Quiver Quantitative

Risk Factors Dashboard

Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.

View risk factors by ticker

Search filings by term

Risk Factors - OB

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Item 1A. “Risk Factors” under “Risks Relating to Legal or Regulatory Matters” included in this Report.

Security

Being a trusted partner is a key value for us and, as such, security is an ongoing commitment. Our products are designed with security, and privacy, at the forefront. All traffic to and between our data centers is encrypted, along with all sensitive configurations, while our users and customers have their passwords hashed.

•In order to provide secure ads, at Outbrain we integrated an advanced industry leading third-party technology to scan live ads looking for potential security violations either in the ads themselves or on the pages to which they directly link. Combined with internally developed capabilities and our content review process we are tackling both malicious ads and the bad actors behind them.

•Providing a clean, non-fraudulent premium network for media owners, advertisers and consumers is a top priority at Outbrain. Our dedicated anti-fraud team monitors our platform to identify and investigate unusual web traffic patterns. We detect, block and prevent fraudulent web traffic by using both internal and external third-party TAG Anti-Fraud certified solutions. We also implement certain Media Rating Council Invalid Traffic Detection and Filtration Standards in our internal fraud detection technological ecosystem.

Table of Contents

•Teads and Outbrain have been Trustworthy Accountability Group (“TAG”) Brand Safety Certified members since 2017 and 2018, respectively, with Teads’ global operations also maintaining the “Brand Safety Certified” and “Certified Against Fraud” seals. Teads detects, blocks and prevents fraudulent web traffic by using Double Verify, TAG DCIP List, and internal solutions.

Table of Contents

Item 1A. Risk Factors

An investment in our shares of Common Stock involves a high degree of risk. You should consider carefully the risks described below and all other information contained in this Report, including in the “Note About Forward-Looking Statements,” the section titled “Management’s Discussion and Analysis of Financial Condition and Results of Operations” (“MD&A”), and our audited consolidated financial statements and the accompanying notes included elsewhere in this Report.

The risks described below are applicable to Outbrain, Teads and the combined company, unless otherwise specified. The risk factors applicable to legacy Teads are set forth in the Company’s definitive proxy statement filed with the SEC on October 31, 2024 are hereby incorporated by reference in this Report.

Risk Factor Summary

The following is a summary of some of the principal risks we face:

•Our ability to successfully integrate Teads or manage the Company effectively;

•Our ability to realize synergies and other benefits of the Acquisition, including, among other things, operating efficiencies, revenue synergies and cost savings;

•Our due diligence investigation of Teads may be inadequate or risks related to Teads’ business may materialize;

•Unexpected costs, charges or expenses resulting from the Acquisition;

•The outcome of any securities litigation, stockholder derivative or other litigation related to the Acquisition;

•The Company may need to raise additional financing in the future to fund its operations, which may not be available to it on favorable terms or at all;

•The market price of the Common Stock is expected to be volatile, and the market price of the Common Stock may drop, following the Acquisition;

•The Company’s internal control over financial reporting may not meet the standards required by Section 404 of the Sarbanes-Oxley Act;

•The Company’s ability to attract and retain customers, management and other key personnel;

•Our revenue and results of operations are highly dependent on overall advertising demand and spending and traffic generated by our media partners;

•The impact on advertising demand and spend of factors such as the continuation or worsening of unfavorable economic or business conditions or downturns and instability in the financial markets;

•A failure to grow or to manage growth effectively may cause the quality of our platform and solutions to suffer;

•Our sales and marketing efforts may require significant investments and, in certain cases, involve long sales cycles;

•Our research and development efforts may not meet the demands of a rapidly evolving technology market;

•The digital advertising industry is intensely competitive and we must effectively compete against current and future competitors;

•Loss of media partners could have a significant impact on our revenue and results of operations;

•Growth in our business may place demands on our infrastructure and resources;

•The failure of our recommendation engine to accurately predict user engagement;

•If the quality of our recommendations deteriorates, or if we fail to present interesting content to our users, we may experience a decline in user engagement, which could result in the loss of media partners;

•Limitations on our ability to collect, use, and disclose data to deliver advertisements;

Table of Contents

•The potential impact of AI on our industry and our need to invest in AI-based solutions;

•Our failure or the failure of third parties to protect our sites, networks and systems against security breaches, or otherwise to protect the confidential information of us or our partners;

•Outages or disruptions that impact us or our service providers, resulting from cyber incidents, or failures or loss of our infrastructure; and

•Political and regulatory risks in the various markets in which we operate and the challenges of compliance with differing and changing regulatory requirements.

Risks Related to the Acquisition

If our due diligence investigation of Teads was inadequate or if risks related to Teads’ business materialize, it could have a material adverse effect on our stockholders’ investment.

While we conducted a due diligence investigation of Teads, we cannot be sure that our diligence surfaced all material issues or liabilities that may be present inside Teads or its business, or that it would be possible to uncover all material issues or liabilities, or that factors outside of Teads and its business and outside of its control will not arise later. If any such material issues or liabilities arise, they may materially and adversely impact the ongoing business of the Company and our stockholders’ investment.

Outbrain and Teads are, and may become involved in additional securities litigation, stockholder derivative or other litigation in connection with the Acquisition, and this could divert the attention of Outbrain and Teads management and harm the Company’s business, and insurance coverage may not be sufficient to cover all related costs and damages.

Securities litigation or stockholder derivative litigation frequently follows the announcement of certain significant business transactions, such as a material acquisition like the Acquisition. Outbrain and Teads are involved in this type of litigation in connection with the Acquisition and may become involved in this type of litigation in the future. The outcome of any such litigation is uncertain, and any such potential lawsuits could result in substantial costs. Litigation often is expensive and diverts management’s attention and resources. Further, the defense or settlement of any lawsuit or claim that remained unresolved at the time the Acquisition could adversely affect the business of the Company, and insurance coverage may not be sufficient to cover all related costs and damages.

Risks Related to the Company After the Acquisition Closing

Outbrain will incur significant transaction and integration-related costs in connection with the Acquisition and may not be able to integrate Teads successfully or manage the combined business effectively, and many of the anticipated synergies and other benefits of the Acquisition may not be realized or may not be realized within the expected time frame.

The Acquisition involves the combination of two companies that currently operate as independent companies. Outbrain consummated the Acquisition with the expectation that the Acquisition would result in various benefits, including, among other things, operating efficiencies, revenue synergies and cost savings. Achieving the anticipated benefits of the Acquisition is subject to a number of uncertainties, including whether the businesses of Outbrain and Teads can be integrated in an efficient and effective manner.

It is possible that the Company may fail to realize some or all of the anticipated benefits of the Acquisition, the integration process could take longer than anticipated, be more costly than expected or that the management of the combined organization and achievement of anticipated synergies could be more difficult than expected. The integration process could result in the disruption of ongoing businesses, processes, systems and business relationships or inconsistencies in standards, controls, procedures, practices, policies and compensation arrangements, any of which could have an adverse effect on Outbrain’s ability to achieve the anticipated benefits of the Acquisition. The integration process is subject to a number of risks and uncertainties, and no assurance can be given that the anticipated benefits of the Acquisition will be realized or, if realized, the timing of their realization. Failure to achieve these anticipated benefits could adversely affect Outbrain’s future businesses, financial condition, results of operations and prospects.

In addition, Outbrain will incur significant transaction costs related to the Acquisition, including investment banking, legal and accounting fees, and significant integration-related fees and costs related to formulating and implementing integration plans which cannot be accurately estimated at this time. Actual transaction costs may substantially exceed estimates and may have an

Table of Contents

adverse effect on the Company’s financial condition and operating results. Although we expect that the elimination of duplicative costs, as well as the realization of other efficiencies related to the integration of the businesses, should allow us to offset integration-related costs over time, this net benefit may not be achieved in the near term, or at all.

Unfavorable global economic conditions could adversely affect the Company’s business, financial condition or results of operations.

The Company’s results of operations could be adversely affected by general conditions in the global economy and in the global financial markets. A severe or prolonged economic downturn could result in a variety of risks to the Company’s business, including weakened demand for the Company’s products and services and the Company’s ability to raise additional capital when needed on acceptable terms, if at all. A weak or declining economy could also strain the Company’s suppliers, possibly resulting in supply disruption, or cause the Company’s customers to delay making payments for its services. Any of the foregoing could harm the Company’s business and the Company cannot anticipate all of the ways in which the current economic climate and financial market conditions could adversely impact its business.

The Company may need to raise additional financing in the future to fund its operations, which may not be available to it on favorable terms or at all.

Following the Acquisition, the Company will need to fund its ongoing working capital, capital expenditures, debt service requirements and other financing requirements. We expect that the Company will fund these requirements through its cash flows from operations and the borrowings under its existing credit facility. However, in the future, the Company may require additional sources of financing to fund its operations.

Raising additional capital may be costly or difficult to obtain and could significantly dilute stockholders’ ownership interests or inhibit the Company’s ability to achieve its business objectives. If the Company raises additional funds through public or private equity offerings, the terms of these securities may include liquidation or other preferences that adversely affect the rights of its Common Stock holders. Additionally, to the extent that the Company raises additional capital through the sale of Common Stock or securities convertible or exchangeable into Common Stock, its stockholders’ ownership interest in the Company will be diluted. Further, any debt financing may subject the Company to fixed payment obligations and covenants limiting or restricting its ability to take specific actions, such as incurring additional debt, making capital expenditures, making investments and certain payments or declaring and paying dividends.

The market price of the Common Stock may decline as a result of the Acquisition.

The market price of the Common Stock may decline as a result of the Acquisition for a number of reasons, including if:

•the Company does not achieve the perceived benefits of the Acquisition as rapidly or to the extent

anticipated by financial or industry analysts;

•the effect of the Acquisition on the Company’s business and prospects is not consistent with the expectations of financial or industry analysts;

•the transaction costs related to the Acquisition are greater than expected; or

•investors react negatively to the effect on the Company’s business and prospects from the Acquisition.

The market price of the Common Stock is expected to be volatile, and the market price of the Common Stock may drop following the Acquisition.

The market price of the Common Stock following the closing of the Acquisition could be subject to significant fluctuations. The results of operations of the Company, and the market price of the Common Stock after the Acquisition Closing may be affected by factors different from those currently affecting the results of operations of each of Outbrain and Teads on a standalone basis.

Moreover, the stock markets in general have experienced substantial volatility that has often been unrelated to the operating performance of individual companies. These broad market fluctuations may also adversely affect the trading price of the Common Stock.

If not dismissed, settled or otherwise resolved, the Company will need to defend any such action. Even if the Company is successful in defending against this action or any similar claims that may be

Table of Contents

brought in the future, such litigation could result in substantial costs and a diversion of management’s attention and resources, which could adversely affect the Company’s business.

Additionally, a decrease in the stock price of the Company may cause the Common Stock to no longer satisfy the continued listing standards of Nasdaq. If the Company is not able to maintain the requirements for listing on Nasdaq, it could be delisted, which could have a materially adverse effect on its ability to raise additional funds as well as the price and liquidity of the Common Stock.

The Company’s internal control over financial reporting may not meet the standards required by Section 404 of the Sarbanes-Oxley Act, and failure to achieve and maintain effective internal control over financial reporting in accordance with Section 404 of the Sarbanes-Oxley Act could have a material adverse effect on the Company’s business and share price.

The Company will be subject to the reporting requirements of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), the Sarbanes-Oxley Act and the rules and regulations of Nasdaq. The Company must perform system and process evaluation and testing of its internal control over financial reporting to allow management to report on the effectiveness of its internal controls over financial reporting in its Annual Report on Form 10-K filing for that year, as required by Section 404 of the Sarbanes-Oxley Act. As a private company, with limited exceptions, Teads has not previously been required to test its internal controls within a specified period. This may result in the diversion of management, and the Company may experience difficulty in meeting these reporting requirements in a timely manner.

The Company may discover weaknesses in its system of internal financial and accounting controls and procedures that could result in a material misstatement of its financial statements. The Company’s internal control over financial reporting will not prevent or detect all errors and all fraud. A control system, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the control system’s objectives will be met.

If the Company is not able to comply with the requirements of Section 404 of the Sarbanes-Oxley Act, or if it is unable to maintain proper and effective internal controls, the Company may not be able to produce timely and accurate financial statements. If that were to happen, investors may lose confidence in the accuracy and completeness of the Company’s financial reports, the market price of the Common Stock could decline and it could be subject to sanctions or investigations by Nasdaq, the SEC or other regulatory authorities. Failure to remedy any material weakness in the Company’s internal control over financial reporting, or to implement or maintain other effective control systems required of public companies, could also restrict the Company’s future access to the capital markets.

If the Company fails to attract and retain management and other key personnel, it may be unable to continue to grow effectively.

The Company’s ability to compete in a highly competitive industry depends upon contributions from its employees, in particular its senior management team. The loss of the services of any members of the Company’s senior management team could impede, delay or prevent the successful growth of the Company, and its business could be harmed as a result.

The Company might not be able to attract or retain qualified management and other highly skilled personnel in the future due to intense competition. Identifying, recruiting, training and integrating qualified individuals will require significant time, expense and attention. The Company may need to invest significant amounts of cash and equity to attract and retain employees. If the Company is not able to effectively attract and retain employees, its ability to achieve strategic objectives could be adversely impacted, and the Company’s business could be harmed.

Outbrain’s current stockholders have a reduced ownership and voting interest in, and exercise less influence over the management of, Outbrain following the closing of the Acquisition as compared to their previous ownership and voting interest in Outbrain.

The stockholders of Outbrain which were also stockholders prior to the closing of the Acquisition own a smaller percentage of the Company than they did prior to the closing. Following the closing, such stockholders are estimated to beneficially own

Table of Contents

approximately 53% of the shares of the Common Stock, based on the number of issued and outstanding shares as of December 31, 2024. Consequently, the stockholders of Outbrain which were also stockholders prior to the closing are no longer able to exercise the same degree of influence over the management and policies of the Company.

In addition, the stockholders agreement (the “Stockholders Agreement”) between the Company and Altice Teads S.A. (“Altice Teads”) requires that, for so long as Altice Teads and its affiliates hold in the aggregate at least 15% of the total voting power of the outstanding capital stock of Outbrain, Altice Teads and each of its affiliates shall take such action at each meeting of the stockholders of Outbrain or any class thereof as may be required so that all issued and outstanding shares of Common Stock beneficially owned by Altice Teads and/or by any of its affiliates are voted in the same manner as recommended by the Outbrain Board of Directors, except (i) with Outbrain’s prior written consent or (ii) to the extent that Outbrain is in material breach of certain obligations under the Stockholders Agreement and fails to cure such breach within 10 business days of notice. As a result, for so long as Altice Teads and its affiliates hold in the aggregate at least 15% of the total voting power of the outstanding capital stock of Outbrain and vote in the same manner as recommended by the Outbrain Board, you will have less influence as a stockholder.

Outbrain’s stockholders may not realize a benefit from the Acquisition commensurate with the ownership dilution they experienced by reason of the Acquisition.

If the Company is unable to realize the strategic and financial benefits currently anticipated from the Acquisition, Outbrain’s stockholders may experience substantial dilution of their ownership interest without receiving a commensurate benefit. Significant management attention and resources will be required to integrate the Teads business. Delays in this process could adversely affect the Company’s business, financial results, financial condition and stock price following the closing of the Acquisition. Even if the Company is able to integrate Teads’ business operations successfully, there can be no assurance that this integration will result in the realization of the full benefits of synergies, innovation and operational efficiencies that may be possible from this integration and that these benefits will be achieved within a reasonable period of time.

Sales by Altice Teads or other holders of shares of Common Stock, or the perception that such sales may occur, could cause the market value of the Common Stock to decline.

Outbrain issued 43.75 million shares of Common Stock to Altice Teads. Prior to the closing of the Acquisition, Altice Teads and Outbrain entered into a registration rights agreement pursuant to which Outbrain will provide customary demand and piggyback registration rights to the holders of registrable securities of Altice Teads, which includes, among other things, all shares of Common Stock held by Altice Teads immediately following the Acquisition closing.

In addition, pursuant to the Stockholders Agreement, Altice Teads is subject to restrictions on the transfer of the consideration it received in connection with the Acquisition. The Stockholders Agreement provides that Altice Teads may not transfer or agree to transfer any shares of Outbrain for a period of three months after the Acquisition closing, without the prior written approval of the Outbrain Board of Directors, subject to specified exceptions. Following such three-month period, Altice Teads may not transfer or agree to transfer any such shares to the extent that, as a result of such transfer, any person becomes the beneficial owner of 10% or more of the total voting power of Outbrain. The issuance of shares of Common Stock could on its own have the effect of depressing the market price for the Common Stock. Altice Teads owns approximately 47% of the issued and outstanding shares of Common Stock, based on the amount of issued and outstanding shares of Common Stock as of December 31, 2024. This concentration of ownership may have a negative impact on the trading price for the Common Stock because investors often perceive disadvantages in owning stock in companies with controlling or major shareholders. In addition, Altice Teads may decide not to hold the large shareholding of Common Stock that it received in the Acquisition, and may instead decide to reduce its investment in Outbrain. Such sales of Common Stock or the perception that these sales may occur, could have the effect of depressing the market price for the Common Stock. This in turn could impair the Company’s future ability to raise capital through an offering of equity securities.

Altice Teads has influence over the Company, including director nomination rights, and Altice Teads’ interests may not always coincide with the interests of the Company’s other stockholders.

Outbrain and Altice Teads entered into the Stockholders Agreement at the Acquisition closing. Pursuant to the Stockholders Agreement, at the Acquisition closing, the size of the Outbrain Board was expanded by two, and two persons designated by Altice Teads will be appointed to the Outbrain Board. In addition, subject to maintaining certain beneficial ownership thresholds, Altice Teads shall have an ongoing right to nominate directors to the Outbrain Board (a certain number of which shall be unaffiliated with Altice Teads and shall be independent from the Outbrain Board).

Table of Contents

The Stockholders Agreement also requires that for so long as Altice Teads and its affiliates hold in the aggregate at least 15% of the total voting power of the outstanding capital stock of Outbrain, Altice Teads and each of its affiliates shall take such action at each meeting of the stockholders of Outbrain or any class thereof as may be required so that all issued and outstanding shares of Common Stock beneficially owned by Altice Teads and/or by any of its affiliates are voted in the same manner as recommended by the Outbrain Board of Directors, except (i) with Outbrain’s prior written consent or (ii) to the extent that Outbrain is in material breach of certain obligations under the Stockholders Agreement and fails to cure such breach within 10 business days of notice. As a result, for so long as Altice Teads and its affiliates hold in the aggregate at least 15% of the total voting power of the outstanding capital stock of Outbrain and vote in the same manner as recommended by the Outbrain Board, you will have less influence as a stockholder.

On the Acquisition closing date, Altice Teads received 43.75 million shares of Common Stock. Following the Acquisition closing, Altice Teads owns approximately 47% of the issued and outstanding shares of Common Stock, based on the amount of issued and outstanding shares of Common Stock as of December 31, 2024. The voting by Altice Teads and its affiliates may limit the other stockholders’ ability to influence corporate matters, and as a result, actions may be taken that stockholders may not view as beneficial. In addition, the existence of such requirement over a significant portion of Outbrain’s voting power may have the effect of making it more difficult for a third party to acquire, or discourage a third party from seeking to acquire, the Company.

In addition, following the Acquisition closing, the Outbrain Board of Directors will consist of 10 directors, and as a result, designees of Altice Teads represent 20% of the Outbrain Board. As a result of such representation, Altice Teads-nominated directors may be able to influence decisions by the Outbrain Board of Directors, and recommendation by the Outbrain Board on proposals for Outbrain stockholders to vote on. The ability of Altice Teads to nominate directors may adversely affect the trading price of shares of the Outbrain Common Stock due to investors’ perception that conflicts of interest may exist or arise with respect to the Altice Teads-nominated directors.

If equity research analysts publish unfavorable research or reports about the Company, its business or its market, its stock price and trading volume could decline.

The trading market for the Common Stock will be influenced by the research and reports that equity research analysts publish about the Company and its business. The Company will not have any control over equity research analysts, or the content and opinions included in their reports. The price of the Common Stock could decline if one or more equity research analysts downgrade it or issue other unfavorable commentary or research.

Risks Related to Outbrain, Teads and the Company

Our revenue and results of operations are highly dependent on overall advertising demand and spending in the markets in which we operate.

Macroeconomic factors in the U.S. and foreign markets, including instability in political or market conditions, as well as adverse economic conditions and general uncertainty about economic recovery or growth, particularly in North America, EMEA (Europe, Middle East and Africa), and Asia, where we conduct most of our business, could result in, and have resulted in, conservative approaches by advertisers and media owners when allocating budgets and ad inventory, respectively, and reductions in advertising demand and spend.

The continued volatile macroeconomic environment, with variables such as the Russia-Ukraine and Israel-Hamas wars, general unrest in Europe and the Middle East, bank failures, tariffs and trade wars, inflation, and U.S. interest rates, has impacted certain categories of our advertisers. These conditions have in turn adversely impacted us and could, if they continue or worsen, adversely impact us in the future, including if our advertisers were to reduce or further reduce their advertising spending as a result of any of these factors.

We continue to monitor our operations, and the operations of those in our ecosystem (including media partners, advertisers and agencies). However, these conditions, whether resulting from the factors described above or due to the occurrence of other unanticipated events, make it difficult for us, our media partners, advertisers and agencies to accurately forecast and plan future business activities and could cause a reduction or delay, or further reduction or delay, in overall advertising demand and spending. The occurrence of unforeseen events, like public health crises, conflicts and wars, and other macroeconomic factors

Table of Contents

that affect advertising demand may have a disproportionate impact on our revenues and profitability in certain periods and could adversely affect our business, results of operations, and financial condition.

If we fail to grow, or fail to manage our growth effectively, the quality of our platform and solutions may suffer, and our business, results of operations, and financial condition may be adversely affected.

Our growth plans depend upon our ability to innovate, attract advertisers and digital media owners to our solutions to buy and sell new inventory, and expand the use of our solutions by advertisers and media partners utilizing other digital media platforms and video. Our business model may not translate well into emerging forms of advertising due to market resistance or other factors, such as evolving regulatory restrictions, and we may not be able to innovate successfully enough to compete effectively.

The advertising technology market is dynamic, and our success depends upon our ability to develop innovative new technologies and solutions for the evolving needs of sellers of digital advertising, including websites, applications and other media partners, and buyers of digital advertising. We also need to grow significantly to develop the market reach and scale necessary to compete effectively with large competitors. This growth depends to a significant degree upon the quality of our strategic vision and planning. The advertising market is evolving rapidly, and if we make strategic errors, there is a significant risk that we will lose our competitive position and be unable to achieve our objectives. The growth we are pursuing may itself strain the organization, harming our ability to continue that growth, and to maintain the quality of our operations. If we are not able to innovate and grow successfully, our business, results of operations, financial condition and the value of our company may be adversely affected.

Our success will depend on our ability to manage growth effectively. Among other things, this will require us at various times to:

•strategically invest in the development and enhancement of our platform and data center infrastructure;

•manage multiple relationships with various media partners, advertisers, and other third parties;

•extend our operating, administrative, legal, financial, and accounting systems and controls;

•increase coordination among our engineering, product, operations, go-to-market and other support organizations; and

•recruit, hire, train, and retain experienced personnel.

Even if our sales and marketing efforts are successful, there can be no assurance that our media partners will be able to generate sufficient traffic.

Our sales and marketing teams educate prospective media partners and advertisers about the use, technical capabilities, and benefits of our platform. Our sales cycle (with both media partners as well as with certain advertisers and agencies) can take significant time from initial contact to contract execution and implementation. We may not succeed in expanding relationships with existing media partners and advertisers, despite our significant investment in sales, account management, marketing, and research and development and it is difficult to predict when additional products will generate revenue through our platform, and the extent of that revenue. If we are unsuccessful in our sales and marketing efforts, our results of operations and prospects will be adversely affected.

Table of Contents

Even if our sales and marketing efforts are successful, there can be no assurance that the properties of our media partners will be able to generate sufficient user interest, traffic or engagement.

Our research and development efforts may not meet the demands of a rapidly evolving technology market resulting in a loss of customers, revenue, and/or market share.

However, investing in research and development personnel, developing new solutions and enhancing existing solutions is expensive and time consuming. Our research and development activities may be directed at maintaining or increasing the performance of our recommendations, developing tools that improve productivity or efficiency, or introducing new solutions. However, there is no assurance that such activities will result in significant new marketable solutions, enhancements to our current solutions, design improvements, additional revenue or other expected benefits. Furthermore, there is no assurance that our efforts to promote new or enhanced solutions, like video solutions or new advertiser tools, will be successful. If we are unable to generate an adequate return on our investment with respect to our research and development efforts, our business, results of operations, and financial condition may be adversely affected.

The digital advertising industry is intensely competitive, and if we do not effectively compete against current and future competitors, our business, results of operations, and financial condition could be adversely affected.

The digital advertising ecosystem is competitive and complex. Some of our competitors have longer operating histories, greater name recognition, and greater financial, technical, sales, and marketing resources than we have. In addition, some competitors may have greater flexibility than we do to compete aggressively on the basis of their scale, price and other contract terms, or to compete with us by including in their product offerings services that we may not provide. The market is fragmented and we also face competition from many smaller companies, many of which may be willing to offer their services on prices or terms that are not profitable for us. Some competitors are able or willing to agree to contract terms that expose them to risks and in order to compete effectively we might need to accommodate similar risks that could be difficult to manage or insure against.

Media owners are investing in capabilities that enable them to connect more effectively and directly with advertisers, or to partner with fewer vendors.

There has also been rapid evolution and consolidation in digital advertising, and we expect these trends to continue, thereby increasing the capabilities and competitive positioning of larger companies, particularly those that are already dominant. There is a finite number of large digital media owners and advertisers in our target markets, and any consolidation of media partners or advertisers may give the resulting enterprises greater bargaining power or result in the loss of media partners and advertisers that use our platform, reducing our potential base of media partners and advertisers, each of which would potentially erode our revenue.

With the introduction of new technologies and the influx of new entrants to the market, we expect competition to persist and intensify in the future, which could harm our ability to increase sales and maintain our profitability. We also broadly compete for advertiser budgets with other forms of traditional and online marketing, including keyword advertising, social media marketing and display advertising.

In addition, large and established internet and technology companies may have the power to significantly change the very nature of digital advertising marketplaces in ways that could materially disadvantage us. Some of these companies could leverage their positions to make changes to their web browsers, mobile operating systems, platforms, exchanges, networks or other solutions or services that could be significantly harmful to our business and results of operations. Some of these companies also have significantly larger resources than we do, and in many cases have advantageous competitive positions in popular products and services such as Amazon Advertising, Google Search, YouTube, Chrome, Meta Platforms, and Apple Search Ads, which they can use to their advantage. Furthermore, our competitors have invested substantial resources in innovation, which could lead to technological advancements that change the competitive dynamics of our business in ways that we may not be able to predict.

Table of Contents

Loss of existing or future market share to new competitors and advertisers allocating finite budgets to competitors could substantially harm our business, results of operations, and financial condition.

Loss of large media partners could have a significant impact on our revenue and results of operations.

A significant portion of our recommendations are placed on web pages and mobile applications of a small number of our media partners. Certain partners may reduce or terminate their business with us at any time for any reason, including as a result of changes in their financial condition or other business circumstances, such as a change in strategy or model by which they monetize their properties. If a large media partner, or if several small or medium-sized media partners, terminate their relationships with us or reduce the amount of inventory we receive from them, whether based on their decisions or changes in the ecosystem, we may not have access to sufficient media partners to satisfy demand from advertisers resulting in lower revenues. In addition, losing key media partners may lead advertisers to seek alternate advertising solutions, which could slow our growth. A media partner may terminate its relationship with us and enter into a relationship with a competitor, and to the extent that becomes a long-term relationship, reestablishing our relationship with that media partner may prove difficult. As a result, the loss of a significant media partner relationship or of several small or medium-sized media partner relationships could have a material adverse impact on our business, results of operations and financial condition.

Our revenue growth and future prospects will be adversely affected if we fail to expand our advertiser and agency relationships.

Our revenue growth depends on our success in expanding and deepening our relationships with existing advertisers. Our growth strategy is premised in part on increasing spend from existing advertisers. In order to do so, we must be able to demonstrate better results for our advertisers with increased user engagement and ROAS, among other things. We do not have long-term commitments from our advertisers.

We also seek to increase the number of advertisers and to reach new advertisers, both directly and through their media agencies. Attracting new advertisers and expanding existing relationships with our advertisers requires substantial effort and expense. In particular, large advertisers with well-established brands may require us to spend significant time educating them about our platform and solutions. It may be difficult and time consuming to identify, sell and market to potential advertisers who already allocate their budgets to large competitors and who expect to see a similar return on investment before diversifying or allocating a portion of their advertising budgets to us. If competitors introduce lower cost or differentiated offerings that compete with or are perceived to compete with the Company’s offerings, the Company’s ability to grow its business with new or existing advertisers could be impaired. It is possible that the Company may reach a point of saturation at which it cannot continue to grow its revenue because of internal limits that advertisers may place on the allocation of their advertising budgets to digital media or to a particular provider. The Company’s advertisers typically have relationships with different providers and there is limited cost to moving budgets to its competitors. As a result, the Company may have limited visibility as to its future revenue streams. Teads cannot assure that its customers or publishers will continue to use its platform or that it will be able to replace, in a timely or effective manner, departing customers with new customers or publishers that generate comparable revenue.

We depend on media agencies who assist advertisers in planning and purchasing advertising for brand marketing objectives, such as preference shift and brand awareness. Media agencies may require platforms like ours to be added to preferred partners programs, connect to designated intermediaries or make various commitments. It may be difficult, costly or time-consuming to meet media agency requirements and may not result in revenue growth. If we are unsuccessful in developing new advertiser and agency relationships and maintaining and expanding our existing relationships, our results of operations and prospects will be adversely affected.

Our advertiser contracts, which can be canceled at any time, do not usually include any commitments to spend any amount of money with us, subjecting us to sudden changes in spend estimates which could have an adverse effect on our business, results of operations and financial condition.

Our customers may provide estimates of how much they will spend on advertising with us, but they do not usually commit contractually to a specific spend amount, which is typical practice in the digital advertising industry. There are times when sudden terminations or unforeseen reductions in spend occur due to reasons beyond our control, including sudden changes in an advertiser’s campaign needs or financial situation unrelated to our relationship with the advertiser. If the Company is unable to effectively forecast revenue, it may not be able to make the best decisions with respect to investment and management, which could have a material adverse effect on its business, results of operations and financial condition.

Table of Contents

We are subject to payment-related risks that may adversely affect our business, working capital, financial condition and results of operations.

Our business has been and may be further impacted by the ability or willingness of our advertisers to pay for their use of our platform. New advertisers spending on our platform, or existing advertisers allocating greater budgets to our platform, has resulted in an increase in our credit loss exposure. We may be involved in disputes with our advertisers, and in the case of agencies, their advertisers, over the operation of our platform, the terms of our agreements or our billings for purchases made by them through our platform. If we are unable to resolve disputes with our clients or our advertisers are experiencing financial hardship, it is less likely that we will be able to collect payment, and we may lose clients or clients may decrease their use of our platform and our financial performance and growth may be adversely affected. Even if we are not paid by advertisers on time or at all, we may still be obligated to pay our media partners, and as a consequence, our business, financial condition and results of operations could be adversely impacted.

We have had clients who have declared bankruptcy or gone out of business without remitting full payment to us, and we have incurred write-offs for credit losses as a result of the failure of our advertisers to make payments to us in a timely manner or at all. If we are unable to collect payment from advertisers or media agencies due to their inability to pay, refusal to pay or bankruptcy, we will incur further write-offs for credit losses, which could harm our results of operations. In the future, credit loss may exceed reserves for such contingencies and our credit loss exposure may increase over time. Any increase in write-offs for credit loss could harm our business, financial condition and results of operations.

We also regularly experience slow payment cycles by media agencies as is common in our industry. In terms of our payment obligations, typically, we are contractually required to pay our media partners within a negotiated period of time, regardless of whether our advertisers or agency clients pay us on time, or at all. While we attempt to negotiate long payment periods with our media partners and shorter periods from our advertisers and seek to enforce the payment terms currently in place with our clients, we are not always successful. As a result, we must manage timing issues between our accounts payable and our accounts receivable. Our collections and payments cycle may increasingly consume working capital if we continue to be successful in growing our business. If we are unable to generate sufficient funds from operations or borrow on commercially acceptable terms or at all, our working capital availability could be reduced, and as a consequence, our financial condition and results of operations would be adversely impacted.

Contracting with these agencies, which in some cases have or may develop higher-risk credit profiles, may subject us to greater credit risk than if we were to contract directly with advertisers. This credit risk may vary depending on the nature of an advertising agency’s aggregated advertiser base.

The failure of our recommendation engine to accurately predict consumer engagement may adversely affect our business, results of operations, and financial condition.

The success of our recommendation engine depends on the ability of our proprietary algorithms to predict the likelihood users will engage with our recommendations and on the quality of our data assets. We need to continuously deliver satisfactory results for users, media partners and advertisers in order to maintain revenue, which, in turn, depends in part on the optimal functioning of our platform and solutions. Therefore, a failure of our recommendation engine to accurately predict user engagement could negatively affect our results of operations and revenue.

Subject to our advertiser guidelines, we offer our media partners a degree of flexibility with respect to the type of recommendation that they believe will appeal to their audience based on the editorial tone of their properties.

Table of Contents

The content of advertisements could damage our reputation and brand, or harm our ability to expand our base of consumers, advertisers and media partners, and negatively impact our business, results of operations, and financial condition.

From time to time, we make changes in our advertiser guidelines that can result in the inclusion or exclusion of certain types of ads. We cannot predict with certainty the impact that such changes might have on user engagement or perceptions of our recommendations. We have adopted policies regarding unacceptable advertisements and retain authority to remove ads that violate these policies; however, advertisers could nonetheless provide such content and occasionally circumvent our policies. If any of those ads lead to hostile, infringing, offensive or inappropriate content, our reputation could suffer by association. The safeguards we have in place may not be sufficient to avoid harm to our reputation and brand. The Teads brand may be negatively impacted by the Acquisition.

Conditions in Israel, including the ongoing conflict between Israel and Hamas and other terrorist organizations, may adversely affect our operations and limit our ability to market, support and innovate on our products, which would lead to a decrease in revenues.

Because a material part of our operations are conducted in Israel and certain members of our board of directors and management as well as many of our employees and consultants, including employees of our service providers, are located in Israel, our business and operations are directly affected by economic, political, geopolitical and military conditions in Israel.

Since the establishment of the State of Israel in 1948 and in recent years, armed conflicts between Israel and its neighboring countries and terrorist organizations active in the region have involved missile strikes, hostile infiltrations, terrorism against civilian targets in various parts of Israel, and recently abduction of soldiers and citizens.

Following the October 7th attacks by Hamas terrorists in Israel’s southern border, Israel declared war against Hamas and since then, Israel has been involved in military conflicts with Hamas, Hezbollah, a terrorist organization based in Lebanon, and Iran, both directly and through proxies like the Houthi movement in Yemen and armed groups in Iraq and other terrorist organizations. Additionally, following the fall of the Assad regime in Syria, Israel has conducted limited military operations targeting the Syrian army, Iranian military assets and infrastructure linked to Hezbollah and other Iran-supported groups. Although certain ceasefire agreements have been reached with Hamas and Lebanon (with respect to Hezbollah), and some Iranian proxies have declared a halt to their attacks, there is no assurance that these agreements will be upheld, military activity and hostilities continue to exist at varying levels of intensity, and the situation remains volatile, with the potential for escalation into a broader regional conflict involving additional terrorist organizations and possibly other countries. Also, the fall of the Assad regime in Syria may create geopolitical instability in the region.

While our facilities have not been damaged during the current war, the hostilities with Hamas, Hezbollah, Iran and its proxies and others have caused and may continue to cause damage to private and public facilities, infrastructure, utilities, and telecommunication networks, potentially disrupting our operations and supply chains. In addition, Israeli organizations, government agencies and companies have been subject to extensive cyber attacks. This could lead to increased costs, risks to employee safety, and challenges to business continuity, with potential financial losses.

The continuation of the war has also led to a deterioration of certain indicators of Israel’s economic standing, for instance, a downgrade in Israel’s credit rating by rating agencies (such as by Moody’s, S&P Global, and Fitch).

In connection with the ongoing war, several hundred thousand Israeli military reservists were drafted to perform immediate military service, and military reservists are expected to perform long reserve duty service in the coming years. As of the date of this Report, a limited number of our employees are called to active military duty. The absence of our employees due to their military service in the current or future conflicts may materially and adversely affect our ability to conduct our operations.

Our commercial insurance does not cover losses that may occur as a result of events associated with war and terrorism. Although the Israeli government currently covers the reinstatement value of certain direct damages that are caused by terrorist attacks or acts of war, we cannot assure you that such government coverage will be maintained or that it will sufficiently cover our potential damages. Any losses or damages incurred by us could have a material adverse effect on our business.

The global perception of Israel and Israeli companies, possibly influenced by the actions of international judicial bodies, may lead to increased sanctions and other negative measures against Israel, as well as Israeli companies and academic institutions. There is also a growing movement among countries, activists, and organizations to boycott Israeli goods, services and academic

Table of Contents

research or restrict business with Israel, which could affect business operations. If these efforts become widespread, along with any future rulings from international tribunals against Israel, they could significantly and negatively impact business operations.

We also do business with advertisers and media partners located in Israel. The conditions described above may impact advertising demand and the extent of monetization on media partners in Israel. A portion of our business (less than 5% of our revenues) is from advertisers in Israel displaying ads on media partner inventory in Israel which has been impacted by the above events.

Prior to the October 2023 war, the Israeli government pursued changes to Israel’s judicial system and has recently renewed its efforts to effect such changes. In response to the foregoing developments, certain individuals, organizations, and institutions, both within and outside of Israel, voiced concerns that such proposed changes, if adopted, may negatively impact the business environment in Israel. Such proposed changes may also lead to political instability or civil unrest. If such changes to Israel’s judicial system are pursued by the government and approved by the parliament, this may have an adverse effect on our business, results of operations, and ability to raise additional funds.

Media owners face challenges growing and maintaining their audiences as a result of the proliferation of new and innovative content distribution methods such as social media platforms and AI summarization. The overall decline in media owner audiences may limit available advertising inventory creating financial pressure on media owners who rely on advertising to operate their business. As a result of these evolving trends, we have seen and may continue to see media owners consolidating or ceasing to operate.

Our business may be negatively impacted by media partners shifting from open access to paywalls or generating less user interest because it may decrease our access to consumers and advertising inventory.

If media partners consolidate, cease to operate, or shift their revenue models from advertising, this could negatively affect our business, results of operations, and financial condition. To the extent we have long-term commitments with our media partners, and they are adversely impacted by the evolving media owner landscape, we may not be able to recoup our investment in our media partners.

Our results of operations have fluctuated in the past, and future results of operations are likely to fluctuate as well. In addition, because our business continues to evolve, you should not place undue reliance on our historical results of operations in assessing our future prospects. Factors that can cause our results of operations to fluctuate include:

•changes in demand and competition for ad inventory sold on our platform;

•changes in our access to valuable ad inventory of media partners;

•the addition or loss of media partners on our platform, and/or loss of ad inventory from a media partner;

•costs associated with adding or attempting to retain media partners;

•the continuation or worsening of unfavorable economic or business conditions or downturns or instability in financial markets;

•seasonality of our business;

•changes in consumer usage of devices and channels to access media and digital content;

•changes in the structure of the buying and selling of digital ad inventory;

•changes in the pricing policies of media partners and competitors;

•changes in third-party service costs;

Table of Contents

•changes and uncertainty in our legislative, regulatory, and industry environment, particularly in the areas of data protection and consumer privacy;

•introduction of new technologies or solutions;

•unilateral actions taken by demand side platforms, agencies, advertisers, media partners, and supply side platforms;

•changes in our capital expenditures as we acquire hardware, technologies, and other assets for our business; and

•changes to the cost of retaining and adding highly specialized personnel.

Any one or more of the factors above may result in significant fluctuations in our results of operations.

In preparing our financial statements, we make certain assumptions, judgments and estimates that affect amounts reported in our consolidated financial statements, which, if not accurate, may significantly impact our financial results.

In preparing our financial statements, we will make assumptions, judgments, and estimates for a number of items. These assumptions, judgments and estimates are drawn from historical experience and various other factors that we believe are reasonable under the circumstances as of the applicable date of the consolidated financial statements. Actual results could differ materially from our estimates, and such differences could significantly impact our financial results.

In order to secure favorable terms, such as exclusivity and longer-term agreements, we may offer media partners contracts with guaranteed minimum rates of payments. This includes the possibility of paying a media partner an amount in excess of the revenue that we generated from ads served on that media partner property. The revenue from ads served on a media partner property or overall advertiser demand could drop for reasons outside of our control. It is also possible that we will agree to a rate of payment that is more difficult to profitably recoup than we originally believed. In addition, many of our contracts that contain guarantee arrangements set a single rate of payment and do not account for seasonal revenue fluctuations. As a result, our gross profit margins may fluctuate with the seasonality of the business. Additionally, these guarantees may adversely impact our traffic acquisition costs in absolute dollar terms and as a percentage of revenue, as well as overall profitability. The provision of guaranteed minimum rates to additional media partners or to existing media partners upon contract renewal, or the provision of such guarantees in contracts that contemplate a large number of page views, such as some of the contracts we have entered into with large media partners, may increase the risk that our gross profit and/or margins may be adversely impacted for the reasons we describe above.

Seasonal fluctuations in advertising activity and large cyclical events could have a material impact on our revenue, cash flow and operating results.

Our revenue, cash flow, operating results and other key operating and performance metrics may vary from quarter to quarter due to the seasonal nature of our advertisers’ spending. For example, advertisers tend to devote more of their advertising budgets to the fourth calendar quarter to coincide with user holiday spending. Moreover, advertising inventory in the fourth quarter may be more expensive due to increased demand. Other large cyclical events that attract advertisers, such as elections, the Olympics and other sporting events, the Oscars, or other large entertainment events, also could cause our revenue to increase during certain periods and decrease in other periods.

If currency exchange rates fluctuate substantially in the future, our results of operations, which are reported in U.S. dollars, could be adversely affected.

We are exposed to the effects of fluctuations in currency exchange rates. A significant percentage of our international revenue is from advertisers who pay us in currencies other than the U.S. dollar. Fluctuations in the exchange rates between the U.S. dollar and those other currencies could result in the U.S. dollar equivalent of such foreign-denominated revenue being lower than would be the case if exchange rates were stable and the U.S. dollar equivalent of such expenses being higher. This could have a negative impact on our reported operating results. We evaluate periodically the various currencies to which we are exposed and

Table of Contents

take hedging measures to reduce the potential adverse impact from the appreciation or the depreciation of our non-U.S.-dollar-denominated operations, as appropriate. Any such strategies, such as forward contracts, options and foreign exchange swaps related to transaction exposures that we may implement to mitigate this risk may not fully eliminate our exposure to foreign exchange fluctuations.

Any limitation imposed on our collection, use or disclosure of this data could significantly diminish the value of our solution.

We use “cookies,” or small text files placed on consumer devices when an Internet browser is used, as well as mobile device identifiers, to gather data that enables our platform to be more effective. We collect this data through various means, including code that media partners and advertisers implement on their pages, software development kits installed in mobile applications, our own cookies, and other tracking technologies. Our advertisers, directly or through third-party data providers, may choose to further target their campaigns within our platform.

The data we collect improves our algorithms and helps us deliver relevant recommendations with greater consumer engagement. Our ability to collect and use data is critical to the value of our platform. Without cookies, mobile device IDs, and other tracking technology data, our recommendations would be informed by less information about user interests and advertisers may have less visibility into their return on ad spend. If our ability to use cookies, mobile device IDs or other tracking technologies is limited, we may be required to develop or obtain additional applications and technologies to compensate for the lack of cookies, mobile device IDs and other tracking technology data, which could be time consuming or costly to develop, less effective, and subject to additional regulation. As described in more detail below under the risk factor titled “User growth and engagement depends upon effective interoperation with devices, platforms and standards set by third parties that we do not control,” prominent technology companies also have discontinued, or announced intentions to discontinue, the use of certain cookies, and to develop alternative methods and mechanisms for tracking users.

Additionally, we are subject to laws and regulations related to data privacy, data protection, information security, and consumer protection across different markets where we conduct our business, which could potentially impact our ability to collect, use, and disclose data as described in under the risk factor titled “We are subject to laws and regulations related to online privacy, data protection, and information security, and consumer protection across different markets where we conduct our business, including in the United States and Europe. Such laws, regulations, and industry requirements are constantly evolving and changing and could potentially impact data collection and data usage for advertising and recommendations. Our actual or perceived failure to comply with such obligations could have an adverse effect on our business, results of operations, and financial condition.”

There are many technical challenges relating to our ability to collect, aggregate and associate the data, and we cannot assure you that we will be able to do so effectively, which would adversely affect our business, results of operations, and financial condition.

User growth and engagement depends upon effective interoperation with devices, platforms and standards set by third parties that we do not control.

As a result, we depend on the interoperability of our solutions with popular devices, platforms and standards that we do not control. For example, because many users access our platform through mobile devices, we depend on the interoperability of our solutions with mobile devices and operating systems such as Android and iOS.

Some users also download free or paid “ad blocking” software on their computers or mobile devices, not only for privacy reasons, but also to counteract the adverse effect advertisements can have on the user experience, including increased load times, data consumption, and screen overcrowding. If more users adopt these measures, our business, results of operations, and financial condition could be adversely affected. Many applications and other devices allow users to avoid receiving advertisements by paying for subscriptions or other downloads. Prominent media technology companies, including Google, are also limiting what advertisements may be rendered through their browsers in the name of user experience and load times. Ad-blocking technologies negatively impact our business by reducing the volume or effectiveness and value of advertising.

Prominent technology companies also have discontinued, or announced intentions to discontinue, the use of certain cookies, and to develop alternative methods and mechanisms for tracking users. The most commonly used Internet browsers allow users

Table of Contents

to modify their browser settings to block first-party cookies (placed directly by the media partner or website owner that the user intends to interact with) or third-party cookies, and some browsers block third-party cookies by default. For example, Apple already prohibits the use of third-party cookies and moved to “opt-in” privacy models with iOS requiring users to voluntarily choose (opt-in) to permit app developers to track them across applications and websites and therefore receive targeted ads. In addition, although Google has announced it will not completely deprecate third party cookies, it is expected to introduce new privacy options to restrict the availability of such technologies across its platforms.

As companies replace cookies, it is possible that such companies may rely on proprietary algorithms or statistical methods to track users without cookies, or may utilize log-in credentials entered by users into other web properties owned by these companies, such as their email services, to track web usage, including usage across multiple devices. Alternatively, such companies may build different and potentially proprietary user tracking methods into their widely-used web browsers.

If we fail to detect and prevent click fraud or other invalid engagements with the advertisements we serve, we could lose the confidence of our advertisers, which would cause our business to suffer and negatively impact our financial results.

Our success relies on delivering measurable business value to our advertisers. We are exposed to the risk of fraudulent and otherwise invalid engagements that advertisers may perceive as undesirable. A major source of invalid engagements is click fraud in which a user, automated script or computer program intentionally engages with ads for reasons other than accessing the underlying content. If we are unable to detect and prevent such fraudulent or malicious activity, or other invalid engagements or if we choose to manage traffic quality in a way that advertisers find unsatisfactory, the affected advertisers may experience or perceive a reduced return on their investment in our platform, which could lead to dissatisfaction with our solutions, refusals to pay, refund demands or withdrawal of future business. This could damage our brand and lead to a financial loss or to a loss of advertisers which would adversely affect our business, results of operations, and financial condition.

Our failure or the failure of third parties to protect our sites, networks and systems against security breaches, or otherwise to protect our confidential information or the confidential information of our partners, could damage our reputation and brand and substantially harm our business and operating results.

We collect, maintain, transmit and store data about consumers, clients, employees, business partners and others, including personally identifiable information, as well as other confidential information. We also engage third parties that store, process and transmit these types of information on our behalf. We have experienced and expect to continue to experience actual and attempted cyberattacks. Our security measures, and those of our third-party service providers, might not detect or prevent all attempts to breach our systems including, denial-of-service attacks, viruses, malicious software, break-ins, phishing attacks, social engineering, security breaches, ransomware, credential stuffing attacks or other attacks and similar disruptions that may jeopardize the security of information stored in or transmitted by our websites, networks and systems or that we or such third parties otherwise maintain. We and such third parties might not anticipate or prevent all types of attacks, and because techniques used to obtain unauthorized access to or sabotage systems change frequently, attacks might not be known to us or our third-party service providers until after they are launched. In addition, security breaches can occur as a result of non-technical issues, including intentional or inadvertent breaches by our employees or by third parties. These risks may increase over time as the complexity and number of technical systems and applications we use also increases.

Breaches of our security measures or those of our third-party service providers or cyber security incidents could result in: unauthorized access to our applications, sites, networks and systems; unauthorized access to and misappropriation of data and customer information, including customers’ personally identifiable information, or other confidential or proprietary information of ourselves or third parties; phishing scams and malware, ransomware and other malicious Internet-based activity; deletion or modification of content or the display of unauthorized content on our sites; interruption, disruption or malfunction of operations; costs relating to breach remediation, deployment of additional personnel and protection technologies, response to governmental investigations and media inquiries and coverage; engagement of third-party experts and consultants; litigation; regulatory action; and other potential liabilities. Any security breach or cyber incident, whether actual or perceived, which impacts us or one of our third-party service providers could significantly damage our reputation and brand, cause our business to suffer through, among other things, loss of, or failure to attract, media partners or advertisers and we could be required to expend significant capital and other resources to alleviate problems caused by such breaches.

Table of Contents

In addition, some jurisdictions have enacted laws requiring companies to notify individuals of data security breaches involving certain types of personal data, and our agreements with certain partners may require us to notify them in the event of a security incident.

Any security breach or cyber incident, which impacts us or one of our third-party service providers, or any failure on our part or on the part of such third parties to protect our sites, networks and systems or to protect our confidential information or the confidential information of others could damage our reputation and brand and substantially harm our business and operating results.

Our business depends on our ability to maintain and scale our technology platform. Real or perceived errors, disruptions or outages in our platform, including due to the possible cyberattacks discussed above or our failure to maintain adequate security and supporting infrastructure, could adversely affect our operating results and growth prospects.

We depend upon the sustained and uninterrupted operation of our platform to generate recommendations, serve ads, manage our content index, continually improve and analyze our data assets and optimize performance in real time. If our platform cannot scale to meet demand, or if there are errors, bugs, or other performance failures, including any related to our third-party service providers, in our execution of any of these functions on our platform, then our business may be harmed. Undetected bugs, defects, errors and other performance failures may occur, especially when we are implementing new solutions or features.

We also face risks of disruptions of service from third-party interference with our platform. As discussed above, cyberattack techniques are constantly evolving and becoming increasingly diverse and sophisticated. While we have robust systems in place to counter attacks breaches, attacks have occurred and we cannot guarantee that future attacks may not have dire consequences, including impacting what may be displayed on the properties of our media partners and advertisers.

Any disruptions to our platform and our servers could interrupt our ability to provide our solutions and materially affect our reputation, relationships with media partners and advertisers, business and results of operations. There can be no assurance that any limitation of liability provisions in our contracts would be enforceable or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim arising from such disruptions. Further, in certain circumstances we may indemnify our customers for losses they may incur for our failure to deliver services pursuant to the terms of service set forth in our service contracts. We also cannot be sure that our existing insurance coverage will continue to be available on acceptable terms, will be available in sufficient amounts to cover one or more large claims, or that insurers will not deny coverage as to any future claim. Specifically, our insurance policies may have exclusions which would limit our ability to recover under such policies, the limits under such policies may be insufficient, or insurers may deny coverage following their investigation of a claim. The successful assertion of one or more large claims against us that are excluded from our insurance coverage or that exceed available insurance coverage, or changes in our insurance policies (including premium increases, the imposition of large deductible or co-insurance requirements, changes in terms and conditions or outright cancellation or non-renewal of coverage), could have a material adverse effect on our business, results of operations and financial condition. Furthermore, the assertion of such claims, whether or not successful, could cause us to incur reputational damage, which could have a material adverse effect on our business, results of operations and financial condition.

AI presents risks for the Open Internet and display advertising. We use AI in our business, and challenges with efficiently adopting AI and properly managing its use could result in competitive harm, reputational harm, and legal liability, and adversely affect our results of operations.

Advancements in AI present opportunities and risks for our business, particularly within the context of the Open Internet and display advertising. AI has the potential to alter the competitive dynamics of digital advertising by changing the way in which users access information and content on the Open Internet. This change could reduce advertiser reliance on the Open Internet and present challenges for independent publishers, which in turn may negatively impact our business model. Additionally, the

Table of Contents

rapid evolution of AI technologies could lead to diminishing demand for display advertising or reallocating budgets to new formats and approaches. If we are unable to address these disruptions, adapt to evolving market expectations, or compete effectively with AI-driven ecosystems, our growth and market position could be adversely impacted.

Our business relies on the incorporation of machine learning and predictive AI solutions into our platform, offerings, services and features and these applications are becoming even more important in our operations. Our competitors or other third parties may incorporate AI into their products more quickly or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, if the content, analyses, or recommendations that AI applications assist in producing are or are alleged to be infringing, deficient, inaccurate, or biased, our business, financial condition, and results of operations may be adversely affected and we may be subject to the risk of litigation. We have also announced that we are experimenting with various generative AI capabilities with the goal of automating and significantly enhancing platform functionality, ad variety and overall engagement. Generative AI, however, also presents various management risks, as well as emerging ethical issues, and if our use of AI becomes difficult to manage and/or controversial, we may experience brand or reputational harm, competitive harm, or legal liability. As a result of the complexity and rapid development of AI and generative AI, AI is the subject of evolving levels of review by various governmental and regulatory agencies in jurisdictions across the world, which are considering the applicable legal and regulatory frameworks that governments and regulators may apply, including the recently passed EU AI Act.

In addition, there have been numerous other laws and bills proposed at the U.S. federal and state level, as well as internationally, aimed at regulating the deployment or provision of AI systems and services. This includes the Colorado AI Act, which is the first U.S. state comprehensive law relating to the development and deployment of certain AI systems. The Colorado AI Act will become effective February 1, 2026, and, like the EU AI Act, provides for a regulatory risk-based framework. The Colorado AI Act may impel other states to adopt similar legislation, potentially creating a patchwork of state AI laws with which companies must comply absent any omnibus federal regulation. At the U.S. federal level, in October 2023 the Biden Administration issued an Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence that, among other things, articulates certain standards and guidelines for AI safety and security and directs federal agencies and departments to create additional standards and regulations for the use or oversight of AI. Other jurisdictions may adopt similar or more restrictive laws and regulations that may restrict or hinder the use of AI technologies.

We may not be able to accurately predict how courts and regulators will implement new laws or regulations, or apply existing laws or regulations, to AI or otherwise respond to applicable developing legal AI frameworks. The rapid evolution of AI, including government regulation of AI, may impede our ability to do business and will require significant resources to compete effectively and to ensure compliance with evolving regulatory requirements.

Failures or loss of our infrastructure, including hardware and software, with respect to us and other service providers on which we rely, could adversely affect our business.

We rely on owned and leased servers and other third-party hardware and infrastructure to support our operations. To support our business needs, we operate our own proprietary cloud infrastructure using third party data centers co-located in separate locations managed by different vendors in the United States. In addition, we also serve recommendations from a public cloud. We do not have control over the operations of these facilities or technology of our cloud and service providers, including any third-party vendors that collect, process and store personal data on our behalf. Our systems, servers and platforms and those of our service providers may be vulnerable to computer viruses, physical or electronic break-ins, sabotage, intentional acts of vandalism and other misconduct that our security measures or the security measures of these service providers may not detect. Individuals able to circumvent such security measures may disrupt our operations, damage our hardware and infrastructure, misappropriate confidential or proprietary information or otherwise impair our reputation and business. Additionally, to the extent that our cloud and other service providers experience security breaches that result in the unauthorized or improper use of confidential data, employee data or personal data, we may not be indemnified for losses resulting from such breaches. There can be no assurance that we or our third-party providers will be successful in preventing security breaches, including as a result of cyber attacks, or successfully mitigating their effects.

If a data center goes offline, an alternate data center would take over our serving and data storage needs, but our service may be slowed or degraded as a result until full data center operations are restored. We cannot assure you that future outages may not have material adverse consequences to our business. Moreover, if for any reason our arrangement with one or more of the providers of the servers that we use is terminated, we could incur additional expenses in establishing new facilities and support.

Table of Contents

We depend on highly skilled personnel to grow and operate our business, and if we are unable to hire, retain and motivate our personnel, we may not be able to grow effectively.

Our future success depends upon contributions from our employees, in particular our senior management team. We do not maintain key person life insurance for any employee. From time to time, there may be changes in our senior management team, and such changes may be disruptive to our business.

Our growth strategy also depends on our ability to expand and retain our organization with highly skilled personnel. Identifying, recruiting, training and integrating qualified individuals will require significant time, expense and attention. In addition to hiring new employees, we must continue to focus on retaining our best employees. Competition for highly skilled personnel in our industry is challenging across all our locations, particularly in New York City, where our headquarters are located, and in Israel, France and Slovenia, where we conduct the majority of our research and development activities.

We believe our corporate culture has been a critical component of our success as we believe it fosters innovation, creativity, and teamwork across our business, helping to drive our success. Over time, factors such as expansion, dispersal and remote operations may also decrease the cohesiveness of our teams, which is critical to our corporate culture.

Our employees, contractors, consultants or other associated parties may behave in contravention of our internal policies or laws and regulations applicable to us, or otherwise act unethically or illegally, which could harm our reputation or subject us to liability.

We have implemented and expect to implement a number of internal policies, including our Code of Business Conduct and Ethics and policies including those related to security, privacy and respectful behavior in the workplace and securities trading in order to promote and enforce ethical conduct and compliance with laws and regulations applicable to us. Compliance with these policies requires awareness and understanding of the policies and any changes therein by the parties to whom they apply. We may fail to effectively or timely communicate internal policies or changes therein to our employees, contractors, consultants or other associates, and such persons may otherwise fail to follow our policies for reasons beyond our control. We are exposed to the risk that our employees, contractors, consultants or other associates may engage in activity that is unethical, illegal or otherwise contravenes our internal policies or the laws and regulations applicable to us, whether intentionally, recklessly or negligently. It may not always be possible to identify and deter misconduct, and the precautions we take to detect and prevent this activity may be ineffective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to comply with these laws or regulations. If any such actions are instituted against us, and we are not successful in defending ourself or asserting our rights, those actions could have a significant impact on our business, including harm to our reputation and the imposition of significant fines or other sanctions, all of which could have a material adverse effect on our customer relationships, business, results of operations and financial condition.

Utilizing labor in foreign countries may subject us to additional risks, which could have an adverse effect on our business, operating results and financial condition.

We have attempted to control our operating expenses by utilizing lower cost labor in foreign countries, such as India, and we may in the future expand our reliance on off-shore labor. Countries outside of the United States may be subject to relatively higher degrees of political and social instability and may lack the infrastructure to withstand political unrest, natural disasters, pandemics or other instability, which could interfere with work performed by these labor sources or could result in our having to replace or reduce these labor sources. Moreover, we may have difficulty in successfully staffing, transitioning knowledge of systems and controls, and managing our foreign operations, which could impact our business, financial condition or results of operations. Doing business outside of the U.S. also increases our risk exposure to anti-corruption laws and regulations, such as

Table of Contents

the Foreign Corrupt Practices Act to the extent in effect, any violation of which could expose us to significant financial penalties or consent orders that may curtail our business.

Our business may be adversely affected by matters associated with our labor force.

Certain of our employees are covered by collective bargaining agreements or represented by works councils. We have employees located in countries in which employment laws provide greater bargaining or other rights to employees than the laws of the U.S. Such employment rights require us to work collaboratively with the legal representatives of those employees to effect any changes to labor arrangements. For example, certain employees in Europe are represented by works councils with whom we may need to consult on changes in conditions of employment, which may slow down or impede efforts to restructure our workforce or implement changes. While we believe our relations with our employees and their various representatives are generally satisfactory, labor relations matters may be costly to support, cause delays in our operations or otherwise have a material adverse effect on our business.

We may engage in strategic transactions, which may not yield a positive financial outcome. Further, such activity may result in the company operating in businesses beyond its current core business with risk factors beyond those which are identified here.

From time to time, we may evaluate potential mergers and acquisitions or investment opportunities. Any transactions that we enter into could be material to our financial condition and results of operations. The process of integrating an acquired company, business or technology could create unforeseen operating difficulties and expenditures. Acquisitions and investments carry with them a number of risks, including the following:

•diversion of management time and focus from operating our business;

•implementation or remediation of controls, procedures and policies of the acquired company;

•integration of financial systems;

•coordination of product, engineering and selling and marketing functions;

•retention of employees from the acquired company;

•unforeseen liabilities;

•litigation or other claims arising in connection with the acquired company; and

•in the case of foreign acquisitions, the need to integrate operations across different cultures and languages and to address the particular economic, currency, political and regulatory risks associated with specific countries.

Our failure to address these or other risks encountered in connection with acquisitions could cause us to fail to realize the anticipated benefits of such acquisitions, resulting in unanticipated liabilities and harming our business, results of operations and financial condition.

Risks Relating to Legal or Regulatory Matters

Our business is subject to political and regulatory risks in the various markets in which we operate; compliance with differing and changing regulatory requirements poses compliance challenges.

Our business is subject to regulation, which is rapidly evolving, and the business and regulatory environment in each of the international markets in which we operate may differ. The following are some of the political and regulatory risks and challenges we face across jurisdictions:

•greater difficulty in enforcing contracts;

•higher costs of doing business internationally, including costs incurred in establishing and maintaining office space and equipment for our international operations;

•risks associated with trade restrictions and foreign legal requirements, including any certification and localization of our platform that may be required in foreign countries;

Table of Contents

•organizing or similar activity by workers, local unions, work councils, or other labor organizations;

•our ability to respond to competitive developments and other market and technological dynamics, such as the emergence of generative AI;

•greater risk of unexpected changes in regulatory practices, tariffs, and tax laws and treaties;

•compliance with anti-bribery laws, including, without limitation, compliance with the U.S. Foreign Corrupt Practices Act, to the extent in effect, and the UK Bribery Act;

•compliance with data protection and privacy law regimes of various countries, especially as our business relates to consumer online privacy and interested-based advertising;

•heightened risk of unfair or corrupt business practices in certain geographies and of improper or fraudulent sales arrangements that may impact financial results and result in restatements of, or irregularities in, financial statements;

•the uncertainty of protection for intellectual property rights in some countries;

•general economic and political conditions in these foreign markets, including political and economic instability in some countries;

•the potential for heightened regulation relating to content curation or discovery as a result of concerns relating to the spread of disinformation through technology platforms;

•double taxation of our international earnings and potentially adverse tax consequences due to changes in the tax laws of the United States or the foreign jurisdictions in which we operate; and

•With respect to the United States, changes in federal policy, including trade and tariff policies and tax policy, occur over time through policy and personnel changes following elections. As a result, we may be subject to executive orders and regulatory changes affecting various aspects of our operations. For example, the current U.S. presidential administration has announced certain tariffs to be imposed on Mexico, Canada, China, India, Japan and the E.U., and may impose further tariffs on other nations. In return, China has imposed retaliatory tariffs on the United States, and others may follow.

Such laws, regulations, and industry requirements are constantly evolving and changing and could potentially impact data collection and data usage for advertising and recommendations. Our actual or perceived failure to comply with such obligations could have an adverse effect on our business, results of operations, and financial condition.

We receive, store, and process data about or related to users in addition to our media partners, advertisers, services providers and employees.

The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, distribution, use, and storage of data relating to individuals. Additionally, the Federal Trade Commission and many state attorneys general are interpreting federal and state consumer protection laws as imposing standards for the online collection, use, dissemination, and security of data and issuing separate guidance in this area. If we fail to comply with any such laws or regulations, we may be subject to enforcement actions that may not only expose us to litigation, fines, and civil and/or criminal penalties, but also require us to change our business practices as well as have an adverse effect on our business, results of operations, and financial condition.

Table of Contents

The regulatory framework for online privacy issues is continuously evolving and is likely to receive global scrutiny for the foreseeable future. Restrictions could be placed upon the collection, management, aggregation, and use of information, which could result in a material increase in the cost of collecting or otherwise obtaining certain kinds of data and could limit the ways in which we may use or disclose information. Much of this scrutiny has focused on the use of cookies and other technologies to collect information about Internet users’ online browsing activity on web browsers, mobile devices, and other devices, to associate such data with user or device identifiers or individual identities across devices and channels. As we rely upon large volumes of data collected primarily through cookies and similar technologies, it is possible that these legislative and technical changes may have a substantial impact on our ability to collect and use the data of Internet users. It is essential that we monitor global privacy developments and engage in responsible privacy practices, including providing users with notice of the types of data we collect and how we use that data to provide our services.

In the United States, the U.S. Congress and state legislatures, along with federal regulatory authorities have increased their attention on matters concerning the collection and use of consumer data. For example, California enacted the California Consumer Privacy Act, along with related regulations (together, the “CCPA”), which was subsequently updated by the California Privacy Rights Act (“CPRA”). The CCPA creates individual privacy rights for California residents and increases the privacy and security obligations of businesses handling personal data and the CPRA imposes additional data protection obligations including limitation on the use and processing of sensitive personal data. The CCPA generally requires covered businesses to, among other things, provide disclosures to California consumers and afford California consumers abilities to opt-out of the sharing of personal data between parties, a concept that is defined broadly, with behavioral advertising triggering such requirements under the CCPA. The CCPA and CPRA or subsequent guidance may require us to further modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply.

Other states across the country have been implementing similar privacy laws, such as Virginia, Colorado, Connecticut and Utah. Any disparity between federal and state laws may add additional complexity, including a variation in requirements, restrictions, and potential legal risk, and may require additional investment in compliance programs, result in disjointed internal approaches to the collection and use of data as a result of state-based differences or impact strategies and availability of previously useful data.

In Europe, the General Data Protection Regulation (EU) 2016/679 (“GDPR”) took effect on May 25, 2018 and applies to products and services that we provide in Europe, as well as the processing of personal data of individuals in the European Economic Area (“EEA”), wherever that processing occurs. In addition to the foregoing, a breach of the GDPR or the UK GDPR could result in regulatory investigations, reputational damage, orders to cease/change our processing of our data, enforcement notices, and/or assessment notices (for a compulsory audit).

In addition, there is increased focus on the self-regulatory mechanisms created to further compliance with these regulations. For example, the Internet Advertising Bureau (“IAB”) Transparency & Consent Framework (“TCF”) has been criticized for being inherently incompatible with GDPR. As a result, loss of confidence in such mechanisms and slow adoption rates of changes may undermine the viability of the TCF such that there is no industry standard for requesting and obtaining consent, all of which could negatively affect our business, results of operations, and financial condition. The UK Information Commissioner’s Office (“ICO”), the Irish Data Protection Commission and the French Commission Nationale de l’Informatique et de Libertés (“CNIL”) have investigated and continue to investigate the ad tech industry, including our partners and the use of cookies. For example, in November 2019, the ICO conducted an audit of the ad tech industry which included a review of Teads’ real-time bidding processes which was subsequently referred to the ICO’s investigation team in August 2024. In addition, in November 2024 the CNIL’s investigation team initiated an investigation into Outbrain. Although, in both instances, the alleged infringements of data privacy law giving rise to the investigations remain unclear, there can be no assurance that action, including the imposition of sanctions or other penalties, will not be required as a result of such investigation.

Though GDPR is intended to harmonize privacy laws across the EEA, member state interpretations of the law continue to vary making compliance increasingly complex. In addition, the

Table of Contents

European Data Protection Board has issued guidance under Article 5(3) which has adopted a strict interpretation of consent requirements.

It is possible that CCPA (and other U.S. privacy laws), GDPR, UK GDPR and the ePrivacy Regulation in Europe and related standards may be interpreted and applied in manners that are, or are asserted to be, inconsistent with our data management practices or the technological features of our solutions, and any failure to achieve required data protection standards may result in lawsuits, regulatory fines, or other actions or liability, all of which may harm our results of operations.

We may also face civil claims, including from privacy advocates who continue to call for scrutiny of the ad tech industry, or representative actions and class action litigation. For example, the Austrian online ePrivacy campaign group NOYB has filed several strategic complaints against major tech companies, alleging non-compliance with GDPR provisions. We have seen an increasing number of individual data subject requests and in one instance filing of a relevant action in a Belgian court in an attempt to prohibit processing of data by us. The increasing number of these requests, claims and further industry scrutiny requires investment of resources and could result in reputational harm and significant damages or other liabilities.

In addition, privacy advocacy and industry groups may propose new and different self-regulatory standards that either legally or contractually apply to us, our media partners or our advertisers, such as the IAB U.S. Global Privacy Platform and Multi-State Privacy Agreement.

In Europe, the Digital Services Act (EU) 2022/2065 (“DSA”) became enforceable in February 2024 and applies to digital services that connect consumers to goods, services, or content in the EEA. Although we have not been classified as a “very large online platform” under the DSA, we are still required to comply with the provisions of the DSA and/or support our partners’ compliance with the provisions of the DSA. The DSA, among other things: imposes stricter obligations on curbing harmful or unlawful content, such as implementing tools to automatically monitor, detect and take down illegal online content; implements a mechanism for users to easily flag content and to cooperate with “trusted flaggers” (such as NGOs); reinforces traceability of our customers; implements a mechanism for the public and businesses to challenge content moderation decisions and seek redress; provides access to vetted researchers to the key data and provision of access to NGOs to public data; increases transparency on the algorithms used for recommending content to users; implements risk-based controls to prevent the misuse of our tools and independent audits of our risk management systems; implements mechanisms to adapt swiftly and efficiently in reaction to crises affecting public security or public health; and prevents the use of targeted advertising with respect to child targeting and sensitive personal data. Sanctions under the DSA include fines of up to 6% of global turnover in the event of non-compliance and can lead to a ban on operating in the E.U. in cases of repeated serious breaches. A similar piece of legislation, the Online Safety Bill, is currently being discussed in the UK. We may also face civil claims including representative actions and other class action type litigation (where individuals have suffered harm), potentially amounting to significant compensation or damages liabilities, as well as associated costs, diversion of internal resources, and reputational harm. In addition, we may be required to indemnify media partners against claims with respect to our advertising content. Our advertisers may not have the ability to satisfy their indemnification obligations to us, in whole or in part, and pursuing any claims for indemnification may be costly or unsuccessful. As a result, we may be required to satisfy indemnification obligations to media partners, or claims against us, with our own assets.

As a result of such actions, we may become subject to

Table of Contents

significant liability, including claims for damages, financial penalties, and costs of compliance. Claims may be expensive to defend, divert management’s attention from our business operations, and affect the cost and availability of insurance, even if we ultimately prevail. If any of this occurs, it may have a material adverse effect on our reputation, business operations, financial position, competitive position and prospects.

If media partners, advertisers, and data providers do not obtain necessary and requisite consents from consumers for us to process their personal data, we could be subject to fines and liability.

Pursuant to GDPR, the UK GDPR and related ePrivacy laws, media partners, advertisers and any partners are required to obtain unambiguous consent from EEA data subjects to process their personal data, which the industry has addressed through the release and widespread adoption of the IAB TCF. Because we do not have direct relationships with users, we rely on media partners, advertisers, and other partners, as applicable, to implement notice or choice mechanisms using industry-standard consent mechanisms and complying with requirements under applicable laws in respect of such consent mechanisms (for example, notifying users of our activities). In addition, we rely on our media partners, advertisers and partners, as applicable, to transmit notification of consent (or non-consent) after the user has interacted with the consent mechanism. We make reasonable efforts to enforce contractual requirements regarding notice and choice mechanisms, but, due to the nature and scale of our media partners, advertisers and partners, we are unable to audit fully our media partners’, advertisers’ and other partners’ compliance with our recommended practices or with applicable laws and regulations. Where applicable, we may only use user data to deliver interest-based advertisements where we have consent. We may not have adequate insurance or contractual indemnity arrangements to protect us against any such claims or losses.

Evolving legislation and mechanisms governing the transfer of personal data from the EEA or the UK to the United States, introduce increased uncertainty and may require us to change our EEA/UK data practices and/or rely on an alternative legally sufficient compliance measure.

In 2023, the EU-U.S. Data Privacy Framework (DPF) was adopted as the replacement mechanism for transfer of EU data to the US after the 2020 invalidation of the prior E.U.-U.S. Privacy Shield mechanism. The DPF is a voluntary certification program administered by the US Department of Commerce which requires companies to self-certify compliance with the DPF principles. Although we are certified under the DPF, this mechanism is already facing legal scrutiny and challenges, similar to the Privacy Shield, and its invalidation may impact our ability to transfer EEA/UK data to the United States.

Despite such decision, rulings in 2022 from the Austrian Datenschutzbehörde bring into question whether supplemental measures for the transfer of data outside of the UK and EEA will be deemed sufficient by media partners, regulatory bodies and courts. If such supplementary measures are found to be inadequate, this may adversely affect our business, results of operations and financial condition.

In the event that use of the DPF, the SCCs or reliance on the UK adequacy decision are invalidated as solutions for data transfers to the U.S., or there are additional changes to the data protection regime in the EEA/UK resulting in any inability to transfer personal data from the EEA/UK to the U.S. in compliance with data protection laws, European media partners and advertisers may be more inclined to work with businesses that do not rely on such compliance mechanisms, such as EEA/UK-based companies or other competitors that do not need to transfer personal data to the U.S.. Such changes could cause us to incur penalties under GDPR or UK GDPR, could increase the cost and complexity of operating our business, or adversely impact our business, results of operations, and financial condition.

We also may be exposed to potential claims brought by third parties against us, our media partners or our advertisers. Such claims may allege, for example, that our advertisers’ recommendations (including the destination page reached) infringe the intellectual property or other rights of third parties, are false, deceptive, misleading or offensive, or that our advertisers’ products are defective or harmful.

Table of Contents

Our regulatory compliance depends in part on our media partners’ and advertisers’ adherence to laws and regulations of multiple jurisdictions concerning copyright, trademark and other intellectual property rights, unfair competition, privacy and data protection, and truth in-advertising, and their use of our platform in ways consistent with users’ expectations. In general, we require our media partners and advertisers to comply with all applicable laws, including all applicable intellectual property, content, privacy and data protection regulations. We rely on contractual representations from media partners and advertisers that they will comply with all such applicable laws. We make reasonable efforts to enforce contractual notice requirements, but, due to the nature of our business, we are unable to audit fully our media partners’ and advertisers’ compliance with our recommended disclosures or with applicable laws and regulations. If our media partners or advertisers were to breach their contractual or other requirements in this regard, or a court or governmental agency were to determine that we, our media partners and/or our advertisers failed to comply with any applicable law, then we may be subject to potentially adverse publicity, damages and related possible investigations, litigation or other regulatory activity. In addition, any perception that we, our media partners and/or our advertisers fail to comply with current or future regulations and industry practices may expose us to public criticism, collective redress actions, reputational harm or claims by regulators, which could disrupt our industry and/or operations and expose us to increased liability.

As a result of the above, we have been involved in, and could be involved in further, litigation or governmental investigations, whether on our own, or involving or concerning our media partners or advertisers, including class action claims, or as third-parties required to comply with requests for information or subpoenas. As a result of such actions, we have become and may continue to become subject to significant liability, including claims for damages, financial penalties, and costs of compliance. Claims may be expensive to defend, divert management’s attention from our business operations, and affect the cost and availability of insurance, even if we ultimately prevail. If any of this occurs, it may have a material adverse effect on our reputation, business operations, financial position, competitive position and prospects.

Our intellectual property rights are important to our business. We rely on a combination of confidentiality clauses, trade secrets, copyrights, patents and trademarks to protect our intellectual property and know-how. However, the steps we take to protect our intellectual property may be inadequate. We will not be able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Despite our precautions, it may be possible for unauthorized third parties, including our employees, consultants, service providers, media partners or advertisers, to copy our products and/or obtain and use information that we regard as proprietary to create solutions and services that compete with ours. We cannot assure you that the steps taken by us will prevent misappropriation of our trade secrets or technology or infringement of our intellectual property. In addition, the laws of some foreign countries where we operate do not protect our proprietary rights to as great an extent as the laws of the United States, and many foreign countries do not enforce these laws as diligently as government agencies and private parties in the United States.

Our policy is to enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have strategic relationships and business alliances. No assurance can be given that these agreements will be effective in controlling access to our proprietary information and other intellectual property. Further, these agreements do not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our solutions.

We may from time to time be subject to claims of prior use, opposition or similar proceedings with respect to applications for registrations of our intellectual property, including but not limited to our trademarks and patent applications. The process of seeking patent protection can be lengthy and expensive, and any of our pending or future patent or trademark applications, whether or not challenged, may not be issued with the scope of the claims we seek, if at all. We are unable to guarantee that patents or trademarks will issue from pending or future applications or that, if patents or trademarks issue, they will not be challenged, invalidated or circumvented, or that the rights granted under the patents will provide us with meaningful protection or any commercial advantage. We rely on our brand and trademarks to identify our solutions to our media partners and advertisers and to differentiate our solutions from those of our competitors. If we are unable to adequately protect our trademarks, third parties may use our brand names or trademarks similar to ours in a manner that may cause confusion to our users or confusion in the market, or dilute our brand names or trademarks, which could decrease the value of our brand.

Table of Contents

From time to time, we may discover that third parties are infringing, misappropriating or otherwise violating our intellectual property rights. However, policing unauthorized use of our intellectual property and misappropriation of our technology is difficult and we may therefore not always be aware of such unauthorized use or misappropriation. Despite our efforts to protect our intellectual property rights, unauthorized third parties may attempt to use, copy or otherwise obtain and market or distribute our intellectual property rights or technology or otherwise develop solutions with the same or similar functionality as our solutions. If competitors infringe, misappropriate or otherwise misuse our intellectual property rights and we are not adequately protected, or if such competitors are able to develop solutions with the same or similar functionality as ours without infringing our intellectual property, our competitive position and results of operations could be harmed and our legal costs could increase.

In addition, the Company cannot be certain that its products and services do not and will not infringe or misappropriate the intellectual property rights of others. The Company has in the past been, and may in the future be, subject to legal disputes and claims, including claims that its systems, processes, marketing, data usage or technologies infringe on the intellectual property rights of third parties. The Company may incur significant costs in defending against such claims and could also be required to indemnify its customers if they are sued by a third party for intellectual property infringement arising from materials that the Company has provided to the customers in connection with the provision of its products and services. The Company may not be successful in defending against such intellectual property claims, in which case it could lose valuable property rights, or in obtaining licenses or an agreement to resolve any intellectual property disputes.

We may be subject to intellectual property rights claims by third parties, which are costly to defend and could require us to pay significant damages and could limit our ability to use technology or intellectual property.

We operate in an industry with extensive intellectual property litigation. There is a risk that our business, platform, and services may infringe or be alleged to infringe the trademarks, copyrights, patents, and other intellectual property rights of third parties, including patents held by our competitors or by non-practicing entities. We may also face allegations that our employees have misappropriated or divulged the intellectual property of their former employers or other third parties. Regardless of whether claims that we are infringing patents or other intellectual property rights have any merit, the claims are time consuming, divert management attention and financial resources and are costly to evaluate and defend. Some of our competitors have substantially greater resources than we do and are able to sustain the cost of complex intellectual property litigation to a greater extent and for longer periods of time than we could. Results of these litigation matters are difficult to predict and may require us to stop offering some features, purchase licenses, which may not be available on favorable terms or at all, or modify our technology or our platform while we develop non-infringing substitutes, or incur significant settlement costs. Any of these events could adversely affect our business, results of operations, and financial condition.

Our platform relies on third-party open source software components. Failure to comply with the terms of the underlying open source software licenses could expose us to liabilities, and the combination of open source software with code that we develop could compromise the proprietary nature of our platform.

Our platform utilizes software licensed to us by third-party authors under “open source” licenses and we expect to continue to utilize open source software in the future. The use of open source software may entail greater risks than the use of third-party commercial software, as open source licensors generally do not provide warranties or other contractual protections regarding infringement claims or the quality of the code. To the extent that our platform depends upon the successful operation of the open source software we use, any undetected errors or defects in this open source software could prevent the deployment or impair the functionality of our platform, delay new solutions introductions, result in a failure of our platform, and injure our reputation. For example, undetected errors or defects in open source software could render it vulnerable to breaches or security attacks, and, in conjunction, make our systems more vulnerable to data breaches. Furthermore, some open source licenses contain requirements that we make available source code for modifications or derivative works we create based upon the type of open source software we use. If we combine our proprietary software with open source software in a specific manner, we could, under some open source licenses, be required to release the source code of our proprietary software to the public. This would allow our competitors to create similar solutions with lower development effort and time and ultimately put us at a competitive disadvantage.

Although we monitor our use of open source software to avoid subjecting our platform to conditions we do not intend, we cannot assure you that our processes for controlling our use of open source software in our platform will be effective. If we are held to have breached the terms of an open source software license, we could be required to seek licenses from third parties to continue operating using our solution on terms that are not economically feasible, to re-engineer our solution or the supporting computational infrastructure to discontinue use of code, or to make generally available, in source code form, portions of our proprietary code.

Table of Contents

We are required to comply with international advertising regulations in connection with the distribution of advertising, including potential regulation or oversight of native advertising disclosure standards. Failure to comply could negatively impact us, our media partners and/or our advertisers, which could have an adverse effect on our business, results of operations, and financial condition.

For example, in the United States, the Federal Trade Commission requires that all online advertising meet certain principles, including the clear and conspicuous disclosure of advertisements. If we, or our advertisers, make mistakes in implementing this varied and evolving guidance, or our commitments with respect to these principles, we could be subject to negative publicity, government investigation, government or private litigation, or investigation by self-regulatory bodies or other accountability groups. Moreover, additional or different disclosures may lead to a reduction in user engagement, which could have an adverse effect on our business, results of operations, and financial condition.

Environmental, social and governance (“ESG”) risks could adversely affect the Company’s reputation, business and performance and the trading price of the Common Stock.

Companies are facing increasing scrutiny from investors, customers, regulators and other stakeholders related to their ESG practices and disclosure. The nature, scope and complexity of matters that we must assess and report are constantly changing due to evolving governmental and investor expectations regarding reporting relating to climate change, diversity and inclusion, workplace conduct and human capital management. Significant expenditures and commitment of time by management, employees and consultants are involved in developing, implementing and overseeing policies, practices, additional disclosures and internal controls related to ESG risk and performance. An inability to implement such policies, practices, and internal controls and maintain compliance with laws and regulations, or a perception among stakeholders that our ESG disclosures and sustainability goals are insufficient, our goals are unattainable or are not an appropriate area of focus could harm our reputation and have an adverse impact on our business, financial condition or results of operations. Investors, investor advocacy groups and investment funds may focus on these practices, especially as they relate to the environment, climate change, diversity and inclusion, workplace conduct and human capital management. Any negative public perception resulting from evolving anti-ESG initiatives from the U.S. federal and/or certain state governments and other stakeholders could damage our reputation with investors, customers, employees and regulators. We may also face conflicting U.S. federal, state level and international requirements which could subject us to risk of non-compliance in one jurisdiction based on our compliance in another. Balancing evolving and potentially conflicting requirements related to climate change, diversity and inclusion (including those relating to recent executive orders from the new U.S. presidential administration), workplace conduct and human capital management could take significant time and management resources. Increased ESG-related compliance costs could result in increases to our overall operational costs which could impact our profitability.

Risks Related to Taxation

Our tax liabilities may be greater than anticipated.

The U.S. and non-U.S. tax laws applicable to our business activities are subject to interpretation and are changing. We are subject to audit by the U.S. Internal Revenue Service and by taxing authorities of the state, local and foreign jurisdictions in which we operate. Our tax obligations are based in part on our corporate operating structure, including the manner in which we develop, value, use and hold our intellectual property, the jurisdictions in which we operate, how tax authorities assess revenue-based taxes such as sales and use taxes, the scope of our international operations, and the value we ascribe to our intercompany transactions. If future earnings are repatriated and we are unable to do it in a tax neutral manner, we may be required to accrue and pay additional taxes, including any applicable foreign withholding tax and income taxes. Taxing authorities may challenge, and have challenged, our tax positions and methodologies for valuing developed technology or intercompany arrangements, positions regarding the collection of sales and use taxes, and the jurisdictions in which we are subject to taxes, which could expose us to additional taxes. Any adverse outcomes of such challenges to our tax positions could result in additional taxes for prior periods, interest and penalties, as well as higher future taxes.

For example, the European Commission has proposed, and various jurisdictions have enacted or are considering enacting laws that impose separate taxes on specified digital services, which may increase our tax obligations in such jurisdictions. Digital services or other similar taxes could, among other things,

Table of Contents

increase our tax expense, create significant administrative burdens for us, discourage potential customers from subscribing to our platform due to the incremental cost of any such sales or other related taxes, or otherwise have a negative effect on our financial condition and results of operations. In addition, the Organization for Economic Cooperation and Development is progressing on a Base Erosion and Profit Shifting Project that, if implemented, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we do business. More than 140 countries tentatively signed on to a framework that imposes a minimum tax rate of 15%, among other provisions, and the European Union has adopted a Council Directive which requires these provisions to be transposed into member states’ national laws. As this framework is subject to further negotiation and implementation by each member country, the timing and ultimate impact of any such changes on our tax obligations are uncertain.

Moreover, the determination of our provision for income taxes and other tax liabilities requires significant estimates and judgment by management, and the tax treatment of certain transactions is uncertain. The income tax benefit/expense we record may vary significantly in future periods based on factors outside of our control, such as the uncertainty with respect to the current macroeconomic environment on our operations and our stock price. For example, in periods in which our stock price varies from the grant price of the share-based compensation vesting in that period, we will recognize excess tax benefits or shortfalls that will impact our effective tax rate.

Any changes, ambiguity, or uncertainty in taxing jurisdictions’ administrative interpretations, decisions, policies and positions, including the position of taxing authorities with respect to revenue generated by reference to certain digital services, could also materially impact our income tax liabilities. Although we believe that our estimates and judgments are reasonable, the ultimate outcome of any particular issue may differ from the amounts previously recorded in our financial statements and any such occurrence could adversely affect our business, results of operations, and financial condition.

Future events may impact our deferred tax asset position including deferred tax assets related to our utilization of net operating losses (“NOLs,” each an “NOL”) and U.S. deferred federal income taxes on undistributed earnings of international affiliates that are considered to be reinvested indefinitely.

We evaluate our ability to utilize deferred tax assets and our need for valuation allowances based on available evidence. This process involves significant management judgment regarding assumptions that are subject to change from period to period based on changes in tax laws or variances between future projected operating performance and actual results. We are required to establish a valuation allowance for deferred tax assets if we determine, based on available evidence at the time the determination is made, that it is more likely than not that some portion or all of the deferred tax assets will not be utilized. In making this determination, we evaluate all positive and negative evidence as of the end of each reporting period. Future adjustments (either increases or decreases), to a deferred tax asset valuation allowance are determined based upon changes in the expected realization of the net deferred tax assets. The utilization of our deferred tax assets ultimately depends on the existence of sufficient taxable income in carry-forward periods under the applicable tax law. Due to significant estimates used to establish a valuation allowance and the potential for changes in facts and circumstances, it is possible that we will be required to record adjustments to a valuation allowance in future reporting periods. Changes to a valuation allowance or the amount of deferred taxes could have a materially adverse effect on our business, financial condition and results of operations. Further, while we plan to either reinvest indefinitely our earnings from our foreign subsidiaries or repatriate them tax neutrally, should we change our assertion regarding the permanent reinvestment of the undistributed earnings of certain of our foreign subsidiaries, for example as a result of a change in cash requirements post-Acquisition, a deferred tax liability may need to be established if such earnings are not able to be repatriated in a tax neutral manner.

The ability to fully utilize our NOL and tax credit carryforwards to offset future taxable income may be limited. Under Section 382 of the Internal Revenue Code of 1986, as amended, if a corporation undergoes an “ownership change,” the corporation’s ability to use its pre-change NOL carryforwards to offset its post-change income may be limited. In general, an “ownership change” will occur if there is a cumulative change in our ownership by 5% or greater stockholders that exceeds 50% over a rolling three-year period. Similar rules may apply under state tax laws. We may experience ownership changes in the future as a result of future transactions in our stock. As a result, if we earn net taxable income, our ability to use our pre-change NOL carryforwards or other pre-change tax attributes to offset United States federal and state taxable income may be subject to limitations. Any such limitations on the ability to use our NOL carryforwards and other tax assets could adversely impact our business, financial condition, and operating results.

Table of Contents

Risks Related to the Securities Markets and Ownership of the Common Stock

The trading price of the shares of the Common Stock is likely to be volatile, and purchasers of the Common Stock could incur substantial losses.

Technology stocks historically have experienced high levels of volatility. These fluctuations could cause you to incur substantial losses, including all of your investment in the Common Stock. Factors that could cause fluctuations in the trading price of the Common Stock include the following:

•significant volatility in the market price and trading volume of technology companies in general and of companies in the digital advertising industry in particular;

•announcements of new solutions or technologies, commercial relationships, acquisitions, or other events by us or our competitors;

•price and volume fluctuations in the overall stock market from time to time;

•changes in how advertisers perceive the benefits of our platform and future offerings;

•the public’s reaction to our press releases, public announcements, and filings with the SEC;

•fluctuations in the trading volume of our shares or the size of our public float;

•sales of large blocks of Common Stock;

•actual or anticipated changes or fluctuations in our results of operations;

•changes in actual or future expectations of investors or securities analysts;

•litigation involving us, our industry, or both;

•governmental or regulatory actions or audits;

•regulatory developments applicable to our business, including those related to privacy in the United States or globally;

•general economic conditions and trends;

•major catastrophic events in our domestic and foreign markets; and

•departures of key employees.

In addition, if the market for technology stocks, the stock of digital advertising companies or the stock market, in general, experiences a loss of investor confidence, the trading price of the Common Stock could decline for reasons unrelated to our business, results of operations, or financial condition. In the past, following periods of volatility in the market price of a company’s securities, securities class action litigation has often been brought against that company. If litigation is instituted against us, we could incur substantial costs and divert management’s attention and resources.

In addition, repurchases pursuant to our share repurchase program could affect our stock price and increase its volatility. The existence of a share repurchase program could also cause our stock price to be higher than it would be in the absence of such a program and could potentially reduce the market liquidity for the Common Stock. There can be no assurance that any share repurchases will enhance stockholder value because the market price of the Common Stock may decline below the levels at which we repurchased shares of Common Stock. Although our share repurchase program is intended to enhance long-term stockholder value, short-term stock price fluctuations could reduce the program’s effectiveness.

We do not have any control over these analysts. If one or more of the analysts who cover us should downgrade our shares, change their opinion of our business prospects or publish inaccurate or unfavorable research about our business, our share price may decline. If one or more of these analysts who cover us ceases coverage of our

Table of Contents

company or fails to regularly publish reports on us, we could lose visibility in the financial markets, which could cause our share price or trading volume to decline.

Our directors, executive officers and employees hold options and restricted stock units under our equity incentive plans, and the shares issuable upon the exercise of such options or vesting of such restricted stock units have been registered for public resale under the Securities Act of 1933, as amended (the “Securities Act”). Accordingly, these shares will be able to be freely sold in the public market upon issuance subject to certain legal and contractual requirements.

We are an emerging growth company subject to reduced disclosure requirements, and there is a risk that availing ourselves of such reduced disclosure requirements will make the Common Stock less attractive to investors.

In addition, Section 107 of the JOBS Act provides that an emerging growth company can take advantage of an extended transition period for complying with new or revised accounting standards. This provision allows an emerging growth company to delay the adoption of some accounting standards until those standards would otherwise apply to private companies. We have elected to use the extended transition period under the JOBS Act.

We will remain an emerging growth company until the earliest of: the end of the fiscal year in which the market value of the shares of our outstanding capital stock held by non-affiliates is $700 million or more as of the end of the second quarter of that year, the end of the fiscal year in which we have total annual gross revenue of $1.235 billion, the date on which we issue more than $1.0 billion in nonconvertible debt in a three-year period, or five years from the date of our IPO.

Based on the anticipated total annual gross revenue of the Company, we expect that we will cease to be an emerging growth company as of December 31, 2025.

We do not intend to pay dividends on the Common Stock, so any returns will be limited to the value of the Common Stock.

We have never declared or paid cash dividends on the Common Stock and do not expect to pay any dividends in the foreseeable future. Any determination to pay dividends in the future will be at the discretion of our board of directors and will depend on a number of factors, including our financial condition, results of operations, capital requirements, general business conditions and other factors that our board of directors may deem relevant. Our current credit facility imposes certain limitations on our ability to pay dividends and any new credit facility may contain certain similar restrictions.

Table of Contents

Anti-takeover provisions in our charter documents and under Delaware law could make an acquisition of our company, which may be beneficial to our stockholders, more difficult and may prevent attempts by our stockholders to replace or remove our current management.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws may delay or prevent an acquisition of us or a change in our management. These provisions include:

•authorizing “blank check” preferred stock, which could be issued by the board without stockholder approval and may contain voting, liquidation, dividend and other rights superior to the Common Stock, which would increase the number of outstanding shares and could thwart a takeover attempt;

•a classified board of directors whose members can only be dismissed for cause;

•the prohibition on actions by written consent of our stockholders;

•the limitation on who may call a special meeting of stockholders;

•the establishment of advance notice requirements for nominations for election to our board of directors or for proposing matters that can be acted upon at stockholder meetings; and

•the requirement of at least 75% of the outstanding capital stock to amend any of the foregoing second through fifth provisions.

In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which limits the ability of stockholders owning in excess of 15% of our outstanding voting stock to merge or combine with us. Although we believe these provisions collectively provide for an opportunity to obtain greater value for stockholders by requiring potential acquirers to negotiate with our board of directors, they would apply even if an offer rejected by our board were considered beneficial by some stockholders. In addition, these provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of our management.

Table of Contents

Item 1B. Unresolved Staff Comments

None.

Cybersecurity Risk Management and Strategy

We have developed and implemented a cybersecurity risk management program intended to protect the confidentiality, integrity, and availability of our critical systems and information. We utilize various risk management guides, as well as the protocols of certain certifications as described below to identify, assess, and manage cybersecurity risks relevant to our business through our risk management program. Our cybersecurity risk management program includes a cybersecurity incident response plan.

Outbrain uses COBIT, or Control Objectives for Information Technologies, as a framework for risk management and manages various controls as required by ISO 27001, 27017 and 27032 standards. Outbrain maintains the following certifications: ISO 27001, ISO 27017 and ISO 27032, Cloud Security Alliance Star level 1 and PCI-DSS SAQ A-EP. Outbrain’s on-premises data centers are SOC 2 certified. Teads utilizes NIST as a framework for risk management and manage various controls as required by SOC2 Type 2. Teads maintains the SOC2 Type 2 certification and its cloud infrastructure providers are ISO 27 certified.

In addition to our certifications, we (i) conduct routine employee training sessions and onboarding security training, including phishing simulations, to increase awareness of phishing and other cyber threats; (ii) require multi-factor authentication access methods for all employees into our network; (iii) operate general monitoring and service protections that are subject to continuous enhancements to detect and mitigate various threats, including performing ongoing manual and automatic vulnerability assessment tests; and (iv) manage an ongoing cyber risk-management framework to assess internal technological changes, as well as external systems and services as part of supply chain risk.

Our cybersecurity risk management program is integrated into our overall enterprise risk management program, and shares common methodologies, reporting channels and governance processes that apply across the enterprise risk management program to other legal, compliance, strategic, operational, and financial risk areas.

Our cybersecurity risk management program includes:

•Ongoing risk assessments designed to help identify material cybersecurity risks to our critical systems, information, products, services, and our broader enterprise IT environment;

•a security team principally responsible for managing (1) our cybersecurity risk assessment processes, (2) our security controls, and (3) our response to cybersecurity incidents;

•the use of external service providers, where appropriate, to assess, test or otherwise assist with aspects of our security controls;

•cybersecurity awareness training of our employees, incident response personnel, and senior management;

•a cybersecurity incident response plan that includes procedures for responding to cybersecurity incidents; and

•a third-party risk management process for service providers, suppliers, and vendors.

We have not identified risks from known cybersecurity threats, including as a result of any prior cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition.

Cybersecurity Governance

Our Board considers cybersecurity risk as part of its risk oversight function and has delegated to the Audit Committee oversight of cybersecurity and other information technology risks. The Audit Committee oversees management’s implementation of our cybersecurity risk management program.

The Audit Committee receives quarterly reports from management regarding our cybersecurity risks. In addition, management updates the Committee, as necessary, regarding any material cybersecurity incidents, as well as certain other incidents that have lesser impact potential.

Table of Contents

The Audit Committee reports to the full Board regarding its activities, including those related to cybersecurity. The full Board also receives briefings from management on our cyber risk management program, including education sessions regarding cybersecurity topics from our Chief Information Security Officer (CISO), internal security staff or external experts.

Our Risk Committee, which includes our CEO and other members of management, meets quarterly as part of the Company’s enterprise risk management program, with cybersecurity being the most significant area of review and reporting.

Our security team, including our Governance Risk and Compliance lead (GRC) and CISO, is responsible for assessing and managing our risks from cybersecurity threats. The team has primary responsibility for our overall cybersecurity risk management program and supervises both our internal cybersecurity personnel and our retained external cybersecurity consultants. Our CISO has 25 years experience as a technology leader, with extensive experience within the cybersecurity ecosystem and risk management. He has been certified as a CISO by the Israeli Technion Institute. Our security team supervises efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in the IT environment.

Information Systems Acquired from Teads

As disclosed above in Item 1 under “Acquisition of Teads,” on February 3, 2025, we completed our acquisition of Teads. Teads’ legacy information systems are currently maintained separately from Outbrain’s preexisting information system infrastructure. After we are able to fully evaluate Teads’ legacy information systems, protocols and practices, we plan to operationally integrate either the legacy Teads system or the legacy Outbrain system, and these integrated systems will then be subject to Outbrain’s cybersecurity risk management structure and strategy. While we integrate these systems, our GRC and CISO are engaging in cybersecurity risk management activities, and any cybersecurity incidents detected on the legacy Teads information systems are assessed, managed and reported in accordance with the governance processes detailed above.

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
CPPTL	1 day, 16 hours ago
TUSK	1 day, 16 hours ago
EQBK	1 day, 16 hours ago
FSUN	1 day, 16 hours ago
UBX	1 day, 17 hours ago
BSTT	1 day, 17 hours ago
NDLS	1 day, 17 hours ago
FNRN	1 day, 17 hours ago
SNBR	1 day, 17 hours ago
FCBC	1 day, 17 hours ago
MYFW	1 day, 17 hours ago
BRDG	1 day, 17 hours ago
AIMD	1 day, 17 hours ago
GRND	1 day, 17 hours ago
SPFI	1 day, 17 hours ago
ATRA	1 day, 17 hours ago
SGHT	1 day, 17 hours ago
CMCT	1 day, 17 hours ago
OB	1 day, 17 hours ago
NABL	1 day, 17 hours ago
NODK	1 day, 17 hours ago
RGTI	1 day, 17 hours ago
UNTY	1 day, 17 hours ago
HBT	1 day, 17 hours ago
ZCSH	1 day, 17 hours ago
ETCG	1 day, 17 hours ago
LXRX	1 day, 17 hours ago
EBTC	1 day, 17 hours ago
GSBC	1 day, 18 hours ago
CCFN	1 day, 18 hours ago
GPLB	1 day, 18 hours ago
BCBP	1 day, 18 hours ago
SBFG	1 day, 18 hours ago
HMST	1 day, 19 hours ago
CAC	1 day, 19 hours ago
BMNM	1 day, 19 hours ago
OFLX	1 day, 20 hours ago
FSTR	1 day, 20 hours ago
CARE	1 day, 21 hours ago
IBCP	1 day, 21 hours ago
BFST	1 day, 22 hours ago
LFWD	1 day, 22 hours ago
FNLC	1 day, 23 hours ago
COOK	2 days ago
ESPR	2 days ago
FORR	2 days ago
MASS	2 days, 1 hour ago
ADV	2 days, 1 hour ago
NBBK	2 days, 1 hour ago
WHF	2 days, 2 hours ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - OB

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - OB

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing