Risk Factors Dashboard
Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.
View risk factors by ticker
Search filings by term
Risk Factors - OPRX
-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing
$OPRX Risk Factor changes from 00/03/08/21/2021 to 00/03/20/25/2025
Item 1A. “Risk Factors,” and Part II, Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” including the disclosures under “Critical Accounting Estimates”. Market projections are subject to the risks discussed in this report and other risks in the market. OptimizeRx disclaims any intention or obligation to update publicly any forward-looking statements, whether in response to new information, future events or otherwise, except as required by applicable law.Unless otherwise specified or the context otherwise requires, when used in this Annual Report on Form 10-K, the terms “we,” “our,” “us,” “OptimizeRx,” or the “Company” refer to OptimizeRx Corporation and its subsidiaries. ii SUMMARY OF RISK FACTORS An investment in our Company is subject to a number of risks. Set forth below is a high-level summary of some, but not all, of these risks. You should review and carefully consider the risks and uncertainties described in more detail in “Part I, Item 1A. Risk Factors” of this Annual Report, which includes a more complete discussion of the risks summarized below as well as a discussion of other risks related to our business and an investment in our securities. Risks Related to Our Financial Position ●We have a history of losses, and may not be able to achieve profitability, or, if achieved, sustain profitability. ●We may need to raise additional capital to grow our business and may not be able to do so on favorable terms, if at all. ●Servicing debt and funding other obligations requires a significant amount of cash, and our ability to generate sufficient cash depends on many factors, some of which are beyond our control. ●Restrictions in our Term Loan could adversely affect our business, financial condition, results of operations, ability to make distributions, and the value of our securities. Risks Related to Our Business: Our Industry, Operations, and Competition ●Seasonal trends in the pharmaceutical brand marketing industry could affect our operating results. ●Developing and implementing new and updated applications, features and services for our solutions may be more difficult than expected, may take longer and cost more than expected and may not result in sufficient increases in revenue to justify the costs. Developing and implementing new and updated applications, features and services for our portals may be more difficult than expected, may take longer and cost more than expected and may not result in sufficient increases in revenue to justify the costs. ●Any failure to offer high-quality customer support for our solutions may adversely affect our relationships with our customers and harm our financial results. ●We are dependent on a concentrated group of customers. We are dependent on a concentrated group of customers. ●If we are unable to maintain our contracts with electronic prescription platforms and electronic health record systems, our business will suffer. ●Our agreements with eRx and EHR channel partners could be subject to audit. ●If we fail to attract new customers or retain and expand existing customers, our business and future prospects may be materially and adversely impacted. ●The markets in which we operate are competitive, continually evolving and, in some cases, subject to rapid change. 7 The markets in which we operate are competitive, continually evolving and, in some cases, subject to rapid change. ●Developments in the healthcare industry could adversely affect our business. Developments in the healthcare industry could adversely affect our business. Risks Related to Regulatory Matters ●Actual or perceived failures to comply with applicable laws and regulations that affect the healthcare industry, including data protection, privacy and security, fraud and abuse laws, regulations, standards and other requirements could adversely affect our business, results of operations, and financial condition. ●Our operations may be impacted from changes to current regulations and future legislation. ●If our customers, partners, and third-party providers fail to comply with the extensive and changing landscape of legal and regulatory requirements affecting the pharmaceutical and healthcare industries, they could face increased costs and/or penalties, which could lead to us losing business. Risks Related to Our Intellectual Property and Technology ●We are dependent, in part, on our intellectual property. If we are not able to protect our proprietary rights or if those rights are invalidated or circumvented, our business may be adversely affected. ●Cybersecurity incidents could disrupt business operations, result in the loss of critical and confidential information, and adversely impact our reputation and results of operations. ●We may be unable to support our technology to further scale our operations successfully. We may be unable to support our technology to further scale our operations successfully. ●Our business will suffer if our network systems fail or become unavailable. Our business will suffer if our network systems fail or become unavailable. ●The use of AI technology in our operations and IT infrastructure could improve internal processes, but poses security risks and privacy risks; the use of AI technology also faces regulatory uncertainty and scrutiny given that AI technology is rapidly growing and evolving. iii Risks Related to Managing Our Growth ●If we are unable to manage growth, our operations could be adversely affected. ●We may not be able to identify suitable acquisition candidates, complete acquisitions or integrate acquisitions successfully. ●Our acquisition activities may disrupt our ongoing business and may involve increased expenses, and we may not realize the financial and strategic goals contemplated at the time of a transaction. Risks Related to Inflation, Interest Rates, and Other Adverse Economic Conditions ●Interest rate increases may adversely affect our financial condition and results of operations. ●We could be subject to economic, political, regulatory and other risks arising from our international operations. ●Inflation, the current interest rate environment, and other adverse economic conditions may adversely affect our business, results of operations and financial condition. ●Geopolitical events may affect our business and our customer base and have a material adverse impact on our sales and operating results. ●Impairment charges for goodwill or other long-lived assets may need to be recognized or increased if we lose a major customer, experience a decline in our common stock price or experience changes to the regulatory environment affecting pharmaceutical advertising restricting the use of our technology. ●Market conditions could adversely change and our earnings could decline resulting in charges to impair intangible assets, such as goodwill. General Risks ●Our business and growth may suffer if we are unable to attract and retain members of our senior management team and other key employees. ●The impact and effects of public health crises, pandemics and epidemics could have a material adverse effect on our business, prospects, financial condition, and operating results. Risks Relating to Our Common Stock ●If a market for our common stock is not maintained, shareholders may be unable to sell their shares. Risks Relating to Our Securities If a market for our common stock is not maintained, shareholders may be unable to sell their shares. ●The market price of our common stock may be highly volatile and could fluctuate widely in price in response to various factors, many of which are beyond our control. The market price of our common stock is likely to be highly volatile and could fluctuate widely in price in response to various factors, many of which are beyond our control. ●We do not expect to pay dividends in the foreseeable future and any return on investment may be limited to the value of our common stock. 12 We do not expect to pay dividends in the foreseeable future and any return on investment may be limited to the value of our common stock. ●Certain provision of our charter, bylaws and Nevada law may discourage takeover attempts and business combinations that shareholders might consider in their best interests. ●Actions of activist stockholders could be disruptive and costly and could adversely affect our results of operations, financial condition, and/or share price. Risks Related to Being a Public Company ●We have identified a material weakness in our internal control over financial reporting. Failure to remediate the material weakness or any other material weaknesses that we identify in the future could result in material misstatements in our future financial statements. ●Conflicting views on environmental, social and governance matters may have a negative impact on our business, impose additional costs on us, and expose us to additional risks. iv PART 1 Item 1. Business General OptimizeRx is a leading healthcare technology company that is redefining how life sciences brands connect with patients and healthcare providers. OptimizeRx is a Nevada corporation and was founded in 2006 in Rochester, Michigan as a healthcare technology company delivering various types of messages, including coupons and co-pays directly to physicians and pharmacists though electronic health record (EHR) systems and ePrescribing (eRx) platforms. Over time, the demand for different types of communication and marketing solutions among life sciences organizations, healthcare professionals (HCPs), and patients led us to expand upon our initial solution to increase the variety of health-related information we deliver, as well as the platforms, technology, and audiences through, and to which we deliver. By combining artificial intelligence (AI)-driven tools with our original financial messaging solution, we progressively enhanced our original financial messaging solution. Our current AI-enabled Dynamic Audience Activation Platform (DAAP) not only identifies precise HCP audiences, but also estimates which HCPs will see brand eligible patients, and when such brand eligible patients will be seen. After acquiring Healthy Offers, Inc. (d/b/a “Medicx” or “Medicx Health”) in 2023, we expanded our capabilities to include direct-to-consumer (DTC) marketing using our patent-protected Micro-Neighborhood Targeting (MNT) solution. MNT uses de-identified claims data to target not individual patients, but geographies in which eligible patients live, to better target audiences for brand manufacturers - a privacy-centric approach to audience creation. With the integration of DTC marketing, our life sciences brand customers can now access across our omnichannel network to reach both HCP and patient audiences. Today, we offer diverse tech-enabled marketing solutions using sophisticated machine-learning algorithms to find the best audience in the correct channels at the right time. Customers are able to execute traditional marketing campaigns on our proprietary digital point-of-care network, as well as dynamic DTC marketing campaigns that optimize audiences in real time to increase the value of treatment information for HCPs and patients. Connecting over two million U.S. healthcare providers and millions of their patients through an intelligent technology platform embedded within a proprietary omnichannel network, OptimizeRx helps life sciences organizations engage and support their customers. Business Strategy OptimizeRx is at a pivotal moment in its almost 20-year history. Over the past few months, we have completed an extensive review of our business processes, operations, growth plans, capital allocation, strategies and opportunities - with the ultimate goal of assessing how we can best create value for our shareholders. On March 10, 2025, after a rigorous search and selection process for a new Chief Executive Officer that was conducted by our independent directors with the assistance of a leading executive search firm, we named Stephen L. Silvestro as our Chief Executive Officer. As Mr. Silvestro leads the next phase of the Company’s growth and transformation, many of our business priorities will be the same, such as continuing to focus on customer centricity and delight, operational excellence, disciplined execution, developing stronger relationships with our valued business partners, and expanding our unique value proposition with our top-tier pharma customers. However, going forward, a core aspect of our new value creation strategy will be to drive towards being recognized as a “Rule of 40” company within the next several years such that our combined annual revenue growth rate and EBITDA margin are 40% or higher. Like other companies aspiring to be a “Rule of 40” company, we understand the need to effectively balance growth with profitability. As we drive towards this ambitious financial goal, we plan to develop a re-occurring revenue component to our business as we look to convert our DAAP customers to a subscription-based model for the data component of our offerings. We believe this will improve our EBITDA margins over time while substantially enhancing the overall predictability of our revenue streams. We also believe this will enhance our ability to scale our business and more thoughtfully plan for profitable growth. While we believe we are executing the right strategy, our Board of Directors and management team understand the need to regularly review our strategy, assess it against a variety of opportunities that may create greater value, and ensure that the strategy we are executing is fully aligned with the best interests of our shareholders. 1 Industry Background Life sciences organizations face a challenging commercial landscape. The life sciences industry is characterized by rapidly advancing science and technologies, intense competition, and a strong emphasis on differentiated products. As a result, life sciences organizations have increasingly turned to technology solutions to support their commercial strategies. According to industry sources, total pharmaceutical industry commercial spend in the United States is $30 billion of which approximately $10 billion is attributable to commercial digital spend. We believe significant opportunity exists to address the unmet needs of life sciences organizations as they relate to digital solutions, including omnichannel access to HCPs, for our customers’ biggest commercial challenges. These complex challenges include brand visibility to HCPs which is impacted by a competitive drug environment with sales representatives losing time in front of prescribers, augmented by the amount of time the HCPs have to spend in front of computers and in the EHR. Further, EHRs do not often communicate with one another, creating interoperability issues resulting in HCPs not having all relevant patient information. In addition, expensive specialty medications are becoming more common and involve more complex diagnosis criteria - factors that contribute to substantial script abandonment by patients. Our solutions are designed to address these and other commercial challenges faced by our customers. Principal Solutions We offer clear, actionable solutions to the challenges faced by our customers, and our combined HCP and DTC marketing strategies are designed to ensure our customers’ brands are positioned at the right moment and with the right message, always prioritizing the end result: successful brand engagement to reach both HCPs and patients, ultimately resulting in improved patient care. Our principal solutions can be summarized as follows: Audience Development: DAAP and MNT ●Dynamic Audience Activation Platform (DAAP) generates dynamic audiences with predictive analytics via machine learning methods. This identifies which potentially qualified patients and which HCPs to actively engage based on the patient’s care journey and disease progression. These dynamic audiences provide our manufacturing customers with relevant and timely targets, generating a higher likelihood of impact. ●Micro-Neighborhood Targeting (MNT) creates consumer audiences using a privacy-first process. MNT looks for all patients expressing brand eligibility signals (covering more than 90% of the U.S. population), then scores over 35 million 9-digit zip codes based on the concentration of those signals to create a prioritized, yet de-identified audience. Geographies are automatically refreshed and prioritized regularly for maximum marketing relevance and precision. Our clients may then activate these audiences through programmatic Demand-Side Platforms (DSPs). Audience Profiling: Profiler ●Our audience profiling solution, Profiler, provides insights into our customers’ target consumers, identifying the most cost effective and engaging channels, partners, and strategies for our customers. Audience profiling enables clients to maximize marketing dollars, focusing on channels their targets are most likely to be consuming, and more specifically focusing on the media partners within those channels. This is critical to upfront planning as well as periodic analysis to ensure efficient use of marketing budgets. 