RISK FACTORS

        An investment in our ADSs involves significant risks. You should consider carefully all of the information in this prospectus, including the risks and uncertainties described below, before making an investment in our ADSs. Any of the following risks could have a material and adverse effect on our business, financial condition and results of operations. Additional risks and uncertainties not currently known to us or that we currently deem to be immaterial may also materially and adversely affect our business, prospects, financial condition, results of operations and cash flows, the trading price of our ADSs could decline and you may lose all or part of your investment. In assessing these risks, you should also refer to the other information contained in this prospectus, including our consolidated financial statements and the related notes thereto.

Risks Relating to Our Business and Industry

We have a limited operating history in a competitive and rapidly evolving industry; it may be difficult to evaluate our prospects, and we may not be able to effectively manage our growth.

        Founded in December 2015, we have a limited operating history in the technology-as-a-service for financial institutions industry, which is competitive and rapidly evolving. We may have limited insight into trends that may develop and affect our business, and we may make errors in predicting and reacting to industry trends and evolving needs of our customers.

        We have experienced rapid growth in recent periods. In 2017, 2018, 2019 and the six months ended June 30, 2020, our revenue was RMB581.9 million, RMB1,413.5 million, RMB2,327.8 million (US$329.5 million) and RMB1,355.1 million (US$191.8 million), respectively. Our revenue growth has primarily been driven by the expansion of our solutions to address financial institutions' growing needs for technology solutions. Our historical results and growth may not be indicative of our future performance, and we may fail to continue our growth or maintain our historical growth rates.

        In addition, we may not be able to effectively manage our growth. Our business expansion may increase the complexity of our operations and place a significant strain on our managerial, operational, financial and human resources. Our current and planned personnel, systems, procedures and controls may not be adequate to support our future operations. If we are not able to manage our growth effectively, our business and prospects may be materially and adversely affected.

We have incurred operating losses in the past, expect to incur operating losses in the future, and we may not be able to achieve or sustain profitability.

        We incurred net losses of RMB607.0 million in 2017, RMB1,190.3 million in 2018, RMB1,687.5 million (US$238.9 million) in 2019, and RMB778.4 million (US$110.2 million) in the six months ended June 30, 2020. As of June 30, 2020, we had accumulated losses of RMB4,749.0 million (US$672.2 million). We are still in an early stage of development. We have incurred and will continue to incur substantial expenses to develop and commercialize our solutions, as well as to promote our business.

        We will need to generate increased revenue and control our expenses to become profitable. Rapid growth in our customer base, however, may increase our cost of revenue as a percentage of revenue in the short term because we primarily recognize revenue from our customers' use of our solutions through our transaction-based pricing, but we incur a large portion of the costs upfront. In addition, our efforts to grow our business may be more costly than we expect, and we may not be able to increase our revenue enough to offset our operating expenses. Furthermore, as a public company, we have incurred and expect to continue to incur additional legal, accounting and other expenses that we did not incur as a private company. We may incur significant losses for a number of reasons, including the other risks described in this prospectus, and unforeseen expenses, difficulties, complications and

18

Table of Contents

delays and other unknown events. If we are unable to achieve or sustain profitability, the market price of our ADSs may decrease significantly.

Most of our customers are commercial banks and other financial institutions that are highly regulated, and the tightening of laws, regulations or standards in the financial services industry could harm our business.

        Most of our customers are commercial banks and other financial institutions that are highly regulated and must comply with complex and changing government regulations and industry standards, which are subject to significant changes. Regulatory developments, including those in respect of consumer protection, credit availability, risk management and data privacy, could adversely affect our customers or otherwise result in them reducing the volume and frequency of their business transactions.

        Our financial institution customers must include restrictive provisions in their contracts with service providers such as us, with respect to security and privacy, ongoing monitoring, risk management and other limitations. These provisions may increase our costs, limit the scope of the solutions we offer or otherwise restrict customer access. In addition, our customers may have less capacity or incentive to purchase solutions from us, may pass on their increased costs to us, or may cease to use certain of our solutions. For example, on December 1, 2017, the PRC government issued the Notice on the Regulation and Rectification of the "Cash Loan" Business, or Circular 141, which prohibits banking financial institutions, including banks, trust companies and consumer finance companies, that cooperate with third-parties in carrying out loan businesses from outsourcing their credit examination, risk control, or other core businesses and accept credit enhancement services provided by any third party without a guarantee license. Circular 141 and the Notice on Specific Rectification Implementation Plans for Risk of Online Microfinance Businesses of Microfinance Companies, or the Circular 56, prohibit third parties that cooperate with banking financial institutions and internet microfinance companies from directly charging interest or fees to borrowers.

        In addition, because we primarily use a transaction-based model, any reduction of transactions by our customers may materially and adversely affect our business and results of operations. For example, on March 28, 2018, the PRC government promulgated the Notice on Strengthening the Renovation of Asset Management Business through the Internet and Launching Acceptance Work, or Circular 29, according to which the public issuance and sale of asset management products through the internet requires an asset management business license or asset management product sales license issued by the central financial management department. Circular 29 also prohibits any entity to publicly raise funds from using direct or indirect means unless that entity has received permission from competent regulatory authorities.

        As a result of those laws and regulations, certain of our customers have had to adjust their business practices in ways that reduce their use of our solutions, and these types of changes in response to regulatory development may adversely affect our business, result of operations and financial conditions.

We are subject to evolving regulatory requirements; if we do not comply with these regulations, or fail to adapt to regulatory changes, our business and prospects may be materially and adversely affected.

        Many aspects of our business, including the provision of internet information, technology services to banks and insurance companies, insurance loss adjustment services, online publication services relating to financial product information, facilitating consumer lending products for banks and online small loan companies, managing and distributing various asset management products, blockchain information services and electronic certification services are subject to supervision and regulation by various governmental authorities in China or in other jurisdictions where we operate. In addition, as we continue to expand the solutions on our platform, we may be subject to new and more complex regulatory requirements. For example, in May 2019, we were granted a virtual banking license to

19

Table of Contents

operate in Hong Kong by the Hong Kong Monetary Authority, and we are subject to requirements prescribed by the Hong Kong Monetary Authority and other Hong Kong law and regulation for this entity's operations. We are also required to comply with applicable laws and regulations in relevant jurisdictions to protect the privacy and security of our customers' information. Legal and regulatory restrictions may delay, or possibly prevent, some of our solutions or services from being offered, which may have a material adverse effect on our business, financial condition and results of operations. Violation of laws and regulations may also result in severe penalties, confiscation of illegal income, revocation of licenses and, under certain circumstances, criminal prosecution.

        The PRC regulatory framework governing financial technology services is unclear and evolving. New laws or regulations may be promulgated, which could impose new requirements or prohibitions that render our operations or our technologies non-compliant. In addition, due to uncertainties and complexities of the regulatory environment, we cannot assure you that regulators will interpret laws and regulations the same way we do, or that we will always be in full compliance with applicable laws and regulations. To remedy any violations, we may be required to modify our business models, solutions and technologies in ways that render our solutions less appealing. We may also become subject to fines or other penalties, or, if we determine that the requirements to operate in compliance are overly burdensome, we may elect to terminate potentially non-compliant operations. In each such case, our business, financial condition and results of operations may be materially and adversely affected.

Failure to maintain and enlarge our customer base or strengthen customer engagement may adversely affect our business and results of operations.

        Our revenue growth depends on our ability to maintain and enlarge our customer base and strengthen customer engagement so that more of our customers, including our customers that are not our premium customers, a significant majority of which have not contributed to our revenue, will use our solutions more often and contribute to our revenue growth. Our customers may not continue to use our solutions once their existing contract expires or they may not purchase additional solutions from us. This risk is especially apparent in circumstances where it is inexpensive for them to switch service providers. Our ability to maintain and enlarge our customer base and strengthen our customer engagement will depend on many factors, some of which are out of our control, including:

•

our ability to continually innovate our technologies to keep pace with rapid technological changes;



•

our ability to continually innovate our solutions in response to evolving customer demands and expectations and intense market competition;



•

our ability to customize solutions for our customers;



•

customer satisfaction with our solutions, including any new solutions that we may develop, and the competitiveness of our pricing and payment terms;



•

the effectiveness of our solutions in helping our customers improve efficiency, enhance service quality, and reduce costs;



•

customers' acceptance of our transaction-based pricing model;



•

our ability to transition our customers from "hook products," which we provide at low or even no charge, to products that provide us more revenue and better margins; and



•

the success and growth of our customers, which could be affected by general-economic and market conditions, regulatory developments, etc.

