RISK FACTORS

You should carefully consider the following risks before you decide to purchase our common stock. If any of the following risks actually occur, our business, results of operations, and financial condition could be materially adversely affected, the value of our common stock could decline, and you may lose all or part of your investment.

Risks Related to Our Business

The impact of COVID-19 and related risks have affected and may continue to materially affect our business, results of operations, financial position, and/or liquidity.

The COVID-19 pandemic and the ensuing actions that various governments have taken in response have created significant worldwide uncertainty, volatility, and economic disruption. The COVID-19 pandemic has adversely impacted certain aspects of our business. The extent to which it will continue to do so will depend on a number of factors, many of which are highly uncertain, evolving, and beyond our control. These factors include, but are not limited to: (i) the duration and scope of the pandemic; (ii) governmental, business, and individual actions that have been and will continue to be taken in response to the pandemic, including travel restrictions, quarantines, social distancing, work-from-home and shelter-in-place orders, regulatory oversight and developments, and government shutdowns; (iii) the impact on the U.S. and global economies and the timing and rate of economic recovery, including the extent and duration of such impact on hiring and jobs; and (iv) impacts on the operations of our customers’ industries and individual businesses.

As the COVID-19 pandemic continues and any associated protective or preventative measures and related legislation continue to be put in place or modified and adjusted in the United States and around the world, we may experience disruptions to our business. Risks presented by the ongoing effects of COVID-19 include the following:

In addition, while our experience with remote work thus far has not produced significant obstacles, our operations could be disrupted if key members of our senior management or a significant percentage of our workforce or the workforce of our vendors are unable to continue to work because of illness or otherwise.

19

These and other disruptions related to COVID-19 could continue to materially and adversely affect our business, financial condition, results of operations, and cash flows. In addition, COVID-19 may exacerbate the other risks described below, including being restricted in the use of certain data for screening purposes or the completion of certain screens, as a result of customer or other external mandates.

We operate in a highly regulated industry and are subject to numerous and evolving laws and regulations.

As a global provider of technology solutions for screening and verifications, we are subject to numerous and evolving international, federal, state, and local laws and regulations, including, without limitation, in the areas of consumer protection, privacy, and data protection. See “Business—Government Regulations”. We expect that these laws and regulations will continue to evolve, change, and expand and, in most instances, become more stringent and complex with time. Compliance with these laws and regulations requires significant expense and resources, which could increase significantly as these laws and regulations evolve. Further, regulations are often the product of administrative interpretation and judicial construction, which could result in inconsistent implementation across jurisdictions. We must reconcile the many potential differences between the laws and regulations among the various domestic and international jurisdictions that may be involved in the provision of our solutions. A failure to identify, comply, and reconcile the many laws and regulations we are subject to could result in the imposition of penalties and fines, restrictions on our operations, breach of contract or indemnification claims against us, loss of revenues, and could otherwise adversely affect our business, results of operations and financial condition. Further, we acquired a company in 2013 that was subject to multiple FTC consent decrees that had been imposed on it in the years prior to our acquisition and to which we now remain subject. The consent decrees require us to comply with the Fair Credit Reporting Act (“FCRA”) and to maintain a comprehensive information security program to be audited biennially. Under these circumstances, failure to comply with the decrees and/or relevant law or regulations may subject us to increased risk.

Changes in laws, regulations, and the interpretation of such laws and regulations on both the state and federal level could also affect certain of our businesses and result in restrictions on our ability to offer certain products and solutions. For example, numerous states have implemented fair chance hiring laws that prohibit employers from inquiring or using an applicant’s criminal history to make employment decisions. Many states have in recent years amended their fair chance laws to increase the restrictions on the use of such data. In addition, under the FCRA in the United States, both our customers and we are required to comply with many requirements under the FCRA as well as state-level laws regarding the use and delivery of consumer reports. The enactment of new restrictive legislation and the requirements, restrictions, and limitations imposed by changing interpretations and court decisions on such laws and regulations could prevent our customers from using the full functionality of our products, which may reduce demand for our products and solutions. We could also be required to adapt our products to meet these evolving and complex requirements, such as adding or changing disclosures, authorizations, or forms provided to applicants. In addition, we believe it is critical for us to keep abreast of evolving laws and interpretations in applicable jurisdictions and inform our customers of changes to their ability to use our products and solutions and their and our obligations. These efforts require time, expense, and resources, and in some instances, reliance on third parties such as law firms and trade associations.

20

If regulatory regimes continue to heighten their scrutiny over personal data and data security, it could lead to increased restrictions, loss of revenue opportunity, greater costs of compliance, and lost efficiency.

Our products and solutions are subject to various complex laws and regulations governing cybersecurity, privacy, and data protection on the federal, state, and local levels, and in foreign jurisdictions. The regulatory framework for privacy issues is rapidly evolving and is likely to remain uncertain and inconsistently enforced for the foreseeable future. Many federal, state, and foreign governmental bodies and agencies have adopted or are considering adopting laws and regulations regarding collecting, processing, handling, maintenance, storage, use, disclosure, and transmission of personal and other sensitive information. A growing trend of regulation in this area provides for mandatory consumer notification should the unauthorized access of consumer information occur, and further expansion of requirements is possible. It is possible that these restrictions could limit our service offerings, reduce our profitability, or otherwise materially and adversely affect our ability to conduct our business or to do so economically. Further, if our practices or products are perceived to constitute an invasion of privacy, we may be subject to increased scrutiny and public criticism, litigation, and reputational harm, which could disrupt our business and expose us to liability. Given the nature of our business and the volume of our operations, it is possible for breaches to occur, whether intentionally from hackers or unintentionally, if we inadvertently send or otherwise make available information to an unauthorized recipient.

We are subject to many cybersecurity, privacy, and data protection laws in the United States. and around the world. In the United States, we are subject to numerous federal and state laws governing the collection, processing, use, transmission, disclosure, and sale of personal data (which may also be referred to as personal information, personally identifiable information, and/or non-public personal information). For example, the California Consumer Privacy Act (“CCPA”) went into effect on January 1, 2020, and established a new privacy framework for covered businesses such as ours. Further, in November 2020, California voters passed the California Privacy Rights and Enforcement Act of 2020 (“CPRA”), which further expands the CCPA with additional data privacy compliance requirements that may impact our business, and establishes a regulatory agency dedicated to enforcing those requirements. It remains unclear how various provisions of the CCPA and CPRA will be interpreted and enforced. In addition, on March 2, 2021, Virginia enacted the Virginia Consumer Data Protection Act (“CDPA”), a comprehensive privacy statute that shares similarities with the CCPA, CPRA, and legislation proposed in other states. The CDPA may require us to incur additional costs and expenses in an effort to comply with it before it becomes effective on January 1, 2023. Other states also have or are in the process of imposing similar privacy obligations. Recent laws such as the Biometric Information Privacy Act in Illinois have also restricted the use of biometric information. Such laws and regulations require us to continuously review our data processing practices and policies, may cause us to incur substantial costs with respect to compliance, and could require us to adapt our products and solutions, which may reduce their utility to our customers.

