Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

Risk Factors - KPLT

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

ITEM 1A. RISK FACTORS

Our business is subject to a number of risks of which you should be aware before making a decision to invest in our securities. The summarized risks described below are not the only risks that we face. The following summarized risks as well as risks and uncertainties not currently known to us or that we currently deem to be immaterial may materially and adversely affect our business, results of operations, financial condition, earnings per share, cash flow or the trading price of our common stock. The following summarized risks as well as risks and uncertainties not currently known to us or that we currently deem to be immaterial may materially and adversely affect our business, results of operations, financial condition, earnings per share, cash flow or the trading price of our common stock. These summarized risks include, among others, the following:


Risks Related to our Proposed Mergers with CCFI and Aaron’s
None of us, CCFI or Aaron’s can be sure if or when the Mergers will be completed.
The market price of the Company’s common stock following the Mergers may decline as a result of the Mergers.
The parties’ equityholders may not realize a benefit from the Mergers commensurate with the ownership dilution they will experience in connection with or following the Mergers.
Certain provisions of the Merger Agreement may discourage third parties from submitting alternative takeover proposals, including proposals that may be superior to the arrangements contemplated by the Merger Agreement.
Each party is subject to business uncertainties and contractual restrictions while the Mergers are pending, which could adversely affect each party’s business and operations.

Risks Related to our Preferred Stock
Our Series A Convertible Preferred Stock and Series B Convertible Preferred Stock could further reduce the voting power and dilute the ownership of existing holders of our common stock and may adversely affect the market price of our common stock.
Until the Preferred Stock Investment Stockholder Approval is obtained, if at all, the Katapult Convertible Preferred Stock will accrue dividends at an annual rate of at least 18% compounding weekly.
If the Preferred Stock Investment Stockholder Approval is obtained, the Katapult Convertible Preferred Stock would be convertible in full and would allow the holders thereof to become the majority owners of the Company.

Risks Related to the Loan Agreement and our Indebtedness
If we trigger an event of default under the Loan Agreement and such event of default is not waived by our Lender, the Loan Agreement would terminate and our obligations under the Loan Agreement would accelerate, which would have a material adverse effect on our business, results of operations and financial position.
We have substantial indebtedness, which may reduce our capability to withstand adverse developments or business conditions.
The Loan Agreement governing the New Revolving Facility includes restrictive covenants and financial maintenance covenants, which could restrict our operations or ability to pursue growth strategies or initiatives including potential mergers and acquisitions opportunities. Failure to comply with these covenants could result in an acceleration of repayment of the indebtedness under the Loan Agreement, which would have a material adverse effect on our business, financial condition and results of operations. Failure to comply with these covenants could result in an acceleration of repayment of the indebtedness under the Credit Agreement, which would have a material adverse effect on our business, financial condition and results of operations. Failure to comply with these covenants could result in an acceleration of repayment of the indebtedness under the Credit Agreement, which would have a material adverse effect on our business, financial condition and results of operations.

Risks Related to Our Business, Strategy and Growth
A meaningful percentage of our gross originations are concentrated with a single merchant, and any deterioration in the business of, or in our relationship with this merchant or any other key merchant relationship or partner could materially and adversely affect our business, results of operations, financial condition and prospects.
If we are unable to attract additional direct merchants and retain and grow our relationships with our existing direct merchants, our results of operations, financial condition, and prospects would be materially and adversely affected.
Unexpected changes to consumer behavior could cause our proprietary algorithms and decisioning tools used in approving customers to no longer be indicative of our customer’s ability to perform.•Unexpected changes to consumer spending patterns could cause our proprietary algorithms and decisioning tools used in approving customers to no longer be indicative of our customer's ability to perform.
10


Our success depends on the effective implementation and continued execution of our strategies.
If we fail to maintain customer satisfaction and trust in our brand our business, results of operations, financial condition and prospects would be materially and adversely affected.
If we are unable to attract new customers and retain and grow our relationships with our existing customers, or if attracting or retaining customers is not cost-efficient, our results of operations, financial condition, and prospects would be materially and adversely affected.
Our estimates of market opportunity and forecasts of market growth may prove to be inaccurate, and even if the market in which we compete achieves its forecasted growth, our business could fail to grow at similar rates, if at all.
The success and growth of our business depends upon our ability to continuously innovate and develop new products and technologies.

Financial Risks Related to Our Business
We have a history of operating losses and may not be profitable in the future.
We rely on card issuers and payment processors. If we fail to comply with the applicable requirements of Visa, Mastercard, or other payment processors, those payment processors could seek to fine us, suspend us or terminate our registrations which could have a material adverse effect on our business, results of operations, financial condition, and prospects.

Risks Related to Our Technology and Our Platform
Real or perceived software errors, failures, bugs, defects, or outages could adversely affect our business, results of operations, financial condition, and prospects.
Our results depend on continued integration and support of our platforms, including our direct and/or waterfall integration technologies by our merchant partners.
We rely on KPay enabled merchants to allow access to their stores through our Katapult App and our desktop and mobile websites.We rely on third-party merchants to allow access to their stores through our mobile app.
We are subject to stringent and changing laws, regulations, rules, standards and contractual obligations related to data privacy and security, which could increase the cost of doing business, compliance risks and potential liability and otherwise negatively affect our operating results and business regulations.
Any significant disruption in, or errors in, service on our platform or relating to vendors, including events beyond our control, could prevent us from processing transactions on our platform or posting payments and have a material and adverse effect on our business, results of operations, financial condition, and prospects.
Data security breaches or other security incidents with respect to our information technology systems, networks or data, or those of third parties upon which we rely, could result in adverse consequences, including but not limited to regulatory investigations, litigation, fines and penalties, disruption of our business operations, reputational harm, loss of revenue or profits, and loss of customers.
Failure to adequately obtain, maintain, protect, defend and enforce our intellectual property and other proprietary rights could harm our business, operating results and financial condition.•Failure to adequately obtain, maintain, protect, defend and enforce our intellectual property and proprietary rights could harm our business, operating results and financial condition.

Legal and Compliance Risks
We are subject to sales, income and other taxes, which can be difficult and complex to calculate due to the nature of our businesses. A failure to correctly calculate and pay such taxes, or an unfavorable outcome on uncertain tax positions we may record from time to time, may result in substantial tax liabilities and a material adverse effect on several aspects of our performance.
If we fail to establish and maintain effective internal control over financial reporting, our ability to accurately and timely report our financial results could be adversely affected.
Changes to tax laws or exposure to additional tax liabilities may have a negative impact on our operating results.
We are subject to legal proceedings from time to time which seek material damages or otherwise may have a material adverse effect on our business.

11


Operational Risks Related to Our Business
Uncertain market and economic conditions have had, and may in the future have, a material adverse effect on our business, financial condition and share price.
Failure to effectively manage our costs could have a material adverse effect on our profitability.
Misconduct and errors by our employees, vendors, and service providers could harm our business and reputation.

Other Risks
Our business depends on our ability to attract and retain highly skilled employees.

A description of the risks and uncertainties associated with our business is set forth below. You should carefully consider the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including Part II, Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our financial statements and related notes appearing elsewhere in this Annual Report on Form 10-K. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, may also become important factors that adversely affect our business. If any of the risks actually occur, our business, financial condition, results of operations and prospects could be materially and adversely affected. In that event, the trading price of our securities could decline.

Risks Related to our Proposed Mergers with CCFI and Aaron’s

None of us, CCFI or Aaron’s can be sure if or when the Mergers will be completed.

Consummation of the Mergers is contingent upon the satisfaction of a number of conditions, some of which are beyond our, CCFI’s or Aaron’s control including, among others, (a) the expiration or termination of any waiting period applicable under the Hart-Scott-Rodino Antitrust Improvements Act of 1976, as amended, (b) the absence of any law or governmental order preventing the consummation of the Mergers, corporate reorganization steps contemplated by the Mergers or the Katapult Stock Issuance, (c) the effectiveness of the registration statement pursuant to which the issuance of shares of our common stock to be issued in the Mergers will be registered with the SEC, (d) the shares of our common stock to be issued in the Katapult Stock Issuance having been approved for listing on Nasdaq, subject only to official notice of issuance, (e) receipt of required approvals from the equityholders of each of us, CCFI and Aaron’s, (f) the parties’ representations and warranties being true and correct (subject to certain customary materiality exceptions), (g) compliance by the parties with their respective covenants, (h) the absence of a material adverse effect on any of the parties’ businesses that is continuing and (i) delivery and execution of certain documents by the parties. Under certain circumstances, we would be required to pay CCFI and Aaron’s a termination fee of $1.5 million, of which 85% shall be paid to CCFI and 15% shall be paid to Aaron’s.

Each of us, CCFI and Aaron’s may not be successful in our respective efforts to satisfy the closing conditions. The failure to satisfy all of the required conditions could delay the consummation of the Mergers for a significant period of time or prevent consummation from occurring at all. Any delay in consummating the Mergers could cause us, CCFI and Aaron’s not to realize some or all of the benefits, or realize them on a different timeline than expected, that we, CCFI and Aaron’s, as applicable, expects to achieve if the Mergers are successfully consummated within the expected timeframe. There can be no assurance that the conditions in the Merger Agreement will be satisfied or (to the extent permitted) waived or that the Mergers will be consummated. If the Mergers are not completed, our Board, in discharging its fiduciary obligations to its stockholders, will evaluate other strategic alternatives or financing options that may be available, which alternatives may not be as favorable to our stockholders as the Mergers. Any future sale or merger, financing or other transaction may be subject to further stockholder approval. We may also be unable to find, evaluate or complete other strategic alternatives, which may have a materially adverse effect on our business.

Our, CCFI’s and Aaron’s efforts to complete the Mergers could cause substantial disruptions in, and create uncertainty surrounding, our respective businesses, which may materially adversely affect their respective results of operation and business. Uncertainty as to whether the Mergers will be completed may affect each of the Company’s, CCFI’s and Aaron’s ability to retain and motivate existing employees. A substantial amount of the Company’s, CCFI’s and Aaron’s respective management’s and employees’ attention is being directed toward the completion of the Mergers and thus is being diverted from their respective day-to-day operations. Uncertainty as to the Company’s,
12


CCFI’s and Aaron’s respective futures could adversely affect their business and their relationships with suppliers, vendors, regulators and other business partners. For example, vendors and other counterparties may defer decisions concerning working with us, CCFI or Aaron’s, or seek to change existing business relationships. Changes to, or termination of, existing business relationships could adversely affect the Company’s, CCFI’s or Aaron’s respective results of operations and financial condition, as well as the market price of our common stock. The adverse effects of the pendency of the Mergers could be exacerbated by any delays in completion of the Mergers or termination of the Merger Agreement.

In addition, each of the Company, CCFI and Aaron’s may terminate the Merger Agreement under certain specified circumstances, including, but not limited to: (a) if the CCFI MIP Exchange, the Aaron’s MIP Exchange, the Hawthorn Preferred Stock Exchange, the Hawthorn Warrant Exercise, the Mergers and the Katapult Stock Issuance are not consummated by September 30, 2026, subject to a 90-day extension if certain closing conditions have not yet been satisfied, (b) if a court of competent jurisdiction or other governmental body has issued a final non-appealable order or other action prohibiting the CCFI MIP Exchange, the Aaron’s MIP Exchange, the Hawthorn Preferred Stock Exchange, the Hawthorn Warrant Exercise, the Mergers and the Katapult Stock Issuance, (c) if a vote on the Katapult Stock Issuance has been held at the Special Meeting and our stockholders have not approved the Katapult Stock Issuance, or (d) if the Company, CCFI, and Aaron’s, as applicable, materially breaches any of its representations, warranties, covenants or agreements, subject in certain cases to the right of the breaching party to cure the breach. The Company, CCFI, and Aaron’s may also terminate the Merger Agreement by mutual written consent.

Until the Mergers are completed, the Merger Agreement restricts the Company, CCFI or Aaron’s from taking specified actions without the consent of the other parties and requires us to operate in the ordinary course of business consistent with past practice. These restrictions may prevent the Company, CCFI or Aaron’s from making appropriate changes to their respective businesses or pursuing attractive business opportunities that may arise prior to the completion of the Mergers.

The market price of the Company’s common stock following the Mergers may decline as a result of the Mergers.

The market price of the Company’s common stock may decline as a result of the Mergers for a number of reasons, including if:
investors react negatively to the prospects of the combined organization’s products, business and financial condition following the Mergers;
the attention of the Company, CCFI or Aaron’s management is directed towards the Closing and other transaction-related considerations and is diverted from the day-to-day business operations of their respective businesses, as applicable, and matters related to the Mergers require commitments of time and resources that could otherwise have been devoted to other opportunities that might have been beneficial to the Company, CCFI or Aaron’s, as applicable;
the effect of the Mergers on the combined organization’s business and prospects is not consistent with the expectations of financial or industry analysts; or
the combined organization does not achieve the perceived benefits of the Mergers as rapidly or to the extent anticipated by financial or industry analysts.

The parties’ equityholders may not realize a benefit from the Mergers commensurate with the ownership dilution they will experience in connection with or following the Mergers.

After the completion of the Mergers, the current equityholders of the Company, CCFI and Aaron’s will own a smaller percentage of the combined organization than their ownership in their respective companies prior to the Mergers. Immediately after the Mergers, it is currently estimated that CCFI equityholders will own, or hold rights to acquire, approximately 79.9% of the combined organization on a fully diluted basis as described in the Merger Agreement, Aaron’s equityholders will own, or hold rights to acquire, approximately 14.1% of the combined organization on a fully diluted basis as described in the Merger Agreement and our equityholders, whose shares of our common stock will remain outstanding after the Mergers, will own, or hold rights to acquire, approximately 6% of the combined organization on a fully diluted basis as described in the Merger Agreement.
13


Certain provisions of the Merger Agreement may discourage third parties from submitting alternative takeover proposals, including proposals that may be superior to the arrangements contemplated by the Merger Agreement.

The terms of the Merger Agreement prohibit each of us, CCFI and Aaron’s from: (a) soliciting, initiating, knowingly encouraging or knowingly facilitating the making, submission or announcement of any Acquisition Proposal or Acquisition Inquiry (each as defined in the Merger Agreement) or take any action that would reasonably be expected to result in an Acquisition Proposal or Acquisition Inquiry, (b) knowingly furnishing any nonpublic information in connection with or in response to an Acquisition Proposal or Acquisition Inquiry, (c) engaging in discussions or negotiations with any person with respect to any Acquisition Proposal or Acquisition Inquiry, (d) approving, endorsing or recommending any Acquisition Proposal and (e) executing or entering into any letter of intent or similar document or any contract contemplating or otherwise relating to any Acquisition Transaction, (as defined in the Merger Agreement), except in limited circumstances when such party’s board of directors determines in good faith that an unsolicited alternative takeover proposal constitutes or would reasonably be expected to result in a superior takeover proposal and that failure to cooperate with the proponent of the proposal would reasonably be expected to be inconsistent with the applicable board’s fiduciary duties.

These provisions could discourage a potential third-party acquirer or merger partner that might have an interest in acquiring all or a significant portion of the Company, CCFI or Aaron’s or pursuing an alternative Acquisition Transaction from considering or proposing such a transaction, even if it were prepared to pay consideration that is more favorable to be received or realized in the Mergers. In particular, a termination fee, if applicable, could result in a potential third-party acquirer or merger partner proposing to pay a lower price to Katapult’s stockholders than it might otherwise have proposed to pay absent such a fee. If the Merger Agreement is terminated in accordance with its terms, and either the Company, CCFI or Aaron’s determines to seek another business combination, the Company, CCFI or Aaron’s, as applicable, may not be able to negotiate a transaction with another party on terms comparable to, or better than, the terms of the Merger Agreement.

Each party is subject to business uncertainties and contractual restrictions while the Mergers are pending, which could adversely affect each party’s business and operations.

In connection with the pendency of the Mergers, some customers, suppliers and other persons with whom the Company, CCFI or Aaron’s do business may delay or defer certain business decisions or terminate, change or renegotiate their relationships with the Company, CCFI or Aaron’s, as the case may be, as a result of the Mergers, which could negatively affect the Company’s, CCFI’s or Aaron’s respective revenues, earnings and cash flows, as well as the market price of our common stock, regardless of whether the Mergers are consummated.

Under the terms of the Merger Agreement, each of the Company, CCFI and Aaron’s is subject to certain restrictions on the conduct of its business prior to consummating the Mergers that may adversely affect its ability to execute certain of its business strategies, including the ability in certain cases to enter into or amend contracts, acquire or dispose of assets, incur indebtedness, incur capital expenditures, settle litigation, amend organizational documents, declare dividends, enter new business lines and invest in third parties.

Such limitations could adversely affect each of the Company’s, CCFI’s and Aaron’s businesses and operations prior to the consummation of the Mergers.

Each of the risks described above may be exacerbated by delays or other adverse developments with respect to the
consummation of the Mergers.

Risks Related to our Preferred Stock

Our Series A Convertible Preferred Stock and Series B Convertible Preferred Stock could further reduce the voting power and dilute the ownership of holders of our common stock and may adversely affect the market price of our common stock.

As further described in Note 6 to our Consolidated Financial Statements included within Part II, Item 8 contained in this Annual Report on Form 10-K , on November 3, 2025, we issued and sold an aggregate of 35,000 shares of our Series A Convertible Preferred Stock and an aggregate 30,000 shares of our Series B Convertible Preferred Stock. If
14


the Hawthorn Preferred Stock Exchange is not consummated, the Katapult Convertible Preferred Stock could remain outstanding following the Mergers.

Each series of the Katapult Convertible Preferred Stock ranks senior to our common stock with respect to distributions on liquidation, winding-up and dissolution and payment of dividends. In addition, subject to certain limitations, holders of the Series A Convertible Preferred Stock are entitled to vote with holders of shares of our common stock, together as one class, on all matters submitted for a vote of holders of shares of our common stock on an as-converted basis, thereby effectively reducing the voting power of holders of our common stock. Conversions of the Series B Convertible Preferred Stock into our common stock could also further reduce the voting power of holders of our common stock.

Moreover, the accrual of dividends paid in kind on the Katapult Convertible Preferred Stock has increased, and could further increase, the liquidation preference of the Katapult Convertible Preferred Stock, thereby increasing the number of shares into which the Katapult Convertible Preferred Stock is convertible and further diluting the ownership interest and voting power of holders of our common stock.

Such reductions in voting power and the substantial dilution of ownership rights resulting from the issuance, potential conversion of and accrual of dividends on, the Katapult Convertible Preferred Stock may adversely affect the market price for our common stock. Any failure to maintain effective disclosure controls and procedures or internal control over financial reporting could have an adverse effect on our business and operating results, and cause a decline in the price of our common stock. Securities class action litigation is often initiated against companies whose stock price declines following significant transactions by a company, such as transactions of the type that resulted in our issuance of the Katapult Convertible Preferred Stock to Hawthorn. This type of litigation could result in substantial costs and divert our management’s attention and resources and could also require us to make substantial payments to satisfy judgments or to settle litigation.

Until the later of the date the Preferred Stock Investment Stockholder Approval is obtained, if at all, and the date of our 2026 Annual Meeting of Stockholders, and if the Hawthorn Preferred Stock Exchange is not consummated the Katapult Convertible Preferred Stock will accrue dividends at an annual rate of at least 18% compounding weekly. Thereafter, the Katapult Convertible Preferred Stock will continue to accrue dividends at an annual rate of 12% compounding quarterly

Dividends on the Katapult Convertible Preferred Stock currently accrue at a rate of 18% per annum, payable weekly, and, if the Hawthorn Preferred Stock Exchange is not consummated, will continue to so accrue, payable weekly, until the later of (i) the date the Preferred Stock Investment Stockholder Approval (to remove the Ownership Limitation) is obtained, if at all and (ii) the date of our 2026 annual meeting of stockholders (“2026 Annual Meeting of Stockholders”). In addition, the Katapult Convertible Preferred Stock, as supplemented by a waiver entered into by Hawthorn as the sole holder of the Katapult Convertible Preferred Stock, provides that if the Preferred Stock Investment Stockholder Approval is not obtained on or before the date of our first annual or special meeting of stockholders following November 3, 2025 (“Dividend Step-up Deadline”), then the dividend rate will be increased by one percent (1%) during the period from, and including, the Dividend Step-up Deadline to, but excluding, the date when the Preferred Stock Investment Stockholder Approval is first obtained, if at all. Beginning on, and including, the later of (i) the date of the meeting at which the Preferred Stock Investment Stockholder Approval is obtained and (ii) the date of our 2026 Annual Meeting of Stockholders, dividends will accrue at a rate of 12% per annum, payable quarterly.

If the Hawthorn Preferred Stock Exchange is not consummated and the Preferred Stock Investment Stockholder Approval is not obtained, the dividend rate will remain 18% per annum, payable weekly. In addition, if the Preferred Stock Investment Stockholder Approval is not obtained by the Dividend Step-up Deadline, then the dividend rate will increase to 19% per annum, payable weekly. Under no circumstance will the dividend rate decrease below 12% per annum. The dividend rate could have adverse effects on our financial condition and results of operations and could result in additional dilution to the ownership interest and voting power of holders of our common stock. There can be no assurance that the Preferred Stock Investment Stockholder Approval will be obtained by the Dividend Step-up Deadline, or at all.

15


If the Preferred Stock Investment Stockholder Approval is obtained, the Katapult Convertible Preferred Stock would be convertible without regard to the Ownership Limitation and would allow the holder(s) thereof to become the majority owner(s) of the Company.

Hawthorn is the current holder of all the Katapult Convertible Preferred Stock. Until the Preferred Stock Investment Stockholder Approval (to remove the Ownership Limitation) is obtained, any conversion of the Katapult Convertible Preferred Stock is subject to the limitation that no holder of the Katapult Convertible Preferred Stock may convert such shares to the extent that such conversion would result in such holder beneficially owning in excess of 19.99% of all outstanding shares of our Common Stock as of November 3, 2025.

If the Hawthorn Preferred Stock Exchange is not consummated, then following the Preferred Stock Investment Stockholder Approval, if the Preferred Stock Investment Stockholder Approval is obtained, Hawthorn, or another holder of the Katapult Convertible Preferred Stock, may convert any or all of its shares of the Katapult Convertible Preferred Stock into our common stock at any time, and may convert such shares into a number of shares of our common stock constituting a majority of the number of shares of the issued and outstanding common stock. Hawthorn, or another individual, group or company that obtains Katapult Convertible Preferred Stock that would be freely convertible into a majority of the issued and outstanding common stock of the Company (“Majority Holder”), would be able to exercise significant influence over us, including control over decisions that require the approval of stockholders, which could limit our stockholders’ ability to influence the outcome of key transactions, including a change of control. There can be no assurance that the Katapult Convertible Preferred Stock held by a Majority Holder would not be converted into a majority of the issued and outstanding common stock of the Company following the Preferred Stock Investment Stockholder Approval, or if so converted, as to the period of time during which such Majority Holder would be able to so influence and control our decisions. We expect that the Hawthorn Preferred Stock Exchange will be consummated immediately prior to the Mergers pursuant to the Hawthorn Side Letter.

Under Nasdaq rules, a company of which more than a majority of the voting power is held by an individual, group or another company is a “controlled company” and may elect not to comply with certain corporate governance requirements, including certain requirements regarding independence of directors and board committee members. Following the Preferred Stock Investment Stockholder Approval, we could become a “controlled company” of a Majority Holder and choose not to comply with those corporate governance requirements. Accordingly, our stockholders would not have the same protections afforded to stockholders of companies that are subject to all of the corporate governance requirements of Nasdaq. There can be no assurance as to the period of time during which we would remain a “controlled company” if we became one.

Risks Related to the Loan Agreement and our Indebtedness

If the Lender’s waiver of our existing event of default expires and is not otherwise extended, or if we trigger another event of default under the Loan Agreement and such event of default is not waived by our Lender, the Loan Agreement would terminate and our obligations under the Loan Agreement would accelerate, which would have a material adverse effect on our business, results of operations and financial position.

The Loan Agreement contains customary representations and warranties and customary affirmative and negative covenants that restrict some of our activities.The Credit Agreement contains customary representations and warranties and customary affirmative and negative covenants that restrict some of our activities. The Credit Agreement contains customary representations and warranties and customary affirmative and negative covenants that restrict some of our activities. The negative covenants limit our ability to: incur additional indebtedness; pay dividends, redeem stock or make other distributions; amend our material agreements; make investments; create liens; transfer or sell the collateral for the Loan Agreement; make negative pledges; consolidate, merge, sell or otherwise dispose of all or substantially all of our assets; and enter into certain transactions with affiliates. The negative covenants limit our ability to: incur additional indebtedness; pay dividends, redeem stock or make other distributions; amend our material agreements; make investments; create liens; transfer or sell the collateral for the Credit Agreement; make negative pledges; consolidate, merge, sell or otherwise dispose of all or substantially all of our assets; and enter into certain transactions with affiliates. The negative covenants limit our ability to: incur additional indebtedness; pay dividends, redeem stock or make other distributions; amend our material agreements; make investments; create liens; transfer or sell the collateral for the Credit Agreement; make negative pledges; consolidate, merge, sell or otherwise dispose of all or substantially all of our assets; and enter into certain transactions with affiliates. Our ability to meet these covenants could be affected by events beyond our control, and we may be unable to satisfy them. Our ability to meet these covenants could be affected by events beyond our control, and we may be unable to satisfy them which would prevent us from pursuing certain growth strategies or initiatives due to this limitation. The Loan Agreement contains certain financial covenants. The Credit Agreement contains certain financial covenants. The Credit Agreement contains certain financial covenants. In particular, (1) as of the end of each month, we must maintain certain minimum Trailing Three-Month Net Originations representing net lease costs of newly originated leases in the immediately trailing three calendar month period and (2) we must maintain minimum liquidity of at least $5.0 million in unrestricted cash and cash equivalents as of the last business day of any calendar week. We have failed to comply with similar or identical obligations in the past under the 2019 Loan Agreement and may do so in the future under the Loan Agreement. We have been in the past unable to comply with the financial
16


covenants and certain reporting covenants in the 2019 Loan Agreement and may in the future be unable to comply with such covenants in the Loan Agreement, and we may from time to time fail to comply with (or breach) other covenants or requirements of the Loan Agreement. For example, as of each of July 31, 2025, August 31, 2025, September 30, 2025, October 31, 2025, and December 31, 2025 we were not in compliance with the Minimum Trailing Three-Month Originations covenant and the Lender granted waivers thereof in each case. We could continue fail to comply with such covenant or any other covenant or requirement of the Loan Agreement and trigger an additional event of default under the Loan Agreement. We anticipate that we will not have sufficient cash available to repay the New Revolving Facility under the Loan Agreement in the event of default.

If we trigger another event of default under the Loan Agreement and any such event of default is not waived by our Lenders, we would not be able to borrow under the Loan Agreement, and our Lenders would have the right to terminate the loan commitments under the Loan Agreement, accelerate repayment of all obligations under the Loan Agreement, and foreclose its liens against substantially all of our assets and take possession and sell any such assets to reduce any such obligations. While the Lenders have previously granted the Company waivers of certain events of default under the 2019 Loan Agreement and the Loan Agreement there is no guarantee that they will be willing to do so in the future. In addition, the rights of the Lenders under the Loan Agreement are fully transferable and assignable and there is no guarantee that any transferee will be willing to grant any such waivers or have interests that align with the Company and its stockholders. In the case of an event of default in respect of which we are unable to negotiate with our Lenders for a waiver or dispensation or upon maturity, if we do not have sufficient liquid assets to repay amounts outstanding under the Loan Agreement, the Lenders have the right to foreclose their liens against all of our assets and take possession and sell any such assets to reduce any such obligations. As a result, we would likely be unable to continue our operations, be unable to avoid filing for bankruptcy protection and/or have an involuntary bankruptcy case filed against us. These events would have a material adverse effect on our business, results of operations and financial position.

We have substantial indebtedness, which may reduce our capability to withstand adverse developments or business conditions.

We have incurred substantial indebtedness. As of December 31, 2025, the total aggregate indebtedness under the Loan Agreement was approximately $78.7 million of principal outstanding. We, together with our wholly-owned subsidiary, Katapult Group, Inc., have guaranteed the obligations of the Borrower under the Loan Agreement. Our payments on our outstanding indebtedness are significant in relation to our revenue and cash flow, which exposes us to significant risk in the event of downturns in our business (whether through competitive pressures or otherwise), our industry or the economy generally, since our cash flows would decrease but our required payments under our indebtedness would not. Economic downturns may impact our ability to comply with the covenants and restrictions in our Loan Agreement and to make payments on our indebtedness as they become due. Economic downturns may impact our ability to comply with the covenants and restrictions in our Credit Agreement and to make payments on our indebtedness as they become due.

Our overall leverage and the terms of our Loan Agreement could also:
make it more difficult for us to satisfy obligations;
limit our ability to obtain additional financing in the future for working capital, capital expenditures or acquisitions;
limit our ability to service our indebtedness;
limit our ability to adapt to changing market conditions;
restrict us from making strategic acquisitions or cause us to make non-strategic divestitures;
require us to dedicate a significant portion of our cash flow from operations to paying the principal and interest on our indebtedness, thereby limiting our ability to reach profitability and the availability of our cash flow to fund future capital expenditures, working capital and other corporate purposes;
limit our flexibility in planning for, or reacting to, changes in our business and in our industry generally; and
place us at a competitive disadvantage compared with competitors that have a less significant debt burden.

In addition, the Loan Agreement is secured by a pledge over all of the assets of the Borrower, is guaranteed by us and our wholly owned subsidiary, Katapult Group, Inc.In addition, the Credit Agreement, secured by a pledge over all of the assets of the Borrower is guaranteed by us and our wholly-owned subsidiary, Katapult Group, Inc. , which in turn is secured by a pledge over all of our assets and the assets of Katapult Group, Inc.
17


The Loan Agreement governing the New Revolving Facility includes restrictive covenants and financial maintenance covenants, which could restrict our operations or ability to pursue growth strategies or initiatives, including potential mergers and acquisitions opportunities. Failure to comply with these covenants could result in an acceleration of repayment of the indebtedness under the Loan Agreement, which would have a material adverse effect on our business, financial condition and results of operations.