        As we primarily use a transaction-based model, a reduction of transactions by our customers would adversely affect our business and results of operations. For example, the recent outbreak of a novel

20

Table of Contents

strain of the coronavirus, or COVID-19, had a negative impact on project implementation and our customer's usage of our solutions, and as a result, our revenue. See "—COVID-19 outbreak has adversely affected, and may continue to adversely affect, our financial and operating performance."

        In addition, historically, we have derived some of our customers either through acquisitions or by referrals from the Ping An Group. We may not be able to develop customers organically as rapidly or at the same pace as we have historically done through acquisitions or referrals. In addition, if we do not receive as many customer referrals from Ping An Group as we have historically, we may not be able to grow our customer base as quickly or at all.

        We have relied on a limited number of key customers. In 2017, 2018, 2019 and the six months ended June 30, 2020, two customers contributed to 10% or more of our total revenues for these respective periods. They were Ping An Group, and Lufax Holding Ltd. and its subsidiaries, or Lufax Group. Ping An Group is our strategic partner, our largest supplier and our related party. Lufax Group, an associate company of Ping An Group, was also our related party in our consolidated financial statements until November 29, 2017, when we ceased to be consolidated with Ping An Group. Our total sales to Ping An Group accounted for 40.5%, 37.3%, 42.7% and 45.7% of our total revenue and our total sales to Lufax Group accounted for 30.1%, 27.4%, 12.8% and 13.2% of our total revenue in 2017, 2018, 2019 and the six months ended June 30, 2020, respectively. Please refer to note 5(a) to our audited consolidated financial statements included elsewhere in this prospectus. We anticipate that our dependence on a limited number of customers will continue for the foreseeable future. Consequently, failure to maintain and strengthen our relationships with these key customers may cause material fluctuations or declines in our revenues and have a material adverse effect on our business and results of operations.

Ping An Group is our strategic partner, our most important customer and our largest supplier. Any deterioration of our relationship with Ping An Group could have a material adverse effect on our results of operations, business and growth.

        Ping An Group is our strategic partner and our most important customer and supplier. We began as the financial technology solution arm of Ping An Group. We have partnered with Ping An Group to jointly develop new technology and applications, and Ping An Group provides us support in technology and infrastructure, in particular cloud infrastructure. Ping An Group also provides us with a diverse, reliable source of real-life application scenarios to validate and prove our technology. Many of our customer insights and innovative solutions are first initiated and tested within the Ping An Group ecosystem. Our strategic partnership with Ping An Group has contributed to our growth significantly. If our relationship with Ping An Group deteriorates and we are no longer able to access Ping An Group's technology or solutions, we will need to find alternative service providers and adjust our existing products and service offerings, which may negatively affect the quality of our solutions and will be costly and time-consuming, and in turn will have significant adverse impact on our business and results of operation.

        We provided a number of services, including those for customer acquisition and management, risk management, operation and product optimization, to Ping An Group. Our revenue from Ping An Group amounted to RMB235.7 million, RMB527.6 million, RMB994.7 million (US$140.8 million) and RMB619.8 million (US$87.7 million) in 2017, 2018, 2019 and the six months ended June 30, 2020, respectively, accounting for 40.5%, 37.3%, 42.7% and 45.7% of our total revenue in these respective periods. Please refer to note 5(a) to our audited consolidated financial statements included elsewhere in this prospectus. If, for any reason, Ping An Group significantly reduces or ceases purchasing from or cooperating with us, our business and results of operations may be materially and adversely affected.

        Ping An Group has also been our most important supplier of technical infrastructure, technology support and maintenance. In 2017, 2018, 2019 and the six months ended June 30, 2020, we purchased

21

Table of Contents

RMB358.1 million, RMB675.8 million, RMB758.5 million (US$107.4 million) and RMB474.8 million (US$67.2 million) products and services from Ping An Group, respectively, accounting for 23.9%, 27.6%, 19.4% and 22.7% of our total cost of revenue and operating expenses in these respective periods. Our relationship with Ping An Group may be affected if Ping An Group reduces its beneficial ownership in us. For instance, in July 2019, we entered into a long-term agreement, or the Strategic Cooperation Agreement, with Ping An Group, which is effective for a term of ten years after completion of our initial public offering on December 17, 2019, subject to Ping An Group continuing to beneficially own at least 30% of our shares.

