ITEM 1A. Risk Factors

Actual or threatened public health emergencies could harm our business.

Our business and operations could be adversely affected by health epidemics, including the current COVID-19 pandemic, impacting the markets and communities in which we, our partners and clients operate. The COVID-19 pandemic has caused significant disruption to the business and financial markets, and there remains uncertainty about the duration of this disruption on both a nationwide and global level, as well as the ongoing effect on our business. The full extent to which the COVID-19 pandemic will directly or indirectly impact our business, results of operations and financial condition will depend on future developments that are uncertain and unpredictable. We continue to monitor the COVID-19 situation and potential effects on our business and operations. While the spread and impact of COVID-19 has stabilized, there is no guarantee that a future outbreak of this or any other widespread epidemics will not occur.

Our operating results may fluctuate significantly from period-to-period and are difficult to predict.

Individual orders can represent a meaningful percentage of our revenues and operating results in any single period and the timing of the receipt of those orders is difficult to predict. The failure to close an order or the deferral or cancellation of an order can result in revenue and net income shortfalls for that quarter. We base our current and future expense levels on our internal operating plans and sales forecasts, and our operating costs are to a large extent fixed. As a result, we may not be able to sufficiently reduce our costs in any quarter to adequately compensate for an unexpected near-term shortfall in revenues, and even a small shortfall could disproportionately and adversely affect our financial results for that quarter.

Our financial results may be negatively affected by a number of factors, including the following:

As a result of these factors, we believe that period-to-period comparisons of our revenue levels and operating results are not necessarily meaningful. You should not rely on our quarterly revenue and operating results to predict our future performance.

We derive a significant portion of our revenue directly or indirectly from government customers, and our business may be adversely affected by changes in the contracting or fiscal policies of those governmental entities.

We derive a significant portion of our revenue directly or indirectly from federal, international, state and local governments. We believe that the success and growth of our business will continue to depend on government customers purchasing our products and services either directly from us or indirectly through our channel partners. Changes in government contracting policies or government budgetary constraints may adversely affect our financial performance. Among the factors that could adversely affect our business are:

8

These and other factors could cause government customers or our channel partners to reduce purchases of products and services from us which would have a material adverse effect on our business, financial condition and operating results.

We derive a significant portion of our revenue from third party channel partners.

Our future results depend upon the continued successful distribution of our products through a channel of systems integrators and OEM partners. Systems integrators, including VARs, use our software products as a component of the biometrics systems they deliver to their customers. OEMs embed our software products in their technology devices or software products. These channel partners typically sell their products and services to government customers.

Our failure to effectively manage our relationships with these third parties could impair the success of our sales, marketing and support activities. Moreover, the activities of these third parties are not within our direct control. The occurrence of any of the following events could have a material adverse effect on our business, financial condition and operating results:

A significant commercial market for biometrics technology may not develop, and, even if it does, there can be no assurance our biometrics technology will be successful.

A component of our strategy to grow our revenue includes expansion into commercial markets. To date, biometrics technology has received only limited acceptance and slow adoption in these markets. Although the recent appearance of biometric readers on popular consumer products, such as smartphones, has increased interest in biometrics as a means of authenticating and/or identifying individuals, commercial markets for biometrics technology are still developing and evolving. Biometrics-based solutions compete with more traditional security methods including keys, cards, personal identification numbers, passwords and security personnel. Acceptance of biometrics as an alternative to such traditional methods depends upon a number of factors including: i) the performance and reliability of biometric solutions; ii) costs involved in adopting and integrating biometric solutions; iii) public concerns regarding privacy; and iv) potential privacy legislation.

For these reasons, we are uncertain whether there will be significant demand for biometrics technology from commercial markets. Moreover, even if there is significant demand, there can be no assurance that our biometrics products will achieve market acceptance.

9

If the biometrics market does not experience significant growth or if our products do not achieve broad acceptance both domestically and internationally, we may not be able to grow our business.

Our revenues are derived primarily from sales of biometrics products and services. Our expectations regarding the future growth rate or the size of the biometrics market may not be accurate. The expansion of the biometrics market and the market for our biometrics products and services depends on a number of factors, such as:

Even if biometrics solutions gain wide market acceptance, our solutions may not adequately address market requirements and may not continue to gain market acceptance. If biometrics solutions generally or our solutions specifically do not gain wide market acceptance, we may not be able to achieve our anticipated level of growth and our revenues, and our results of operations would be adversely affected.

We face intense competition from other biometrics solutions providers.

A significant number of established companies have developed or are developing and marketing software and hardware for biometrics products and applications that currently compete with or will compete directly with our offerings. We believe that additional competitors will enter the biometrics market and become significant long-term competitors, and that, as a result, competition will increase. Companies competing with us may introduce solutions that are competitively priced, have increased performance or functionality or incorporate technological advances we have not yet developed or implemented. Our current principal competitors include:

We expect competition to intensify in the near term in the biometrics market. Many current and potential competitors have substantially greater financial, marketing, and research resources than we have. Moreover, low-cost foreign competitors from developing economies and other countries have demonstrated a willingness to sell their products at significantly reduced prices. To compete effectively in this environment, we must continually develop and market new and enhanced solutions and technologies at competitive prices and must have the resources available to invest in significant research and development activities. Our failure to compete successfully could cause our revenues and market share to decline.

The biometrics industry is characterized by rapid technological change and evolving industry standards, which could render our existing products obsolete.

Our future success will depend upon our ability to develop and introduce a variety of new capabilities and enhancements to our existing products in order to address the changing and sophisticated needs of the marketplace. Frequently, technical development programs in the biometrics industry require assessments to be made of the future

10

direction of technology, which is inherently difficult to predict. Delays in introducing new products and enhancements, the failure to choose correctly among technical alternatives or the failure to offer innovative products or enhancements at competitive prices may cause customers to forego purchases of our products and purchase our competitors’ products. We may not have adequate resources available to us or may not adequately keep pace with appropriate requirements in order to effectively compete in the marketplace.

Our software products may have errors, defects or bugs, which could result in delayed or lost revenue, expensive correction, liability to our customers, and claims against us.

Despite testing, complex software products such as ours may contain errors, defects, or bugs, which may only be discovered after they have been installed and used by our customers. Defects in the products that we develop and sell to our customers could require expensive corrections and result in delayed or lost revenue, adverse customer reaction and negative publicity about us or our products and services. Customers who are not satisfied with any of our products may also bring claims against us for damages, which, even if unsuccessful, would likely be time-consuming to defend, and could result in costly litigation and payment of damages. Such claims could harm our reputation, financial results and competitive position.

Our business may be adversely affected by our use of open-source software.

The software industry is making increasing use of open-source software in the development of products. We also license and integrate certain open-source software components from third parties into our software. Open-source software license agreements may require that the software code in these components or the software into which they are integrated be freely accessible under open-source terms. Many features we may wish to add to our products in the future may be available as open-source software and our development team may wish to make use of this software to reduce development costs and speed up the development process. While we carefully monitor the use of all open-source software and try to ensure that no open-source software is used in such a way as to require us to disclose the source code to the related product, such use could inadvertently occur. If we were required to make our software freely available, our business could be seriously harmed.

We rely on third-party software to develop and provide our solutions and significant defects in third-party software could harm our business.

We rely on software licensed from third parties to develop and offer some of our solutions. In addition, we may need to obtain future licenses from third parties to use software or other intellectual property associated with our solutions. We cannot assure you that these licenses will be available to us on acceptable terms, without significant price increases or at all. Any loss of the right to use any such software or other intellectual property required for the development and maintenance of our solutions could result in delays in the provision of our solutions until equivalent technology is either developed by us or, if available from others, is identified, obtained, and integrated, which could harm our business. Any errors or defects in third-party software could result in errors or a failure of our solutions, which could harm our business.

We rely on third-party relationships.

We have a number of relationships with third parties that are significant to our sales, marketing, support, and product development efforts, including hosting facilities for our cloud-based services. We rely on software and hardware vendors, large system integrators, and technology consulting firms to supply marketing and sales opportunities for our direct sales force and to strengthen our offerings using industry-standard tools and utilities. We also have relationships with third parties that distribute our products. There can be no assurance that these companies, many of which have far greater financial and marketing resources than us, will not develop or market offerings that compete with ours in the future or will not otherwise end or limit their relationships with us. Further, the use of third-party hosting facilities requires us to rely on the functionality and availability of the third parties’ services, as well as their data security, which despite our due diligence, may be or become inadequate.

Part of our future business is dependent on market demand for, and acceptance of, the cloud-based model for the use of software.

We expect to derive a growing percentage of our revenue from the sale of cloud-based services. As a result, widespread acceptance and use of the cloud-based business model is critical to our future growth and success. Under the perpetual or fixed term license model for software procurement, users of the software typically run applications on their hardware. Because companies are generally predisposed to maintaining control of their IT systems and infrastructure,

11

there may be resistance to the concept of accessing the functionality that software provides as a service through a third party. If the market for cloud-based, software solutions ceases to grow or grows slower than we currently anticipate, demand for our services could be negatively affected.

Our operational systems, networks and products are subject to continually evolving cybersecurity or other technological risks, which could result in the disclosure of our or our customers' confidential information, damage to our reputation, additional costs, regulatory penalties and financial losses.

Our products, services and systems may be used in critical company, customer or third-party operations, or involve the storage, processing and transmission of sensitive data, including valuable intellectual property, other proprietary or confidential data, regulated data, and personal information of employees, customers and others. Successful breaches, employee malfeasance, or human or technological error could result in, for example, unauthorized access to, disclosure, modification, misuse, loss, or destruction of company, customer, or other third party data or systems; theft of sensitive, regulated, or confidential data including personal information and intellectual property; the loss of access to critical data or systems through ransomware, destructive attacks or other means; and business delays, service or system disruptions or denials of service.

If we or third parties with which we do business were to fall victim to successful cyber-attacks or experience other cybersecurity incidents, including the loss of individually identifiable customer or other sensitive data, we may incur substantial costs and suffer other negative consequences, which may include remediation costs, such as liability for stolen assets or information, repairs of system damage, and incentives to customers or business partners in an effort to maintain relationships after an attack as well as litigation and legal risks, including regulatory actions by state and federal regulators.

Our intellectual property is subject to limited protection.

Because we are a technology provider, our ability to protect our intellectual property and to operate without infringing the intellectual property rights of others is critical to our success. We regard our technology as proprietary. We rely on a combination of U.S. and worldwide patent, trade secret, copyright, and trademark law as well as confidentiality agreements to protect our proprietary technology. We cannot assure you that we will be able to enforce the patents we own against third parties. Some foreign countries do not currently provide effective legal protection for intellectual property and our ability to prevent the unauthorized use of our products in those countries is therefore limited. Despite our efforts, these measures can only provide limited protection. Unauthorized third parties may try to copy or reverse engineer portions of our products or otherwise obtain and use our intellectual property. If we fail to protect our intellectual property rights adequately, our competitors may gain access to our technology, and our business would thus be harmed.

In the future, we may be involved in legal action to enforce our intellectual property rights relating to our patents, copyrights or trade secrets. Any such litigation could be costly and time-consuming for us, even if we were to prevail. Moreover, even if we are successful in protecting our proprietary information, our competitors may independently develop technologies substantially equivalent or superior to our technology. Accordingly, despite our efforts, we may be unable to prevent third parties from infringing upon or misappropriating our intellectual property or otherwise gaining access to our technology. The misappropriation of our technology or the development of competitive technology could seriously harm our business.

We may be sued by third parties for alleged infringement of their proprietary rights.

