RISK FACTORS

Investing in our common stock involves a high degree of risk. You should consider and read carefully all of the risks and uncertainties described below, as well as other information included in this prospectus, including our consolidated financial statements and related notes included elsewhere in this prospectus, before making an investment decision. If any of the following risks actually occur, it could harm our business, prospects, operating results and financial condition. Unless otherwise indicated, references to our business being harmed in these risk factors will include harm to our business, reputation, financial condition, results of operations, net revenue and future prospects. In such event, the trading price of our common stock could decline and you might lose all or part of your investment.

Risks Related to Our Business and Our Industry

We conduct business in a heavily regulated industry, and if we fail to comply with applicable healthcare laws and government regulations, we could incur financial penalties, become excluded from participating in government healthcare programs, be required to make significant operational changes or experience adverse publicity, which could harm our business.

The U.S. healthcare industry is heavily regulated and closely scrutinized by federal, state and local authorities. Comprehensive statutes and regulations govern the manner in which we provide and bill for services and collect reimbursement from governmental programs and private payers, our contractual relationships with our providers, vendors, health network partners and customers, our marketing activities and other aspects of our operations. Of particular importance are:

19

Because of the breadth of these laws and the narrowness of the statutory exceptions and safe harbors available, it is possible that some of our business activities could be subject to challenge under one or more of such laws. Achieving and sustaining compliance with these laws may prove costly. The risk of our being found in violation of these laws and regulations is increased by the fact that many of them have not been fully interpreted by regulatory authorities or the courts, and their provisions are sometimes complex and open to a variety of interpretations. Failure to comply with these laws and other laws can result in civil and criminal penalties such as fines, damages, recoupments of overpayments, imprisonment, loss of enrollment status and exclusion from the Medicare and Medicaid programs. Our failure to accurately anticipate the application of these laws and regulations to our business or any other failure to comply with regulatory requirements could create liability for us and negatively affect our business. Any action against us for violation of these laws or regulations, even if we successfully defend against it, could cause us to incur significant legal expenses, divert our management’s attention from the operation of our business and result in adverse publicity.

To enforce compliance with the federal laws, the U.S. Department of Justice and the U.S. Department of Health and Human Services Office of Inspector General, or OIG, regularly scrutinize healthcare providers, which has led to a number of investigations, prosecutions, convictions and settlements in the healthcare industry. Responding to and managing government investigations can be time- and resource-consuming, divert management’s attention from the business and generate adverse publicity. Any such investigation or settlement could increase our costs or otherwise have a negative impact on our business, even if we are ultimately found to

20

be in compliance with the relevant laws. Moreover, if one of our health system partners or another third party fails to comply with applicable laws and becomes the target of a government investigation, government authorities could require our cooperation in the investigation, which could cause us to incur additional legal expenses and result in adverse publicity.

In addition, because of the potential for large monetary exposure under the federal False Claims Act, which provides for treble damages and penalties of $11,463 to $22,927 per false claim or statement (as of 2019, and subject to annual adjustments for inflation), healthcare providers often resolve allegations without admissions of liability for significant amounts to avoid the uncertainty of treble damages that may be awarded in litigation proceedings. Such settlements often contain additional compliance and reporting requirements as part of a consent decree, settlement agreement or corporate integrity agreement. Given the significant size of actual and potential settlements, it is expected that the government will continue to devote substantial resources to investigating healthcare providers’ compliance with the healthcare reimbursement rules and fraud and abuse laws.

The One Medical PCs’ operation of medical practices is also subject to various state laws. Among other things, states regulate the licensure of healthcare providers, the supervision by physicians of non-physician practitioners such as physician assistants, nurse practitioners and registered nurses, the retention and storage of medical records, patient privacy and the protection of health information, and the prescribing and dispensing of pharmaceuticals and controlled substances. All such laws, and interpretations thereof, are subject to change. We could be subject to financial penalties and fines, criminal prosecution or other sanctions if our operations are found to not comply with these laws.

In addition, our ability to provide our full range of services in each state is dependent upon a state’s treatment of telemedicine and emerging technologies (such as digital health services), which are subject to changing political, regulatory and other influences. Many states have laws that limit or restrict the practice of telemedicine, such as laws that require a provider to be licensed and/or physically located in the same state where the patient is located. For example, of the jurisdictions in which we operate, California, Georgia, New York, Massachusetts, Oregon and Washington, D.C. are not members of the Interstate Medical Licensure Compact, which streamlines the process by which physicians licensed in one state are able to practice in other participating states. Failure to comply with these laws could result in denials of reimbursement for our services (to the extent such services are billed), recoupments of prior payments, professional discipline for our providers or civil or criminal penalties.

The laws, regulations and standards governing the provision of healthcare services may change significantly in the future. New or changed healthcare laws, regulations or standards may harm our business. A review of our business by judicial, law enforcement, regulatory or accreditation authorities could result in challenges or actions against us that could harm our business and operations.

The impact of healthcare reform legislation and other changes in the healthcare industry and in healthcare spending on us is currently unknown, but may harm our business.

Our revenue is dependent on the healthcare industry and could be affected by changes in healthcare spending and policy. The healthcare industry is subject to changing political, regulatory and other influences. The Patient Protection and Affordable Care Act, or PPACA, made major changes in how health care is delivered and reimbursed, and increased access to health insurance benefits to the uninsured and underinsured population of the United States.

The PPACA, among other things, increased the number of individuals with Medicaid and private insurance coverage, implemented reimbursement policies that tie payment to quality, facilitated the creation of accountable care organizations that may use capitation and other alternative payment methodologies, strengthened enforcement of fraud and abuse laws and encouraged the use of information technology. Such changes in the

21

regulatory environment may also result in changes to our payer mix that may affect our operations and net revenue.

In addition, certain provisions of the PPACA authorize voluntary demonstration projects, which include the development of bundling payments for acute, inpatient hospital services, physician services and post-acute services for episodes of hospital care. Further, the PPACA may negatively impact payers by increasing medical costs generally, which could have an effect on the industry and potentially impact our business and revenue as payers seek to offset these increases by reducing costs in other areas. The full impact of these changes on us cannot be determined at this time.

We are also impacted by the Medicare Access and CHIP Reauthorization Act, under which physicians must choose to participate in one of two payment formulas, Merit-Based Incentive Payment System, or MIPS, or Alternative Payment Models, or APMs. Beginning in 2019, MIPS allows eligible physicians to receive upward or downward adjustments to their Medicare Part B payments based on certain quality and cost metrics, among other measures. As an alternative, physicians can choose to participate in an Advanced APM. Advanced APMs are exempt from the MIPS requirements, and physicians who are meaningful participants in APMs will receive bonus payments from Medicare pursuant to the law.

In addition, current and prior healthcare reform proposals have included the concept of creating a single payer or public option for health insurance. If enacted, these proposals could have an extensive impact on the healthcare industry, including us. We are unable predict whether such reforms may be enacted or their impact on our operations.

We expect that additional state and federal healthcare reform measures will be adopted in the future, any of which could limit the amounts that federal and state governments and other third-party payers will pay for healthcare services, which could harm our business, financial condition and results of operations.

If our volume of members with private health insurance coverage declines, including due to a decline in the prevalence of employer-sponsored health care, our revenue may be reduced.

Private third-party payers, including health maintenance organizations, or HMOs, preferred provider organizations and other managed care plans, as well as medical groups and independent practice associations, referred to collectively as IPAs, that contract with HMOs, typically reimburse healthcare providers at a higher rate than Medicare, Medicaid or other government healthcare programs. Reimbursement rates are set forth by contract when the One Medical PCs are in-network, and payers utilize plan structures to encourage or require the use of in-network providers. As a result, our ability to maintain or increase patient volumes covered by private third-party payers and to maintain and obtain favorable contracts with private third-party payers significantly affects our revenue and operating results.

We currently derive a large portion of our revenue from members acquired under our contractual arrangements with enterprise clients that purchase health care for their employees (either via insurance or self-funded benefit plans). A large part of the demand for our solutions and services among enterprise clients depends on the need of these employers to manage the costs of healthcare services that they pay on behalf of their employees. While the percentage of employers who are self-insured has been increasing over the past decade, this trend may not continue. Some experts have predicted that future healthcare reform will encourage employer-sponsored health insurance to become significantly less prevalent as employees migrate to obtaining their own insurance over state-sponsored insurance marketplaces. The resulting loss in members may also decrease the fees we receive under our contracts with health network partners as fewer members engage in their healthcare networks. Were this to occur, there is no guarantee that we would be able to compensate for the loss in revenue derived from enterprise clients and health network partners by increasing retail member acquisition. In addition, health network partners who rely on our contracts with them for primary care patients to use their healthcare networks, particularly specialty care, may become dissatisfied with the terms under the applicable contract and

22

seek to amend or terminate, or elect not to renew, these contracts. In these cases, our business and results of operations would be harmed.

Private third-party payers, including managed care plans, continue to demand discounted fee structures, and the ongoing trend toward consolidation among payers tends to increase their bargaining power over fee structures. Payers may utilize plan structures such as narrow networks and tiered networks that limit beneficiary provider choices or impose significantly higher cost sharing obligations when care is obtained from providers in a disfavored tier. Other healthcare providers may impact the ability of the One Medical PCs to enter into managed care contracts or negotiate increases in reimbursement and other favorable terms and conditions. In addition to increasing negotiating leverage of private third-party payers, alignment efforts between third-party payers and healthcare providers may also result in other competitive advantages, such as greater access to performance and pricing data. Our future success will depend, in part, on the ability of the One Medical PCs to retain and renew third-party payer contracts and enter into new contracts on favorable terms. It is not clear what impact, if any, future health reform efforts or the repeal of, or further changes to, the PPACA will have on the ability of the One Medical PCs to negotiate reimbursement increases and participate in third-party payer networks on favorable terms. If the One Medical PCs are unable to retain and negotiate favorable contracts with third-party payers or experience reductions in payment increases or amounts received from third-party payers, our revenue may be reduced.

If we fail to cost-effectively develop widespread brand awareness and maintain our reputation, or if we fail to achieve and maintain market acceptance for our healthcare services, our business could suffer.

We believe that developing and maintaining widespread awareness of our brand and maintaining our reputation for providing access to high quality and efficient health care in a cost-effective manner is critical to attracting new members and enterprise clients and maintaining existing members. Our business and revenue are heavily reliant on growing and maintaining our membership base. We have historically derived a significant portion of net revenue from patient visits at the One Medical PCs. In addition, we have a growing number of strategic relationships with health systems and health plans, or collectively, health networks. Market acceptance of our solutions and services and member acquisition depends on educating people, as well as enterprise clients and health networks, as to the distinct features, ease-of-use, positive lifestyle impact, cost savings, quality, and other perceived benefits of our solutions and services as compared to alternative avenues for health care. In particular, market acceptance is highly dependent on our ability to sufficiently saturate a particular geographic area with medical offices to provide services to local members. The level of saturation required depends on the needs of the local market and the healthcare preferences of the members in that market, among other things. For example, certain markets will require more saturation if transportation to our medical offices, or general convenience of accessing our medical offices, is a concern for members. Further, we rely on word of mouth to spread awareness of our solutions and services, which in turn is dependent on members relaying positive experiences with our solutions, services and providers. If we are not successful in demonstrating to existing and potential members and enterprise clients the benefits of our solutions and services, if we are not able to sufficiently saturate a market with medical offices in convenient locations for members, or if we are not able to achieve the support of enterprise clients, health networks, healthcare providers and insurance carriers for our solutions and services, we could experience lower than expected sales of new memberships and a higher rate of existing membership termination, including termination of membership purchases by enterprise clients. Further, the loss or dissatisfaction of any member may substantially harm our brand and reputation, inhibit widespread adoption of our solutions and services, reduce our revenue from enterprise clients and health networks, and impair our ability to attract new members and maintain existing members.

Our brand promotion activities may not generate awareness or increase revenue and, even if they do, any increase in revenue may not offset the expenses we incur in building our brand. If we fail to successfully promote and maintain our brand, we may fail to attract or retain members, health networks and enterprise clients necessary to realize a sufficient return on our brand-building efforts or to achieve the widespread brand awareness that is critical for broad adoption of our solutions and services. Our marketing efforts depend

23

significantly on our ability to call upon our current members to provide positive references to potential new members. For example, we rely on word of mouth and informal member referrals within our enterprise clients to acquire new members, including dependents of existing members.

Further, even if we are successful in our brand promotion activities and deliver high quality and efficient service through the One Medical PCs, we cannot guarantee the quality and efficiency of healthcare service, particularly specialty health care, from our health network partners, over which we have no control. Many of our health network partners are large institutions with significant operations across a wide network of patients and may be unable to provide consistent levels of service across specialty area, physician or location to our members. We heavily rely on our NPS and other member satisfaction scores to promote our brand, increase awareness of our solutions and services and expand our membership base, including in new geographic areas. Patients who experience poor quality healthcare provision from such partners may impute such dissatisfaction to our solutions and services, which would have a negative impact on member retention and acquisition. Any of these consequences could lower our membership retention rate, reduce our revenue and harm our business.

Our solutions and services may also be perceived by our members or enterprise clients to be more complicated or less effective than traditional approaches, and people may be unwilling to deviate from traditional or competing healthcare access options. Accordingly, healthcare providers may not recommend our solution or services until there is sufficient evidence to convince them to alter their current approach. Finally, enterprise clients may be unwilling to market our solutions and services, or may prohibit us from marketing our solutions and services, to their employees. Any such resistance to adoption of our solutions and services, or impediment to our ability to market our solutions and services, may harm our business and results of operations.

Our business model and future growth are substantially dependent on the success of our strategic relationships with third parties.

We will continue to substantially depend on our relationships with third parties, including health network partners and enterprise clients to grow our business. We have historically derived a significant portion of our membership revenue from annual membership fees sponsored by our enterprise clients for their employees and patient visit revenue from such employees. In addition, our growth depends on maintaining existing, and developing new, strategic affiliations with health network partners. Further, we rely on a number of partners such as benefits enrollment platforms, professional employment organizations, consultants and other distribution partners in order to sell our solutions and services and enroll members onto our platform.

Our agreements with our enterprise clients often provide for fees based on the number of members that are covered by such clients’ programs each month, known as capitation arrangements. Certain of our enterprise clients also pay us a fixed fee per year regardless of number of registered members. The number of individuals who register as members through our enterprise clients is often affected by factors outside of our control, such as plan endorsement by the employer and member outreach and retention initiatives. Enterprise clients may also prohibit us from engaging in direct outreach with employees as potential members, or we may be unsuccessful in spreading brand awareness among employees who perceive competitors as offering better solutions and services, which would decrease growth in membership and reduce our net revenue. Increasing rates of unemployment may also result in loss of members at our enterprise clients, and economic recessions or slowdowns can result in our enterprise clients terminating their employee sponsorship arrangements with us for budgetary reasons. In addition, during periods of economic slowdown, enterprise clients may face less competition for new hires or may not need to hire as many employees, and as a result, they may not need to sponsor memberships with us as a means to attract new hires. If the number of members covered by one or more of such clients’ programs were to be reduced, such decrease would lead to a decrease in our patient service revenue and may also result in non-renewals of our contracts with enterprise clients due to low member activation. For example, even if we maintain a contract with an enterprise client to sponsor membership fees, employees of that customer may not sign up as members due to lack of awareness, inadequate marketing penetration due to information overflow at that customer or otherwise, or perceived inadequacy of our solutions or services as compared to those of

24

competitors sponsored by the same customer. In addition, the growth forecasts of our clients are subject to significant uncertainty and are based on assumptions and estimates that may prove to be inaccurate. Even if the markets in which our customers and partners compete meet the size estimates and growth forecasted, their program membership could fail to grow at similar rates, if at all. Historical activation rates within a given enterprise client may also not be indicative of future membership levels at that enterprise client or activation rates of similarly situated enterprise clients. Further, high activation rates do not necessarily result in increased patient service revenue or membership revenue. We define estimated activation rate for any enterprise client at a given time as the percentage of eligible lives enrolled as members. Some of our enterprise clients offer membership benefits to the dependents of their employees, for which we assume eligible lives include one dependent per employee.

