Inspire Medical Systems (2DR) Risk Analysis

An element of our strategy is to continue to upgrade our products, add new features and expand the indications and uses for our current products. In the U.S., before we can market a new medical device, or a new use of, or claim for, or significant modification to, an existing product, we must first receive PMA from the FDA. In the process of obtaining PMA, which was required for our Inspire system, the FDA must determine that a proposed device is safe and effective for its intended use based, in part, on extensive data, including, but not limited to, technical, pre-clinical, clinical study, manufacturing and labeling data. The PMA process is typically required for devices that are deemed to pose the greatest risk, such as life-sustaining, life-supporting or implantable devices. The process of obtaining a PMA is costly and more uncertain and time consuming than the 510(k) clearance process used for lower risk devices. Despite the time, effort and cost, a device may not be approved by the FDA. Any delay or failure to obtain necessary regulatory approvals could harm our business and results of operations. Furthermore, even if we are granted regulatory approval, it may include significant limitations on the indicated uses for the device, which may limit the market for the device. The FDA and other regulatory authorities or notified bodies outside the U.S. can delay, limit or deny approval or certification of a device for many reasons, including: - our inability to demonstrate to the satisfaction of the FDA or the applicable foreign regulatory entity or notified body that our products are safe or effective for their intended uses;- the disagreement of the FDA or the applicable foreign regulatory authority or notified body with the design or implementation of our clinical studies or the interpretation of data from pre-clinical studies or clinical studies;- serious and unexpected adverse device effects experienced by participants in our clinical studies;- the data from our pre-clinical studies and clinical studies may be insufficient to support approval or certification, where required;- our inability to demonstrate that the clinical and other benefits of the device outweigh the risks;- the manufacturing process or facilities we use may not meet applicable requirements; and - the potential for policies or regulations of the FDA or applicable foreign regulatory authorities to change significantly in a manner rendering our clinical data or regulatory filings insufficient for clearance, approval or certification. In addition, the FDA or other regulatory authorities or notified bodies outside the U.S. may change their approval or certification policies, adopt additional regulations or revise existing regulations, or take other actions, which may prevent or delay approval or certification of our future products under development or impact our ability to modify our currently cleared or certified products on a timely basis. Such policy or regulatory changes could impose additional requirements or time delays upon us that could delay our ability to obtain new approvals or certifications, increase the costs of compliance and our operating expenses, adversely impact our revenues or inventory forecasting or restrict our ability to maintain our current approval or certification. The timing of FDA approval of a next generation product could have a significant impact on the carrying value of the inventory of our previous generation product, and therefore our results of operations. Subject to the transitional provisions, in order to sell our products in EU member states, our products must comply with the general safety and performance requirements of the EU Medical Devices Regulation, which repeals and replaces the EU Medical Devices Directive and the AIMDD. Compliance with these requirements is a prerequisite to be able to affix the CE mark to our products, without which they cannot be sold or marketed in the EU. To demonstrate compliance with the general safety and performance requirements, we must undergo a conformity assessment procedure, which varies according to the type of medical device and its (risk) classification. Except for low-risk medical devices (Class I), where the manufacturer can self-assess the conformity of its products with the general safety and performance requirements (except for any parts which relate to sterility, metrology or reuse aspects), a conformity assessment procedure requires the intervention of a notified body. The notified body would typically audit and examine the technical file and the quality system for the manufacture, design and final inspection of our devices. If satisfied that the relevant product conforms to the relevant general safety and performance requirements, the notified body issues a certificate of conformity, which the manufacturer uses as a basis for its own declaration of conformity. The manufacturer may then apply the CE mark to the device, which allows the device to be placed on the market throughout the EU. If we fail to comply with applicable laws and regulations, we would be unable to affix the CE mark to our products, which would prevent us from selling them within the EU. The aforementioned EU rules are generally applicable in the EEA, and non-compliance with the above requirements would also prevent us from selling our products in these three countries.

We and our products are subject to extensive and changing laws, governmental mandates (such as executive orders) and regulation in the U.S. and elsewhere, including by the FDA and its foreign counterparts. Compliance with these laws, regulations and governmental mandates executive orders may be onerous and expensive. New and changing laws, regulations, and governmental mandates could adversely affect our business by increasing our costs, limiting the Company's ability to pursue or offer a product or product candidate, or by requiring changes to our business. New and changing laws, regulations, and governmental mandates could also create uncertainty about how such laws and regulations will be interpreted and applied. Regulatory changes and other actions that materially adversely affect our business may be announced with little or no advance notice, and we may be unable to timely or successfully mitigate all adverse impacts from such measures. Differing interpretations of such legal obligations could also expose us to significant fines, government investigations, litigation and reputational harm. Currently, the FDA and foreign regulatory agencies regulate, among other things, with respect to medical devices: design, development and manufacturing; testing, labeling, content and language of instructions for use and storage; clinical studies; product safety; establishment registration and device listing; marketing, sales and distribution; pre-market clearance, approval, and certification; record keeping procedures; advertising and promotion; recalls and field safety corrective actions; post-market surveillance, including reporting of deaths or serious injuries and malfunctions that, if they were to recur, could lead to death or serious injury; post-market approval studies; and product import and export. The regulations to which we are subject are complex and have tended to become more stringent over time. The FDA, foreign regulatory authorities, and notified bodies enforce these regulatory requirements through periodic unannounced inspections or audits. Failure to comply with applicable regulations could jeopardize our ability to sell our products and result in enforcement actions such as: warning letters; fines; injunctions; civil penalties; termination of distribution; recalls or seizures of products; delays in the introduction of products into the market; total or partial suspension of production; refusal to grant future clearances, approval, or certifications; withdrawals or suspensions of current approvals or certifications, resulting in prohibitions on sales of our products; and in the most serious cases, criminal penalties. If we are found to have violated laws, regulations, or governmental mandates, it could materially and adversely affect our business, reputation, results of operations and financial condition.

Under Sections 3(a)(1)(A) and (C) of the 1940 Act, a company generally will be deemed to be an "investment company" for purposes of the 1940 Act if (1) it is, or holds itself out as being, engaged primarily, or proposes to engage primarily, in the business of investing, reinvesting or trading in securities or (2) it engages, or proposes to engage, in the business of investing, reinvesting, owning, holding or trading in securities and it owns or proposes to acquire investment securities having a value exceeding 40% of the value of its total assets (exclusive of U.S. Treasury debt securities and cash items) on an unconsolidated basis. We do not believe that we are an "investment company," as such term is defined in either of those sections of the 1940 Act. We intend to conduct our operations so that we will not be deemed an investment company. However, if we were to be deemed an investment company, restrictions imposed by the 1940 Act, including limitations on our capital structure and our ability to transact with affiliates, could make it impractical for us to continue our business as contemplated and could have a material adverse effect on our business, financial condition and results of operations.

In the U.S., there have been and continue to be a number of legislative initiatives to contain healthcare costs, and there is significant interest in promoting changes in healthcare systems with the stated goals of containing healthcare costs, improving quality and/or expanding access. We expect that current laws, as well as other healthcare reform measures that may be adopted in the future, may result in more rigorous coverage criteria and in additional downward pressure on the price that we may receive for our product. New and changing laws and regulations may also create uncertainty about how such laws and regulations will be interpreted and applied. If we are found to have violated laws and regulations, it could materially adversely affect our business, results of operations and financial condition. In 2010, the Affordable Care Act (the "ACA") was enacted in the U.S., which made a number of substantial changes in the way healthcare is financed by both governmental and private insurers. Among the provisions of the ACA of importance to our business are the following: - a new Patient-Centered Outcomes Research Institute to oversee and identify priorities in comparative clinical effectiveness research in an effort to coordinate and develop such research;- payment system reforms including a national pilot program on payment bundling to encourage hospitals, physicians and other providers to improve the coordination, quality and efficiency of certain healthcare services through bundled payment models; and - expanded the eligibility criteria for Medicaid programs. In addition, other legislative changes have been proposed and adopted since the ACA was enacted, such as the Budget Control Act of 2011, the American Taxpayer Relief Act of 2012, and the Medicare Access and CHIP Reauthorization Act of 2015, among others. The expansion in the government's role in the U.S. healthcare industry may result in decreased profits to us, lower reimbursement by payors for our Inspire system, and/or reduced medical procedure volumes, all of which may have a material adverse effect on our business, financial condition and results of operations. A recent example is the WISeR Model initiated by CMS. See Part I, Item 1. "Business - Government Regulation." The One Big Beautiful Bill Act, which was enacted in July 2025, imposes significant reductions in the funding of the Medicaid program. Such reductions are expected to decrease the number of persons enrolled in Medicaid and reduce the services covered by Medicaid, which could adversely affect sales of our Inspire system. We expect additional state, federal, and foreign healthcare policies and reform measures to be adopted in the future, any of which could limit reimbursement for healthcare products and services or otherwise result in reduced demand for our Inspire system or additional pricing pressure and have a material adverse effect on our industry generally and on our customers. Any changes of, or uncertainty with respect to, future coverage or reimbursement rates could affect demand for our Inspire system, which in turn could impact our ability to successfully commercialize our Inspire system and could have a material adverse effect on our business, financial condition and results of operations.

The regulatory framework for artificial intelligence ("AI"), machine learning, and automated decision-making technologies (collectively, "AI Technologies") is rapidly evolving as many federal, state, and foreign government bodies and agencies have introduced or are currently considering additional laws and regulations. Additionally, existing laws and regulations may be interpreted in ways that would affect the operation of our AI Technologies. It is possible that new laws and regulations will be adopted in the United States and in other non-U.S. jurisdictions, or that existing laws and regulations, including competition and antitrust laws, may be interpreted in ways that would limit our ability to use AI Technologies for our business, or require us to change the way we use AI Technologies in a manner that negatively affects the performance of our products, services, and business and the way in which we use AI Technologies. We may need to expend resources to adjust our products or services in certain jurisdictions if the laws, regulations, or decisions are not consistent across jurisdictions. Further, the cost to comply with such laws, regulations, or decisions and/or guidance interpreting existing laws, could be significant and would increase our operating expenses (such as by imposing additional reporting obligations regarding our use of AI Technologies). Such an increase in operating expenses, as well as any actual or perceived failure to comply with such laws and regulations, could adversely affect our business, financial condition and results of operations.

There are numerous U.S. federal and state, as well as foreign, laws pertaining to healthcare fraud and abuse, including anti-kickback, false claims and physician transparency laws. Our business practices and relationships with providers are subject to scrutiny under these laws. The healthcare laws and regulations that may affect our ability to operate include, but are not limited to: the federal Anti-Kickback Statute, the federal civil and criminal false claims laws and civil monetary penalties laws, including the federal civil False Claims Act, the federal Civil Monetary Penalties Law, federal criminal fraud and abuse laws under HIPAA, analogous state and foreign law equivalents of each of the foregoing. See Part I, Item 1. "Business - Government Regulation." These laws and regulations, among other things, constrain our business, marketing and other promotional activities by limiting the kinds of financial arrangements, including sales programs, we may have with hospitals, physicians or other potential purchasers of our products. Similar laws may exist in other jurisdictions where we operate, such as in the EU. Due to the breadth of these laws, the narrowness of statutory exceptions and regulatory safe harbors available, and the range of interpretations to which they are subject, it is possible that some of our current or future practices might be challenged under one or more of these laws. To enforce compliance with the healthcare regulatory laws, certain enforcement bodies have recently increased their scrutiny of interactions between healthcare companies and healthcare providers, which has led to a number of investigations, prosecutions, convictions and settlements in the healthcare industry. For example, on January 17, 2025, we received a CID from the Department of Justice U.S. Attorney's Office for the District of Minnesota pursuant to the False Claims Act in the course of the government's investigation concerning allegations of false claims, including false claims arising from violations of the Anti-Kickback Statute, submitted to government payors in connection with our implant. The CID requests information relating to the marketing, promotion and reimbursement practices associated with our products. We are cooperating with the investigation. No assurance can be given as to the timing or outcome of the government's investigation. Responding to investigations can be time-and resource-consuming and can divert management's attention from the business. Additionally, as a result of these investigations, healthcare providers and entities may have to agree to additional compliance and reporting requirements as part of a consent decree or corporate integrity agreement. Any such investigation or settlement could increase our costs or otherwise have an adverse effect on our business. Even an unsuccessful challenge or investigation into our practices could cause adverse publicity, and be costly to respond to. If our operations are found to be in violation of any of the healthcare laws or regulations described above or any other healthcare regulations that apply to us, we may be subject to penalties, including administrative, civil and criminal penalties, damages, fines, exclusion from participation in government healthcare programs, such as Medicare and Medicaid, imprisonment, contractual damages, reputational harm, disgorgement and the curtailment or restructuring of our operations.

From time to time, legislation is drafted and introduced in Congress that could significantly change the statutory provisions governing the regulation of medical devices. In addition, FDA regulations and guidance are often revised or reinterpreted by the FDA in ways that may significantly affect our business and our products. Any new statutes, regulations or revisions or reinterpretations of existing regulations may impose additional costs or lengthen review times of any future products or make it more difficult to obtain approval for, manufacture, market or distribute our products. We cannot determine what effect changes in regulations, statutes, legal interpretation or policies, when and if promulgated, enacted or adopted may have on our business in the future. Such changes could, among other things, require: additional testing prior to obtaining clearance or approval; changes to manufacturing methods; recall, replacement or discontinuance of our products; or additional record keeping. For example, on February 2, 2026, the FDA's final rule implementing the FDA's QMSR became effective. The WMSR, which replaced the FDA's former Quality System Regulation, sets forth the FDA's requirements for medical devices, and among other things, incorporates by reference certain elements of the quality management system requirements of ISO 13485:2016. Although the FDA has stated that the standards contained in ISO 13485:2016 are substantially similar to those set forth in the QMSR, and although our quality management system is designed to comply with ISO 13485, the FDA has indicated that ISO:13485 certification alone will not ensure compliance under the QMSR, nor will ISO certification exempt manufacturers from FDA inspection. The QMSR also includes certain compliance obligations, such as those relating to unique device identification, product traceability, and maintenance of complaint and service records, that align more closely with the FDA's existing medical device requirements than with ISO standards. Accordingly, it remains unclear the extent to which the QMSR may impose additional or different regulatory requirements on us that could increase the costs of compliance or otherwise negatively affect our business. If we are unable to comply with QMSR or with any other changes in the laws or regulations enforced by FDA or comparable regulatory authorities, we may be subject to enforcement action, which could have an adverse effect on our business, financial condition and results of operations. Similarly, the EU landscape concerning medical devices recently evolved, and continues to undergo legislative changes. On May 25, 2017, the EU Medical Devices Regulation entered into force, which repeals and replaces the EU Medical Devices Directive and the AIMDD. See Part I, Item I, "Business – Government Regulation" for additional information on these reforms. These requirements are in active implementation and may change as the European Commission adopts additional implementing acts and considers targeted revisions to related medical device rules. In addition, on December 16, 2025, the European Commission published a targeted revision proposal of the MDR to address structural issues, certification delays, and burdens on small and medium-sized enterprises. The proposal will enter the ordinary legislative procedure and is not expected to be adopted before 2027. These modifications are likely to have an effect on the way we conduct our business in the EEA. For example, as a result of the transition towards the new regime, notified body review times have lengthened, and product introductions or modifications could be delayed or canceled, which could adversely affect our ability to grow our business.

We develop and offer certain software applications in connection with our business, including our SleepSync™ cloud-based patient management platform, which is designed to function as a medical device data system ("MDDS"). For its part, the FDA may regulate medical or health-related software, including clinical decision support software, machine learning functionality and predictive algorithms, if such software falls within the definition of a "medical device" under the FDCA. However, historically, the FDA has exercised enforcement discretion for certain low-risk software functions, and has issued several guidance documents that establish enforcement discretion policies and/or otherwise outline the FDA's approach to the regulation of software as a medical device. For example, in September 2022 the FDA issued a guidance entitled: "Medical Device Data Systems, Medical Image Storage Devices, and Medical Image Communications Devices," which among other things, announced the FDA's intent not to enforce compliance with certain FDCA requirements with respect to medical device MDDS functions, including those requirements relating to registration and listing, premarket review, post-market reporting and compliance with the QMSR. In addition, the 21st Century Cures Act ("Cures Act") amended the FDCA to exclude from the definition of "medical device" certain medical-related software, including certain software used for administrative support functions at a healthcare facility, software intended for maintaining or encouraging a healthy lifestyle, software designed to store electronic health records, certain clinical decision support software, and software for transferring, storing, or displaying medical device data or in vitro diagnostic data, including certain MDDS functionality. We believe our currently marketed applications, including the SleepSync™ platform, provide functionality that either qualifies for FDA enforcement discretion under the September 2022 policy for device MDDS, or is otherwise exempt from the FDCA's definition of a "medical device" pursuant to the Cures Act amendments, and therefore that our products are subject to the FDA's current enforcement discretion policy applicable to MDDS software functions or otherwise provide functions that are not currently regulated by the FDA as a medical device. However, there is a risk that the FDA could disagree with our determinations, or that the FDA could alter its enforcement discretion policies, and in either case, subject our software to more stringent medical device regulations. If the FDA determines that any of our current or future software applications, including the SleepSync™ platform, are regulated as medical devices and not otherwise subject to enforcement discretion, we would become subject to various requirements under the FDCA and the FDA's implementing regulations. If this occurs, we may be required to cease marketing or to recall our software products until we obtain the requisite clearances or approvals, and we may be subject to enforcement action. In addition, as we continue to update and improve our SleepSync™ platform, we are also continuing to integrate certain software functions we utilize for compliance, quality oversight and product surveillance into the SleepSync™ platform. As such, any enforcement action with respect to our SleepSync™ software platform, or any requirements for us to obtain clearances or approvals for our software applications would also affect the speed at which we could update and modify these systems, and in any case, would entail significant cost and could harm our reputation, business, financial condition, and results of operations.

Sales of our products outside of the U.S. are subject to foreign regulatory requirements that vary widely from country to country. In addition, the FDA regulates exports of medical devices from the U.S. While the regulations of some countries may not impose barriers to marketing and selling our products or only require notification, others require that we obtain the approval of or certification by a specified body (e.g., notified bodies in Europe). Complying with foreign regulatory requirements, including obtaining registrations, approvals or certifications, can be expensive and time-consuming, and we may not receive regulatory approvals or certifications in each country in which we plan to market our products or we may be unable to do so on a timely basis. The time required to obtain registrations, approvals or certifications, if required by other countries, may be longer than that required for FDA approval, and requirements for such registrations, clearances, approvals or certifications may significantly differ from FDA requirements. If we modify our products, we may need to apply for additional regulatory approvals or certifications before we are permitted to sell the modified product. In addition, we may not continue to meet the quality and safety standards required to maintain the authorizations or certifications that we have received. If we are unable to maintain our authorizations or certifications in a particular country, we will no longer be able to sell the applicable product in that country. Regulatory approval by the FDA does not ensure registration, clearance, approval or certification by regulatory authorities or notified bodies in other countries, and registration, clearance, approval or certification by one or more foreign regulatory authorities or notified bodies does not ensure registration, clearance, approval or certification by regulatory authorities or notified bodies in other foreign countries or by the FDA. However, a failure or delay in obtaining registration, regulatory clearance, approval or certification in one country may have a negative effect on the regulatory process in others.

We are subject to the FDA's medical device reporting regulations and similar foreign regulations, which require us to report to the FDA and foreign regulatory authorities. In the U.S., information that reasonably suggests that one or more of our products may have caused or contributed to a death or serious injury or malfunctioned in a way that, if the malfunction were to recur, it could cause or contribute to a death or serious injury must be reported to the FDA. The timing of our obligation to report is triggered by the date we become aware of the adverse event as well as the nature of the event. We may fail to report adverse events of which we become aware within the prescribed timeframe. We may also fail to recognize that we have become aware of a reportable adverse event, especially if it is not reported to us as an adverse event or if it is an adverse event that is unexpected or removed in time from the use of the product. If we fail to comply with our reporting obligations, the FDA and foreign regulatory authorities could take action, including warning letters, untitled letters, administrative actions, criminal prosecution, imposition of civil monetary penalties, revocation of our device approval or certification, seizure of our products or delay in clearance, approval or certification of future products. The FDA and foreign regulatory bodies have the authority to require the recall of commercialized products in the event of material deficiencies or defects in design or manufacture of a product or in the event that a product poses an unacceptable risk to health. The FDA's and foreign regulatory bodies' authority to require a recall must be based on a finding that there is reasonable probability that the device could cause serious adverse health consequences or death. We may also choose to voluntarily recall a product if any material deficiency is found. A government-mandated or voluntary recall by us could occur as a result of an unacceptable risk to health, component failures, malfunctions, manufacturing defects, labeling or design deficiencies, packaging defects or other deficiencies or failures to comply with applicable regulations. Product defects or other errors may occur in the future. Depending on the corrective action we take to redress a product's deficiencies or defects, the FDA or foreign regulatory authorities may require, or we may decide, that we will need to obtain new approvals for the device before we may market or distribute the corrected device. Seeking such approvals may delay our ability to replace the recalled devices in a timely manner. Moreover, if we do not adequately address problems associated with our devices, we may face additional regulatory enforcement action, including FDA or foreign regulatory authority warning letters, product seizure, injunctions, administrative penalties or civil or criminal fines. Companies are required to maintain certain records of recalls and corrections, even if they are not reportable to the FDA or foreign regulatory authorities. We may initiate voluntary withdrawals or corrections for our products in the future that we determine do not require notification to the FDA or foreign regulatory authorities. If the FDA or a foreign regulatory authority disagrees with our determinations, it could require us to report those actions as recalls and we may be subject to enforcement action. A future recall announcement could harm our reputation with customers, potentially lead to product liability claims against us and negatively affect our sales. Any corrective action, whether voluntary or involuntary, as well as defending ourselves in a lawsuit, will require the dedication of our time and capital, distract management from operating our business and may harm our reputation and financial results.

The methods used in, and the facilities used for, the manufacture of our products must comply with the FDA's Quality Management System Regulation ("QSMR") which directly incorporates ISO 13485 by reference to cover procedures and documentation of the design, testing, production, process controls, quality assurance, labeling, packaging, handling, storage, distribution, installation, servicing and shipping of medical devices. Furthermore, we are required to verify that our suppliers maintain facilities, procedures and operations that comply with our quality standards and applicable regulatory requirements. The FDA enforces the QSMR through periodic announced or unannounced inspections of medical device manufacturing facilities, which may include the facilities of subcontractors. Our products are also subject to similar state regulations and various laws and regulations of foreign countries governing manufacturing. Our third-party manufacturers may not take the necessary steps to comply with applicable regulations, which could cause delays in the delivery of our products. In addition, failure to comply with applicable FDA and foreign requirements or later discovery of previously unknown problems with our products or manufacturing processes could result in, among other things: warning letters or untitled letters; fines, injunctions or civil penalties; suspension or withdrawal of approvals or certifications; seizures or recalls of our products; total or partial suspension of production or distribution; administrative or judicially imposed sanctions; the FDA's or applicable foreign regulatory authority's or notified body's refusal to grant pending or future clearances, approvals or certifications for our products; clinical holds; refusal to permit the import or export of our products; and criminal prosecution of us or our employees. Any of these actions could significantly and negatively affect supply of our products. If any of these events occur, our reputation could be harmed, we could be exposed to product liability claims and we could lose customers and experience reduced sales and increased costs.