The Loan Agreement contains customary representations and warranties and customary affirmative and negative covenants that restrict some of our activities.The Credit Agreement contains customary representations and warranties and customary affirmative and negative covenants that restrict some of our activities. The Credit Agreement contains customary representations and warranties and customary affirmative and negative covenants that restrict some of our activities. The negative covenants limit our ability to: incur additional indebtedness; pay dividends, redeem stock or make other distributions; amend our material agreements; make investments; create liens; transfer or sell the collateral for the Loan Agreement; make negative pledges; consolidate, merge, sell or otherwise dispose of all or substantially all of our assets; and enter into certain transactions with affiliates. The negative covenants limit our ability to: incur additional indebtedness; pay dividends, redeem stock or make other distributions; amend our material agreements; make investments; create liens; transfer or sell the collateral for the Credit Agreement; make negative pledges; consolidate, merge, sell or otherwise dispose of all or substantially all of our assets; and enter into certain transactions with affiliates. The negative covenants limit our ability to: incur additional indebtedness; pay dividends, redeem stock or make other distributions; amend our material agreements; make investments; create liens; transfer or sell the collateral for the Credit Agreement; make negative pledges; consolidate, merge, sell or otherwise dispose of all or substantially all of our assets; and enter into certain transactions with affiliates. Non-scheduled repayments of certain amounts under the Loan Agreement are subject to certain restrictions. Our ability to meet these covenants could be affected by events beyond our control, and we may be unable to satisfy them which would prevent us from pursuing certain growth strategies or initiatives due to this limitation. These or other limitations could decrease our operating flexibility and our ability to achieve our operating objectives. The Loan Agreement contains certain financial covenants. The Credit Agreement contains certain financial covenants. The Credit Agreement contains certain financial covenants. In particular, (1) as of the end of each month, we must maintain certain minimum Trailing Three-Month Net Originations (as defined in the Loan Agreement) representing net lease costs of newly originated leases in the immediately trailing three calendar month period and (2) we must maintain minimum liquidity of at least $5.0 million in unrestricted cash and cash equivalents as of the last business day of any calendar week. These financial covenants are restrictive and failure to comply with these covenants would have a material adverse effect on our business, financial condition, and results of operations.

We have been in the past unable to comply with the financial covenants in the Loan Agreement and the financial covenants and certain reporting covenants in the 2019 Loan Agreement and may in the future be unable to comply with such covenants in the Loan Agreement, and we may from time to time fail to comply with (or breach) other covenants or requirements of the Loan Agreement. For example, as of each of July 31, 2025, August 31, 2025, September 30, 2025, October 31, 2025, November 30, 2025 and December 31, 2025, we were not in compliance with the Minimum Trailing Three-Month Originations covenant and the Lenders granted a waiver thereof in each case. We could continue fail to comply with such covenant or any other covenant or requirement of the Loan Agreement and trigger an additional event of default under the Loan Agreement. In such event, if we are unable to negotiate with our Lenders for a waiver or dispensation under the Loan agreement, we would not be able to borrow under the Loan Agreement and our Lenders would have the right to terminate the loan commitments under the Loan Agreement and accelerate repayment of all obligations under the Loan Agreement, which would become due and payable immediately, and such an event would have a material adverse effect on our business, results of operations and financial position. In such event, if we are unable to negotiate with our Lender for a waiver or dispensation under the agreement, we would not be able to borrow under the Credit Agreement and our Lender would have the right to terminate the loan commitments under the Credit Agreement and accelerate repayment of all obligations under the 22Credit Agreement that would become due and payable immediately, which would have a material adverse effect on our business, results of operations and financial position. While the Lenders have previously granted the Company waivers of certain events of default under the 2019 Loan Agreement and the Loan Agreement there is no guarantee that they will be willing to do so in the future. In addition, the rights of the Lenders under the Loan Agreement are fully transferable and assignable and there is no guarantee that any transferee will be willing to grant any such waivers or have interests that align with the Company and its stockholders. In the event of default or upon maturity if we do not have sufficient liquid assets to repay amounts outstanding under the Loan Agreement, the Lenders have the right to foreclose their liens against all of our assets and take possession and sell any such assets to reduce any such obligations. If we do not have sufficient liquid assets to repay amounts outstanding under the Credit Agreement, the Lender has the right to foreclose their liens against all of our assets and take possession and sell any such assets to reduce any such obligations. As a result, we would likely be unable to continue our operations, be unable to avoid filing for bankruptcy protection and/or have an involuntary bankruptcy case filed against us. These events would have a material adverse effect on our business, results of operations and financial position.

Risks Related to Our Business, Strategy and Growth

To the extent that we seek to grow through future acquisitions, or other strategic investments or alliances, we may not be able to do so effectively.

We may in the future seek to grow our business by exploring potential acquisitions or other strategic investments or alliances. We may not be successful in identifying businesses or opportunities that meet our acquisition or expansion criteria. In addition, even if a potential acquisition target or other strategic investment is identified, we may not be successful in completing such acquisition or integrating such new business or other investment. If the Hawthorn Preferred Stock Exchange is not consummated, certain business combinations, share exchanges, reclassifications or
18


other corporate actions involving the Series A Convertible Preferred Stock or the Series B Convertible Preferred Stock, as the case may be, will require the approval of the holders of a majority of the outstanding shares of such series of the Katapult Convertible Preferred Stock, voting as a separate class or classes, as the case may be, unless such events do not adversely affect the rights, preferences or voting powers of the Series A Convertible Preferred Stock or the Series B Convertible Preferred Stock, as the case may be, and this requirement may limit the terms we are able to offer in a potential acquisition or investment. We may face significant competition for acquisition and other strategic investment opportunities from other well-capitalized companies, many of which have greater financial resources and greater access to debt and equity capital to secure and complete acquisitions or other strategic investments, than we do. As a result of such competition, we may be unable to acquire certain assets or businesses, or take advantage of other strategic investment opportunities that we deem attractive; the purchase price for a given strategic opportunity may be significantly elevated; or certain other terms or circumstances may be substantially more onerous.

There is no assurance that we will be able to manage our growth effectively, and any failure to do so could adversely affect our ability to generate revenue and control our expenses.There is no assurance that we will be able to manage our expanding operations effectively or that we will be able to continue to grow, and any failure to do so could adversely affect our ability to generate revenue and control our expenses. Furthermore, we may be responsible for any legacy liabilities of businesses we acquire or be subject to additional liability in connection with other strategic investments. Furthermore, we may be responsible for any legacy liabilities of businesses we acquire or be subject to additional liability in connection with other strategic investments. The existence or amount of these liabilities may not be known at the time of acquisition, or other strategic investment, and may have an adverse effect on our business, results of operations, financial condition, and prospects. The existence or amount of these liabilities may not be known at the time of acquisition, or other strategic investment, and may have an adverse effect on our business, results of operations, financial condition, and prospects.

A meaningful percentage of our gross originations are concentrated with a single merchant, and any deterioration in the business of, or in our relationship with, this merchant or any other key merchant relationship or partner could materially and adversely affect our business, results of operations, financial condition, and prospects.

We depend on continued relationships with Wayfair and other key merchants. Our top merchant, Wayfair, represented approximately 25% and 36% of our gross originations (which we define as the retail price of the merchandise associated with lease-purchase agreements entered into and do not represent revenue earned) for the years ended December 31, 2025 and 2024, respectively. Our top merchant, Wayfair, represented approximately 47% and 54% of our gross originations (which we define as the retail price of the merchandise associated with lease-purchase agreements entered into through the Katapult platform and do not represent revenue earned) for the fiscal years ended December 31, 2023 and 2022, respectively. Gross originations from Wayfair exclude transactions through KPay and only include transactions directly through the Wayfair waterfall platform. Our top ten direct merchants, which are merchants with whom we have a direct contractual arrangement, in the aggregate represented approximately 45% and 54% of our gross originations for the years ended December 31, 2025 and 2024, respectively. The loss of any of our significant merchant partners, and in particular the loss of Wayfair, would materially and adversely affect our business, results of operations, financial condition, and prospects. The loss of our ability to offer our customers access to third-party merchants would have a material and adverse effect on our business, results of operations, financial condition, and prospects. In addition, a material modification in the merchant agreement with Wayfair or another significant merchant or changes in the prominence of our solution on a significant merchant’s website or prioritization of our solution in a significant merchant’s waterfall could adversely affect our business, results of operations, financial condition, and prospects.

There can be no guarantee that these direct merchant relationships will continue or, if they do continue, that these relationships will continue to be successful. There can be no guarantee that these relationships will continue or, if they do continue, that these relationships will continue to be successful. There is a risk that we may lose merchants for a variety of reasons, including a failure to meet key contractual or commercial requirements, or if merchants shift to in-house solutions (including providing a service competitive to us) or competitor providers.

If our relationship with Wayfair or another key merchant deteriorates, they choose to no longer partner with us, or choose to partner with a competitor, or their business is negatively impacted by one or more factors, our business, results of operations, financial condition and prospects will be materially and adversely affected.

The concentration of a significant portion of our business and transaction volume with a single merchant or a limited number of merchants exposes us disproportionately to events, circumstances, or risks affecting such single merchant, such as Wayfair, or our other key merchants. For example, supply chain issues have in the past and may in the future negatively impact the sales of many of our merchants which in turn has contributed to a decline in our gross origination volume during the applicable periods. If our key merchant partners, in particular Wayfair, are unable to acquire new customers or retain existing customers or are otherwise negatively impacted by the macroeconomic and geopolitical conditions, our results of operations, financial condition and prospects will be negatively impacted.

19


We also depend on continued relationships with key partners that assist in obtaining and maintaining our relationships with merchants. There is a risk that e-commerce platforms with which we partner (such as Shopify, BigCommerce, WooCommerce, and Magento) may limit or prevent the Company from being offered as a payment option at checkout. We also face the risk that our key partners could become competitors of our business.

If we are unable to attract additional direct merchants and retain and grow our relationships with our existing direct merchants, our business, results of operations, financial condition, and prospects would be materially and adversely affected.•If we are unable to attract additional merchant partners and retain and grow our relationships with our existing merchant partners, our results of operations, financial condition, and prospects would be materially and adversely affected.

Our strategy to grow our gross originations partially depends on our ability to maintain and grow our relationships with current direct merchants and to attract select new direct merchants that will stimulate consumer demand on our platform. The attractiveness of our platform to merchants depends on, among other things, our brand and reputation, our ability to sustain our value proposition to merchants for consumer acquisition, the attractiveness of our platform to merchants, the services, products and consumer decision standards offered by our competitors, and our ability to perform under, and maintain, our merchant agreements. The attractiveness of our platform to merchants depends upon, among other things, our brand and reputation, ability to sustain our value proposition to merchants for customer acquisition, the attractiveness to merchants of our digital and data-driven platform, the services, products and consumer decisioning standards offered by our competitors, and our ability to perform under, and maintain, our merchant agreements.

The success of our business is dependent on customers making payments on their leases when due and other factors affecting consumer spending and default behavior that are not under our control.

We generate substantially all of our revenue through payments on leases we provide to customers to obtain the merchandise of our merchants and we bear the risk of non-payment or late payments by our customers. As such, the success of our business is dependent on customers making payments on their leases when due. We primarily provide leases to non-prime customers who do not have sufficient cash or credit to obtain durable goods. We primarily provide leases to non-prime customers who do not have sufficient cash or credit to obtain home furnishings, automotive goods, electronics, computers, and other durable goods. The ability of these customers to make payments to us when due may be impacted by a variety of factors, such as loss of employment, deteriorating economic conditions and other factors including but not limited to disposable consumer income, inflation, consumer confidence in future economic conditions and political conditions, and consumer perceptions of personal well-being and security. The ability of these customers to make payments to us when due may be impacted by a variety of factors, such as loss of employment, the emergence of significant unforeseen expenses as well as factors affecting customer spending. Unfavorable changes in factors listed above could reduce demand for our products and services resulting in lower revenue and negatively impacting our business and our financial results. In addition to reducing demand for our products, these factors may unfavorably impact our customers' ability or willingness to make lease payments in a timely manner or at all, resulting in increased customer payment delinquencies and lease merchandise write-offs and decreased gross margins, which could also materially and adversely impact our business, financial condition and results of operations. In addition to reducing demand for our products, these factors may unfavorably impact our customers' ability or willingness to make the payments they owe us, resulting in increased customer payment delinquencies and lease merchandise write-offs and decreased gross margins, which could also materially and adversely impact our business, financial condition and results of operations.

Unexpected changes to consumer behavior could cause our proprietary algorithms and decisioning tools used in approving customers to no longer be indicative of our customer’s ability to perform.•Unexpected changes to consumer spending patterns could cause our proprietary algorithms and decisioning tools used in approving customers to no longer be indicative of our customer's ability to perform.

We believe our proprietary lease decisioning processes to be a key to the success of our business. The decisioning processes assume behavior and attributes observed for prior customers, among other factors, are indicative of performance by our future customers. Unexpected changes in consumer behavior caused by changing economic conditions and other factors may mean that our decisioning tools may not function as intended. As a result, we may approve customers that are not able to perform, which would lead to increased customer delinquencies, increased lease merchandise write-offs and decreased gross margins. As a result, we may approve relatively more customers that are not able to perform, which would lead to increased incidence and costs related to impairment of property held for lease. When there are unexpected changes to consumer behavior, our decisioning process typically requires more frequent adjustments and the application of management analysis of the interpretation and adjustment of the results produced by our decisioning tools. When there are unexpected changes to consumer spending patterns, our decisioning process typically requires more frequent adjustments and the application of management analysis of the interpretation and adjustment of the results produced by our decisioning tools. If there is a challenging macro environment, we may need to make more frequent adjustments to our decisioning process in the near term. If our decisioning tools are unable to accurately predict and respond to changes to consumer behaviors as a result of general economic or other factors, our ability to manage risk and avoid charge-offs may be negatively affected, which may result in insufficient reserves and materially and adversely impact our business, financial condition, results of operations and prospects.

20


Our success depends on the effective implementation and continued execution of our strategies.

We are focused on our mission to provide innovative lease financing solutions to non-prime customers and to enable everyday essential transactions at the merchant point of sale.

Growth of our business, including through the launch of new product offerings, requires us to invest in or expand our customer data and technology capabilities, engage and retain experienced management, and otherwise incur additional costs. For example, since we launched the app in late 2022, transactions that were completed using KPay have grown to represent 42% of our total gross originations for the year ended December 31, 2025. Approximately 62% of our 2025 gross originations started with an interaction in our Katapult App.

However, these product enhancements may not continue to generate the additional consumer and merchant engagement with our offerings that we expect. However, these product enhancements may not continue to generate the additional customer and merchant engagement with our offerings that we expect. If these or other strategic initiatives are not successful longer-term, our competitiveness as well as our business and financial results may be materially and adversely affected. Our inability to address these concerns or otherwise to achieve targeted results associated with our initiatives could adversely affect our results of operations, or negatively impact our ability to successfully execute future strategies, which may result in an adverse impact on our business and financial results.

If we fail to maintain customer satisfaction and trust in our brand, our business, results of operations, financial condition, and prospects would be materially and adversely affected.

We provide an LTO financing option for qualified customers seeking to obtain durable goods from omnichannel and e-commerce merchants.We provide a lease-to-own financing option for qualified customers seeking to obtain durable goods from e-commerce merchants. If customers do not trust our brand or do not have a positive experience, they will not use our services. If customers do not trust our brand or do not have a positive experience, they will not use our services and be unable to attract or retain merchant partners. Consequently, our ability to retain customers and attract repeat business is highly dependent on our reputation among our existing customers and merchants. Any failure to maintain a consistently high level of customer service, or a market perception that we do not maintain high-quality customer service, would adversely affect our reputation and the number of positive customer referrals that we receive and the number of new and repeat customers. As a result, our business, results of operations, financial condition, and prospects would be materially and adversely affected.

If we are unable to attract new customers and retain and grow our relationships with our existing customers, or if attracting or retaining customers is not cost-efficient, our results of operations, financial condition, and prospects would be materially and adversely affected.

