Definitive Healthcare (DH) 424B4Prospectus supplement with pricing info

Filed Pursuant to Rule 424(b)(4)
Registration No. 333-261083

PROSPECTUS

11,000,000 Shares

Definitive Healthcare Corp.

Class A Common Stock

We are offering 11,000,000 shares of Class A common stock of Definitive Healthcare Corp. Our Class A common stock is listed on Nasdaq Global Select Market (“Nasdaq”) under the symbol “DH.” On November 17, 2021, the last sale price of our common stock as reported on Nasdaq was $37.64 per share. In this prospectus, unless the context otherwise requires, “Definitive,” the “Company,” “we,” “us” and “our” refer to Definitive Healthcare Corp, Definitive OpCo (as defined herein) and their subsidiaries.

We have two classes of common stock: Class A common stock and Class B common stock. Holders of shares of our Class A common stock are entitled to one vote for each share of Class A common stock held of record on all matters on which stockholders are entitled to vote generally. Holders of shares of our Class B common stock are entitled to one vote for each share of Class B common stock held of record on all matters on which stockholders of Definitive Healthcare Corp. are entitled to vote generally. See “Description of Capital Stock.” The number of outstanding LLC Units (as defined herein) of Definitive OpCo will equal the aggregate number of outstanding shares of Class A common stock and Class B common stock. See “Prospectus Summary—Organizational Structure.”

As a result, certain Unitholders will be able to significantly influence any action requiring the general approval of our stockholders, including the election of our board of directors, the adoption of amendments to our certificate of incorporation and bylaws and the approval of any merger or sale of the Company or substantially all of our assets. See “Management.”

We intend to use the net proceeds from this offering (i) for acquisitions or investments and general corporate purposes, including purchasing 7,000,000 newly issued LLC Units from Definitive OpCo, and (ii) to repurchase an aggregate of 2,233,238 shares of Class A common stock and purchase 1,766,762 LLC Units in Definitive OpCo from existing holders, including our Sponsors, officers, directors and their affiliates, in a “synthetic secondary” transaction, at a price per share of Class A common stock and per LLC Unit in each case, equal to the public offering price of Class A common stock less the underwriting discounts. In the event the underwriters exercise their option to purchase additional shares, we will use the net proceeds to repurchase additional shares of Class A common stock and to purchase additional limited liability interests in Definitive OpCo from existing holders. See “Use of Proceeds” and “Certain Relationships and Related Party Transactions.”

We are an “emerging growth company” as defined under the federal securities laws and, as such, are subject to reduced public company reporting requirements. See “Prospectus Summary—Implications of Being an Emerging Growth Company.”

Investing in our common stock involves risk. See “Risk Factors” on page 28 to read about factors you should consider before buying shares of our Class A common stock.

Neither the Securities and Exchange Commission (the “SEC”) nor any state securities commission has approved or disapproved of these securities or determined if this prospectus is truthful or complete. Any representation to the contrary is a criminal offense.

The underwriters have an option to purchase up to an additional 1,650,000 shares of Class A common stock from us at the public offering price less the underwriting discounts.

The underwriters expect to deliver the shares against payment in New York, New York on November 22, 2021.

* In alphabetical order.

The date of this prospectus is November 17, 2021

TABLE OF CONTENTS

You should rely only on the information contained in this prospectus or in any free-writing prospectus we may specifically authorize to be delivered or made available to you. Neither we nor the underwriters (or any of our or their respective affiliates) have authorized anyone to provide any information other than that contained in this prospectus or in any free writing prospectus prepared by or on behalf of us or to which we have referred you. Neither we nor the underwriters (or any of our or their respective affiliates) take any responsibility for, and can provide no assurance as to the reliability of, any other information that others may give you. We and the underwriters (or any of our or their respective affiliates) are not making an offer to sell these securities in any jurisdiction where the offer or sale is not permitted. You should assume that the information appearing in this prospectus or any free-writing prospectus is accurate only as of its date, regardless of its time of delivery or the time of any sale of shares of our Class A common stock. Our business, financial condition, results of operations and prospects may have changed since that date.

Basis of Presentation

In this prospectus, unless the context otherwise requires, “Definitive,” the “Company,” “we,” “us” and “our” refer to Definitive Healthcare Corp., Definitive OpCo and their subsidiaries. References to “Predecessor Company” refer to Definitive OpCo prior to July 16, 2019 and “Successor Company” refer to Definitive OpCo after July 15, 2019. See “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Impact of Acquisitions.”

i

Trademarks and Trade Names

We own or have the rights to use various trademarks, trade names, service marks and copyrights, including: Definitive Healthcare^® and our logo used in association with our name. Solely for convenience, any trademarks, trade names, service marks or copyrights referred to or used herein are listed without the applicable ^©, ^® or ™ symbol, but such references or uses are not intended to indicate, in any way, that we, or the applicable owner, will not assert, to the fullest extent under applicable law, our or their, as applicable, rights to these trademarks, trade names, service marks and copyrights. Other trademarks, trade names, service marks or copyrights of any other company appearing in this prospectus are, to our knowledge, the property of their respective owners.

Market and Industry Information

Unless otherwise indicated, market data and industry information used throughout this prospectus is based on management’s knowledge of the industry and the good faith estimates of management. We also relied, to the extent available, upon management’s review of independent industry surveys and publications, other publicly available information prepared by a number of sources, including consultant surveys and forecasts. All of the market data and industry information used in this prospectus involves a number of assumptions and limitations, and you are cautioned not to give undue weight to such estimates. Although we believe that these sources are reliable, neither we nor the underwriters can guarantee the accuracy or completeness of this information and neither we nor the underwriters have independently verified this information. Additionally, from time to time, these sources may change their input information or methodologies, which may change the related results. While we believe the estimated market position, market opportunity and market size information included in this prospectus is generally reliable, such information, which is derived in part from management’s estimates and beliefs, is inherently uncertain and imprecise. Projections, assumptions and estimates of our future performance and the future performance of the industry in which we operate are necessarily subject to a high degree of uncertainty and risk due to a variety of factors, including those described in “Risk Factors,” “Cautionary Note Regarding Forward-Looking Statements” and elsewhere in this prospectus. These and other factors could cause results to differ materially from those expressed in our estimates and beliefs and in the estimates prepared by independent parties.

We have relied on the calculations and analysis and our use of third-party analytics tools to present metrics that, as closely as possible, reflect genuine users and legitimate user activity on our platform.

However, data from such sources may include inaccuracies such as information relating to fraudulent accounts or interactions with our sites. Such inaccuracies and fraudulent accounts or interactions may be caused by the use of bots or other mechanisms to generate false impressions, persons with multiple accounts on one service, persons with deactivated or inactive accounts and multiple views by the same user. We have only a limited ability to independently verify the metrics provided by and third-party analytics tools. Investors should not place undue reliance or emphasis on website visits given these limitations and the fact that such measures do not bear any direct relationship to our financial condition or results of operations.

Certain Definitions

As used in this prospectus, unless otherwise noted or the context requires otherwise:

ii

iii

Non-GAAP Financial Measures

We refer in this prospectus to Adjusted EBITDA, Adjusted Gross Profit, Adjusted Gross Margin, Adjusted EBITDA Margin Adjusted Operating Income and Adjusted Net Income (Loss), as non-GAAP financial measures. These non-GAAP financial measures are not prepared in accordance with generally accepted accounting principles in the U.S. (“GAAP”). These are supplemental financial measures of our performance, and should not be considered substitutes for net (loss) income, gross profit or any other measure derived in accordance with GAAP.

As used in this prospectus, EBITDA means earnings before debt-related costs, including interest expense and interest income, provision for taxes, depreciation and amortization and Adjusted EBITDA means EBITDA adjusted to exclude certain items of a significant or unusual nature, including stock-based compensation, acquisition-related expenses and other non-recurring expenses. Adjusted EBITDA Margin is determined by calculating the percentage Adjusted EBITDA is of revenue. Adjusted Gross Profit means revenue less cost of revenue (excluding acquisition-related depreciation and amortization) and Adjusted Gross Margin means Adjusted Gross Profit as a percentage of revenue. Adjusted Gross Profit differs from gross profit, in that gross profit includes acquisition-related depreciation and amortization expense.

Adjusted EBITDA and Adjusted EBITDA Margin are key metrics used by management and our board of directors to assess the profitability of our operations. We believe that Adjusted EBITDA and Adjusted EBITDA Margin provide useful measures to investors to assess our operating performance because these metrics eliminate non-recurring and unusual items and non-cash expenses, which we do not consider indicative of ongoing operational performance. We believe that these metrics are helpful to investors in measuring the profitability of our operations on a consolidated level.

Adjusted Operating Income and Adjusted Net Income (Loss) mean income from operations plus acquisition- related amortization, stock-based compensation, acquisition-related expenses and other non-recurring adjustments.

Adjusted Gross Profit and Adjusted Gross Margin are key metrics used by management and our board of directors to assess our operations. We exclude acquisition-related depreciation and amortization expense as they have no direct correlation to the cost of operating our business on an ongoing basis. A small quantity of stock- based compensation is included in cost of revenue in accordance with GAAP, but is excluded from our Adjusted Gross Margin calculations due to its non-cash nature.

Our use of the terms Adjusted EBITDA, Adjusted EBITDA Margin, Adjusted Gross Profit and Adjusted Gross Margin may vary from the use of similar terms by other companies in our industry and accordingly may not be comparable to similarly titled measures used by other companies and are not measures of performance calculated in accordance with GAAP. These metrics are intended as supplemental measures of our performance that are not required by, or presented in accordance with, GAAP. These metrics should not be considered as alternatives to (loss) income from operations, net (loss) income, gross profit, earnings per share or any other performance measures derived in accordance with GAAP, or as measures of operating cash flows or liquidity. Adjusted EBITDA, Adjusted EBITDA Margin, Adjusted Gross Profit and Adjusted Gross Margin have important limitations as an analytical tool. Some of these limitations are:

iv

In evaluating Adjusted EBITDA, Adjusted EBITDA Margin, Adjusted Gross Profit and Adjusted Gross Margin, you should be aware that in the future we may incur expenses similar to those eliminated in these presentations.