In addition, outside the United States, we are subject to foreign rules and regulations. For example, we are subject to enhanced compliance and operational requirements under the General Data Protection Regulation (“GDPR”), which expanded the scope of data protection in the European Union (“E.U.”) to foreign companies who process the personal data of E.U. residents, imposed a strict data protection compliance regime with stringent penalties for noncompliance and included new rights for data subjects such as the “portability” of personal data. In particular, under the GDPR, fines of up to 20 million euros, or up to 4% of the annual global revenue of the noncompliant company, whichever is greater, could be imposed for violations of certain of the GDPR’s requirements. If we were found to be in breach of the GDPR, the potential penalties we might face could have a material adverse impact on our business, financial condition, results of operations, and cash flows. Compliance with the GDPR requires time and expense and may require us to make changes to our business operations.

While the GDPR applies uniformly across the E.U., each E.U. member state is permitted to issue nation-specific data protection legislation, which has created inconsistencies on a country-by-country basis. The decision by the U.K. to leave the E.U. (“Brexit”) has created further uncertainty and could result in the

21

application of new data privacy and protection laws and standards to our operations in the U.K., our handling of personal data of users located in the U.K., and transfers of personal data between the E.U. and U.K. While the United Kingdom General Data Protection Regulation (“U.K. GDPR”) largely mirrors the GDPR, it has yet to be determined which legal mechanisms will be required to transfer personal data from the E.U. to the U.K. under the GDPR. In addition, Brexit and the subsequent implementation of the U.K. GDPR will expose us to two parallel data protection regimes, each of which potentially authorizes similar significant fines and other potentially divergent enforcement actions for certain violations. On December 24, 2020, the U.K. and E.U. entered into a Trade and Cooperation Agreement. The Trade and Cooperation Agreement provides for a transitional period during which the U.K. will be treated as an E.U. member state in relation to processing and transfers of personal data for four months from January 1, 2021. This may be extended by two further months. After such period, the U.K. will be a “third country” under the GDPR unless the European Commission adopts an adequacy decision in respect of transfers of personal data to the U.K. In addition, on July 16, 2020, the European Court of Justice invalidated the E.U.-U.S. Privacy Shield Framework, a mechanism under which personal data could be transferred from the European Economic Area (“EEA”) to U.S. entities that had self-certified under the Privacy Shield Framework. The Court also called into question the Standard Contractual Clauses (“SCCs”), noting adequate safeguards must be met for SCCs to be valid. European regulatory guidance regarding these issues continues to evolve, and E.U. regulators across the E.U. Member States have taken different positions regarding continued data transfers to the United States. In the future, SCCs and other data transfer mechanisms will face additional challenges. Given that we had self-certified under the Privacy Shield Framework, these recent developments require us to review and amend the legal mechanisms by which we make and/or receive certain personal data transfers to the United States and other jurisdictions.

The effects of U.S. state, U.S. federal, local, and international laws and regulations that are currently in effect or that may go into effect in the future are significant and may require us to modify our data processing practices and policies, cease offering certain products and solutions, and incur substantial costs and potential liability in an effort to comply with such laws and regulations. Any actual or perceived failure to comply with these and other cybersecurity, privacy, and data protection laws and regulations could result in regulatory scrutiny and increased exposure to the risk of litigation or the imposition of consent orders, resolution agreements, requirements to take particular actions with respect to training, policies or other activities, and civil and criminal penalties, including fines, which could have an adverse effect on our business, results of operations and financial condition. Moreover, allegations of non-compliance, whether or not true, could be costly, time-consuming, and distracting to management and cause reputational harm.

Failure to comply with anti-corruption laws and regulations could have an adverse effect on our business.

We are subject to evolving anti-corruption laws, economic and trade sanctions, and anti-money laundering rules in several jurisdictions in which we operate, including the United States Foreign Corrupt Practices Act and the U.K. Bribery Act. The evolution of this regulatory regime has generally brought about more aggressive investigations and enforcement, which, if targeted towards us, could materially adversely impact our business. We have policies and procedures in place to assist us with monitoring the evolution of these laws and ensuring our ongoing compliance. We are continuously in the process of reviewing, upgrading, and enhancing these protocols. However, we cannot guarantee that our employees, consultants, or agents will not take actions that amount to a violation of these laws and regulations for which we may be ultimately responsible or that our policies and procedures will be adequate in protecting us from liability. Further, our services agreements with several customers contain contractual provisions mandating our ongoing compliance with applicable anti-corruption, economic, and trade sanctions or anti-money laundering laws or regulations. If we are deemed to be in violation of any such rules, our business activities could be restricted or terminated. In addition, we could face civil and criminal penalties, including fines, which could damage our reputation and customer relationships and materially impact our results of operation or financial condition.

22

Macroeconomic factors beyond our control, including the state of the economy, impact demand for our products and solutions.

Our results of operations are materially affected by the U.S. and global economic conditions, including the economic downturn following the recent and ongoing COVID-19 pandemic. Global credit and capital markets have experienced unprecedented volatility and disruption. Consumer confidence and spending have decreased while rates of unemployment and underemployment have increased. A substantial majority of our revenues are derived from pre-onboarding screening products, which is heavily influenced by hiring volumes. The businesses of some of our largest customers and their decision to hire depend in part on favorable macroeconomic conditions, including consumer spending, the general availability of credit, the level and volatility of interest rates, and inflation levels. To the extent these macroeconomic factors are at suboptimal levels, our existing and potential customers could delay or defer onboarding new or replacement workers, lay off existing workers to reduce headcount, or seek to decrease spending on their screening programs. As a result, our products could face reduced demand and our business, results of operations, and financial condition could be harmed. Similarly, demand for our tenant screening products is subject to trends in real estate rental markets, which may be affected by macroeconomic factors beyond our control, including housing markets, stock market volatility, recession, job losses and unemployment levels, debt levels, and uncertainty about the future.

We may not be able to identify and successfully implement our growth strategies on a timely basis or at all.

We cannot guarantee that we will succeed in appropriately identifying and successfully executing our strategic plans to grow our businesses, and our inability to do so may be the result of external factors beyond our control. Our ability to grow our business will depend, in large part, on our ability to further penetrate our existing markets, attract new customers and identify and effectively invest in growing industry verticals. The success of any enhancement of our current products and solutions or any new product or solution depends on several factors, including the timely completion, introduction, and market acceptance of enhanced or new products and solutions, adaptation to new industry standards and technological changes, the ability to maintain and to develop relationships with third parties and the ability to attract, retain, and effectively train sales and marketing personnel. Our growth could be limited if we fail to innovate or adapt to market trends and product innovations adequately. Any new products and solutions we develop or acquire may not be introduced in a timely or cost-effective manner and may not achieve the market acceptance necessary to generate significant revenues, and any new markets in which we attempt to sell our products and solutions, including new countries or regions, may not be receptive or implementation may be delayed. Our future growth will be adversely affected if we do not identify and invest in faster-growing industry verticals. In addition, any expansion into new markets will require an investment in the continuous monitoring of local laws and regulations, which increases our costs and the risk of the products or service failing to comply with such local laws or regulations. We may also incur costs associated with such plans that are above anticipated amounts.

To successfully manage our growth, we will also need to maintain appropriate staffing levels and update our operating, financial and other systems, procedures, and controls accordingly. Our efforts to grow our business and execute our business strategy may place significant demands on and strain our personnel and organizational structure, including our management, staff, and information systems. If we fail to effectively manage our growth, our business, results of operations, and financial condition could be materially adversely affected.

Disruptions at our Global Operating Center and other operational sites could adversely impact our business.

Our Global Operating Center in Bangalore, India provides critical support for our operations by processing screening requests, undertaking a manual review of records and verifications work, handling certain customer calls and interactions, and completing certain internal shared service support functions. We also have other important operational sites, including Fishers, Indiana; Bolingbrook, Illinois; Atlanta, Georgia; Manila, Philippines; and Mumbai, India. If our operations at our Global Operating Center or such other sites are disrupted, even for a brief period of time, whether due to malevolent acts, defects, computer viruses, climate

23

change, natural disasters such as earthquakes, fires, hurricanes or floods, power telecommunications failures, or other external events beyond our control, it could result in interruptions in service to our customers, damage to our reputation, harm our customer relationships, and reduced revenues and profitability. In addition, strikes, wars, terrorism, and other geopolitical unrest could cause disruptions in our business and lead to interruptions, delays, or loss of critical data. We may not have sufficient protection on recovery plans in certain circumstances, such as a significant natural disaster, and our business interruption insurance may be insufficient to compensate us for losses that occur. In the case of such an event, customers could elect to terminate our relationship, delay or withhold payment to us, or even make claims against us.

Any damage to our reputation or our brand could adversely affect our business, financial condition, and results of operations.

Developing, protecting, and maintaining our strong reputation among customers, applicants, and third-party partners and vendors is critical to our success. The importance of our brand may increase if competitors offer more products similar to ours or if more competitors enter the market. Our brand may suffer if our service quality declines or if our customer initiatives are not successful. Additionally, the successful protection and maintenance of our brand will depend on our ability to obtain, maintain, protect, and enforce trademark and other intellectual property protection for our brand. If we fail to successfully promote, protect, and maintain our brand, we may lose our existing customers to our competitors or be unable to attract new customers.

The value of our intellectual property and other proprietary rights associated with our brand could diminish if others assert rights in or ownership of trademarks or service marks that are similar to our trademarks or service marks. Our registered or unregistered trademarks or trade names may be challenged, infringed, circumvented or declared generic or determined to be infringing on other marks. Opposition or cancellation proceedings may be filed against our trademarks, which may not survive such proceedings. We may be unable to prevent competitors or other third parties from acquiring or using trademarks or service marks that are similar to, infringe upon, misappropriate, dilute, or otherwise violate or diminish the value of our trademarks and service marks, thereby impeding our ability to build brand identity and possibly leading to market confusion. Damage to our reputation or our brand or loss of confidence in our products and solutions could result in decreased demand for our products and solutions, and our business, financial condition, and results of operations may be materially adversely affected.

To the extent our customers reduce their operations, downsize their screening programs, or otherwise demand fewer of our products and solutions, our business could be adversely impacted.

Demand for our products and solutions is subject to our customers’ continual evaluation of their need for our products and solutions and is impacted by several factors, including their budget availability, hiring, and workforce needs, and a changing regulatory landscape. Demand for our offerings is also dependent on the size of our customers’ operations. Our customers could reduce their operations for a variety of reasons, including general economic slowdown, divestitures and spin-offs, business model disruption, poor financial performance, or as a result of increasing workforce automation. Demand for drug screenings may decline as a result of evolving U.S. drug laws. For example, the legalization of cannabis in several U.S. states has led to a decrease in orders for marijuana screenings. Our revenues may be significantly reduced should our customers decide to downsize their screening programs or take such programs in-house.

We operate in a penetrated and competitive market.

The global market for our screening, verifications, and adjacent products is fragmented and competitive. Our competitors vary based on customer size, industry vertical, geography, and product focus. We compete with large players with broad capabilities and product suites, vertical-focused specialist firms that target customers operating in select industries, mid-size players, competitors that serve small and medium-sized business (“SMB”) customers as well as smaller companies serving primarily local businesses. Some competitors are aligned to a

24

specific product in certain pre-onboarding product lines, such as drug / health screening and executive screening. In our adjacent products market, we compete with certain companies specializing in fleet / vehicle compliance, resident / tenant screening, hiring tax credit screening, and pre-investment screening.

New entrants to the market have in the past emerged, both as start-ups as well as participants in adjacent sectors such as applicant tracking systems and payroll processing companies that seek to integrate background screening into their onboarding products and solutions, and may emerge in the future, which would further increase competition. Additionally, our customers may also decide to insource work that has been traditionally outsourced to us.

In our competitive market environment, we primarily compete on the basis of brand and awareness, accuracy, turnaround time, and price. We must continue to innovate and ensure market acceptance of our products and solutions in order to maintain and grow our business and market share. We are continually subject to the risk that our competitors may develop products and technologies that are superior to ours or achieve greater market acceptance than ours. Continuing strong competition could result in pricing pressure, increased sales and marketing expenses, loss of customers, and greater investments in research and development, each of which could negatively impact our results of operations. The revenues of our competitors and the resources they have available vary depending on size, specialty, and geographic footprint. Some competitors may be able to allocate resources more efficiently than we can or anticipate and respond to existing and emerging market trends, customer preferences, and technologies due to their size and resources. If we fail to compete successfully, our business, financial position, and results of operations could be materially and adversely affected.

We are not guaranteed exclusivity or volumes in our contracts with our customers.

We enjoy long-standing relationships with many of our customers, but our customer contracts and services agreements do not typically require our customers to use our products exclusively or commit to minimum engagement or order volumes. As a result, we rely on our customers’ continuing demand for our products and solutions, our technology, our value proposition, and our brand and reputation to compete. Our customers can stop doing business with us for any reason at any time with minimal notice and without penalty, which they may leverage to renegotiate our arrangements on terms less favorable to us. The loss of a significant customer or any reduced demand for our products and solutions by our customers, especially our large customers, would have a negative impact on our business. For the year ended December 31, 2020, on a pro forma basis to give effect to the Silver Lake Transaction, we had one customer who accounted for approximately 12% of our revenues. For the three months ended March 31, 2021, there were no customers who accounted for more than 10% of our revenues. We cannot guarantee that we will maintain relationships with any of our customers on acceptable terms or at all or retain, renew or expand upon our existing agreements. The failure to do so could negatively affect our business, financial condition, and results of operations.

We rely on third-party data and service providers. If they are unable to deliver or perform as expected, our ability to operate effectively may be impaired, and our business may be materially and adversely affected.

We rely extensively on data, information, and services provided by or derived from a variety of external sources, including our suppliers, customers, strategic partners, various public filings, credit bureaus, publicly available information, and government authorities. Our suppliers could at any point decline to continue providing data, provide untimely or inaccurate data or increase the costs for their services. It may not be possible for us to recover any or all of the costs of any increases in fees by passing such costs along to our customers. If we try to do so, it could have a negative impact on customer relationships. Our suppliers could also request or require us to enter into minimum order contracts with clawback enforcement provisions. Some suppliers, such as certain criminal data suppliers and drug testing laboratories and collection sites we use, are also owned or may in the future be acquired by one or more of our competitors, which could make us especially vulnerable to unforeseen price increases or outright declinations to continue our relationships. Because our agreements with third-party data providers are generally non-exclusive, we are subject to the risk they may choose to enter into an exclusive

25

arrangement with one of our competitors or maintain an exclusive proprietary database that is not shared with us. These risks could be exacerbated if our customers request we engage with a particular provider for their orders. We cannot guarantee that we will be able to identify and engage replacement providers on acceptable terms or obtain data from alternative sources in the event our suppliers are no longer able or are unwilling to provide us with certain data or services. If we were to lose access to external data or if our access or use were restricted or were to become less economical or desirable, our ability to timely complete requested services and products at a level of quality acceptable to our customers could be negatively impacted, which could adversely affect our business, results of operations and financial condition.

Data collection and verification by screening providers is dependent on access to databases run by government and law enforcement agencies, including the Federal Bureau of Investigation, state, and federal courthouses, and records systems. If we were to lose or face diminished access to one or more of these data sources, or if government personnel were unable or unwilling to access these data sources on our behalf, our operations could be negatively impacted, and our sales could suffer. Such interruptions result from government shutdowns or slowdowns, such as those that recently occurred during the COVID-19 pandemic, changing laws and regulations, or natural disasters such as earthquakes, hurricanes, or floods. For example, after Hurricane Maria in 2017, certain government and court records in Puerto Rico were unavailable or not updated for an extended period of time. The inability to access or a delay in accessing essential information could result in lengthened and unsatisfactory turnaround times or our inability to offer certain of our products and solutions.

Due to the sensitive and privacy-driven nature of our products and solutions, we could face liability and legal or regulatory proceedings, which could be costly and time-consuming to defend and may not be fully covered by insurance.

The nature of the products and solutions we provide and the information and data collected, processed, transmitted, disclosed, used, and reported by us (including personal information, confidential information, and other sensitive and/or regulated information) subjects us to potential liability from customers, consumers, data subjects, third parties, and government authorities relating to claims of legal or regulatory non-compliance, defamation, invasion of privacy, false light, negligence, intellectual property infringement, misappropriation or other violation and/or other related causes of action. Such liability may depend on actions or events beyond our control, such as how our customers use the information we provide or the veracity of the data we are provided by third parties. For example, we may from time to time be subject to legal claims by applicants for allegedly failing to comply with the FCRA in relation to issues regarding the accuracy of our reports. Likewise, our customers may seek indemnification for losses allegedly caused by negligent hiring or retention by asserting our reports failed to disclose information that would have resulted in an adverse employment decision had it been reported. Such lawsuits and other proceedings could divert resources from our management and potentially subject us to equitable remedies. In addition, punitive damages are available as a remedy under the FCRA, which we are subject to and are generally not covered by insurance. We may also face adverse publicity in connection with such incidents, which could have a negative effect on our reputation and business.

Disruptions with our technology and network infrastructure, including our data centers, servers, and third-party cloud and internet providers, and our migration to the cloud, could have an adverse impact on our business.

Our operating model depends on the efficient and unimpeded operation of our global technology platform and data processing systems. We currently operate data centers and servers around the world. We also rely on our third-party cloud providers to host our websites, databases, and web-based services. Our property and business interruption insurance coverage may not be adequate to fully compensate us for losses that may occur. Severe impairment or total destruction of our data centers could occur, and recovery could be difficult and may not be possible at all. In the event of an accessibility outage or other incident at our data centers or with respect to our third-party cloud providers, our operations could be disrupted, data could be lost, our systems or the quality of our products and solutions could be compromised, and we could suffer financial loss, reputation damage,

26

potential liability, or customer loss, any of which could have an adverse impact on our business, results of operations and financial condition. Such outages may be impossible to predict, plan for, or avoid.

Because we rely on such third-party cloud providers, we are subject to risks that we can neither control nor mitigate, including their vulnerability to damage from climate change, earthquakes, hurricanes, floods, acts of terrorism, power loss, telecommunications and other service failures, break-ins, human error, and similar events. Our current or future third-party cloud providers could decide to close their facilities without adequate notice or otherwise cease doing business with us. We cannot guarantee that our current or future third-party cloud providers will keep up with our increasing capacity needs or customer demand. In addition, our users depend on internet service providers, online service providers, and other website operators for access to our systems. These providers could experience outages, delays, and other difficulties due to system failures unrelated to our systems, events which are beyond our control, or mitigation. Any changes in service levels by our current or future third-party cloud providers could result in loss or damage to our stored information and result in operational delays. Any of these events could seriously harm our business, results of operations, and financial condition.

We are currently transitioning towards hosting certain of our technology platform on cloud-based technology. This transition is complex and will require significant changes to our platforms. Scaling and adapting our technology will require a significant lead time and investment in financial and human capital. We cannot guarantee that this transition will be without operational interruptions or other forms of disruption, including loss of information, delayed turnaround times, and deficiencies in our design, implementation, or maintenance of the system. If we experience outages or interruptions in the products and solutions we provide for extended periods of time, our customers could face accessibility issues which would have an adverse impact on our business, results of operations, and financial condition.

Our business, brand, and reputation may be harmed as a result of security breaches, cyber-attacks, employee or other internal misconduct, computer viruses, or the mishandling of personal data.

Our products entail the collection, use, processing, disclosure, storage, and transmission of personal information, confidential information, and other sensitive and/or regulated information of individuals, including personal data.