We also derive a portion of our revenue from partnership revenue. For the years ended December 31, 2017 and 2018 and the nine months ended September 30, 2019, we derived 3%, 12% and 29%, respectively, of our net revenue from partnership revenue. A substantial portion of our partnership revenue is derived from contracts with health network partners, including HMOs. Under these contracts, we closely collaborate with each health network on certain strategic initiatives such as the expansion of practice sites in a particular jurisdiction or service area, and clinical and digital integration between our primary care and their specialty care services. Our contracts with the health network partners are typically bespoke, with varying terms across health network partners. However, each contract generally provides for fees on a PMPM basis or a fee-for-service basis. Under contracts providing for PMPM fees, when our medical offices provide professional clinical services to covered members, we, as administrator, perform billing and collection services on behalf of the health network, and the health network receives the fees for services provided, including those paid by members’ insurance plans. If we do not adequately satisfy the objectives of our partners and perform against contractual obligations, we may lose revenue under the applicable health network partner contract and the health network partner may become dissatisfied with the terms or our performance under the contract, which could result in its early termination or amendment, if permitted, and as a result, harm to our business and results of operations, including reduction in net revenue. We have experienced a contractual dispute with a health network partner in the past, have separately entered into a contractual renegotiation with a health network partner and may experience additional disputes and renegotiations in the future. Our contracts with health network partners are often exclusive in the applicable jurisdiction; as a result, in new potential markets should we pursue a health network partnership, we would need to successfully contract with a sufficiently competitively viable health network partner, as we may not be able to terminate any such contract for several years without penalty or be able to partner with other health network partners in the same market due to competitive pressures or lack of counterparties. We cannot guarantee that our health network partners will continue to be satisfied with the terms or circumstances under existing contracts as well, even if unrelated to our performance under the contracts. If we are unable to successfully continue our strategic relationships with our health network partners, on terms favorable to us or at all, or if we do not successfully contract with health network partners in new jurisdictions, our business and results of operations could be harmed.

Identifying partners, and negotiating and documenting relationships with them, requires significant time and resources. Our competitors may be more effective in executing such relationships and performing against them. If we are unsuccessful in establishing or maintaining our relationships with third parties, our ability to compete in the marketplace or to grow our net revenue could be impaired and our results of operations may suffer. Even if we are successful, we cannot assure you that these relationships will result in increased member use of our solutions and services or increased net revenue.

Our arrangements with health networks may be subject to governmental or regulatory scrutiny or challenge.

Some of our relationships with health networks involve risk arrangements, such as capitated payments designed to achieve alignment of financial incentives and to encourage close collaboration on clinical care for patients. Although we believe that our health network contracts involving capitated payments comply with the federal Anti-Kickback Statute and the Stark Law, there can be no assurance that regulators or other governmental

25

entities will agree with our interpretation of these arrangements under applicable law. If our health network partnerships are challenged and found to violate the Anti-Kickback Statute or the Stark Law, we could incur substantial financial penalties, reimbursement denials, repayments or recoupments, or exclusion from participation in government healthcare programs, which could harm our business.

We have a history of losses, which we expect to continue, and we may never achieve or sustain profitability.

We have incurred significant losses in each period since our inception. We incurred net losses of $31.7 million, $45.5 million, $26.9 million and $34.2 million for the years ended December 31, 2017 and 2018 and the nine months ended September 30, 2018 and 2019, respectively. As of September 30, 2019, we had an accumulated deficit of $261.6 million. These net losses and accumulated deficit reflect the substantial investments we made to acquire new health network partners and members, build our proprietary network of healthcare providers and develop our technology platform. We intend to continue scaling our business to increase our customer, member and provider bases, broaden the scope of our partnerships and expand our applications of technology through which members can access our services. Accordingly, we anticipate that cost of care and other operating expenses will increase substantially in the foreseeable future. These efforts may prove more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently to offset these higher expenses. We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain or increase profitability. Our prior net losses, combined with our expected future net losses, have had and will continue to have a negative impact on our total (deficit) equity and working capital. As a result of these factors, we may need to raise additional capital through debt or equity financings in order to fund our operations, and such capital may not be available on reasonable terms, if at all.

Evolving government regulations may increase costs or negatively impact our results of operations.

In a regulatory climate that is uncertain, our operations may be subject to direct and indirect adoption, expansion or reinterpretation of various laws and regulations. Compliance with these future laws and regulations may require us to change our practices at an undeterminable and possibly significant initial and recurring monetary expense. These additional monetary expenditures may increase future overhead, which could harm our results of operations.

We have identified what we believe are areas of government regulation that, if changed, could be costly to us. These include: fraud, waste and abuse laws; rules governing the practice of medicine by providers; licensure standards for doctors and behavioral health professionals; laws limiting the corporate practice of medicine and professional fee splitting; tax laws and regulations applicable to our annual membership fees; cybersecurity and privacy laws; laws and rules relating to the distinction between independent contractors and employees (including recent developments in California that have expanded the scope of workers that are treated as employees instead of independent contractors); and tax and other laws encouraging employer-sponsored health insurance and group benefits. There could be laws and regulations applicable to our business that we have not identified or that, if changed, may be costly to us, and we cannot predict all the ways in which implementation of such laws and regulations may affect us.

In the jurisdictions in which we operate, we believe we are in compliance with all applicable laws, but, due to the uncertain regulatory environment, certain jurisdictions may determine that we are in violation of their laws. In the event that we must remedy such violations, we may be required to modify our solutions and services in a manner that undermines our solutions’ or services’ attractiveness to our customers, members, providers, payers or partners, we may become subject to fines or other penalties or, if we determine that the requirements to operate in compliance in such jurisdictions are overly burdensome, we may elect to terminate our operations in such places. In each case, our revenue may decline and our business may be harmed.

Additionally, the introduction of new services may require us to comply with additional, yet undetermined, laws and regulations. Compliance may require obtaining appropriate licenses or certificates, increasing our

26

security measures and expending additional resources to monitor developments in applicable rules and ensure compliance. The failure to adequately comply with these future laws and regulations may delay or possibly prevent some of our solutions or services from being offered to clients and members, which could harm our business.

We are dependent on our relationships with the One Medical PCs, which are affiliated professional entities that we do not own, to provide healthcare services, and our business would be harmed if those relationships were disrupted or if our arrangements with the One Medical PCs become subject to legal challenges.

The corporate practice of medicine prohibition exists in some form, by statute, regulation, board of medicine or attorney general guidance, or case law, in certain of the states in which we operate. These laws generally prohibit the practice of medicine by lay persons or entities and are intended to prevent unlicensed persons or entities from interfering with or inappropriately influencing providers’ professional judgment. Due to the prevalence of the corporate practice of medicine doctrine, including in certain of the states where we conduct our business, we do not own the One Medical PCs and contract for healthcare provider services for our members through ASAs with such entities. The One Medical PCs are wholly owned by providers licensed in their respective states, including Andrew Diamond, M.D., Ph.D., the Chief Medical Officer of One Medical Group, Inc., a consolidated One Medical PC, who oversees their operation. Dr. Diamond generally serves as the sole director and officer of each One Medical PC. Under the ASAs between 1Life and each One Medical PC, we provide various administrative and operations support services in exchange for scheduled fees at the fair market value of our services provided to each One Medical PC. As a result, our ability to receive cash fees from the One Medical PCs is limited to the fair market value of the services provided under the ASAs. To the extent our ability to receive cash fees from the One Medical PCs is limited, our ability to use that cash for growth, debt service or other uses at the One Medical PC may be impaired and, as a result, our results of operations and financial condition may be adversely affected.

Our ability to perform medical and digital health services in a particular U.S. state is directly dependent upon the applicable laws governing the practice of medicine, healthcare delivery and fee splitting in such locations, which are subject to changing political, regulatory and other influences. The extent to which a U.S. state considers particular actions or relationships to constitute the practice of medicine is subject to change and to evolving interpretations by medical boards and state attorneys general, among others, each of which has broad discretion. There is a risk that U.S. state authorities in some jurisdictions may find that our contractual relationships with the One Medical PCs, which govern the provision of medical and digital health services and the payment of administrative and operations support fees, violate laws prohibiting the corporate practice of medicine and fee splitting. The extent to which each state may consider particular actions or contractual relationships to constitute improper influence of professional judgment varies across the states and is subject to change and to evolving interpretations by state boards of medicine and state attorneys general, among others. Accordingly, we must monitor our compliance with laws in every jurisdiction in which we operate on an ongoing basis, and we cannot provide assurance that our activities and arrangements, if challenged, will be found to be in compliance with the law. Additionally, it is possible that the laws and rules governing the practice of medicine, including the provision of digital health services, and fee splitting in one or more jurisdictions may change in a manner adverse to our business. While the ASAs prohibit us from controlling, influencing or otherwise interfering with the practice of medicine at each One Medical PC, and provide that physicians retain exclusive control and responsibility for all aspects of the practice of medicine and the delivery of medical services, there can be no assurance that our contractual arrangements and activities with the One Medical PCs will be free from scrutiny from U.S. state authorities, and we cannot guarantee that subsequent interpretation of the corporate practice of medicine and fee splitting laws will not circumscribe our business operations. State corporate practice of medicine doctrines also often impose penalties on physicians themselves for aiding the corporate practice of medicine, which could discourage providers from participating in our network of physicians. If a successful legal challenge or an adverse change in relevant laws were to occur, and we were unable to adapt our business model accordingly, our operations in affected jurisdictions would be disrupted, which could harm our business.

27

While we expect that our relationships with the One Medical PCs and their affiliates will continue, a material change in our relationship with these entities, or among the One Medical PCs, whether resulting from a dispute among the entities, a challenge from a governmental regulator, a change in government regulation, or the loss of these relationships or contracts with the One Medical PCs, could impair our ability to provide services to our members and could harm our business. For example, our arrangements in place to help ensure an orderly succession of the owner or owners of the One Medical PCs upon the occurrence of certain events may be challenged, which may impact our relationship with the One Medical PCs and harm our business and results of operations. The ASAs and these succession arrangements could also subject us to additional scrutiny by federal and state regulatory bodies regarding federal and state fraud and abuse laws. Any scrutiny, investigation or litigation with regard to our arrangement with the One Medical PCs, and any resulting penalties, including monetary fines and restrictions on or mandated changes to our current business and operating arrangements, could harm our business.

Our net revenue is derived from the number of members enrolled or patient visits, and an increase or decrease in member utilization of our services could harm our business, financial condition and results of operations.

Historically, we have relied on patient visits at the One Medical PCs for a substantial portion of our net revenue. For the years ended December 31, 2017 and 2018, net patient service revenue accounted for 78% and 68% of our net revenue, respectively, and 68% and 52% for the nine months ended September 30, 2018 and 2019, respectively. While we intend to increase revenue contribution from health network partners, our revenue mix will continue to be driven by patient visits over the near term. As we develop additional digital health solutions through our mobile platform, we cannot guarantee that our members will consistently make in-office visits in addition to using our digital health solutions. Further, it may be difficult for us to accurately forecast future patient in-office visits over time, which may vary across geographies and depend on patient demographics within a given market. In addition, we will continue to rely on our reputation and recommendations from members and key enterprise clients to promote our solutions and services to potential new members. A substantial portion of our members hold subscriptions through their respective employers with which we have membership arrangements. The loss of any of our key enterprise clients, or a failure of some of them to renew or expand their arrangements with us, could have a significant impact on the growth rate of our revenue, reputation and our ability to obtain new members. In addition, mergers and acquisitions involving such enterprise clients could lead to cancellation or non-renewal of our contracts with those clients or by the acquiring or combining companies, thereby reducing the number of our existing and potential clients and members. If we are unable to attract and retain sufficient members in any given market, our clinics in that market may have reduced in-office visits which could harm the results of operations of those clinics, reduce our revenue and harm our business.

In addition, under certain of our contracts with enterprise clients, we base our fees on the number of individuals to whom our clients provide benefits. Under certain of our health network partner agreements, we collect fees from members who receive healthcare services within the health network partner’s network. Many factors, most of which we do not control, may lead to a decrease in the number of individuals covered by our enterprise clients, including, but not limited to, the following:

If the number of members covered by our enterprise clients and health network partners decreases, our revenue will likely decrease.

28

If reimbursement rates paid by third-party payers are reduced or if third-party payers otherwise restrain our ability to obtain or provide services to members, our business could be harmed.

Private third-party payers pay for the services that we provide to many of our members. As of September 30, 2019, over 95% of our members were commercially insured. If any commercial third-party payers reduce their reimbursement rates or elect not to cover some or all of our services, our business may be harmed. Third-party payers also are entering into sole source contracts with some healthcare providers, which could effectively limit our pool of potential members.

Private third-party payers often use plan structures, such as narrow networks or tiered networks, to encourage or require members to use in-network providers. In-network providers typically provide services through private third-party payers for a negotiated lower rate or other less favorable terms. Private third-party payers generally attempt to limit use of out-of-network providers by requiring members to pay higher copayment and/or deductible amounts for out-of-network care. Additionally, private third-party payers have become increasingly aggressive in attempting to minimize the use of out-of-network providers by disregarding the assignment of payment from members to out-of-network providers (i.e., sending payments directly to members instead of to out-of-network providers), capping out-of-network benefits payable to members, waiving out-of-pocket payment amounts and initiating litigation against out-of-network providers for interference with contractual relationships, insurance fraud and violation of state licensing and consumer protection laws. If we become out of network for insurers, our business could be harmed and our patient service revenue could be reduced because members could stop using our services.

If reimbursement rates paid by federal or state healthcare programs are reduced or if government payers otherwise restrain our ability to obtain or provide services to members, our business, financial condition and results of operation could be harmed.

A portion of our revenue comes from government healthcare programs, principally Medicare. Payments from federal and state government programs are subject to statutory and regulatory changes, administrative rulings, interpretations and determinations, requirements for utilization review and federal and state funding restrictions, each of which could increase or decrease program payments, as well as affect the cost of providing service to patients and the timing of payments to the One Medical PCs. We are unable to predict the effect of recent and future policy changes on our operations. In addition, the uncertainty and fiscal pressures placed upon federal and state governments as a result of, among other things, deterioration in general economic conditions and the funding requirements from the federal healthcare reform legislation, may affect the availability of taxpayer funds for Medicare and Medicaid programs. Changes in government healthcare programs may reduce the reimbursement we receive and could adversely impact our business and results of operations.

As federal healthcare expenditures continue to increase, and state governments continue to face budgetary shortfalls, federal and state governments have made, and continue to make, significant changes in the Medicare and Medicaid programs. These changes include reductions in reimbursement levels and to new or modified demonstration projects authorized pursuant to Medicaid waivers. Some of these changes have decreased, or could decrease, the amount of money we receive for our services relating to these programs. In some cases, private third-party payers rely on all or portions of Medicare payment systems to determine payment rates. Changes to government healthcare programs that reduce payments under these programs may negatively impact payments from private third-party payers.

We are subject to comprehensive laws and rules governing billing and payment, noncompliance with which could result in non-payment or recoupment of overpayments for our services or other sanctions.

Payers typically have differing and complex billing and documentation requirements. If we fail to comply with these payer-specific requirements, we may not be paid for our services or payment may be substantially delayed or reduced.

29

Numerous state and federal laws also apply to our claims for payment, including but not limited to (i) “coordination of benefits” rules that dictate which payer must be billed first when a patient has coverage from multiple payers, (ii) requirements that overpayments be refunded within a specified period of time, (iii) “reassignment” rules governing the ability to bill and collect professional fees on behalf of other providers, (iv) requirements that electronic claims for payment be submitted using certain standardized transaction codes and formats, and (v) laws requiring all health and financial information of patients in a manner that complies with applicable security and privacy standards.

