Niagen Bioscience (NAGE) Risk Analysis

New income, sales, use or other tax laws, statutes, rules, regulations or ordinances could be enacted at any time, which could adversely affect our business operations and financial performance. Further, existing tax laws, statutes, rules, regulations or ordinances could be interpreted, changed, modified or applied adversely to us. For example, the Trump administration and Congress have proposed various U.S. federal tax law changes, which if enacted could have a material impact on our business, cash flows, financial condition or results of operations. In addition, it is uncertain if and to what extent various states will conform to federal tax laws. Future tax reform legislation could have a material impact on the value of our deferred tax assets, could result in significant one-time charges, and could increase our future U.S. tax expense.

We believe the dietary supplement and intravenous therapies market are highly dependent upon consumer perception regarding the safety, efficacy and quality of dietary supplements generally, as well as of products distributed specifically by us. Consumer perception of our products can be significantly influenced by scientific research or findings, regulatory investigations, litigation, national media attention, social media and other publicity regarding the consumption of dietary supplements. We cannot assure you that future scientific research, findings, regulatory proceedings, litigation, media attention or other research findings or publicity will be favorable to the dietary supplement market or any product, or consistent with earlier publicity. Future research reports, findings, regulatory proceedings, litigation, media attention or other publicity that are perceived as less favorable than, or that question, such earlier research reports, findings or publicity could have a material adverse effect on the demand for our products and consequently on our business, results of operations, financial condition and cash flows. Challenges to, or adverse determinations regarding, the substantiation or presentation of our advertising and marketing claims, including by self-regulatory organizations, competitors, marketplaces or plaintiffs, could require us to modify or discontinue claims, result in restrictions on the sale or promotion of our products, expose us to litigation or regulatory scrutiny and adversely affect consumer perception and demand. Our dependence upon consumer perceptions means that adverse scientific research reports, findings, regulatory proceedings, litigation, media attention or other publicity, if accurate or with merit, could have a material adverse effect on the demand for our products, the availability and pricing of our ingredients, and our business, results of operations, financial condition and cash flows. For example, negative publicity or consumer concerns regarding competitors' products - such as NMN or similar ingredients - could reduce consumer confidence in dietary supplements generally or in products within the same category, which could in turn adversely affect demand of our products. Further, adverse public reports or other media attention regarding the safety, efficacy and quality of dietary supplements in general, or our products specifically, or associating the consumption of dietary supplements with illness, could have such a material adverse effect. Even media attention that is immaterial or inaccurate can have an impact on our sales or financial results if widely disseminated to our customers. Any such adverse public reports or other media attention could arise even if the adverse effects associated with such products resulted from consumers' failure to consume such products appropriately or as directed and the content of such public reports and other media attention may be beyond our control.

In the ordinary course of our business, we may collect, process, store and transmit proprietary, confidential and sensitive information, including personal information (including health information), intellectual property, trade secrets, and proprietary business information owned or controlled by us or other parties. We use our data centers and our networks, and those of third parties, to store and access our proprietary business and other sensitive information. We and the third parties upon which we rely may face various cyber security threats, which are prevalent and continue to increase, including, without limitation, cyber security attacks on our information technology infrastructure and attempts by others to gain access to our proprietary or sensitive information and other similar threats, including ransomware, supply-chain compromises, criminal or nation-state activity, and emerging attack vectors increasingly enhanced by automation and artificial intelligence. We rely upon third-party service providers and technologies to operate critical business systems to process confidential and personal information in a variety of contexts, including, without limitation, third-party providers of cloud-based infrastructure, employee email, and other functions. Our ability to monitor these third-party providers' information security practices is limited, and these third parties may not have adequate information security measures in place. Ransomware attacks, including those from organized criminal threat actors, nation-states and nation-state supported actors, are becoming increasingly prevalent and can lead to significant interruptions, delays, or outages in our operations, loss of data, loss of income, significant extra expenses to restore data or systems, reputational loss and the diversion of funds. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners' supply-chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems or the third-party information technology systems that support us and our services. There may be additional cyber security threats as our employees have the ability to work from home, utilizing network connections outside of the Company premises. Any of the previously identified or similar threats could cause a security incident or other interruption and could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure of, or access to data. A security incident or other interruption could disrupt our ability (and that of third parties upon whom we rely) to provide our products and services. Despite our efforts to identify and remediate vulnerabilities, if any, in our information technology systems (including our products), our efforts may not be successful. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. An actual or perceived cyber security incident could result in disrupted operations, including suspension of our clinical trial activities, lost opportunities, misstated financial data, liability for stolen assets or information, theft of our intellectual property, loss of data and other personally identifiable or sensitive information, increased costs arising from the implementation of additional security protective measures, litigation (including class actions), reputational damage, government enforcement actions that could include investigations, fines, penalties, audits and inspections, additional reporting requirements and/or oversight, temporary or permanent bans on all or some processing of personal data (which could impact clinical trials), interruptions in our operations (including availability of data) financial loss, and other similar harms. Further, individuals, clinical trial participants or other relevant stakeholders could sue us for our actual or perceived failure to comply with our security obligations, including, without limitation, in class action litigation. We may expend significant resources, fundamentally change our business activities and practices, or modify our operations, including our clinical trial activities, or information technology in an effort to protect against security incidents and to mitigate, detect, and remediate actual and potential vulnerabilities. Additionally, some applicable federal, state and foreign laws may require companies to notify individuals, government regulators, including state attorneys general, the U.S. Department of Health and Human Services Office of Civil Rights, the U.S. Securities and Exchange Commission, credit agencies and the media, of security breaches involving particular personally identifiable information, which could result from breaches experienced by us or by our vendors, contractors, or organizations with which we have relationships. Notifications and follow-up actions related to a security breach are costly, and the disclosures or the failure to comply with such requirements could lead to adverse consequences and could impact our reputation or cause us to incur significant costs, including legal expenses and remediation costs. Any remedial costs or other liabilities related to security incidents may not be fully insured or indemnified by other means. Our contracts may not contain limitations of liability; however, even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. Although we maintain cyber insurance, we cannot be sure that our insurance coverage will be adequate or sufficient to protect us from or to mitigate liabilities arising out of our privacy and security practices, that such coverage will continue to be available on commercially reasonable terms or at all, or that such coverage will pay future claims.

We depend on information systems throughout our company, as well as those of our contractors, consultants, vendors and other third parties, to control our manufacturing processes, process orders, manage inventory, process and bill shipments and collect cash from our customers, respond to customer inquiries, contribute to our overall internal control processes, maintain records of our property, plant and equipment, and record and pay amounts due vendors and other creditors. If we were to experience a prolonged disruption in our information systems that involve interactions amongst employees as well as with customers and suppliers, it could result in the loss of sales and customers and/or increased costs, which could adversely affect our overall business operation.

Our business depends greatly on the expertise and contributions of several key individuals, including our senior leadership team and other critical team members and professionals in scientific research and marketing. The development of our products and services and the effective marketing of our offerings necessitate individuals with specialized skills and experience. Moreover, certain positions within our organization, such as those in manufacturing, quality control, safety and compliance, information technology, sales, and e-commerce, are highly technical and require qualified personnel. We operate within highly competitive markets, and the demand for skilled professionals in our industry is high. Competitors, customers, marketing partners, and other companies in our industry also seek these same talented individuals. Therefore, our ability to succeed is intrinsically linked to our capacity to attract and retain skilled personnel, which will necessitate substantial financial resources. There can be no guarantee that we will successfully identify and attract additional qualified employees or retain our existing team members. Any inability to recruit qualified personnel, the loss of key individuals' services, including our executive officers, or the potential loss of future executive officers or key personnel, may have a material and adverse effect on our business.

The insurance industry has previously experienced periods of increased selectivity in providing certain types of coverage, including product liability, cyber, property, and directors' and officers' liability insurance. It is possible that such trends may recur in the future. We currently maintain insurance coverage that aligns with our historical levels and risk management policies. However, we cannot guarantee the availability of comparable insurance coverage on favorable terms, or at all, in the future. Furthermore, some of our customers, as well as prospective customers, stipulate that we maintain specific minimum levels of coverage for our products. Failure to meet these required coverage levels could lead to material changes in business terms or the potential loss of business relationships.