We may be subject to claims that our technology and products infringe the intellectual property rights of others. A large and increasing number of participants in the technology industry, including companies known as non-practicing entities, have applied for or obtained patents. Some of these patent holders have demonstrated a readiness to commence litigation based on allegations of patent infringement. Third parties have asserted against us in the past and may assert against us in the future patent, copyright and other intellectual property rights to technologies that are important to our business.

Intellectual property rights can be uncertain and involve complex legal and factual questions. Moreover, intellectual property claims, with or without merit, can be time-consuming and expensive to litigate or settle, and could divert management attention away from the execution of our business plan. If we were found to have infringed the proprietary rights of others, we could be subject to substantial damages or an injunction preventing us from conducting our business.

12

If we are unable to attract and retain key personnel, our business could be harmed.

If any of our key employees were to leave, we could face substantial difficulty in hiring qualified successors and could experience a loss in productivity while any successor obtains the necessary training and experience. Our employment relationships are at-will and we have had key employees leave in the past. We cannot assure you that one or more key employees will not leave in the future. We intend to continue to hire additional highly qualified personnel, including software engineers and sales personnel, but may not be able to attract, assimilate or retain qualified personnel in the future. Any failure to attract, integrate, motivate and retain these employees could harm our business.

Our business may be affected by government laws and regulations.

Extensive regulation under federal, state, and foreign law has adversely affected us and could further adversely affect us in ways that are difficult for us to predict. More specifically, we are subject to regulatory environment changes regarding privacy and data protection that could have a material impact on our results of operations. These regulatory changes may potentially involve new regulatory issues/requirements such as the EU General Data Protection Regulation (“GDPR”), the California Privacy Rights Act (“CPRA”) and other comprehensive state privacy laws, the Illinois Biometric Privacy Act, Texas Statute on the Capture or Use of Biometric Identifier, State of Washington H.B. 1493, Brazil’s General Data Protection Law (“LGPD”) and any other state, federal or foreign regulations governing the collection, use and storage of biometric data. The potential costs of compliance with or imposed by new/existing regulations and policies that are applicable to us, or fines and penalties to which we may become subject if we fail to comply with those regulations and polices, may affect the use of our products and services and could have a material adverse impact on our results of operations.

In addition, our business may also be adversely affected by: i) the imposition of tariffs, duties and other import restrictions on goods and services we purchase from non-domestic suppliers; or ii) the imposition of economic sanctions on existing or potential customers or suppliers, or iii) by the imposition of export restrictions on products we sell internationally. Changes in current or future laws or regulations, in the United States or elsewhere, could seriously harm our business.

Adverse economic conditions could harm our business.

Unfavorable changes in economic conditions, including recessions, inflation, turmoil in financial markets, changes caused by global crisis such as the COVID-19 pandemic, the ongoing conflict between Russia and Ukraine and resulting economic sanctions, the Taliban’s takeover of Afghanistan, or other changes in economic conditions, could harm our business, results of operations, and financial conditions as a result of:

We are unable to predict whether or when any such adverse economic conditions could occur in the U.S. or other countries; and if they do occur, we cannot predict the timing, duration, or severity.

We may not realize the anticipated benefits of our acquisitions.

We may make acquisitions of companies that offer complementary products, services, and technologies such as our acquisitions of FortressID in December of 2021 and AFIX in November of 2020. The ultimate success of our acquisitions depends, in part, on our ability to realize the anticipated synergies, cost savings and growth opportunities from integrating acquired businesses or assets into our existing businesses. However, the acquisition and successful integration of independent businesses or assets is a complex, costly and time-consuming process, and the benefits we realize may not exceed the costs of the acquisition. The risk and difficulties associated with acquiring and integrating companies and other assets include, among others, difficulties assimilating the operations and personnel of acquired

13

companies, challenges in realizing the value of the acquired assets relative to the price paid, distraction of management from our ongoing businesses and potential product disruptions associated with the sale of the acquired company’s products. These factors could have a material adverse effect on our business, financial condition, operating results and cash flows. Additionally, our acquisitions have provided, in the case of Fortress ID, and may in the future provide for future contingent acquisition payments, based on the achievement of performance targets or milestones. These arrangements can impact or restrict integration of acquired businesses and can result in disputes, including litigation. Additionally, regardless of the form of consideration we pay, acquisitions and investments could negatively impact our net income and earnings per share.

We may have additional tax liabilities.

We are subject to income taxes in the United States. Significant judgments are required in determining our provisions for income taxes. In the course of preparing our tax provisions and returns, we must make calculations where the ultimate tax determination may be uncertain. Our tax returns are subject to examination by the Internal Revenue Service (“IRS”) and state tax authorities. There can be no assurance as to the outcome of these examinations. If the ultimate determination of taxes owed is for an amount in excess of amounts previously accrued, our operating results, cash flows, and financial condition could be adversely affected.

The market price of our common stock has been and may continue to be subject to wide fluctuations, and this may make it difficult for shareholders to resell the common stock when they want or at prices they find attractive.

The market price of our common stock, like that of other technology companies, is volatile and is subject to wide fluctuations in response to a variety of factors, including:

Our stock price may also be affected by broader market trends unrelated to our performance. As a result, purchasers of our common stock may be unable at any given time to sell their shares at or above the price they paid for them. Moreover, companies that have experienced volatility in the market price of their stock often are subject to securities class action litigation. If we were the subject of such litigation, it could result in substantial costs and divert management's attention and resources.

If we are unable to maintain effective internal controls over financial reporting, investors could lose confidence in the reliability of our financial statements, which could result in a decline in the price of our common stock.

As a public company, we are required to enhance and test our financial, internal and management control systems to meet obligations imposed by the Sarbanes-Oxley Act of 2002. Consistent with the Sarbanes-Oxley Act and the rules and regulations of the SEC, management's assessment of our internal controls over financial reporting is required in connection with our filing of our Annual Report on Form 10-K. If we are unable to identify, implement and conclude that we have effective internal controls over financial reporting, investors could lose confidence in the reliability of our financial statements, which could result in a decrease in the value of our common stock. Our assessment of our internal controls over financial reporting may also uncover weaknesses or other issues with these controls that could also result in adverse investor reaction.

We must make judgments in the process of preparing our financial statements.

We prepare our financial statements in accordance with generally accepted accounting principles and certain critical accounting policies that are relevant to our business. The application of these principles and policies requires us to make significant judgments and estimates. The most significant estimates included in the financial statements pertain

14

to revenue recognition, reserves for doubtful accounts, valuation of acquired assets and assumed liabilities in business combinations, valuation of contingent acquisition payments, valuation of investment in note receivable, goodwill and long-lived asset impairment and valuation allowance for deferred income tax assets. Actual results could differ from those estimates. In the event that our judgments and estimates differ from actual results, we may have to change them, which could materially affect our financial position and results of operations.

Moreover, accounting standards have been subject to rapid change and evolving interpretations by accounting standards setting organizations over the past few years. The implementation of new accounting standards requires us to interpret and apply them appropriately. If our current interpretations or applications are later found to be incorrect, we may have to restate our financial statements and the price of our stock could decline.

Our officers, directors and holders of 5% of outstanding shares together beneficially own a significant portion of our common stock and, as a result, can exercise control over stockholder and corporate actions.

Our officers and directors and the holders of at least 5% of our outstanding shares currently beneficially own approximately 48% of our outstanding common stock, and 60% on a fully diluted basis assuming the exercise of both vested and unvested options. As such, they have a significant influence over most matters requiring approval by stockholders, including the election of directors and approval of significant corporate transactions. This concentration of ownership may also have the effect of delaying or preventing a change in control, which in turn could have a material adverse effect on the market price of our common stock or prevent stockholders from realizing a premium over the market price for their shares.