Teads Holding (TEAD) Risk Analysis

Our customers may provide estimates of how much they will spend on advertising with us, but they do not usually commit contractually to a specific spend amount, which is typical practice in the digital advertising industry. There are times when sudden terminations or unforeseen reductions in spend occur due to reasons beyond our control, including sudden changes in an advertiser's campaign needs or financial situation unrelated to our relationship with the advertiser. If the Company is unable to effectively forecast revenue, it may not be able to make the best decisions with respect to investment and management, which could have a material adverse effect on its business, results of operations and financial condition.

Our technology selects what is displayed to consumers on the online properties of our media partners. Our success depends on our ability to make valuable recommendations to organic experiences and ads, which, in turn, depends on the quality of our index and our ability to predict engagement by an individual consumer within a specific context. We believe that one of our key competitive advantages is our AI prediction engine. Subject to our advertiser guidelines, we offer our media partners a degree of flexibility with respect to the type of recommendation that they believe will appeal to their audience based on the editorial tone of their properties. If the quality of our recommendations suffers, whether due to our actions or decisions made by our media partners, the types of advertisers interested in utilizing our platform, or we are otherwise unable to provide users with valuable and relevant recommendations, user engagement may decline or perceptions of our recommendations may be adversely impacted. If we experience a decline in consumers or their engagement, for example, because consumers begin to ignore our platform or direct their attention to other elements on the online properties of our media partners, our media partners and advertisers may in turn not view our solutions as attractive, which could harm our business, results of operations, and financial condition.

Our platform depends on users continuing to consume content on media owners' digital properties. Media owners face challenges growing and maintaining their audiences as a result of the proliferation of new and innovative content distribution methods such as social media platforms and AI summarization. The overall decline in media owner audiences may limit available advertising inventory creating financial pressure on media owners who rely on advertising to operate their business. As a result of these evolving trends, we have seen and may continue to see media owners consolidating or ceasing to operate. In addition, some media partners, typically those that participate in both print and digital publishing, charge their users a subscription fee for online access by implementing a paywall. Our business may be negatively impacted by media partners shifting from open access to paywalls or generating less user interest because it may decrease our access to consumers and advertising inventory. If media partners consolidate, cease to operate, or shift their revenue models from advertising, this could negatively affect our business, results of operations, and financial condition. To the extent we have long-term commitments with our media partners, and they are adversely impacted by the evolving media owner landscape, we may not be able to recoup our investment in our media partners.

Our intellectual property rights are important to our business. We rely on a combination of confidentiality clauses, trade secrets, copyrights, patents and trademarks to protect our intellectual property and know-how. However, the steps we take to protect our intellectual property may be inadequate. We have not in the past been, and may not in the future be, able to protect our intellectual property if we are unable to enforce our rights or if we do not detect unauthorized use of our intellectual property. Despite our precautions, it has in the past been, and may in the future be, possible for unauthorized third parties, including our employees, consultants, service providers, media partners or advertisers, to copy our products and/or obtain and use information that we regard as proprietary. It may also be possible for such unauthorized third parties to create solutions and services that compete with ours. We cannot assure you that the steps taken by us will prevent misappropriation of our trade secrets or technology or infringement of our intellectual property. In addition, the laws of some foreign countries where we operate do not protect our proprietary rights to as great an extent as the laws of the United States, and many foreign countries do not enforce these laws as diligently as government agencies and private parties in the United States. Our policy is to enter into confidentiality and invention assignment agreements with our employees and consultants and enter into confidentiality agreements with the parties with whom we have strategic relationships and business alliances. No assurance can be given that these agreements will be effective in controlling access to our proprietary information and other intellectual property. Further, these agreements do not prevent our competitors from independently developing technologies that are substantially equivalent or superior to our solutions. We may from time to time be subject to claims of prior use, opposition or similar proceedings with respect to applications for registrations of our intellectual property, including but not limited to our trademarks and patent applications. The process of seeking patent protection can be lengthy and expensive, and any of our pending or future patent or trademark applications, whether or not challenged, may not be issued with the scope of the claims we seek, if at all. We are unable to guarantee that patents or trademarks will issue from pending or future applications or that, if patents or trademarks issue, they will not be challenged, invalidated or circumvented, or that the rights granted under the patents will provide us with meaningful protection or any commercial advantage. We rely on our brand and trademarks to identify our solutions to our media partners and advertisers and to differentiate our solutions from those of our competitors. If we are unable to adequately protect our trademarks, third parties may use our brand names or trademarks similar to ours in a manner that may cause confusion to our users or confusion in the market, or dilute our brand names or trademarks, which could decrease the value of our brand. From time to time, we may discover that third parties are infringing, misappropriating or otherwise violating our intellectual property rights. However, policing unauthorized use of our intellectual property and misappropriation of our technology is difficult and we may therefore not always be aware of such unauthorized use or misappropriation. Despite our efforts to protect our intellectual property rights, unauthorized third parties may attempt to use, copy or otherwise obtain and market or distribute our intellectual property rights or technology or otherwise develop solutions with the same or similar functionality as our solutions. If competitors infringe, misappropriate or otherwise misuse our intellectual property rights and we are not adequately protected, or if such competitors are able to develop solutions with the same or similar functionality as ours without infringing our intellectual property, our competitive position and results of operations could be harmed and our legal costs could increase. In addition, the Company cannot be certain that its products and services do not and will not infringe or misappropriate the intellectual property rights of others. From time to time, the Company is subject to legal disputes and claims, including claims that its systems, processes, marketing, data usage or technologies infringe on the intellectual property rights of third parties. The Company may incur significant costs in defending against such claims and could also be required to indemnify its customers if they are sued by a third party for intellectual property infringement arising from materials that the Company has provided to the customers in connection with the provision of its products and services. The Company may not be successful in defending against such intellectual property claims, in which case it could lose valuable property rights, or in obtaining licenses or an agreement to resolve any intellectual property disputes.

We depend upon the sustained and uninterrupted operation of our platform to generate recommendations, serve ads, manage our content index, continually improve and analyze our data assets and optimize performance in real time. If our platform cannot scale to meet demand, or if there are errors, bugs, or other performance failures, including any related to our third-party service providers, in our execution of any of these functions on our platform, then our business may be harmed. Undetected bugs, defects, errors and other performance failures may occur, especially when we are implementing new solutions or features. Despite testing by us, such performance failures in our platform may occur, which could result in negative publicity, damage to our brand and reputation, loss of or delay in market acceptance of our solutions, increased costs or loss of revenue, loss of competitive position or claims by advertisers or media partners for losses sustained by them. We also face risks of disruptions of service from third-party interference with our platform. As discussed above, cyberattack techniques are constantly evolving and becoming increasingly diverse and sophisticated. Our platform is designed to include proactive and reactive detection mechanisms, along with features intended to degrade or disable certain services when required to minimize the impact of an incident on our partners and consumers. However, while we have systems in place to counter attacks and breaches, cyberattacks have occurred in the past and we cannot guarantee that future attacks will not have significant adverse consequences, including impacting the content displayed on our media partners' properties, disrupting our advertisers' campaigns, or resulting in malicious activity on consumers' devices. Any such disruptions to our platform and our servers could interrupt our ability to provide our solutions and significantly affect our reputation, relationships with media partners and advertisers, business and results of operations. Any disruptions to our platform and our servers could interrupt our ability to provide our solutions and materially affect our reputation, relationships with media partners and advertisers, business and results of operations. There can be no assurance that any limitation of liability provisions in our contracts would be enforceable or adequate or would otherwise protect us from any such liabilities or damages with respect to any particular claim arising from such disruptions. Further, in certain circumstances we may indemnify our customers for losses they may incur for our failure to deliver services pursuant to the terms of service set forth in our service contracts. We also cannot be sure that our existing insurance coverage will continue to be available on acceptable terms, will be available in sufficient amounts to cover one or more large claims, or that insurers will not deny coverage as to any future claim. Specifically, our insurance policies may have exclusions which would limit our ability to recover under such policies, the limits under such policies may be insufficient, or insurers may deny coverage following their investigation of a claim. The successful assertion of one or more large claims against us that are excluded from our insurance coverage or that exceed available insurance coverage, or changes in our insurance policies (including premium increases, the imposition of large deductible or co-insurance requirements, changes in terms and conditions or outright cancellation or non-renewal of coverage), could have a material adverse effect on our business, results of operations and financial condition. Furthermore, the assertion of such claims, whether or not successful, could cause us to incur reputational damage, which could have a material adverse effect on our business, results of operations and financial condition. Moreover, anticipating cyberattacks or alleviating problems resulting from errors or disruptions in our platform could require significant resources, which would adversely impact our financial position, and results of operations.

Our business is subject to regulation, which is rapidly evolving, and the business and regulatory environment in each of the international markets in which we operate may differ. For example, regulations relating to our business, including our employees, our arrangements with media partners and advertisers, stricter rules relating to content running through our network, and privacy related regulations affect how we conduct our business. The following are some of the political and regulatory risks and challenges we face across jurisdictions: - greater difficulty in enforcing contracts;- higher costs of doing business internationally, including costs incurred in establishing and maintaining office space and equipment for our international operations;- risks associated with trade restrictions and foreign legal requirements, including any certification and localization of our platform that may be required in foreign countries;- organizing or similar activity by workers, local unions, work councils, or other labor organizations;- our ability to respond to competitive developments and other market and technological dynamics, such as the emergence of generative AI;- greater risk of unexpected changes in regulatory practices, tariffs, and tax laws and treaties;- compliance with anti-bribery laws, including, without limitation, compliance with the U.S. Foreign Corrupt Practices Act, to the extent in effect, and the UK Bribery Act;- compliance with data protection and privacy law regimes of various countries, especially as our business relates to consumer online privacy and interested-based advertising;- heightened risk of unfair or corrupt business practices in certain geographies and of improper or fraudulent sales arrangements that may impact financial results and result in restatements of, or irregularities in, financial statements;- the uncertainty of protection for intellectual property rights in some countries;- general economic and political conditions in these foreign markets, including political and economic instability in some countries;- the potential for heightened regulation relating to content curation or discovery as a result of concerns relating to the spread of disinformation through technology platforms;- double taxation of our international earnings and potentially adverse tax consequences due to changes in the tax laws of the United States or the foreign jurisdictions in which we operate; and - with respect to the United States, changes in federal policy, including trade and tariff policies and tax policy, occur over time through policy and personnel changes following elections. As a result, we may be subject to executive orders and regulatory changes affecting various aspects of our operations. For example, the U.S. has imposed tariffs on Mexico, Canada, China, India, Japan and the E.U., and may impose further tariffs on other nations. In return, China has imposed retaliatory tariffs on the United States, and others may follow. Such changes in trade policy or the imposition of tariffs could have a material adverse effect on our customers' advertising spend, which could have a material adverse effect on our business, results of operations, and financial condition.

From time to time, we are subject to legal proceedings, arbitration, and litigation claims, including those arising in connection with employment, competition, intellectual property, privacy or commercial matters. We also may be exposed to potential claims brought by third parties against us, our media partners or our advertisers. Such claims may allege, for example, that our advertisers' recommendations (including the destination page reached) infringe the intellectual property or other rights of third parties, are false, deceptive, misleading or offensive, that the inventory we monetize consists of or is alleged to be invalid traffic, or that our advertisers' products are defective or harmful. These matters have included, and may in the future include, disputes regarding alleged patent infringement and commercial disagreements involving traffic quality or payment obligations, the outcomes of which are uncertain and could result in financial liability. Our regulatory compliance depends in part on our media partners' and advertisers' adherence to laws and regulations of multiple jurisdictions concerning copyright, trademark and other intellectual property rights, unfair competition, privacy and data protection, and truth in-advertising, and their use of our platform in ways consistent with users' expectations. In general, we require our media partners and advertisers to comply with all applicable laws, including all applicable intellectual property, content, privacy and data protection regulations. We rely on contractual representations from media partners and advertisers that they will comply with all such applicable laws. We make reasonable efforts to enforce contractual notice requirements, but, due to the nature of our business, comprehensive, ongoing and systematic audits of all of our media partners' and advertisers' compliance with our recommended disclosures or with applicable laws and regulations are complex and impractical to execute. If our media partners or advertisers were to breach their contractual or other requirements in this regard, or a court or governmental agency were to determine that we, our media partners and/or our advertisers failed to comply with any applicable law, then we may be subject to potentially adverse publicity, damages and related possible investigations, litigation or other regulatory activity. While we generally seek indemnification from our partners, such indemnification may not be sufficient to cover our losses, may be disputed by the partner, or the partner may lack the financial resources to satisfy their indemnity obligations. In addition, any perception that we, our media partners and/or our advertisers fail to comply with current or future regulations and industry practices may expose us to public criticism, collective redress actions, reputational harm or claims by regulators, which could disrupt our industry and/or operations and expose us to increased liability. As a result of the above, we are involved from time to time in litigation, arbitration or governmental investigations, whether on our own, or involving or concerning our media partners or advertisers, including class action claims, or as third-parties required to comply with requests for information or subpoenas. As a result of such actions, we may become subject to significant liability, including claims for damages, financial penalties, and costs of compliance. Claims may be expensive to defend, divert management's attention from our business operations, and affect the cost and availability of insurance, even if we ultimately prevail. If any of this occurs, it may have a material adverse effect on our reputation, business operations, financial position, competitive position and prospects.

The U.S. and non-U.S. tax laws applicable to our business activities are subject to interpretation and are changing. We are subject to audit by the U.S. Internal Revenue Service and by taxing authorities of the state, local and foreign jurisdictions in which we operate. Our tax obligations are based in part on our corporate operating structure, including the manner in which we develop, value, use and hold our intellectual property, the jurisdictions in which we operate, how tax authorities assess revenue-based taxes such as sales and use taxes, the scope of our international operations, and the value we ascribe to our intercompany transactions. Depending on how and when future earnings are repatriated, we may be required to accrue and pay additional taxes, including any applicable foreign withholding tax and income taxes. Taxing authorities may challenge, and have challenged, our tax positions and methodologies for valuing developed technology or intercompany arrangements, positions regarding the collection of sales and use taxes, and the jurisdictions in which we are subject to taxes, which could expose us to additional taxes. Any adverse outcomes of such challenges to our tax positions could result in additional taxes for prior periods, interest and penalties, as well as higher future taxes. In addition, our future tax expense could increase as a result of changes in tax laws, regulations or accounting principles, or as a result of earning income in jurisdictions that have higher tax rates. For example, the European Commission has proposed, and various jurisdictions have enacted or are considering enacting laws that impose separate taxes on specified digital services, which may increase our tax obligations in such jurisdictions. Digital services or other similar taxes could, among other things, increase our tax expense, create significant administrative burdens for us, discourage potential customers from subscribing to our platform due to the incremental cost of any such sales or other related taxes, or otherwise have a negative effect on our financial condition and results of operations. In addition, the Organization for Economic Cooperation and Development ("OECD") is progressing on a Base Erosion and Profit Shifting Project that, if implemented, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we do business. More than 140 countries tentatively signed on to a framework that imposes a minimum tax rate of 15%, among other provisions, and the European Union has adopted a Council Directive which requires these provisions to be transposed into member states' national laws. As this framework is subject to further negotiation and implementation by each member country, the timing and ultimate impact of any such changes on our tax obligations are uncertain. Moreover, the determination of our provision for income taxes and other tax liabilities requires significant estimates and judgment by management, and the tax treatment of certain transactions is uncertain. The income tax benefit/expense we record may vary significantly in future periods based on factors outside of our control, such as the uncertainty with respect to the current macroeconomic environment on our operations and our stock price. For example, in periods in which our stock price varies from the grant price of the share-based compensation vesting in that period, we will recognize excess tax benefits or shortfalls that will impact our effective tax rate. Any changes, ambiguity, or uncertainty in taxing jurisdictions' administrative interpretations, decisions, policies and positions, including the position of taxing authorities with respect to revenue generated by reference to certain digital services, could also materially impact our income tax liabilities. Although we believe that our estimates and judgments are reasonable, the ultimate outcome of any particular issue may differ from the amounts previously recorded in our financial statements and any such occurrence could adversely affect our business, results of operations, and financial condition.

We receive, store, and process data about or related to users in addition to our media partners, advertisers, services providers and employees. Our handling of this data is subject to a variety of federal, state, and foreign laws and regulation by various government authorities, as well as contractual obligations with our partners. The U.S. federal and various state and foreign governments have adopted or proposed limitations on the collection, distribution, use, and storage of data relating to individuals. Additionally, the Federal Trade Commission and many state attorneys general are interpreting federal and state consumer protection laws as imposing standards for the online collection, use, dissemination, and security of data and issuing separate guidance in this area. If we fail to comply with any such laws or regulations, we may be subject to enforcement actions that may not only expose us to litigation, fines, and civil and/or criminal penalties, but also require us to change our business practices as well as have an adverse effect on our business, results of operations, and financial condition. The regulatory framework for online privacy issues is continuously evolving and is likely to receive global scrutiny for the foreseeable future. Restrictions could be placed upon the collection, management, aggregation, and use of information, which could result in a material increase in the cost of collecting or otherwise obtaining certain kinds of data and could limit the ways in which we may use or disclose information. In particular, the use of data to draw inferences about a user's interests and deliver relevant advertising to that user, and similar or related practices (sometimes referred to as interest-based advertising, behavioral advertising or personalized advertising), has come under increasing scrutiny by legislative, regulatory, and self-regulatory bodies in the United States and abroad that focus on consumer protection or online privacy. Much of this scrutiny has focused on the use of cookies and other technologies to collect information about Internet users' online browsing activity on web browsers, mobile devices, and other devices, to associate such data with user or device identifiers or individual identities across devices and channels. As we rely upon large volumes of data collected primarily through cookies and similar technologies, it is possible that these legislative and technical changes may have a substantial impact on our ability to collect and use the data of Internet users. It is essential that we monitor global privacy developments and engage in responsible privacy practices, including providing users with notice of the types of data we collect and how we use that data to provide our services. In the United States, the U.S. Congress and state legislatures, along with federal regulatory authorities have increased their attention on matters concerning the collection and use of consumer data. For example, California enacted the California Consumer Privacy Act, along with related regulations (together, the "CCPA"), which was subsequently updated by the California Privacy Rights Act ("CPRA"). The CCPA creates individual privacy rights for California residents and increases the privacy and security obligations of businesses handling personal data and the CPRA imposes additional data protection obligations including limitation on the use and processing of sensitive personal data. The CCPA and CPRA are enforceable by the California Attorney General and there is also a private right of action relating to certain data security incidents. The CCPA generally requires covered businesses to, among other things, provide disclosures to California consumers and afford California consumers abilities to opt-out of the sharing of personal data between parties, a concept that is defined broadly, with behavioral advertising triggering such requirements under the CCPA. The CCPA and CPRA or subsequent guidance may require us to further modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. At least 19 other U.S. states have been implementing similar privacy laws, such as Virginia, Colorado, Connecticut and Utah and we expect to see more states adopting privacy laws in the future. Any disparity between federal and state laws may add additional complexity, including a variation in requirements, restrictions, and potential legal risk, and may require additional investment in compliance programs, result in disjointed internal approaches to the collection and use of data as a result of state-based differences or impact strategies and availability of previously useful data. In Europe, the General Data Protection Regulation (EU) 2016/679 ("GDPR") took effect on May 25, 2018 and applies to products and services that we provide in Europe, as well as the processing of personal data of individuals in the European Economic Area ("EEA"), wherever that processing occurs. The GDPR includes operational requirements for companies that receive or process personal data of individuals in the EEA that are different from those that were in place in the EEA prior to the GDPR. Failure to comply with GDPR, or its implementation in the United Kingdom through the UK GDPR and the Data Protection Act 2018 (together, the "UK GDPR"), may result in significant penalties for non-compliance, in the United Kingdom, the greater of £17.5 million or 4% of the total worldwide turnover in the preceding financial year or, in the case of the GDPR, whichever is greater, €20 million or 4% of an enterprise's global annual revenue. In addition to the foregoing, a breach of the GDPR or the UK GDPR could result in regulatory investigations, reputational damage, orders to cease/change our processing of our data, enforcement notices, and/or assessment notices (for a compulsory audit). In addition, there is increased focus on the self-regulatory mechanisms created to further compliance with these regulations. For example, the Internet Advertising Bureau ("IAB") Transparency & Consent Framework ("TCF") has been criticized for being inherently incompatible with GDPR. As a result, loss of confidence in such mechanisms and slow adoption rates of changes may undermine the viability of the TCF such that there is no industry standard for requesting and obtaining consent, all of which could negatively affect our business, results of operations, and financial condition. The UK Information Commissioner's Office ("ICO"), the Irish Data Protection Commission and the French Commission Nationale de l'Informatique et de Libertés ("CNIL") have investigated and continue to investigate the ad tech industry, including our partners and the use of cookies. For example, in November 2019, the ICO conducted an audit of the ad tech industry which ultimately included an investigation of Legacy Teads' real-time bidding processes. In addition, in November 2024 the CNIL's investigation team initiated an investigation into Outbrain and though the alleged infringements of data privacy law giving rise to the investigation remains unclear, there can be no assurance that action, including the imposition of sanctions or other penalties, will not be required as a result of such investigation. Though GDPR is intended to harmonize privacy laws across the EEA, member state interpretations of the law continue to vary, making compliance increasingly complex. For example, France and Germany have adopted a strict approach to the dropping of any cookies without consent, even if cookies are used strictly for technical delivery and not for personalization. In addition, the European Data Protection Board has issued guidance under Article 5(3) which has adopted a strict interpretation of consent requirements. In addition to GDPR, in the European Union we are subject to national laws implementing the ePrivacy Directive (2002/58/EC), which regulate the use of cookies, tracking technologies, and electronic communications and are implemented and interpreted differently across member states, creating compliance complexity and potentially inconsistent obligations. The CJEU Fashion ID, Planet 49, Wirtschaftsakademie cases have driven increased attention to cookies and tracking technologies and impacted compliance requirements across the ecosystem, particularly when applied in conjunction with GDPR. Although we have developed technical solutions to comply with such cookie limitations, evolving interpretations of required limitations may result in unintended consequences with respect to our operations, such as inhibiting fraud prevention efforts or user experience. As more regulators (such as the German and French regulators) enforce a stricter approach regarding the use of cookies, we expect further system changes, limitations on the effectiveness of our advertising activities, and compliance requirements, which may adversely affect our margins, increase costs, and subject us to additional liabilities. It is possible that CCPA (and other U.S. privacy laws), GDPR, UK GDPR and the ePrivacy Directive in Europe and related standards may be interpreted and applied in manners that are, or are asserted to be, inconsistent with our data management practices or the technological features of our solutions, and any failure to achieve required data protection standards may result in lawsuits, regulatory fines, or other actions or liability, all of which may harm our results of operations. We may also face civil claims, including from privacy advocates who continue to call for scrutiny of the ad tech industry, or representative actions and class action litigation, some of which may be novel theories of how privacy laws might apply in our industry as a result of anachronistic or competing directives. For example, the Austrian online ePrivacy campaign group NOYB has filed several strategic complaints against major tech companies, alleging non-compliance with GDPR provisions. We have seen an increasing number of individual data subject requests and, in one instance, a filing of an action in the Belgian courts in an attempt to prohibit processing of data by us. The increasing number of these requests, claims and further industry scrutiny requires investment of resources and could result in reputational harm and significant damages or other liabilities. In addition, privacy advocacy and industry groups may propose new and different self-regulatory standards that either legally or contractually apply to us, our media partners or our advertisers, such as the IAB U.S. Global Privacy Platform and Multi-State Privacy Agreement. We are members of self-regulatory bodies that impose additional requirements related to the collection, use, and disclosure of consumer data, such as the right to opt out of the sharing or the sale of their personal information for interest-based advertising purposes. Some of these self-regulatory bodies might refer violations of their requirements to the Federal Trade Commission or other regulatory bodies. If we were to be found responsible for such a violation, it could adversely affect our reputation, as well as our business, our compliance with self-regulatory frameworks, results of operations, and financial condition. In Europe, the Digital Services Act (EU) 2022/2065 ("DSA") became enforceable in February 2024 and applies to digital services that connect consumers to goods, services, or content in the EEA. Although we have not been classified as a "very large online platform" under the DSA, we are still required to comply with the provisions of the DSA and/or support our partners' compliance with the provisions of the DSA. The DSA, among other things, imposes stricter obligations on curbing harmful or unlawful content, such as implementing tools to automatically monitor, detect and take down illegal online content and implements a mechanism for users to easily flag content and to cooperate with "trusted flaggers" (such as NGOs). Sanctions under the DSA include fines of up to 6% of global turnover in the event of non-compliance and can lead to a ban on operating in the E.U. in cases of repeated serious breaches. A similar piece of legislation, the Online Safety Bill, is currently being discussed in the UK. In addition to the foregoing, a breach of the DSA could result in regulatory investigations,reputational damage, orders to cease/change our services, enforcement notices, and/or assessment notices (for a compulsory audit). We may also face civil claims including representative actions and other class action type litigation (where individuals have suffered harm), potentially amounting to significant compensation or damages liabilities, as well as associated costs, diversion of internal resources, and reputational harm. In addition, we may be required to indemnify media partners against claims with respect to our advertising content. Our advertisers may not have the ability to satisfy their indemnification obligations to us, in whole or in part, and pursuing any claims for indemnification may be costly or unsuccessful. As a result, we may be required to satisfy indemnification obligations to media partners, or claims against us, with our own assets. As a result of any of the above, we may be involved in litigation or governmental investigations, whether on our own, or involving or concerning our media partners, advertisers or partners, including class action claims, or as a third party required to comply with investigations or requests for information or subpoenas. As a result of such actions, we may become subject to significant liability, including claims for damages, financial penalties, and costs of compliance. Claims may be expensive to defend, divert management's attention from our business operations, and affect the cost and availability of insurance, even if we ultimately prevail. If any of this occurs, it may have a material adverse effect on our reputation, business operations, financial position, competitive position and prospects.

Our future success depends upon continued contributions from our employees, in particular our senior management team and other highly skilled personnel across our organization. From time to time, there may be changes in our senior management team, and such changes may be disruptive to our business. The loss of the services of any members of our senior management team, or our inability to attract and retain other key personnel, could impede, delay, or prevent the successful growth of our business. We do not maintain key person life insurance for any employee. Our growth strategy also depends on our ability to expand and retain our organization with highly skilled personnel across all functions. Identifying, recruiting, training and integrating qualified individuals will require significant time, expense and attention. Competition for such talent in our industry is intense across all our locations, particularly in New York City, where our headquarters are located, and in Israel, France and Slovenia, where we conduct the majority of our research and development activities. We may need to invest significant amounts of cash and equity and, therefore, may be impacted by our share price performance, to attract and retain employees. If we are not able to effectively add and retain employees, our ability to achieve our strategic objectives could be adversely impacted, and our business could be harmed.

Because a material part of our operations are conducted in Israel and certain members of our board of directors and management as well as many of our employees and consultants, including employees of our service providers, are located in Israel, our business and operations are directly affected by economic, political, geopolitical and military conditions in Israel. Since the establishment of the State of Israel in 1948 and in recent years, armed conflicts between Israel and its neighboring countries and terrorist organizations active in the region have involved missile strikes, hostile infiltrations, terrorism against civilian targets in various parts of Israel, and recently abduction of soldiers and citizens. Following the October 7th attacks by Hamas terrorists in Israel's southern border, Israel declared war against Hamas and since then, Israel has been involved in military conflicts with Hamas, Hezbollah, a terrorist organization based in Lebanon, and Iran, both directly and through proxies like the Houthi movement in Yemen and armed groups in Iraq and other terrorist organizations. Additionally, following the fall of the Assad regime in Syria, Israel has conducted limited military operations targeting the Syrian army, Iranian military assets and infrastructure linked to Hezbollah and other Iran-supported groups. Although certain ceasefire agreements have been reached with Hamas and Lebanon (with respect to Hezbollah), and some Iranian proxies have declared a halt to their attacks, there is no assurance that these agreements will be upheld, military activity and hostilities continue to exist at varying levels of intensity, and the situation remains volatile, with the potential for escalation into a broader regional conflict involving additional terrorist organizations and possibly other countries. Also, the fall of the Assad regime in Syria may create geopolitical instability in the region. In June 2025, direct hostilities broke out between Israel and Iran, involving significant missile and drone strikes exchanged between the two countries. This escalation and other regional events have heightened regional instability and increased security risks across Israel. These events have resulted in significant travel restrictions, facility closures and shelter-in-place orders, including remote work measures, in various locations, and may further impact critical infrastructure, supply chains, and the broader Israeli economy. In October 2025, a cease-fire was brokered between Israel and Hamas. However, we cannot predict if and to what extent this cease-fire will remain in effect or upheld. More recently, in February 2026, hostilities between Israel and Iran escalated again. In late February 2026, Israel, together with the U.S., conducted a major joint military campaign involving air and missile strikes against targets in Iran. These actions triggered a broad Iranian response and contributed to significant regional instability. The situation remains highly fluid, and we are unable to predict when, or on what terms, this escalation will be resolved. While our facilities have not been damaged during the current conflicts, the hostilities with Hamas, Hezbollah, Iran and its proxies and others have caused and may continue to cause damage to private and public facilities, infrastructure, utilities, and telecommunication networks, potentially disrupting our operations and supply chains. In addition, Israeli organizations, government agencies and companies have been subject to extensive cyber attacks. This could lead to increased costs, risks to employee safety, and challenges to business continuity, with potential financial losses. These conflicts have also led to a deterioration of certain indicators of Israel's economic standing, for instance, a downgrade in Israel's credit rating by rating agencies (such as by Moody's, S&P Global, and Fitch). In connection with these conflicts, several hundred thousand Israeli military reservists were drafted to perform immediate military service, and military reservists are expected to perform long reserve duty service in the coming years. As of the date of this Report, a limited number of our employees are called to active military duty. The absence of our employees due to their military service in the current or future conflicts may materially and adversely affect our ability to conduct our operations. Our commercial insurance does not cover losses that may occur as a result of events associated with war and terrorism. Although the Israeli government currently covers the reinstatement value of certain direct damages that are caused by terrorist attacks or acts of war, we cannot assure you that such government coverage will be maintained or that it will sufficiently cover our potential damages. Any losses or damages incurred by us could have a material adverse effect on our business. The global perception of Israel and Israeli companies, possibly influenced by the actions of international judicial bodies, may lead to increased sanctions and other negative measures against Israel, as well as Israeli companies and academic institutions. There is also a growing movement among countries, activists, and organizations to boycott Israeli goods, services and academic research or restrict business with Israel, which could affect business operations. If these efforts become widespread, along with any future rulings from international tribunals against Israel, they could significantly and negatively impact business operations. We also do business with advertisers and media partners located in Israel. The conditions described above may impact advertising demand and the extent of monetization on media partners in Israel. A portion of our business (less than 3% of our revenues) is from advertisers in Israel displaying ads on media partner inventory in Israel which has been impacted by the above events. Prior to the commencement of these conflicts, the Israeli government pursued changes to Israel's judicial system and has recently renewed its efforts to effect such changes. In response to the foregoing developments, certain individuals, organizations, and institutions, both within and outside of Israel, voiced concerns that such proposed changes, if adopted, may negatively impact the business environment in Israel. Such proposed changes may also lead to political instability or civil unrest. If such changes to Israel's judicial system are pursued by the government and approved by the parliament, this may have an adverse effect on our business, results of operations, and ability to raise additional funds.