In general, we utilize encryption and other technologies designed to provide system security for the transmission of confidential or personal data. There is no assurance that our use of applications and other technologies designed for data security, or that of our third-party vendors and service providers, will effectively counter security risks from hackers, computer viruses, and/or other intrusions or incidents. If one of more of our or our vendors’ facilities, computer networks, or databases were to experience a security breach, we could face a risk of loss of, or unauthorized access to and use of, personal data, confidential information, and other sensitive and/or regulated data, which could harm our business and reputation and result in a loss of customers or the imposition of fines or other penalties by governmental agencies, in addition to potential legal claims by our customers and their applicants and employees. Although we have put in place a number of controls and automated redundancies, our protocols and processes can also be violated due to human error, including as a result of phishing and other attempts by others to fraudulently induce the improper disclosure of sensitive information.

The techniques utilized and planned by hackers, bad actors, and other unauthorized entrants are varied and constantly evolving and may not be detected until a breach has occurred. As a result, despite our efforts, it may be difficult or impossible for us to implement measures that fully prevent such attacks or react in a timely manner. Unauthorized parties may in the future attempt to gain access to our systems or facilities through various means, including, among others, hacking into our or our consumers’ systems or facilities, or attempting to fraudulently induce our employees, consumers or others into disclosing usernames, passwords, or other sensitive information, which may, in turn, be used to access our information technology systems and gain access to our data or other confidential, proprietary, or sensitive information. Such efforts may be state-sponsored and

27

supported by significant financial and technological resources, making them even more difficult to detect and prevent.

Further, certain of our employees have access to sensitive information about the applicants whom we perform background screenings and verifications on. In addition, certain of our third-party service providers and vendors have access to limited portions of our IT systems and may also be subject to such attempts, which then can be used to attempt to infiltrate our systems. Because we do not control our vendors or the processing of data by our vendors, other than through our contractual relationships, our ability to monitor our vendors’ data security may be very limited such that we cannot ensure the integrity or security of measures they take to protect and prevent the loss of our or our consumers’ data. As a result, we are subject to the risk that cyber-attacks on, or other security incidents affecting, our vendors may adversely affect our business even if an attack or breach does not directly impact our systems. It is also possible that security breaches sustained by, or other security incidents affecting, our competitors could result in negative publicity for our entire industry that indirectly harms our reputation and diminishes demand for our products and solutions.

Furthermore, federal and state regulators and many federal and state laws and regulations require notice of certain data security breaches that involve personal information, which, if applicable, could lead to widespread negative publicity, which may cause our customers to lose confidence in the effectiveness of our data security measures. In addition, we may incur significant costs and operational consequences in connection with investigating, mitigating, remediating, eliminating, and putting in place additional measures designed to prevent future actual or perceived security incidents, as well as in connection with complying with any notification or other obligations resulting from any security incidents.

Our insurance policies may not be adequate to reimburse us for losses caused by security breaches, and we may not be able to collect fully, if at all, under these insurance policies. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could adversely affect our business. Furthermore, we cannot be certain that insurance coverage will continue to be available on acceptable terms or at all, or that the insurer will not deny coverage as to any future claim.

If we are unable to fully protect the security and privacy of our data and electronic transactions, or if we or our third-party service providers are unable to prevent any data security breach, incident, unauthorized access, and/or misuse of our information by our customers, employees, vendors, or hackers, it could result in significant liability (including litigation and regulatory actions and fines), cause lasting harm to our brand and reputation and cause us to lose existing customers and fail to win new customers.

If we fail to continue to integrate our platforms and solutions with that of human resource software providers or if our relationships with human resource software providers deteriorate, our business could be adversely affected.

We partner with many third-party human resource software providers, including applicant tracking systems and human capital management systems, to ensure that customers benefit from an integrated solution that allows them to easily perform both human resource functions and screenings and verifications through a single platform. This depends on our ability to seamlessly integrate our platforms and systems with those of the human resource software providers. If our partnership or arrangements with such providers are terminated for any reason, we risk losing the opportunity for continued integration with the software applications of these companies, which could jeopardize our ability to provide a seamless interface for our customers, result in service disruptions, increase costs and reduce the quality of our products, and ultimately put us at a competitive disadvantage in maintaining our customer relationships and obtaining new ones. Further, if a provider updates its products without providing sufficient notice to us, there could be disruptions to the integration, which could result in errors, delays, and interruptions.

28

In addition, these third-party human resource software providers are often sources of positive references when a customer is looking to make a purchase or contract renewal decision and may also be a source of new business referrals. If our relationships with these third parties were to deteriorate or if our arrangements with them were to expire, our business and our ability to win new customers and retain existing customers may be adversely affected.

We are subject to risks relating to public opinion, which may be magnified by incidents or adverse publicity concerning our industry or operations.

We operate in an industry that involves the risk of negative publicity, especially relating to cybersecurity, privacy, and data protection, and adverse developments with respect to our industry may also, by association, negatively impact our reputation. For example, when information services companies are involved in high-profile events involving data theft, these events could result in increased legal and regulatory scrutiny, adverse publicity, and potential litigation concerning the commercial use of such information for our industry in general. If there is a perception that the practices of our business or our industry constitute an invasion of privacy, our business and results of operations may be negatively impacted. There have been and may continue to be perception issues, social stigmas, and negative media attention regarding the collection, use, accuracy, correction, and sharing of personal data, which could materially adversely affect our business, results of operations, and financial condition.

We rely on third-party vendors to carry out certain portions of our operations. If they cannot deliver or perform as expected or if our relationships with them are terminated or otherwise change, our business operations and results of operations could be materially and adversely affected.

Our ability to deliver products to our customers effectively requires us to work with certain third-party vendors and service providers. For example, we engage third-party vendors to maintain and upgrade portions of our software and technology platforms. In addition, from time to time, we engage third-party support service providers depending on-demand requirements on our operations and customer service call centers. Our business, therefore, depends on such third parties meeting our expectations and the expectations of our customers in timeliness, quality, and volume. We cannot guarantee our third-party providers will be able to do so on a cost-effective basis or at all due to a number of factors, including those attributable to the COVID-19 pandemic. Some of the third-party vendors that we rely on conduct operations outside the United States, which subjects us to the risk that economic, political, and military events in foreign jurisdictions might cause an interruption to our operations. We may not be able to ensure that our third-party vendors perform in accordance with agreed-upon, regulated, and expected standards. We could be held accountable for their failure to do so, which may subject us to fines or other sanctions. If our third-party vendors do not meet our expectations and those of our customers, it could negatively affect our reputation, harm our relationships with existing customers, and hamper our ability to win new customers.

While we have entered into agreements with some of these third-party service providers, they have no obligation to renew their agreements with us on commercially reasonable terms or at all. If any one of our third-party service provider’s ability to perform their obligations was impaired, we may not be able to find an alternative supplier in a timely manner or on acceptable financial terms, which could result in operational interruptions.

In addition, any shift in business strategy, corporate reorganization, or financial difficulties, such as bankruptcy faced by our third-party providers, may have negative effects on our ability to implement our business strategy.

Any termination of our agreements with, or disruption in the performance of, one or more of these third-party providers could result in operational disruptions and delayed turnaround times. This could adversely impact our relationships with our existing customers, reduce our ability to attract new customers, impact our ability to innovate and introduce new products and solutions, and result in an inability to meet our obligations or require us

29

to seek alternative service providers on less favorable terms, any of which can adversely affect our business, results of operations and financial condition.

Our international business exposes us to a number of risks.

We perform screenings and verifications internationally, including helping businesses screen their applicants with backgrounds that include international jurisdictions outside of the business’ domestic base of operations. In 2020, we performed screenings for our customers on individuals from more than 200 countries and territories, and we continue to expand our international operations. The laws and regulations governing our international operations are numerous, varied, and evolving. It may be difficult to correctly identify, interpret, and ensure compliance with these laws and regulations, and we cannot be certain we will avoid liability for noncompliance or improper compliance with such laws and regulations. Any such cost or liability could have a material adverse effect on our business, financial condition, and results of operations. See “—We operate in a highly regulated industry and are subject to numerous and evolving laws and regulations, including those relating to consumer protection, intellectual property, cybersecurity, privacy, and data protection, among others” and “Heightened regulatory oversight with respect to personal data and data security may lead to increased restrictions, greater costs of compliance, and lost efficiency.”

Because we generate a portion of our revenues and operating income outside of the United States, we are exposed to market risk from changes in foreign currency exchange rates that could impact our results of operations, financial position, and cash flows. Such fluctuations could have a negative or positive impact on our revenues and results of operations in any given period, which may make it difficult to compare our operating results across different periods. Foreign currency exchange rate fluctuations may also adversely impact third-party vendors we rely on for services, which may be passed along to us in the form of price increases.

In addition, as a result of our international footprint, our business, financial condition, and results of operations could be subject to factors beyond our control, including, but not limited to:

Our continued success depends in large part on the service of our key executives and our ability to find and retain qualified employees.

We depend to a large degree on the personal efforts, abilities, and performance of the members of our senior leadership team and other key personnel. Our current management team has led our company since 2017 and in that time has driven strategic and transformational initiatives across operations, product, engineering, and sales to accelerate growth and product development. Although we maintain employment contracts with certain of our officers, the possibility remains they may terminate their employment relationship with us at any time. If any of our key personnel were unable or unwilling to continue in their present positions, it may be difficult to replace them, and their departure could adversely affect our business, financial condition, and results of operations.

30

Our ability to grow our business and provide our customers with the products and solutions they have grown to expect from us is also dependent on our ability to attract and retain highly motivated and qualified people. Competition for skilled employees in our industry is intense and, if we are unable to attract and retain an able workforce, our business, results of operations, and financial condition may suffer.

If we are unable to obtain, maintain, protect and enforce our intellectual property and other proprietary information, or if we infringe, misappropriate or violate the intellectual property rights of others, the value of our brands and other intangible assets may be diminished, and our business may be adversely affected.

Our intellectual property rights and other proprietary rights are important to our business, and our ability to compete and our success depend, in part, on obtaining, maintaining, protecting, and enforcing such rights. In particular, the technology solutions we have created to deliver screening solutions, automate and integrate our platforms with third-party human capital management and applicant tracking systems, and gather and process information from various data sources and suppliers are critical to the success of our business. We rely on a combination of patent, copyright, trademark, and trade secret laws, as well as licensing agreements, intellectual property assignment agreements, third-party nondisclosure agreements, and other confidentiality agreements with our employees, customers, vendors, partners, and others to protect our intellectual property rights. These protections may not be adequate to prevent our competitors from copying our products and solutions or otherwise infringing on, misappropriating, or violating our intellectual property rights, and we may need to devote significant additional resources and time to ensure our intellectual property rights are adequately protected, including by bringing litigation against third parties to enforce our intellectual property rights. We cannot guarantee that we will be successful in prevailing in any such matters, regardless of our expenditures and efforts. Our efforts to enforce our intellectual property and other proprietary rights may be met with defenses, counterclaims, and countersuits attacking the validity and enforceability of our intellectual property and other proprietary rights, and if such defenses, counterclaims, or countersuits are successful, it could diminish or we could otherwise lose valuable intellectual property and other proprietary rights. In addition, some of the laws in foreign markets in which we operate do not protect intellectual property and other proprietary rights to the same level of protection as do the laws of the United States, and the mechanisms for enforcement of intellectual property and other proprietary rights in such countries may be inadequate.

In addition, our competitors and other third parties may also design around or independently develop similar technology or otherwise duplicate or mimic our products such that we would not be able to successfully assert our intellectual property or other proprietary rights against them. We cannot assure that any future patent, trademark, or service mark registrations will be issued for our pending or future applications or that any of our current or future patents, copyrights, trademarks, or service marks (whether registered or unregistered) will be valid, enforceable, sufficiently broad in scope, provide adequate protection of our intellectual property or other proprietary rights, or provide us with any competitive advantage.

Furthermore, we may also be subject to claims of intellectual property infringement, misappropriation, or violation by third parties, including our competitors. Even if we are unaware of such rights, we may be found by courts to be infringing upon, misappropriating, or violating them. If successfully asserted against us or if we decide to settle such matters, we could be required to pay substantial damages or ongoing royalty payments, obtain licenses, which may not be available on commercially reasonable terms, or at all, modify our products and solutions (including our applications), or discontinue certain products. We may also be obligated to indemnify applicants, customers, vendors, or partners in connection with any such claim or litigation. Even if we prevail in a dispute, any litigation regarding intellectual property could be costly, time-consuming, and require the deployment of significant resources, and could result in lasting harm being done to our brand and reputation, results of operations or financial condition, or have other adverse consequences.

31

If we are unable to maintain, protect and enforce the confidentiality of our trade secrets, our business and competitive position would be harmed.

In order to safeguard our innovations and competitive advantages, we partially rely on trade secrets. We cannot guarantee that we will be successful in maintaining, protecting, or enforcing the confidentiality of our trade secrets or that our non-disclosure agreements will provide sufficient protection of our trade secrets, know-how, or other proprietary information in the event of any unauthorized use, misappropriation, or other disclosure. Although we have taken steps to protect our trade secrets, including entering into confidentiality agreements with third parties and confidential information and inventions agreements with employees, consultants, and advisors, we cannot provide any assurances that any of these parties may not breach the agreements and disclose our proprietary information, including our trade secrets. For example, if a party to one of our non-disclosure agreements were to breach said agreement, we cannot guarantee that adequate remedies will be available to rectify any subsequent damages or losses of confidential and proprietary information. Enforcing a claim that a party illegally disclosed or misappropriated a trade secret is difficult, expensive, and time-consuming, and the outcome is unpredictable. In addition, some courts inside and outside the United States are less willing or unwilling to protect trade secrets. It is also possible that our trade secrets will become known by some other mechanism or independently developed by our competitors, and we would have no right to prevent them from using that technology or information to compete with us. For example, a significant portion of our proprietary databases is assembled from publicly available information sources, and third parties, including our competitors, could compile similar or competing databases by accessing the same publicly available information sources.

The use of open-source software in our applications may expose us to additional risks and harm our intellectual property rights.

We have in the past and may in the future continue to incorporate certain “open source” software into our codebase and our products and solutions. Open-source software is generally licensed by its authors or other third parties under open source licenses, which typically do not provide any representations, warranties, or indemnity coverage by the licensor. Some of these licenses provide that combinations of open source software with a licensee’s proprietary software are subject to the open source license and require that the combination be made available to third parties in source code form, at no cost, or subject to other unfavorable conditions. Some open-source licenses may also require the licensee to grant licenses under certain of its own intellectual property to third parties. From time to time, there have been claims challenging the ownership of open source software against companies that incorporate such software into their products or applications. The terms of various open-source licenses have not been interpreted by courts, and there is a risk that such licenses could be construed in a manner that imposes unanticipated conditions or restrictions on our use of open-source software or our proprietary rights. In addition, if we were to combine our applications with open source software in a certain manner, we could, under certain of the open-source licenses, be required to publicly release or license, at no cost, our products that incorporate the open source software or the affected portions of our source code, which could allow our competitors or other third parties to create similar products and solutions with lower development effort, time, and costs, and could ultimately result in a loss of transaction volume for us. If we inappropriately use open-source software, we may be required to redesign our applications, seek licenses from third parties in order to continue offering our products, which may not be available on commercially reasonable terms, or at all, discontinue the sale of our products or solutions, or take other remedial actions, each of which could reduce or eliminate the value of our technologies and could adversely impact our business, operating results, or financial condition.

We cannot ensure that we have not incorporated open source software in our software in a manner that is inconsistent with the terms of the applicable license or our current policies, and we may inadvertently use open source in a manner that we do not intend, or that could expose us to claims for breach of contract or intellectual property infringement, misappropriation, or other violation. If we fail to comply, or are alleged to have failed to comply, with the terms and conditions of our open source licenses, we could be required to incur significant legal

32

expenses defending such allegations, be subject to significant damages, be enjoined from the sale of our products and solutions, and be required to comply with onerous conditions or restrictions on our products and solutions, any of which could be materially disruptive to our business. Litigation could be costly for us to defend, have a negative effect on our operating results and financial condition, or require us to devote additional development resources to change our applications.

Real or perceived errors, failures, or bugs in our products could adversely affect our business, results of operations, financial condition, and growth prospects.

Our products are complex, and therefore undetected errors, failures, bugs, or defects may be present in our products or occur in the future in our products, our technology or software or technology or software we license in from third parties, including open source software, especially when updates or new products are released. Such software and technology are used in IT environments with different operating systems, system management software, devices, databases, servers, storage, middleware, custom, and third-party applications and equipment and networking configurations, which may cause errors, failures, bugs, or defects in the IT environment into which such software and technology are deployed. This diversity increases the likelihood of errors, failures, bugs, or defects in those IT environments. Despite testing by us, real or perceived errors, failures, bugs, or defects may not be found until our customers use our products. Real or perceived errors, failures, bugs or defects in our products could result in negative publicity, loss of or delay in market acceptance of our products and harm to our brand, weakening of our competitive position, claims by customers for losses sustained by them or failure to meet the stated service level commitments in our customer agreements. In such an event, we may be required, or may choose, for customer relations or other reasons, to expend significant additional resources in order to help correct the problem. Any real or perceived errors, failures, bugs, or defects in our products could also impair our ability to attract new customers, retain existing customers or expand their use of our products, which would adversely affect our business, results of operations, and financial condition.

Additionally, if customers fail to adequately deploy protection measures or update our products, customers and the public may erroneously believe that our products are especially susceptible to cyber-attacks. Real or perceived security breaches against our products could cause disruption or damage to our customers’ networks or other negative consequences and could result in negative publicity to us, damage to our reputation, lead to other customer relations issues and adversely affect our revenue and results of operations. We may also be subject to liability claims for damages related to real or perceived errors, failures, bugs, or defects in our products. A material liability claim or other occurrence that harms our reputation or decreases market acceptance of our products may harm our business and results of operations. Finally, since some of our customers use our products for compliance reasons, any errors, failures, bugs, defects, disruptions in service, or other performance problems with our products may damage our customers’ business and could hurt our reputation.

Our estimates of the total addressable market, current market, market opportunity, and potential for market growth may prove to be inaccurate, which could impact our predicted operations.

We cannot guarantee that estimates and forecasts we rely upon in this prospectus relating to the size, composition, and expected growth of our target market will prove to be accurate, particularly as it relates to international markets where there is less information about hiring volumes and trends, as well as greater prevalence of smaller local players. Any market opportunity estimates or growth forecasts are based on assumptions and estimates that may not come to fruition or prove to be accurate, subjecting such predictions to uncertainty. For more information regarding the estimates of market opportunity and the forecasts of market growth included in this prospectus, see “Business—Our Market Opportunity.”

We may not be able to identify attractive acquisition targets and strategic partnerships or successfully complete such transactions.

Part of our strategy is to selectively pursue complementary acquisitions and strategic partnerships. Opportunities to grow our business through acquisitions, joint ventures, and other alliances may not be available

33

to us in the future. We cannot guarantee that we will be able to identify attractive targets that are a strategic fit with our business or that we will be able to agree upon acceptable terms. Our ability to successfully identify and complete future acquisitions with reasonable valuations may also be affected by factors out of our control, including general market conditions, volatility in the capital and debt markets, and other macroeconomic and geopolitical risks. Furthermore, a number of our competitors expand and diversify through acquisitions, and we likely will experience competition in our effort to execute our acquisition strategy. As a result, we may be unable to continue to make acquisitions or may be forced to pay more for the companies we are able to acquire.

We may not be able to integrate or manage acquired businesses and strategic partnerships so as to produce returns that justify the investment. Integrating acquisitions or other business relationships may result in unforeseen operating difficulties and expenditures, disrupt our ongoing business, divert our resources, and require significant management attention that would otherwise be available for the ongoing development of our business. In particular, it may prove difficult to integrate the personnel, operations, intellectual property, and/or technology systems of any acquired organizations, and to maintain uniform standards, policies, and procedures across multiple platforms and locations, including for those located outside the United States. This may result in a greater than anticipated increase in the transaction, remediation, and integration costs and could discourage us from entering into acquisitions where the potential for such costs outweigh the perceived benefit. Further, although we conduct due diligence with respect to the business and operations of each of the companies we acquire, we may not have identified all material facts concerning these companies, which could result in unanticipated events or liabilities. We cannot guarantee that any acquisitions we seek to enter into will be carried out on favorable terms or that the anticipated benefits of any acquisition, investment, or business relationship will materialize as intended or that no unanticipated liabilities will arise.