Both Medicare and commercial payers carefully monitor compliance with these and other applicable rules. Our failure to comply with these rules could result in our obligation to refund amounts previously paid for such services or non-payment for our services, in addition to other civil or criminal sanctions.

We may become subject to billing or other compliance investigations by government authorities, private insurers or health network partners.

Federal and state laws, rules and regulations impose substantial penalties, including criminal and civil fines, monetary penalties, exclusion from participation in government healthcare programs and imprisonment, on entities or individuals (including any individual corporate officers or physicians deemed responsible) that fraudulently or wrongfully bill government-funded programs or other third-party payers for healthcare services. Both federal and state government agencies have heightened and coordinated civil and criminal enforcement efforts as part of numerous ongoing investigations of healthcare companies, as well as their executives and managers, with enforcement actions covering a variety of topics, including referral and billing practices. Further, the federal False Claims Act and a growing number of state laws allow private parties to bring qui tam or “whistleblower” lawsuits against companies for false billing violations. Some of our activities could become the subject of governmental investigations or inquiries.

Governmental agencies and private insurers also conduct audits of healthcare providers. Such audits can result in repayment demands based on findings that our services were not medically necessary, were billed at an improper level or otherwise violated applicable billing requirements. Our health network partners also conduct audits under their agreements with us, which audits can also result in disgorgement of fees paid to us under such agreements based on findings that our services were not performed in accordance with the applicable agreement or that we were otherwise not in compliance with any terms of the applicable agreement. Our failure to comply with rules related to billing or adverse findings from audits by our health network partners could result in, among other penalties, non-payment for services rendered or recoupments or refunds of amounts previously paid for such services.

Audits, inquiries and investigations from government agencies, private insurers and health network partners will occur from time to time in the ordinary course of our business, and could result in costs to us and a diversion of management’s time and attention. New regulations and heightened enforcement activity also could negatively affect our cost of doing business and our risk of becoming the subject of an audit or investigation. We cannot predict whether any future audits, inquiries or investigations, or the public disclosure of such matters, likely would negatively impact our business, financial condition, results of operations, cash flows and the trading price of our securities.

We operate in a competitive industry, and if we are not able to compete effectively our business would be harmed.

The market for healthcare solutions and services is intensely competitive. We compete in a highly fragmented primary care market with direct and indirect competitors that offer varying levels of impact to key stakeholders such as consumers, employers, providers, and health networks. Our competitive success is contingent on our ability to simultaneously address the needs of key stakeholders efficiently and with superior outcomes at scale compared with competitors. We compete across various segments within the healthcare

30

market, including with respect to traditional healthcare providers and medical practices, technology platforms, care management and coordination, digital health, telehealth and telemedicine and health information exchange. Competition in our market involves rapidly changing technologies, evolving regulatory requirements and industry expectations, frequent new product and service introductions and changes in customer requirements. If we are unable to keep pace with the evolving needs of our clients, members and partners and continue to develop and introduce new applications and services in a timely and efficient manner, demand for our solutions and services may be reduced and our business and results of operations would be harmed.

Our business and future growth are highly dependent on gaining new members and retaining existing members in both existing and target markets. However, the healthcare market is competitive, which could make it difficult for us to succeed. We currently face competition in the healthcare industry for our solutions and services from a range of companies and providers, including traditional healthcare providers and medical practices that offer similar services, often at lower prices, and that are continuing to develop additional products and becoming more sophisticated and effective. These competitors primarily include primary care providers who are employed by or affiliated with health networks. Our indirect competitors also include episodic consumer-driven point solutions such as telemedicine as well as urgent care providers, which may typically pay providers on a fee-for-service basis rather than a salary basis as we employ. In addition, large, well-financed health plans have in some cases developed their own health care or expert medical service tools and may provide these solutions to their customers at discounted prices. Generally, other hospitals and outpatient centers in the local communities we serve provide services similar to those we offer, and, in some cases, our competitors (1) are more established or newer than ours, (2) may offer a broader array of services or more desirable facilities to patients and providers than ours, and (3) may have larger or more specialized medical staffs to admit and refer patients, among other things. Furthermore, healthcare consumers are now able to access hospital performance data on quality measures and patient satisfaction, as well as standard charges for services, to compare competing providers; if any of the One Medical PCs achieve poor results (or results that are lower than our competitors’) on quality measures or patient satisfaction surveys, or if our standard charges are or are perceived to be higher than our competitors, we may attract fewer members. Additional quality measures and trends toward clinical or billing transparency, including recent price transparency proposals that would require third-party payers and hospitals to make their pricing information publicly available, may have a negative impact on our competitive position and patient volumes, as patients may prefer to use lower cost healthcare providers if they deliver services that are perceived to be similar in quality to ours. Finally, our enterprise clients or health network partners may elect to terminate their arrangements with us and enter into arrangements with our competitors, particularly in primary care. For example, our health network partners may wish to enter into competitor arrangements that are more favorable from a fee or price perspective or that provide greater exposure to, or volume of, patients. Competition from specialized providers, health plans, medical practices, digital health companies and other parties will result in continued member acquisition and patient visit and utilization volume pressure, which could negatively impact our revenue and market share.

Some of our competitors may have greater name recognition, longer operating histories and significantly greater resources than we do. Further, our current or potential competitors may be acquired by third parties with greater available resources. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards or customer requirements and may have the ability to initiate or withstand substantial price competition. In addition, current and potential competitors have established, and may in the future establish, cooperative relationships with vendors of complementary technologies or services to increase the availability of their solutions in the marketplace. Accordingly, new competitors or alliances may emerge that have greater market share, a larger member or patient base, more widely adopted proprietary technologies, greater marketing expertise, greater financial resources and larger sales forces than we have, which could put us at a competitive disadvantage. Our competitors could also be better positioned to serve certain segments of the healthcare market, which would limit our member and patient growth. In light of these factors, even if our solution is more effective than those of our competitors, current or potential members, health network partners and enterprise clients may accept competitive solutions in lieu of purchasing our solution. If we are unable to successfully compete in the healthcare market, our business would be harmed.

31

In the future, we expect to encounter increased competition from system-affiliated hospitals and healthcare companies, as well as health insurers and private equity companies seeking to acquire providers, in specific geographic markets. We also face competition from specialty hospitals (some of which are physician-owned), primary care providers and affiliates of our health network partners and unaffiliated freestanding outpatient centers for market share in high margin services and for quality providers and personnel. In recent years, the number of freestanding specialty hospitals, surgery centers, emergency departments, urgent care centers and diagnostic imaging centers in the geographic areas in which we operate has increased significantly. Furthermore, some of the clinics and medical offices that compete with the One Medical PCs are owned by government agencies or not-for-profit organizations supported by endowments and charitable contributions and can finance capital expenditures and operations on a tax-exempt basis. In addition, in any geographic area, we may enter into an exclusive contractual arrangement with a single health network partner, which could allow competitors to contract with other health network partners in the same area and gain market share for potential patients. Competitors may also be better positioned to contract with leading health network partners in our target markets, including existing markets after our current contracts expire. If our competitors are better able to attract patients, contract with health network partners, recruit providers, expand services or obtain favorable managed care contracts at their facilities than we are, we may experience an overall decline in member volumes and net revenue.

Our future growth will also depend on our ability to enhance our solutions and services with next generation technologies and to develop or to acquire and market new services to access new patient populations. There is no guarantee that we will possess the resources, either financial or personnel, for the research, design and development of new applications or services, or that we will be able to utilize these resources successfully and avoid technological or market obsolescence. Further, there can be no assurance that technological advances by one or more of our competitors or future competitors will not result in our present or future applications and services becoming uncompetitive or obsolete.

We may not grow at the rates we historically have achieved or at all, even if our key metrics may imply future growth, including if we are unable to successfully execute on our growth initiatives and business strategies, which could have a negative impact on the market price of our common stock.

We have experienced significant growth in our recent history. We are continually executing a number of growth initiatives, strategies and operating plans designed to enhance our business. For example, we are expanding our strategic relationships with health network partners to build integrated delivery networks for broad access to their networks of specialists and hospitals. The anticipated benefits from these efforts are based on several assumptions that may prove to be inaccurate. Moreover, we may not be able to successfully complete these growth initiatives, strategies and operating plans and realize all of the benefits, including growth targets and cost savings, that we expect to achieve, or it may be more costly to do so than we anticipate.

Future revenue may not grow at these same rates or may decline. Our future growth will depend, in part, on our ability to grow consumer and enterprise members in existing markets, expand into new markets, expand our services offering and grow our health network partnership. We can provide no assurances that we will be successful in executing on these growth strategies or that, even if our key metrics would indicate future growth, we will continue to grow our revenue or to generate net income. Our ability to maintain our current membership levels and patient visits and our existing health network partners and enterprise client relationships and to expand our customer and member base depends on, among other things, the attractiveness of our services relative to those offered by our competitors, our ability to demonstrate the value of our existing and future services, and our ability to attract and retain a sufficient number of qualified sales and marketing leadership and support personnel. A variety of risks could cause us not to realize some or all of these growth plans and benefits. These risks include, among others, delays in the anticipated timing of activities related to such growth initiatives, strategies and operating plans, increased difficulty and cost in implementing these efforts, including difficulties in complying with new regulatory requirements and the incurrence of other unexpected costs associated with operating the business. Moreover, our continued implementation of these programs may disrupt our operations

32

and performance. As a result, we cannot assure you that we will realize these benefits. If, for any reason, the benefits we realize are less than our estimates or the implementation of these growth initiatives, strategies and operating plans negatively impact our operations or cost more or take longer to effectuate than we expect, or if our assumptions prove inaccurate, our business may be harmed.

If we fail to manage our growth effectively, our expenses could increase more than expected, our revenue may not increase proportionally or at all, and we may be unable to implement our business strategy.

We have experienced significant growth in recent periods, which puts strain on our business, operations and employees. For example, we grew from 1,341 employees as of December 31, 2018 to 1,600 employees as of September 30, 2019. We have also increased our customer and membership bases significantly over the past two years. We anticipate that our operations will continue to rapidly expand. To manage our current and anticipated future growth effectively, we must continue to maintain and enhance our IT infrastructure, financial and accounting systems and controls. In particular, in order for our providers to provide quality healthcare services and longitudinal care to patients and avoid burn-out, we need to provide them with adequate IT and technology support, which requires sufficient staffing for these areas. In addition, as we expand in existing markets and move into new markets, we will need to attract and retain an increasing number of quality healthcare professionals and providers. Failure to retain a sufficient number of providers may result in overworking of existing personnel leading to burn-out or poor quality of healthcare services. In addition, our strategy is to provide longitudinal care to members and patients, which requires substantial time and attention from our providers. We must also attract, train and retain a significant number of qualified sales and marketing personnel, customer support personnel, professional services personnel, software engineers, technical personnel and management personnel, and the availability of such personnel, in particular software engineers, may be constrained.

A key aspect to managing our growth is our ability to scale our capabilities to implement our solutions and services satisfactorily with respect to both large and demanding enterprise clients and health network partners as well as individual consumers. Large clients and partners often require specific features or functions unique to their membership base, which, at a time of significant growth or during periods of high demand, may strain our implementation capacity and hinder our ability to successfully provide our services to our clients and partners in a timely manner. We may also need to make further investments in our technology to decrease our costs. If we are unable to address the needs of our clients, partners or members, or our clients, partners or members are unsatisfied with the quality of our solutions or services, they may not renew their contracts or memberships, seek to cancel or terminate their relationship with us or renew on less favorable terms, any of which could harm our business and results of operations.

Failure to effectively manage our growth could also lead us to over-invest or under-invest in development and operations, result in weaknesses in our infrastructure, systems or controls, give rise to operational mistakes, financial losses, loss of productivity or business opportunities and result in loss of employees and reduced productivity of remaining employees. Our growth is expected to require significant capital expenditures and may divert financial resources from other projects such as the development of new applications and services. In particular, as we enter new markets or seek to expand our presence in existing markets, we will need to lease medical office space, acquire medical equipment, furnish our medical offices and incur related expenses. This process can be lengthy and cost-intensive, and we may encounter difficulties or unanticipated issues during the process of opening such new medical offices. There can be no assurance that we will be able to open our planned new medical offices, in existing or new markets, within our operating budgets and planned timelines, or at all. Cost overruns in the process of opening new offices can result in higher than expected cost of care, exclusive of depreciation and amortization, and operating expenses as compared to revenue in the applicable quarter. In addition, there can be no assurance that new medical offices will operate efficiently or be strategically placed to attract the optimal number of patients. If an office is underperforming for any reason, we could incur additional costs to relocate or shut down that office. Further, as we expand in existing markets or to new markets and make related upfront capital expenditures, including to lease or build new clinics and staff providers with those clinics,

33

our margins may be reduced during those periods as we will not recognize patient revenue until those clinics open and begin receiving patients. If our management is unable to effectively manage our growth, our expenses may increase more than expected, our revenue may not increase or may grow more slowly than expected and we may be unable to implement our business strategy. The quality of our services may also suffer, which could negatively affect our reputation and harm our ability to attract and retain members and clients.

It is essential to our ongoing business that we attract and retain an appropriate number of quality primary care providers to support our services and that we maintain good relations with those providers.

The success of our business depends in significant part on the number, quality, specialties and admitting and scheduling practices of the licensed providers who have been admitted to the medical staffs of the One Medical PCs, as well as providers who affiliate with us and use the One Medical PCs as an extension of their practices. Members of the medical staffs of the One Medical PCs are free to terminate their association at any time. In addition, although providers who own interests in the One Medical PCs are generally subject to agreements restricting them from owning an interest in competitive facilities or transferring their ownership interests in the One Medical PCs without our consent, we may not learn of, or be unsuccessful in preventing, our provider partners from acquiring interests in competitive facilities or making transfers without our consent. Moreover, in certain states in which we operate, non-competition and other restrictive covenants may be limited in their enforceability, particularly against physicians and providers. For example, California, our largest market as of September 30, 2019, is particularly strict with the limitations that may be imposed by non-competition agreements.

If we are unable to recruit and retain board-certified providers and other healthcare professionals, our business and results of operations could be harmed and our ability to grow could be impaired. In any particular market, providers could demand higher payments or take other actions that could result in higher medical costs, less attractive service for our members or difficulty meeting regulatory or accreditation requirements. Our ability to develop and maintain satisfactory relationships with providers also may be negatively impacted by other factors not associated with us, such as changes in Medicare and/or Medicaid reimbursement levels and other pressures on healthcare providers and consolidation activity among hospitals, provider groups and healthcare providers.

We expect to encounter increased competition from health insurers and private equity companies seeking to acquire providers in the markets where we operate practices and, where permitted by law, employ providers. In some of our markets, provider recruitment and retention are affected by a shortage of providers and the difficulties that providers can experience in obtaining affordable malpractice insurance or finding insurers willing to provide such insurance. Providers may also leave the One Medical PCs or perceive them as providing a poor quality of life if the One Medical PCs do not adequately manage causes of provider burnout and workload, some of which we have little to no control over under the ASAs. Our business is dependent on providing longitudinal and long-term care for members, including through our digital health and virtual care solutions. This model requires providers to consistently follow members over time, track overall long-term health and be available 24/7 for virtual care questions and services. If we are unable to efficiently manage provider workload and capacity to provide longitudinal and long-term care, our providers may depart and our patients may experience lower quality of care, which would harm our business. Furthermore, our ability to recruit and employ providers is closely regulated. For example, the types, amount and duration of compensation and assistance we can provide to recruited providers are limited by the Stark law, the Anti-kickback Statute, state anti-kickback statutes and related regulations. If we are unable to attract and retain sufficient numbers of quality providers by providing adequate support personnel, technologically advanced equipment and facilities that meet the needs of those providers and their patients, memberships and patient visits may decrease, our enterprise clients may alter or terminate their membership contracts with us and our operating performance may decline.