Our continued success depends on our ability to generate repeat use and increased gross originations from existing customers and to attract new consumers to our platform. Our ability to retain and grow our relationships with our customers depends on the willingness of customers to use our products and services, including our Katapult App and KPay. The attractiveness of our Katapult App to consumers depends upon, among other things, the number and variety of our merchants and the mix of products and services available through our platform, our brand and reputation, customer experience and satisfaction, trust and perception of the value we provide, technological innovation, and the services, products and customer decisioning standards offered by our competitors. If we fail to attract new customers to our platform, products and services, or if we do not continually expand usage, repeat customers and gross originations, our results of operations, financial condition, and prospects would be materially and adversely affected. If any of our employees, vendors, or service providers take, convert, or misuse funds, documents, or data, or fail to follow protocol when interacting with customers and merchants, we could be liable for damages and subject to regulatory actions and penalties.

We operate in a highly competitive industry, and our inability to compete successfully would materially and adversely affect our results of operations, financial condition, and prospects.

We operate in a highly competitive industry. We face competition from a variety of businesses and new market entrants, including competitors with LTO products for e-commerce goods and other types of digital payment platforms. We face competition from a variety of businesses and new market entrants, including competitors with lease-to-own products for e-commerce goods and other types of digital payment platforms. We face competition from virtual LTO companies, e-commerce retailers (including those that offer layaway programs, other lending options or buy now, pay later programs), online sellers of used merchandise, and various types of consumer finance companies that may enable our customers to shop at online retailers, as well as with online rental stores that do not offer their customers a purchase option. We face competition from virtual lease-to-own companies, e-commerce retailers (including those that offer layaway programs and title or installment lending), online sellers of used merchandise, and various types of consumer finance companies that may enable our customers to shop at online retailers, as well as with online rental stores that do not offer their customers a purchase option. These competitors may have
21


significantly greater financial and operating resources, greater name recognition and more developed products and services, which may allow them to grow faster. Greater name recognition, or better public perception of a competitor’s reputation, may help the competitor take market share. Some competitors may be willing to offer competing products on an unprofitable basis (or may have looser decisioning standards or be willing to relax their decisioning standards) in an effort to gain market share, which could compel us to match their pricing strategy or lose business. Moreover, prime lenders may loosen their underwriting standards and provide credit to non-prime consumers, which would impact our gross origination as well as the credit quality of our customers and our business and results of operations. In addition, some of our competitors may be willing to lease certain types of products that we will not agree to lease, enter into customer leases that have services, as opposed to goods, as a significant portion of the lease value, or engage in other practices related to pricing, compliance, and other areas that we will not, in an effort to gain market share. Our business relies heavily on relationships with our merchants. Competitors undertaking these tactics could cause our merchants to cease to offer the Company’s products in favor of our competitors, or to offer our product and the products of our competitors simultaneously, which could slow growth in our business and limit or reduce profitability. An increase in competition could cause our merchants to no longer offer our product and services in favor of our competitors, or to offer our product and the products of our competitors simultaneously, which could slow growth in our business and limit or reduce profitability. Merchants could also develop their own in-house product that competes with our product. Merchants could also develop their own in house product that competes with our product. Furthermore, virtual LTO competitors may deploy different business models, such as direct-to-consumer strategies, that forego reliance on merchant relationships that may prove to be more successful. Furthermore, 18virtual lease-to-own competitors may deploy different business models, such as direct-to-customer strategies, that forego reliance on merchant relationships that may prove to be more successful.

Our estimates of market opportunity and forecasts of market growth may prove to be inaccurate, and even if the market in which we compete achieves its forecasted growth, our business could fail to grow at similar rates, if at all.

Our market opportunity estimates, including the size of the virtual LTO market, and expectations about market growth are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate, including our expectation with respect to the retail environment for home furnishings and other categories offered by our top merchant partners. Even if the markets in which we compete meet our size estimates and growth expectations, our business could fail to grow for a variety of reasons, which could adversely affect our results of operations.

We rely on the accuracy of third-party data, and inaccuracies in such data could adversely impact our approval process.

We use data from third parties as part of our proprietary risk model to assess whether a customer qualifies for one of our lease-purchase options.We use data from third parties as part of our proprietary risk model used to assess whether a customer qualifies for a lease-purchase option from a merchant. We are reliant on these third parties to ensure that the data they provide is accurate. Inaccurate data could cause us to not approve transactions that otherwise would have been approved, or instead, approve transactions that would have otherwise been denied and may lead to a higher incidence of bad debts and could have an adverse impact on our results of operations and financial condition.

The success and growth of our business depends upon our ability to continuously innovate and develop new products and technologies.

Our solution is a technology-driven platform that relies on innovation to remain competitive. The process of developing new technologies and products is complex, and we build our own technology, using the latest in artificial intelligence and machine learning (“AI/ML”), cloud-based technologies, and other tools to differentiate our products and technologies. See “Risks Related to Our Technology and Our Platform—We utilize AI/ML, which could expose us to liability or adversely affect our business” for more information. In addition, our dedication to incorporating technological advancements into our platform requires significant financial and personnel resources. In addition, our investment of resources to develop new products and technologies and make changes or updates to our platform may be insufficient. In addition, our investment of resources to develop new products and technologies and make changes or updates to our platform may either be insufficient or result in expenses that exceed the revenue actually generated from these new products. Our development efforts for these initiatives could divert capital and other resources from other growth initiatives important to our business. In addition, the product and technological enhancements that we introduce may not function as we intend or may not generate the benefits that we expect. We operate in an industry experiencing rapid technological change and frequent product introductions. We may not be able to make technological improvements as quickly as demanded by our customers and merchants, which could harm our ability to attract customers and merchants. In addition, we may not be able to effectively implement new technology-driven products and services as quickly as competitors or be successful in marketing these products and services to customers and merchants. If we are unable to successfully and timely innovate and continue to deliver a superior
22


merchant and customer experience, the demand for our products and technologies may decrease and our growth, business, results of operations, financial condition, and prospects could be materially and adversely affected.

Our failure to accurately predict the demand or growth of our new products and technologies also could have a material and adverse effect on our business, results of operations, financial condition, and prospects. New products and technologies are inherently risky, due to, among other things, risks associated with: the product or technology not working, or not working as expected; customer and merchant acceptance; technological outages or failures; and the failure to meet customer and merchant expectations. As a result of these risks, we could experience increased claims, reputational damage, or other adverse effects, which could be material. The profile of potential customers using our new products and technologies also may not be as attractive as the profile of the customers that we currently serve, which may lead to higher levels of delinquencies or defaults than we have historically experienced. Additionally, we can provide no assurance that we will be able to develop, commercially market, and achieve acceptance of our new products and technologies. Failure to accurately predict demand or growth with respect to our new products and technologies could have a material and adverse effect on our business, results of operations, financial condition, and prospects.

Financial Risks Related to Our Business

Our ability to timely raise capital in the future may be limited, or may be unavailable on acceptable terms, if at all.

The failure to raise capital when needed could harm our business, operating results and financial condition. Debt or equity issued to raise additional capital may reduce the value of our common stock. We cannot be certain when or if the operations of our business will generate sufficient cash to fund our ongoing operations or the growth of our business. We intend to make investments to support and grow our business and may require additional funds to respond to business challenges, including the need to develop or enhance our technology, expand our sales and marketing efforts or develop new products. Additional financing may not be available on favorable terms, if at all. If adequate funds are not available on acceptable terms, we may be unable to invest in future growth opportunities, which could harm our business, operating results and financial condition. If we incur additional debt, the debt holders could have rights senior to holders of our common stock and/or existing debt to make claims on our assets. The terms of any additional debt could have covenants which restrict our operations, including our ability to pay dividends on our common stock, take specific actions, such as incurring additional debt, or make capital expenditures. If we issue additional equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our common stock including liquidation or other preferences. Because the decision to issue securities in the future offering will depend on numerous considerations, including factors beyond our control, we cannot predict or estimate the amount, timing or nature of any future issuances of debt or equity securities. As a result, stockholders will bear the risk of future issuances of debt or equity securities reducing the value of their common stock and diluting their interest.

We have a history of operating losses and may not be profitable in the future.

We incurred net income of $1.4 million and net loss $25.9 million during the years ended December 31, 2025 and 2024, respectively.We incurred a net loss of approximately $36.7 million and $40.5 million during the fiscal years ended December 31, 2023 and 2022, respectively. As of December 31, 2025, our accumulated deficit was approximately $147.1 million. Our operating expenses decreased for the year ended December 31, 2025 compared to the year ended December 31, 2024, largely due to our efforts to continue to diligently manage our expenses and incorporate efficiencies and productivity improvements in our business while investing in areas that drive growth (technology, revenue team and underwriting). Notwithstanding the foregoing, we may need to further increase our operating expenses in the future in order to continue growing our business, attracting customers, merchants and funding sources, and further enhancing and developing our products and platforms. As we expand our offerings to additional markets, our offerings in these markets may be less profitable than the markets in which we currently operate. These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently to offset these higher expenses. We may incur net losses in the future and may not be profitable on a quarterly or annual basis.

23


Our revenue and operating results may fluctuate, which could result in a decline in our profitability and make it more difficult for us to grow our business.

Our revenue and operating results have varied, and may in the future vary, from quarter to quarter and by season. Periods of decline have resulted, and could in the future result, in an overall decline in profitability and make it more difficult for us to make payments on our indebtedness and grow our business. We expect our quarterly results to fluctuate in the future due to a number of factors, including general economic conditions in the markets where we operate, and customer spending patterns, including the impact of holiday and seasonal sales and tax refunds. We expect our quarterly results to fluctuate in the future due to a number of factors, including general economic conditions in the markets where we operate, the cyclical nature of customer spending, and seasonal sales and consumer spending patterns.

Any significant disruption or errors relating to our loan providers and loan processor, could delay the processing of transactions on our platform or cause temporary fluctuations in cash use and have a material and adverse effect on our business, results of operations, financial condition, and prospects.

Pursuant to the Loan Agreement, we are required to use a designated loan processor to validate customer purchases for funding our New Revolving Facility and, thus, in the operation of our platform.Pursuant to our Credit Agreement, we are required to use a designated loan processor to validate customer purchases for funding our RLOC and, thus, in the operation of our platform. The performance and accuracy of said loan processor is essential to our operations and is critical to ensuring that loans are appropriately and timely funded. The performance and accuracy of said loan processor is essential to our operations and is critical to ensuring that loans are appropriately and timely funded. We rely on the designated loan processor to ensure their systems, internal procedures, verification processes and facilities are protected against service interruptions, power or telecommunications failures, criminal acts, and similar events. We may be harmed if there is a delay, disruption, or error in loan validation. Further, if our arrangements with the designated loan processor is terminated, or if there is a lapse in service due to errors, we could experience interruptions in the provision of our leases. We may also experience increased costs and difficulties in funding leases or finding replacement loan providers or processors on commercially reasonable terms, on a timely basis, or at all.

In addition, in the event of error or interruption, we may be required to use cash to cover for any losses or uncovered leases that might occur, albeit temporarily. This could reduce our available cash or cause reputational harm, any of which could have a material and adverse effect on our business, results of operations, financial condition, and prospects.

In December 2023, the processor for our loan provider experienced a timing error in their validation processes. We alerted them to the error, temporarily covering the approved leases with our cash and the issue was resolved in January 2024. Both our loan provider and processor have since instituted changes to correct against similar interruptions in service, but there can be no assurance that a similar error will not occur in the future.

We rely on card issuers and payment processors. If we fail to comply with the applicable requirements of Visa, Mastercard or other payment processors, those payment processors could seek to fine us, suspend us or terminate our registrations, which could have a material adverse effect on our business, results of operations, financial condition, and prospects.

We rely on card issuers and payment processors and must pay a fee for this service. From time to time, payment processors such as Visa or Mastercard may increase the interchange fees that they charge for each transaction using one of their cards. The payment processors routinely update and modify their requirements. Changes in the requirements, including changes to risk management and collateral requirements, may impact our ongoing cost of doing business and we may not, in every circumstance, be able to pass through such costs to our merchants or associated participants. Furthermore, if we do not comply with the payment processors’ requirements (e.g., their rules, bylaws, and charter documentation), the payment processors could seek to fine us, suspend us or terminate our registrations that allow us to process transactions on their networks. The termination of our registration due to failure to comply with the applicable requirements of our payment processors, or any changes in the payment processors’ rules that would impair our registration, could require us to stop utilizing payment services from our payment processors, which could have a material adverse effect on our business, results of operations, financial condition, and prospects.

24


Our ability to use our net operating loss carry forwards and certain other tax attributes may be limited.

Under Section 382 of the Internal Revenue Code of 1986, as amended, or the Code, if a corporation undergoes an “ownership change,” generally defined as a greater than 50.0% change (by value) in its equity ownership over a three-year period, the corporation’s ability to use its pre-change net operating loss carryforwards and other pre-change tax attributes, such as research tax credits, to offset its post-change income may be limited or potentially significantly deferred compared to such ability in the absence of an “ownership change.” We believe that the completion of the de-SPAC transaction in June 2021 triggered such an “ownership change” resulting in limitations on our use of tax attributes from prior to the de-SPAC transaction. As a result of such an “ownership change,” our ability to use our net operating loss carryforwards and other tax credits generated since inception to offset U.S. federal taxable income may be subject to limitations. In addition, future transfers and transactions (including the pending Mergers and related transactions) that change the equity ownership of the company may trigger another “ownership change” and result in additional limitations on our ability to use our net operating loss carryforwards and other tax credits generated prior to the date of such “ownership change.” These limitations could potentially result in increased future tax liability to us and could require us to pay U.S. federal income taxes earlier than would be required if such limitations were not in effect. Similar rules and limitations may apply for state income tax purposes.

Risks Related to Our Technology and Our Platform

We utilize AI/ML, which could expose us to liability or adversely affect our business.

We use AI/ML in many aspects of our business. Our AI/ML capabilities are a combination of internally developed
proprietary models and third-party data and services. In particular, we use AI/ML to create models which provide data to assist in key aspects of our business, including fraud analysis, credit risk analysis, and product personalization. Our core decisioning technology including our proprietary decision engine, fraud propensity models, default propensity models, and our proprietary scoring system ("Zibby/Katapult Score") is developed and maintained internally by our engineering and data science teams. These internally developed models are trained on our own historical transactions, lease repayment performance data, as well as third-party data, and they power our real-time underwriting decisions, risk-based pricing engine and our patent-pending leasable product detection technology within Mobile app marketplace - Katapult Pay. In addition to our internal data and proprietary models, we rely on approximately 2,000 data elements from third-party providers to supplement the information collected directly from applicants. These third-party data sources include credit data providers, identity fraud check providers as well as digital identity intelligence and authentication platforms that assist in detecting and preventing payment fraud ensuring secure transactions. We also utilize third-party cloud infrastructure services, principally AWS, to host and operate our platform and we use certain third-party tools in areas such as marketing automation, customer engagement and collections.

Our reliance on third-party service providers, including cloud infrastructure providers and data vendors, exposes us to operational and strategic risks. If such providers experience outages, security incidents, contractual disputes, pricing changes, regulatory constraints, or discontinue services, our ability to deliver real-time underwriting decisions could be adversely affected.

There are significant risks involved in utilizing AI/ML and no assurance can be provided that our use of such AI/ML will enhance our products or services or produce the intended results. There are significant risks involved in utilizing AI/ML and no assurance can be provided that our use of such AI/ML will enhance our products or services or produce the intended results. The AI/ML models that we use are trained using various data sets. If the AI/ML models are incorrectly designed, the data we use to train them is incomplete, inadequate, or biased in some way, or we do not have sufficient rights to use the data on which our AI/ML models rely, the performance of our products, services, and business, as well as our reputation, could suffer or we could incur liability through the violation of laws and regulations, third-party intellectual property, privacy, or other rights, or contracts to which we are a party. AI/ML can present ethical issues and may subject us to new or heightened legal, regulatory, ethical, or other challenges; and inappropriate or controversial data practices by developers and end-users, or other factors adversely affecting public opinion of AI/ML, could impair the acceptance of AI/ML solutions, including those incorporated in our products and services. If the AI/ML tools that we use are deficient, inaccurate or controversial, we could incur operational inefficiencies, competitive harm, legal liability, brand or reputational harm, or other adverse impacts on our business and financial results. Further, there can be no assurance
25


that our use of AI/ML will result in our business or operations being more efficient or profitable or otherwise result in our intended outcomes. Moreover, our competitors or other third parties may incorporate AI/ML into their products more quickly or more successfully than us, which could impair our ability to compete effectively.

Additionally, if any of our employees, contractors, consultants, vendors or service providers use any third-party AI/ML-powered software in connection with our business or the services they provide to us, it may lead to the inadvertent disclosure or incorporation of our confidential information into publicly available training sets, which may impact our ability to realize the benefit of, or adequately obtain, maintain, protect, defend and enforce our intellectual property or other property rights, harming our competitive position and business. Any output created by us using AI/ML tools may not be subject to copyright protection, which may adversely affect our intellectual property and other proprietary rights in, or ability to commercialize or use, any such content. In the United States, a number of civil lawsuits have been initiated related to the foregoing and other concerns relating to AI/ML, any one of which may, among other things, lead us to limit the ways in which our AI/ML systems are trained and may affect our ability to develop our AI/ML-powered products and solutions. To the extent that we do not have sufficient rights to use the data or other material or content used in or produced by the AI/ML tools used in our business, or if we experience cybersecurity incidents in connection with our use of AI/ML, it could adversely affect our reputation and expose us to legal liability or regulatory risk, including with respect to third-party intellectual property, data privacy and security, publicity, contractual or other rights.

In addition, regulation of AI/ML is rapidly evolving worldwide as legislators and regulators are increasingly focused on these powerful emerging technologies. The technologies underlying AI/ML and its uses are subject to a variety of laws and regulations, including intellectual property, data privacy and security, consumer protection, competition, and equal opportunity laws, and are expected to be subject to increased regulation and new laws or new applications of existing laws and regulations. AI/ML is the subject of ongoing review by various U.S. governmental and regulatory agencies, and various U.S. states and other foreign jurisdictions are applying, or are considering applying, their platform moderation, data privacy and security laws and regulations to AI/ML or are considering general legal frameworks for AI/ML. Increased regulatory scrutiny of AI/ML models, including model explainability, fairness, data privacy, and consumer protection requirements, could require us to make modifications to our models or processes, increase compliance costs, or restrict certain uses of these technologies. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our operations or offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI/ML technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI/ML.

Real or perceived software errors, failures, bugs, defects, or outages could adversely affect our business, results of operations, financial condition, and prospects.

Our platform and our internal systems rely on software that is highly technical and complex. In addition, our platform and our internal systems depend on the ability of such software to store, retrieve, manage and otherwise process immense amounts of data, including personal data. As a result, undetected errors, failures, bugs, or defects may be present in such software or occur in the future in such software, including open-source software and other software we license in from third parties, especially when updates or new products or services are released. As a result, undetected errors, failures, bugs, or defects may be present in such software or occur in the future in such software, including open source software and other software we license in from third parties, especially when updates or new products or services are released.

Any real or perceived errors, failures, bugs, defects, or outages in such software could result in outages or degraded quality of service on our platform or errors in our financial reporting or charges to our customers that could adversely impact our business (including through causing us not to meet contractually required service levels), as well as negative publicity, loss of or delay in market acceptance of our products and services, and harm to our brand or weakening of our competitive position.Any real or perceived errors, failures, bugs, defects, or outages in such software may not be found until our customers use our platform and could result in outages or degraded quality of service on our platform that could adversely impact our business (including through causing us not to meet contractually required service levels), as well as negative publicity, loss of or delay in market acceptance of our products and services, and harm to our brand or weakening of our competitive position. In such an event, we may be required, or may choose, to expend significant additional resources in order to correct the error, failure, bug or defect. Any real or perceived errors, failures, bugs, defects, or outages in the software we rely on could also subject us to liability claims, result in data security breaches or other security incidents, impair our ability to attract new customers, retain existing customers, or expand their use of our products and services, which would adversely affect our business, results of operations, financial condition, and prospects.

26


Our results depend on continued integration and support of our platforms, including our integration with direct merchants.

We depend on our merchant partners, which generally accept most major credit cards and other forms of payment, to present our platform as a payment option and to integrate our platform into their website or in their store, such as by featuring our platform on their websites or in their stores and at checkout. The failure by our merchants to effectively present, integrate, and support our platform, or to effectively explain LTO transactions to potential customers, would have a material and adverse effect on our business, results of operations, financial condition, and prospects. The failure by our merchants to effectively present, integrate, and support our platform, or to effectively explain lease-to-own transactions to potential customers, would have a material and adverse effect on our business, results of operations, financial condition, and prospects.

In addition, as a result of user interface or design choices, a direct merchant could modify how our platform is presented as a payment option, including adjustment of the priority of positioning. The presentation and positioning of our platform by a direct merchant is up to the discretion of the merchant. A direct/waterfall may choose to position a competitor ahead of us, reduce the prominence or positioning of our platform, or remove our platform as a payment option. We may not have visibility that a change has been made until after the fact. Any change in our presentation or positioning with a direct merchant could have a material and adverse effect on our business, results of operations, financial condition, and prospects.

We rely on KPay enabled merchants to allow access to their stores through our Katapult App and our desktop and mobile websites.We rely on third-party merchants to allow access to their stores through our mobile app.

We depend on KPay enabled merchants to continue to allow our customers to utilize our platform, including our websites and Katapult App, to access and buy goods at their stores. As a result, there can be no assurance that we will be able to continue to offer our customers access to any particular KPay enabled merchant. The loss of our ability to offer our customers access to KPay enabled merchants would have a material and adverse effect on our business, results of operations, financial condition, and prospects. The loss of our ability to offer our customers access to third-party merchants would have a material and adverse effect on our business, results of operations, financial condition, and prospects.
We are subject to stringent and changing laws, regulations, rules, standards and contractual obligations related to data privacy and security, which could increase the cost of doing business, compliance risks and potential liability and otherwise negatively affect our operating results and business regulations.

In the ordinary course of business, we collect, receive, store, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, share and otherwise process a wide variety of data and information, including personal data and sensitive personal data, proprietary and confidential business data, trade secrets, and intellectual property. For example, we process the personal data, including sensitive personal data, of customers, including Social Security numbers. We are subject to numerous data privacy and security obligations, such as various laws, regulations, rules, standards and contractual obligations that govern the processing of personal data by us or by third parties on our behalf.

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, regulations and rules including data breach notification laws, personal data privacy laws, and consumer protection laws. For example, the Telephone Consumer Protection Act (“TCPA”) imposes specific requirements relating to marketing to individuals using technology such as telephones, mobile devices, and text messages. TCPA violations can result in significant financial penalties, including penalties or criminal fines imposed by the Federal Communications Commission or fines of up to $1,500 per violation imposed through private litigation or by state authorities. Class action suits are the most common method for private enforcement. We are also subject to the rules and regulations promulgated under the authority of the FTC, which regulates unfair or deceptive acts or practices, including with respect to data privacy and security. Moreover, the United States Congress has considered, and will likely in the future consider, various proposals for more comprehensive data privacy and security legislation, to which we may be subject if passed. Moreover, the United States Congress has recently considered, and is currently considering, various proposals for more comprehensive data privacy and security legislation, to which we may be subject if passed.

27


Data privacy and security are also areas of increasing state legislative focus, and we are, or may in the future become, subject to various state laws and regulations regarding data privacy and security. For example, the CCPA broadly defines personal information, gives California residents expanded privacy rights and protections, including the right to opt-out of a business’s sharing of their personal information for targeted advertising purposes, and provides for civil penalties for violations and a private right of action for certain data breaches. For example, the CCPA broadly defines personal information, gives California residents expanded privacy rights and protections, and provides for civil penalties for violations and a private right of action for certain data breaches. The CCPA is indicative of a trend towards greater state-level regulation of data privacy and security in the United States. The CCPA is indicative of a trend towards greater state-level regulation of data privacy and security in the US A number of other states have enacted, or are considering enacting, comprehensive data privacy laws that share similarities with the CCPA. A number of other states have enacted, or are considering enacting, comprehensive data privacy and security laws that share similarities with the CCPA. In addition, laws in all 50 U.S. states generally require businesses to provide notice under certain circumstances to customers whose personal data has been disclosed as a result of a data breach. For additional information on data privacy and security laws, regulations and rules we are, or may in the future become, subject to, see the section titled “Business—Government Regulation.”

In addition, privacy advocates and industry groups have proposed, and may propose, data privacy and security standards with which we are legally or contractually bound to comply. For example, we may also be subject to the Payment Card Industry Data Security Standard (“PCI DSS”), which requires companies that process payment card data to adopt certain measures to ensure the security of cardholder information, including using and maintaining firewalls, adopting proper password protections for certain devices and software, and restricting data access. Noncompliance with PCI DSS can result in significant penalties or liability, litigation, loss of access to major payment card systems, damage to our reputation, and revenue losses. We may also rely on vendors to process payment card data, and those vendors may be subject to PCI DSS, and our business may be negatively affected if our vendors are fined or suffer other consequences as a result of PCI DSS noncompliance.

We also make public statements about our use and disclosure of personal data through our privacy policies, information on our website and press statements. Although we endeavor to comply with our public statements and documentation, we may at times fail to do so or be alleged to have failed to do so. The publication of our privacy policies and other statements that provide promises and assurances about data privacy and security can subject us to potential government or legal action if they are found to be deceptive, unfair or misrepresentative of our actual practices. Any concerns about our data privacy and security practices, even if unfounded, could damage our reputation and adversely affect our business.

Our obligations related to data privacy and security are quickly changing in an increasingly stringent fashion, creating some uncertainty as to the effective future legal framework. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these obligations requires significant resources and may necessitate changes to our information technologies, systems, and practices and to those of any third parties that process personal data on our behalf. In addition, these obligations may require us to change our business model. Our business model materially depends on our ability to process personal data, so we are particularly exposed to the risks associated with the rapidly changing legal landscape. For example, we may be at heightened risk of regulatory scrutiny, and any changes in the regulatory framework could require us to fundamentally change our business model.

Although we endeavor to comply with all applicable data privacy and security laws, regulations, rules, standards, and contractual obligations, we may at times fail (or be perceived to have failed) to do so. Moreover, despite our efforts, our personnel or third parties upon whom we rely on may fail to comply with such obligations, which could negatively impact our business operations and compliance posture. Moreover, despite our efforts, our personnel or third parties upon whom we rely may fail to comply with such obligations, which could negatively impact our business operations and compliance posture. For example, any failure by a third-party service provider to comply with applicable laws, regulations, rules, standards and contractual obligations could result in adverse effects, including inability to or interruption in our ability to operate our business and proceedings against us by governmental entities or others. If we fail, or are perceived to have failed, to address or comply with data privacy and security obligations, we could face significant consequences. These consequences may include, but are not limited to, government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class claims; damages); additional reporting requirements and/or oversight; bans on processing personal data; and orders to destroy or not use personal data.

Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business operations; interruptions or
28


stoppages of data collection needed to train our algorithms; inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or revision or restructuring of our operations.

Any significant disruption in, or errors in, service on our platform or relating to vendors, including events beyond our control, could prevent us from processing transactions on our platform or posting payments and have a material and adverse effect on our business, results of operations, financial condition, and prospects.

We use vendors, such as our cloud computing web services provider, virtual card processing companies, and third-party software providers, in the operation of our platform. The satisfactory performance, reliability, and availability of our technology and our underlying network and infrastructure are critical to our operations and reputation and the ability of our platform to attract new and retain existing merchants and customers. For example, KPay utilizes a third-party payment processor, the interruption of which could cause a decrease in the performance, reliability and availability of KPay.

In addition, via KPay, certain leases are originated by our issuing bank partner and then disbursed to merchants via single-use virtual cards facilitated through our partnership with an issuer processor, Marqeta. This issuer processor issues single-use virtual cards through Sutton Bank, its issuing bank partner, which allow leases facilitated through our platform to be processed over the card network. Our agreement with Marqeta covers management of card issuance, processing, and managing of the Sutton Bank relationship as well as standard terms related to service level obligations, fees, intellectual property, privacy and security, confidentiality, and termination for cause with chance to cure and termination for convenience after extensive notice. Such leases facilitated through our platform can be used at merchants where we are not integrated at checkout, allowing consumers to complete purchases with virtual cards just as they would with a standard credit or debit card. In the event that our issuer processor or the issuing bank partner become unable or unwilling to facilitate the disbursements to merchants and we are unable to reach an agreement with another third-party partner, such loans would no longer be able to be facilitated through our KPay platform.

We also rely on these vendors to protect their systems, networks and facilities against damage or service interruptions from natural disasters, power or telecommunications failures, air quality issues, environmental conditions, computer viruses, cyber-attacks or other attempts to harm these systems, data security breaches or other security incidents, criminal acts, and similar events. We rely on these vendors to protect their systems, networks and facilities against damage or service interruptions from natural disasters, power or telecommunications failures, air quality issues, environmental conditions, computer viruses, cyber-attacks or other attempts to harm these systems, data security breaches or other security incidents, criminal acts, and similar events. If our arrangement with a vendor is terminated or if there is a lapse of service or damage to its systems, networks or facilities, we could experience interruptions in our ability to operate our platform. We also may experience increased costs and difficulties in replacing that vendor and replacement services may not be available on commercially reasonable terms, on a timely basis, or at all. Any interruptions or delays in our platform availability, whether as a result of a failure to perform on the part of a vendor, any damage to one of our vendor’s systems, networks or facilities, the termination of any of our third-party vendor agreements, software bugs or failures, our or our vendor’s error, natural disasters, terrorism, other man-made problems, or data security breaches or other security incidents, whether accidental or willful, or other factors, could harm our relationships with our merchants and customers and also harm our reputation.

In addition, we source certain information from third parties. For example, our risk scoring model is based on algorithms that evaluate a number of factors and currently depend on sourcing certain information from third parties. In the event that any third-party from which we source information experiences a service disruption, whether as a result of maintenance, software bugs or failures, natural disasters, terrorism, other man-made problems, or data security breaches or other security incidents whether accidental or willful, or other factors, the ability to score and decision LTO applications through our platform may be adversely impacted. Additionally, there may be errors contained in the information provided by third parties. This may result in the inability to approve otherwise qualified applicants through our platform, which may adversely impact our business by negatively impacting our reputation and reducing our transaction volume.

29


To the extent we use or are dependent on any particular third-party data, technology, or software, we may also be harmed if such data, technology, or software becomes non-compliant with existing laws, regulations, rules or standards, becomes subject to third-party claims of intellectual property infringement, misappropriation, or other violation, or malfunctions or functions in a way we did not anticipate. Any loss of the right to use any of this data, technology, or software could result in delays in the provisioning of our products and services until equivalent or replacement data, technology, or software is either developed by us, or, if available, is identified, obtained, and integrated, and there is no guarantee that we would be successful in developing, identifying, obtaining, or integrating equivalent or similar data, technology, or software, which could result in the loss or limiting of our products, services, or features available in our products or services.

In addition, in the event of damage or interruption, our insurance policies may not adequately compensate us for any losses that we may incur. Our disaster recovery plan has not been tested under actual disaster conditions, and we may not have sufficient capacity to recover all data and services in the event of an outage. These factors could prevent us from processing transactions or posting payments on our platform, damage our brand and reputation, divert the attention of our employees, reduce our revenue, subject us to liability, and cause customers or merchants to abandon our platform, any of which could have a material and adverse effect on our business, results of operations, financial condition, and prospects.

If major mobile application distribution channels change their standard terms and conditions in a manner that is detrimental to us, or suspend or terminate their existing relationship with us, our business, financial condition and results of operations may be materially and adversely affected.

We currently cooperate with Apple’s app store and a major Android app store based in the People’s Republic of China to distribute the Company’s app to users. As such, the promotion, distribution and operation of our application are subject to such distribution platforms’ standard terms and policies for application developers, which are subject to the interpretation of, and frequent changes by, these distribution channels. If these third-party distribution platforms change their terms and conditions in a manner that is detrimental to us, or refuse to distribute our application, or if any other major distribution channel with which we would like to seek collaboration refuses to collaborate with us in the future on commercially favorable terms, our business, financial condition and results of operations may be materially and adversely affected.

Data security breaches or other security incidents with respect to our information technology systems, networks or data, or those of third parties upon which we rely, could result in adverse consequences, including but not limited to regulatory investigations or actions, litigation, fines and penalties, disruptions of our business operations, reputational harm, loss of revenue or profits, and loss of customers.

Cyber-attacks, malicious internet-based activity, and online and offline fraud are prevalent and continue to increase. These threats are becoming increasingly difficult to detect. These threats come from a variety of sources, including traditional computer “hackers,” threat actors, personnel (such as through theft or misuse), sophisticated nation states, and nation-state-supported actors. Some actors now engage and are expected to continue to engage in cyber-attacks, including without limitation nation-state actors for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon which we rely may be vulnerable to a heightened risk of these attacks, including cyber-attacks, that could materially disrupt our systems, networks and operations, supply chain, and ability to produce, sell and distribute our goods and services. The automated nature of our business and our reliance on digital technologies may make us an attractive target for, and potentially vulnerable to cyber-attacks. We and the third parties upon which we rely may be subject to a variety of evolving threats, including but not limited to: computer malware (including as a result of advanced persistent threat intrusions), malicious code (such as viruses and worms), social engineering (including phishing attacks), ransomware attacks, denial-of-service attacks (such as credential stuffing), personnel misconduct or error, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of data or other information technology assets, adware, telecommunication failures, earthquakes, fires, floods, and other similar threats.

Ransomware attacks, including by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of
30


data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems and networks (including our products or services) or the third-party information technology systems and networks that support us and our services. We are incorporated into the supply chain of a large number of companies worldwide and, as a result, if our products are compromised, a significant number of companies could be simultaneously affected. The potential liability and associated consequences we could suffer as a result of such a large-scale event could be catastrophic and result in irreparable harm.

Cybersecurity risks may be heightened as a result of ongoing military conflicts such as military conflict between Russia and Ukraine and the related sanctions imposed by the United States and other countries or the ongoing conflicts in the Middle East. Furthermore, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems and networks could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems, networks and technologies.

Any of the above identified or similar threats could cause a data security breach or other security incident. A data security breach or other security incident could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure, transfer, use or other processing of, or access to our, our customers’, our vendors’ or our merchants’ confidential, proprietary, personal or other information. A data security breach or other security incident could disrupt our ability (and that of third parties upon whom we rely) to provide our platform, products, or services. We may expend significant resources in connection with investigating, mitigating or remediating, or modifying our business activities to protect against, actual or perceived data security breaches or other security incidents. Certain data privacy and security obligations may require us to implement and maintain specific security measures, as well as maintain industry-standard or reasonable security measures to protect our information technology systems and networks which contain confidential, proprietary, personal and other information.

While we have implemented security measures designed to protect against data security breaches and other security incidents, there can be no assurance that these measures will be effective. We may be unable in the future to detect vulnerabilities in our information technology systems and networks (including our products or services) because such threats and techniques change frequently, are often sophisticated in nature, may not be detected until after a security incident has occurred, and may see their frequency increased and effectiveness enhanced, by the use of AI/ML. Despite our efforts to identify and remediate vulnerabilities, if any, in our information technology systems and networks (including our products or services), our efforts may not be successful. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities.

We rely upon third-party service providers and technologies to operate critical business systems to process confidential, proprietary, personal and other information in a variety of contexts, including, without limitation, third-party providers of cloud-based infrastructure, virtual card processing, encryption and authentication technology, employee email, and other functions.We may rely upon third-party service providers and technologies to operate critical business systems to process confidential, proprietary, personal and other information in a variety of contexts, including, without limitation, third-party providers of cloud-based infrastructure, virtual card processing, encryption and authentication technology, employee email, and other functions. We may share or receive confidential, proprietary, personal or other information with or from third parties. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place. Due to applicable laws, regulations, rules, standards and contractual obligations, we may be held responsible for data security breaches or other security incidents attributed to our third-party service providers as they relate to the information we share with them.

Any actual or perceived failure to comply with legal and regulatory requirements applicable to us, including those relating to data privacy and security, or any failure to protect the information that we collect from our customers and merchants, including personal data, from cyber-attacks, data security breaches or other security incidents, or any such actual or perceived failure by our originating bank partners, may result in, among other things, revocation of required licenses or registrations, loss of approved status, private litigation, regulatory or governmental
31


investigations, administrative enforcement actions, sanctions, civil and criminal liability, and constraints on our ability to continue to operate.

Applicable data privacy and security laws, regulations, rules, standards and contractual obligations may require us to notify relevant stakeholders of data security breaches and other security incidents. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. If we (or a third party upon whom we rely) experience, or are perceived to have experienced, a data security breach or other security incident, or fail to make adequate or timely disclosures to the public, regulators or law enforcement agencies following any such event, we may experience adverse consequences. These consequences may include: interruptions to our operations (including availability of data), violation of applicable data privacy and security laws, regulations, rules, standards and contractual obligations; litigation (including class claims), damages, an obligation to notify regulators and affected individuals, the triggering of indemnification and other contractual obligations, government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing personal and other sensitive data; negative publicity; reputational damage; loss of customers and ecosystem partners; monetary fund diversions; financial loss; and other similar harms. Additionally, our originating bank partners also operate in a highly regulated environment, and many laws and regulations that apply directly to our originating bank partners are indirectly applicable to us through our arrangements with our originating bank partners. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. We cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our data privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims.

While we take precautions to prevent customer identity fraud, it is possible that identity fraud may still occur or has occurred, which may adversely affect the performance of the LTO transactions facilitated through our platform.

There is risk of fraudulent activity associated with our platform, customers, and third parties handling customer information. Our resources, technologies, and fraud prevention tools may be insufficient to accurately detect and prevent fraud. We bear the risk of loss for LTO transactions facilitated through our platform. We bear the risk of loss for lease-to-own transactions facilitated through our platform. The level of fraud related charge-offs on the LTO transactions facilitated through our platform could be adversely affected if fraudulent activity were to significantly increase. The level of fraud related charge-offs on the lease-to-own transactions facilitated through our platform could be adversely affected if fraudulent activity were to significantly increase.

We bear the risk of customer fraud in a transaction involving us, a customer, and a merchant, and we generally have no recourse to the merchant to collect the amount owed by the customer. Significant amounts of fraudulent cancellations or chargebacks and the potential cost of remediation could adversely affect our business or financial condition. High profile fraudulent activity or significant increases in fraudulent activity could also lead to regulatory intervention, negative publicity, and the erosion of trust from our customers and merchants, and could materially and adversely affect our business, results of operations, financial condition, prospects, and cash flows.

Failure to adequately obtain, maintain, protect, defend and enforce our intellectual property and other proprietary rights could harm our business, operating results and financial condition.•Failure to adequately obtain, maintain, protect, defend and enforce our intellectual property and proprietary rights could harm our business, operating results and financial condition.

Our business depends on intellectual property and proprietary technology and information, the protection of which is crucial to the success of our business. We rely on a combination of patent, copyright, trademark, and trade secret laws in the United States, as well as license agreements, confidentiality procedures, non-disclosure agreements, and other contractual protections, to obtain, maintain, protect, defend and enforce our intellectual property and other proprietary rights, including our proprietary technology, software, know-how, and brand. We rely on a combination of patent, copyright, trademark, and trade secret laws in the United States, as well as license agreements, confidentiality procedures, non-disclosure agreements, and other contractual protections, to establish and protect our intellectual property and proprietary rights, including our proprietary technology, software, know-how, and brand.

Although we take steps to obtain, maintain, protect, defend and enforce our intellectual property and other proprietary rights, we cannot be certain that the steps we have taken will be sufficient or effective to prevent the unauthorized access, use, copying, reverse engineering, circumvention, infringement, misappropriation or other violation of our intellectual property and proprietary technology and information, including by third parties who may
32


use our intellectual property or other proprietary rights to develop services that compete with ours. We may not be able to register or enforce all of our trademarks or other intellectual property and other proprietary rights, any of which may be challenged by others. We may not be able to register or enforce all of our trademarks and any of our trademarks or other intellectual property rights may be challenged by others.

Further, we license certain technology, software, data and other intellectual property from third parties that are important to our business. Our business may suffer if any current or future licenses or other grants of rights to us terminate, if the licensors (or other applicable counterparties) fail to abide by the terms of the license or other applicable agreement, if the licensors fail to enforce the licensed intellectual property against infringing third parties or if the licensed intellectual property and other proprietary rights are found to be invalid or unenforceable.

We have in the past, and may in the future, be accused of infringing intellectual property and other proprietary rights of third parties which may materially and adversely affect our business, financial condition, and results of operations.

Third parties may claim that the technology used in the operation of our business infringes upon their intellectual property and other proprietary rights. For example, on September 30, 2024, FlexShopper filed a complaint against us in the United States District Court for the Eastern District of Texas Marshall Division. The complaint alleges patent infringement and seeks an injunction as well as damages for alleged lost profits and willfulness. On November 24, 2025, the court granted plaintiff’s counsel’s motion to withdraw due to “irreconcilable differences” and gave the plaintiff until January 20, 2026 to find new counsel. On December 23, 2025, the plaintiff filed for Chapter 11 protection in the U.S. Bankruptcy Court for the District of Delaware. On March 3, 2026, FlexShopper was sold to ReadySett, LLC, a subsidiary of Snap Finance. We have not recorded any loss contingencies associated with this litigation as loss is not probable and the amount is not reasonably estimable as of December 31, 2025. We intend to vigorously defend this case, but we cannot be certain of the ultimate outcome of these legal proceedings. If FlexShopper prevails in this ongoing litigation, we could be enjoined or be ordered to pay significant damages, either of which would have a material and adverse impact on our business. Even if we ultimately prevail in the FlexShopper litigation or other such litigation, this type of litigation is time-consuming and costly to defend, resulting in the diversion of significant operational resources and potential changes to our business model. Our involvement in intellectual property disputes and any failure to adequately obtain, maintain, protect, defend and enforce our intellectual property and other proprietary rights may cause our business, operating results and financial condition to suffer. Our involvement in intellectual property disputes and any failure to adequately protect our intellectual property rights may cause our business, operating results and financial condition to suffer. In addition, during the course of this kind of litigation, there could be public announcements of the results of hearings, motions or other interim proceedings or developments. If securities analysts or investors perceive these results to be negative, it could have a substantial adverse effect on the price of our common stock.

The possibility of intellectual property claims against us increases as we continue to grow. Such claims, with or without merit, may result in our expenditure of significant financial and management resources, injunctions against us or payment of damages. We may need to obtain licenses from third parties who allege that we have infringed their rights, but such licenses may not be available on terms acceptable to us or at all. Even if a license is available, we could be required to pay significant royalties, which would increase our operating expenses. As a result, we may be required to develop alternative non-infringing technology, which could require significant effort and expense. These risks have been amplified by the increase in third parties whose sole or primary business is to assert such claims.

The outcome of any claims, investigations and proceedings is inherently uncertain, and in any event, defending against these claims could be both costly and time-consuming and could significantly divert the efforts and resources of our management and other personnel. An adverse determination in any such litigation or proceedings could cause us to pay damages, as well as legal and other costs, limit our ability to conduct business or require us to change the manner in which we operate.

33


Legal and Compliance Risks

Our business is subject to the requirements of various federal, state and local laws and regulations, which can require significant compliance costs and expose us to government investigations, significant additional costs, fines or other monetary penalties or settlements, and compliance-related burdens.

Our business is subject to extensive federal, state and local laws and regulations and an increased risk of regulatory actions as a result of the highly regulated nature of our industry and the focus of state and federal enforcement agencies on the LTO industry in particular. Any adverse change in applicable laws or regulations, the passage of unfavorable new laws or regulations, or the manner in which any applicable laws and regulations are interpreted or enforced could dictate changes to our business practices that may be materially adverse to the Company. Further, our transactions and operations are subject to various federal and state laws and regulations which may result in significant compliance costs as well as expose us to litigation. In particular, our rental-purchase transactions and the customer-facing operations related thereto, such as collections and marketing, are subject to various other federal, state and/or local consumer protection laws. These laws, as well as the rental-purchase statutes under which we operate, provide various remedies in connection with violations, including restitution and other monetary penalties and sanctions which in certain circumstances can be significant.

We cannot determine with any degree of certainty whether any new laws or regulations will be enacted, or whether government agencies will initiate new or different interpretations of existing laws. The impact of new laws and regulations, or modifications by regulators concerning the interpretation or enforcement of existing laws, on our business is not known; however, any such changes could materially and adversely impact our business.

The laws and regulations applicable to our operations are subject to agency, administrative and/or judicial interpretation. Some of these laws and regulations have been enacted only recently and/or may not yet have been interpreted or may be interpreted infrequently. As a result of non-existent or sparse interpretations, ambiguities in these laws and regulations may create uncertainty with respect to the requirements of any applicable laws and regulations. Any ambiguity under a law or regulation to which we are subject may lead to regulatory investigations, governmental enforcement actions and private causes of action, such as class action lawsuits, with respect to our compliance with such laws or regulations.

For information on the laws, regulations, rules, and standards we are, or may in the future become, subject to, and the associated risk to our business, see the section titles “Business—Government Regulation”

For information on data privacy and security laws, regulations, rules, standards and contractual obligations we are, or may in the future become, subject to, and the associated risks to our business, see the section titled “Risk Factors—Risks Related to Our Technology and Our Platform—We are subject to stringent and changing laws, regulations, rules, standards and contractual obligations related to data privacy and security, which could increase the cost of doing business, compliance risks and potential liability and otherwise negatively affect our operating results and business regulations.”

We are subject to sales, income and other taxes, which can be difficult and complex to calculate due to the nature of our businesses. A failure to correctly calculate and pay such taxes, or an unfavorable outcome on uncertain tax positions we may record from time to time, may result in substantial tax liabilities and a material adverse effect on several aspects of our performance.