See “Summary Historical and Pro Forma Consolidated Financial and Other Data” for a reconciliation of Adjusted EBITDA to net income (loss), the most directly comparable GAAP measure and a reconciliation of Adjusted Gross Profit and Adjusted Gross Margin to gross profit, the most directly comparable GAAP measure.

v

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

RISK FACTORS

An investment in our Class A common stock involves a high degree of risk. You should carefully consider each of the following risk factors, as well as other information contained in this prospectus, including “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our audited consolidated financial statements and related notes, before investing in our Class A common stock. The occurrence of any of the following risks could have a material adverse effect on our business, financial condition and results of operations, in which case the trading price of our Class A common stock could decline and you could lose all or part of your investment.

Risks Related to Our Business and Industry

We generate substantially all of our revenue and cash flows from sales of subscriptions to our platform and any decline in demand for our platform and the data we offer could have a material adverse effect on our business, financial condition and results of operations.

For the year ended December 31, 2020 and the nine months ended September 30, 2021, we derived 99% of our revenue and cash flows from subscription services, and we expect to continue to generate substantially all of our revenue from the sale of subscriptions to our platform. As a result, the continued use of healthcare provider data, sales intelligence and healthcare market analytics by the healthcare ecosystem is critical to our future growth and success. If the healthcare data market fails to grow, or grows more slowly than we currently anticipate, or if there is a decrease in the use of healthcare commercial intelligence, demand for our platform would be negatively affected.

Changes in preferences for healthcare commercial intelligence may have a disproportionately greater impact on us than if we offered diversified solutions. Demand for healthcare data in general, and our platform in particular, is affected by a number of factors, many of which are beyond our control. Some of these factors include:

The market in which we operate is subject to rapidly changing user demand and preference trends. Failure to successfully predict and address these trends, meet user demands or achieve more widespread market acceptance of our platform could have a material adverse effect on our business, financial condition and results of operations.

28

The market in which we operate is highly competitive, such that if we do not compete effectively, it could have a material adverse effect on our business, financial condition and results of operations.

The market in which we operate is becoming increasingly competitive as large, well-funded organizations in the healthcare ecosystem, including Life Sciences companies, healthcare providers and HCIT companies, among others, develop internal technologies to create healthcare commercial intelligence. Demand for our platform is also price sensitive. Many factors, including our marketing, customer acquisition and technology costs, and the pricing and marketing strategies of our competitors, can significantly affect our pricing strategies. Such competition may result in pricing pressures, reduced profit margins or lost market share, or a failure to grow or maintain our market share, any of which could have a material adverse effect on our business, financial condition and results of operations. Our competitors may expand their operations to internally analyze data relating to the healthcare ecosystem. Many of our competitors have significant competitive advantages over us, including longer operating histories, internal datasets and greater financial, sales and marketing, research and development and other resources. In addition, some of our competitors may make acquisitions or enter into strategic relationships to offer a more comprehensive or affordable range of solutions and platform than we do. We also expect that there will be significant competition as we continue to expand our intelligence modules and enter new verticals. Our inability to compete successfully against our competitors and maintain our gross margin could have a material adverse effect on our business, financial condition and results of operations.

If we fail to respond to advances in healthcare commercial intelligence, competitors could surpass the depth, breadth or accuracy of our platform.

Current or future competitors may seek to develop new solutions for more efficiently transforming, cleansing and linking data and creating healthcare commercial intelligence. Such actions may enable a competitor to create a platform that is comparable or superior to ours, that takes substantial market share from us, or that creates or maintains healthcare commercial intelligence at a lower cost than we currently provide. We expect continuous improvements in computer hardware, network operating systems, programming tools, programming languages, operating systems, data matching, data filtering, data predicting and other database technologies and the use of the Internet. These improvements, as well as changes in customer preferences or regulatory requirements, may require changes in the technology used to process and analyze data. Our future success will depend, in part, upon our ability to internally develop and implement new and competitive intelligence modules and features, use third-party technologies to source data effectively, and respond to advances in healthcare commercial intelligence. If we fail to respond to changes in healthcare commercial intelligence, our competitors may be able to develop solutions that will take market share from us, and the demand for our platform, the delivery of our solutions or our market reputation could be adversely impacted, which could have a material adverse effect on our business, financial condition and results of operations.

If we are not able to obtain and maintain accurate, comprehensive or reliable data, we could experience reduced demand for our platform.

The healthcare landscape is complex, opaque and evolving and our success depends in large part on our customers’ confidence in the depth, breadth and accuracy of our data and analytics. The task of providing a comprehensive view of the healthcare ecosystem, including information on healthcare providers, physicians and how they are affiliated and interconnected, how they refer patients to each other, the quality of care they provide and procedure and diagnosis volumes, is challenging and expensive. Many of our contracts with our customers include a contractual right pursuant to which our customers may unilaterally terminate their subscription with us and we could be obligated to reimburse certain payments if customers experience any issues with the availability of the platform. Unavailability of our platform for scheduled maintenance does not trigger the termination right. If the data we obtain from third parties and our own first party research cannot be obtained on a timely basis, or at all, or maintained, customers may be dissatisfied with our platform reducing the likelihood of customers to renew or upgrade their subscriptions. In addition, if we are no longer able to maintain accuracy in our data and analytics, we may face legal claims by our customers, which could have a material adverse effect on our business, financial condition and results of operations.

29

We have experienced rapid growth in recent periods, and our recent growth rates may not be indicative of our future growth.

We have experienced rapid organic and acquisition-driven growth in recent periods. For the year ended December 31, 2020, our revenue was $118.3 million, an increase of 38% as compared to our revenue of $85.5 million for the year ended December 31, 2019. For the nine months ended September 30, 2021, our revenue was $119.8 million, an increase of 41% as compared to our revenue of $84.7 million for the nine months ended September 30, 2020. We cannot guarantee that we will sustain our recent revenue growth rate in future periods. Further, as we operate in a new and rapidly changing market, widespread acceptance and use of our platform is critical to our future growth and success. Our revenue growth may slow or our revenue may decline for a number of other reasons, including reduced demand for our platform, increased competition, a decrease in the growth or reduction in size of our overall market, the impacts to our business from the COVID-19 pandemic, or if we cannot capitalize on growth opportunities.

We expect our operating expenses to increase in future periods, and if our revenue growth does not increase to offset these anticipated increases in our operating expenses, it will have a material adverse effect on our business, financial condition and results of operations and we may not be able to achieve or maintain profitability. Further, our rapid growth may make it difficult to evaluate our future prospects. Our ability to forecast our future results of operations is subject to a number of uncertainties, including our ability to effectively plan for and model future growth. If we fail to achieve the necessary level of efficiency in our organization as it grows, or if we are not able to accurately forecast future growth, it could have a material adverse effect on our business, financial condition and results of operations.

We may not achieve or sustain profitability in the future compared to historical levels as we increase investments in our business.

We have incurred operating losses in the past and may continue to incur net losses in the future. For the year ended December 31, 2020, we had a net loss of $51.2 million, compared to a net loss of $36.4 million for the year ended December 31, 2019. For the nine months ended September 30, 2021, we had a net loss of $46.5 million, compared to a net loss of $35.3 million for the nine months ended September 30, 2020. We expect our operating expenses to increase in the future as we invest capital to make acquisitions, develop new features, add to our existing intelligence modules and invest in new products and data sources. Further, our administrative costs will significantly increase relative to prior periods due to the incremental costs associated with operating as a public company, including corporate insurance costs, additional accounting and legal expenses, and additional resources associated with controls, reporting, and disclosure. We may not be able to achieve or sustain profitability in subsequent periods. Our efforts to grow our business may be more costly than we expect and we may not be able to increase our revenue enough to offset higher operating expenses. We may incur significant losses in the future for a number of reasons, including as a result of unforeseen expenses, difficulties, complications and delays, the other risks described in this prospectus and other unknown events. The amount of any future net losses will depend, in part, on the growth of our future expenses and our ability to generate revenue. If we incur losses in the future, any such future losses will have an adverse effect on our stockholders’ equity and working capital. If we are unable to achieve or sustain profitability, the market price of our Class A common stock may significantly decrease and our ability to raise capital, expand our business or continue our operations may be impaired. A decline in the price of our Class A common stock may cause you to lose all or part of your investment.

We could lose our access to our data providers, which could negatively impact our platform and could have a material adverse effect on our business, financial condition and results of operations.

Our platform depends extensively upon continued access to and receipt of data from external sources, including real-time claims data, as well as data received from customers, strategic partners and various government and public records repositories. In some cases, we compete with our data providers. Our data providers could stop providing data, provide outdated data or inaccurate data or increase the costs for their data

30

for a variety of reasons, including a perception that our systems are insecure as a result of a data security breach, budgetary constraints, a desire to generate additional revenue or for regulatory or competitive reasons. We could also become subject to increased legislative, regulatory or judicial restrictions or mandates on the collection, disclosure or use of such data, in particular if such data is not collected by our data providers in a way that allows us to legally use the data. If we were to lose access to this external data, either temporarily or permanently, or if our access or use were restricted or were to become less economical or desirable, our ability to provide the full breadth of our healthcare commercial intelligence on our platform could be negatively impacted, which could have a material adverse effect on our business, financial condition and results of operations. We cannot provide assurance that we will be successful in maintaining our relationships with these external data providers or that we will be able to continue to obtain data from them on acceptable terms or at all. Further, we cannot provide assurance that we will be able to obtain adequate data on commercially acceptable terms from alternative sources if our current sources become unavailable.

Our ability to introduce new features, intelligence modules, updates, integrations, capabilities and enhancements to our existing platform is dependent on innovation and our research and product development resources. If our investments in innovation do not translate into material enhancements to our platform or if those investments are more costly than we expect, we may not be able to effectively compete, which could have a material adverse effect on our business, financial condition and results of operations.

Our ability to compete effectively and to attract new customers and increase revenue from existing customers depends in large part on our ability to continually enhance and improve our platform and the features, intelligence modules and capabilities we offer. It also requires the introduction of compelling new features, intelligence modules and capabilities that reflect the changing nature of our market to maintain and improve the quality and value of our platform, which depends on our ability to continue investing in innovation and our successful execution and our efforts to improve and enhance our platform. The success of any enhancement to our platform depends on several factors, including availability, frequent updates, analytics reflecting current healthcare commercial intelligence, competitive pricing, adequate quality testing, integration with existing technologies and overall market acceptance. Any new features, integrations or capabilities that we develop may not be introduced in a timely or cost-effective manner, may contain errors, failures, vulnerabilities or bugs or may not achieve the market acceptance necessary to generate significant revenue. Maintaining adequate research and product development resources, such as the appropriate personnel and development technology, to meet the demands of the market is essential. Moreover, innovation can be technically challenging and expensive. If we are unable to successfully develop new features, integrations and capabilities to enhance our platform to meet the requirements of current and prospective customers or otherwise gain widespread market acceptance, it could have a material adverse effect on our business, financial condition and results of operations.

Further, our competitors may expend more resources on their respective innovation programs or may be acquired by larger companies that would allocate greater resources to our competitors’ innovation programs or our competitors may be more efficient and/or successful in their innovation activities. Our failure to continue to innovate or to effectively compete with the innovation programs of larger, better-funded companies would give an advantage to such competitors and could have a material adverse effect on our business, financial condition and results of operations.

If we are unable to attract new customers and expand subscriptions of current customers, our revenue growth and financial performance will be negatively impacted.

To increase our revenue and achieve profitability, we must retain and grow the subscriptions of existing customers and attract new customers. We price our services on a tiered subscription-based model that allows our customers to choose a core plan based on their needs and the customer subscribes to the platform on a per user per month basis. Customers can then add users and intelligence modules for additional monthly rates depending on their individual needs. We seek to expand existing customer subscriptions by adding new customers and intelligence modules, including through expanding the adoption of our platform into other departments within

31

existing customers. We do not know whether we will continue to achieve similar customer acquisition, retention and subscription growth rates in future periods as we have in the past. Numerous factors may impede our ability to add new customers and retain and expand existing customer subscriptions, including failure to hire effective sales personnel, adequately train new sales personnel, provide a high-quality customer experience and ensure the effectiveness of our go-to-market programs that drive customer referrals. Additionally, increasing our sales to enterprise organizations (both existing and prospective customers) requires increasingly sophisticated and costly sales and account management efforts targeted at senior management and other personnel. If our efforts to sell to enterprise organizations are not successful or do not generate additional revenue, our growth will suffer, which could have a material adverse effect on our business, financial condition and results of operations.

Moreover, our business is subscription-based, and therefore our customers are not obligated to and may not renew their subscriptions after their existing subscriptions expire or may renew at a lower price, including if such customers choose to reduce the intelligence modules to which they have access or reduce their number of users. Most of our subscriptions are sold for multi-year terms, though some organizations purchase a one-year subscription plan. While our subscription agreements typically provide for automatic renewal, our customers may opt-out of automatic renewal and customers have no obligation to renew a subscription after the expiration of the term. Our customers may or may not renew their subscriptions as a result of a number of factors, including their satisfaction or dissatisfaction with our platform, decreases in the number of users at the organization, our pricing or pricing structure, the pricing or capabilities of the products and services offered by our competitors, the effects of economic conditions (including as a result of general economic downturns as a result of the COVID-19 pandemic) or reductions in our paying customers’ spending levels. Our contracts typically require advance notice to terminate a contract in the absence of a default by the Company. In addition, our customers may renew for shorter contract lengths if they were previously on multi-year contracts or switch to lower cost offerings of our platform. Our attrition rates may increase or fluctuate as a result of a number of factors, including customer dissatisfaction with our services, customers’ spending levels, mix of customer base, decreases in the number of users at our customers, competition, pricing increases or changing or deteriorating general economic conditions. If customers do not renew their subscriptions or renew on less favorable terms, we fail to add more users, or if we fail to expand subscriptions of existing customers, our revenue may decline or grow less quickly than anticipated and we may not be able to achieve our anticipated LTV from our customer relationships, which could have a material adverse effect on our business, financial condition and results of operations.

We may fail to offer the optimal pricing and packaging of our solutions, which could negatively impact our growth strategy and ability to effectively compete in the market.

We may make changes to our pricing model from time to time. Demand for our solutions is sensitive to price, and current or prospective customers may choose not to subscribe or renew their subscriptions due to costs. Further, certain of our competitors may in the future offer lower-priced or free services that compete with our platform or may bundle functionality compatible with our platform and/or offer a broader range of solutions. Similarly, certain competitors may use marketing strategies that enable them to acquire customers more rapidly and/or at a lower cost than us. In addition, if our mix of features and capabilities on our platform changes or if we develop additional intelligence modules for specific use cases or additional premium versions, then we may need or choose to revise our pricing.

As more of our sales efforts target larger Enterprise Customers, our sales cycle may become longer and more expensive, and we may encounter pricing pressure and implementation and configuration challenges that may require us to delay revenue recognition for some complex transactions, all of which could have a material adverse effect on our business, financial condition and results of operations.

As we target more of our sales efforts at larger Enterprise Customers, we may face longer sales cycles, greater competition, more complex customer due diligence, less favorable contractual terms and less predictability in completing some of our sales. Consequently, a target customer’s decision to use our solutions may be an enterprise-wide decision and, if so, these types of sales would require us to provide greater levels of

32

education regarding the use and benefits of our platform, as well as education regarding privacy and data protection laws and regulations to prospective customers. In addition, larger Enterprise Customers and governmental entities may demand more configuration and integration services and features. As a result of these factors, these sales opportunities may require us to devote greater sales support and professional services resources to smaller Enterprise Customers, which could increase the costs and time required to complete sales and diverting resources to a smaller number of larger transactions, while potentially requiring us to delay revenue recognition on some of these transactions until the technical or implementation requirements have been met.

If we fail to offer high-quality customer experience, our business and reputation will suffer.

Numerous factors may impact a customer’s experience which may in turn impact the likelihood of such customer renewing its subscription. Those factors include the usability of the platform, the depth, breadth and accuracy of the data, the adequacy of our data synthesis, and the quality of our onboarding, training, account management and customer technical and support functions. Our number of customers has grown rapidly, and the continued growth that we anticipate will put additional pressure on our customer experience programs. It may be difficult for us to identify, recruit, train and manage enough employees with sufficient skill and talent in each area of the customer experience to adequately scale those functions to match the growth of our customer base. In addition, larger Enterprise Customers and customers with larger subscriptions are more demanding of our customer experience programs. If and as we add more large Enterprise Customers and increase the annual contract value of existing subscriptions, we may need to devote even more resources to such programs, and we may find it difficult to effectively scale those programs. If we do not adequately scale our customer experience operations to meet the demands of our growing customer base, an increase in large Enterprise Customers and large customer subscriptions, or if we otherwise fail to provide an overall high-quality customer experience, fewer customers could renew or upgrade their subscriptions, and our reputation could suffer, negatively impacting our ability to acquire new customers, which could have a material adverse effect on our business, financial condition and results of operations.

In addition, from time to time customers rely upon our support teams to resolve technical issues relating to our platform. We may be unable to respond quickly enough to accommodate short-term increases in customer demand for support services. Increased customer demand for these services, without corresponding revenue, could increase costs and adversely affect our reputation and results of operations.

Our customers or unauthorized parties could use our platform in a manner that is contrary to our values or applicable law, which could harm our relationships with customers or employees or expose us to litigation or harm our reputation.

Because our platform includes health information about millions of individuals and businesses, some of which we source ourselves and some of which is provided by third-party data providers and de-identified, our platform and data could be misused by customers or by parties who have obtained access to our platform without authorization to access individuals’ health information for purposes that we would not permit, including to perpetrate scams. Our customers could use our platform for purposes beyond the scope of their contractual terms or applicable laws or regulations. In addition, third parties could gain access to our platform through our customers or through malfeasance or cyber-attacks and use our platform for purposes other than its intended purpose or to create products that compete with our platform. Our customers’ or third parties’ misuse of our platform, inconsistent with its permitted use, could result in reputational damage, adversely affect our ability to attract new customers, expose us to potential litigation and cause existing customers to reduce or discontinue the use of our platform, any of which could have a material adverse effect on our business, financial condition and results of operations.

Our brand may be negatively affected by the actions of persons using our platform that are hostile or inappropriate, by the actions of individuals acting under false or inauthentic identities, by the use of our platform to disseminate information that is misleading (or intended to manipulate opinions), by perceived or actual efforts

33

by governments to obtain access to user information for security-related purposes or to censor certain content on our platform, or by the use of our platform for illicit, objectionable or illegal ends. Further, we may fail to respond expeditiously or appropriately to the inappropriate use of our platform outside of the terms of a customers’ subscription, which could erode confidence in our business.

The ongoing COVID-19 pandemic, including the resulting global economic uncertainty and measures taken in response to the pandemic, have had a material adverse effect on the rate at which we were able to grow our business.

The pandemic caused by the novel strain of coronavirus (“COVID-19”) has disrupted the economy and put unprecedented strains on governments, healthcare systems, businesses and individuals around the world. The COVID-19 pandemic has caused significant disruption of global financial markets and economic uncertainty. Though our revenue was not impacted due to the recurring nature of our SaaS subscription-based business model, adverse market conditions resulting from the spread of COVID-19 had an adverse effect on our growth rate.

As hospitals and other businesses in the healthcare ecosystem decreased spending during the first two quarters of 2020, demand for our platform among some of our Enterprise Customers decreased. As a result, we experienced slowed growth and a decline in new customer demand for our platform as well as lower demand from our existing customers for additional intelligence modules within our platform.

Additionally, in response to the COVID-19 pandemic, we temporarily closed all of our offices (including our headquarters), enabled our employees to work remotely and shifted company events to virtual-only experiences. If the COVID-19 pandemic worsens, especially in the northeast region of the U.S., where we have our offices and our datacenter, our business activities originating from affected areas could be adversely affected. We may take further actions that alter our business operations as may be required by local, state or federal authorities or that we determine are in the best interests of our employees.

The extent and continued impact of the COVID-19 pandemic on our business will depend on certain developments, including: the duration and spread of the outbreak; government responses to the COVID-19 pandemic including vaccine availability and deployment; the impact on the health and welfare of our employees and their families; the impact on our customers and our sales cycles; the impact on customer, industry or employee events; delays in hiring and onboarding new employees; and the effect on our partners, vendors and supply chains, all of which are uncertain and cannot be predicted. Because of our SaaS subscription-based business model, the effect of the COVID-19 pandemic may not be fully reflected in our results of operations and overall financial condition until future periods, if at all.