34

We incur significant upfront costs in our enterprise client and health network partner relationships, and if we are unable to maintain and grow these relationships over time, we are likely to fail to recover these costs, which could have a negative impact on our business, financial condition and results of operations.

Our business model and growth depends heavily on achieving economies of scale because our initial upfront investment for any enterprise client or health network partner is costly and the associated revenue is recognized on a ratable basis. We devote significant resources to establishing relationships with our clients and partners and implementing our solutions and services. This is particularly so in the case of large enterprises that, to date, have contributed a large portion of our membership base and revenue as well as health network partners, who often require specific features or functions unique to their particular processes or under the terms of their contracts with us, including significant systems integration and interoperability undertakings. Accordingly, our results of operations will depend in substantial part on our ability to deliver a successful experience for these clients and related members and partners to persuade our clients and partners to maintain and grow their relationship with us over time. Additionally, as our business is growing significantly, our new customer and partner acquisition costs could outpace our revenue growth and we may be unable to reduce our total operating costs through economies of scale such that we are unable to achieve profitability. If we fail to achieve appropriate economies of scale or if we fail to manage or anticipate the evolution and in future periods, demand of our clients and partners, our business may be harmed.

If our existing enterprise clients and health network partners do not continue or renew their contracts with us or renew at lower fee levels or upon unfavorable contract terms, it could have a negative impact on our business, financial condition and results of operations.

We expect to derive a significant portion of our revenue from existing enterprise client and health network partner contracts. As a result, continuation of our contracts with existing enterprise clients and health network partners is critical to our future business, revenue growth and results of operations. Factors that may affect our ability to maintain existing contracts include, but are not limited to, the following:

We enter into contractual arrangements with our enterprise clients and health network partners. Most of our enterprise clients and health network partners have no obligation to renew their agreements with us after the initial term expires. In addition, our health network partners and enterprise clients may negotiate terms less advantageous to us upon renewal, which may reduce our revenue from these entities. If our health network partners or enterprise clients fail to renew their contracts, renew their contracts upon less favorable terms or at lower fee levels or fail to purchase new solutions and services from us, our revenue may decline or our future revenue growth may be constrained. In addition, our health network partner and enterprise client contracts generally allow partners to terminate such agreements for cause. If a partner or customer terminates its contract early and revenue and cash flows expected from a partner or enterprise client are not realized in the time period expected or not realized at all, our business could be harmed.

35

Our marketing cycle can be long and unpredictable and requires considerable time and expense, which may cause our results of operations to fluctuate.

The marketing cycle for our solutions and services from initial contact with a potential enterprise client or health network partner to contract execution and implementation varies widely by enterprise client or partner. Some of our partners undertake a significant and prolonged evaluation process, including to determine whether our solutions and services meet their unique healthcare needs, which evaluation can be complex given the size and scale of our clients and partners. Our contractual arrangements with our health network partners are often highly specific to each partner depending on their needs, the characteristics and patient demographics of the market they serve, their growth plans and their operations, among other things. As a result, our marketing efforts to any new health network partner must be tailored to meet its specific strategic demands, which can be time consuming and require significant upfront cost. These efforts also must address interoperability between our IT infrastructure and systems and such partner’s systems, which can result in substantial cost without any assurance that we will ultimately enter into a contractual arrangement with any such partner.

Our large enterprise clients often initially restrict direct access by us to their employees to curb information overflow. As a result, we may not be able to directly market our solutions and services to, and educate, employees at our enterprise clients until much later after execution of an agreement with such clients. This can result in limited membership acquisition at any such enterprise client for a significant period of time following contract execution, and there can be no assurance that we are able to gain sufficient membership acquisition to justify our upfront investments. Further, even after contract execution with a particular enterprise client, we generally compete with other health service providers who market to the same employees at such customer, and there can be no assurance that we will be successful in our marketing and employee education efforts to win members from other competing services, many of which are considered more traditional healthcare models that employees are more familiar with. If our sales cycle lengthens or our substantial upfront sales and implementation investments do not result in sufficient sales to justify our investments, it could harm our business.

We also incur significant marketing costs to grow awareness of our solution and services in both existing markets and new geographic markets for potential new members. Our marketing efforts for member acquisition are dependent in part on word of mouth, which may take substantial time to spread. In addition, for both new and existing geographic markets, we will need to continuously open medical offices in targeted locations to build awareness, which is both time-intensive and requires substantial upfront fixed costs.

If we are unable to successfully market our solutions and services in existing and new geographic locations as well as to potential members at our existing and new enterprise clients, it could harm our business and results of operations.

We could experience losses or liability, including medical liability claims, causing us to incur significant expenses and requiring us to pay significant damages if not covered by insurance.

Our business entails the risk of medical liability claims against both the One Medical PCs and us, and we have in the past been subject to such claims in the ordinary course of business. Although the One Medical PCs carry insurance covering medical malpractice claims in amounts that we believe are appropriate in light of the risks attendant to our business, successful medical liability claims could result in substantial damage awards that exceed the limits of the One Medical PCs’ insurance coverage. Each One Medical PC carries professional liability insurance for itself and each of its healthcare professionals and a general insurance policy, which covers medical malpractice claims. Professional liability insurance is expensive and insurance premiums may increase significantly in the future, particularly as we expand our services. As a result, adequate professional liability insurance may not be available to our providers or to us in the future at acceptable costs or at all. Any claims made against us that are not fully covered by insurance could be costly to defend against, result in substantial damage awards against us and divert the attention of our management and our providers from our operations, which could harm our business. In addition, any claims may significantly harm our business or reputation.

36

In addition, our business exposes us to risks that are inherent in the provision of health care. If members, clients or partners assert liability claims against us, any ensuing litigation, regardless of outcome, could result in a substantial cost to us, divert management’s attention from operations, and decrease market acceptance of our solutions and services. We do not control the providers and other healthcare professionals at the One Medical PCs with respect to the practice of medicine and the provision of healthcare services. While we seek to attract high quality professionals, the risk of liability, including through unexpected medical outcomes, is inherent in the healthcare industry, and negative outcomes may result for any of our members. We attempt to limit our liability to members, clients and partners by contract; however, the limitations of liability set forth in the contracts may not be enforceable or may not otherwise protect us from liability for damages. Additionally, we may be subject to claims that are not explicitly covered by such contractual limits.

We also maintain general liability coverage for certain risks, claims and litigation proceedings. However, this coverage may not continue to be available on acceptable terms, may not be available in sufficient amounts to cover one or more large claims against us, and may include larger self-insured retentions or exclusions. In addition, the insurer might disclaim coverage as to any future claim. Any liability claim brought against us, with or without merit, could also result in an increase of our insurance premiums, and insurance coverage would also not address any reputational damage from a claim. Further, even unsuccessful claims could result in substantial costs and diversion of management resources. A successful claim not fully covered by our insurance could have a negative impact on our liquidity, financial condition, and results of operations.

Current or future litigation against us could be costly and time-consuming to defend.

We are subject, and in the future may become subject from time to time, to legal proceedings and claims that arise in the ordinary course of business such as claims brought by our members, clients or partners in connection with commercial disputes, consumer class action claims, employment claims made by our current or former employees or other litigation matters. In particular, as we grow our base of consumer members, we may be subject to an increasing number of consumer claims, disputes and class action complaints, including an ongoing claim alleging misrepresentations with respect to membership fee requirements for our healthcare services. While our membership terms generally require individual arbitration, there can be no assurance that such terms will be enforced, which may result in costly class action litigation. Litigation may result in substantial costs, settlement and judgments and may divert management’s attention and resources, which may substantially harm our business, financial condition and results of operations. Insurance may not cover such claims, may not provide sufficient payments to cover all of the costs to resolve one or more such claims and may not continue to be available on terms acceptable to us. A claim brought against us that is uninsured or underinsured could result in unanticipated costs, thereby leading analysts or potential investors to reduce their expectations of our performance, which could reduce the market price of our common stock.

We rely on internet infrastructure, bandwidth providers, other third parties and our own systems to provide a proprietary services platform to our members and clients, and any failure or interruption in the services provided by these third parties or our own systems could expose us to litigation and hurt our reputation and relationships with members and clients.

Our ability to maintain our proprietary services platform, including our digital health services, is dependent on the development and maintenance of the infrastructure of the internet and other telecommunications services by third parties. This includes maintenance of a reliable network connection with the necessary speed, data capacity and security for providing reliable internet access and services and reliable telephone and facsimile services. Our platform is designed to operate without perceptible interruption in accordance with our service level commitments.

We have, however, experienced limited interruptions in these systems in the past, including server failures that temporarily slow down the performance of our platform, and we may experience similar or more significant interruptions in the future. We rely on internal systems as well as third-party suppliers, including bandwidth and

37

telecommunications equipment providers, to maintain our platform and related services. We do not currently maintain redundant systems or facilities for some of these services. Interruptions in these systems or services, whether due to system failures, cyber incidents, physical or electronic break-ins or other events, could affect the security or availability of our platform or services and prevent or inhibit the ability of our members to access our platform or services. In the event of a catastrophic event with respect to one or more of these systems or facilities, we may experience an extended period of system unavailability, which could result in substantial costs to remedy those problems or harm our relationship with our members and our business.

Additionally, any disruption in the network access, telecommunications or co-location services provided by third-party providers or any failure of or by third-party providers’ systems or our own systems to handle current or higher volume of use could significantly harm our business. We exercise limited control over our third-party suppliers, which increases our vulnerability to problems with services they provide. Any errors, failures, interruptions or delays experienced in connection with these third-party technologies and information services or our own systems could hurt our relationships with health network partners, enterprise clients and members and expose us to third-party liabilities.

The reliability and performance of our internet connection may be harmed by increased usage or by denial-of-service attacks or related cyber incidents. The services of other companies delivered through the internet have experienced a variety of outages and other delays as a result of damages to portions of the internet’s infrastructure, and such outages and delays could affect our systems and services in the future. These outages and delays could reduce the level of internet usage as well as the availability of the internet to us for delivery of our internet-based services. Any of the foregoing could harm our competitive position, business, financial condition, results of operations and prospects.

We rely on third-party vendors to host and maintain our technology platform.

We rely on third-party vendors to host and maintain our technology platform. Our ability to offer our solutions and services and operate our business is dependent on maintaining our relationships with third-party vendors and entering into new relationships to meet the changing needs of our business. Any deterioration in our relationships with such vendors or our failure to enter into agreements with vendors in the future could harm our business and our ability to pursue our growth strategy. Because of the large amount of data that we collect and manage, it is possible that, despite precautions taken at our vendors’ facilities, the occurrence of a natural disaster, cyber incident, decision to close the facilities without adequate notice or other unanticipated problems could result in our non-compliance with privacy laws and regulations, loss of proprietary or personally identifiable information, or PII, and in lengthy interruptions in our service. These service interruptions could also cause our platform to be unavailable to our health network partners, enterprise clients and members, and impair our ability to deliver solutions and services and to manage our relationships with new and existing health network partners, enterprise clients and members.

If our third-party vendors are unable or unwilling to provide the services necessary to support our business, or if our agreements with such vendors are terminated, our operations could be significantly disrupted. Some of our vendor agreements may be unilaterally terminated by the licensor for convenience, including with respect to Amazon Web Services, and if such agreements are terminated, we may not be able to enter into similar relationships in the future on reasonable terms or at all. We may also incur substantial costs, delays and disruptions to our business in transitioning such services to ourselves or other third-party vendors. In addition, third-party vendors may not be able to provide the services required in order to meet the changing needs of our business. Any of the foregoing could harm our competitive position, business, financial condition, results of operations and prospects.

38

If our or our vendors’ security measures fail or are breached and unauthorized access to our employees’, contractors’, members’, clients’ or partners’ data is obtained, our services may be perceived as insecure, we may incur significant liabilities, including through private litigation or regulatory action, our reputation may be harmed, and we could lose members, clients and partners.

Our services and operations involve the storage and transmission of health network partners’ and our members’ proprietary information, sensitive or confidential data, including valuable intellectual property and personal information of employees, contractors, clients, customers, members and others, as well as the protected health information, or PHI, of our members. Because of the extreme sensitivity of the information we store and transmit, the security features of our and our third-party vendors’ computer, network, and communications systems infrastructure are critical to the success of our business. A breach or failure of our or our third-party vendors’ security measures could result from a variety of circumstances and events, including third-party action, employee negligence or error, malfeasance, computer viruses, cyber-attacks by computer hackers, failures during the process of upgrading or replacing software and databases, power outages, hardware failures, telecommunication failures, user errors, or catastrophic events. Information security risks have generally increased in recent years because of the proliferation of new technologies and the increased number, sophistication and activities of perpetrators of cyber-attacks. As cyber threats continue to evolve, we may be required to expend additional resources to further enhance our information security measures and/or to investigate and remediate any information security vulnerabilities. If our or our third-party vendors’ security measures fail or are breached, it could result in unauthorized access to sensitive patient or member data (including PHI) or other personal information of employees, contractors, clients, members or others, a loss of or damage to our data, an inability to access data sources, or process data or provide our services to our members, health network partners and enterprise clients. Such failures or breaches of our or our third-party vendors’ security measures, or our or our third-party vendors’ inability to effectively resolve such failures or breaches in a timely manner, could severely damage our reputation, adversely impact customer, partner, member or investor confidence in us, and reduce the demand for our solutions and services. In addition, we could face litigation, significant damages for contract breach or other breaches of law, significant monetary penalties, or regulatory actions for violation of applicable laws or regulations, and incur significant costs for remedial measures to prevent future occurrences and mitigate past violations. Although we maintain insurance covering certain security and privacy damages and claim expenses, we may not carry insurance or maintain coverage sufficient to compensate for all liability and in any event, insurance coverage would not address the reputational damage that could result from a security incident.

We or our third-party vendors may experience cybersecurity and other breach incidents that remain undetected for an extended period. Because techniques used to obtain unauthorized access or to sabotage systems change frequently and generally are not recognized until launched, we or our third-party vendors may be unable to anticipate these techniques or to implement adequate preventive measures. If an actual or perceived breach of our or our third-party vendors’ security occurs, or if we or our third-party vendors are unable to effectively resolve such breaches in a timely manner, the market perception of the effectiveness of our security measures could be harmed and we could lose current and potential members, partners and clients, which could harm our business, results of operations, financial condition and prospects.

Our proprietary software may not operate properly, which could damage our reputation, give rise to claims against us or divert application of our resources from other purposes, any of which could harm our business.

Our proprietary technology platform provides members with the ability to, among other things, register for our services, request a visit (either scheduled or on demand) and communicate and interact with providers, and allows our providers to, among other things, chart patient notes, maintain medical records, and conduct visits (via video, phone or the internet). Proprietary software development is time-consuming, expensive and complex, and may involve unforeseen difficulties. We may encounter technical obstacles, and it is possible that we may discover additional problems that prevent our proprietary software from operating properly. We are currently implementing software with respect to a number of new applications and services. If our solutions do not

39

function reliably or fail to achieve member, partner or client expectations in terms of performance, we may lose or fail to grow member usage, members, partners and clients could assert liability claims against us, and partners and clients may attempt to cancel their contracts with us. This could damage our reputation and impair our ability to attract or maintain health network partners, enterprise clients and members.

The information that we provide to our health network partners, enterprise clients and members could be inaccurate or incomplete, which could harm our business, financial condition and results of operations.

We provide healthcare-related information for use by our health network partners, enterprise clients and members. Because data in the healthcare industry is fragmented in origin, inconsistent in format and often incomplete, the overall quality of data in the healthcare industry is poor, and we frequently discover data issues and errors. If the data that we provide to our health network partners, enterprise clients and members are incorrect or incomplete or if we make mistakes in the capture or input of these data, our reputation may suffer and our ability to attract and retain health network partners, enterprise clients and members may be harmed. In addition, a court or government agency may take the position that our storage and display of health information exposes us to personal injury liability or other liability for wrongful delivery or handling of healthcare services or erroneous health information, which could harm our business.

If we cannot implement our technology solutions for members, integrate our systems with health network partners or resolve technical issues in a timely manner, we may lose clients and partners and our reputation may be harmed.

Our health network partners utilize a variety of data formats, applications, systems and infrastructure. Moreover, each health network partner may have a unique technology ecosystem and infrastructure. To maintain our strategic relationships with such partners, our solutions and services must be seamlessly integrated and interoperable with our partners’ complex systems, which may cause us to incur significant upfront and maintenance costs. Additionally, we do not control our partners’ integration schedules. As a result, if our partners do not allocate the internal resources necessary to meet their integration responsibilities, which resources can be significant as many of them are large healthcare institutions with substantial operations to manage, or if we face unanticipated integration difficulties, the integration may be delayed. In addition, competitors with more efficient operating models with lower integration costs could jeopardize our partner relationships. If the integration process with our partners is not executed successfully or if execution is delayed, we could incur significant costs, partners could become dissatisfied and decide not to continue a strategic contractual relationship with us beyond an initial period during their term commitment or, in some cases, revenue recognition could be delayed, any of which could harm our business and results of operations.

Our members depend on our technology solutions, digital health platform, including our mobile app, and support services to access on-demand digital health services or schedule in-office visits. We may be unable to respond quickly enough to accommodate increases in member demand for support services, particularly as we increase the size of our membership base. We also may be unable to modify the format of our technology solutions and support services to compete with changes in such solutions and services provided by competitors. If we are unable to address members’ needs or preferences in a timely fashion or further develop and enhance our technology solutions, or if members are not satisfied with the quality of work performed by us or with the technical support services rendered, then we could incur additional costs to redress the situation, and our business may be impaired and members’ and clients’ dissatisfaction with our technology solutions could damage our ability to maintain or expand our membership base. While we have not issued refunds or credits for membership fees for these reasons, and historically any refunds or credits issued have not had a significant impact on net revenue, there can be no assurance as to whether we may need to issue additional refunds or credits for membership fees in the future as a result of member dissatisfaction. For example, our members expect on-demand healthcare services through our mobile app and rapid in-office visit scheduling. Failure to maintain these standards may reduce our overall NPS, harm our reputation and cause us to lose members. Moreover, negative publicity related to our technology solutions, regardless of its accuracy, may further damage our business by affecting our reputation, NPS or ability to compete for new members and enterprise clients. If our

40

technology solutions or support services are perceived as subpar or if we fail to meet the standards requested or preferred by our members, we may lose current and potential members, and our enterprise clients may terminate or decide not to renew their contracts with us. In addition, our enterprise clients expect our technology solutions to facilitate long-term cost of care reductions through high employee digital engagement, which we market as potential benefits for employers in providing employees with memberships for our solutions and services. If employers do not perceive our solutions and services as providing such efficiencies and cost savings, they may terminate their contracts with us or elect not to renew. Any such outcomes could also negatively affect our ability to contract with new enterprise clients through damage to our reputation. If any of these were to occur, our revenue may decline and our business, results of operations, financial condition and prospects could be harmed.

Our use and disclosure of PII, including PHI, is subject to federal and state privacy and security regulations, and our failure to comply with those regulations or to adequately secure such information we hold could result in significant liability or reputational harm and, in turn, substantial harm to our health network partner and enterprise client base, membership base and revenue.

We receive, store, process and use personal information as part of our business. Numerous state and federal laws and regulations inside the United States govern the collection, dissemination, use, privacy, confidentiality, security, availability and integrity of PII including PHI. These laws and regulations include HIPAA, as amended by the HITECH Act, and their implementing regulations. As well as state privacy and data protection laws. HIPAA establishes a set of basic national privacy and security standards for the protection of PHI, by health plans, healthcare clearinghouses and certain healthcare providers, referred to as covered entities, which includes the One Medical PCs, and the business associates with whom such covered entities contract for services that involve the use or disclosure of PHI, which includes us. States may enforce more stringent privacy and data protection laws exceeding the requirements of HIPAA. Compliance with data protection laws and regulations in the United States could cause us to incur substantial costs or require us to change our business practices and compliance procedures in a manner adverse to our business. We strive to comply with applicable laws, regulations, policies and other legal obligations relating to privacy, data protection and information security. However, the various regulatory frameworks for privacy and data protection is, and is likely to remain, uncertain for the foreseeable future, and it is possible that these or other actual or alleged obligations may be interpreted and applied in a manner that is inconsistent from one jurisdiction to another and may conflict with other rules and subject our business practices to uncertainty.

HIPAA requires healthcare providers like us to develop and maintain policies and procedures with respect to PHI that is used or disclosed, including the adoption of administrative, physical and technical safeguards to protect such information. HIPAA also implemented the use of standard transaction code sets and standard identifiers that covered entities must use when submitting or receiving certain electronic healthcare transactions, including activities associated with the billing and collection of healthcare claims.

Penalties for violations of these laws vary. For example, penalties for violations of HIPAA and its implementing regulations start at $114 per violation and are not to exceed $57,051 per violation, subject to a cap of $1.7 million for violations of the same standard in a single calendar year (as of 2019, and subject to periodic adjustments for inflation). However, a single breach incident can result in violations of multiple standards, which could result in significant fines. HIPAA also authorizes state attorneys general to file suit on behalf of their residents. Courts will be able to award damages, costs and attorneys’ fees related to violations of HIPAA in such cases, which may be significant. While HIPAA does not create a private right of action allowing individuals to sue us in civil court for violations of HIPAA, its standards have been used as the basis for duty of care in state civil suits such as those for negligence or recklessness in the misuse or breach of PHI. Any such penalties or lawsuits could harm our business, financial condition, results of operations and prospects.

In addition, HIPAA mandates that the Secretary of Health and Human Services, or HHS, conduct periodic compliance audits of HIPAA covered entities or business associates for compliance with the HIPAA Privacy and Security Standards and Breach Notification Rule. It also tasks HHS with establishing a methodology whereby harmed individuals who were the victims of breaches of unsecured PHI may receive a percentage of the civil monetary penalty fine or settlement paid by the violator.

41

HIPAA further requires that patients be notified of any unauthorized acquisition, access, use or disclosure of their unsecured PHI that compromises the privacy or security of such information, with certain exceptions related to unintentional or inadvertent use or disclosure by employees or authorized individuals or where there is a good faith belief that the person who received the impermissible disclosure would not have been able to retain the information. HIPAA specifies that such notifications must be made “without unreasonable delay and in no case later than 60 calendar days after discovery of the breach.” If a breach affects 500 patients or more, it must be reported to HHS without unreasonable delay, and HHS will post the name of the breaching entity on its public web site. Breaches affecting 500 patients or more in the same state or jurisdiction must also be reported to the local media. If a breach involves fewer than 500 people, the covered entity must record it in a log and notify HHS at least annually. Any such notifications, including notifications to the public, could harm our business, financial condition, results of operations and prospects

Numerous other federal and state laws protect the confidentiality, privacy, availability, integrity and security of PII, including PHI. For example, various states, such as California and Massachusetts, have implemented privacy laws and regulations that in many cases are more restrictive than, and may not be preempted by, the HIPAA rules and may be subject to varying interpretations by courts and government agencies, creating complex compliance issues for us and our health network partners and enterprise clients and potentially exposing us to additional expense, adverse publicity and liability.

Further, as regulatory focus on privacy issues continues to increase, new laws and regulations, including health information standards, whether implemented pursuant to HIPAA, congressional action or otherwise, could have a significant effect on the manner in which we must handle healthcare-related data, and the cost of complying with standards could be significant and may include providing enhanced data security infrastructure. If we do not comply with existing or new laws and regulations related to PHI, we could be subject to criminal or civil sanctions, as well as reputational harm.

Because of the extreme sensitivity of the PII we store and transmit, the security features of our technology platform are very important. If our security measures, some of which are managed by third parties, are breached or fail, unauthorized persons may be able to obtain access to sensitive employee, contractor, patient and member data, including HIPAA-regulated PHI. As a result, our reputation could be severely damaged, harming patient and member confidence. Members may curtail their use of or stop using our services or our member base could decrease, which would cause our business to suffer. In addition, we could face litigation, significant damages for contract breach, significant penalties and regulatory actions for violation of HIPAA and other applicable laws or regulations and significant costs for remediation, notification to individuals and the public and measures to prevent future occurrences. Any potential security breach could also result in increased costs associated with liability for stolen assets or information, repairing system damage that may have been caused by such breaches, remediation offered to employees, contractors, health network partners, enterprise clients or members in an effort to maintain our business relationships after a breach and implementing measures to prevent future occurrences, including organizational changes, deploying additional personnel and protection technologies, training employees and engaging third-party experts and consultants. While we maintain insurance covering certain security and privacy damages and claim expenses, we may not carry insurance or maintain coverage sufficient to compensate for all liability and in any event, insurance coverage would not address the reputational damage that could result from a security incident. In addition, we might not continue to be able to obtain adequate insurance coverage at an acceptable cost.

We outsource important aspects of the storage and transmission of patient and member information, and thus rely on third parties to manage functions that have material cybersecurity risks. We attempt to address these risks by requiring outsourcing subcontractors who handle patient and member information to sign information protection addenda and business associate agreements contractually requiring those subcontractors to adequately safeguard PII, including PHI, to the same extent that applies to us and in some cases by requiring such outsourcing subcontractors to undergo third-party security examinations. In addition, we periodically hire third-party security experts to assess and test our security posture. However, we cannot assure that these contractual

42

measures and other safeguards will adequately protect us from the risks associated with the storage and transmission of employees’, contractors’, patients’ and members’ proprietary information, PII and PHI.

We also publish statements to our members that describe how we handle and protect personal information. If federal or state regulatory authorities or private litigants consider any portion of these statements to be untrue, we may be subject to claims of misrepresentation and/or deceptive practices, which could lead to significant liabilities and consequences, including, without limitation, significant costs of responding to investigations, defending against litigation, settling claims and complying with regulatory or court orders.

We also expect that there will continue to be new laws, regulations and industry standards concerning privacy, data protection and information security proposed and enacted in various jurisdictions. For example, California recently enacted legislation, the California Consumer Privacy Act of 2018, or the CCPA, that will afford consumers expanded privacy protections when it goes into effect on January 1, 2020. The CCPA was recently amended, and it is possible that it will be amended again before it goes into effect. The potential effects of this legislation are far-reaching and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. For example, the CCPA gives California residents expanded rights to access and require deletion of their personal information, opt out of certain personal information sharing and receive detailed information about how their personal information is used. Failure to comply with the CCPA may result in attorney general enforcement action and damage to our reputation. The CCPA also provides for civil penalties for violations, as well as a private right of action for data breaches that may increase data breach litigation.

Additionally, if third parties we work with, such as vendors or developers, violate applicable laws or regulations or our policies, such violations may cause us to incur significant liability and may also put our users’ content at risk, any of which could in turn harm our business. Any significant change to applicable laws, regulations or industry practices regarding the collection, use, retention, security or disclosure of our users’ content, or regarding the manner in which the express or implied consent of users for the collection, use, retention or disclosure of such content is obtained, could increase our costs and require us to modify our services and features, possibly in a material manner, which we may be unable to complete and may limit our ability to store and process user data, optimize our operations or develop new services and features. Any of the foregoing could harm our competitive position, business, financial condition, results of operations and prospects.

Individuals may claim our text messaging services are not compliant with applicable law, including the Telephone Consumer Protection Act.

We send short message service, or SMS, text messages to potential members who are eligible to use our service, including through certain clients. While we obtain consent from these individuals to send text messages, federal or state regulatory authorities or private litigants may claim that the notices and disclosures we provide, form of consents we obtain or our SMS texting practices are not adequate or violate applicable law. These SMS texting campaigns are potential sources of risk for class action lawsuits and liability for our company. Numerous class-action suits under federal and state laws have been filed in recent years against companies who conduct SMS texting programs, with many resulting in multi-million-dollar settlements to the plaintiffs. Any future such litigation against us could be costly and time-consuming to defend. In addition, we must ensure that our SMS text messaging complies with regulations and agency guidance under the Telephone Consumer Protection Act, or TCPA, a federal statute that protects consumers from unwanted telephone calls, faxes and text messages. While we strive to adhere to strict policies and procedures, the Federal Communications Commission, as the agency that implements and enforces the TCPA, may disagree with our interpretation of the TCPA and subject us to penalties and other consequences for noncompliance. Determination by a court or regulatory agency that our SMS text messaging violates the TCPA could subject us to civil penalties, could require us to change some portions of our business and could otherwise harm our business. Even an unsuccessful challenge by members, clients or regulatory authorities of our activities could result in adverse publicity and could require a costly response from and defense by us.

43

Our labor costs could be negatively impacted by competition for staffing, the shortage of experienced nurses and labor union activity.

The operations of the One Medical PCs are dependent on the efforts, abilities and experience of our management and medical support personnel, including nurses, therapists, and lab technicians, as well as our providers. We compete with other healthcare providers in recruiting and retaining employees, and, like others in the healthcare industry, we continue to experience a shortage of nurses in certain disciplines and geographic areas. As a result, from time to time, we may be required to enhance wages and benefits to recruit and retain experienced employees, make greater investments in education and training for newly licensed medical support personnel, or hire more expensive temporary or contract employees. Furthermore, state-mandated nurse-staffing ratios in California affect not only our labor costs, but, if we are unable to hire the necessary number of experienced nurses to meet the required ratios, they may also cause us to limit patient volumes, which would have a corresponding negative impact on our net revenue. In addition, while none of our employees are represented by a labor union as of September 30, 2019, our employees may seek to be represented by a labor union in the future. If some or all of our employees were to become unionized, it could increase labor costs. In general, our failure to recruit and retain qualified management, experienced nurses and other medical support personnel, or to control labor costs, could harm our business.

Certain U.S. state tax authorities may assert that we have a state nexus and seek to impose state and local income taxes which could harm our results of operations.

As of September 30, 2019, we are qualified to operate in, and file income tax returns in, ten states as well as Washington, D.C. There is a risk that certain state tax authorities where we do not currently file a state income tax return could assert that we are liable for state and local income taxes based upon income or gross receipts allocable to such states. States are becoming increasingly aggressive in asserting a nexus for state income tax purposes. We could be subject to state and local taxation, including penalties and interest attributable to prior periods, if a state tax authority successfully asserts that our activities give rise to a nexus. Such tax assessments, penalties and interest may adversely impact our results of operations.

Our ability to use our net operating losses to offset future taxable income may be subject to certain limitations.

In general, under Section 382 of the U.S. Internal Revenue Code of 1986, as amended, or the Code, a corporation that undergoes an “ownership change” is subject to limitations on its ability to utilize its pre-change net operating losses, or NOLs, to offset future taxable income. A Section 382 “ownership change” generally occurs if one or more stockholders or groups of stockholders who own at least 5% of our stock increase their ownership by more than 50 percentage points over their lowest ownership percentage within a rolling three-year period. Similar rules may apply under state tax laws. As of December 31, 2018, we have $174.7 million of federal net operating loss carryforwards and $193.2 million of state and local net operating loss carryforwards. The federal net operating loss carryforwards of $38.2 million arising in 2018, and as well as those arising in subsequent years carry forward indefinitely, but the deduction for these carryforwards is limited to 80% of current-year taxable income. The federal net operating loss carryforwards of $136.5 million from prior years will begin to expire in 2025. The state and local net operating loss carryforwards begin to expire in 2024. Our ability to utilize NOLs may be currently subject to limitations due to prior ownership changes. In addition, future changes in our stock ownership, some of which are outside of our control, could result in an ownership change under Section 382 of the Code, further limiting our ability to utilize NOLs arising prior to such ownership change in the future. There is also a risk that due to statutory or regulatory changes, such as suspensions on the use of NOLs, or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to offset future income tax liabilities. We have recorded a full valuation allowance against the deferred tax assets attributable to our NOLs.