The application of indirect taxes, such as sales tax, continues to be a complex and evolving issue, particularly with respect to the LTO industry generally and our virtual LTO business more specifically.The application of indirect taxes, such as sales tax, continues to be a complex and evolving issue, particularly with respect to the lease-to-own industry generally and our virtual lease-to-own business more specifically. Many of the fundamental statutes and regulations that impose these taxes were established before the growth of the LTO industry and e-commerce and, therefore, in many cases it is not clear how existing statutes apply to our business. Many of the fundamental statutes and regulations that impose these taxes were established before the growth of the lease-to-own industry and e-commerce and, therefore, in many cases it is not clear how existing statutes apply to our business. In addition, governments are increasingly looking for ways to increase revenues, which has resulted in discussions about tax reform and other legislative action to increase tax revenues, including through indirect taxes. This also may result in other adverse changes in or interpretations of existing sales, income and other tax regulations. Further, we may fail to allocate sales tax correctly which could result in over-reporting or under-reporting revenue and sales tax expense.
34



If we fail to establish and maintain effective internal control over financial reporting, our ability to accurately and timely report our financial results could be adversely affected.

We are required to comply with a variety of reporting, accounting and other rules and regulations. As a public reporting company subject to the rules and regulations established from time to time by the SEC and Nasdaq, we are required to, among other things, establish and periodically evaluate procedures with respect to our disclosure controls and procedures. In addition, as a public company, we are required to document and test our internal control over financial reporting pursuant to Section 404 of the Sarbanes-Oxley Act of 2002 so that our management can certify, on an annual basis, that our internal control over financial reporting is effective. As such, we maintain a system of internal control over financial reporting, but there are limitations inherent in internal control systems. A control system can provide only reasonable, not absolute, assurance that the objectives of the control system are met. In addition, the design of a control system must reflect the fact that there are resource constraints, and the benefit of controls must be appropriate relative to their costs. Furthermore, compliance with existing requirements is expensive and we may need to implement additional finance and accounting and other systems, procedures and controls to satisfy our reporting requirements. We have in the past, and may in the future, identify deficiencies in our internal controls that, individually or in the aggregate, constitute material weaknesses. If we are not able to comply with the requirements of Section 404 in a timely manner or if we or our independent registered public accounting firm identify deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, we could fail to meet our reporting obligations or they could result in material misstatements of our financial statements, and we could also be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources. If our internal control over financial reporting is determined to be ineffective, such failure could cause investors to lose confidence in our reported financial information, negatively affect the market price of our common stock, subject us to regulatory investigations and penalties, and adversely impact our business and financial condition.

Changes to tax laws or exposure to additional tax liabilities may have a negative impact on our operating results.

Continued developments in U.S. tax reform and changes to tax laws and rates in other jurisdictions where we do business could adversely affect our results of operations and cash flows. It is also possible that provisions of U.S. tax reform could be subsequently amended in a way that is adverse to us.

In addition, we may undergo tax audits in various jurisdictions in which we operate. Although we believe that our income tax provisions and accruals are reasonable and in accordance with U.S. generally accepted accounting principles (“U.S. GAAP”), and that we prepare our tax filings in accordance with all applicable tax laws, the final determination with respect to any tax audits and any related litigation, could be materially different from our historical income tax provisions and accruals. The results of a tax audit or litigation could materially affect our operating results and cash flows in the periods for which that determination is made. In addition, future period net income may be adversely impacted by litigation costs, settlements, penalties and interest assessments.

We are subject to legal proceedings and claims from time to time that may seek material damages or otherwise may have a material adverse effect on our business.

We are subject to legal proceedings and claims from time to time that may seek material damages or otherwise may have a material adverse effect on our business. See Note 11 to our Consolidated Financial Statements included within Part II, Item 8 contained in this Annual Report on Form 10-K for more information. The costs we incur in defending ourselves or associated with settling any of these proceedings, as well as a material final judgment or decree against us, could materially adversely affect our financial condition by requiring the payment of the settlement amount, a judgment or the posting of a bond and/or such matters could otherwise materially and adversely impact our business, including resulting in additional dilution if we are obligated to issue shares to settle all or a portion of such legal proceedings. The costs we incur in defending ourselves or associated with settling any of these proceedings, as well as a material final judgment or decree against us, could materially adversely affect our financial condition by requiring the payment of the settlement amount, a judgment or the posting of a bond and/or such matters could otherwise materially and adversely impact our business, including resulting in additional dilution if we are obligated to issue shares to settle all or a portion of such legal proceedings.

In addition, others in our industry have defended class action lawsuits alleging various regulatory violations and have paid material amounts to settle such claims. If we are named in any such class action lawsuits or other legal
35


proceedings, significant settlement amounts or final judgments could materially and adversely affect our liquidity and capital resources.

To attempt to limit costly and lengthy customer, employee and other litigation, including class actions, we require our customers and employees to sign arbitration agreements, including class action waivers. In addition to opt-out provisions contained in such agreements, recent judicial and regulatory actions have attempted to restrict or eliminate the enforceability of such agreements and waivers. If we are not permitted to use arbitration agreements and/or class action waivers, or if the enforceability of such agreements and waivers is restricted or eliminated, we could incur increased costs to resolve legal actions brought by customers, employees and others, as we would be forced to participate in more expensive and lengthy dispute resolution processes.

Operational Risks Related to Our Business

Uncertain market and economic conditions have had, and may in the future have, a material adverse effect on our business, results of operation, financial condition and share price.

The global economy, including credit and financial markets, has experienced extreme volatility and disruptions, including heightened geopolitical tensions, imposition tariffs, severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability.The global economy, including credit and financial markets, has experienced extreme volatility and disruptions, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability. For example, the ongoing military conflicts between Russia and Ukraine and in the Middle East, as well as the U.S. government’s introduction of trade policy actions that have increased import tariffs across a wide range of countries at various rates, with certain exemptions have had, and are expected to continue to have, global economic consequences. Any such volatility and disruptions may have a material adverse effect on us or the third parties on whom we rely. Any such volatility and disruptions may have adverse consequences on us or the third parties on whom we rely. If the equity and credit markets deteriorate, including as a result of political unrest, trade disruptions, potential tariff and trade wars, or war, it may make any necessary debt or equity financing more difficult to obtain in a timely manner or on favorable terms, more costly or more dilutive. If the equity and credit markets deteriorate, including as a result of political unrest or war, it may make any necessary debt or equity financing more difficult to obtain in a timely manner or on favorable terms, more costly or more dilutive. Increased inflation rates can adversely affect us by increasing our costs, including labor and employee benefit costs. In addition, higher inflation could also adversely affect discretionary spending for non-prime customers, which could reduce demand for our products and services. Any significant increases in inflation and related increase in interest rates could have a material adverse effect on our business, results of operations and financial condition and share price.

Failure to effectively manage our costs could have a material adverse effect on our profitability.

Certain elements of our cost structure are largely fixed in nature. Consumer spending remains uncertain, which makes it more challenging for us to maintain or increase our operating margins. The competitive environment in our industry and increasing price transparency means that the focus on achieving efficient operations is greater than ever. As a result, we must continuously focus on managing our cost structure. Failure to manage our overall cost of operations, labor and benefit rates, advertising and marketing expenses, operating leases, data costs, payment processing costs, cost of capital, or indirect spending could materially adversely affect our profitability.

Negative publicity about us or our industry could adversely affect our business, results of operations, financial condition, and prospects.

Negative publicity about us or our industry, including the transparency, fairness, user experience, quality, and reliability of our platform or LTO platforms in general, effectiveness of our risk model, our ability to effectively manage and resolve complaints, our data privacy and security practices, litigation, regulatory activity, misconduct by our employees, funding sources, service providers, or others in our industry, the experience of customers and investors with our platform or services or LTO platforms in general, even if inaccurate, could adversely affect our reputation and the confidence in, and the use of, our platform, which could harm our reputation and cause disruptions to our platform.Negative publicity about us or our industry, including the transparency, fairness, user experience, quality, and reliability of our platform or lease-to-own platforms in general, effectiveness of our risk model, our ability to effectively manage and resolve complaints, our data privacy and security practices, litigation, regulatory activity, misconduct by our employees, funding sources, service providers, or others in our industry, the experience of customers and investors with our platform or services or lease-to-own platforms in general, even if inaccurate, could adversely affect our reputation and the confidence in, and the use of, our platform, which could harm our reputation and cause disruptions to our platform. For instance, in October 2020, a data breach broker purported to offer customer records from a number of companies, including us, for sale on a hacker forum. Although we determined with third party firms and our internal team that the compromised data did not include confidential proprietary or personal data, we cannot guarantee that this publicity or any similar publicity in the future will not have a negative effect on our business or reputation. Any such reputational harm could further affect the behavior of customers, including their
36


willingness to utilize LTO programs through our platform or to make payments on their leases. As a result, our business, results of operations, financial condition, and prospects would be materially and adversely affected.

Misconduct and errors by our employees, vendors, and service providers could harm our business and reputation.

We are exposed to many types of operational risk, including the risk of misconduct and errors by our employees, vendors, and other service providers. Our business depends on our employees, vendors, and service providers to process a large number of increasingly complex transactions, including transactions that involve significant dollar amounts and LTO transactions that involve the use and disclosure of personally identifiable information and business information. Our business depends on our employees, vendors, and service providers to process a large number of increasingly complex transactions, including transactions that involve significant dollar amounts and lease-to-own transactions that involve the use and disclosure of personally identifiable information and business information. We could be adversely affected if transactions were redirected, misappropriated, or otherwise improperly executed, personal and business information was disclosed to unintended recipients, or an operational breakdown or failure in the processing of other transactions occurred, whether as a result of human error, a purposeful sabotage or a fraudulent manipulation of our operations or systems. In addition, the manner in which we store and use certain personal data and interact with customers and merchants through our platform is governed by various federal and state laws. If any of our employees, vendors, or service providers take, convert, or misuse funds, documents, or data, or fail to follow protocol when interacting with customers and merchants, we could be liable for damages and subject to regulatory actions and penalties. We could also be perceived to have facilitated or participated in the illegal misappropriation of funds, documents, or data, or the failure to follow protocol, and therefore be subject to civil or criminal liability. For example, our operations are subject to certain laws generally prohibiting companies and their intermediaries from making improper payments to government officials for the purpose of obtaining or retaining business, such as the U.S. Foreign Corrupt Practices Act, and similar anti-bribery laws in other jurisdictions. Violations by our employees, contractors or agents of policies and procedures we have implemented to ensure compliance with these laws could subject us to civil or criminal investigations in the United States and in other jurisdictions, could lead to substantial civil and criminal, monetary and non-monetary penalties, and related shareholder lawsuits, could cause us to incur significant legal fees, and could damage our reputation. Violations by our employees, contractors or agents of policies and procedures we have implemented to ensure compliance with these laws could subject us to civil or criminal investigations in the US and in other jurisdictions, could lead to substantial civil and criminal, monetary and non-monetary penalties, and related shareholder lawsuits, could cause us to incur significant legal fees, and could damage our reputation. It is not always possible to identify and deter misconduct or errors by employees, vendors, or service providers, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses. Any of these occurrences could result in our diminished ability to operate our business, potential liability to customers and merchants, inability to attract future customers and merchants, reputational damage, regulatory intervention, and financial harm, which could negatively impact our business, results of operations, financial condition, and prospects.

The loss of the services of any of our leadership team could materially and adversely affect our business, results of operations, financial condition, and prospects.

The experience of our leadership team are valuable assets to us. Our leadership team has significant experience in the financial technology industry and would be difficult to replace. Competition for senior executives in our industry is intense, and we may not be able to attract and retain qualified personnel to replace or succeed any of our leaders. Failure to retain or recruit leadership team members could have a material adverse effect on our business, results of operations, financial condition, and prospects. Failure to retain or recruit team members could have a material adverse effect on our business, results of operations, financial condition, and prospects.

Our business depends on our ability to attract and retain highly skilled employees.

Our future success depends on our ability to identify, hire, develop, motivate, and retain highly qualified personnel for all areas of our organization, in particular, a highly experienced sales force, data scientists, and engineers. Competition for these types of highly skilled employees, is extremely intense. Trained and experienced personnel are in high demand and may be in short supply. Many of the companies with which we compete for experienced employees have greater resources than we do and may be able to offer more attractive terms of employment. Our recent refinancing of our Blue Owl debt with more restrictive terms and conditions, has caused us to reduce expenses, in some cases, directly related to employees. In addition, we invest significant time and expense in training our employees, which increases their value to competitors that may seek to recruit them. We may not be able to attract, develop, and maintain the skilled workforce necessary to operate our business, and labor expenses may increase as a result of a shortage in the supply of qualified personnel. If we are unable to maintain and build our highly experienced sales force, or are unable to continue to attract experienced engineering and technology
37


personnel, as well as other qualified employees, our business, results of operations, financial condition, and prospects could be materially and adversely affected.

Additional Risks Relating to Ownership of Company Securities

The price of our securities may change significantly in the future and stockholders could lose all or part of their investment as a result.

The trading price of our common stock and public warrants is likely to be volatile and the trading price of our securities have experienced extreme volatility and a significant decline. The securities markets have experienced significant volatility as macroeconomic conditions, such as high inflation and the ongoing geopolitical conflicts including those between Russia and Ukraine and in the Middle East. Market volatility, as well as general economic, market, or political conditions, could reduce the market price of shares of our common stock regardless of our operating performance. Our operating results have been below and could continue to be below the expectations of public market analysts and investors due to a number of potential factors, including:

results of operations that vary from the expectations of securities analysts and investors;
results of operations that vary from those of our competitors;
factors affecting consumer spending that are not under our control;
changes in expectations as to our future financial performance, including financial estimates and investment recommendations by securities analysts and investors;
declines in the market prices of stocks generally;
strategic actions by us or our competitors;
announcements by us or our competitors of significant contracts, acquisitions, joint ventures, other strategic relationships or capital commitments;
any significant change in our management;
changes in general economic or market conditions or trends in our industry or markets;
changes in business or regulatory conditions, including new laws or regulations or new interpretations of existing laws or regulations applicable to our business;
future sales or issuances of our common stock (including upon the exercise of warrants, or upon conversion of the Katapult Convertible Preferred Stock) or other securities;
investor perceptions or the investment opportunity associated with our common stock relative to other investment alternatives;
the public’s response to press releases or other public announcements by us or third parties, including our filings with the SEC;
litigation involving us, our industry, or both, or investigations by regulators into our operations or those of our competitors;
guidance, if any, that we provide to the public, any changes in this guidance or our failure to meet this guidance;
the development and sustainability of an active trading market for our stock;
actions by institutional or activist stockholders;
changes in accounting standards, policies, guidelines, interpretations or principles; and
other events or factors, including those resulting from natural disasters, geopolitical conflict (including the conflict involving Russia and Ukraine and the conflicts in the Middle East), pandemics, acts of terrorism or responses to these events.

These broad market and industry fluctuations may adversely affect the market price of our common stock, regardless of our actual operating performance. In addition, price volatility may be greater if the public float and trading volume of our common stock or public warrants is low.

38


We will continue to incur significant costs as a result of operating as a public company, and our management will continue to devote substantial time to managing new compliance initiatives.

As a public company, we will continue to incur significant legal, accounting and other expenses that we did not incur as a private company, and these expenses may increase now that we are no longer an emerging growth company, as defined in Section 2(a) of the Securities Act.As a public company, we will continue to incur significant legal, accounting and other expenses that we did not incur as a private company, and these expenses may increase after we are no longer an emerging growth company, as defined in Section 2(a) of the Securities Act of 1933, as amended. The Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act, the listing requirements of Nasdaq and other applicable securities rules and regulations impose various requirements on public companies. Our management and other personnel will need to continue to devote a substantial amount of time to these compliance initiatives. The increased costs will impact our financial position. These rules and regulations may make it more difficult and more expensive for us to obtain director and officer liability insurance and we may be forced to accept reduced policy limits, higher retention levels, or incur substantially higher costs to maintain the same or similar coverage. We cannot predict or estimate the amount or timing of additional costs we may incur to respond to these requirements.

Because there are no current plans to pay cash dividends on our common stock for the foreseeable future, you may not receive any return on investment unless you sell your common stock for a price greater than that which you paid for it.

We intend to retain future earnings, if any, for future operations, expansion and debt repayment and there are no current plans to pay any cash dividends for the foreseeable future. The declaration, amount and payment of any future dividends on shares of our common stock will be at the sole discretion of our board of directors. Our board of directors may take into account general and economic conditions, our financial condition and results of operations, our available cash and current and anticipated cash needs, capital requirements, contractual, legal, tax, and regulatory restrictions, implications on the payment of dividends by us to our stockholders or by its subsidiaries to it and such other factors as our board of directors may deem relevant. Holders of Katapult Convertible Preferred Stock are entitled to participate in and receive any dividends declared or paid on our common stock on an as converted basis, and no dividends may be paid to holders of our common stock unless full participating dividends are concurrently paid to holders of Katapult Convertible Preferred Stock, which may affect the amount and payment of any future dividends on shares of our common stock. In addition, our ability to pay dividends on our common stock is limited by covenants of our existing and outstanding indebtedness and may be limited by covenants of any future indebtedness that we incur. In addition, our ability to pay dividends is limited by covenants of our existing and outstanding indebtedness and may be limited by covenants of any future indebtedness that we incur. As a result, you may not receive any return on an investment in our common stock unless you sell our common stock for a price greater than that which you paid for it.

If securities analysts do not publish research or reports about our business or if they downgrade our stock or our sector, our stock price and trading volume could decline.

The trading market for our common stock will rely in part on the research and reports that industry or financial analysts publish about us or our business. We will not control these analysts. In addition, some financial analysts may have limited expertise with our model and operations. Furthermore, if one or more of the analysts who cover us downgrade our stock or industry, or the stock of any of our competitors, or publish inaccurate or unfavorable research about our business, the price of our stock could decline. If one or more of these analysts ceases coverage of us or fails to publish reports on it regularly, we could lose visibility in the market, which in turn could cause its stock price or trading volume to decline.

Future sales, or potential future sales, by us or our stockholders in the public market could cause the market price for our common stock to decline.

The sale of shares of our common stock in the public market, or the perception that such sales could occur, could harm the prevailing market price of shares of our common stock. These sales, or the possibility that these sales may occur, also might make it more difficult for us to sell equity securities in the future at a time and at a price that it deems appropriate.

Common stock reserved for future issuance under our equity incentive plans will become eligible for sale in the public market once those shares are issued, subject to provisions relating to various vesting agreements, lock-up
39


agreements and, in some cases, limitations on volume and manner of sale applicable to affiliates under Rule 144, as applicable. As of December 31, 2025, there were 273,853 shares of common stock available for future issuance under our 2021 equity incentive plan.

On November 3, 2025, we entered into certain registration rights agreements with Hawthorn pursuant to which we agreed to file a registration statement covering the resale of the shares of our common stock issuable upon conversion of the Katapult Convertible Preferred Stock.

In the future, we may also issue securities in connection with investments or acquisitions. The amount of shares of common stock issued in connection with an investment or acquisition could constitute a material portion of our then-outstanding shares of common stock. Any issuance of additional securities in connection with investments or acquisitions may result in additional dilution to our stockholders.

Outstanding warrants are exercisable for, shares of our common stock, which would increase the number of shares eligible for future resale in the public market and result in dilution to our existing stockholders.43Warrants are exercisable for our common stock, which would increase the number of shares eligible for future resale in the public market and result in dilution to our existing stockholders.

On October 31, 2019, we entered into a warrant agreement, with FinServ Acquisition Corp., which entitles each warrant holder thereof to purchase 1/25th of a share of our common stock at a price of $287.50 per whole share, subject to adjustment. entitles each warrant holder thereof to purchase one (1) share of our common stock at a price of $11.50 per whole share, subject to adjustment. Warrants may be exercised only for a whole number of shares of common stock. In addition, Hawthorn currently owns warrants to purchase up to 160,000 shares of our common stock at an exercise price of $0.25 per share which are vested and 486,264 shares of our common stock at an exercise price of $0.01 per share which are vested.

The issuances of our common stock upon the exercise of outstanding warrants will result in a significant increase in the number of shares of common stock outstanding, which means that our existing stockholders will own a smaller ownership interest in the Company, experience substantial dilution and have less ability to influence significant decisions requiring stockholder approval. If the holders of outstanding warrants exercise such warrants, our stockholders will experience substantial dilution and we may experience volatility in the price of our Common Stock. Sales of substantial numbers of such shares in the public market could adversely affect the market price of our common stock.

We will likely incur increased costs and devote additional management time to public company reporting and compliance obligations as a result of exiting “emerging growth company” status.

We no longer qualify as an emerging growth company under the Jumpstart Our Business Startups Act (our eligibility to qualify as an emerging growth company ended on December 31, 2024). While we were an emerging growth company, we were able to take advantage of exemptions from various reporting requirements that are applicable to other public companies that are not emerging growth companies, including reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements and exemptions from the requirements of holding nonbinding advisory votes on executive compensation and stockholder approval of any golden parachute payments not previously approved.

Now that we have exited emerging growth company status and we are no longer eligible to take advantage of the corresponding exemptions, we expect our management and other personnel to devote more time and the Company to incur additional costs to comply with the more stringent reporting requirements applicable to companies that are not emerging growth companies. We expect that compliance with these requirements will increase our legal and financial compliance costs and will make some activities more time consuming and costly. We cannot predict or estimate the amount of additional costs we may incur as a result of our exit from emerging growth company status, or the timing of the incurrence of such costs. Further, in the event that in the future we were to no longer be eligible to qualify as a “smaller reporting company,” and/or if we become subject to the requirements applicable to accelerated filers or large accelerated filers, including complying with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, our compliance burdens and expenses will further increase. In addition, and as a general matter, we expect the foregoing public company rules and regulations to make it more difficult and more expensive for us to obtain director and officer liability insurance. Our management and other personnel will need to devote a substantial amount of time to ensure that we comply with all of these requirements and to keep pace with
40


new regulations, otherwise we may fall out of compliance and risk becoming subject to litigation or being delisted, among other potential consequences.

Anti-takeover provisions in our organizational documents could delay or prevent a change of control.

Certain provisions of our Amended and Restated Charter and Amended and Restated Bylaws have an anti-takeover effect and may delay, defer or prevent a merger, acquisition, tender offer, takeover attempt or other change of control transaction that a stockholder might consider in its best interest, including those attempts that might result in a premium over the market price for the shares held by our stockholders.

These provisions provide for, among other things:

the ability of our board of directors to issue one or more series of preferred stock;
advance notice for nominations of directors by stockholders and for stockholders to include matters to be considered at our annual meetings;
certain limitations on convening special stockholder meetings;
limiting the ability of stockholders to act by written consent; and
our board of directors have the express authority to make, alter or repeal our Amended and Restated Bylaws.

These anti-takeover provisions could make it more difficult for a third party to acquire us, even if the third party’s offer may be considered beneficial by many of our stockholders. As a result, our stockholders may be limited in their ability to obtain a premium for their shares. These provisions could also discourage proxy contests and make it more difficult for you and other stockholders to elect directors of your choosing and to cause us to take other corporate actions you desire.

Our Amended and Restated Charter designates the Court of Chancery of the State of Delaware as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, employees or stockholders.

Our Amended and Restated Charter provides that, subject to limited exceptions, any (1) derivative action or proceeding brought on behalf of us, (2) action asserting a claim of breach of a fiduciary duty owed by any director, officer, stockholder or employee to us or our stockholders, (3) action asserting a claim arising pursuant to any provision of the Delaware General Corporation Law or our Amended and Restated Charter or our Amended and Restated Bylaws, or (4) action asserting a claim governed by the internal affairs doctrine shall, to the fullest extent permitted by law, be exclusively brought in the Court of Chancery of the State of Delaware or, if such court does not have subject matter jurisdiction thereof, another state or federal court located within the State of Delaware.Our Amended and Restated Charter provides that, subject to limited exceptions, any (1) derivative action or proceeding brought on behalf of us, (2) action asserting a claim of breach of a fiduciary duty owed by any director, officer, stockholder or employee to us or our stockholders, (3) action asserting a claim arising pursuant to any provision of the DGCL or our Amended and Restated Charter or our Amended and Restated Bylaws, or (4) action asserting a claim governed by the internal affairs doctrine shall, to the fullest extent permitted by law, be exclusively brought in the Court of Chancery of the State of Delaware or, if such court does not have subject matter jurisdiction thereof, another state or federal court located within the State of Delaware. Any person or entity purchasing or otherwise acquiring any interest in shares of our capital stock shall be deemed to have notice of and to have consented to the provisions of our Amended and Restated Charter described above. This choice of forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or its directors, officers or other employees, which may discourage such lawsuits against us and our directors, officers and employees. Alternatively, if a court were to find these provisions of our Amended and Restated Charter inapplicable to, or unenforceable in respect of, one or more of the specified types of actions or proceedings, we may incur additional costs associated with resolving such matters in other jurisdictions, which could adversely affect our business and financial condition.

Our auditors have issued a going concern opinion, and we will not be able to achieve our objectives and will have to cease operations if we cannot refinance our indebtedness and adequately fund our operations.

We believe that we will not have sufficient cash available to repay our outstanding indebtedness if it were accelerated upon an event of default or at its scheduled maturity in December 2026 absent refinancing or extension. In addition, our credit facility contains financial covenants and future compliance with certain covenants may require additional waivers from the lender. In addition, our dedication to incorporating technological advancements into our platform requires significant financial and personnel resources and talent. There can be no assurance that we will be able to maintain compliance
41


with these covenants or obtain such waivers. . As a result of these conditions, our auditors issued an opinion in connection with the audit of our financial statements for the fiscal year ended December 31, 2025 that includes an explanatory paragraph expressing substantial doubt about our ability to continue as a going concern within one year after the date the financial statements are issued. The inclusion of an explanatory paragraph in the audit opinion regarding substantial doubt about our ability to continue as a going concern may materially adversely affect our share price and our ability to raise new capital or to enter into critical contractual relationships with third parties.

While we intend to refinance our indebtedness or otherwise extend, replace or refinance our credit facility prior to its maturity, there can be no assurance that we will be able to secure such financing or adequately fund our operations, and we may be forced to liquidate our assets or discontinue our operations. The values we receive for our assets in liquidation or dissolution could be significantly lower than the values reflected in our financial statements. Our financial statements do not include any adjustments to the amounts and classifications of assets and liabilities that might be necessary should we be unable to continue as a going concern. If we cannot continue as a going concern, our stockholders would likely lose most, if not all, of their investment in us.
42


Item 1B. Unresolved Staff Comments

None.

Item 1C. Cybersecurity

Cybersecurity Risk Management

At Katapult, cybersecurity risk management is an integral part of our overall enterprise risk management program and information security protocols. Our cybersecurity risk management program is based on industry best practices and Center for Internet Security Critical Security Controls for handling cybersecurity threats and incidents, including threats and incidents associated with the use of internally developed applications and services provided by third-party service providers, and facilitate coordination across different departments of our company. Our cybersecurity risk management program is based on industry best practices and CIS Critical Security Controls for handling cybersecurity threats and incidents, including threats and incidents associated with the use of internally developed applications and services provided by third-party service providers, and facilitate coordination across different departments of our company. This framework includes steps for assessing the severity of a cybersecurity threat or incident, identifying the source of a cybersecurity threat or incident including whether the cybersecurity threat or incident is associated with a third-party service provider, implementing cybersecurity countermeasures and mitigation strategies and informing management and our board of directors of material cybersecurity threats and incidents. This framework includes steps for assessing the severity of a cybersecurity threat, identifying the source of a cybersecurity threat including whether the cybersecurity threat is associated with a third-party service provider, implementing cybersecurity countermeasures and mitigation strategies and informing management and our board of directors of material cybersecurity threats and incidents. Our cybersecurity team also engages third-party security experts for risk assessment and system enhancements. In addition, our cybersecurity team provides training to all employees throughout the year.

Our board of directors has overall oversight responsibility for our risk management, and delegates cybersecurity risk management oversight to the audit committee of the board of directors. The audit committee is responsible for ensuring that management has processes in place designed to identify and evaluate cybersecurity risks to which the company is exposed and implement processes and programs designed to manage cybersecurity risks and mitigate cybersecurity incidents. The audit committee also reports material cybersecurity risks to our full board of directors. Management is responsible for identifying, considering, and assessing material cybersecurity risks on an ongoing basis, establishing processes to ensure that such potential cybersecurity risk exposures are monitored, putting in place appropriate mitigation measures and maintaining cybersecurity programs. Our cybersecurity programs are under the direction of our Chief Technology Officer (“CTO”) who receives reports from our cybersecurity team and monitors the prevention, detection, mitigation, and remediation of cybersecurity threats and incidents. Our CTO and dedicated personnel are certified and experienced information systems security professionals and information security managers with over 15 years of experience and are certified information systems security professionals. Management, including the CTO and our cybersecurity team, regularly update the audit committee on the company’s cybersecurity programs, material cybersecurity risks and mitigation strategies and provide cybersecurity reports quarterly that cover, among other topics, third-party assessments of the company’s cybersecurity programs, developments in cybersecurity, learning and training activities and updates to the company’s cybersecurity programs and mitigation strategies.

In 2025, we did not identify any cybersecurity threats or incidents that have materially affected or are reasonably likely to materially affect our business strategy, results of operations, or financial condition. However, despite our efforts, we cannot eliminate all risks from cybersecurity threats or incidents, or provide assurances that we have not experienced an undetected cybersecurity threat or incident. For more information about these risks, please see “Risk Factors —Risks Related to Our Technology and Our Platform” in this annual report on Form 10-K.



43


Recently Filed
Click on a ticker to see risk factors
Ticker * File Date
TZOO an hour ago
PEBK an hour ago
TH 2 hours ago
PKBK 2 hours ago
MG 2 hours ago
BWEN 2 hours ago
PGC 3 hours ago
INRE 4 hours ago
SSSS 7 hours ago
RCKY 9 hours ago
TG 9 hours ago
VRCA 9 hours ago
NERV 9 hours ago
KPLT 9 hours ago
SGMT 9 hours ago
ATEK 10 hours ago
LAFA 20 hours ago
GBLI 1 day ago
WLFC 1 day ago
BRRR 1 day ago
VOYG 1 day ago
WEST 1 day ago
MNOV 1 day ago
NATR 1 day ago
URG 1 day ago
LUNG 1 day ago
VACH 1 day ago
LFMD 1 day ago
ESPR 1 day ago
CVGI 1 day ago
SIGA 1 day ago
INR 1 day ago
IPAR 1 day ago
BODI 1 day ago
UP 1 day ago
NEWT 1 day ago
ADCT 1 day ago
VTVT 1 day ago
ROLR 1 day ago
SI 1 day, 1 hour ago
CDRE 1 day, 1 hour ago
VHI 1 day, 1 hour ago
EZRA 1 day, 1 hour ago
GRPN 1 day, 1 hour ago
FUNC 1 day, 1 hour ago
MSGM 1 day, 1 hour ago
CMT 1 day, 1 hour ago
ARTV 1 day, 1 hour ago
EVLV 1 day, 1 hour ago
WNEB 1 day, 1 hour ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard