ImageneBio (IMA) Risk Analysis

In the ordinary course of business, we collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, transmit, and share (collectively, "process") personal data and other sensitive information, including proprietary and confidential business data, trade secrets, intellectual property, data we collect about trial participants in connection with clinical trials, and sensitive third-party data. Our data processing activities subject us to numerous data privacy and security obligations, such as various laws, regulations, guidance, industry standards, external and internal privacy and security policies, contractual requirements and other obligations relating to data privacy and security, including in connection with clinical trials in the United States and abroad. In the United States, federal state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, health information privacy laws, personal data privacy laws, consumer protection laws (e.g., Section 5 of the Federal Trade Commission Act), and other similar laws (e.g., wiretapping laws). For example, HIPAA imposes specific requirements relating to the privacy, security, and transmission of individually identifiable protected health information. In addition, we may obtain health information from third parties (including research institutions from which we obtain clinical trial data) which may be subject to privacy and security requirements under HIPAA. Depending on the facts and circumstances, we could be subject to significant penalties if we violate HIPAA. Numerous U.S. states have enacted comprehensive privacy laws that impose certain obligations on covered businesses, including providing specific disclosures in privacy notices and affording residents with certain rights concerning their personal data. As applicable, such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services. Certain states also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These state laws allow for statutory fines for noncompliance. For example, the California Consumer Privacy Act of 2018 ("CCPA") applies to personal data of consumers, business representatives, and employees who are California residents, and requires businesses to whom the CCPA applies to provide specific disclosures in privacy notices and honor requests of such individuals to exercise certain privacy rights. The CCPA provides for fines and allows private litigants affected by certain data breaches to recover significant statutory damages. The CCPA and other comprehensive U.S. state consumer privacy laws exempt some data processed in the context of clinical trials, but these developments further complicate compliance efforts, and increase legal risk and compliance costs for us and the third parties with whom we work (including our collaborators). Similar laws have passed and are being considered in several other states, as well as at the federal and local levels, and we expect more states to pass similar laws in the future. Regulators are also increasingly scrutinizing certain personal data transfers and have proposed and enacted certain data localization or transfer requirements. For example, the U.S. Department of Justice issued a rule entitled the Preventing Access to U.S. Sensitive Personal Data and Government-Related Data by Countries of Concern or Covered Persons, which places additional restriction on certain data transactions involving countries of concern (e.g., China, Russia, Iran) and covered persons (i.e., individuals and entities who are designated as such by the U.S. Attorney General or considered "foreign persons" and are majority owned by, organized under the laws of, a primary resident in, or a contractor of, a covered person or country of concern, as applicable) that impacts certain business activities such as vendor engagements, sale or sharing of data, employment of certain individuals, and investor agreements. Violations of the rule could lead to significant civil and criminal fines and penalties. The rule applies regardless of whether data is anonymized, key-coded, pseudonymized, de-identified or encrypted, which presents particular challenges for companies like ours that operate in the clinical trial space and impacts our ability to engage in transactions or agreements with certain third parties. Outside the United States, an increasing number of laws, regulations, and industry standards govern data privacy and security. For example, the European Union's General Data Protection Regulation ("EU GDPR"), the United Kingdom's GDPR ("UK GDPR") (collectively, "GDPR"), Brazil's General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or "LGPD") (Law No. 13,709/2018), Australia's Privacy Act, and China's Personal Information Protection Law ("PIPL") impose strict requirements for processing personal data. For example, under the GDPR, in the event of non-compliance, companies face temporary or definitive bans on data processing and other corrective actions; fines of up to 20 million Euros under the EU GDPR, 17.5 million pounds sterling under the UK GDPR or, in each case, 4% of annual global revenue, whichever is greater; and private litigation related to processing of personal data brought by classes of data subjects and consumer protection organizations authorized at law to represent their interests. In Canada, the Personal Information Protection and Electronic Documents Act ("PIPEDA") and various related provincial laws, as well as Canada's Anti-Spam Legislation ("CASL"), apply to our operations. Australia's Privacy Act also applies to our operations. We also conduct studies in Asia and are or may become subject to new and emerging data privacy regimes in Asia, including China's PIPL and Korea's Personal Information Protection Act ("PIPA"). For example, China's PIPL imposes a set of specific obligations on covered businesses in connection with their processing and transfer of personal data and imposes fines of up to RMB 50 million or 5% of the prior year's total annual revenue of the violator. India's new privacy legislation, the Digital Personal Data Protection Act ("DPDP"), may also apply to our operations. In the ordinary course of business, we transfer personal data from Europe and other jurisdictions to the United States and other countries. Europe and other jurisdictions have enacted laws requiring data to be localized or limiting the transfer of personal data to other countries. In particular, the European Economic Area ("EEA") and the UK have significantly restricted the transfer of personal data to the United States and other countries whose privacy laws it generally believes are inadequate. Other jurisdictions may adopt or have already adopted similarly stringent data localization and cross-border data transfer laws. Although there are currently various mechanisms that may be used to transfer personal data from the EEA and UK to the United States in compliance with law, such as the EEA standard contractual clauses, the UK's International Data Transfer Agreement / Addendum, and the EU-U.S. Data Privacy Framework and the UK extension thereto (which allows for transfers to relevant U.S.-based organizations who self-certify compliance and participate in the Framework), these mechanisms are subject to legal challenges, and there is no assurance that we can satisfy or rely on these measures to lawfully transfer personal data to the United States. If there is no lawful manner for us to transfer personal data from the EEA, the UK or other jurisdictions to the United States or other jurisdictions, or if the requirements for a legally-compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions (such as Europe) at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Additionally, companies that transfer personal data out of the EEA and UK to other jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups. Some European regulators have ordered certain companies to suspend or permanently cease certain transfers out of Europe for allegedly violating the GDPR's cross-border data transfer limitations. In addition to data privacy and security laws, we are and may become contractually subject to industry standards adopted by industry groups. We are also bound by contractual obligations related to data privacy and security, and our efforts to comply with such obligations may not be successful. Moreover, clinical trial subjects about whom we or the third parties with whom we work obtain information may contractually limit our ability to use and disclose such information. We publish privacy policies, marketing materials and other statements, concerning data privacy, and security. Regulators are increasingly scrutinizing these statements, and if these policies, materials or statements are found to be deficient, lacking in transparency, deceptive, unfair, misleading, or misrepresentative of our practices, we may be subject to investigation, enforcement actions by regulators or other adverse consequences. Our personnel use generative artificial intelligence ("AI") technologies to perform their work, and the disclosure and use of personal data in AI technologies is subject to various privacy laws and other privacy obligations. Governments have passed and are likely to pass additional laws and regulations regulating AI technologies. Our use of this technology could result in additional compliance costs, regulatory investigations and actions, and lawsuits. If we are unable to use AI and automated decision-making technologies, it could make our business less efficient and result in competitive disadvantages. Obligations related to data privacy and security (and individuals' data privacy expectations) are quickly changing, becoming increasingly stringent, and creating uncertainty. Additionally, these obligations may be subject to differing applications and interpretations, which may be inconsistent or conflict among jurisdictions. Preparing for and complying with these obligations requires us to devote significant resources, which may necessitate changes to our services, information technologies, systems and practices and to those of any third parties that process personal data on our behalf. We may at times fail (or be perceived to have failed) in our efforts to comply with our data privacy and security obligations. Moreover, despite our efforts, our personnel or third parties with whom we work may fail to comply with such obligations, which could negatively impact our business operations. If we, or the third parties with whom we work (including our collaborators and third-party providers) fail, or are perceived to have failed, to address or comply with applicable data privacy and security obligations, we could face significant consequences, including but not limited to: government enforcement actions (e.g., investigations, fines, penalties, audits, inspections, and similar); litigation (including class-action claims) and mass arbitration demands; additional reporting requirements and oversight; bans or restrictions on processing personal data; orders to destroy or not use personal data; and imprisonment of company officials. In particular, plaintiffs have become increasingly more active in bringing privacy-related claims against companies, including class claims and mass arbitration demands. Some of these claims allow for the recovery of statutory damages on a per violation basis, and, if viable, carry the potential for monumental statutory damages, depending on the volume of data and the number of violations. Any of these events could have a material adverse effect on our reputation, business, or financial condition, including but not limited to: loss of customers; interruptions or stoppages in our business operations (including, our clinical trials); inability to process personal data or to operate in certain jurisdictions; limited ability to develop or commercialize our products; expenditure of time and resources to defend any claim or inquiry; adverse publicity; or substantial changes to our business model or operations.

If we expand our operations outside of the United States, we must dedicate additional resources to comply with numerous laws and regulations in each jurisdiction in which we plan to operate. Our business activities may be subject to the FCPA and similar anti-bribery or anti-corruption laws, regulations or rules of other countries in which we operate. The FCPA generally prohibits companies and their employees and third party intermediaries from offering, promising, giving or authorizing the provision of anything of value, either directly or indirectly, to a non-U.S. government official in order to influence official action or otherwise obtain or retain business. The FCPA also requires public companies to make and keep books and records that accurately and fairly reflect the transactions of the corporation and to devise and maintain an adequate system of internal accounting controls. Our business is heavily regulated and therefore involves significant interaction with public officials, including officials of non-U.S. governments. Additionally, in many other countries, hospitals owned and operated by the government, and doctors and other hospital employees would be considered foreign officials under the FCPA. There is no certainty that all of our employees, agents or contractors, or those of our affiliates, will comply with all applicable laws and regulations, particularly given the high level of complexity of these laws. Violations of these laws and regulations could result in fines, criminal sanctions against us, our officers or our employees, disgorgement and other sanctions and remedial measures, and prohibitions on the conduct of our business. Any such violations could include prohibitions on our ability to offer our product in one or more countries and could materially damage our reputation, our brand, our international activities, our ability to attract and retain employees and our business. In addition, our product and activities may be subject to U.S. and foreign export controls, trade sanctions and import laws and regulations. Governmental regulation of the import or export of our product, or our failure to obtain any required import or export authorization for our product, when applicable, could harm our international sales and adversely affect our revenue. Compliance with applicable regulatory requirements regarding the export of our product may create delays in the introduction of our product in international markets or, in some cases, prevent the export of our product to some countries altogether. Furthermore, U.S. export control laws and economic sanctions prohibit the shipment of certain products and services to countries, governments and persons targeted by U.S. sanctions. If we fail to comply with export and import regulations and such economic sanctions, penalties could be imposed, including fines and denial of certain export privileges. Moreover, any new export or import restrictions, new legislation or shifting approaches in the enforcement or scope of existing regulations, or in the countries, persons, or product targeted by such regulations, could result in decreased use of our product by, or in our decreased ability to export our product to existing or potential customers with international operations. Any decreased use of our product or limitation on our ability to export or sell access to our product would likely significantly harm our business, financial condition, results of operations and prospects.

With respect to foreign investments, transactions in which we participate may be subject to U.S. laws that regulate foreign investments in and other transactions with U.S. businesses. These laws include Section 721 of the Defense Production Act of 1950, as amended by the Foreign Investment Risk Review Modernization Act of 2018, and the implementing regulations thereof administered by the Committee on Foreign Investment in the United States ("CFIUS") and codified at 31 C.F.R. Part 800 (the "CFIUS Regulations"). The CFIUS Regulations authorize CFIUS to review certain foreign investments in and acquisitions of U.S. businesses, and to prohibit, modify, or unwind transactions subject to CFIUS jurisdiction in the event the transaction is determined to raise national security concerns. With respect to U.S. investment transactions, certain of our activities may be subject to the Outbound Investment Security Program ("OISP") implemented to effectuate Executive Order 14105, administered by the Department of the Treasury, and codified at 31 C.F.R. Part 850 (the "OISP Regulations"). The OISP Regulations prohibit or require notification to the Department of the Treasury of certain transactions involving U.S. persons and persons with a qualifying nexus to China (including Hong Kong and Macau) that are engaged in specified activities in the semiconductors and microelectronics, quantum information technology, and AI sectors. Application of these laws may negatively impact our business in various ways, including by restricting our access to capital and markets; limiting mergers and acquisitions, investments, or collaborations we may pursue; increasing our costs and the time necessary to obtain required authorizations and to ensure compliance; and threatening monetary fines, government investigations, business disruption, reputation harm, and other penalties if we do not.

Healthcare professionals and third-party payors in the United States and elsewhere will play a primary role in the recommendation and prescription of IMG-007 or any future product candidates for which we obtain marketing approval. Our current and future arrangements with healthcare professionals, third-party payors, customers and others may expose us to broadly applicable fraud and abuse and other healthcare laws and regulations. These laws may impact, among other things, our clinical research program, as well as our proposed and future sales, marketing and education programs. In particular, the promotion, sales and marketing of healthcare items and services is subject to extensive laws and regulations designed to prevent fraud, kickbacks, self-dealing and other abusive practices. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, sales commission, customer incentive and other business arrangements. We may also be subject to federal, state and foreign laws governing the privacy and security of identifiable patient information. The U.S. healthcare laws and regulations that may affect our ability to operate include, but are not limited to: - the federal Anti-Kickback Statute, which prohibits, among other things, any person or entity from knowingly and willfully, offering, paying, soliciting or receiving any remuneration, directly or indirectly, overtly or covertly, in cash or in kind, to induce, or in return for, the purchasing, leasing, ordering or arranging for the purchase, lease, or order of any item or service reimbursable, in whole or in part, under Medicare, Medicaid or other federal healthcare programs. The term "remuneration" has been broadly interpreted to include anything of value. Although there are a number of statutory exceptions and regulatory safe harbors protecting some common activities from prosecution, the exceptions and safe harbors are drawn narrowly and require strict compliance in order to offer protection. Practices that may be alleged to be intended to induce prescribing, purchases or recommendations, including any payments of more than fair market value,may be subject to scrutiny if they do not qualify for an exception or safe harbor. In addition, a person or entity does not need to have actual knowledge of this statute or specific intent to violate it in order to have committed a violation;- federal civil and criminal false claims laws, including the federal civil False Claims Act ("FCA") and civil monetary penalties laws, which prohibit, among other things, individuals or entities from knowingly presenting, or causing to be presented, claims for payment or approval from Medicare, Medicaid, or other federal government programs that are false or fraudulent or knowingly making a false statement to improperly avoid, decrease or conceal an obligation to pay money to the federal government, including federal healthcare programs. In addition, the government may assert that a claim including items or services resulting from a violation of the federal Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the FCA. Private individuals, commonly known as "whistleblowers," can bring federal civil FCA qui tam actions, on behalf of the government and such individuals and may share in amounts paid by the entity to the government in recovery or settlement;- the Health Insurance Portability and Accountability Act ("HIPAA"), which created new federal criminal statutes that prohibit knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program or obtain, by means of false or fraudulent pretenses, representations, or promises, any of the money or property owned by, or under the custody or control of, any healthcare benefit program, including private third-party payors and knowingly and willfully falsifying, concealing or covering up by any trick, scheme or device, a material fact or making any materially false, fictitious or fraudulent statements in connection with the delivery of, or payment for, healthcare benefits, items or services. Similar to the federal Anti-Kickback Statute, a person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation;- HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act ("HITECH"), and their respective implementing regulations, which impose requirements on covered entities, including certain healthcare providers, health plans and healthcare clearinghouses, and their respective business associates that perform services for them that involve creating, receiving maintaining or transmitting protected health information ("PHI") and their subcontractors that use, disclose, access, or otherwise process PHI, relating to the privacy, security and transmission of individually identifiable health information. Penalties for HIPAA violations can be significant. They vary greatly depending on the nature of violation, and could include civil monetary or criminal penalties. HIPAA also authorizes state attorneys general to file suit under HIPAA on behalf of state residents. Courts can award damages, costs and attorneys' fees related to violations of HIPAA in such cases. While HIPAA does not create a private right of action allowing individuals to sue us in civil court for HIPAA violations, its standards have been used as the basis for a duty of care claim in state civil suits such as those for negligence or recklessness in the misuse or breach of PHI;- the federal Physician Payments Sunshine Act, which requires certain manufacturers of drugs, devices, biologicals and medical supplies for which payment is available under Medicare, Medicaid or the Children's Health Insurance Program (with certain exceptions) to report annually to CMS information related to payments or other transfers of value made to physicians (defined to include doctors, dentists, optometrists, podiatrists and chiropractors), certain non-physician practitioners (physician assistants, nurse practitioners, clinical nurse specialists, certified registered nurse anesthetists and anesthesiologist assistants, and certified nurse midwives), and teaching hospitals, as well as ownership and investment interests held by physicians and their immediate family members; and - federal consumer protection and unfair competition laws, which broadly regulate marketplace activities and activities that potentially harm consumers. Additionally, we may be subject to state, local and foreign equivalents of each of the healthcare laws described above, among others, some of which may be broader in scope. For example, in the EU, interactions between pharmaceutical companies and healthcare professionals and healthcare organizations are also governed by strict laws, regulations, industry self-regulation codes of conduct and physicians' codes of professional conduct both at EU level and in the individual EU Member States. The provision of benefits or advantages to physicians to induce or encourage the prescription, recommendation, endorsement, purchase, supply, order or use of pharmaceutical products is prohibited in the EU. Relationships with healthcare professionals and associations are subject to stringent anti-gift statutes and anti-bribery laws, the scope of which differs across the EU. In addition, national "Sunshine Acts" may require pharmaceutical companies to report/publish transfers of value provided to healthcare professionals and associations on a regular (e.g., annual) basis. Also, we may be subject to the following: state laws that require certain regulatory licenses to manufacture or distribute products commercially and/or the registration of pharmaceutical sales representatives in the jurisdiction; state and foreign anti-kickback and false claims laws that may apply to sales or marketing arrangements and claims involving healthcare items or services reimbursed by non-governmental, third-party payors, including private insurers, or that apply regardless of payor; state and foreign laws that require pharmaceutical companies to comply with the pharmaceutical industry's voluntary compliance guidelines and the relevant compliance guidance promulgated by the federal government; state and local laws that require drug manufacturers to report information related to payments and other transfers of value to physicians and other healthcare professionals or marketing expenditures; state and foreign laws that require the reporting of information related to drug pricing; and state and foreign laws governing the privacy and security of health information in some circumstances, many of which differ from each other in significant ways and often are not preempted by HIPAA, thus complicating compliance efforts. Because of the breadth of these laws and the narrowness of the statutory exceptions and regulatory safe harbors available, it is possible that some of our business activities could be subject to challenge under one or more of such laws. If we or our employees, independent contractors, consultants, commercial partners and vendors violate these laws, we may be subject to investigations, enforcement actions and significant penalties. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business, including the imposition of significant civil, criminal and administrative penalties, damages, disgorgement, monetary fines, imprisonment, possible exclusion from participation in Medicare, Medicaid and other federal healthcare programs, contractual damages, reputational harm, diminished profits and future earnings, additional reporting requirements and oversight if we become subject to a corporate integrity agreement or similar agreement to resolve allegations of non-compliance with these laws, and curtailment of our operations, any of which could adversely affect our ability to operate our business and our results of operations. In addition, the approval and commercialization of any of IMG-007 or any future product candidates outside the United States will also likely subject us to foreign equivalents of the healthcare laws mentioned above, among other foreign laws.

The Biologics Price Competition and Innovation Act of 2009 ("BPCIA") established an abbreviated pathway for the approval of biosimilar and interchangeable biological products. The regulatory pathway establishes legal authority for the FDA to review and approve biosimilar biologics, including the possible designation of a biosimilar as "interchangeable" based on its similarity to an approved biologic. Under the BPCIA, an application for a biosimilar product cannot be approved by the FDA until 12 years after the reference product was approved under a BLA. We believe that any of the product candidates we develop that is approved in the United States under a BLA should qualify for the 12-year period of exclusivity. However, there is a risk that this exclusivity could be shortened due to congressional action or otherwise, or that the FDA will not consider the subject product candidates to be reference products for competing products, potentially creating the opportunity for generic competition sooner than anticipated. In the EU, there is a special regime for biosimilars, or biological medicinal products that are similar to a reference medicinal product but that do not meet the definition of a generic medicinal product. For such products, the results of appropriate preclinical or clinical trials must be provided in support of an application for MA. Guidelines from the EMA detail the type of quantity of supplementary data to be provided for different types of biological product. The approval of a biosimilar to one of our products could have a material adverse impact on our business as it may be significantly less costly to bring to market and may be priced significantly lower than our products.

The use of IMG-007 for the treatment of moderate-to-severe AD, or other potential indications or any of our future product candidates may not become broadly accepted by physicians, patients, hospitals and others in the medical community. Factors that will influence whether IMG-007 or any future product candidates are accepted in the market include: - the clinical indications for which IMG-007 or any future product candidates are approved;- physicians, hospitals and patients considering IMG-007 or any future product candidates as a safe and effective treatment;- the potential and perceived advantages of IMG-007 or any future product candidates over alternative treatments;- the incidence and severity of any side effects;- product labeling or product insert requirements of the FDA or comparable foreign regulatory authorities;- limitations or warnings contained in the labeling approved by the FDA or comparable foreign regulatory authorities;- the timing of market introduction of IMG-007 or any future product candidates as well as competitive products;- the cost of treatment in relation to alternative treatments;- our pricing and the availability of coverage and adequate reimbursement by third-party payors, including government authorities;- the willingness of patients to pay out-of-pocket in the absence of coverage and adequate reimbursement by third-party payors, including government authorities;- relative convenience, frequency and ease of administration, including as compared to alternative treatments and competitive therapies; and - the effectiveness of our sales and marketing efforts. If IMG-007 or any future product candidates are approved but fail to achieve market acceptance among physicians, patients, hospitals or others in the medical community, we will not be able to generate significant revenue. Even if our products achieve market acceptance, we may not be able to maintain that market acceptance over time if new products or technologies are introduced that are more favorably received than our products, are more cost effective or render our products obsolete.

We may seek various designations by regulatory authorities, such as Fast Track Designation or PRIority MEdicine ("PRIME") Designation from regulatory authorities, for IMG-007 or any future product candidates that we develop. If a drug is intended for the treatment of a serious or life-threatening condition or disease, and nonclinical or clinical data demonstrate the potential to address an unmet medical need, the product may qualify for Fast Track Designation, for which sponsors must apply. The FDA has broad discretion whether or not to grant this designation. If granted, fast track designation makes a drug eligible for more frequent interactions with FDA to discuss the development plan and clinical trial design, as well as rolling review of the application, which means that the company can submit completed sections of its marketing application for review prior to completion of the entire submission. Products with Fast Track designation may also be eligible for accelerated approval and priority review, if the relevant criteria are met. Innovative products that target an unmet medical need and are expected to be of major public health interest may be eligible for a number of expedited development and review programs, such as the PRIME scheme, which provides incentives similar to the breakthrough therapy designation in the U.S. PRIME is a voluntary scheme aimed at enhancing the EMA's support for the development of medicinal products that target unmet medical needs. Eligible products must target conditions for which there is an unmet medical need (there is no satisfactory method of diagnosis, prevention or treatment in the EU or, if there is, the new medicinal product will bring a major therapeutic advantage) and they must demonstrate the potential to address the unmet medical need by introducing new methods of therapy or improving existing ones. Benefits accrue to sponsors of product candidates with PRIME designation, including but not limited to, early and proactive regulatory dialogue with the EMA, frequent discussions on clinical trial designs and other development program elements, and potentially accelerated MAA assessment once a dossier has been submitted. Seeking and obtaining these designations is dependent upon results of our clinical program, and we cannot guarantee whether and when we may have the data from our clinical program to support an application to obtain any such designation. The FDA and the EMA, as applicable, have broad discretion whether or not to grant any of these designations, so even if we believe a particular product candidate is eligible for one or more of these designations, the applicable regulatory authority may determine not to grant it. Even if we do receive the designations we may apply for, we may not experience a faster development process, review or approval compared to conventional FDA or EMA procedures, as applicable. The FDA or EU, as applicable, may rescind any granted designations if it believes that the designation is no longer supported by data from our clinical development program. Additionally, qualification for any expedited review procedure does not ensure that we will ultimately obtain regulatory approval for such product candidate.

Obtaining and maintaining regulatory approval of IMG-007 or any future product candidates in one jurisdiction does not guarantee that we will be able to obtain or maintain regulatory approval in any other jurisdiction, while a failure or delay in obtaining regulatory approval in one jurisdiction may have a negative effect on the regulatory approval process in others. For example, even if the FDA grants marketing approval of a product candidate, comparable foreign regulatory authorities in foreign jurisdictions must also approve the manufacturing, marketing and promotion of the product candidate in those countries. Approval procedures vary among jurisdictions and can involve requirements and administrative review periods different from, and greater than, those in the United States, including additional preclinical studies or clinical trials as clinical studies conducted in one jurisdiction may not be accepted by regulatory authorities in other jurisdictions. In many jurisdictions outside the United States, a product candidate must be approved for reimbursement before it can be approved for sale in that jurisdiction. In some cases, the price that we intend to charge for our products is also subject to approval. We may also submit marketing applications in other countries. Regulatory authorities in jurisdictions outside of the United States have requirements for approval of product candidates with which we must comply prior to marketing in those jurisdictions. Obtaining foreign regulatory approvals and compliance with foreign regulatory requirements could result in significant delays, difficulties and costs for us and could delay or prevent the introduction of our products in certain countries. If we fail to comply with the regulatory requirements in international markets and receive applicable marketing approvals, our target market will be reduced and our ability to realize the full market potential of IMG-007 and any future product candidates will be harmed.

Any regulatory approvals that we receive for IMG-007 or any future product candidates will require surveillance to monitor the safety and efficacy of such product candidate. The FDA may also require a REMS in order to approve IMG-007 or any future product candidates, which could entail requirements for a medication guide, physician communication plans or additional elements to ensure safe use, such as restricted distribution methods, patient registries and other risk minimization tools. In addition, if the FDA or a comparable foreign regulatory authority approves IMG-007 or any future product candidates, the manufacturing processes, labeling, packaging, distribution, adverse event reporting, storage, advertising, promotion, import, export and recordkeeping for IMG-007 or any future product candidates will be subject to extensive and ongoing regulatory requirements. These requirements include submissions of safety and other post-marketing information and reports, registration, as well as continued compliance with cGMPs and GCPs for any clinical trials that we conduct post-approval. As such, we and our contract manufacturers will be subject to continual review and inspections to assess compliance with cGMP and adherence to commitments made in any BLA, other marketing application and previous responses to inspectional observations. Accordingly, we and others with whom we work must continue to expend time, money and effort in all areas of regulatory compliance, including manufacturing, production and quality control. In addition, the FDA or comparable foreign regulatory authorities could require us to conduct another study to obtain additional safety or biomarker information. Further, we will be required to comply with FDA and comparable foreign regulatory authorities' promotion and advertising rules, which include, among others, standards for direct-to-consumer advertising, restrictions on promoting products for uses or in patient populations that are not described in the product's approved uses (known as "off-label use"), limitations on industry-sponsored scientific and educational activities and requirements for promotional activities involving the internet and social media. Although the FDA and comparable foreign regulatory authorities do not regulate a physician's choice of drug treatment made in the physician's independent medical judgment, they do restrict promotional communications from companies or their sales force with respect to off-label uses of products for which marketing clearance has not been issued. Later discovery of previously unknown problems with IMG-007 or any future product candidates, including adverse events of unanticipated severity or frequency, or with our third-party suppliers or manufacturing processes, or failure to comply with regulatory requirements, may result in revisions to the approved labeling to add new safety information; imposition of post-market studies or clinical studies to assess new safety risks; or imposition of distribution restrictions or other restrictions under a REMS or similar foreign program. Other potential consequences include, among other things: - restrictions on the marketing or manufacturing of IMG-007 or any future product candidates, withdrawal of the product from the market or voluntary or mandatory product recalls;- fines, untitled letters, warning letters or holds on clinical trials;- the FDA or comparable foreign regulatory authority may require revisions to the labeling, including limitations on approved uses or the addition of additional warnings, contraindications or other safety information, including boxed warnings;- the FDA or comparable foreign regulatory authority may require the conduct of an additional post-market clinical trial or trials to assess the safety of the product;- refusal by the FDA or comparable foreign regulatory authority to approve pending applications or supplements to approved applications submitted by us or suspension or revocation of license approvals;- product seizure or detention, or refusal to permit the import or export of IMG-007 or any future product candidates; and - injunctions or the imposition of civil or criminal penalties. FDA and comparable foreign regulatory authorities' policies may change and additional government regulations may be enacted that could prevent, limit or delay regulatory approval of IMG-007 or any future product candidates. For example, the U.S. Supreme Court's June 2024 decision in Loper Bright Enterprises v. Raimondo overturned the longstanding Chevron doctrine, under which courts were required to give deference to regulatory agencies' reasonable interpretations of ambiguous federal statutes. The Loper decision could result in additional legal challenges to regulations and decisions issued by federal agencies, including the FDA, on which we rely. Any such legal challenges, if successful, could have a material impact on our business. Additionally, the Loper decision may result in increased regulatory uncertainty, inconsistent judicial interpretations, and other impacts to the agency rulemaking process, any of which could adversely impact our business and operations. We cannot predict the likelihood, nature or extent of government regulation that may arise from future legislation or administrative or executive action, either in the United States or abroad. Certain policies of any administration may impact our business and industry. If we are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are not able to maintain regulatory compliance, we may lose any marketing approval that we may have obtained and we may not achieve or sustain profitability.

The research, testing, manufacturing, labeling, approval, selling, import, export, marketing, and distribution of drug products, including biologics, are subject to extensive regulation by the FDA and comparable foreign regulatory authorities in and outside the United States. We are not permitted to market any biological drug product in the United States or outside the United States until we receive approval of a BLA from the FDA or similar approvals from comparable foreign regulatory authorities. We have not previously submitted a BLA to the FDA, or similar approval filings to comparable foreign authorities. A BLA and similar applications must include extensive preclinical and clinical data and supporting information to establish the product candidate's safety and effectiveness for each desired indication. The BLA and similar applications must also include significant information regarding the chemistry, manufacturing and controls for the product, including with respect to chain of identity and chain of custody of the product. IMG-007 or any future product candidates could fail to receive regulatory approval from the FDA or a comparable foreign regulatory authority for many reasons, including: - disagreement with the design or conduct of our clinical trials;- failure to demonstrate to the satisfaction of regulatory authorities that IMG-007 or any future product candidates are safe and effective, or have a positive benefit/risk profile for its proposed indication;- failure of clinical trials to meet the level of statistical significance required for approval;- disagreement with our interpretation of data from preclinical studies or clinical trials;- the insufficiency of data collected from clinical trials of IMG-007 or any future product candidates to support the submission and filing of a BLA or other submission or to obtain regulatory approval;- failure to obtain approval of our manufacturing processes or facilities of third-party manufacturers with whom we contract for clinical and commercial supplies or our own manufacturing facility; or - changes in the approval policies or regulations that render our preclinical and clinical data insufficient for approval. This lengthy approval process as well as the unpredictability of future clinical trial results may result in our failing to obtain regulatory approval to market IMG-007 or any future product candidates, which would significantly harm our business, results of operations and prospects. The FDA or a comparable foreign regulatory authority may require more information, including additional preclinical or clinical data to support approval, which may delay or prevent approval and our commercialization plans, or we may decide to abandon the development program. If we were to obtain approval, regulatory authorities may approve IMG-007 or any future product candidates for fewer or more limited indications than we request (including failing to approve the most commercially promising indications), may grant approval contingent on the performance of costly post-marketing clinical studies, or may approve a product candidate with a label that does not include the labeling claims necessary or desirable for the successful commercialization of that product candidate. Even if IMG-007 or any future product candidates meet their safety and efficacy endpoints in clinical trials, the regulatory authorities may not complete their review processes in a timely manner, or we may not be able to obtain regulatory approval. The FDA may also require a panel of experts, referred to as an "Advisory Committee," to deliberate on the adequacy of the safety and efficacy data to support licensure. The opinion of the Advisory Committee, although not binding, may have a significant impact on our ability to obtain licensure of the product candidates based on the completed clinical trials, as the FDA often adheres to the Advisory Committee's recommendations. Similar requirements may apply outside the United States. In addition, we may experience delays or rejections based upon additional government regulation from future legislation or administrative action, or changes in regulatory authority policy during the period of product development, clinical trials and the review process. Accordingly, the regulatory approval pathway for IMG-007 or any future product candidates may be uncertain, complex, expensive and lengthy, and approval may not be obtained. For instance, the regulatory landscape related to clinical trials in the EU recently evolved. The EU Clinical Trials Regulation ("CTR"), which was adopted in April 2014 and repeals the EU Clinical Trials Directive, became applicable on January 31, 2022. The CTR allows sponsors to make a single submission to both the competent authority and an ethics committee in each EU Member State, leading to a single decision for each EU Member State. The assessment procedure for the authorization of clinical trials has been harmonized as well, including a joint assessment by all EU Member States concerned, and a separate assessment by each EU Member State with respect to specific requirements related to its own territory, including ethics rules. Each EU Member State's decision is communicated to the sponsor via the centralized EU portal. Once the clinical trial is approved, clinical study development may proceed. The CTR foresees a three-year transition period. On January 31, 2025, all ongoing trials became subject to the provisions of the CTR. Compliance with the CTR requirements by us and our third-party service providers, such as CROs, may impact our developments plans. In addition, the EU pharmaceutical legislation is currently the subject of proposals for a complete review, in the context of the Pharmaceutical Strategy for Europe initiative, launched by the European Commission in November 2020. On April 26, 2023, the European Commission adopted a proposal for a new Directive and Regulation to revise the existing pharmaceutical legislation. If adopted in the form proposed, the recent European Commission proposals to revise the existing EU laws governing authorization of medicinal products may result in a decrease in data and market exclusivity opportunities for our product candidates in the EU and make them open to generic or biosimilar competition earlier than is currently the case with a related reduction in reimbursement status. The proposed revisions remain to be agreed and adopted by the European Parliament and European Council and the proposals may therefore be substantially revised before adoption, the date of which cannot currently be anticipated. The revisions may however have a significant impact on the pharmaceutical industry and our business in the long term. Regulatory authorities also may approve a product candidate for more limited indications than requested or they may impose significant limitations in the form of narrow indications, warnings or a REMS or comparable foreign strategies. These regulatory authorities may require labeling that includes precautions or contra-indications with respect to conditions of use, or they may grant approval subject to the performance of costly post-marketing clinical trials. In addition, regulatory authorities may not approve the labeling claims that are necessary or desirable for the successful commercialization of our product candidates. Any of the foregoing scenarios could materially harm the commercial prospects for our product candidates and materially adversely affect our business, financial condition, results of operations and prospects.

We currently operate in a number of jurisdictions in a highly regulated industry, and we could be subject to litigation, government investigation and enforcement actions on a variety of matters in the United States or foreign jurisdictions, including, without limitation, intellectual property, regulatory, product liability, environmental, whistleblower, false claims, data privacy and security, anti-kickback, anti-bribery, securities, commercial, employment and other claims and legal proceedings that may arise from conducting our business. Any determination that our operations or activities are not in compliance with existing laws or regulations could result in the imposition of fines, civil and criminal penalties, equitable remedies, including disgorgement, injunctive relief or other sanctions against us, and remediation of any such findings could have an adverse effect on our business operations. Legal proceedings, government investigations and enforcement actions can be expensive and time-consuming. An adverse outcome resulting from any such proceedings, investigations or enforcement actions could result in significant damages awards, fines, penalties, exclusion from the federal healthcare programs, healthcare debarment, injunctive relief, product recalls, reputational damage and modifications of our business practices, which could have a material adverse effect on our business and results of operations. Even if such a proceeding, investigation, or enforcement action is ultimately decided in our favor, the investigation and defense thereof could require substantial financial and management resources.

The market price of our common stock could be subject to significant fluctuations. Market prices for securities of early-stage pharmaceutical, biotechnology and other life sciences companies have historically been particularly volatile. Some of the factors that may cause the market price of our common stock to fluctuate include: - our ability to obtain regulatory approvals for IMG-007 and any future product candidates, and delays or failures to obtain such approvals;- failure of IMG-007 or any of our future product candidates, if approved, to achieve commercial success;- failure by us to maintain our existing third-party license and supply agreements;- failure by us or our licensors to prosecute, maintain, or enforce our intellectual property rights;- changes in laws or regulations applicable to IMG-007 or our future product candidates;- any inability to obtain adequate supply of IMG-007 or our future product candidates or the inability to do so at acceptable prices;- adverse regulatory authority decisions;- introduction of new products, services or technologies by our competitors;- failure to meet or exceed financial and development projections we may provide to the public;- failure to meet or exceed the financial and development projections of the investment community;- the perception of the pharmaceutical industry by the public, legislatures, regulators and the investment community;- announcements of significant acquisitions, strategic collaborations, joint ventures or capital commitments by us or our competitors;- disputes or other developments relating to proprietary rights, including patents, litigation matters, and our ability to obtain patent protection for our technologies;- additions or departures of key personnel;- significant lawsuits, including patent or stockholder litigation;- if securities or industry analysts do not publish research or reports about our business, or if they issue an adverse or misleading opinion regarding our business and stock;- changes in the market valuations of similar companies;- general market or macroeconomic conditions;- sales of our common stock by us or our stockholders in the future;- trading volume of our common stock;- failure to maintain compliance with the listing requirements of The Nasdaq Capital Market;- announcements by commercial partners or competitors of new commercial products, clinical progress or the lack thereof, significant contracts, commercial relationships or capital commitments;- adverse publicity generally, including with respect to other products and potential products in such markets;- the introduction of technological innovations or new therapies that compete with our potential products;- changes in the structure of health care payment systems; and - period-to-period fluctuations in our financial results. Moreover, the stock markets in general have experienced substantial volatility that has often been unrelated to the operating performance of individual companies. These broad market fluctuations may also adversely affect the trading price of our common stock. In the past, following periods of volatility in the market price of a company's securities, stockholders have often instituted class action securities litigation against those companies. Such litigation, if instituted, could result in substantial costs and diversion of management attention and resources, which could significantly harm our profitability and reputation. Additionally, a decrease in our stock price may cause our common stock to no longer satisfy the continued listing standards of Nasdaq. If we are not able to maintain the requirements for listing on Nasdaq, we could be delisted, which could have a materially adverse effect on our ability to raise additional funds as well as the price and liquidity of our common stock.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws may delay or prevent an acquisition or a change in management. In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the General Corporation Law of the State of Delaware (the "DGCL"), which prohibits stockholders owning in excess of 15% of our outstanding voting stock from merging or combining with us. Although we believe these provisions collectively will provide for an opportunity to receive higher bids by requiring potential acquirors to negotiate with our board of directors, they would apply even if the offer may be considered beneficial by some stockholders. In addition, these provisions may frustrate or prevent any attempts by our stockholders to replace or remove then current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of management.

Prior to the Merger, there had been no public market for the Legacy Inmagene shares. An active trading market for our shares of common stock may never develop or be sustained. If an active market for our common stock does not develop or is not sustained, it may be difficult for our stockholders to sell their shares at an attractive price or at all.

If existing stockholders sell, or indicate an intention to sell, substantial amounts of our common stock in the public market, or there is the perception that these sales could occur, this could adversely affect the market price of such shares and could materially impair our ability to raise capital through equity offerings in the future. We cannot predict what effect, if any, sales of our shares in the public market or the availability of shares for sale would have on the market price of our common stock. However, future sales of substantial amounts of our common stock in the public market, including shares issued upon exercise of outstanding options, or the perception that such sales may occur, could adversely affect the market price of our common stock.

We are subject to the reporting requirements of the Exchange Act, the Sarbanes-Oxley Act and the rules and regulations of Nasdaq. The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. We must perform system and process evaluation and testing of our internal control over financial reporting to allow management to report on the effectiveness of our internal controls over financial reporting in our Annual Report on Form 10-K filing for that year, as required by Section 404 of the Sarbanes-Oxley Act. As a private company, Legacy Inmagene was never required to test its internal controls within a specified period. As a public company, we will need to incur substantial professional fees and internal costs to expand our accounting and finance functions and expend significant management efforts. We may discover weaknesses in our system of internal financial and accounting controls and procedures that could result in a material misstatement of our financial statements. Our internal control over financial reporting will not prevent or detect all errors and all fraud. A control system, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the control system's objectives will be met. The inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by an unauthorized override of the controls. Because of these inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud will be detected. If we are not able to comply with the requirements of Section 404 of the Sarbanes-Oxley Act, or if we are unable to maintain proper and effective internal controls, we may not be able to produce timely and accurate financial statements. If that were to happen, the market price of our common stock could decline and we could be subject to sanctions or investigations by Nasdaq, the SEC or other regulatory authorities.

As of December 31, 2025, we had U.S. federal net operating loss ("NOL") carryforwards and state NOL carryforwards of $267.0 million and $81.5 million, respectively. Under current law, U.S. federal NOL carryforwards generated in taxable periods beginning after December 31, 2017, may be carried forward indefinitely, but the deductibility of such NOL carryforwards is limited to 80% of taxable income. It is uncertain if and to what extent various states will conform to federal law. In addition, under Sections 382 and 383 of the Internal Revenue Code of 1986, as amended (the "Code"), federal NOL carryforwards and other tax attributes may become subject to an annual limitation in the event of certain cumulative changes in ownership. An "ownership change" pursuant to Section 382 of the Code generally occurs if one or more stockholders or groups of stockholders who own at least 5% of a company's stock increase their ownership by more than 50 percentage points over their lowest ownership percentage within a rolling three-year period. Our ability to utilize our NOL carryforwards and other tax attributes to offset future taxable income or tax liabilities may be limited as a result of ownership changes, including potential changes in connection with the Merger or other transactions. Similar rules may apply under state tax laws. If we earn taxable income, such limitations could result in increased future income tax liability to us, and our future cash flows could be adversely affected.

We are a clinical-stage biopharmaceutical company with a limited operating history. Our operations to date have focused on organizing and staffing our operations, business planning, raising capital, establishing our intellectual property portfolio and conducting preclinical studies and clinical trials of IMG-007. We have not yet demonstrated an ability to successfully manufacture, obtain marketing approvals for or commercialize IMG-007. We have no products approved for commercial sale and have not generated any revenue from product sales. Consequently, any predictions about our future success or viability may not be as accurate as they could be if we had a longer operating history. We are focused on the discovery and development of innovative drugs for the treatment of various immunological, autoimmune and inflammatory diseases. Our limited operating history, particularly in light of the rapidly evolving drug research and development industry in which we operate and the changing regulatory and market environments we encounter, may make it difficult to evaluate our prospects for future performance. As a result, any assessment of our future performance or viability is subject to significant uncertainty. We will encounter risks and difficulties frequently experienced by early-stage companies in rapidly evolving fields as we seek to transition to a company capable of supporting commercial activities. If we do not address these risks and difficulties successfully, our business will suffer.

Misconduct by our employees and independent contractors, including consultants, vendors and any third parties we may engage in connection with development and commercialization, could include intentional, reckless or negligent conduct or unauthorized activities that violate: (i) the laws and regulations of the FDA, EU and comparable foreign regulatory authorities, including those laws that require the reporting of true, complete and accurate information to such authorities; (ii) manufacturing standards; (iii) data privacy and security laws, and fraud and abuse and other healthcare laws and regulations; or (iv) other laws that require the reporting of true, complete and accurate financial information and data. Specifically, sales, marketing and business arrangements in the healthcare industry are subject to extensive laws and regulations intended to prevent fraud, misconduct, kickbacks, self-dealing and other abusive practices. These laws and regulations may restrict or prohibit a wide range of pricing, discounting, marketing and promotion, sales commission, customer incentive programs and other business arrangements. Activities subject to these laws could also involve the improper use or misrepresentation of information obtained in the course of clinical trials, creation of fraudulent data in preclinical studies or clinical trials or illegal misappropriation of drug product, which could result in regulatory sanctions and cause serious harm to our reputation. It is not always possible to identify and deter misconduct by employees and other third parties, and the precautions we take to detect and prevent this activity may not be effective in controlling unknown or unmanaged risks or losses or in protecting us from governmental investigations or other actions or lawsuits stemming from a failure to comply with such laws or regulations. Additionally, we are subject to the risk that a person or government could allege fraud or other misconduct, even if none occurred. If any such actions are instituted against us, and we are not successful in defending ourselves or asserting our rights, those actions could have a significant impact on our business and results of operations, including the imposition of significant civil, criminal and administrative penalties, damages, monetary fines, disgorgements, possible exclusion from participation in Medicare, Medicaid, other U.S. federal healthcare programs or healthcare programs in other jurisdictions, integrity oversight and reporting obligations to resolve allegations of non-compliance, imprisonment, other sanctions, contractual damages, reputational harm, diminished profits and future earnings and curtailment of our operations.

We obtain certain active pharmaceutical ingredients, drug product and certain other research materials in countries affected by macroeconomic events and conditions, including inflation, interest rate fluctuations, uncertainty with respect to the federal budget and debt ceiling and potential government shutdowns related thereto, increasing financial market volatility and uncertainty, the impact of war or military conflict, including regional conflicts around the world, and public health pandemics. Supply chain disruptions and delays as a result of any new tariff policies or trade restrictions could also negatively impact our cost of materials and production processes. If we are unable to obtain our active pharmaceutical ingredients, drug product or other certain research materials in sufficient quantity and in a timely manner due to disruptions in the global supply chain caused by macroeconomic events and conditions, the development, testing and clinical trials of that drug candidate may be delayed or infeasible, and regulatory approval or commercial launch of any resulting product may be delayed or not obtained, which could significantly harm our business.