosure, release or other processing of personal information, it may be necessary to notify individuals, governmental authorities, supervisory bodies, the media and other parties pursuant to privacy and security laws. Any security compromise affecting us, our service providers, vendors, strategic partners, other contractors, consultants or our industry, whether real or perceived, could harm our reputation, erode confidence in the effectiveness of our security measures and lead to regulatory scrutiny. There can be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our information technology systems and confidential information. To the extent that any disruption or security breach were to result in a loss of, or damage to, our data or systems, or inappropriate disclosure of confidential or proprietary or personal information, we could incur liability, including litigation exposure, penalties and fines, which may not be covered by insurance or may be in excess of our insurance coverage. Additionally, we could become the subject of regulatory action or investigation, litigation, including class actions, or other claims and our competitive position could be harmed and the further development of our products could be delayed. If such an event were to occur and cause interruptions in our operations, it could result in a material disruption of our business and could materially and adversely affect our business, results of operations and financial condition.
Actual or perceived failures to comply with applicable data protection, privacy and security laws, regulations, standards and other requirements could adversely affect our business, results of operations and financial condition.
The global data protection landscape is rapidly evolving, and we are or may become subject to state, federal and foreign laws, regulations, decisions and directives governing the privacy, security, collection, storage, transmission, use, processing, retention and disclosure of personal information. Any failure or perceived failure by us to comply with applicable laws or regulations, our internal policies and procedures or our contracts governing our processing of personal information could result in negative publicity, government investigations and enforcement actions, claims by third parties and damage to our reputation, any of which could have a material adverse effect on our operations, financial performance and business.
In the United States, Health Insurance Portability and Accountability Act (“HIPAA”) imposes, among other things, certain standards relating to the privacy, security, transmission and breach reporting of certain individually identifiable health information. We may obtain health information from third parties, such as research institutions with which we collaborate, that are subject to privacy and security requirements under HIPAA. Although we do not believe that we are directly subject to HIPAA, other than potentially with respect to providing certain employee benefits, we could be subject to criminal penalties if we knowingly obtain or disclose individually identifiable health information maintained by a HIPAA covered entity in a manner that is not authorized or permitted by HIPAA. Certain states have also adopted and continue to adopt new privacy and security laws and regulations, which govern the privacy, processing and protection of health-related and other personal information. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. For example, the California Consumer Privacy Act (“CCPA”) requires in-scope businesses to, among other things: provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt-out of certain disclosures of their personal information; and enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf. The CCPA also provides for civil penalties for violations, as well as a private right of action for certain data breaches (which has increased the likelihood of, and risks associated with, data breach litigation). The CCPA also provides for civil penalties for violations, as well as a private right of action for data breaches (which has increased the likelihood of, and risks associated with, data breach litigation). Similar laws regulating personal information generally or health information in particular have passed in other states and have been proposed in additional states and at the federal level, reflecting a trend toward more stringent privacy legislation in the United States. Similar laws regulating personal information generally or health information in particular have passed in more than a dozen states and have been proposed in other states and at the federal level, reflecting a trend toward more stringent privacy legislation in the United States. The same is true for emerging laws and regulations related to AI. These developments increase our compliance burden and our risk, including risks of regulatory fines, litigation and associated reputational harm. Any liability from failure to comply with the requirements of these laws could adversely affect our financial condition.
Furthermore, the Federal Trade Commission (“FTC”) and many state Attorneys General continue to enforce federal and state consumer protection laws against companies for the collection, use, sharing and security of personal information that appear to be unfair or deceptive. For example, according to the FTC, failing to take appropriate steps to keep consumers’ personal information secure can constitute unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities.
40
In the EU, the EU General Data Protection Regulation (“EU GDPR”) governs the processing of personal data. The United Kingdom (“UK”) has implemented the EU GDPR as the UK GDPR which sits alongside the UK Data Protection Act 2018 (the “UK GDPR”, and together with the EU GDPR, the “GDPR”). The GDPR imposes requirements for controllers, including (among others) specific requirements for obtaining valid consent where consent is the legal basis for processing, requirements around accountability and transparency, the obligation to consider data protection when any new products or services are developed, the obligation to comply with individuals’ data protection rights, and the obligation to notify relevant data supervisory authorities of notifiable personal data breaches without undue delay (and no later than 72 hours) after becoming aware of the personal data breach (and affected data subjects where the personal data breach is likely to result in a high risk to their rights and freedoms). The EU GDPR provides that EU member states may enact their own additional national laws and regulations regarding the processing of genetic, biometric or health data, which could affect our ability to use and share personal data or could cause our costs to increase and potentially harm our business and financial condition. Failure to comply with the requirements of the GDPR can result in (among other things) fines of up to the greater of €20 million (under the EU GDPR) or £17.5 million (under the UK GDPR) or 4% of an organization’s total worldwide annual turnover of the preceding financial year and other administrative penalties. To the extent that we are subject to the GDPR, compliance with the GDPR may require substantial amendments to our procedures and policies and these changes could adversely impact our business by increasing operational and compliance costs or impact business practices. Further, there is a risk that the amended policies and procedures will not be implemented correctly or that individuals within the business will not be fully compliant with the new procedures. There is a risk that we could be impacted by a cybersecurity incident that results in loss or unauthorized disclosure of personal data, potentially resulting in us facing harms similar to those described above.
Among other requirements, the EU GDPR prohibits the international transfer of personal data subject to the EU GDPR from the European Economic Area (“EEA”) to third countries that the European Commission does not recognize as having an ‘adequate’ level of data protection, unless a data transfer mechanism (such as, EU Standard Contractual Clauses or “EU SCCs”) has been put in place or a derogation under the EU GDPR can be relied on. In certain cases, companies must also carry out a transfer privacy impact assessment (“TIA”) which, among other things, assesses laws governing access to personal data in the recipient country and considers whether supplementary measures that provide privacy protections additional to those provided under the EU SCCs will need to be implemented to ensure an ‘essentially equivalent’ level of data protection to that afforded in the EEA. In July 2023, the European Commission adopted its Final Implementing Decision granting the United States adequacy (“Adequacy Decision”) for EU-U.S. transfers of personal data for entities self-certified to the Atlantic Data Privacy Framework (“DPF”). Entities relying on EU SCCs for transfers to the United States are also able to rely on the analysis in the Adequacy Decisions as support for their TIA regarding the equivalence of U.S. national security safeguards and redress.
The UK GDPR also imposes similar restrictions on transfers of personal data from the UK to jurisdictions that the UK Government does not consider adequate, including the United States. The UK Government has published its own form of the EU SCCs, known as the International Data Transfer Agreement and an International Data Transfer Addendum to the EU SCCs. The UK Information Commissioner’s Office has also published its own version of the TIA, although entities may choose to adopt either the EU or UK-style TIA. Further, on September 21, 2023, the UK Secretary of State for Science, Innovation and Technology established a UK-U.S. data bridge (i.e., a UK equivalent of the Adequacy Decision) and adopted UK regulations to implement the UK-U.S. data bridge. Personal data may now be transferred from the UK under the UK-U.S. data bridge through the UK extension to the DPF to organizations self-certified under the UK extension to the DPF.
We expect the existing legal complexity and uncertainty regarding international personal data transfers to continue and international transfers to the United States and to other jurisdictions more generally to continue to be subject to enhanced scrutiny by regulators. As the regulatory guidance and enforcement landscape in relation to data transfers continue to develop, we could suffer additional costs, complaints and/or regulatory investigations or fines, and/or if we are otherwise unable to transfer personal data between and among countries and regions in which we operate, it could affect the manner in which we operate our business, the geographical location or segregation of our relevant systems and operations, and could adversely affect our financial results.
As we continue to expand into other foreign countries and jurisdictions, we may be subject to additional laws and regulations that may affect how we conduct business.
41
Although we work to comply with applicable laws, regulations and standards, our contractual obligations and other legal obligations, these requirements are evolving and may be modified, interpreted and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another or other legal obligations with which we must comply. Various federal, state and foreign legislative or regulatory bodies may enact new or additional laws and regulations concerning privacy, data-retention and data-protection issues, including laws or regulations mandating disclosure to domestic or international law enforcement bodies, which could adversely impact our business or our reputation with customers. For example, some countries have adopted laws mandating that certain personal information regarding customers in their country be maintained solely in their country. Having to maintain local data centers and redesign product, service and business operations to limit processing of personal information to within individual countries could increase our operating costs significantly. Any failure, or perceived failure, by us to comply with federal, state or international privacy, data-retention or data-protection-related laws, regulations, orders or industry self-regulatory principles could result in proceedings or actions against us by governmental entities or others, a loss of customer confidence, damage to our brand and reputation and a loss of customers, any of which could have an adverse effect on our business.
Our business may be affected by the evolving regulatory framework for AI Technologies
We use AI, machine learning, and automated decision-making technologies, (collectively, “AI Technologies”) throughout our business, and are making investments in this area. We expect that increased investment will be required in the future to continuously improve our use of AI Technologies. As with many technological innovations, there are significant risks involved in developing, maintaining and deploying these technologies, including that AI-generated content, analyses, or recommendations we utilize could be deficient, that our competitors may more quickly or effectively adopt AI capabilities, or that our use of AI or other emerging technologies increases regulatory, cybersecurity and other significant risks. There can be no assurance that the usage of or our investments in such technologies will always enhance our products or services or be beneficial to our business, including our efficiency or profitability. There is uncertainty as to whether a court would enforce such provisions, and the enforceability of similar choice of forum provisions in other companies’ charter documents has been challenged in legal proceedings.
In particular, if the models underlying our AI Technologies are: incorrectly designed or implemented; trained or reliant on incomplete, inadequate, inaccurate, biased or otherwise poor quality data, or on data to which we do not have sufficient rights or in relation to which we and/or the providers of such data have not implemented sufficient legal compliance measures; used without sufficient oversight and governance to ensure their responsible use; and/or adversely impacted by unforeseen defects, technical challenges, cybersecurity threats or material performance issues, the performance of our products, services and business, as well as our reputation, could suffer or we could incur liability resulting from the violation of laws or contracts to which we are a party or civil claims.
We are in varying stages of development in relation to our products and internal business processes involving AI Technologies. The continuous development, maintenance and operation of our AI Technologies is expensive and complex, and may involve unforeseen difficulties including material performance problems, undetected defects or errors. For instance, the models underlying AI Technologies can experience decay (also known as “model drift”) in which its performance and accuracy decreases over time without further human intervention to correct such decay.
We may not be successful in our ongoing development and maintenance of these technologies in the face of novel and evolving technical, reputational and market factors. Our efforts to develop proprietary AI models could increase our operating costs. Our ability to develop proprietary AI models may be limited by our access to processing infrastructure or training data, and we may be dependent on third-party providers for such resources.
The regulatory framework for AI Technologies is rapidly evolving as many federal, state, and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations. Additionally, existing laws and regulations may be interpreted in ways that would affect the operation of our AI Technologies. As a result, implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, standards, or market perception of their requirements may have on our business and may not always be able to anticipate how to respond to these laws or regulations. Failure to appropriately respond to this evolving landscape may result in reputational, competitive and business harm as well as litigation and regulatory action and fines, penalties and expenses related thereto.
It is possible that new laws and regulations will be adopted in the United States and in other non-U.S. jurisdictions, or that existing laws and regulations, including competition and antitrust laws, may be interpreted in ways that would limit our ability to use AI Technologies for our business, or require us to change the way we use AI Technologies in a manner that negatively affects the performance of our products, services, and business and the way in which we use AI Technologies. We may need to expend resources to adjust our products or services in certain jurisdictions if the laws, regulations, or
42
decisions are not consistent across jurisdictions. Further, the cost to comply with such laws, regulations, or decisions and/or guidance interpreting existing laws, could be significant and would increase our operating expenses (such as by imposing additional reporting obligations regarding our use of AI Technologies). Such an increase in operating expenses, as well as any actual or perceived failure to comply with such laws and regulations, could adversely affect our business, financial condition and results of operations.
Evolving expectations around corporate responsibility practices, specifically related to environmental, social and governance (“ESG”) matters, may expose us to reputational and other risks.
Investors, stockholders, customers, suppliers and other third parties are increasingly focusing on ESG and corporate social responsibility endeavors and reporting. Companies that do not adapt to or comply with the evolving investor or stakeholder expectations and standards, or that are perceived to have not responded appropriately, may suffer from reputational damage, which could result in the business, financial condition and/or stock price of a company being materially and adversely affected. For example, certain customers have inquired about our ESG practices and may impose ESG guidelines, procurement policies, sustainability standards, mandates or reporting requirements for, and may scrutinize relationships more closely with, their suppliers, including us, which may lengthen sales cycles, increase our costs or impair our ability to attract and retain customers. Further, this increased focus on ESG issues may result in new regulations, international accords and/or third-party requirements that could adversely impact our business, or lead to certain stockholders reducing or eliminating their holdings of our stock. For example, California has passed new laws regarding environmental disclosures that may directly impact us in the future. If we are held to be out of compliance with such laws or other similar laws, we could face penalties and/or reputational harm. We may also be subject to new rules and laws that reflect competing trends in the ESG space, leading to difficulties in compliance. At the same time, certain governmental representatives and other stakeholders have increasingly expressed or pursued opposing views, legislation and investment expectations around sustainability initiatives, including the enactment or proposal of “anti-ESG” legislation or policies. An allegation or perception that we have not taken sufficient action or have taken the wrong actions in these areas could negatively harm our business and reputation.
43
ITEM 1B. UNRESOLVED STAFF COMMENTS
Not applicable.
ITEM 1C. CYBERSECURITY
Risk Management and Strategy
In the normal course of business, we may collect and store personal information and other sensitive information, including proprietary and confidential business information, trade secrets, intellectual property, sensitive third-party information and employee information. We assess and identify cybersecurity risk to such information by maintaining cybersecurity policies that require continuous monitoring and detection programs and network security precautions. Our cybersecurity risk management program incorporates industry-standard frameworks, policies and practices designed to protect the confidentiality, integrity, and availability of our sensitive information. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use NIST Cybersecurity Framework as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business.
We have a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents. We manage cybersecurity risks by maintaining various protections designed to safeguard against cyberattacks, including firewalls and virus detection software, and periodic training on common cybersecurity threats (e.g. phishing exercises and interactive trainings) including for incident response personnel and senior management. We have established a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents. In addition, we periodically conduct risk assessments designed to help identify material risks from cybersecurity threats to our critical systems and information, including scans of our environment for any vulnerabilities and penetration testing. With respect to key third party service providers affecting critical business management systems, we collect and maintain SOC2 or SOC1 type II reports (attestation of controls at a service organization over a minimum six-month period) based on their respective risk profile. For other third-party service providers, cybersecurity risk is addressed as appropriate. We also engage third parties to assess effectiveness of our data security practices. A third party security service provider and consultant conducts regular network security reviews, scans and audits, and we may consult with other external experts as warranted by a particular cybersecurity incident or threat. A third party security consultant conducts regular network security reviews, scans and audits, and we may consult with other external experts as warranted by a particular cybersecurity incident or threat. In addition, we maintain insurance that includes cybersecurity coverage.
Areas of cybersecurity risk are assessed every two years, and updates are reported by our Chief Financial Officer to the Board’s Audit Committee and senior management annually.Areas of cybersecurity risk are assessed bi-annually, and updates are reported by our Chief Financial Officer to the Board’s Audit Committee and senior management annually. Where our bi-annual cybersecurity risk assessment identifies areas for improvement, we document and track our remediation activities, which are also reported to the Audit Committee and senior management annually. In this way, our program to manage cybersecurity risk integrates with our overall risk management processes.
Governance
The Company’s Board of Directors has visibility into cybersecurity risks through its Audit Committee and through the process described below. The Audit Committee has oversight of the Company’s cybersecurity risk management programs and the design and operating effectiveness thereof, and reviews reports from Company management on cybersecurity, data privacy and other risks relevant to the Company’s computerized information system controls and security.
Further, the Audit Committee generally reports to the full Board of Directors regarding its activities, including those related to cybersecurity. The Board of Directors also periodically receives briefings from management on our cyber risk management program. Board members receive presentations on cybersecurity topics from management, internal security staff or external experts as part of the Board of Director’s continuing education on topics that impact public companies].
44
Our IT Security team takes steps to stay informed about and monitor efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include: briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in our IT environment.
In an event that an actual or suspected cybersecurity incident that jeopardizes the confidentiality, integrity, or availability of Codexis' information systems or any information residing therein is identified (or threat that presents significant risk to our information systems as identified by IT) it is reported to the Cybersecurity Council by our VP of IT. The focus of the Cybersecurity Council is on the investigation and facilitation of senior management’s assessment and determination of materiality of an incident or threat, and such investigation is separate but contemporaneous with the investigation(s) done under other applicable programs, policies, and plans regarding cybersecurity. The Cybersecurity Council will liaise directly with other investigation(s) and share information and assessments. Along with assistance from the Cybersecurity Council as necessary, senior management reports its materiality determination and analysis, including necessary facts to support its determination, to the Audit Committee of the Board of Directors. Pursuant to its charter, the Audit Committee may, along with senior management, report such determination to the Board of Directors.
Recently Filed
Click on a ticker to see risk factors
| Ticker * | File Date |
|---|---|
| APT | 3 hours ago |
| IBO | 3 hours ago |
| DAIC | 3 hours ago |
| AEAQ | 3 hours ago |
| NUWE | 3 hours ago |
| KDK | 3 hours ago |
| SKYT | 3 hours ago |
| CRWE | 3 hours ago |
| CWBC | 3 hours ago |
| EXOD | 3 hours ago |
| DMRC | 3 hours ago |
| MNTK | 3 hours ago |
| BLLN | 3 hours ago |
| INBK | 3 hours ago |
| DSP | 4 hours ago |
| TGT | 4 hours ago |
| CDXS | 4 hours ago |
| THM | 4 hours ago |
| TNYA | 4 hours ago |
| PLRX | 4 hours ago |
| HPK | 4 hours ago |
| SST | 4 hours ago |
| TTGT | 4 hours ago |
| GRDN | 4 hours ago |
| FCHS | 4 hours ago |
| FHTX | 4 hours ago |
| CCNE | 4 hours ago |
| LCNB | 4 hours ago |
| VGZ | 4 hours ago |
| MRVL | 4 hours ago |
| FWRD | 4 hours ago |
| ACU | 4 hours ago |
| TZOO | 5 hours ago |
| PEBK | 5 hours ago |
| TH | 5 hours ago |
| PKBK | 5 hours ago |
| MG | 6 hours ago |
| BWEN | 6 hours ago |
| PGC | 6 hours ago |
| INRE | 7 hours ago |
| SSSS | 10 hours ago |
| RCKY | 12 hours ago |
| TG | 12 hours ago |
| VRCA | 12 hours ago |
| NERV | 12 hours ago |
| KPLT | 12 hours ago |
| SGMT | 13 hours ago |
| ATEK | 13 hours ago |
| LAFA | 23 hours ago |
| GBLI | 1 day, 3 hours ago |