44

In order to support the growth of our business, we may need to incur additional indebtedness under our existing loan agreement or seek capital through new equity or debt financings, which sources of additional capital may not be available to us on acceptable terms or at all.

Our operations have consumed substantial amounts of cash since inception and we intend to continue to make significant investments to support our business growth, respond to business challenges or opportunities, expand our services in new geographic locations, enhance our existing solutions and services, enhance our operating infrastructure and potentially acquire complementary businesses and technologies. For the years ended December 31, 2017 and 2018 and the nine months ended September 30, 2019, our net cash used in operating activities was $2.7 million, $18.4 million and $24.1 million, respectively. As of September 30, 2019, we had $31.9 million of cash and cash equivalents and $138.5 million of short-term marketable securities, which are held for working capital purposes. As of September 30, 2019, we had $4.4 million aggregate principal amount of notes outstanding under our loan and security agreement with Silicon Valley Bank entered into in January 2013, or the LSA.

Borrowings under our credit facility under the LSA are secured by substantially all of our properties, rights and assets, excluding intellectual property. Additionally, the LSA contains certain customary restrictive covenants that limit our ability to incur additional indebtedness and liens, merge with other companies or consummate certain changes of control, acquire other companies, engage in new lines of business, make certain investments, pay dividends, amend the ASAs and transfer or dispose of assets. These covenants could limit our ability to seek capital through the incurrence of new indebtedness or, if we are unable to meet our revenue growth or liquidity obligations, require us to repay any outstanding amounts with sources of capital we may otherwise use to fund our business, operations and strategy.

Our future capital requirements may be significantly different from our current estimates and will depend on many factors, including our growth rate, membership renewal activity and growth, the timing and extent of spending to support development efforts, the expansion of sales and marketing activities, the introduction of new or enhanced services, expansion of services to new geographic locations, addition of new health network partners and the continuing market acceptance of our healthcare services. Accordingly, we may need to engage in equity or debt financings or collaborative arrangements to secure additional funds. If we raise additional funds through further issuances of equity or convertible debt securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our common stock. Any debt financing secured by us in the future could involve additional restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. In addition, during times of economic instability, it has been difficult for many companies to obtain financing in the public markets or to obtain debt financing, and we may not be able to obtain additional financing on commercially reasonable terms, if at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us, it could harm our business and growth prospects.

Our revenues have historically been concentrated among our top customers, and the loss of any of these customers could reduce our revenues and adversely impact our operating results.

Historically, our revenue has been concentrated among a small number of customers. In 2017, 2018 and the nine months ended September 30, 2019, our top customers accounted for 42%, 37% and 36% of our net revenue, respectively. These customers included Google Inc., which accounted for 10% of our net revenue for 2018 and the nine months ended September 30, 2019. In 2017, our top customers consisted of several commercial payers, and for the nine months ended September 30, 2019, our top customers also included a commercial payer and a health network partner. As a result, the loss of one or more of these customers could reduce our revenue, harm our results of operation and limit our growth.

45

Our quarterly results may fluctuate significantly, which could adversely impact the value of our common stock.

Our quarterly results of operations, including our net revenue, loss from operations, net loss and cash flows, have varied and may vary significantly in the future, and period-to-period comparisons of our results of operations may not be meaningful. Accordingly, our quarterly results should not be relied upon as an indication of future performance. Our quarterly financial results may fluctuate as a result of a variety of factors, many of which are outside of our control, including, without limitation, the following:

A large portion of our net revenue in any given quarter is derived from contracts entered into with our partners and clients during previous quarters as well as membership fees that are recognized ratably over the term of each membership. Consequently, a decline in new or renewed contracts or memberships in any one quarter may not be fully reflected in our net revenue for that quarter. Such declines, however, would negatively affect our net revenue in future periods and the effect of loss of members, and potential changes in our rate of renewals or renewal terms, may not be fully reflected in our results of operations until future periods. While we encourage enterprise clients to purchase memberships off of their periodic enrollment cycle, we cannot guarantee that they will do so. Accordingly, the effect of changes in the industry impacting our business or loss of members may not be reflected in our short-term results of operations. Any fluctuation in our quarterly results may not accurately reflect the underlying performance of our business and could cause a decline in the trading price of our common stock.

46

We depend on our senior management team, and the loss of one or more of our executive officers or key employees or an inability to attract and retain highly skilled employees could harm our business.

Our success depends largely upon the continued services of our key executive officers, particularly our Chair, Chief Executive Officer and President. These executive officers are at-will employees and therefore they may terminate employment with us at any time with no advance notice. We also do not maintain any key person life insurance policies. Further, we rely on our leadership team in the areas of research and development, marketing, services and general and administrative functions. From time to time, there may be changes in our executive management team resulting from the hiring or departure of executives, which could disrupt our business. The replacement of one or more of our executive officers or other key employees would likely involve significant time and costs and may significantly delay or prevent the achievement of our business objectives.

To continue to execute our growth strategy, we also must attract and retain highly skilled personnel. Competition is intense for qualified professionals. We may not be successful in continuing to attract and retain qualified personnel. We have from time to time in the past experienced, and we expect to continue to experience in the future, difficulty in hiring and retaining highly skilled personnel with appropriate qualifications. The pool of qualified personnel with experience working in the healthcare market is limited overall. In addition, many of the companies with which we compete for experienced personnel have greater resources than we have.

In addition, in making employment decisions, particularly in high-technology industries, job candidates often consider the value of the stock options or other equity-based awards they are to receive in connection with their employment. Volatility in the price of our stock may, therefore, negatively impact our ability to attract or retain highly skilled personnel. Further, the requirement to expense stock options and other equity-based compensation may discourage us from granting the size or type of stock option or equity awards that job candidates require to join our company. Failure to attract new personnel or failure to retain and motivate our current personnel, could harm our business.

We are dependent on our ability to recruit, retain and develop a very large and diverse workforce. We must evolve our culture in order to successfully grow our business.

Our services and our operations require a large number of employees. Our success is dependent on our ability to evolve our culture, align our talent with our business needs, engage our employees and inspire our employees to be open to change, to innovate and to maintain member- and customer-focus when delivering our services. Our business would be harmed if we fail to adequately plan for succession of our executives and senior management; or if we fail to effectively recruit, integrate, retain and develop key talent and/or align our talent with our business needs, in light of the current rapidly changing environment. While we have succession plans in place and we have employment arrangements with a limited number of key executives, these do not guarantee that the services of these or suitable successor executives will continue to be available to us. We are particularly dependent on the Chief Medical Officer of One Medical Group, Inc. who is responsible for overseeing our services to the One Medical PCs under the ASAs, among other things. While we have a succession arrangement for the Chief Medical Officer of One Medical Group, Inc., our business and future growth may be harmed if were required to find a suitable replacement for him.

We may acquire other companies or technologies, which could divert our management’s attention, result in dilution to our stockholders and otherwise disrupt our operations and we may have difficulty integrating any such acquisitions successfully or realizing the anticipated benefits therefrom, any of which could harm our business.

We may in the future seek to acquire or invest in businesses, applications and services or technologies that we believe could complement or expand our business, enhance our technical capabilities or otherwise offer growth opportunities. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses in identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.

47

In addition, if we acquire additional businesses, we may not be able to integrate the acquired personnel, operations and technologies successfully, or effectively manage the combined business following the acquisition. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including, but not limited to:

In addition, a significant portion of the purchase price of companies we acquire may be allocated to acquired goodwill and other intangible assets, which must be assessed for impairment at least annually. In the future, if our acquisitions do not yield expected returns, we may be required to take charges to our results of operations based on this impairment assessment process, which could harm our results of operations.

Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, which could harm our results of operations. In addition, if an acquired business fails to meet our expectations, our business may be harmed.

Taxing authorities may successfully assert that we should have collected or in the future should collect sales and use or similar taxes for our membership and enterprise offerings which could negatively impact our results of operations.

We do not collect sales and use and similar taxes in any states for our membership and enterprise offerings based on our belief that our services are not subject to such taxes in any state. Sales and use and similar tax laws and rates vary greatly from state to state. Certain states in which we do not collect such taxes may assert that such taxes are applicable, which could result in tax assessments, penalties and interest with respect to past services, and we may be required to collect such taxes for services in the future. For example, the State of New York audited our sales and use tax records from March 2011 through February 2017 and issued a determination that we owe back taxes, penalties and interest. While we intend to dispute the results of the audit, we may not be successful, in which case we may be required to make payments in tax assessments, penalties or interest. Such tax assessments, penalties and interest or future requirements may negatively impact our results of operations.

The estimates of market opportunity and forecasts of market and revenue growth included in this prospectus may prove to be inaccurate, and even if the market in which we compete achieves the forecasted growth, our business could fail to grow at similar rates, if at all.

Market opportunity estimates and growth forecasts are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. In particular, the size and growth of the overall U.S. healthcare market is subject to significant variables, including a changing regulatory environment and population demographic, which can be difficult to measure, estimate or quantify. Our business depends on

48

member acquisition and retention, which further drives revenue from our contracts with health network partners; estimates and forecasts of these factors in any given market is difficult and affected by multiple variables such as population growth, concentration of enterprise clients and population density, among other things. Further, there can be no assurance that we will be able to sufficiently penetrate certain market segments included in our estimates and forecasts, including due to limited deployable capital, ineffective marketing efforts or the inability to develop sufficient presence in a given market to gain members or contract with employers and health network partners in that market. Once we acquire a member, apart from fixed annual membership fees, we derive revenue from patient in-office visits, which may be difficult to forecast over time. Finally, our contractual arrangements with health network partners typically have highly tailored capitation and other fee structures which vary across health network partner and are dependent on the number of members that receive healthcare services in a health network partner’s network. As a result, we may not be able to accurately forecast revenue from our health network partners. For these reasons, the estimates and forecasts in this prospectus relating to the size and expected growth of our target markets may prove to be inaccurate. Even if the markets in which we compete meet our size estimates and forecasted growth, our business could fail to grow at similar rates, if at all.

The emergence and effects related to a pandemic, epidemic or outbreak of an infectious disease could negatively impact our operations.

If a pandemic, epidemic, outbreak of an infectious disease or other public health crisis were to occur in an area in which we operate, our operations could be negatively impacted. Such a crisis could diminish the public trust in healthcare facilities, especially facilities that fail to accurately or timely diagnose, or are treating (or have treated) patients affected by infectious diseases. If any of the One Medical PCs were involved, or perceived as being involved, in treating patients from such an infectious disease, patients might cancel elective procedures or fail to seek needed care at the One Medical PCs. Further, a pandemic, epidemic or outbreak might negatively impact our operations by causing a temporary shutdown or diversion of members, by disrupting or delaying production and delivery of materials and products in the supply chain or by causing staffing shortages in the One Medical PCs. We have disaster plans in place and operate pursuant to infectious disease protocols, but the potential emergence of a pandemic, epidemic or outbreak is difficult to predict and could harm our business and operations.

Natural or man-made disasters and other similar events may significantly disrupt our business and negatively impact our business, financial condition and results of operations.

Our offices and facilities may be harmed or rendered inoperable by natural or man-made disasters, including earthquakes, power outages, fires, floods, nuclear disasters and acts of terrorism or other criminal activities, which may render it difficult or impossible for us to operate our business for some period of time. In particular, certain of the facilities we lease to house our computer and telecommunications equipment are located in the San Francisco Bay Area, a region known for seismic activity, and our insurance coverage may not compensate us for losses that may occur in the event of an earthquake or other significant natural disaster. Any disruptions in our operations related to the repair or replacement of our offices, could negatively impact our business and results of operations and harm our reputation. Although we maintain an insurance policy covering damage to property we rent, such insurance may not be sufficient to compensate for losses that may occur. Any such losses or damages could harm our business, financial condition and results of operations. In addition, our health network partners’ facilities may be harmed or rendered inoperable by such natural or man-made disasters, which may cause disruptions, difficulties or other negative effects on our business and operations.

Our financial results may be adversely impacted by changes in accounting principles applicable to us.

Generally accepted accounting principles in the United States are subject to interpretation by the Financial Accounting Standards Board, or FASB, the SEC and other various bodies formed to promulgate and interpret appropriate accounting principles. For example, in May 2014, the FASB issued accounting standards update No. 2014-09 (Topic 606), Revenue from Contracts with Customers, which supersedes nearly all existing revenue recognition guidance under GAAP. The core principle of Topic 606 is that an entity should recognize revenue to

49

depict the transfer of promised goods or services to customers in an amount that reflects the consideration to which the entity expects to be entitled in exchange for those goods or services; this new accounting standard also impacts the recognition of sales commissions.

We have adopted this standard as of January 1, 2019 using the modified retrospective method. The adoption of this standard did not have a material impact on our consolidated financial statements. As a result of adopting this standard, we recorded an adjustment to deferred contract costs of $65 thousand as of January 1, 2019, to reflect an increase in the amount of commission costs previously recorded. The application of this new guidance could harm our operating results in one or more periods as compared to what they would have been under previous standards.

Under Topic 606, more estimates, judgments, and assumptions are required within the revenue recognition process than were previously required. Our reported financial position and financial results may be harmed if our estimates or judgments prove to be wrong, assumptions change, or actual circumstances differ from those in our assumptions. Any difficulties in implementing these pronouncements could cause us to fail to meet our financial reporting obligations, which could result in regulatory discipline and harm our business.

If our estimates or judgments relating to our critical accounting policies prove to be incorrect, our results of operations could be harmed.

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as provided in “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Critical Accounting Policies and Significant Judgments and Estimates.” The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity and the amount of revenue and expenses that are not readily apparent from other sources. Significant assumptions and estimates used in preparing our consolidated financial statements include those related to revenue recognition, determination of useful lives for property and equipment, intangible assets including goodwill, capitalized internal-use software, allowance for doubtful accounts, valuation of redeemable convertible preferred stock warrant liability, self-insurance reserves, valuation of common stock, stock options valuations, contingent liabilities and income taxes. Our results of operations may be harmed if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our common stock.

We may not be able to successfully manage the growth of our business if we are unable to improve our internal systems, processes and controls.

We need to continue to improve our internal systems, processes, and controls to effectively manage our operations and growth. We may not be able to successfully implement and scale improvements to our systems and processes in a timely or efficient manner or in a manner that does not negatively affect our operating results. For example, we may not be able to effectively monitor certain extraordinary contract requirements or provisions that are individually negotiated as the number of transactions continues to grow. In addition, our systems and processes may not prevent or detect all errors, omissions, or fraud, including any fraudulent activities conducted or facilitated by our employees or the providers or staff at the One Medical PCs. We may experience difficulties in managing improvements to our systems, processes, and controls or in connection with third-party software, which could impair our ability to offer our platform to our members in a timely manner, causing us to lose members or increase our technical support costs.

50

As a result of being a public company, we are obligated to develop and maintain proper and effective internal control over financial reporting and any failure to maintain the adequacy of these internal controls may negatively impact investor confidence in our company and, as a result, the value of our common stock.

We will be required pursuant to Section 404 of the Sarbanes-Oxley Act to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting. This assessment will need to include disclosure of any material weaknesses identified by our management in our internal control over financial reporting. In addition, our independent registered public accounting firm will be required to attest to the effectiveness of our internal control over financial reporting in our first annual report required to be filed with the SEC following the date we are no longer an emerging growth company. We have not yet commenced the costly and challenging process of compiling the system and processing documentation necessary to perform the evaluation required under Section 404. We currently do not have an internal audit group, and we will need to hire additional accounting and financial staff with appropriate public company experience and technical accounting knowledge and compile the system and process documentation necessary to perform the evaluation needed to comply with Section 404. Any failure to maintain effective internal control over financial reporting could severely inhibit our ability to accurately report our financial condition or results of operations. If we are unable to conclude that our internal control over financial reporting is effective, or if our independent registered public accounting firm determines we have a material weakness in our internal control over financial reporting, we could lose investor confidence in the accuracy and completeness of our financial reports, the market price of our common stock could decline, we could be subject to sanctions or investigations by Nasdaq, the SEC or other regulatory authorities and our access to the capital markets could be restricted in the future.

We have identified material weaknesses in our internal control over financial reporting. Failure to achieve and maintain effective internal control over financial reporting could harm our business and negatively impact the value of our common stock.

We have identified material weaknesses in our internal control over financial reporting resulting from an ineffective risk assessment process, which led to improperly designed controls. A material weakness is a deficiency, or combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis.

Specifically, as a result of the ineffective risk assessment, we identified the following material weaknesses as we did not effectively design, implement and maintain: (i) adequate controls over the accounting for significant and unusual transactions (ii) adequate controls to address segregation of duties and (iii) adequate controls over information technology general controls including the following: program change management, user access, computer operations controls and program development.

These IT deficiencies, when aggregated, could impact effective segregation of duties as well as the effectiveness of IT-dependent controls that could result in misstatements potentially impacting all financial statement accounts and disclosures that would not be prevented or detected. Accordingly, our management has determined these deficiencies in the aggregate constitute a material weakness.

In addition, the material weakness related to significant and unusual transactions resulted in a prior restatement of previously issued financial statements. The material weaknesses related to segregation of duties and IT general controls did not result in any material misstatements of our financial statements or disclosures. Each of these material weaknesses could, however, result in a misstatement of account balances or disclosures that would result in a material misstatement to the annual or interim financial statements that would not be prevented or detected.

We are implementing measures designed to improve our internal control over financial reporting and remediate the control deficiencies contributed to the material weaknesses noted above. Specifically, we are

51

designing and implementing controls related to (i) the preparation and review of accounting for significant and unusual transactions, (ii) implementing formal processes and controls to identify, monitor and mitigate segregation of duties conflicts and (iii) enhancing existing policies and implementing appropriate processes to strengthen our information technology general controls across the relevant IT domains (access to programs and data, program changes, computer operations and program development). We cannot assure you that the measures we are taking will be sufficient to avoid potential future material weaknesses. Accordingly, there could continue to be a possibility that a material misstatement of our financial statements would not be prevented or detected on a timely basis.

Risks Related to Intellectual Property

If we are unable to obtain, maintain and enforce intellectual property protection for our technology and solutions or if the scope of our intellectual property protection is not sufficiently broad, others may be able to develop and commercialize technology and solutions substantially similar to ours, and our ability to successfully commercialize our technology and solutions may be compromised.

Our business depends on proprietary technology and content, including software, processes, databases, confidential information and know-how, the protection of which is crucial to the success of our business. We rely on a combination of trademark, trade-secret and copyright laws, confidentiality procedures, cybersecurity practices and contractual provisions to protect the intellectual property rights of our proprietary technology and content. We do not own any issued patents or pending patent applications. Accordingly, it is possible that third parties, including our competitors, may obtain patents relating to technologies that overlap or compete with our technology. If third parties obtain patent protection with respect to such technologies, they may assert that our technology infringes their patents and seek to charge us a licensing fee or otherwise preclude the use of our technology. We may, over time, increase our investment in protecting our intellectual property through additional trademark, patent and other intellectual property filings, which could be expensive and time-consuming. We may not be able to obtain protection for our technology and even if we are successful in obtaining effective patent, trademark, trade-secret and copyright protection, it is expensive to maintain these rights and the costs of defending our rights could be substantial. Moreover, our failure to develop and properly manage new intellectual property could hurt our market position and business opportunities. Furthermore, recent changes to U.S. intellectual property laws may jeopardize the enforceability and validity of our intellectual property portfolio and harm our ability to obtain patent protection of some of our unique business methods.

In addition, these measures may not be sufficient to offer us meaningful protection or provide us with any competitive advantages. If we are unable to adequately protect our intellectual property and other proprietary rights, our competitive position and our business could be harmed, as third parties may be able to commercialize and use technologies and software solutions that are substantially the same as ours to compete with us without incurring the development and licensing costs that we have incurred. Any of our owned or licensed intellectual property rights could be challenged, invalidated, circumvented, infringed, misappropriated or violated, our trade secrets and other confidential information could be disclosed in an unauthorized manner to third parties, or our intellectual property rights may not be sufficient to permit us to take advantage of current market trends or to otherwise to provide us with competitive advantages, which could result in costly redesign efforts, business disruptions, discontinuance of some of our offerings or other competitive harm.

We may become involved in lawsuits to protect or enforce our intellectual property, which could be expensive, time consuming and unsuccessful.

Third parties, including our competitors, could be infringing, misappropriating or otherwise violating our intellectual property rights. Monitoring unauthorized use of our intellectual property is difficult and costly. From time to time, we seek to analyze our competitors’ solutions and services, and may in the future seek to enforce our rights against potential infringement, misappropriation or violation of our intellectual property. However, the steps we have taken to protect our proprietary rights may not be adequate to enforce our rights as against such

52

infringement, misappropriation or violation of our intellectual property. We may not be able to detect unauthorized use of, or take appropriate steps to enforce, our intellectual property rights. Any inability to meaningfully enforce our intellectual property rights could harm our ability to compete and reduce demand for our solutions and services.

We are, and may in the future become, involved in lawsuits to protect or enforce our intellectual property rights. An adverse result in any litigation proceeding could harm our business. In any lawsuit we bring to enforce our intellectual property rights, a court may refuse to the stop the other party from using the technology at issue on grounds that our intellectual property rights do not cover the use or technology in question. Further, in such proceedings, the defendant could counterclaim that our intellectual property is invalid or unenforceable and the court may agree, in which case we could lose valuable intellectual property rights. The outcome in any such lawsuits are unpredictable, and even if we prevail, the process can be extended and costly.

Any claim of infringement, misappropriation or violation of another party’s intellectual property rights could cause us to incur significant costs and to cease the commercialization of our solutions and services.

In recent years, there has been significant litigation in the United States involving intellectual property rights. Companies in the Internet and technology industries are increasingly bringing and becoming subject to lawsuits alleging infringement, misappropriation or violation of intellectual property rights, particularly patent rights, and our competitors and other third parties may hold patents or have pending patent applications or other intellectual property rights, which could be related to our business. These risks have been amplified by the increase in third parties, which we refer to as non-practicing entities, whose sole primary business is to assert such claims. Regardless of the merits of any other intellectual property litigation, we may be required to expend significant management time and financial resources on the defense of such claims, and any adverse outcome of any such claim or the above referenced review could harm our business. We expect that we may receive in the future notices that claim we or our partners, clients or members using our solutions and services have misappropriated or misused other parties’ intellectual property rights, particularly as the number of competitors in our market grows and the functionality of applications amongst competitors overlaps. Any future litigation, whether or not successful, could be extremely costly to defend, divert our management’s time, attention and resources, damage our reputation and brand and substantially harm our business.

If any of our technologies, solutions or services are found to infringe, misappropriate or violate a third party’s intellectual property rights, we could be required to obtain a license from such third party to continue commercializing or using such technologies, solutions and services. However, we may not be able to obtain any required license on commercially reasonable terms or at all. Even if we were able to obtain a license, it could be non-exclusive, thereby giving our competitors and other third parties access to the same technologies licensed to us, and it could require us to make substantial licensing and royalty payments. We also could be forced, including by court order, to cease the commercialization or use of the violating technology, solutions or services. Accordingly, we may be forced to design around such violated intellectual property, which may be expensive, time-consuming or infeasible. In addition, we could be found liable for significant monetary damages, including treble damages and attorneys’ fees, if we are found to have willfully infringed a patent or other intellectual property right. Claims that we have misappropriated the confidential information or trade secrets of third parties could similarly harm our business. If we are required to make substantial payments or undertake any of the other actions noted above as a result of any intellectual property infringement, misappropriation or violation claims against us, such payments, costs or actions could affect our competitive position, business, financial condition, results of operations and prospects.

Intellectual property litigation could cause us to spend substantial resources and distract our personnel from their normal responsibilities.

Litigation or other legal proceedings relating to intellectual property claims, even if resolved in our favor, may cause us to incur significant expenses and could distract our personnel from their normal responsibilities. In

53

addition, there could be public announcements of the results of hearings, motions, or other interim proceedings or developments, and if securities analysts or investors perceive these results to be negative, it could have a substantial adverse effect on the price of our common stock. Such litigation or proceedings could substantially increase our operating losses and reduce the resources available for development activities or any future sales, marketing, or distribution activities. We may not have sufficient financial or other resources to conduct such litigation or proceedings adequately. Some of our competitors may be able to sustain the costs of such litigation or proceedings more effectively than we can because of their greater financial resources and more mature and developed intellectual property portfolios. Uncertainties resulting from the initiation and continuation of intellectual property proceedings could harm our ability to compete in the marketplace. In addition, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential information could be compromised by disclosure during this type of litigation. Any of the foregoing could harm our competitive position, business, financial condition, results of operations and prospects.

If we fail to comply with our obligations under license or technology agreements with third parties, we may be required to pay damages and we could lose license rights that are critical to our business.

We license certain intellectual property, including technologies and software from third parties, that is important to our business, and in the future we may enter into additional agreements that provide us with licenses to valuable intellectual property or technology. If we fail to comply with any of the obligations under our license agreements, we may be required to pay damages and the licensor may have the right to terminate the license. Termination by the licensor would cause us to lose valuable rights, and could prevent us from selling our solutions and services, or adversely impact our ability to commercialize future solutions and services. Our business would suffer if any current or future licenses terminate, if the licensors fail to abide by the terms of the license, if the licensors fail to enforce licensed patents against infringing third parties, if the licensed intellectual property are found to be invalid or unenforceable, or if we are unable to enter into necessary licenses on acceptable terms. In addition, our rights to certain technologies, are licensed to us on a non-exclusive basis. The owners of these non-exclusively licensed technologies are therefore free to license them to third parties, including our competitors, on terms that may be superior to those offered to us, which could place us at a competitive disadvantage. Moreover, our licensors may own or control intellectual property that has not been licensed to us and, as a result, we may be subject to claims, regardless of their merit, that we are infringing or otherwise violating the licensor’s rights. In addition, the agreements under which we license intellectual property or technology from third parties are generally complex, and certain provisions in such agreements may be susceptible to multiple interpretations. The resolution of any contract interpretation disagreement that may arise could narrow what we believe to be the scope of our rights to the relevant intellectual property or technology, or increase what we believe to be our financial or other obligations under the relevant agreement. Any of the foregoing could harm our competitive position, business, financial condition, results of operations and prospects.

If we cannot license rights to use technologies on reasonable terms, we may not be able to commercialize new solutions or services in the future.

In the future, we may identify additional third-party intellectual property we may need to license in order to engage in our business, including to develop or commercialize new solutions or services. However, such licenses may not be available on acceptable terms or at all. The licensing or acquisition of third-party intellectual property rights is a competitive area, and several more established companies may pursue strategies to license or acquire third-party intellectual property rights that we may consider attractive or necessary. These established companies may have a competitive advantage over us due to their size, capital resources and greater development or commercialization capabilities. In addition, companies that perceive us to be a competitor may be unwilling to assign or license rights to us. Even if such licenses are available, we may be required to pay the licensor substantial royalties based on sales of our solutions and services. Such royalties are a component of the cost of our solutions or services and may affect the margins on our solutions and services. In addition, such licenses may be non-exclusive, which could give our competitors access to the same intellectual property licensed to us. If we

54

are unable to enter into the necessary licenses on acceptable terms or at all, if any necessary licenses are subsequently terminated, if our licensors fail to abide by the terms of the licenses, if our licensors fail to prevent infringement by third parties, or if the licensed intellectual property rights are found to be invalid or unenforceable, our business, financial condition, results of operations, and prospects could be affected. If licenses to third-party intellectual property rights are or become required for us to engage in our business, the rights may be non-exclusive, which could give our competitors access to the same technology or intellectual property rights licensed to us. Moreover, we could encounter delays and other obstacles in our attempt to develop alternatives. Defense of any lawsuit or failure to obtain any of these licenses on favorable terms could prevent us from commercializing solutions and services, which could harm our competitive position, business, financial condition, results of operations and prospects.

We may not be able to enforce our intellectual property rights throughout the world.

We may also be required to protect our proprietary technology and content in an increasing number of jurisdictions, a process that is expensive and may not be successful, or which we may not pursue in every location. Filing, prosecuting, maintaining, defending, and enforcing intellectual property rights on our solutions, services, and technologies in all countries throughout the world would be prohibitively expensive, and our intellectual property rights in some countries outside the United States can be less extensive than those in the United States. Competitors may use our technologies in jurisdictions where we have not obtained protection to develop their own solutions and services and, further, may export otherwise violating solutions and services to territories where we have protection but enforcement is not as strong as that in the United States. These solutions and services may compete with our solutions and services, and our intellectual property rights may not be effective or sufficient to prevent them from competing. In addition, the laws of some foreign countries do not protect proprietary rights to the same extent as the laws of the United States, and many companies have encountered significant challenges in establishing and enforcing their proprietary rights outside of the United States. These challenges can be caused by the absence or inconsistency of the application of rules and methods for the establishment and enforcement of intellectual property rights outside of the United States. In addition, the legal systems of some countries, particularly developing countries, do not favor the enforcement of intellectual property protection, especially those relating to health care. This could make it difficult for us to stop the misappropriation or other violation of our other intellectual property rights. Accordingly, we may choose not to seek protection in certain countries, and we will not have the benefit of protection in such countries. Proceedings to enforce our intellectual property rights in foreign jurisdictions could result in substantial costs and divert our efforts and attention from other aspects of our business. Accordingly, our efforts to protect our intellectual property rights in such countries may be inadequate. In addition, changes in the law and legal decisions by courts in the United States and foreign countries may affect our ability to obtain adequate protection for our solutions, services and other technologies and the enforcement of intellectual property. Any of the foregoing could harm our competitive position, business, financial condition, results of operations and prospects.

If our trademarks and trade names are not adequately protected, we may not be able to build name recognition in our markets of interest and our competitive position may be harmed.

The registered or unregistered trademarks or trade names that we own may be challenged, infringed, circumvented, declared generic, lapsed or determined to be infringing on or dilutive of other marks. We may not be able to protect our rights in these trademarks and trade names, which we need in order to build name recognition with potential members. In addition, third parties have filed, and may in the future file, for registration of trademarks similar or identical to our trademarks, thereby impeding our ability to build brand identity and possibly leading to market confusion. If they succeed in registering or developing common law rights in such trademarks, and if we are not successful in challenging such third-party rights, we may not be able to use these trademarks to develop brand recognition of our technologies, solutions or services. In addition, there could be potential trade name or trademark infringement claims brought by owners of other registered trademarks or trademarks that incorporate variations of our registered or unregistered trademarks or trade names. If we are unable to establish or protect our trademarks and trade names, or if we are unable to build name

55

recognition based on our trademarks and trade names, we may not be able to compete effectively, which could harm our competitive position, business, financial condition, results of operations and prospects.

If we are unable to protect the confidentiality of our trade secrets, our business and competitive position would be harmed.