To the extent the COVID-19 pandemic adversely affects our business and financial results, it may also have the effect of heightening many of the other risks described in this “Risk Factors” section, including but not limited to those relating to cyber-attacks and security vulnerabilities, interruptions or delays due to third-parties, or our ability to raise additional capital or generate sufficient cash flows necessary to fulfill our obligations under our existing indebtedness or to expand our operations.

As we acquire and invest in companies or technologies, we may not realize expected business or financial benefits and the acquisitions or investments could prove difficult to integrate, disrupt our business, dilute stockholder value and adversely affect our business, financial condition and results of operations.

As part of our business strategy, we make investments in, or acquisitions of, complementary businesses, solutions, databases and technologies, and we expect that we will continue to make such investments and acquisitions in the future to further grow our business and our platform. For example, in October 2020, we completed our acquisition of Monocl, a provider of subscription-based medical and scientific expert data and insights. Integrating Monocl’s technology into our platform may dilute the quality of our platform as we work through the integration process which can take time and significant resources. As a Swedish company, Monocl

34

operated under different regulatory regimes than we have as a U.S.-based company, which could result in dissynergies in our platforms. Further, we may have difficulty effectively integrating Monocl’s personnel and business into our Company and achieving the goals of the Monocl acquisition. We expect to incur additional costs to integrate prior acquisitions, such as IT integration expenses and costs related to the renegotiation of redundant data provider agreements.

Our strategy to make selective acquisitions to complement our platform depends on our ability to identify, and the availability of, suitable acquisition candidates. We may not be able to find suitable acquisition candidates in the future and we may not be able to complete acquisitions on favorable terms, if at all. Acquired assets, data or businesses may not be successfully integrated into our operations, costs in connection with acquisitions and integrations may be higher than expected and we may also incur unanticipated acquisition-related costs. These costs could adversely affect our financial condition, results of operations or prospects. Any acquisition we complete could be viewed negatively by customers, users or investors, and could have adverse effects on our existing business relationships.

Acquisitions and other transactions, arrangements and investments involve numerous risks and could create unforeseen operating difficulties and expenditures, including:

35

Any of these risks could harm our business. In addition, to facilitate these acquisitions or investments, we may seek additional equity or debt financing, which may not be available on terms favorable to us or at all, may affect our ability to complete subsequent acquisitions or investments and may affect the risks of owning our Class A common stock. For example, if we finance acquisitions by issuing equity or convertible debt securities or loans, our existing stockholders may be diluted, or we could face constraints related to the terms of, and repayment obligation related to, the incurrence of indebtedness that could affect the market price of our Class A common stock.

If we fail to maintain adequate operational and financial resources, particularly if we continue to grow rapidly, we may be unable to execute our business plan or maintain high levels of service and customer satisfaction.

We have experienced, and expect to continue to experience, rapid growth, which has placed, and may continue to place, significant demands on our management and our operational and financial resources. We have three offices across the northeastern U.S., and as a result of the Monocl acquisition, one office in Sweden. We have experienced significant growth in headcount, with over 380 employees in 2019 and over 480 employees in 2020. We have also experienced significant growth in the number of customers using our platform and in the amount of data in our databases. In addition, our organizational structure is becoming more complex as we scale our reporting systems and procedures and our operational, financial and management controls, and as we expand internationally. As we continue to grow, we face challenges of integrating, developing, training and motivating a rapidly growing employee base in our various offices and maintaining our company culture across multiple offices. Certain members of our management have not previously worked together for an extended period of time, and most do not have prior experience managing a public company, which may affect how they manage our growth. If we fail to manage our anticipated growth and change in a manner that preserves the key aspects of our corporate culture, the quality of our solutions may suffer, which could negatively affect our brand and reputation and harm our ability to retain and attract users, employees and customers.

To manage growth in our operations and personnel, we will need to continue to grow and improve our operational, financial and management controls and our reporting systems and procedures. We will require significant capital expenditures and the allocation of valuable management resources to grow and change in these areas. Our expansion has placed, and our expected future growth will continue to place, a significant strain on our management, customer experience, innovation, sales and marketing, administrative, financial and other resources.

36

We anticipate that significant additional investments will be required to scale our operations and increase productivity, to address the needs of our customers, to further develop and enhance our platform, to expand into new geographic areas and to scale with our overall growth. If additional investments are required due to significant growth, this will increase our cost base, which will make it more difficult for us to offset any future revenue shortfalls by reducing expenses in the short term.

In addition, as we expand our business, it is important that we continue to maintain a high level of customer service and satisfaction. As our customer base continues to grow, we will need to expand our account management, customer service and other personnel, which will require more complex management and systems. Additionally, since a significant portion of our new business is derived from customer referrals, customers may be less likely to refer new customers if they are not satisfied with our platform. If we are not able to continue to provide high levels of customer service, it could have a material adverse effect on our business, financial condition and results of operations.

We depend on our executive officers and other key employees, and the loss of one or more of these employees or an inability to attract and retain other highly skilled employees could have a material adverse effect on our business, financial condition and results of operations.

Our success depends largely upon the continued services of our executive officers and other key employees. We rely on our leadership team in the areas of sales and marketing, product development, strategy and corporate development and network development. From time to time, there may be changes in our executive management team resulting from the hiring or departure of executives, which could disrupt our business. The loss of one or more of our executive officers or key employees could have a material adverse effect on our business, financial condition and results of operations. Changes in our executive management team may also cause disruptions to our business and have a material adverse effect on our business, financial condition and results of operations.

We are led by our CEO and founder, Jason Krantz, who plays an important role in driving our culture, determining our strategy and executing against that strategy across our business. If Mr. Krantz’s services became unavailable to us for any reason, it may be difficult or impossible for us to find an adequate replacement, which could cause us to be less successful in maintaining our culture and developing and effectively executing on our strategies.

In addition, to execute our growth plan, we must attract and retain highly qualified employees. Competition for these employees is intense, especially for data scientists experienced in designing and developing software and SaaS applications and experienced sales professionals. We have from time to time experienced, and we expect to continue to experience, difficulty in hiring and retaining employees with appropriate qualifications. In addition, certain domestic immigration laws restrict or limit our ability to recruit internationally. Any changes to U.S. immigration policies that restrain the flow of technical and professional talent may inhibit our ability to recruit and retain highly qualified employees. Many of the companies with which we compete for experienced employees have greater resources than us and may be able to offer more attractive terms of employment. In addition, we invest significant time and expense in training our employees, which increases their value to competitors who may seek to recruit them.

If we hire employees from competitors or other companies, their former employers may attempt to assert that these employees have breached their legal obligations, resulting in a diversion of our time and resources. In addition, job candidates and existing employees often consider the value of the equity awards they receive in connection with their employment. If the perceived value of our equity awards declines, it may harm our ability to recruit and retain highly skilled employees. If we fail to attract new employees or fail to retain and motivate our current employees, our business and future growth prospects could be materially and adversely affected. Meanwhile, additions of executive-level management and large numbers of employees could significantly and adversely impact our culture. If we do not maintain and continue to develop our corporate culture as we grow and evolve, it could harm our ability to foster the innovation, creativity and teamwork we believe that we need to support our growth.

37

In addition, many of our essential technologies and systems are custom-made for our business by our key employees. The loss of key employees, including members of our management team, as well as certain of our sales, data scientists or other technology employees could disrupt our operations and have an adverse effect on our ability to grow our business.

If we fail to protect and maintain our brand, our ability to attract and retain customers will be impaired, our reputation may be harmed.

We believe that developing, protecting and maintaining awareness of our brand is critical to achieving widespread acceptance of our platform and is an important element in attracting new organizations to our platform. Further, we believe that the importance of brand recognition will increase as competition in our market increases. Successful promotion of our brand will depend largely on the effectiveness of our marketing efforts and on our ability to ensure that our platform remains high-quality, reliable and useful at competitive prices.

Brand promotion activities may not yield increased revenue, and, even if they do, any increased revenue may not offset the expenses we incur in building our brand. If we fail to successfully promote and maintain our brand, or incur substantial expenses in an unsuccessful attempt to promote and maintain our brand, our reputation may be harmed and we may fail to attract new customers to the extent necessary to realize a sufficient return on our brand-building efforts, and our business, results of operations and financial condition could suffer.

A substantial portion of our revenue and cash flows from sales of our subscriptions to our platform to customers in the healthcare ecosystem, and factors that adversely affect it, including mergers within the healthcare ecosystem or regulatory changes, could also adversely affect us.

Demand for our solutions could be affected by factors that affect the healthcare ecosystem, including:

38

Accordingly, our operating results and our ability to efficiently provide our solutions to healthcare companies and to grow or maintain our customer base could be adversely affected as a result of these factors and others that affect the healthcare ecosystem generally.

Changes in the sizes or types of organizations that subscribe to our platform could affect our business and our financial results may fluctuate due to increasing variability in our sales cycles.

Our strategy is to sell subscriptions of our platform to organizations of all sizes, ranging from life science companies, healthcare information technology companies, healthcare providers and other companies that sell into the healthcare ecosystem. Selling to small-to-medium sized businesses may involve greater credit risk and uncertainty, as well as lower retention rates and limited interaction with our sales and other personnel. Conversely, sales to Enterprise Customers may entail longer sales cycles, more significant selling efforts and greater uncertainty. If we are successful in expanding our customer base to include more Enterprise Customers, our sales cycles may lengthen and become less predictable, which, in turn, may adversely affect our financial results. Factors that may influence the length and variability of our sales cycle include:

If there are changes in the mix of organizations that purchase our platform, our gross margins and operating results could be adversely affected and fluctuations increasing the variability in our sales cycles could negatively affect our financial results.

If we have overestimated the size of our total addressable market, our future growth rate may be limited.

We have estimated the size of our total addressable market based on internally generated data and assumptions, and such information is inherently imprecise. In addition, our projections, assumptions, and estimates of opportunities within our market are subject to a high degree of uncertainty and risk due to a variety of factors, including, but not limited to, those described in this prospectus. If these internally generated data prove to be inaccurate or we make errors in our assumptions based on that data, our actual market may be more limited than our estimates. In addition, these inaccuracies or errors may cause us to misallocate capital and other critical business resources, which could have a material adverse effect on our business, financial condition and results of operations.

39

Even if our total addressable market meets our size estimates and experiences growth, we may not continue to grow our share of the market. Our growth is subject to many factors, including our success in implementing our business strategy, which is subject to many risks and uncertainties. Accordingly, our estimates of our total addressable market should not be taken as indicative of our ability to grow our business.

Our business could be negatively affected by changes in search engine algorithms and dynamics or other traffic-generating arrangements.

We rely on Internet search engines, including through the purchase of sales and marketing-related keywords and other web pages, to generate a portion of the traffic to our website. Search engines frequently update and change the logic that determines the placement and display of results of a user’s search, such that the purchased or algorithmic placement of links to our website can be negatively affected. Pricing and operating dynamics for these traffic sources can change rapidly, both technically and competitively. Moreover, a search engine could, for competitive or other purposes, alter its search algorithms or results, which could cause a website to place lower in search query results or inhibit participation in the search query results. If a major search engine changes its algorithms or results in a manner that negatively affects the search engine ranking, paid or unpaid, of our website, or if competitive dynamics impact the costs or effectiveness of search engine optimization, search engine marketing or other traffic-generating arrangements in a negative manner, our business and financial performance would be adversely affected.

Operations outside the U.S. expose us to risks inherent in international operations.

Our recent acquisition of Swedish subscription-based provider of scientific data, Monocl, in October 2020 creates exposure to risks inherent in international operations. Any new markets or countries into which we attempt to sell subscriptions to our platform may not be as receptive to our solutions as we anticipate. It is costly to establish, develop and maintain international operations and develop and promote our platform in international markets. A significant increase in international customers or an expansion of our operations into other countries would create additional risks and challenges which could have a material adverse effect on our business, financial condition and results of operations.

We have a limited operating history, which makes it difficult to forecast our revenue and evaluate our business and future prospects.

Our business was founded in 2011, though much of our growth has occurred in recent periods. As a result of our limited operating history, our ability to forecast our future results of operations and plan for and model future growth is limited and subject to a number of uncertainties. We have encountered and expect to continue to encounter risks and uncertainties frequently experienced by growing companies in rapidly evolving industries, such as the risks and uncertainties described herein. Accordingly, we may be unable to prepare accurate internal financial forecasts or replace anticipated revenue that we do not receive as a result of delays arising from these factors, and our results of operations in future reporting periods may be below the expectations of investors. If we do not address these risks successfully, our results of operations could differ materially from our estimates and forecasts or the expectations of investors, causing our business to suffer and our Class A common stock price to decline.

Our failure to raise additional capital or generate cash flows necessary to expand our operations and invest in new technologies in the future could reduce our ability to compete successfully and have a material adverse effect on our business, financial condition and results of operations.

We may require additional financing, and we may not be able to obtain debt or equity financing on favorable terms, if at all. The terms of any additional debt financing may be similar or more restrictive than our current debt facilities.

40

If we need additional capital and cannot raise it on acceptable terms, or at all, we may not be able to, among other things:

Catastrophic events could disrupt our business and adversely affect our operating results.

Our corporate headquarters are located in Framingham, Massachusetts. Additionally, we rely on our network and third-party infrastructure and enterprise applications, internal technology systems and our website, for our product development, analytics innovation, marketing, operational support, hosted services and sales activities. In the event of a major weather event or threatened public health emergency (e.g., the COVID-19 pandemic), or other catastrophic event such as fire, power loss, telecommunications failure, cyber-attack, war or terrorist attack, we may be unable to continue our operations at full capacity or at all and may experience system interruptions, reputational harm, delays in our solution development, lengthy interruptions in our services, breaches of data security, loss of key employees and loss of critical data, all of which could have a material adverse effect on our business, financial condition and results of operations.

Our solutions utilize open-source software, and any failure to comply with the terms of one or more of these open-source licenses could adversely affect our business.

Our solutions include software subject to open-source licenses. The terms of various open-source licenses have not been interpreted by U.S. courts, and there is a risk that such licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our ability to market our solutions. Certain open-source software licenses require a user who intends to distribute the open-source software as a component of the user’s software to disclose publicly part or all of the source code to the user’s software. Additionally, certain open- source software licenses require the user of such software to make any derivative works of the open-source code available to others on terms that are unfavorable to such user or at no cost. This can effectively render what was previously proprietary software open-source software.

It is possible under the terms of certain open-source licenses (often called “copyleft” or “viral” licenses), if we combine our proprietary software with open-source software in a certain manner, that we could be required to release the source code of our proprietary software and make our proprietary software available under open- source licenses. In the event that portions of our proprietary software are determined to be subject to an open- source license, we could be required to publicly release the affected portions of our source code, re-engineer all or a portion of our solutions, or otherwise be limited in the licensing of our solutions, each of which could reduce or eliminate the value of our solutions. In addition to risks related to license requirements, use of open-source software can lead to greater risks than use of third-party commercial software, as open-source licensors generally do not provide warranties or controls on the origin of the software.

We are subject to subscription and payment processing risk from our third-party vendors and any disruption to such processing systems could have a material adverse effect on our business, financial condition and results of operations.

We rely on a third-party subscription management platform to process the subscription plans and billing frequencies of our customers. In addition, we rely primarily on third parties for payment processing services. If these third-party vendors were to experience an interruption, delay or outages in service and availability, we may

41

be unable to process new and renewing subscriptions or invoices. Further, if these third-party vendors experience a cybersecurity breach affecting data related to services provided to us, we could experience reputational damage or incur liability. Although alternative service providers may be available to us, we may incur significant expense and research and product development efforts to deploy any alternative service providers. To the extent there are disruptions in our third-party subscription and payment processing systems, we could experience revenue loss, accounting issues and harm to our reputation and customer relationships, which could have a material adverse effect on our business, financial condition and results of operations.

Risks Related to Data Privacy and Cybersecurity

Cyber-attacks and security vulnerabilities could have a material adverse effect on our reputation, business, financial condition and results of operations.

Our solutions involve the storage and transmission of proprietary information including personal information of medical professionals, de-identified personal information of patients and clinical trial participants, and other sensitive information. Our business, brand, reputation and ability to attract and retain customers depends upon the satisfactory performance, reliability and availability of our platform. Interruptions in our computer and information technology systems, whether due to fire, flood, power loss, terrorist attacks, acts of war, system failures, computer viruses, software errors, physical or electronic break-ins or malicious hacks or attacks on our systems (such as denial of service attacks), could affect the security and availability of our services and our platform and prevent or inhibit the ability of customers to access our platform. In addition, the software, internal applications and systems underlying our platform are complex and may not be error-free. Any inefficiencies, errors or technical problems with our platform, internal applications and systems could reduce the quality of our solutions or interfere with our customers’ use of our platform, which could reduce demand, lower our revenues and increase our costs.

Threats to network and data security are also constantly evolving and becoming increasingly diverse, frequent, persistent and sophisticated. Attacks upon information technology systems are being conducted by sophisticated and organized groups and individuals with a wide range of motives and expertise. Our platform, as well as our servers, computer systems and those of third parties that we rely on in our operations, could be vulnerable to cybersecurity risks. An increasing number of organizations have disclosed breaches of their information security systems, some of which have involved sophisticated and highly targeted attacks. Further, our platform utilizes A.I. and machine learning technology to provide services, and this technology is susceptible to cybersecurity threats, as confidential and sensitive information may be integrated into the platform. Because of the sensitivity of the information we and our service providers collect, store, transmit, and otherwise process, the security of our technology platform and other aspects of our solutions, including those provided or facilitated by our third-party service providers, are vital to our operations and business strategy. Cyber-attacks can take many forms, but they typically aim to obtain unauthorized access to confidential information, manipulate or destroy data or disrupt, sabotage or degrade service on our systems. As a result of the COVID-19 pandemic, we may also face increased cybersecurity risks due to our reliance on internet technology and the number of our employees who are working remotely, which may create additional opportunities for cybercriminals to exploit vulnerabilities. Furthermore, because the techniques used to obtain unauthorized access to, or to sabotage, systems change frequently and often are not recognized until launched against a target, we may be unable to anticipate these techniques or implement adequate preventative measures. We may also experience security breaches that may remain undetected for an extended period, due to, among other things, the breadth and complexity of our operations and the high volume of transactions that we process, the large number of customers, counterparties and third party service providers with which we do business, the proliferation and increasing sophistication of cyber-attacks, and the possibility that a third party, after establishing a foothold on an internal network without being detected, might obtain access to other networks and systems.

The extent of a particular cybersecurity incident and the steps that we may need to take to investigate it may not be immediately clear, and it may take a significant amount of time before such an investigation can be

42

completed and full and reliable information about the incident is known. While such an investigation is ongoing, we may not necessarily know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, any or all of which could further increase the costs and consequences of a cybersecurity incident. These risks may be increased with respect to operations housed at facilities outside of our direct control, including our data providers.

We employ multiple methods at different layers of our systems to defend against intrusion and attack, to protect our systems and to resolve and mitigate the impact of any incidents. Despite our efforts to keep our systems secure and to remedy identified vulnerabilities, future attacks could be successful and could result in substantial liability or business risk. Third parties will continue to attempt to gain unauthorized access to our systems or facilities through various means, including hacking into our systems or facilities, or those of our customers or vendors, or attempting to fraudulently induce our employees, customers, vendors or other users of our systems into disclosing sensitive information, which may in turn be used to access our IT systems. Our cybersecurity programs and efforts to protect our systems and data, and to prevent, detect and respond to data security incidents, may not prevent these threats or provide adequate security. In addition, we may experience breaches of our security measures due to human error, malfeasance, system errors or vulnerabilities, or other irregularities including attempts by former, current or future employees to misuse their authorized access and/or gain unauthorized access to our systems. Any errors, defects, disruptions or other performance problems with our platform or breach thereof could have a material adverse effect on our reputation, business, financial condition and results of operations. We may be subject to additional liability risks associated with data security breaches or other incidents by virtue of the private right of action granted to individuals under certain data Privacy Laws (as defined below) for actions arising from certain data security incidents. We have also outsourced elements of our information technology infrastructure, and as a result a number of third-party vendors may or could have access to our confidential information. If our third-party vendors fail to protect their information technology systems and our confidential and proprietary information, we may be vulnerable to disruptions in service and unauthorized access to our confidential or proprietary information and we could incur liability and reputational damage. We maintain errors, omissions and cyber liability insurance policies covering certain security and privacy damages. However, we cannot guarantee that our coverage will be adequate for liabilities actually incurred or that insurance will continue to be available to us on economically reasonable terms, or at all.

Due to concerns about data security and integrity, a growing number of legislative and regulatory bodies have adopted breach notification and other requirements in the event that information subject to such laws is accessed by unauthorized persons and additional regulations regarding the use, access, accuracy and security of such data are possible. In the United States, we are subject to laws that provide for at least 50 disparate notification regimes. Complying with such numerous and complex regulations in the event of unauthorized access would be expensive and difficult, and failure to comply with these regulations could subject us to regulatory scrutiny and additional liability. If we are unable to protect our computer systems, software, networks, data and other technology assets, it could have a material adverse effect on our business, financial condition and results of operations.

Actual or perceived failure to comply with applicable data protection, privacy and security laws, regulations, standards and other requirements could adversely affect our reputation, business, financial condition and results of operations, and financial condition.

Our customers use our solutions to understand and navigate the healthcare ecosystem. The collection, processing, retention, security, transfer and disclosure of personal information are subject to a variety of laws and regulations in the United States and abroad that govern data privacy and security (collectively, “Privacy Laws”), which can be enforced in some cases by private parties in addition to governmental and regulatory entities, and from time to time, we may not be in full compliance with all such Privacy Laws. These Privacy Laws often require companies to implement specific privacy and information security controls to protect certain types of information, such as health information. These laws and regulations are constantly evolving and may be interpreted, applied, created, or amended in a manner that could harm our current or future business and

43

operations. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, standards, or perception of their requirements may have on our business. This evolution may create uncertainty in our business, affect our ability to operate in certain jurisdictions or to collect, store, transfer use and share personal information, necessitate the acceptance of more onerous obligations in our contracts, result in liability or impose additional costs on us. These laws and regulations may also be interpreted and applied inconsistently from jurisdiction to jurisdiction which may make compliance difficult or impossible in certain circumstances.

Our platform involves use and disclosure of de-identified data, which must be de-identified in accordance with applicable laws, including Health Insurance Portability and Accountability Act (“HIPAA”). Certain states have signed into law or are intending to enact laws governing the use and disclosure of such de-identified information, and there is some uncertainty regarding those laws’ conformity with the HIPAA de-identification standards. Compliance with state laws could require additional investment and management attention and may subject us to significant liabilities if we do not comply appropriately with new and potentially conflicting regulations. If there is a future change in law, we may also face limitations on our ability to use de-identified information that could harm our business. There is also a risk that the third-party vendors that provide our data sets may fail to properly de-identify protected health information (“PHI”) under HIPAA or applicable state laws, some of which impose different standards for de-identification than those imposed by HIPAA.

Further, our machine learning and data analytics offerings may be subject to laws and evolving regulations regarding the use of AI, controlling for data bias, and antidiscrimination. For example, the Federal Trade Commission (“FTC”) enforces consumer protection laws such as Section 5 of the FTC Act, the Fair Credit Reporting Act, and the Equal Credit Opportunity Act. These laws prohibit unfair and deceptive practices, including use of biased algorithms in AI. The European Commission also recently published its proposal for a regulation implementing harmonized rules on AI and amending certain union legislative acts. The proposed regulation would impose additional restrictions and obligations on providers of AI systems, including increasing transparency so consumers know they are interacting with an AI system, requiring human oversight in AI, and prohibiting certain practices of AI that could lead to physical or psychological harm. The cost of compliance with these laws, regulations and standards is high and is likely to increase in the future.

Any failure or perceived failure by us to comply with federal, state or foreign laws or regulation, our internal policies and procedures or our contracts governing our processing of personal information could result in negative publicity, government investigations and enforcement actions, claims by third parties and damage to our reputation, any of which could have a material adverse effect on our reputation, business, financial condition and results of operations.

In general, health information is among the most sensitive (and highly regulated) of personal information. Privacy Laws in the United States and around the world are designed to ensure that information about an individual’s health is properly protected from inappropriate access, use and disclosure. For example, in the United States, HIPAA and its implementation regulations impose, among other things, certain standards relating to the privacy, security, transmission and breach reporting of individually identifiable health information. The privacy, security and breach notification rules promulgated under HIPAA establish a set of national privacy and security standards for the protection of PHI, by health plans, health care clearinghouses, and certain health care providers, referred to as covered entities, and the business associates with whom such covered entities contract for services that involve creating, receiving, maintaining or transmitting PHI.

Certain of our customers may be either “business associates” or “covered entities” under HIPAA, including certain of our customers that are not traditional healthcare providers. For example, some of our customers are medical device companies that may work with physicians or researchers from whom they receive PHI for data analysis purposes, thus triggering compliance obligations under HIPAA. While such PHI is de-identified before it is introduced into our systems, in certain scenarios, we may nevertheless be contractually obligated to comply with certain HIPAA obligations, including the various requirements of the HIPAA de-identification rules.

44

Additionally, if PHI is inadvertently introduced into our systems without being properly de-identified, we may be directly liable for mishandling PHI and for failing to comply with HIPAA as a “business associate.” The U.S. Department of Health and Human Services Office for Civil Rights, or OCR, may impose penalties for a failure to comply with applicable requirement of HIPAA. Penalties will vary significantly depending on factors such as the date of the violation, whether the business associate knew or should have known of the failure to comply, or whether the business associate’s failure to comply was due to willful neglect. Mandatory penalties for HIPAA violations can be significant. A single breach incident can result in violations of multiple standards. If a person knowingly or intentionally obtains or discloses PHI in violation of HIPAA requirements, criminal penalties may also be imposed.

In addition to government regulations, privacy advocates and other key industry players have established or may establish various new, additional, or different policies or self-regulatory standards in certain digital environments that may place additional resource constraints on us or limit our ability to generate certain analytics. Our customers may expect us to meet voluntary certifications or adhere to other standards established by third parties. Moreover, the continuing evolution of these standards might cause confusion for our customers and may have an impact on the solutions we offer, including our analytics. If we are unable to maintain these certifications or meet these standards, it could reduce demand for our solutions and adversely affect our business and operating results.

Many Privacy Laws protect more than health-related information, and although they vary by jurisdiction, these laws can extend to employee information, business information, healthcare provider information and other information relating to identifiable individuals. Failure to comply with these laws may result in, among other things, civil and criminal liability, negative publicity, damage to our reputation and liability under contractual provisions. These Privacy Laws may also increase our compliance costs and influence or limit the types of services we can provide. The occurrence of any of the foregoing could impact our ability to provide the same level of service to our customers, require us to modify our offerings or increase our costs, which could have a material adverse effect on our business, financial condition and results of operations.

Certain states have also adopted privacy and security laws and regulations that are comparable to HIPAA, some of which may be more stringent. Such laws and regulations will be subject to interpretation by various courts and other governmental authorities, thus creating potentially complex compliance issues for us and our future customers and strategic partners. For example, the California Consumer Privacy Act (“CCPA”), which went into effect on January 1, 2020, imposes enhanced data privacy obligations for entities handling certain personal information and creates individual privacy rights for California residents, including the right to access and delete their personal information and to opt-out of certain sharing and sales of their personal information. The CCPA allows for significant civil penalties and statutory damages for violations and contains a private right of action for certain data breach incidents. Further, in November 2020, California passed the California Privacy Rights Act (“CPRA”). The CPRA broadly amends the CCPA and imposes additional obligations on covered businesses, including additional consumer rights processes, limitations on data uses, new audit requirements for higher risk data, and opt outs for certain uses of sensitive data. It will also create a new California data protection agency authorized to issue substantive regulations and could result in increased privacy and information security enforcement. The majority of the provisions will go into effect on January 1, 2023, and additional compliance investment and potential business process changes may be required. Similarly, other states are instituting privacy and data security laws, rules, and regulations, and many similar laws have been proposed at the federal level, all of which could increase our risk and compliance costs. These regulations and legislative developments have potentially far-reaching consequences and may require us to modify our data management practices and to incur substantial expense in order to comply.

We may also be subject to international Privacy Laws such as the European Union’s (the “EU”) General Data Protection Regulation (“GDPR”), the UK Data Protection Act 2018, Canada’s Personal Information Protection and Electronic Documents Act and other international data protection, privacy, data security, data localization and similar national, state/provincial and local laws. The GDPR imposes stringent operational

45

requirements on “controllers” and “processors” of personal data, including, for example, requiring enhanced disclosures to data subjects about how personal data is processed, limiting retention periods of personal data, requiring mandatory data breach notification, requiring certain record keeping and risk assessment obligations, and requiring additional policies and procedures. In addition, data subjects have more robust rights with regard to their personal data. Personal data, as defined under the GDPR, of medical experts or professionals in the EU is principally processed by our EU subsidiary, Monocl AB. Because our EU subsidiary operates under a Swedish publishing certificate issued in accordance with Swedish national law, such processing of personal data by our EU subsidiary falls within the scope of Article 85 GDPR and is exempt from certain core provisions of the GDPR including, but not limited to, requirements relating to the rights of the data subject (Chapter II) and the transfer of personal data to third countries or international organizations (Chapter V). Notwithstanding such exemption, we may from time to time receive data subject requests that we may deny or decline to respond to in reliance on Article 85, which may lead data subjects to lodge complaints with data protection authorities. There is a possibility that such data protection authorities could disagree with Monocl AB’s reliance on Article 85. The GDPR treats health information as a “special category of personal data,” subject to heightened requirements, including that such information typically cannot be collected, used, or disclosed without explicit consent. Neither we nor our EU subsidiary, which principally processes EU personal data, currently process such health information. Companies that must comply with the GDPR face increased compliance obligations and risk, including more robust regulatory enforcement of data protection requirements and potential fines for noncompliance of up to €20 million or 4% of the annual global revenues of the noncompliant company, whichever is greater. Further, from January 1, 2021, companies have to comply with the GDPR and also the United Kingdom (“UK”) GDPR, which, together with the amended UK Data Protection Act 2018, retains the GDPR in UK national law. The UK GDPR mirrors the fines under the GDPR, i.e., fines up to the greater of €20 million (£17.5 million) or 4% of global turnover. The relationship between the UK and the EU in relation to certain aspects of data protection law remains unclear, and it is unclear how UK data protection laws and regulations will develop in the medium to longer term. The European Commission has adopted an adequacy decision in favor of the UK, enabling data transfers from EU member states to the UK without additional safeguards. However, the UK adequacy decision will automatically expire in June 2025 unless the European Commission re-assesses and renews/extends that decision.

Additionally, we are subject to laws, rules, and regulations (including under the GDPR) regarding cross- border transfers of personal data, including laws relating to the transfer of personal data outside the EU and the UK. We rely on transfer mechanisms permitted under these laws, including standard contractual clauses, which have been subject to regulatory and judicial scrutiny. If these existing mechanisms for transferring personal data from the EU, the UK, or other jurisdictions are unavailable, we may be unable to transfer personal data of employees, customers or others in those regions to the United States. The efficacy and longevity of current transfer mechanisms between the EU, the UK and the United States also remains uncertain. For example, the EU-U.S. Privacy Shield Framework, a data transfer mechanism which allowed companies meeting certain requirements to lawfully transfer personal data form the EU to the US, was struck down by the European Court of Justice in July, 2020 (“EU-U.S. Privacy Shield Framework”). There is also a trend toward countries enacting data localization or other country specific requirements, which could be problematic to cloud software providers. Understanding and implementing such country specific certifications on top of our security certifications could require additional investment and management attention and may subject us to significant liability if we do not comply with particular requirements. Compliance with global Privacy Laws has and will continue to require valuable management and employee time and resources, and failure to comply with these regulations could include severe penalties and could reduce demand for our solutions.

Customers expect that our solutions can be used in compliance with data protection and data Privacy Laws and regulations. The functional and operational requirements and costs of compliance with such laws and regulations may adversely impact our business, and failure to enable our solutions to comply with such laws and regulations could lead to significant fines and penalties imposed by regulators, as well as claims by our customers or third parties. These domestic and international legislative and regulatory initiatives could adversely

46

affect our customers’ ability or desire to collect, use, process, store and disclose personal information and health data using our solutions, or to license data products from us, which could reduce demand for our solutions.

We have established frameworks, models, processes and technologies designed to manage privacy and security for many data types and from a variety of sources, though such measures may not always be effective. We rely on our data suppliers to collect, use, and deliver information to us in a form and manner that complies with applicable Privacy Laws. Due to the complex and evolving nature of Privacy Laws, we cannot guarantee that the safeguards and controls employed by us or our data suppliers will be sufficient to prevent a breach of these laws, or that claims, complaints, investigations, or inquiries will not be filed or lodged against us or our data suppliers despite such safeguards and controls. Failure to comply with such Privacy Laws, certain certification/registration requirement, annual re-certification/registration requirements associated with these Privacy Laws, and failure to resolve any serious privacy or security related complaints or requests, may result in, among other things, regulatory sanctions, criminal prosecution, civil liability, negative publicity, damage to our reputation, or data being blocked from use or liability under contractual provisions.

Legal and Regulatory Risks

Our platform addresses heavily regulated functions within the healthcare ecosystem and such regulations and laws are subject to change. Failure to comply with applicable laws and regulations could lessen the demand for our solutions or subject us to significant claims and losses.

Our customers use our platform for business activities that are subject to a complex regime of global laws and regulations, including requirements for maintenance of electronic records and electronic signatures, requirements regarding processing of health data, and other laws and regulations. Our customers expect to be able to use our platform in a manner that is compliant with the regulations to which they are subject. Our efforts to provide solutions that comply with such laws and regulations are time-consuming and costly and include validation procedures that may delay the release of new versions of our solutions. As these laws and regulations change over time, we may find it difficult to adjust our platform to comply with such changes.

As we increase the number of intelligence modules we offer and potentially the number of countries in which we operate, the complexity of adjusting our solutions to comply with legal and regulatory changes will increase. If we are unable to effectively manage this increased complexity or if we are not able to provide solutions that can be used in compliance with applicable laws and regulations, customers may be unwilling to use our solutions, and any such non-compliance could result in the termination of our customer agreements or claims arising from such agreements with our customers.

We are subject to sanctions, anti-corruption, anti-bribery, anti-money laundering and similar laws, and non-compliance with such laws can subject us to criminal penalties or significant fines and have a material adverse effect on our business, financial condition and results of operations.

We are subject to applicable anti-corruption, anti-bribery, and similar laws, such as the U.S. Foreign Corrupt Practices Act of 1977, as amended (the “FCPA”), the U.S. domestic bribery statute contained in 18 U.S.C. § 201, the U.S. Travel Act, the U.K. Bribery Act 2010. Anti-corruption and anti-bribery laws have been enforced aggressively in recent years. The FCPA and other anti-corruption laws prohibit companies and their employees and agents from corruptly promising, authorizing, making, offering or providing anything of value to a foreign government official for the purpose of influencing official decisions or obtaining or retaining business, or otherwise obtaining an improper business advantage. The FCPA also requires that we keep accurate books and records and maintain a system of adequate internal controls. The UK Bribery Act 2010 and other anti-corruption laws also prohibit commercial bribery not involving government officials, and requesting or accepting bribes. We also are subject to applicable anti-money laundering laws, which prohibit engaging in certain transactions involving criminally-derived property or the proceeds of criminal activity. Our activities are also subject to applicable trade and economic sanctions laws and regulations, including those administered by the U.S. Treasury Department’s Office of Foreign Assets Control and the U.S. Department of State. These sanctions laws and

47

regulations prohibit certain transactions involving sanctioned countries, governments, and persons without a license or other appropriate authorization. As we increase our international sales and business, our risks under these laws may increase. Changes to U.S. sanctions policy could also affect our ability to interact, directly and indirectly, with targeted persons or companies, or companies in sanctioned markets. Noncompliance with these laws could subject us to investigations, sanctions, settlements, prosecution, other enforcement actions, disgorgement of profits, significant fines, damages, other civil and criminal penalties or injunctions, adverse media coverage and other consequences. Any investigations, actions or sanctions could have a material adverse effect on our business, financial condition and results of operations. In addition, in the future we may use third parties to sell access to our platform and conduct business on our behalf abroad. We or such future third-party intermediaries may have direct or indirect interactions with officials and employees of government agencies or state-owned or affiliated entities, which increases our risks under the FCPA and other public corruption laws. We can be held liable for the corrupt or other illegal activities by our employees and, in certain circumstances, by our third-party intermediaries, even if we do not explicitly authorize such activities. Although we have controls in place to promote compliance with these laws and regulations, we cannot provide assurance that our internal controls and compliance systems will always prevent illegal or improper acts by employees, agents, third parties, or business partners. Controls intended to prevent access to our platform from certain geographies may not be effective in all cases.

Any violation or allegation of violations of economic and trade sanctions laws, the FCPA or other applicable anti-corruption laws, or anti-money laundering laws could subject us to significant sanctions, including civil or criminal fines and penalties, disgorgement of profits, injunctions and debarment from government contracts, as well as related stockholder lawsuits and other remedial measures, all of which could adversely affect our reputation, business, financial condition and results of operations, and could also result in whistleblower complaints, adverse media coverage, investigations, loss of export privileges, any of which could have a material adverse effect on our reputation, business, results of operations and prospects.

We could be subject to claims brought by our customers, which could be costly and time consuming to defend.

We could be, from time to time, subject to claims brought by our customers in connection with commercial disputes or other proceedings. We may incur material costs and expenses in connection with any claims, including but not limited to fines or penalties and legal costs, or be subject to other remedies, any of which could have a material adverse effect on our business, financial condition and results of operations. Insurance may not cover such claims, may not be sufficient for one or more such claims and may not continue to be available on terms acceptable to us. A claim brought against us that is uninsured or underinsured could result in unanticipated costs, management distraction or reputational harm, which could have a material adverse effect on our business, financial condition and results of operations.

We may be subject to litigation, investigations or other actions, which could harm our reputation and have a material adverse effect on our business, financial condition and results of operations.

In the ordinary course of business, we may be involved in and subject to litigation for a variety of claims or disputes and receive regulatory inquiries. These claims, lawsuits and proceedings could include labor and employment, wage and hour, commercial, data privacy, antitrust, alleged securities law violations or other investor claims and other matters. The number and significance of these potential claims and disputes may increase as our business expands. Any claim against us, regardless of its merit, could be costly, divert management’s attention and operational resources and harm our reputation. As litigation is inherently unpredictable, we cannot assure you that any potential claims or disputes will not have a material adverse effect on our business, financial condition and results of operations. Any claims or litigation, even if fully indemnified or insured, could make it more difficult to effectively compete or to obtain adequate insurance in the future.

In addition, we may be required to spend significant resources to monitor and protect our contractual, intellectual property and other rights, including collection of payments and fees. Litigation has been and may be

48

necessary in the future to enforce such rights. Such litigation could be costly, time consuming and distracting to management and could result in the impairment or loss of our rights. Further, our efforts to enforce our rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of such rights. Our inability to protect our rights as well as any costly litigation or diversion of our management’s attention and resources, could have a material adverse effect on our business, financial condition and results of operations.

We may be subject to liability if we breach our contracts, and our insurance may be inadequate to cover our losses.

We are subject to numerous obligations in our contracts with organizations using our platform, as well as vendors and other companies with which we do business. We may breach these commitments, whether through a weakness in our procedures, systems and internal controls, negligence or through the willful act of an employee or contractor. Our insurance policies, including our errors and omissions insurance, may be inadequate to compensate us for the potentially significant losses that may result from claims arising from breaches of our contracts, as well as disruptions in our services, failures or disruptions to our infrastructure, catastrophic events and disasters or otherwise.

In addition, our insurance may not cover all claims made against us, and defending a suit, regardless of its merit, could be costly and divert management’s attention. Further, such insurance may not be available to us in the future on economically reasonable terms, or at all.

We may be subject to legal liability for collecting, displaying or distributing information.

Because the content in our database is collected from various sources and distributed to others, we may be subject to claims for breach of contract, defamation, negligence, unfair competition or copyright or trademark infringement or claims based on other theories, such as breach of laws related to privacy and data protection. We could also be subject to claims based upon the content that is accessible from our website through links to other websites or information on our website supplied by third parties. Even if these claims do not result in liability to us, we could incur significant costs in investigating and defending against any claims and we could be subject to public notice requirements that may affect our reputation. Our potential liability for information distributed by us to others could require us to implement measures to reduce our exposure to such liability, which may require us to expend substantial resources and limit the attractiveness of our analytics to users.

Risks Related to Intellectual Property

We may not be able to adequately protect our proprietary and intellectual property rights in our data analytics or data science.

Our success is dependent, in part, upon protecting our proprietary information and technology including our trade secrets and other unpatented intellectual property, which our competitors could use to market and deliver similar solutions, decreasing the demand for our platform. We may be unsuccessful in adequately protecting the proprietary aspects of our technology and solutions such as our proprietary software and databases. To protect our intellectual property rights, we primarily rely upon trade secret law, including by entering into confidentiality and non-disclosure agreements, and other contractual arrangements, along with copyright law, rather than on registered intellectual property such as patents or registered trademarks. No assurance can be given that confidentiality, non-disclosure, or invention assignment agreements with employees, consultants or other parties will not be breached and will otherwise be effective in controlling access to and distribution of our platform, or certain aspects of our platform and proprietary information. Further, these agreements do not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our platform. Additionally, certain unauthorized use of our intellectual property may go undetected, or we may face legal or practical barriers to enforcing our legal rights even where unauthorized use is detected.

49

Current law may not provide for adequate protection of our platform or data analytics. In addition, legal standards relating to the validity, enforceability and scope of protection of proprietary rights in datasets and Internet-related businesses are uncertain and evolving, and changes in these standards may adversely impact the viability or value of our proprietary rights. Some license provisions protecting against unauthorized use, copying, transfer, and disclosure of our platform, or certain aspects of our platform, or our data analytics may be unenforceable under the laws of certain jurisdictions. Further, the laws of some countries in which we operate or intend to operate do not protect proprietary rights to the same extent as the laws of the U.S., and mechanisms for enforcement of intellectual property rights in some foreign countries may be inadequate. To the extent we expand our international activities, our exposure to unauthorized copying and use of our data analytics or certain aspects of our platform, or our data analytics may increase. Further, competitors, foreign governments, foreign government-backed actors, criminals or other third parties may gain unauthorized access to our proprietary information and technology. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our technology and intellectual property.

To protect our intellectual property rights, we may be required to spend significant resources to monitor and protect these rights, and we may or may not be able to detect infringement by our customers or third parties. Litigation may be necessary in the future to enforce our intellectual property rights and to protect our trade secrets. Such litigation could be costly, time consuming, and distracting to management and could result in the impairment or loss of portions of our intellectual property. Further, our efforts to enforce our intellectual property rights may be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Our inability to protect our proprietary technology against unauthorized copying or use, as well as any costly litigation or diversion of our management’s attention and resources, could delay further sales or the implementation of our platform, impair the functionality of our platform, delay introductions of new features, integrations and capabilities, result in our substituting inferior or more costly technologies into our platform, or injure our reputation. In addition, we may be required to license additional technology from third parties to develop and market new features, integrations and capabilities, and we cannot be certain that we could license that technology on commercially reasonable terms or at all, and our inability to license this technology could harm our ability to compete and have a material adverse effect on our business, financial condition and results of operations.

Further, third parties may misappropriate our data or data analytics through website scraping, robots or other means and aggregate and display this data or data analytics on their websites. In addition, “copycat” websites may misappropriate data or data analytics on our website or platform and attempt to imitate our brands or the functionality of our website or platform. We may not be able to detect all such copycats in a timely manner and, even if we could, technological and legal measures available to us may be insufficient to stop their operations and the misappropriation of our data or data analytics. Any measures that we may take to enforce our rights could require us to expend significant financial or other resources.

We may be subject to claims by others that we are infringing on their intellectual property rights.

Our competitors, as well as a number of other entities and individuals, including so-called non-practicing entities, may own or claim to own intellectual property relating to our product offering. From time to time, third parties may claim that we are infringing upon their intellectual property rights or that we have misappropriated their intellectual property. As competition in our market grows, the possibility of patent infringement, trademark infringement and other intellectual property claims against us increases. We may be unaware of the intellectual property rights that others may claim cover some or all of our technology or services. Because patent applications can take years to issue and are often afforded confidentiality for some period of time there may currently be pending applications, unknown to us, that later result in issued patents that could cover one or more aspects of our technology and services.

Third parties may assert claims that we or our customers infringe their intellectual property rights and these claims, with or without merit, could be expensive to litigate, cause us to incur substantial costs and divert

50

management resources and attention in defending the claim. In some jurisdictions, plaintiffs can also seek injunctive relief that may limit the operation of our business or prevent the marketing and selling of our services that infringe or allegedly infringe on the plaintiff’s intellectual property rights. To resolve these claims, we may enter into licensing agreements with restrictive terms or significant fees, stop selling, be required to implement costly redesigns to the affected services, or pay damages to satisfy contractual obligations to others. If we do not resolve these claims in advance of a trial, there is no guarantee that we will be successful in court. These outcomes could have a material adverse effect on our business, financial condition and results of operations.

In addition, certain contracts with our suppliers or customers contain provisions whereby we indemnify, subject to certain limitations, the counterparty for damages suffered as a result of claims related to intellectual property infringement and the use of data analytics. Claims made under these provisions could be expensive to litigate and could result in significant payments. Even if we were to prevail in such a dispute, any litigation regarding our intellectual property could be costly and time-consuming and divert the attention of our management and key personnel from our business operations.

Our business could be adversely impacted by changes in laws and regulations related to the Internet or changes in access to the Internet generally.

The future success of our Internet-based business depends upon the continued use of the Internet as a primary medium for communication, business applications, and commerce. Federal or state government bodies or agencies have in the past adopted, and may in the future adopt, laws or regulations affecting the use of the Internet as a commercial medium. Legislators, regulators, or government bodies or agencies may also make legal or regulatory changes or interpret or apply existing laws or regulations that relate to the use of the Internet in new and materially different ways. Changes in these laws, regulations or interpretations could require us to modify our platform in order to comply with these changes, to incur substantial additional costs or divert resources that could otherwise be deployed to grow our business, or expose us to unanticipated civil or criminal liability, among other things.

In addition, additional taxes, fees or other charges have been imposed and may, in the future, be imposed for Internet access or commerce conducted via the Internet. Internet access is frequently provided by companies that have significant market power and could take actions that degrade, disrupt or increase the cost of our customers’ use of our platform, which could negatively impact our business. Net neutrality rules, which were designed to ensure that all online content is treated the same by Internet service providers and other companies that provide broadband services, were repealed by the Federal Communications Commission effective June 2018. The repeal of the net neutrality rules could force us to incur greater operating expenses or our customers’ use of our platform could be adversely affected, either of which could harm our business and results of operations.

These developments could limit the growth of Internet-related commerce or communications generally or result in reductions in the demand for Internet-based platforms and services such as ours, increased costs to us or the disruption of our business. Furthermore, as the Internet continues to experience growth in the numbers of users, frequency of use and amount of data transmitted, the use of the Internet as a business tool could be adversely affected due to delays in the development or adoption of new standards and protocols to handle increased demands of Internet activity, security, reliability, cost, ease-of-use, accessibility, and quality of service. Moreover, the performance of the Internet and its acceptance as a business tool has been adversely affected by “viruses,” “worms,” and similar malicious programs and the Internet has experienced a variety of outages and other delays as a result of damage to portions of its infrastructure. If the use of the Internet generally, or our platform specifically, is adversely affected by these or other issues, we could be forced to incur substantial costs, demand for our platform could decline, and our results of operations and financial condition could be harmed.

51

Risks Related to Certain Tax Matters

Unanticipated changes in our effective tax rate and additional tax liabilities may impact our financial results.

We will be subject to taxes in the U.S. and certain foreign jurisdictions. Due to economic and political conditions, tax rates in various jurisdictions, including the U.S., may be subject to change. In particular, there are current proposals from the president and Congress in the U.S., which if enacted, could result in additional federal income taxes being imposed on us. For example, the U.S. government may enact significant changes to the taxation of business entities, including, among others, a permanent increase in the corporate income tax rate, an increase in the tax applicable to the global low-taxed income and the imposition of minimum taxes or surtaxes on certain types of income. Our future effective tax rates could be affected by changes in the mix of earnings in countries with differing statutory tax rates, changes in the valuation of deferred tax assets and liabilities and changes in tax laws or their interpretation.

We may also be subject to additional tax liabilities and penalties due to changes in non-income based taxes resulting from changes in federal, state or foreign tax laws, changes in taxing jurisdictions’ administrative interpretations, decisions, policies and positions, results of tax examinations, settlements or judicial decisions, changes in accounting principles, changes to the business operations, including acquisitions, as well as the evaluation of new information that results in a change to a tax position taken in a prior period. Any resulting increase in our tax obligation or cash taxes paid could adversely affect our cash flows and financial results.

Changes in tax laws or regulations in the various tax jurisdictions we are subject to that are applied adversely to us or our paying customers could increase the costs of our platform and harm our business.

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time. Those enactments could harm our domestic and foreign business operations and our business, financial condition and results of operations. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us. These events could require us or our paying customers to pay additional tax amounts on a prospective or retroactive basis, as well as require us or our paying customers to pay fines and/or penalties and interest for past amounts deemed to be due. If we raise our prices to offset the costs of these changes, existing and potential future paying customers may elect not to subscribe to our platform in the future. Additionally, new, changed, modified or newly interpreted or applied tax laws could increase our paying customers’ and our compliance, operating and other costs, as well as the costs of our platform. Further, these events could decrease the capital we have available to operate our business. Any or all of these events could harm our business, financial condition and results of operations.