2 Audience Activation and Media Execution ●Our primary media offering is banner messaging delivered to HCPs. Banner messages include brand messaging, therapeutic support messaging, affordability messaging, HUB awareness, limited distribution drug information, and patient support program messaging. We can deliver these in a number of ways via our HCP omnichannel network (EHR systems and eRx platforms), programmatic social media, and programmatic display. ●With the acquisition of Medicx, our omnichannel solutions expanded further to offering media execution solutions to consumer audiences. To reach consumer audiences - brand eligible patients - we deliver messages via our consumer omnichannel network including through programmatic display, programmatic connected television (CTV)/over-the-top (OTT), programmatic social media, addressable television (ATV), digital out-of-home (OOH), programmatic audio (podcasts, apps, radio), and email/direct mail. Pharmacy Alerts ●Pharmacy Alerts improves the existing workflow for prescribing HCPs by informing them in real time about which pharmacies are able to fill a patient’s prescription. Currently, HCPs typically see a list of pharmacies near their patients, sorted by proximity, without regard to whether each pharmacy carries the medication or is permitted to fill it (in case of a limited distribution drug). Pharmacy Alerts flags pharmacies that have the medication in stock and are able to fill the prescriptions, resulting in less frustration and added work for prescribing physicians, pharmacies and patients and less waiting time to get essential medications to the patients. Financial Messaging ●Financial Messaging provides prescribers visibility to branded copay offers for patients directly within their EHR systems and eRx platforms. It allows prescribers to print or digitally send copay offer details to the dispensing pharmacy. Our solution addresses the fact that many healthcare systems and prescribers are looking for an easier, more effective way to increase affordable access to their prescribed branded medications. Sales and Marketing The go-to-market strategy for the business aligns sales and marketing efforts while keeping customer engagement at the core. Engaging customers early, providing value throughout their journey, and nurturing long-term relationships drive sustainable growth and retention. Our sales and marketing teams include over 25 individuals focused on awareness, adoption and expansion of data and technology solutions designed to address the digital engagement needs of life sciences brands and their agency partners. DAAP, our patent pending patient-centric omnichannel engagement platform combines artificial intelligence (AI) and human intelligence (HI), to determine the optimal time to engage patients and physicians. We synchronize HCP and DTC marketing across the programmatic and point-of-care channels to increase brand conversions, streamline therapy starts, and build stronger brand relationships. Our sales and marketing teams work closely together to cultivate customer relationships. We use a number of methods to market and promote our solutions, including digital advertising, industry events, trade shows, conferences, media coverage, social media, and email. Technology Our proprietary technology platform enables us to curate privacy safe DTC audiences, dynamic HCP and DTC audiences, and effectively manage digital media campaigns for our advertiser clients (agencies, and manufacturer/brands) across our channel partner network. Our platform consists of a unified data intelligence technology stack, multiple cloud-based data warehouses, and in-house applications and application programming interface layers. Collectively, this platform enables us with a collaborative environment for data engineering, data science, and machine learning, an efficient method to curate privacy safe DTC audiences, and a scalable means to manage both point-of-care media campaigns and the supply-side inventory request volume. For the management of point-of-care media campaigns, the platform integrates advanced features of a Supply-Side Platform (SSP), allowing us to provide seamless access to an expansive range of point-of-care inventory via our strategic partnerships. As an SSP, our platform enables us to manage and optimize our point-of-care network’s ad inventory, maximizing their revenue. On the demand side, our platform empowers our account and program managers to efficiently manage our customers’ campaign(s). Our technology is built on a scalable and secure architecture that supports high-performance data processing, real-time decisioning, and integration with third-party data providers. To support our growth and provide maximum security, scalability, and flexibility, all our systems, including from acquisitions, are now hosted and integrated in the cloud. Our technology development and systems management core team is in the U.S. and in Croatia, with contractors in India and Ukraine to provide bench depth, rich skills experience, and business economies. The teams are organized into Centers of Excellence focused on Product Domains, Quality Assurance, Information Security, Data Warehousing, Business Intelligence, Platform Services, and Internal Systems Support. System enhancements in 2024 included system and framework upgrades, documentation of processes and procedures, security implementation for ongoing cybersecurity, Sarbanes Oxley, HIPAA, and customer security assessments, and in achieving both System and Organization Controls (SOC) 2 Type 1 and Type 2 certifications. 3 Competition The competitive landscape within life sciences digital marketing is constantly evolving. Our solutions face competition from numerous other companies. We compete broadly in the dynamic and ever-evolving pharmaceutical and life sciences digital marketing industry with healthcare data suppliers, health-focused demand-side platforms, and health-focused walled garden websites and web platforms, and advertising networks that aggregate traffic from multiple web sites or point-of-care platforms such as telehealth, EHR, eRx, physician practice management, health information exchanges (HIE), and site-based platforms within large health systems. Our competitors include large well-known companies with established names, solid market niches, and wide arrays of product offerings and marketing networks. As innovators in the industry, we have patented and patent-pending technologies that provide unique differentiation, including a patient-centric focus on brand conversion, and value generation for our customers. Our extensive point-of-care network provides our customers with unparalleled reach to relevant prescribers. We are uniquely able to use DAAP to produce targeted, privacy-safe audiences for both consumers and their treating HCPs, allowing brand engagement to occur within the likely care window to find brand-eligible patients at the right time for brand adoption. DAAP leverages the investment in data and AI technologies, combined with human intelligence, in applying brand-specific strategies to optimize program performance. Our patented MNT technology provides a unique opportunity for pharmaceutical brands to market to consumers while adhering to HIPAA and state level privacy requirements. For more information on risks relating to our competition, see Item 1A. Risk Factors. Intellectual Property Historically, we have created intellectual property or obtained intellectual property through commercial relationships and in connection with acquisitions. We own patents important to our business, and we expect to continue to file patent applications to protect our research and development investments in new products. As of December 31, 2024, we held five patents and two pending patent applications, including foreign counterpart patents and foreign applications. For the United States, patents may last 20 years from the date of the patent’s filing, subject to term adjustments made by the patent office. In addition, we own registered trademarks in the United States and other countries. As of December 31, 2024, OPTIMIZERx, OPTIMIZEMD, CareSpeak, DIETWATCH, Innovate4Outcomes, SPRx, SPx, RMDY, Specialty Express, TELAREP, Medicx, Micro-Neighborhood, and Geomedical Targeting are our registered trademarks. We also have licenses to intellectual property for the use and sale of certain of our solutions. In addition, we obtain other intellectual property rights and/or licenses used in connection with our business when practical and appropriate. Government Regulation The healthcare industry and, in particular, our customers and partners are subject to U.S. federal, state and local laws and regulations, including those governing fraud, abuse, privacy and security. Many of these laws and regulations are complicated and how they might apply to us, our customers, our partners, or the specific services and relationships we have with our customers and partners are not always well-defined. Many states have enacted laws regulating the processing of personal information which may reduce demand for placing digital ads in general, especially when those ads relate to medications, medical products, or health conditions. Although our solutions address these laws by using publicly available information and by processing de-identified and aggregated information, and we use this data to target geographies rather than individuals, our customers and partners in the advertising industry remain subject to these regulatory pressures and may not process personal information in this same way. Our failure, or perceived failure, to accurately apply, or comply with, these laws and regulations could subject us to significant fines and liability, result in reputational harm, and adversely affect our business. Any new or amended laws or regulations that impose significant operational restrictions and compliance requirements may negatively impact our business. See Item 1A. Risk Factors for more information on the impact of Government Regulations on OptimizeRx. Human Capital As of December 31, 2024, we had 106 full-time employees and 1 part-time employee in the U.S, as well as 22 full-time employees in Croatia. None of our employees are represented by a labor union or collective bargaining agreement with respect to their employment with us. The majority of our employees work remotely and are geographically distributed across the United States and Croatia. We supplement our workforce with contractors in the United States and internationally on an as-needed basis. We consider our relationship with our employees to be good and have not experienced any work stoppages. We are dedicated to providing a supportive and respectful environment for our employees where everyone feels valued, and we celebrate both the differences and similarities among our people. We also believe that diversity in all areas, including cultural background, experience and thought, is essential to bettering a professional environment and in making our Company stronger. Our Diversity, Equity, Inclusion & Belonging Committee (DEI&B) is actively engaged in improving our culture, hiring practices and training. In 2023, we upheld the Parity Pledge – a commitment made in 2021 to interview and consider at least one qualified woman and one underrepresented minority for every open role, VP or higher. In addition, the DEI&B Committee sponsored quarterly events, including “Cultural Café”, “Food Waste Awareness”, “Movement Challenge”, and “Affinity Groups”. 4 We prioritize recruiting, retaining, and incentivizing a highly qualified, diverse workforce as the success of our Company is dependent on the skills, experience, and efforts of our employees. A skilled workforce not only improves a company’s performance, but also contributes to overall employee satisfaction and enhances human capital. We have increased our focus on training and development for our current employees and have implemented a Learning Management System where current and future training modules will be presented and tracked for reporting purposes. We offer other learning and development opportunities and resources to support our employees in achieving and enhancing their development objectives. We equip our managers with the skills and tools to provide ongoing coaching and feedback so employees can maximize their performance and potential, delivering success for the Company and the employee. We pay our employees competitively and offer a broad range of company-paid benefits, which we believe are competitive with others in our industry. Moreover, we believe our long-term incentives are structured in a manner to provide time-based vesting schedules that are retentive and we incentivize select employees through the granting of stock-based awards and cash-based performance bonus awards. Smaller Reporting Company We are a “smaller reporting company” as defined in the Securities Exchange Act of 1934, as amended (the “Exchange Act”). As a result, we may take advantage of certain reduced disclosure obligations available to smaller reporting companies, including the exemption from compliance with the auditor attestation requirements pursuant to the Sarbanes-Oxley Act of 2022, reduced disclosure about our executive compensation arrangements and the requirements to provide only two years of audited financial statements in our annual reports and registration statements. We will continue to be a “smaller reporting company” as long as (1) we have a public float (i.e., the market value of our American Depositary Shares held by non-affiliates) less than $250 million calculated as of the last business day of our most recently completed second fiscal quarter, or (2) our annual revenues are less than $100 million for our previous fiscal year and we have either no public float or a public float of less than $700 million as of the end of that fiscal year’s second fiscal quarter. Decreased disclosures in our SEC filings due to our status as a “smaller reporting company” may make it harder for investors to analyze our results of operations and financial prospects. Corporate Information On January 31, 2006, Optimizer Systems, L.L.C. was formed in the State of Michigan and, on October 16, 2007, OptimizeRx Corporation was separately incorporated in Michigan. On October 22, 2007, Optimizer Systems, LLC merged into OptimizeRx Corporation, a Michigan corporation, and the name OptimizeRx Corporation remained unchanged following the merger. On April 14, 2008, an alternative reporting company with the OTC Market Group, Inc., known at the time as RFID Ltd., and formed in the State of Colorado, entered into a share exchange agreement with the stockholders of OptimizeRx Corporation, pursuant to which the stockholders of OptimizeRx Corporation exchanged all of the issued and outstanding capital stock of OptimizeRx Corporation for shares of common stock of RFID Ltd. As of April 30, 2008, RFID’s officers and directors resigned their positions and RFID changed its business to OptimizeRx’s business. On April 15, 2008, RFID Ltd’s corporate name was changed to OptimizeRx Corporation, a Colorado corporation. On September 4, 2008, the Company then completed a migratory merger, thereby changing the Company’s state of incorporation from Colorado to Nevada, resulting in OptimizeRx Corporation, a Nevada corporation becoming the parent corporation of OptimizeRx Corporation, a Michigan corporation. On April 11, 2023, OptimizeRx Corporation, a Michigan corporation was merged with and into OptimizeRx Corporation, a Nevada corporation. We conduct our operations through our wholly-owned subsidiaries, Healthy Offers, Inc. (d/b/a Medicx Health or “Medicx Health”), a Nevada corporation, and CareSpeak Communications, d.o.o., a controlled foreign corporation incorporated in Croatia. Our principal executive offices are located at 260 Charles Street Suite 302, Waltham, MA 02453 and our telephone number is (248) 651-6568. Our website address is www.optimizerx.com.
Information contained on or accessible through this website is not incorporated by reference in, or otherwise a part of, this Annual Report on Form 10-K, and any references to this website are intended to be inactive textual references only. Available Information We are subject to the informational requirements of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), and in accordance therewith, we file reports, proxy and information statements and other information with the Securities and Exchange Commission (the “SEC”). You can read our SEC filings over the Internet at the SEC’s website at www.sec.gov. Our filings with the SEC are also available free of charge through the investor relations section of our website at www.optimizerx.com. Reports are available free of charge as soon as reasonably practicable after we electronically file them with, or furnish them to, the SEC. From time to time, we also use multiple social media channels to communicate with the public about OptimizeRx. It is possible that the information we post on social media could be deemed to be material information. Therefore, we encourage you to review the information we post on the social media channels listed on our investor relations website, if any. Information contained on or accessible through the websites and social media channels referred to above is not incorporated by reference in, or otherwise a part of, this Annual Report, and any references to these websites and social media channels are intended to be inactive textual references only. Item 1A.Item 1A. Risk Factors Risks Related to Our Financial Position We have a history of losses, and may not be able to achieve profitability, or, if achieved, sustain profitability. With the exception of 2021, we have historically incurred losses as a result of investing in future growth. While we have increased revenues, we have not yet consistently achieved profitability due to these investments and non-cash expenses. While we have increased revenues significantly, we have not yet consistently achieved profitability due to significant investments in our growth, and non-cash expenses. Our ability to achieve consistent profitability depends on our ability to generate sales through our technology platform and advertising model, while maintaining reasonable expense levels. If we do not achieve sustainable profitability, it may impact our ability to continue our operations. 5 We may need to raise additional capital to grow our business and may not be able to do so on favorable terms, if at all. We may need to raise additional capital in the future, including to expand our operations and pursue our growth strategies, to respond to competitive pressures, or to meet capital needs in response to operating losses or unanticipated working capital requirements. Our inability to raise additional capital on acceptable terms in the future may limit our ability to continue to operate our business and further expand our operations. Servicing debt and funding other obligations requires a significant amount of cash, and our ability to generate sufficient cash depends on many factors, some of which are beyond our control. Our ability to make payments on and refinance our indebtedness and to fund our operations and capital expenditures depends on our ability to generate cash flow and secure financing in the future. Our ability to generate future cash flow depends, among other things, on future operating performance, general economic conditions, competition, and legislative and regulatory factors affecting our operations and business. Some of these factors are beyond our control. There is no assurance that our business will generate cash flow from operations or that future debt or equity financings will be available to us to enable us to pay our indebtedness or to fund other needs. As a result, we may need to refinance all or a portion of our indebtedness on or before maturity. There is no assurance that we will be able to refinance any of our indebtedness on favorable terms, or at all. Any inability to generate sufficient cash flow or refinance our indebtedness on favorable terms could have an adverse effect on our financial condition. Restrictions in our Term Loan could adversely affect our business, financial condition, results of operations, ability to make distributions, and the value of our securities. Our Term Loan contains customary affirmative covenants, including, among others, covenants pertaining to the delivery of financial statements; certain financial covenants; notices of default and certain other material events; payment of obligations; preservation of corporate existence, rights, privileges, permits, licenses, franchises and intellectual property; maintenance of property and insurance and compliance with laws, as well as customary negative covenants, including, among others, limitations on the incurrence of liens and entering into capital leases, investments and indebtedness; mergers and certain other fundamental changes; dispositions of assets; restricted payments; changes in our line of business; transactions with affiliates and burdensome agreements. These covenants could affect our ability to operate our business, increase the amount of interest expense we ultimately pay pursuant to the Term Loan, and may limit our ability to take advantage of potential business opportunities as they arise. Our ability to comply with the covenants and restrictions contained in our Term Loan, may be affected by events beyond our control, including prevailing economic, financial, and industry conditions. If market or other economic conditions deteriorate, our ability to comply with these covenants may be impaired. A failure to comply with these provisions could result in a default or an event of default. Upon an event of default, unless waived, the lenders could elect to terminate their commitments, cease making further loans, cause their loans to become due and payable in full, foreclose against any assets securing the debt under our Term Loan and force us and our subsidiaries into bankruptcy or liquidation. If the payment of our debt is accelerated, our assets may be insufficient to repay such debt in full, and the holders of our stock could experience a partial or total loss of their investment. Risks Related to Our Business: Our Industry, Operations, and Competition Seasonal trends in the pharmaceutical brand marketing industry could affect our operating results. In general, the pharmaceutical brand marketing industry experiences seasonal trends that affect the vast majority of participants in the pharmaceutical digital marketing industry. Many pharmaceutical companies allocate the largest portion of their brand marketing to the fourth quarter of the calendar year. As a result, the first quarter tends to reflect lower activity levels and lower revenue, with gradual increases in the following quarters. We generally expect these seasonality trends to continue and our ability to effectively manage our resources in anticipation of these trends may affect our operating results. Developing and implementing new and updated applications, features and services for our solutions may be more difficult than expected, may take longer and cost more than expected and may not result in sufficient increases in revenue to justify the costs. Developing and implementing new and updated applications, features and services for our portals may be more difficult than expected, may take longer and cost more than expected and may not result in sufficient increases in revenue to justify the costs. Attracting and retaining users of our solutions requires us to continue to improve the technology underlying those solutions and to continue to develop new and updated applications, features and services for those solutions. Attracting and retaining users of our portals requires us to continue to improve the technology underlying those portals and to continue to develop new and updated applications, features and services for those portals. If we are unable to do so on a timely basis or if we are unable to implement new applications, features and services without disruption to our existing ones, we may lose potential users and clients. The costs of development of these enhancements may negatively impact our ability to achieve profitability. We rely on a combination of internal development, strategic relationships, licensing and acquisitions to develop our solutions and related applications, features and services. We rely on a combination of internal development, strategic relationships, licensing and acquisitions to develop our portals and related applications, features and services. Our development and/or implementation of new technologies, applications, features and services may cost more than expected, may take longer than originally expected, may require more testing than originally anticipated and may require the acquisition of additional personnel and other resources. There can be no assurance that the revenue opportunities from any new or updated technologies, applications, features or services will justify the amounts spent. 6 Any failure to offer high-quality customer support for our solutions may adversely affect our relationships with our customers and harm our financial results. Once our solutions are implemented, our customers use our support organization to resolve technical issues relating to our solutions. Increased demand for our support services may increase our costs without corresponding revenue, which could adversely affect our operating results. Further, the sale of our solutions is highly dependent on the ease of use of our solutions, on our business reputation, and on favorable recommendations from our existing customers. Any failure to maintain high-quality and responsive customer support, or a market perception that we do not maintain high-quality support, could harm our reputation, cause us to lose customers, adversely affect our ability to sell our solutions to prospective customers, and harm our business, operating results and financial condition. We are dependent on a concentrated group of customers. Because the pharmaceutical industry is dominated by large companies with multiple brands, our revenue is concentrated in a relatively small number of companies. We have over 100 pharmaceutical manufacturers as customers, and our revenues are concentrated in these customers. Loss of one or more of our larger customers could have a negative impact on our operating results. Our top five customers represented approximately 49% of revenue for the year ended December 31, 2024. In 2024 and 2023, respectively, we had two customers and one customer that represented over 10% of our revenues. We expect that we will continue to depend upon a relatively small number of customers for a significant portion of our total revenues for the foreseeable future. The loss of any of these customers or groups of customers for any reason, or a change of relationship with any of our key customers could cause a material decrease in our total revenues. Additionally, mergers or consolidations among our customers in the healthcare industry could reduce the number of our customers and could adversely affect our revenues and sales. In particular, if our customers are acquired by entities that are not also our customers, that do not use our solutions or that have more favorable contract terms with competitors and choose to discontinue, reduce or change the terms of their use of our solutions, our business and operating results could be materially and adversely affected. If we are unable to maintain our contracts with electronic prescription platforms and electronic health record systems, our business will suffer. We are reliant upon our contracts with leading electronic prescribing (“eRx”) platforms and electronic health record (“EHR”) systems to generate a portion of the revenues received from our customers. Such arrangements subject us to a number of risks, including the following: ●Our eRx and EHR channel partners may experience financial, regulatory or operational difficulties, which may impair their ability to focus on and fulfill their contract obligations to us; ●Legal disputes or disagreements, including the ownership of intellectual property, may occur with one or more of our eRx and EHR channel partners and may lead to lengthy and expensive litigation or arbitration; ●Significant changes in an eRx and/or EHR channel partner’s business strategy may adversely affect such partner’s willingness or ability to satisfy obligations under any such arrangement; ●An eRx and EHR channel partner could terminate the partnership arrangement, which could negatively impact our ability to sell our solutions and achieve revenues; and ●The failure of an eRx or EHR channel partner to provide accurate and complete financial information to us or to maintain adequate and effective internal control over its financial reporting may negatively affect our ability to meet our financial reporting obligations as required by the SEC. See Part II, Item 9A. “Controls and Procedures.” We generated 57.3% and 55.9% of our revenue through our two largest channel partners in 2024 and 2023, respectively.4% of our revenue through our largest partner in 2020 and 2019, respectively. As such, the inability to maintain these relationships could adversely impact our business. Our agreements with eRx and EHR channel partners could be subject to audit. Our agreements with our eRx and EHR channel partners provide for revenue-sharing payments to them based on the revenue we generate through their platforms and systems. Our agreements with our partners provide for revenue sharing payments to the platform partners based on the revenue we generate through the platform. These payments could be subject to an audit by our channel partners, at their cost, and if there is a dispute as to the calculation, we may be liable for additional payments. These payments are subject to audit by our partners, at their cost, and if there is a dispute as to the calculation, we may be liable for additional payments. Some agreements would require us to also pay for the cost of the audit if an underpayment is determined to be in excess of a certain amount. 7 If we fail to attract new customers or retain and expand existing customers, our business and future prospects may be materially and adversely impacted. We currently work with many leading pharmaceutical companies, medical device manufacturers, associations, and other companies. We currently work with many leading pharmaceutical companies, medical device manufacturers, medtech, associations, and other companies. While we have experienced customer growth, this growth may not continue at the same pace in the future or at all. Achieving growth in our customer base may require us to engage in increasingly sophisticated and costly sales and marketing efforts that may not result in additional customers. We may also need to modify our solution set and/or pricing model to attract and retain such customers. If we fail to attract new customers or fail to maintain or expand existing relationships in a cost-effective manner, our business and future prospects may be materially and adversely impacted. The markets in which we operate are competitive, continually evolving and, in some cases, subject to rapid change. 7 The markets in which we operate are competitive, continually evolving and, in some cases, subject to rapid change. Our solutions face competition from numerous other companies. We compete for revenue from healthcare advertisers and sponsors (pharmaceutical manufacturers) with healthcare data suppliers, health-focused demand-side platforms, and health-focused walled garden websites and web platforms, and advertising networks that aggregate traffic from multiple web sites or point-of-care platforms such as telehealth, EHR, eRx, physician practice management, health information exchanges (HIE), site-based platforms within large health systems, etc. Many of our competitors have greater financial, technical, product development, marketing and other resources than we do. Many of our competitors have greater financial, technical, product development, marketing and other resources than we do. These organizations may be better known than we are and have more customers than we do. These organizations may be better known than we are and have more customers or users than we do. We cannot provide assurance that we will be able to compete successfully against these organizations or any alliances they have formed or may form. Since there are no substantial barriers to entry into the markets in which we participate, we expect that competitors will continue to enter these markets. Since there are no substantial barriers to entry into the markets in which our public portals participate, we expect that competitors will continue to enter these markets. Developments in the healthcare industry could adversely affect our business. Most of our revenue is derived from pharmaceutical manufacturers and could be affected by changes affecting the broader healthcare industry, including decreased spending in the industry overall. General reductions in expenditures by healthcare industry participants could result from, among other things: ●Government regulation or private initiatives that affect the manner in which healthcare industry participants interact with consumers and the general public; ●Government regulation prohibiting the use of coupons by patients covered by federally funded health insurance programs; ●Consolidation of healthcare industry participants; ●Reductions in governmental funding for healthcare; and ●Adverse changes in business or economic conditions affecting healthcare industry participants. Even if general expenditures by industry participants remain the same or increase, developments in the healthcare industry may result in reduced spending in some or all the specific market segments that we serve now or may serve in the future. Even if general expenditures by industry participants remain the same or increase, developments in the healthcare industry may result in reduced spending in some or all of the specific market segments that we serve or are planning to serve. For example, the use of our solutions and services could be affected by: ●A decrease in the number of new drugs or medical devices coming to market; and ●A decrease in marketing expenditures by pharmaceutical or medical device companies. The healthcare industry has changed significantly in recent years, and we expect that significant changes will continue to occur. The healthcare industry has changed significantly in recent years and we expect that significant changes will continue to occur. However, the timing and impact of developments in the healthcare industry are difficult to predict. We cannot assure you that the demand for our solutions and services will continue to exist at current levels or that we will have adequate technical, financial and marketing resources to react to changes in the healthcare industry. We cannot assure you that the markets for our solutions and services will continue to exist at current levels or that we will have adequate technical, financial and marketing resources to react to changes in those markets. Risks Related to Regulatory Matters Actual or perceived failures to comply with applicable laws and regulations that affect the healthcare industry, including data protection, privacy and security, fraud and abuse laws, regulations, standards and other requirements could adversely affect our business, results of operations, and financial condition. The global data protection landscape is rapidly evolving, and we are or may become subject to numerous state, federal and foreign laws, requirements and regulations governing the collection, use, disclosure, retention, and security of personal information. In addition, our customers and service providers may be or become subject to these same rules. This evolution may create uncertainty in our business, affect our ability to operate in certain jurisdictions or to collect, store, transfer, use and share personal information, necessitate the acceptance of more onerous obligations in our contracts, result in liability or impose additional costs on us. The cost of compliance with these laws, regulations and standards is high and is likely to increase in the future. Any failure or perceived failure by us to comply with federal, state or foreign laws or regulation, our internal policies and procedures or our contracts governing our processing of personal information could result in negative publicity, government investigations and enforcement actions, claims by third parties, and damage to our reputation, any of which could have a material adverse effect on our operations, financial performance and business. 8 We also may be bound by contractual obligations and other obligations relating to privacy, data protection, and information security that are more stringent than applicable laws and regulations. The costs of compliance with, and other burdens imposed by, laws, regulations, standards, and other obligations relating to privacy, data protection, and information security are significant. Although we work to comply with applicable laws, regulations, and standards, our contractual obligations and other legal obligations, these requirements are evolving and may be modified, interpreted and applied in an inconsistent manner from one jurisdiction to another, and may conflict with another or other legal obligations with which we must comply. Accordingly, our failure, or perceived inability, to comply with these laws, regulations, standards, and other obligations may limit the use and adoption of our solution, reduce overall demand for our solution, lead to regulatory investigations, breach of contract claims, litigation, and significant fines, penalties, or liabilities for actual or alleged noncompliance or slow the pace at which we close sales transactions, any of which could harm our business. The Health Insurance Portability and Accountability Act of 1996, or HIPAA, and the rules promulgated thereunder require certain entities, referred to as Covered Entities, to comply with established standards, including standards regarding the privacy and security of protected health information, or PHI. HIPAA further requires that Covered Entities enter into agreements meeting certain regulatory requirements with their business associates, as such term is defined by HIPAA, which, among other things, obligate the business associates to safeguard the covered entity’s PHI against improper use and disclosure. While we are not a Covered Entity, we have contracted as a business associate of our Covered Entity customers and, as such, may be regulated by HIPAA and have contractual obligations under such agreements, including to enter into business associate agreements with our third-party vendors. We, and our Covered Entity customers might face significant contractual liability pursuant to such business associate agreements if the business associate breaches the agreement or causes the Covered Entity to fail to comply with HIPAA. Additionally, even if we do not act as a Covered Entity or Business Associate, we process data that has been de-identified according to the expert determination method under HIPAA’s Privacy Rule. This requires us to take measures to prevent the re-identification of that data and to comply with HIPAA if that data is re-identified. In the ordinary course of our business, we collect and store sensitive data, including intellectual property, proprietary business information and personally identifiable information (including of our employees, customers, suppliers and business partners). Any data breach may subject us to civil fines and penalties, or regulatory orders, fines or sanctions under relevant state and federal privacy laws in the United States, including the California Consumer Privacy Act (“CCPA”) and other laws and regulations. Our failure, or the failure of our third-party vendors, to comply with applicable laws and regulations relating to data security and our involvement or the involvement of any of our third-party vendors in any data security incidents could result in legal claims and liability, obligations to report incidents to governmental agencies, regulatory investigations and penalties, and reputational damage, which could have a material adverse effect on our business, financial condition and results of operations. Certain other laws and regulations such as federal and state anti-kickback and false claims laws may apply to us indirectly through our relationships with our customers and partners. Violations can result in considerable penalties and sanctions. If we are found to have violated, or to have facilitated the violation of such laws, we could be subject to significant penalties. Our operations may be impacted from changes to current regulations and future legislation. The current Executive Branch administration and regulatory agencies may propose policy changes that create uncertainty for our business, including potentially implementing restrictions on pharmaceutical direct to consumer (“DTC”) marketing. Additionally, in its June 2024 decision in Loper Bright Enterprises v. Raimondo (the “Loper decision”), the U.S. Supreme Court overturned the longstanding Chevron doctrine, under which courts were required to give deference to regulatory agencies’ reasonable interpretations of ambiguous federal statutes. The Loper decision could result in additional legal challenges to regulations and guidance issued by federal agencies applicable to our customer’s operations, including those issued by the U.S. Food and Drug Administration (FDA), the U.S. Department of Health & Human Services, and the U.S. Federal Trade Commission. Additionally, the Loper decision may result in increased regulatory uncertainty, inconsistent judicial interpretations and other impacts to the agency rule-making process. We cannot predict which additional measures may be adopted or the impact of current and additional measures on our business, or our customer’s businesses, which could have a significant impact on our business, financial condition and results of operations. If our customers, partners, and third-party providers fail to comply with the extensive and changing landscape of legal and regulatory requirements affecting the pharmaceutical and healthcare industries, they could face increased costs and/or penalties, which could lead to us losing business. The FDA, U.S. state licensure bodies, other healthcare regulators and other comparable agencies in other jurisdictions directly regulate many of the most critical business activities of our customers, partners, and third-party providers, including R&D for biotechnology and pharmaceutical development, and pharmaceutical advertising. States increasingly have been placing greater restrictions on the marketing and advertising practices of healthcare companies, particularly pharmaceutical companies. In addition, pharmaceutical and biotechnology companies have been the target of lawsuits and investigations alleging violations of government regulations, including claims asserting submission of incorrect pricing information, improper promotion of pharmaceutical products, payments intended to influence the referral of federal or state healthcare business, submission of false claims for government reimbursement, antitrust violations, violations of the U.S. Foreign Corrupt Practices Act, the U.K. Bribery Act, and similar anti-bribery or anti-corruption laws. Any failure to comply with applicable laws, rules and regulations may result in civil and/or criminal legal proceedings and lead to fines, damages, mandatory compliance programs and other sanctions and remedies that may materially affect the business, operations and reputations of our customers, partners and third-party providers which could adversely affect our business. 9 Risks Related to Our Intellectual Property and Technology We are dependent, in part, on our intellectual property. If we are not able to protect our proprietary rights or if those rights are invalidated or circumvented, our business may be adversely affected. Our business is dependent, in part, on our ability to innovate, and, as a result, we are reliant on our intellectual property. We generally protect our intellectual property through patents, trademarks, trade secrets, confidentiality and nondisclosure agreements and other measures to the extent our budget permits. There can be no assurance that patents will be issued from pending applications that we have filed or that our patents will be sufficient to protect our key technology from misappropriation or falling into the public domain, nor can assurances be made that any of our patents, patent applications, trademarks or our other intellectual property or proprietary rights will not be challenged, invalidated or circumvented. In the event a competitor or other party successfully challenges our solutions, processes, patents or licenses or claims that we have infringed upon their intellectual property, we could incur substantial litigation costs defending against such claims, be required to pay royalties, license fees or other damages or be barred from using the intellectual property at issue, any of which could have a material adverse effect on our business, operating results and financial condition. We cannot assure that steps taken by us to protect our intellectual property and other contractual agreements for our business will be adequate, that our competitors will not independently develop or patent substantially equivalent or superior technologies or be able to design around patents that we may receive, or that our intellectual property will not be misappropriated. We cannot assure you that steps taken by us to protect our intellectual property and other contractual agreements for our business will be adequate, that our competitors will not independently develop or patent substantially equivalent or superior technologies or be able to design around patents that we may receive, or that our intellectual property will not be misappropriated. If we are unable to protect our proprietary rights, we may be at a disadvantage to others who do not incur the substantial time and expense we incur. Preventing unauthorized use or infringement of our intellectual property rights is inherently difficult. Moreover, it may be difficult or practically impossible to detect theft or unauthorized use of our intellectual property. Any of the foregoing could have a material adverse effect upon our business, financial condition and results of operations. Cybersecurity incidents could disrupt business operations, result in the loss of critical and confidential information, and adversely impact our reputation and results of operations. Global cybersecurity threats can range from uncoordinated individual attempts to gain unauthorized access to our information technology (IT) systems to sophisticated and targeted measures known as advanced persistent threats. While we employ extensive measures to prevent, detect, address and mitigate these threats (including access controls, insurance, vulnerability assessments, continuous monitoring of our IT networks and systems, maintenance of backup and protective systems and user training and education), cybersecurity incidents, depending on their nature and scope, could potentially result in the misappropriation, destruction, corruption or unavailability of critical data and confidential or proprietary information (our own or that of third parties) and the disruption of business operations. The potential consequences of a material cybersecurity incident include reputational damage, loss of customers, loss of income, litigation with customers and other parties, loss of trade secrets and other proprietary business data and increased cybersecurity protection and remediation costs, which in turn could adversely affect our competitiveness and results of operations. In addition, while we maintain insurance coverage, our insurance coverage for cyberattacks may not be sufficient to cover all the losses, liabilities and costs we may experience as a result of a cybersecurity incident, including any disruptions resulting from such an incident, or that applicable insurance will be available to us in the future on economically reasonable terms or at all. A cybersecurity incident could be caused by disasters, insiders (through inadvertence or with malicious intent) or malicious third parties using sophisticated, targeted methods, including hacking, fraud, phishing or other forms of deception. The techniques used by threat actors change frequently, are becoming increasingly diverse and sophisticated, and may be difficult to detect for long periods of time. Although we maintain information technology measures designed to protect the confidentiality, availability, and integrity of our information systems, and protect us against intellectual property theft, data breaches, and other cybersecurity incidents, such measures will require updates and improvements, and we cannot guarantee that such measures will be adequate to detect, prevent or mitigate cybersecurity threats or incidents. The implementation, maintenance, segregation and improvement of these information systems requires significant management time, support and cost. Moreover, there are inherent risks associated with developing, improving, expanding and updating current systems, including the disruption of our data management, procurement, finance, and sales and service processes. These risks may affect our ability to manage our data and adequately protect our intellectual property or achieve and maintain compliance with, or realize available benefits under, applicable laws, regulations and contracts. Moreover, our proprietary information, confidential information, intellectual property, or personal information that we hold could be compromised or misappropriated and our reputation may be adversely affected. If these systems do not operate as we expect them to, we may be required to expend significant resources to make corrections or find alternative sources for performing these functions. We also work with partners and third-party service providers or vendors that collect, store and process such data on our behalf and in connection with our services. There can be no assurance that any security measures that we or our third-party service providers or vendors have implemented will be fully executed, adhered to, or effective in protecting our systems and information, including against current or future cybersecurity threats. While we have designed and developed systems and processes to protect the availability, integrity, and confidentiality of our data and information, as well as those of our customers, website visitors, employees, and others, the security measures of our third-party service providers or vendors could fail and result in security incidents, including unauthorized access to, or disclosure, acquisition, encryption, modification, misuse, loss, destruction or other compromise of such data. If a compromise of such data were to occur, we may have liability under our contracts with other parties and under applicable law for damages and incur penalties and other costs to respond to, investigate and remedy such an incident. Laws require us to provide notice to customers, regulators, credit reporting agencies or others when certain sensitive information has been compromised as a result of a security breach. There are significant differences between the laws of the U.S. and other jurisdictions, and as a result compliance in the event of a widespread data breach could be complicated and costly. Such an event could harm our reputation and result in litigation against us. Any of these results could materially adversely affect our business, prospects, financial condition and operating results. 10 We may be unable to support our technology to further scale our operations successfully. We may be unable to support our technology to further scale our operations successfully. Our plan is to grow through further integration of our technology in electronic platforms. Our plan is to grow rapidly through further integration of our technology in electronic platforms. Our growth will place significant demands on our management and technology development, as well as our financial, administrative and other resources. We cannot guarantee that any of the systems, procedures and controls we put in place will be adequate to support the commercialization of our operations. Our operating results will depend substantially on the ability of our officers and key employees to manage changing business conditions and to implement and improve our financial, administrative and other resources. If we are unable to respond to and manage changing business conditions, or the scale of our solutions, services and operations, then the quality of our services, our ability to retain key personnel and our business could be harmed. Our business will suffer if our network systems fail or become unavailable. A reduction in the performance, reliability and availability of our network infrastructure would harm our ability to distribute our solutions to our users, as well as our reputation and ability to attract and retain customers. Our systems and operations could be damaged or interrupted by fire, flood, power loss, telecommunications failure, internet breakdown, earthquake and similar events. Our systems could also be subject to viruses, break-ins, sabotage, acts of terrorism, acts of vandalism, hacking, cyber-terrorism and similar misconduct. We might not carry adequate business interruption insurance to compensate us for losses that may occur from a system outage. Any system error or failure that causes interruption in availability of our solutions or an increase in response time could result in a loss of potential customers, which could have a material adverse effect on our business, financial condition and results of operations. If we suffer sustained or repeated interruptions, then our solutions and services could be less attractive to our users and our business would be materially harmed. The use of AI technology in our operations and IT infrastructure could improve internal processes, but poses security risks and privacy risks; the use of AI technology also faces regulatory uncertainty and scrutiny given that AI technology is rapidly growing and evolving. The rapid evolution of artificial intelligence (AI) could exacerbate the information technology related risks described below. We have increased efficiency through adoption and use of AI, including with our DAAP programs, machine learning, and similar tools and technologies that collect, aggregate, analyze or generate data or other materials or content, and we expect to continue to adopt such tools as appropriate. In addition, we expect our third-party vendors and service providers to increasingly develop and incorporate AI into their product offerings. While we anticipate that we will continue to utilize our AI-powered Dynamic Audience and Activation Platform (DAAP), and to research and implement other potential AI-based technology solutions to both mitigate risk and increase automation in our environment, it is possible that bad actors and/or competitors will leverage AI solutions more effectively to either exploit vulnerabilities or take market share. Either outcome could negatively impact our business. We are aware that generative AI tools may respond with inaccurate or fabricated information, introduce bias or fail to provide traceability of source information. The intellectual property risks associated with AI include uncertainties around the ownership of AI-generated works, potential infringement of existing patents and copyrights, unauthorized use of third-party data, and exposure of proprietary algorithms or trade secrets. Dependence on AI systems or AI vendors means that any downtime or outages can disrupt business operations. Usage of our confidential data to train the AI models by us or our vendors, could result in legal risk, especially if it involves customer data or our proprietary information. There are significant and evolving risks involved in utilizing AI, and no assurance can be provided that our, our third-party vendors’ or service providers’ use of AI will enhance our, our third-party vendors’ or service providers’ products or services, or produce the intended results. The adoption and incorporation of such AI tools can lead to concerns around safety and soundness, fair treatment of consumers, and compliance with applicable laws and regulations. AI solutions may also be adversely impacted by unforeseen defects, technical challenges, cyber-attacks, cybersecurity breaches, service outages or other similar incidents, or material performance issues. In addition, various federal, state, and international governments and regulatory agencies are reviewing the technologies underlying AI and its uses are applying, or are considering applying, existing laws and regulations to AI. Some are considering adopting new general legal frameworks for AI. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our operations or offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI technology itself is highly complex and rapidly developing, it is not possible to predict all the legal, operational or technological risks that may arise relating to the use of AI. We expect that our DAAP platform and use of AI will require additional resources, including incurring additional costs to develop and maintain our products and solutions, to minimize potentially harmful or unintended consequences, to comply with applicable and emerging laws and regulations, to maintain or extend our competitive position, and to address any ethical, reputational, technical, operational, legal, competitive or regulatory issues which may arise as a result of any of the foregoing. 11 Risks Related to Managing Our Growth If we are unable to manage growth, our operations could be adversely affected. Our ability to manage growth effectively will depend on our ability to improve and expand operations, including our financial and management information systems, and to recruit, train and manage personnel. Our ability to manage growth effectively will depend on our ability to improve and expand operations, including our financial and management information systems, and to recruit, train and manage personnel. There can be no assurance that management will be able to manage growth effectively. There can be no absolute assurance that management will be able to manage growth effectively. To manage growth effectively, we will be required to continue to implement and improve our operating and financial systems and controls to expand, train and manage our employee base. Our ability to manage our operations and growth effectively will require us to continue to expend funds to enhance our operational, financial and management controls, reporting systems and procedures, and to attract and retain sufficient talented personnel. If we do not properly manage the growth of our business, we may experience significant strains on our management and operations and disruptions in our business. Various risks arise when companies grow too quickly. Various risks arise when companies and industries grow quickly. If our business grows too quickly, our ability to meet customer demand in a timely and efficient manner could be challenged. If our business or industry grows too quickly, our ability to meet customer demand in a timely and efficient manner could be challenged. We may also experience development delays as we seek to meet increased demand for our solutions. Our failure to properly manage the growth that we or our industry might experience could negatively impact our ability to execute on our operating plan and, accordingly, could have an adverse impact on our business, our cash flow and results of operations, and our reputation with our current or potential customers. We may not be able to identify suitable acquisition candidates, complete acquisitions or integrate acquisitions successfully. We may not be able to identify suitable acquisition candidates, complete acquisitions, or integrate acquisitions successfully. We may seek additional acquisition opportunities, both to further diversify our business and to penetrate or expand important product offerings or markets. There are no assurances, however, that we will be able to successfully identify suitable candidates, negotiate appropriate terms, obtain financing on acceptable terms, complete proposed acquisitions, successfully integrate acquired businesses, or expand into new markets. Once acquired, operations may not achieve anticipated levels of revenues or profitability. Acquisitions involve risks, including difficulties in the integration of the operations, technologies, services and products of the acquired companies and the diversion of management’s attention from other business concerns. Although our management will endeavor to evaluate the risks inherent in any particular transaction, there are no assurances that we will properly ascertain all such risks. Difficulties encountered with acquisitions could have a material adverse impact on our business. Our acquisition activities may disrupt our ongoing business and may involve increased expenses, and we may not realize the financial and strategic goals contemplated at the time of a transaction. We have acquired, and may in the future acquire, companies, businesses, products, services and technologies. Acquisitions involve significant risks and uncertainties, including: –our ongoing business may be disrupted, an acquisition may involve increased expenses, and our management’s attention may be diverted by acquisition, transition, or integration activities; –we may not further our business strategy as we expected; –we may not realize anticipated synergies or other anticipated benefits of an acquisition or such synergies or benefits may take longer than anticipated to be realized; –we may overpay for our investments, or otherwise not realize the financial returns contemplated at the time of the acquisition; –integration with acquired operations or technology may be more costly or difficult than expected and such integration may not be successful; –we may be unable to retain the key employees, customers and other channel partners of the acquired operation; –we may not realize the anticipated increases in our revenues from an acquisition; and –our use of cash to pay for acquisitions may limit other potential uses of our cash. Acquisitions may pose risks to our operations, including: ●problems and increased costs in connection with the integration of the personnel, operations, technologies, or products of the acquired businesses; ● unanticipated costs; ● failure to achieve anticipated increases in revenues and profitability; ● diversion of management’s attention from our core business; ● adverse effects on business relationships with suppliers and customers and those of the acquired company; ● acquired assets becoming impaired as a result of technical advancements or worse-than-expected performance by the acquired company; ● volatility associated with accounting for earn-outs in a given transaction; ● entering markets in which we have no, or limited, prior experience; and ● adversely affecting our internal control over financial reporting before the acquiree’s complete integration into our control environment. Risks Related to Inflation, Interest Rates, and Other Adverse Economic Conditions Interest rate increases may adversely affect our financial condition and results of operations. Borrowings under our Term Loan are at variable rates of interest and expose us to interest rate risk. If interest rates increase, our debt service obligations on the variable rate indebtedness will increase even though the amount borrowed remains the same. As a result, our cash flows, including cash available for servicing our indebtedness, will correspondingly decrease. A one-percentage-point increase in the interest rates on outstanding borrowings under our Term Loan would have increased our interest expense by approximately $0.4 million for the year ended December 31, 2024. 12 We could be subject to economic, political, regulatory and other risks arising from our international operations. We could be subject to economic, political, regulatory and other risks arising from our international operations. Operating in international markets requires significant resources and management attention and will subject us to regulatory, economic and political risks that may be different from, and incremental to, those in the United States. In addition to the risks that we face in the United States, our international operations in Israel and Croatia, may involve risks that could adversely affect our business, including: ●difficulties and costs associated with staffing and managing foreign operations; ●natural or man-made disasters, political, social and economic instability, including wars, terrorism and political unrest, outbreak of disease, boycotts, curtailment of trade, and other business restrictions; ●compliance with United States laws, such as the Foreign Corrupt Practices Act, export controls and economic sanctions, and local laws prohibiting corrupt payments to government officials; ●unexpected changes in regulatory requirements; ●less favorable foreign intellectual property laws; ●adverse tax consequences such as those related to repatriation of cash from foreign jurisdictions into the United States, non-income related taxes such as value-added tax or other indirect taxes, changes in tax laws or their interpretations, or the application of judgment in determining our global provision for income taxes and other tax liabilities given inter-company transactions and calculations where the ultimate tax determination is uncertain; ●fluctuations in currency exchange rates, which could impact expenses of our international operations and expose us to foreign currency exchange rate risk; ●profit repatriation and other restrictions on the transfer of funds; ●differing payment processing systems as well as use and acceptance of electronic payment methods, such as payment cards; ●new and different sources of competition; and ●different and more stringent user protection, data protection, privacy and other laws. Our failure to manage any of these risks successfully could harm our international operations and our overall business, as well as results of our operations. Our failure to manage any of these risks successfully could harm our international operations and our overall business, as well as results of our operations. Inflation, the current interest rate environment, and other adverse economic conditions may adversely affect our business, results of operations and financial condition. General global economic downturns and macroeconomic trends, including heightened inflation, capital market volatility, interest rate fluctuations, tariffs, and economic slowdown or recession, may result in unfavorable conditions that could negatively affect demand for our products and solutions and exacerbate some of the other risks that affect our business, financial condition and results of operations. Domestic markets experienced significant inflationary pressures in 2024. Threats of multinational tariffs and retaliatory tariffs provide uncertainty as to heightened inflation in the domestic markets in the next twelve months. In an inflationary environment, we may experience increases in the prices of labor and other costs of doing business. Additionally, cost increases may outpace our expectations, causing us to use our cash and other liquid assets faster than forecasted. If we are unable to successfully manage the effects of inflation, our business, operating results, cash flows and financial condition may be adversely affected. The occurrence or perception of an economic slowdown or recession, or of a further increase in inflation, may have a negative impact on the global economy and may reduce customer demand for our products and services. In addition, macroeconomic effects such as changes in interest rates, potential tariffs, and other measures taken by central banks and other policy makers could have a negative effect on overall economic activity that could reduce our customers’ demand for our products and services. Changing interest rates may have unpredictable effects on markets, may result in heightened market volatility and may detract from our performance to the extent we are exposed to such interest rates and/or volatility. An adjustment in rates would impact our variable rate debt. If interest rates increase or remain elevated, we could face higher debt service requirements, which would adversely affect our cash flow and could adversely impact our results of operations. If we are unable to generate sufficient cash flow to service our debt or to fund our other liquidity needs, we could need to restructure or refinance all or a portion of our debt. Any refinancing of indebtedness could be at higher interest rates, thereby resulting in an overall increase in interest expense. Adverse changes in demand could impact our business, collection of accounts receivable and our expected cash flow generation, which may adversely impact our financial condition and results of operations. 13 Impairment charges for goodwill or other long-lived assets may need to be recognized or increased as we shift our focus away from our non-core businesses, lose a major customer or experience changes to the regulatory environment affecting pharmaceutical advertising restricting the use of our technology. Annually, we evaluate goodwill and long-lived assets to determine if impairment has occurred. Additionally, interim reviews are performed whenever events or changes to the business could indicate possible impairment. The future occurrence of a potential indicator of impairment could include matters such as (i) a decrease in expected net earnings, (ii) adverse equity market conditions, (iii) a decline in current market multiples, (iv) a decline in our common stock price, (v) a significant adverse change in legal factors or the general business climate, and (vi) an adverse action or assessment by a regulator. Any future impairment of our goodwill or long-lived assets could require us to record an impairment charge, which would negatively impact our results of operations. An impairment could be recorded as a result of changes in assumptions, estimates or circumstances, some of which are beyond our control. Since a number of factors may influence determinations of fair value, we are unable to predict whether impairments of goodwill and other long-lived assets will occur in the future, and we can provide no assurance that continued conditions will not result in future impairments of these assets. For example, our strategic shift away from non-core business, in 2023, resulted in an impairment of one or more of our long-lived assets and, in 2024, a decline in our stock price and overall market capitalization resulted in goodwill impairment. See Part II, Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations - Results of Operation of the Years Ended December 31, 2024 and 2023 - Operating Expenses.” Market conditions could adversely change and our earnings could decline resulting in charges to impair intangible assets, such as goodwill. As a result of our various acquisitions, the consolidated balance sheet at December 31, 2024 contains goodwill of approximately $70.9 million and intangible assets, net of approximately $45.5 million. We evaluate on an ongoing basis whether facts and circumstances indicate any impairment to the carrying value of indefinite-lived intangible assets such as goodwill. As circumstances after an acquisition can change, we may not realize the value of these intangible assets. During the year ended December 31, 2024, we recorded impairment charges, related to goodwill, of approximately $7.5 million. Any future impairment charges related to our goodwill or long-lived assets could require us to record additional impairment charges, which would negatively impact our results of operations. Geopolitical events may affect our business and our customer base and have a material adverse impact on our sales and operating results. Our results of operations may be affected by the conditions in the global capital markets and the economy generally, both in the U.S. and elsewhere in the world. The ongoing war between Russia and Ukraine as well as the conflict between Israel and Hamas have caused uncertainty in the credit markets and could cause our customers and potential customers to postpone or reduce spending on technology products or services or put downward pressure on prices, which could have an adverse effect on our business. General Risk Factors Our business and growth may suffer if we are unable to attract and retain members of our senior management team and other key employees. Our success has been largely dependent on the skills, experience and efforts of our senior management team and key employees and the loss of the services of any of our senior management team or other key employees, without a properly executed transition plan, could have an adverse effect on us. The loss of any member of our senior management team or any of our other key employees could damage critical customer relationships, result in the loss of vital knowledge, experience and expertise, lead to an increase in recruitment and training costs, and make it more difficult to successfully operate our business and execute our business strategy. We may not be able to find qualified potential replacements for these individuals and the integration of potential replacements may be disruptive to our business. Furthermore, our business also depends on our ability to attract and retain qualified management, sales and technical personnel. However, competition for these types of employees is intense due to the limited number of qualified professionals with expertise in our industry. However, competition for these types of employees is intense due to the limited number of qualified professionals. Our ability to meet our business development objectives will depend in part on our ability to recruit, train, incentivize, and retain top quality people with advanced skills who understand our industry, technology, and business. Our ability to meet our business development objectives will depend in part on our ability to recruit, train and retain top quality people with advanced skills who understand our technology and business. Our compensation arrangements, including our equity award programs, are essential to retaining our senior management team and other key employees, but may not always be successful in attracting new employees or retaining and motivating our existing key employees for reasons that may include movement in our stock price or our ability to maintain or increase our equity pool. If we are unable to engage, incentivize, and retain the necessary personnel, our business may be materially and adversely affected. If we are unable to engage and retain the necessary personnel, our business may be materially and adversely affected. The impact and effects of public health crises, pandemics and epidemics could have a material adverse effect on our business, prospects, financial condition, and operating results. The actual or perceived effects of an epidemic, pandemic, or similar widespread public health concern could negatively affect our business, financial condition, and result of operations. The extent to which a pandemic, epidemic or outbreak of an infectious disease impacts our operations will depend on future occurrences, which are highly uncertain and cannot be predicted with confidence, including the duration of any outbreak and the actions to contain or treat its impact, among others. We are prepared to take steps to modify our business practices and mitigate the impact of the emergence and spread of new variants and resurgences, or another pandemic or epidemic; however, there can be no assurance that such steps will be successful, or that our business operations, or the operations of our customers or partners will not be materially and adversely affected by the consequences of such pandemic or epidemic, which could materially impact our results of operations, cash flows, and financial condition. 14 Risks Relating to Our Common Stock If a market for our common stock is not maintained, shareholders may be unable to sell their shares. Risks Relating to Our Securities If a market for our common stock is not maintained, shareholders may be unable to sell their shares. Our common stock is traded under the symbol “OPRX” on the Nasdaq Capital Market. We do not currently have a consistent active trading market. There can be no assurance that a consistent active and liquid trading market will develop or, if developed, that it will be sustained. Historically, our securities have been thinly traded. Accordingly, it may be difficult to sell shares of our common stock without significantly depressing the value of the stock. Unless we are successful in developing continued investor interest in our stock, sales of our stock could continue to result in major fluctuations in the price of the stock. The market price of our common stock may be highly volatile and could fluctuate widely in price in response to various factors, many of which are beyond our control. The market price of our common stock is likely to be highly volatile and could fluctuate widely in price in response to various factors, many of which are beyond our control. Our stock price is subject to a number of factors, including: ●Technological innovations or new solutions and services by us or our competitors; ●Government regulation of our solutions and services; ●The establishment of partnerships with other healthcare companies; ●Intellectual property disputes; ●Additions or departures of key personnel; ●Sales of our common stock; ●Our ability to execute our business plan; ●Operating results below or exceeding expectations; ●Our operating and financial performance and prospects; ●Loss or addition of any strategic relationship; ●General financial, domestic, international, economic, industry and other market trends or conditions; and ●Period-to-period fluctuations in our financial results. Our stock price may fluctuate widely as a result of any of the above. In addition, the securities markets have from time-to-time experienced significant price and volume fluctuations that are unrelated to the operating performance of particular companies. In addition, the securities markets have from time to time experienced significant price and volume fluctuations that are unrelated to the operating performance of particular companies. These market fluctuations may also materially and adversely affect the market price of our common stock. We do not expect to pay dividends in the foreseeable future and any return on investment may be limited to the value of our common stock. 12 We do not expect to pay dividends in the foreseeable future and any return on investment may be limited to the value of our common stock. We have never declared or paid any cash dividends on our common stock. We currently intend to retain all available funds and future earnings, if any, to fund our future growth and do not expect to declare or pay any dividend on shares of our common stock in the foreseeable future. As a result, the success of an investment in our common stock may depend entirely upon any future appreciation in its value. There is no guarantee that our common stock will appreciate in value or even maintain the price at which it is purchased. Certain provision of our articles of incorporation, bylaws and Nevada law may discourage takeover attempts and business combinations that shareholders might consider in their best interests. The Company is a Nevada corporation. Anti-takeover provisions in Nevada law and our articles of incorporation and Third Amended and Restated Bylaws (our “bylaws”) could make it more difficult for a third-party to acquire control of us. These provisions could adversely affect the market price of the common stock and could reduce the amount that shareholders might receive if the Company is sold. For example, our articles of incorporation provides that the board of directors may issue, without shareholder approval, preferred stock in one or more series, with such voting power, full or limited, or without voting powers and with such designations, preferences and relative, participating, optional or other special rights, qualifications, limitations or restrictions thereof, as shall be stated and expressed in the resolution or resolutions providing for the issue thereof adopted by the board of directors. Such a series of preferred stock could be designated in connection with the adoption by the board of directors of a shareholder rights plan. Pursuant to the provisions of Nevada Revised Statutes (“NRS”) §78.195(5), Nevada corporations are generally permitted to adopt shareholder rights plans without shareholder approval. In addition, our bylaws require shareholders to provide proper and timely advance notice of their intent to bring director nominations or other business before an annual meeting of shareholders, provide that the Company’s secretary is only required to call shareholder requested special meetings upon the written request of shareholders who together own of record not less than 50.1% of the capital stock of the Company issued and outstanding and entitled to vote at such meeting, shareholders cannot act by written consent and that directors may be removed by shareholders only with the approval of the holders of not less than two-thirds of the voting power of the issued and outstanding stock entitled to vote at an annual or special meeting of the shareholders. 15 Nevada has a business combination law (NRS §78.411 through §78.444, inclusive) which prohibits certain business combinations between certain Nevada corporations and any person deemed to be an “interested stockholders” for two years after the “interested stockholder” first becomes an “interested stockholder,” unless our Board approves the combination in advance or thereafter by both the Board and 60% of the disinterested stockholders. For purposes of Nevada law, an “interested stockholder” is any person who is (i) the beneficial owner, directly or indirectly, of ten percent or more of the voting power of the outstanding voting shares of the corporation, or (ii) an affiliate or associate of the corporation and at any time within the two previous years was the beneficial owner, directly or indirectly, of ten percent or more of the voting power of the then outstanding shares of the corporation. The definition of the term “business combination” is sufficiently broad to cover virtually any kind of transaction that would allow a potential acquirer to use the corporation’s assets to finance the acquisition or otherwise to benefit its own interests rather than the interests of the corporation and its other stockholders. This law generally applies to Nevada corporations with 200 or more stockholders of record. The effect of Nevada’s business combination law is to potentially discourage parties interested in taking control of us from doing so if it cannot obtain the approval of our Board. Pursuant to NRS 78.434, a Nevada corporation may elect in its articles of incorporation not to be governed by these particular laws, but if such election is not made in the corporation’s original articles of incorporation, the amendment (1) must be approved by the affirmative vote of the holders of stock representing a majority of the outstanding voting power of the corporation not beneficially owned by interested stockholders or their affiliates and associates, and (2) is not effective until 18 months after the vote approving the amendment and does not apply to any combination with a person who first became an interested stockholder on or before the effective date of the amendment. We have not made such an election in our original articles of incorporation, and we have not amended our articles of incorporation to so elect. The NRS also contains provisions governing the acquisition of a controlling interest in certain Nevada corporations. Nevada’s “acquisition of controlling interest” statutes (NRS §78.378 through §78.3793, inclusive) govern the acquisition of a controlling interest in certain Nevada corporations. These “control share” laws provide generally that any person that acquires a “controlling interest” in certain Nevada corporations may be denied voting rights, unless a majority of the disinterested stockholders of the corporation elects to restore such voting rights. These laws will apply to us as of a particular date if we were to have 200 or more stockholders of record (at least 100 of whom have addresses in Nevada appearing on our stock ledger at all times during the 90 days immediately preceding that date) and do business in the State of Nevada directly or through an affiliated corporation, unless our articles of incorporation or bylaws in effect on the tenth day after the acquisition of a controlling interest provide otherwise. These laws provide that a person acquires a “controlling interest” whenever a person acquires shares of a subject corporation that, but for the application of these provisions of the NRS, would enable that person to exercise (1) one-fifth or more, but less than one-third, (2) one-third or more, but less than a majority or (3) a majority or more, of all of the voting power of the corporation in the election of directors. Once an acquirer crosses one of these thresholds, shares which it acquired in the transaction taking it over the threshold and within the 90 days immediately preceding the date when the acquiring person acquired or offered to acquire a controlling interest become “control shares” to which the voting restrictions described above apply. These laws may have a chilling effect on certain transactions if our articles of incorporation or bylaws are not amended to provide that these provisions do not apply to us or to an acquisition of a controlling interest, or if our disinterested stockholders do not confer voting rights in the control shares. In addition, Nevada law also provides that directors may resist a change or potential change in control of the corporation if the board of directors determines that the change or potential change is opposed to or not in the best interest of the corporation upon consideration of any relevant facts, circumstances, contingencies or constituencies. Actions of activist stockholders could be disruptive and costly and could adversely affect our results of operations, financial condition, and/or share price. While we strive to maintain constructive communications with our stockholders, we may, from time to time, be subject to demands from activist stockholders. Any activist campaign against the Company that contests, conflicts with, or seeks to change, our board composition, leadership, strategic direction, or business mix could have an adverse effect on us because: (i) responding to actions by activist stockholders could disrupt our operations, be costly or time-consuming, or divert the attention of our board of directors and senior management from their regular duties, which could adversely affect our results of operations or financial condition; (ii) perceived uncertainties as to our future direction, including as a result of possible changes to the composition of our board, may lead to the perception of a change in the direction of the business or lack of continuity, any of which may be exploited by our competitors, cause concern to our customers, employees, and/or business partners and result in the loss of potential business opportunities, or make it more difficult to attract and retain qualified personnel and business partners, and may adversely affect our relationships with vendors, customers, business partners, and other third parties; (iii) these types of actions could cause significant fluctuations in our share price based on temporary or speculative market perceptions or other factors that do not necessarily reflect the underlying fundamentals and prospects of our business; and (iv) if individuals are elected to our board of directors with a specific agenda, it may adversely affect our ability to effectively implement our business strategy and create additional value for our stockholders. 16 Risks Related to Being a Public Company We have identified a material weakness in our internal control over financial reporting. Failure to remediate the material weakness or any other material weaknesses that we identify in the future could result in material misstatements in our future financial statements. Pursuant to Section 404 of the Sarbanes-Oxley Act of 2002, as amended, our management is required to report on the effectiveness of our internal control over financial reporting. The rules governing the standards that must be met for management to assess our internal control over financial reporting are complex and require significant documentation, testing and possible remediation. Annually, we perform activities that include reviewing, documenting and testing our internal control over financial reporting. In addition, if we fail to maintain the adequacy of our internal control over financial reporting, we will not be able to conclude on an ongoing basis that we have effective internal control over financial reporting in accordance with Section 404 of the Sarbanes-Oxley Act of 2002. If we fail to achieve and maintain an effective internal control environment, we could suffer misstatements in our financial statements and fail to meet our reporting obligations, which would likely cause investors to lose confidence in our reported financial information. This could result in significant expenses to remediate any internal control deficiencies and lead to a decline in our stock price. The Company has identified a material weakness in the Company’s internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis. A material weakness (as defined in Rule 12b-2) is a deficiency, or combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of annual or interim financial statements will not be prevented or detected on a timely basis. To address such material weakness in the Company’s internal control over financial reporting, the Company performed additional analyses and other procedures to prepare the audited consolidated financial statements in accordance with generally accepted accounting principles (“GAAP”).
Accordingly, management believes that the consolidated financial statements included in this Annual Report on Form 10-K fairly present, in all material respects, our financial condition, results of operations and cash flows for the periods presented. For further discussion of the material weaknesses, see Item 9A, Controls and Procedures. We cannot provide assurance that we have identified all, or that we will not in the future have additional, material weaknesses in our internal control over financial reporting. As a result, we may be required to implement further remedial measures and to design enhanced processes and controls to address deficiencies. If we do not effectively remediate the material weakness identified by management and maintain adequate internal controls over financial reporting in the future, we may not be able to prepare reliable financial reports and comply with our reporting obligations under the Exchange Act on a timely basis. Any such delays in the preparation of financial reports and the filing of our periodic reports may result in a loss of public confidence in the reliability of our financial statements, which, in turn, could materially adversely affect our business, the market value of our common stock and our access to capital markets. Conflicting views on environmental, social and governance matters may have a negative impact on our business, impose additional costs on us, and expose us to additional risks. Certain stakeholders have pressured companies on initiatives relating to environmental, social and governance (ESG) matters, including environmental stewardship, social responsibility, and corporate governance. Organizations that provide information to investors on corporate governance and related matters have developed ratings processes for evaluating companies on their approach to ESG matters, which in turn, are used by some investors to inform their investment and voting decisions. Any failure, or perceived failure, by us to achieve our goals, further our initiatives, adhere to our public statements, comply with federal, state or international ESG laws and regulations, or meet evolving and varied stakeholder expectations and standards could result in reputational harm, loss of investor confidence, legal and regulatory proceedings against us and materially affect our business, reputation, results of operations, financial condition and stock price. 17 In recent years, “anti-ESG” sentiment has gained momentum across the United States, with several states and the federal government having proposed or enacted anti-ESG policies, legislation or initiatives, or issued related legal opinions. Additionally, the current Executive Branch administration’s initiatives and executive actions surrounding ESG and diversity, equity, and inclusion matters (DEI) may conflict with our stakeholder initiatives on such matters, which may cause us to experience conflicts between governmental regulations and stakeholder expectations which could impose additional costs on our business and negatively impact investor sentiment. The current Executive Branch administration also recently issued an executive order opposing DEI initiatives in the private sector. Such anti-ESG and anti-DEI-related policies, legislation, initiatives, litigation, legal opinions and scrutiny could result in us facing additional compliance obligations, becoming the subject of investigations, enforcement actions or litigation, sustaining reputational harm, and/or requiring certain investors to divest, or discouraging certain investors from investing in the Company. Item 1B. Unresolved Staff Comments None. Item 1C. Cybersecurity Risk Management and Strategy Our information security and risk management program is designed to identify, assess, and manage material risks from cybersecurity threats to our applications, computer networks, third-party hosted services, communications systems, hardware and software, and our critical data, including intellectual property, confidential information that is proprietary, strategic or competitive in nature, personal information, or protected health information (PHI) (collectively, “Information Systems”). Our information security program’s basis is a comprehensive set of policies and procedures covering various information security domains (collectively, “Information Security Policy”), including, but not limited to: ●Access control, ●Endpoint protection, ●Third-party oversight, ●Education, training, and awareness, ●Network security, ●Risk management, ●Incident response, ●Business continuity and disaster recovery, ●Data protection and privacy, and ●Other security domains. Our risk management process is based on a standard methodology, and risks are identified based on: ●Annual risk assessments, ●Information on past incidents, ●Internal audits, ●Security penetration tests, and ●Other security assessments. All risks are documented in a central Risk Register and tracked for mitigation and other treatment decisions. 18 Our information security program is audited annually against a well-known security framework, by an accredited third-party. In 2024, we allowed our HITRUST certification to lapse and we replaced it with System and Organization Controls (SOC) 2 assessment, which has more general applicability and covers the trust services criteria of security, confidentiality, privacy, and accessibility. In 2024 we stored certain PHI on behalf of customers on secure AWS managed servers in the contiguous United States, encrypted at rest and in transit. End users did not have permission to access PHI unless the end user’s account had the proper end user role permissions (e.g., HCPs or hub service providers). These end user roles were assigned according to the customer’s needs to see the information. At all times, such information was segregated so that one customer could not access records containing PHI that were associated with another customer. Our external audits and assessments identify and evaluate material risks from cybersecurity threats against our overall business objectives on a periodic basis and form the basis of internal reports, which can be shared with the management team, the Audit Committee of the Board of Directors, and the Board of Directors to evaluate our overall enterprise risk. Our incident response program consists of an Incident Response Plan document and a cross-functional Incident Response Team, which are defined in our Information Security Policies. All workforce members are trained on incident reporting procedures, and there is a single point of contact for reporting all incidents. Incident response training is conducted annually, followed by a tabletop exercise. Our Incident Response Plan instructs personnel on how to notify our Incident Response Team in case of an incident. The VP of Information Security is the point person for incident responses and coordinates mitigation and remediation of cybersecurity incidents. We log all incidents and response plans for purposes of internal documentation. We report critical incidents to the management team, the Audit Committee, and the Board of Directors. The Company’s VP of Information Security is responsible for implementing the Information Security Policy on a day-to-day basis along with the Security Committee (as defined in the Information Security Policy), which includes the heads of the following departments, at a minimum: Information Security, Technology, Compliance, Product Management, Internal Audit, and Legal. We use third-party service providers to perform a variety of functions throughout our business, including, but not limited to infrastructure support and maintenance, CRM, contract management, data hosting, and miscellaneous finance and accounting projects. We assess our vendors with respect to cybersecurity risk according to the services provided, the sensitivity of the Information Systems at issue, and the provider’s identity. In appropriate cases, we will seek enhanced contractual obligations or guarantees related to cybersecurity on the service provider. Vendor risk assessments are performed before each vendor is engaged, and annual reviews are conducted to ensure vendors continue to meet security requirements. We also maintain technical errors and omissions insurance which includes a cyber incident endorsement of up to $20 million. This endorsement provides coverage for Network Security and Privacy, Privacy Regulation Proceeding, Privacy Event Expense Reimbursement, Extortion Demand Reimbursement, Data Restoration, Network Restoration, Business Interruption and System Failure. This coverage reimburses the most common costs for information security incidents, including attorney’s fees, consumer notification costs, and regulatory fines. To our knowledge, during 2024, there were no material cybersecurity incidents or threats that materially affected or are reasonably likely to materially affect the Company’s business strategy, results of operations, or financial condition. For more information on risks from cybersecurity threats that may materially affect the Company, see Item 1A. “Risk Factors”. Governance The Board of Directors’ oversight function includes cybersecurity risk management. The Board of Directors has three members with skills and experience in information security and cybersecurity through their experience as current and former executives of digital technology companies. The Board of Directors has tasked the Audit Committee with overseeing the Company’s cybersecurity risk management processes and determining which threats are likely to impact the Company’s strategy, business operations, and financial condition. Pursuant to its charter, the Audit Committee of the Board of Directors reviews the Company’s policies regarding information technology security and protection from cyber risks. In particular, the Audit Committee reviews with management the Company’s key IT Systems and evaluates the adequacy of the Company’s information security program, compliance, and controls. Our cybersecurity risk assessment and management processes are implemented and maintained by our VP of Information Security and the Security Committee. For strategic decisions regarding cybersecurity, the VP of Information Security consults with the Chief Technology Officer, the Chief Financial Officer, the Chief Legal Officer, and the VP of Compliance. The VP of Information Security is responsible for hiring appropriate personnel, performing vendor risk assessments, and communicating information security priorities to relevant personnel, so that we can build cybersecurity risk considerations into our business practices. The VP of Information Security also plans related budgets, designs cybersecurity processes, and reviews security assessments and related reports. 19 .
Recently Filed
Click on a ticker to see risk factors
Ticker * | File Date |
---|---|
CLRI | 4 days, 17 hours ago |
VBIX | 4 days, 20 hours ago |
NEON | 4 days, 20 hours ago |
CHCI | 4 days, 20 hours ago |
ENBP | 4 days, 20 hours ago |
UG | 4 days, 20 hours ago |
FSEA | 4 days, 20 hours ago |
PULM | 4 days, 21 hours ago |
CMRX | 4 days, 23 hours ago |
DG | 4 days, 23 hours ago |
GNLN | 5 days, 7 hours ago |
AXDX | 5 days, 7 hours ago |
ROLR | 5 days, 8 hours ago |
ARMP | 5 days, 9 hours ago |
CXM | 5 days, 9 hours ago |
RXT | 5 days, 9 hours ago |
AEVA | 5 days, 9 hours ago |
HD | 5 days, 11 hours ago |
MDB | 5 days, 11 hours ago |
MGRX | 5 days, 12 hours ago |
FVR | 5 days, 12 hours ago |
BFRI | 5 days, 12 hours ago |
MTVA | 5 days, 12 hours ago |
SNTI | 5 days, 12 hours ago |
BIOA | 5 days, 12 hours ago |
AWX | 5 days, 12 hours ago |
AMPX | 5 days, 12 hours ago |
ELDN | 5 days, 12 hours ago |
AEO | 5 days, 12 hours ago |
FFNW | 5 days, 12 hours ago |
SNWV | 5 days, 12 hours ago |
IMRX | 5 days, 12 hours ago |
OPRX | 5 days, 12 hours ago |
RLEA | 5 days, 12 hours ago |
UBFO | 5 days, 12 hours ago |
CBUS | 5 days, 13 hours ago |
ANRO | 5 days, 13 hours ago |
SHIM | 5 days, 13 hours ago |
AUTL | 5 days, 13 hours ago |
PCSA | 5 days, 13 hours ago |
QUBT | 5 days, 13 hours ago |
TTNP | 5 days, 13 hours ago |
WWR | 5 days, 13 hours ago |
CDIO | 5 days, 13 hours ago |
YHNA | 5 days, 13 hours ago |
VTVT | 5 days, 13 hours ago |
DXLG | 5 days, 13 hours ago |
TERN | 5 days, 13 hours ago |
ERAS | 5 days, 13 hours ago |
ASMB | 5 days, 13 hours ago |