        Ping An Group is also our principal shareholder. Prior to this offering, Ping An Group, through Bo Yu Limited and Ping An Overseas, beneficially owned 36.3% of our ordinary shares and it will own 34.7% of our ordinary shares following this offering, assuming that the overallotment option is not exercised. Furthermore, each shareholder of Yi Chuan Jin Limited, one of our indirect shareholders, has granted an option to Bo Yu Limited to purchase from him or her up to 100% of his or her shares in Yi Chuan Jin Limited. Yi Chuan Jin Limited holds 75.1% of the shares of Sen Rong Limited, which in turn, is our direct shareholder and beneficially owns 265,939,650, or 24.0% of our ordinary shares as of the date of this prospectus. Please refer to notes (1), (2) and (3) to the beneficial ownership table in the "Principal Shareholders" section included in this prospectus for more information. Ping An Group is a public company listed on the Stock Exchange of Hong Kong and the Shanghai Stock Exchange. When exercising its rights as our shareholder, Ping An Group may take into account not only the interests of our company and our other shareholders but also its own interests, the interests of its shareholders and the interests of its other affiliates. The interests of our company and our other shareholders may conflict with the interests of Ping An Group and its shareholders and other affiliates. These types of conflicts may result in our losing business opportunities, including opportunities to enter into lines of business that may directly or indirectly compete with those pursued by Ping An Group or the companies within its ecosystem.

COVID-19 outbreak has adversely affected, and may continue to adversely affect, our financial and operating performance.

        Since December 2019, COVID-19 has become widespread in China and many other countries. On January 27, 2020, the Chinese central government extended the Lunar New Year holiday and local governments in China also issued temporary measures to limit large gatherings and imposed traffic restrictions to contain the outbreak of COVID-19. Although China's economy is reopening, our operations have been negatively affected by delays in project implementation, on-site work, business development, client interaction and general uncertainties surrounding the effective and timely constraint of COVID-19. As a result, customer usage of our solutions and our revenue, especially our transaction-based revenue, have been adversely affected. While we have been proactively working with existing and new customers to assist their shift to cloud-based solutions amid the interruptions, we cannot assure you that these initiatives and efforts will successfully mitigate the impact. In addition, our business operations could be disrupted if any of our employees is suspected of having these or any other epidemic disease, since it could require our employees to be quarantined and/or our offices to be closed for disinfection or other remedial measures. The outbreak of COVID-19 and the resulting widespread health crisis has also adversely affected economies and financial markets globally, which could result in an economic downturn that could affect the demand for our products and future revenue and operating results. Our overseas operations and businesses development, especially in South East Asia, have been affected due to continued travel restrictions and lock-downs in many countries in that region. The outlook for COVID-19 remains fluid and its long-term implications on our business and results of operations are uncertain. The extent to which this outbreak impacts our results of operations will depend on future developments, which are highly uncertain and unpredictable, including new information that may emerge concerning the severity of this outbreak and future actions, if any, to

22

Table of Contents

contain this outbreak or treat its impact, among others. We are closely monitoring the pandemic and its impact on us.

We operate in a competitive industry. If we are unable to compete effectively, we may lose market share.

        China's financial technology services industry is highly competitive and rapidly evolving. New competitors, including affiliates of financial institutions, traditional IT companies and internet companies, are entering this market. Our primary competitors include companies affiliated with financial institutions selling new competitive solutions, such as CIB Fintech, independent technology companies that provide customized development, implementation and support services such as Hundsun Electronics and Digital China, as well as affiliates of internet companies, such as Alibaba, Tencent, JD and Baidu. Our competitors may have greater brand recognition, larger customer bases or greater financial, technological or marketing resources than we do. As a result, our competitors may be able to respond more quickly and effectively to new or changing opportunities, technologies, standards or customer requirements, and they may be able to better adapt to significant changes in regulatory and industry environments. Competition may also result in continued pricing pressures, which may lead to price reductions for our solutions, and may adversely affect our profitability and market share. In addition, we may face competition from our customers, who may develop their own solutions internally after they have gained experience and expertise through their use of our solutions. If we are unable to successfully compete in the financial technology services industry, our business, financial condition and results of operations may be materially and adversely affected.

The technologies we use may contain undetected errors, which could result in customer dissatisfaction, damage to our reputation and loss of customers.

        The solutions we offer are built on huge stacks of data, so we adopt sophisticated and innovative technologies to address our operating needs, predict operating patterns and help make decisions in terms of business strategies and implementation plans. We aim to make our operations and our solutions more streamlined, automated and cost-effective by using advanced technologies including AI, blockchain, cloud and big data and the application of these technologies in our solutions is still under development. We may encounter technical obstacles, and we may discover problems that prevent our technologies from operating properly, which could adversely affect our information infrastructure and other aspects of our business where our technologies are applied. If our solutions do not function reliably or fail to achieve our customers' or their end-customers' expectations in terms of performance, we may lose existing customers or fail to attract new ones, which may damage our reputation and adversely affect our business.

        Material performance problems, defects or errors in our existing or new software, applications and solutions may arise and may result from the interface between our solutions and systems and data that we did not develop, the function of which is beyond our control, or defects and errors that were undetected in our testing. These types of defects and errors, and any failure by us to identify and address them, could result in a loss of revenue or market share, diversion of development resources, harm to our reputation and increased service and maintenance costs. Defects or errors may discourage existing or potential customers from utilizing our solutions. Correcting these types of defects or errors could prove to be impossible or impracticable. The costs incurred in correcting any defects or errors may be substantial and could have a material adverse effect on our business, financial condition and results of operations.

Failure to comply with existing or future laws and regulations related to data protection or data security could lead to liabilities, administrative penalties or other regulatory actions, which could negatively affect our operating results and business.

        The regulatory framework for the collection, use, safeguarding, sharing, transfer and other processing of personal data worldwide is rapidly evolving and is likely to remain uncertain for the foreseeable future. Regulatory authorities in virtually every jurisdiction in which we operate have implemented and are considering a number of legislative and regulatory proposals concerning personal data protection.

23

Table of Contents

        In recent years, the PRC government has tightened the regulation of the storage, sharing, use, disclosure and protection of personal data and user data, particularly personal data obtained through individuals' use of websites and online services. Relevant PRC laws and regulations require internet service providers and other network operators, among other things, to clearly state the authorized purpose, methods and scope of the collection and usage of personal data and obtain the consent of users for the processing of this personal data, as well as to establish user information protection systems with remedial measures. We have seen a similar trend in other jurisdictions. For example, in May 2018, a new data protection regime, the European Union's General Data Protection Regulation, or the GDPR, became applicable; the GDPR can apply to the processing of personal data by companies outside of the European Union, including where the processing of personal data relates to the offering of goods and services to, or monitoring the behavior of, individuals in the European Union. The GDPR and data protection laws in other jurisdictions may apply to our processing of personal data in the future. The application of these laws to our business would impose on us more stringent compliance requirements with more significant penalties for non-compliance than PRC data protection laws and regulations, and our compliance with such requirements could require significant resources and result in substantial costs, which may materially and adversely affect our business, financial condition, results of operations and prospects.

        We collect, process and store significant amounts of personal data concerning our customers and their end-customers, as well as personal data pertaining to our business partners and employees. Compliance with applicable personal data and data security laws and regulations is a rigorous and time-intensive process. As global data protection laws and regulations increase in number and complexity, we cannot assure you that our data protection systems will be considered sufficient under all applicable laws and regulations due to factors including the uncertainty of the interpretation and implementation of these laws and regulations. Furthermore, we cannot assure you that the end-customer information that we process for our customers and the information we receive from our third-party data partners are obtained and transmitted to us in full compliance with relevant laws and regulations. Moreover, there could be new laws, regulations or industry standards that require us to change our business practices and privacy policies, and we may also be required to put in place additional mechanisms ensuring compliance with new data protection laws, all of which may increase our costs and materially harm our business, prospects, financial condition and results of operations. Any failure or perceived failure by us to comply with applicable laws and regulations could result in reputational damage or proceedings or actions against us by governmental entities, individuals or others. These proceedings or actions could subject us to significant civil or criminal penalties and negative publicity, result in the delayed or halted processing of personal data that we need to undertake to carry on our business, as well as the forced transfer or confiscation of certain personal data.

Breach of our security measures or those of our third-party cloud computing platform provider, or other third-party service providers, may result in our data, IT systems, and services being perceived as not being secure.

        Our services involve the storage and transmission of our customers and their end-customers' proprietary and other sensitive data, including financial information and other personally identifiable information. Our security measures may be breached as a result of efforts by individuals or groups of hackers and sophisticated organizations, including by fraudulently obtaining system information from our employees or customers. Our security measures could also be compromised by employee error or malfeasance, which could result in someone obtaining unauthorized access to, or denying authorized access to, our IT systems, our customers' data or our data, including our intellectual property and other confidential business information.

        Because the techniques used to breach, obtain unauthorized access to, and sabotage IT systems change frequently, grow more complex over time, and are generally not recognized until launched

24

Table of Contents

against a target, we may be unable to anticipate or implement adequate measures to prevent such techniques. In addition, our internal IT systems continue to evolve, and we are often early adopters of new technologies and new ways of sharing data and communicating internally and with partners and customers, which increases the complexity of our IT systems. In addition, our customers may authorize third-party technology providers to access their customer data, and some of our customers may not have adequate security measures to protect their data that is stored on our servers. Because we do not control our customers or third-party technology providers, or the processing of such data by third-party technology providers, we cannot ensure the integrity or security of such transmissions or processing. Malicious third parties may also conduct attacks designed to temporarily deny customers access to our services.

        A security breach could expose us to a risk of loss or inappropriate use of proprietary and sensitive data, or the denial of access to this data. A security breach could also result in a loss of confidence in the security of our services, damage our reputation, negatively impact our future sales, disrupt our business and lead to legal liability. Finally, the detection, prevention and remediation of known or potential security vulnerabilities, including those arising from third-party hardware or software, may result in additional direct and indirect costs, for example, we may be required to purchase additional infrastructure or our remediation efforts may degrade the performance of our solutions.

        In the event of a system outage and physical data loss, the performance of our platform, services and solutions would be materially and adversely affected. The satisfactory performance, reliability and availability of our platform, services and solutions and the technology infrastructure that underlies them are critical to our operations and reputation and our ability to retain and attract customers. Our offering platform is integrated with Ping An Financial Cloud. Our operation depends on its ability to protect our system against damage or interruption from natural disasters, power or telecommunications failures, air quality issues, environmental conditions, computer viruses or other attempts to harm their systems, including criminal acts and similar events. If there is a lapse in service or damage to Ping An Financial Cloud, we could experience interruptions and delays in our service and may incur additional expenses in arranging new facilities.

We may not be able to prevent others from unauthorized use of our intellectual property, which could harm our business and competitive position.

        We regard our patents, copyrights, trademarks, trade secrets, and other intellectual property as critical to our business. Unauthorized use of our intellectual property by third parties may adversely affect our business and reputation. We rely on a combination of intellectual property laws and contractual arrangements to protect our proprietary rights. It is often difficult to register, maintain, and enforce intellectual property rights in countries or regions with less developed regulatory regimes or inconsistent and unreliable enforcement mechanisms. Sometimes laws and regulations are subject to interpretation and enforcement and may not be applied consistently due to the lack of clear guidance on statutory interpretation. In addition, our contractual agreements may be breached by our counterparties, and there may not be adequate remedies available to us for any such breach. Accordingly, we may not be able to effectively protect our intellectual property rights or to enforce our contractual rights in China and other jurisdictions in which we operate. Detecting and preventing any unauthorized use of our intellectual property is difficult and costly, and the steps we have taken may be inadequate to prevent infringement or misappropriation of our intellectual property. If we resort to litigation to enforce or protect our intellectual property rights, such litigation could result in substantial costs and a diversion of our managerial and financial resources. We can provide no assurance that we will prevail in such litigation. In addition, our trade secrets may be leaked or otherwise become available to, or be independently discovered by, our competitors, and we would have no right to prevent others' use of them.

25

Table of Contents

We may be subject to intellectual property infringement claims, which may be expensive to defend and may disrupt our business and operations.

        We cannot be certain that our operations or any aspects of our business do not or would not infringe upon or otherwise violate patents, copyrights, trademarks or other intellectual property rights held by third parties. We may be subject to penalties, legal proceedings and claims relating to the intellectual property rights of others. In addition, there may be other third-party intellectual property that is infringed by our solutions, services or other aspects of our business. There could also be intellectual properties that we are not aware of that our solutions or services may inadvertently infringe. As of June 30, 2020, we had submitted 3,382 patent applications in China and 945 in other countries or regions. There can be no assurance that our patent or other intellectual property applications will be approved, that any issued patents or other intellectual property rights would adequately protect our intellectual property, or that such patents or other intellectual properties would not be challenged by third parties or found by competent authority to be invalid or unenforceable.

        There can be no assurance that holders of patents purportedly relating to some aspect of our technology platform or business, if any such holders exist, would not seek to enforce these patents against us in China or any other jurisdictions. Furthermore, the application and interpretation of PRC patent laws and the procedures and standards for granting patents in the PRC are still evolving and are uncertain, and there can be no assurance that PRC courts or regulatory authorities would agree with our analysis. If we are found to have violated the intellectual property rights of others, we may be subject to liability for our infringement activities or may be prohibited from using such intellectual property, and we may incur licensing fees or be forced to develop alternatives of our own. In addition, we may incur significant expenses, and may be forced to divert management's time and other resources from our business and operations to defend against these third-party infringement claims, regardless of their merits. Successful infringement or licensing claims made against us may result in significant monetary liabilities and may materially disrupt our business and operations by restricting or prohibiting our use of the intellectual property in question, which may materially and adversely affect our business, financial condition and results of operations.

        Registering, managing and enforcing intellectual property rights in the PRC is often difficult. Statutory laws and regulations may not be applied consistently due to the lack of clear interpretation guidance. We have filed registration applications for certain trademarks that we use in our operations, including the logo for our website and mobile apps. However, third parties may file applications to register the same or similar trademarks that we are applying for. In addition, third parties may object our registration applications, and the relevant trademark authority may not rule in our favor in such disputes. If our applications are rejected by the relevant trademark authority, we may be prohibited from using those trademarks, including the logo for our website and mobile apps in our business operations and we may need to change the logo of our website and mobile apps, which may have an adverse effect on our business and operations.

We face risks of defaults by borrowers under the loans for which we provided credit enhancement under our legacy credit management business.

        Before the end of January 2018, to test our credit model in real world conditions, we provided credit enhancement to our customers to facilitate their lending transactions by agreeing to purchase non-performing loans of their borrowers who satisfied certain risk management criteria. These loans generally have terms of up to three years. We ceased offering credit enhancement for any new lending transactions of our customers at the end of January 2018. However, the outstanding balance of these legacy loans could still expose us to significant credit risks. As of December 31, 2018 and 2019 and June 30, 2020, our maximum guarantee exposure, which represents our total amount of liability if all borrowers under the loans for which we provided credit enhancement were to default, was RMB1,348.6 million, RMB467.2 million (US$66.1 million) and RMB163.9 million (US$23.2 million),

26

Table of Contents

respectively. If there are substantial defaults of these legacy loans, our result of operations and financial condition could be materially and adversely affected.

We rely on third parties for various aspects of our business and the solutions that we offer. Our business, results of operation, financial condition and reputation may be materially and adversely affected if these third parties do not continue to maintain or expand their relationship with us, or if they fail to perform in accordance with the terms of our contracts.

        We rely on third parties for various aspects of our business and the solutions we offer. For example, we rely on computer hardware, software, and cloud services, internet and telecommunication services, and third-party-supplied data.

        We expect to continue to rely on these third parties to supplement our capabilities for a significant period of time if not indefinitely. Therefore, in order to conduct our business, we need all of these parties to function in a flawless and timely manner. However, we cannot assure you that these third parties will provide their support properly or in a cost-effective manner or the third party-supplied data we rely on will be complete, accurate or reliable. In the event of problems with any of these third party providers, transitioning to a new provider may disrupt our business and increase our cost. In addition, we cannot assure you that we would be able to find suitable replacement suppliers on commercially reasonable terms or timely basis.

        If any of our third party service providers fails to perform properly, we cannot assure you that we will be able to find a suitable alternative in a timely and cost-effective manner or at all. Our third party service providers may carry out their business in an inappropriate manner or in violation of regulations or laws. Any of such occurrences could diminish our ability to operate or damage our business reputation, or cause us regulatory or financial harm, any of which could negatively affect our business, financial condition and results of operations.

Our implementation cycles can be lengthy and variable, and could use up significant resources prior to generating revenue.

        The implementation and testing of our solutions by our customers typically lasts from one to four months or longer, and unexpected implementation delays and difficulties can occur. Implementing our solutions typically requires us to integrate our solutions with our customers' and third-parties' systems. This can be complex, time consuming and expensive for our customers and can result in delays in implementing and deploying our solutions. Failures to meet our customers' expectations for implementing our products could damage our relationships with customers or even result in a loss of customers. The consequences of these types of failures could include us having to grant monetary credits for current or future service engagements, reduced fees for additional product sales, or a customer's refusal to pay their contractually-obligated license, maintenance or service fees. In addition, time-consuming implementations may also increase the quantity of staff we must allocate to each customer, thereby increasing our costs and adversely affecting our business, results of operations and financial condition.

Our inability to use software licensed from third parties, including open source software, could negatively affect our ability to sell our solutions and subject us to possible litigation.

        Our technology platform incorporates software licensed from third parties, including open-source software, which we use without charge. Although we monitor our use of open-source software, the terms of many open-source licenses that we are subject to have not been interpreted by courts, and there is a risk that these licenses could be construed to impose unanticipated conditions or restrictions on our ability to provide our solutions. In addition, the terms of open-source software licenses may require us to provide software that we develop to others on unfavorable license terms. For example, certain open-source licenses may require us to offer the components of our platform that incorporate

27

Table of Contents

open source software for free, to make source code for modifications or derivative works available to others, and to license such modifications or derivative works under the terms of the particular open-source license.

        In addition, we could be required to seek licenses from third parties in order to continue offering our solutions, and these types of licenses may not be available on terms that are acceptable to us, or at all. Alternatively, we may need to re-engineer our solutions or discontinue using certain functionalities of our solutions. Our inability to use third-party software could result in disruptions to our business, or delays in developing future offerings or enhancements of our existing solutions, which could materially and adversely affect our business and results of operations.

If we are unable to protect or promote our brand and reputation, our business may be materially and adversely affected.

        Our brand names and reputation are subject to a variety of factors that are beyond our control. For example, customer complaints about our service and negative publicity about our industry could diminish consumer confidence in our solutions. Failure to protect our customers' privacy or effectively adopt security measures could have the same effect. However, measures we may take from time to time to combat risks of fraud and breaches of privacy and security can damage relations with our customers. These measures heighten the need for prompt and accurate customer service to resolve irregularities. If we cannot handle customer complaints effectively or balance different customers' needs appropriately, our reputation may suffer, and we may lose our customers' confidence. Furthermore, we may be subject to claims seeking to hold us liable for inaccurate or false information. Any claims, regardless of merit, may force us to participate in costly time-consuming litigation or investigations, divert significant management and staff attention, and damage our reputation and brand. In addition, our reputation may be undermined if our customers, who are primarily financial institutions, violate laws and regulations such as financial supervision regulations and anti-money laundering laws, when using our solutions. Any significant damage to our reputation, or to the perceived quality or awareness of our brand or solutions, or any significant failure by us to promote and protect our brand and reputation, could make it more difficult for us to maintain a good relationship with our customers, promote our services or retain qualified personnel, any of which may have a material adverse effect on our business.

        Our efforts to build our brand have caused us to incur expenses, and our future marketing efforts will require us to incur additional expenses. These efforts may not result in increased revenues in the immediate future or at all and, even if they do, any increases in revenues may not offset the expenses incurred. If we fail to successfully promote and maintain our brand while incurring additional expenses, our results of operations and financial condition would be adversely affected, and our ability to grow our business may be impaired.

        In addition, the use of the "Ping An" brand by members of Ping An Group may expose us to reputational risks if these entities take actions that damage the "Ping An" brand, and, given our partnership with Ping An Group, any negative development in Ping An Group's market position, reputation or brand recognition may materially and adversely affect our brand image, reputation and market value.

We may not be able to obtain additional capital when desired, on favorable terms or at all.

        We may require additional cash resources due to operating losses or the growth and development of our business, including any investments or acquisitions we may decide to pursue. If our cash resources are insufficient to satisfy our requirements, we may seek to issue additional equity or debt securities or obtain new or expanded credit facilities. Our ability to obtain external financing is subject to uncertainties, including our future financial condition, results of operations, cash flows, share price performance, liquidity in the international capital and lending markets, and PRC governmental regulations over foreign investment and our industry. In addition, incurring indebtedness would subject

28

Table of Contents