We rely heavily on trade secrets and confidentiality agreements to protect our unpatented know-how, technology, and other proprietary information, including our technology platform, and to maintain our competitive position. With respect to our technology platform, we consider trade secrets and know-how to be one of our primary sources of intellectual property. However, trade secrets and know-how can be difficult to protect. We seek to protect these trade secrets and other proprietary technology, in part, by entering into non-disclosure and confidentiality agreements with parties who have access to them, such as our employees, corporate collaborators, outside contractors, consultants, advisors, and other third parties. We also enter into confidentiality and invention or patent assignment agreements with our employees and consultants. We cannot guarantee that we have entered into such agreements with each party that may have or have had access to our trade secrets or proprietary information, including our technology and processes. Despite these efforts, any of these parties may breach the agreements and disclose our proprietary information, including our trade secrets, and we may not be able to obtain adequate remedies for such breaches. Enforcing a claim that a party illegally disclosed or misappropriated a trade secret is difficult, expensive, and time-consuming, and the outcome is unpredictable. In addition, some courts inside and outside the United States are less willing or unwilling to protect trade secrets. If any of our trade secrets were to be lawfully obtained or independently developed by a competitor or other third party, we would have no right to prevent them from using that technology or information to compete with us. If any of our trade secrets were to be disclosed to or independently developed by a competitor or other third party, could harm our competitive position, business, financial condition, results of operations, and prospects.

We may be subject to claims that our employees, consultants, or advisors have wrongfully used or disclosed alleged trade secrets of their current or former employers or claims asserting ownership of what we regard as our own intellectual property.

Many of our employees, consultants, and advisors are currently or were previously employed at other companies in our field, including our competitors or potential competitors. Although we try to ensure that our employees, consultants, and advisors do not use the proprietary information or know-how of others in their work for us, we may be subject to claims that we or these individuals have used or disclosed intellectual property, including trade secrets or other proprietary information, of any such individual’s current or former employer. Litigation may be necessary to defend against these claims. If we fail in defending any such claims, in addition to paying monetary damages, we may lose valuable intellectual property rights or personnel. Even if we are successful in defending against such claims, litigation could result in substantial costs and be a distraction to management.

In addition, while it is our policy to require our employees and contractors who may be involved in the conception or development of intellectual property to execute agreements assigning such intellectual property to us, we may be unsuccessful in executing such an agreement with each party who, in fact, conceives or develops intellectual property that we regard as our own. The assignment of intellectual property rights may not be self-executing, or the assignment agreements may be breached, and we may be forced to bring claims against third parties, or defend claims that they may bring against us, to determine the ownership of what we regard as our intellectual property. Any of the foregoing could harm our competitive position, business, financial condition, results of operations and prospects.

Our use of open source software could compromise our ability to offer our services and subject us to possible litigation.

We use open source software in connection with our solutions and services. Companies that incorporate open source software into their solutions have, from time to time, faced claims challenging the use of open

56

source software and compliance with open source license terms. As a result, we could be subject to suits by parties claiming ownership of what we believe to be open source software or claiming noncompliance with open source licensing terms. Some open source software licenses require users who distribute software containing open source software to publicly disclose all or part of the source code to the licensee’s software that incorporates, links or uses such open source software, and make available to third parties for no cost, any derivative works of the open source code created by the licensee, which could include the licensee’s own valuable proprietary code. While we monitor our use of open source software and try to ensure that none is used in a manner that would require us to disclose our proprietary source code or that would otherwise breach the terms of an open source agreement, such use could inadvertently occur, or could be claimed to have occurred, in part because open source license terms are often ambiguous. There is little legal precedent in this area and any actual or claimed requirement to disclose our proprietary source code or pay damages for breach of contract could harm our business and could help third parties, including our competitors, develop solutions and services that are similar to or better than ours. Any of the foregoing could harm our competitive position, business, financial condition, results of operations and prospects.

Risks Related to this Offering and Ownership of Our Common Stock

Our stock price may be volatile, and the value of our common stock may decline.

The market price of our common stock may be highly volatile and may fluctuate or decline substantially as a result of a variety of factors, some of which are beyond our control or are related in complex ways, including:

57

Broad market and industry fluctuations, as well as general economic, political, regulatory, and market conditions, may negatively impact the market price of our common stock. In addition, given the relatively small expected public float of shares of our common stock on The Nasdaq Global Select Market, or Nasdaq, the trading market for our shares may be subject to increased volatility. In the past, securities class action litigation has often been brought against a company following a decline in the market price of its securities. This risk is especially relevant for us, because companies reliant on technology solutions have experienced significant stock price volatility in recent years. If we face such litigation, it could result in substantial costs and a diversion of management’s attention and resources, which could harm our business.

There has been no prior market for our common stock. An active market may not develop or be sustainable and investors may not be able to resell their shares at or above the initial public offering price.

There has been no public market for our common stock prior to this offering. The initial public offering price for our common stock will be determined through negotiations between the underwriters and us and may vary from the market price of our common stock following this offering. If you purchase shares of our common stock in this offering, you may not be able to resell those shares at or above the initial public offering price, if at all. An active or liquid market in our common stock may not develop after this offering or, if it does develop, it may not be sustainable.

You will experience immediate and substantial dilution in the net tangible book value of the shares of common stock you purchase in this offering.

The assumed initial public offering price of our common stock is substantially higher than the pro forma net tangible book value per share of our common stock immediately after this offering. If you purchase shares of our common stock in this offering, you will suffer immediate dilution of $11.29 per share, or $11.07 per share if the underwriters exercise their option to purchase additional shares in full, representing the difference between our pro forma as adjusted net tangible book value per share after giving effect to the sale of common stock in this offering and the assumed initial public offering price of $15.00 per share, the midpoint of the price range set forth on the cover page of this prospectus. See “Dilution.” If outstanding options or warrants are exercised in the future, you will experience additional dilution.

We will have broad discretion in the use of proceeds from this offering and may invest or spend the proceeds in ways with which you do not agree and in ways that may not yield a return.

We will have broad discretion over the use of proceeds from this offering. Investors may not agree with our decisions, and our use of the proceeds may not yield any return on your investment. We currently intend to use the net proceeds from this offering for working capital, research and development, business development, sales and marketing activities, capital expenditures and other general corporate purposes. Our failure to apply the net proceeds of this offering effectively could impair our ability to pursue our growth strategy or could require us to raise additional capital. In addition, pending their use, the proceeds of this offering may be placed in investments that do not produce income or that may lose value.

Future sales of our common stock in the public market could cause the market price of our common stock to decline.

Sales of a substantial number of shares of our common stock in the public market following the closing of this offering, or the perception that these sales might occur, could depress the market price of our common stock and could impair our ability to raise capital through the sale of additional equity securities. We are unable to predict the effect that such sales may have on the prevailing market price of our common stock.

58

Based on 104,911,198 shares outstanding as of September 30, 2019, upon the closing of this offering, we will have outstanding a total of 122,411,198 shares of common stock, assuming no exercise of the underwriters’ option to purchase additional shares and no exercise of outstanding options or warrants, after giving effect to the conversion of all outstanding shares of our preferred stock into shares of common stock upon the closing of this offering and including the shares sold through the directed share program described in “Underwriting”. All of our executive officers and directors and the holders of substantially all the shares of our capital stock are subject to lock-up agreements with the underwriters or market stand-off provisions in agreements with us that restrict their ability to transfer shares of our common stock, stock options and other securities convertible into, exchangeable for, or exercisable for our common stock during the period ending on, and including, the 180th day after the date of this prospectus, subject to specified exceptions. J.P. Morgan Securities LLC and Morgan Stanley & Co. LLC may, in their discretion, permit our stockholders who are subject to these lock-up agreements to sell shares prior to the expiration of the lock-up agreements. As of September 30, 2019, we had 104,911,198 shares of common stock outstanding. All of these shares will become eligible for sale after the lock-up agreements expire, of which 47,996,939 shares held by directors, executive officers and other affiliates will be subject to volume limitations under Rule 144 under the Securities Act, and various vesting agreements.

As of September 30, 2019, there were 24,036,191 shares of common stock subject to outstanding stock options. We intend to register all of the shares of common stock issuable upon exercise of outstanding stock options, and upon exercise of settlement of any options or other equity incentives we may grant in the future, for public resale under the Securities Act. Accordingly, these shares will be able to be freely sold in the public market upon issuance as permitted by any applicable vesting requirements, subject to the lock-up agreements with the underwriters or market stand-off provisions in agreements with us described above. These shares of common will become eligible for sale in the public market to the extent such stock options are exercised, subject to the lock-up agreements described above and compliance with applicable securities laws.

In addition, holders of 86,924,910 shares of common stock issuable upon the conversion of outstanding shares of preferred stock and shares of preferred stock issuable upon the exercise of outstanding warrants have rights, subject to some conditions, to require us to file registration statements for the public resale of the common stock issuable upon conversion of such shares or to include such shares in registration statements that we may file on our behalf or for other stockholders. See “Shares Eligible for Future Sale.”

Concentration of ownership of our common stock among our executive officers, directors and principal stockholders may prevent new investors from influencing significant corporate decisions.

Based on the number of shares of common stock outstanding as of September 30, 2019 and including the 17,500,000 shares to be sold in this offering, upon the closing of this offering, our executive officers, directors and current beneficial owners of 5% or more of our common stock will, in the aggregate, beneficially own approximately 71.5% of our common stock (assuming no exercise of the underwriters’ option to purchase an additional 2,625,000 shares of common stock). These stockholders, acting together, will be able to significantly influence all matters requiring stockholder approval, including the election and removal of directors and any merger or other significant corporate transactions. The interests of this group of stockholders may not coincide with the interests of other stockholders.

Some of these persons or entities may have interests different than investors purchasing shares in this offering. For example, because many of these stockholders purchased their shares at prices substantially below the price at which shares are being sold in this offering and have held their shares for a longer period, they may be more interested in selling our company to an acquirer than other investors, or they may want us to pursue strategies that deviate from the interests of other stockholders.

If securities or industry analysts do not publish research or publish unfavorable or inaccurate research about our business, our common stock price and trading volume could decline.

Our stock price and trading volume will be heavily influenced by the way analysts and investors interpret our financial information and other disclosures. If securities or industry analysts do not publish research or

59

reports about our business, delay publishing reports about our business or publish negative reports about our business, regardless of accuracy, our common stock price and trading volume could decline.

The trading market for our common stock will depend, in part, on the research and reports that securities or industry analysts publish about us or our business. We do not have any control over these analysts. We expect that only a limited number of analysts will cover our company following our initial public offering. If the number of analysts that cover us declines, demand for our common stock could decrease and our common stock price and trading volume may decline.

Even if our common stock is actively covered by analysts, we do not have any control over the analysts or the measures that analysts or investors may rely upon to forecast our future results. Over-reliance by analysts or investors on any particular metric to forecast our future results may result in forecasts that differ significantly from our own.

Regardless of accuracy, unfavorable interpretations of our financial information and other public disclosures could have a negative impact on our stock price. If our financial performance fails to meet analyst estimates, for any of the reasons discussed above or otherwise, or one or more of the analysts who cover us downgrade our common stock or change their opinion of our common stock, our stock price would likely decline.

We do not intend to pay dividends for the foreseeable future and, as a result, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock.

We have never declared or paid any cash dividends on our capital stock, and we do not intend to pay any cash dividends in the foreseeable future. Any determination to pay dividends in the future will be at the discretion of our board of directors and may be restricted by the terms of any then-current credit facility, including the LSA. Accordingly, investors must rely on sales of their common stock after price appreciation, which may never occur, as the only way to realize any future gains on their investments.

We are an emerging growth company and our compliance with the reduced reporting and disclosure requirements applicable to emerging growth companies could make our common stock less attractive to investors.

We are an emerging growth company, as defined in the JOBS Act, and we expect to take advantage of certain exemptions from various reporting requirements that are applicable to other public companies that are not emerging growth companies, including the auditor attestation requirements of Section 404 reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved and extended adoption period for accounting pronouncements. We cannot predict whether investors will find our common stock less attractive as a result of our reliance on these exemptions. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and our stock price may be more volatile.

We will incur increased costs as a result of operating as a public company, and our management will be required to devote substantial time to compliance with our public company responsibilities and corporate governance practices.

As a public company, we will incur significant legal, accounting, and other expenses that we did not incur as a private company. We expect such expenses to further increase after we are no longer an emerging growth company. The Sarbanes-Oxley Act, the Dodd-Frank Wall Street Reform and Consumer Protection Act, the listing requirements of Nasdaq, and other applicable securities rules and regulations impose various requirements on public companies. Furthermore, the senior members of our management team do not have significant experience with operating a public company. As a result, our management and other personnel will have to

60

devote a substantial amount of time to compliance with these requirements. Moreover, these rules and regulations will increase our legal and financial compliance costs and will make some activities more time-consuming and costly. We cannot predict or estimate the amount of additional costs we will incur as a public company or the timing of such costs.

Anti-takeover provisions in our charter documents to be in effect upon the closing of this offering and under Delaware law could make an acquisition of our company more difficult, limit attempts by our stockholders to replace or remove our current management and limit the market price of our common stock.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws to be in effect upon the closing of this offering may have the effect of delaying or preventing a change of control or changes in our management. Our amended and restated certificate of incorporation and amended and restated bylaws will include provisions that:

These provisions may frustrate or prevent any attempts by our stockholders to replace or remove our current management by making it more difficult for stockholders to replace members of our board of directors, which is responsible for appointing the members of our management. In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law, which generally, subject to certain exceptions, prohibits a Delaware corporation from engaging in any of a broad range of business combinations with any “interested” stockholder for a period of three years following the date on which the stockholder became an “interested” stockholder. Any delay or prevention of a change of control transaction or changes in our management could cause the market price of our common stock to decline.

Our amended and restated certificate of incorporation that will be in effect upon the closing of this offering will provide that the Court of Chancery of the State of Delaware or, under certain circumstances, the federal district courts of the United States of America will be the exclusive forums for certain types of actions and proceedings that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, employees or agents.

Our amended and restated certificate of incorporation that will be in effect upon the closing of this offering will provide that the Court of Chancery of the State of Delaware (or, if the Court of Chancery of the State of

61

Delaware lacks subject matter jurisdiction, any state court located within the State of Delaware or, if all such state courts lack subject matter jurisdiction, the federal district court for the District of Delaware) is the sole and exclusive forum for the following types of actions or proceedings under Delaware statutory or common law for:

These provisions would not apply to suits brought to enforce a duty or liability created by the Exchange Act or any claim for which the federal district courts of the United States of America have exclusive jurisdiction. Our stockholders cannot waive compliance with the federal securities laws and the rules and regulations thereunder. Any person or entity purchasing or otherwise acquiring any interest in shares of our capital stock will be deemed to have notice of, and consented to, the provisions of our amended and restated certificate of incorporation described in the preceding sentences. These exclusive-forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us and our directors, officers, and other employees. If a court were to find the exclusive-forum provisions in our amended and restated certificate of incorporation to be inapplicable or unenforceable, we may incur additional costs associated with resolving the dispute in other jurisdictions.

Our amended and restated certificate of incorporation that will be in effect upon the closing of this offering will designate the U.S. federal district courts as the exclusive forum for the resolution of any complaint asserting a cause of action arising under the Securities Act or the rules and regulations thereunder. We may be unable to enforce this provision.

Our amended and restated certificate of incorporation that will be in effect upon the closing of this offering will designate the U.S. federal district courts as the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act or the rules and regulations thereunder, subject to and contingent upon a final adjudication in the State of Delaware of the enforceability of such exclusive forum provision. The Court of Chancery of the State of Delaware recently determined that the exclusive forum provision of federal district courts of the United States of America for resolving any complaint asserting a cause of action arising under the Securities Act is not enforceable. However, this decision may be reviewed and ultimately overturned by the Delaware Supreme Court. If this ultimate adjudication were to occur, the federal district court exclusive forum provision in our amended and restated certificate of incorporation would no longer be contingent.

62