Seasonality may cause our operating results to fluctuate from quarter to quarter.

We experience seasonality with respect to certain industries we service due to fluctuations in hiring volumes and other economic activity. For example, pre-onboarding revenues generated from our customers in the retail and transportation industries are historically highest during the September through November months leading up to the holiday season and lowest at the beginning of the first quarter following the holiday season. Certain customers across various industries also historically ramp up their hiring throughout the first half of the year as winter concludes, commercial activity tied to outdoor activities increases, and the school year ends, giving rise to student and graduate hiring. In addition, apartment rental activity and associated screening activity typically decline in the fourth quarter heading into the holiday season.

In addition, customers may elect to complete post-onboarding screening such as workforce re-screens and other products at different periods and intervals during any given year. It is not always possible to accurately forecast the timing and magnitude of these projects.

Further, digital transformation, growth in e-commerce, and other economic shifts can impact seasonality trends, making it difficult for us to predict how our seasonality may evolve in the future. As a result, it may be difficult to forecast our results of operations accurately, and there can be no assurance that the results of any particular quarter or other period will serve as an indication of our future performance.

Our implementation cycles can be lengthy and variable, depend upon factors outside our control, and could cause us unexpected delays in generating revenues or result in lower than anticipated revenues.

Unexpected delays and difficulties can occur as customers implement and test our products and solutions. Implementation typically involves integration with our customers’ and third-party systems and internal processes, as well as adding customer and third-party data to our platform. This can be complex and time-consuming for our customers and can result in delays. We provide our customers with upfront estimates regarding the duration and resources associated with the implementation of our products and solutions. However, delays may occur due to discoveries made during the implementation process, such as unique or unusual

34

customer requirements or our internal limitations. If we are unable to resolve these issues and we fail to meet the upfront estimates and the expectations of our customers, it could result in customer dissatisfaction, loss of customers, delays in generating revenues, or negative brand perception about us and our products and solutions. Our implementation cycles could also be disrupted by factors outside of our control, such as deficiencies in the platform of our customers or third-party ATS or HCM systems, which could adversely affect our business, results of operations, and financial condition.

The interpretation of tax laws may have a material adverse effect on our business.

Tax laws and related interpretations with respect to income taxation are frequently reviewed and amended by governmental bodies, officials, and regulatory agencies in the United States and other jurisdictions in which we do business. Our provision for income taxes may be adversely affected by changes to our operating model, changes in the mix of income and expenses in countries with differing tax rates, changes in the valuation of deferred tax assets and liabilities, or changes in tax laws, regulations, or administrative interpretations. For example, the results of the United States presidential election in 2020 could lead to changes in tax laws that could negatively impact our effective tax rate. Prior to this presidential election, President Joseph Biden proposed an increase in the U.S. corporate income tax rate from 21% to 28%, doubling the rate of tax on certain earnings of foreign subsidiaries, creation of a 10% penalty on certain imports and a 15% minimum tax on worldwide book income. If any or all of these (or similar) proposals are ultimately enacted into law, in whole or in part, they could have a negative impact on our effective tax rate. It cannot be predicted whether or when tax laws, regulations, and rulings may be enacted, issued, or amended that could materially and adversely impact our financial position, results of operations, or cash flows.

Risks Related to Our Indebtedness

Our substantial indebtedness could adversely affect our ability to raise additional capital to fund our operations, limit our ability to react to changes in the economy or our industry, and prevent us from meeting our obligations.

We have a significant amount of indebtedness. As of March 31, 2021, prior to giving effect to this offering and the use of proceeds therefrom, we had approximately $764.7 million of aggregate principal amount of secured indebtedness outstanding and an additional $75.0 million of availability under our revolving credit facility. We have entered into an amendment to increase the borrowing capacity under our revolving credit facility to $100.0 million, which will become effective upon the closing of this offering.

Our substantial level of indebtedness increases the risk that we may be unable to generate cash sufficient to pay amounts due in respect of our indebtedness. Our substantial indebtedness could have other important consequences to us, including:

35

In addition, the credit agreement governing our term loan facility and revolving credit facility contains, and the agreements governing future indebtedness may contain, restrictive covenants that limit our ability to engage in activities that may be in our long-term best interests. Our failure to comply with those covenants could result in an event of default that, if not cured or waived, could result in the acceleration of all of our indebtedness.

We may be able to incur significant additional indebtedness in the future. Although the credit agreement governing our term loan facility and revolving credit facility contain restrictions on the incurrence of additional indebtedness by us, such restrictions are subject to a number of qualifications and exceptions, and the indebtedness incurred in compliance with these restrictions could be substantial. Also, these restrictions do not prohibit us from incurring obligations that do not constitute indebtedness as defined therein. To the extent that we incur additional indebtedness or such other obligations, the risk associated with our substantial indebtedness described above will increase. See “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Senior Secured Credit Facilities.”

We will require a significant amount of cash to service our debt, and our ability to generate cash depends on many factors beyond our control, and any failure to meet our debt service obligations could materially adversely affect our business, results of operations, and financial condition.

Our ability to make payments on and to refinance our indebtedness and to fund working capital needs and planned capital expenditures will depend on our ability to generate cash in the future. This, to a certain extent, is subject to general economic, financial, competitive, business, legislative, regulatory, and other factors that are beyond our control.

If our business does not generate sufficient cash flow from operations or if future borrowings are not available to us in an amount sufficient to enable us to pay our indebtedness or to fund our other liquidity needs, we may need to refinance all or a portion of our indebtedness on or before the maturity thereof, sell assets, reduce or delay capital investments or seek to raise additional capital, any of which could have a material adverse effect on our operations. In addition, we may not be able to effect any of these actions, if necessary, on commercially reasonable terms or at all. Our ability to restructure or refinance our indebtedness will depend on the condition of the capital markets and our financial condition at such time. Any refinancing of our debt could be at higher interest rates and may require us to comply with more onerous covenants, which could further restrict our business operations. The terms of existing or future debt instruments, including the credit agreement governing our term loan facility and revolving credit facility, may limit or prevent us from taking any of these actions. In addition, any failure to make scheduled payments of interest and principal on our outstanding indebtedness would likely result in a reduction of our credit rating, which could harm our ability to incur additional indebtedness on commercially reasonable terms or at all. Our inability to generate sufficient cash flow to satisfy our debt service obligations, or to refinance or restructure our obligations on commercially reasonable terms or at all, would have an adverse effect, which could be material, on our business, results of operations, and financial condition, as well as on our ability to satisfy our obligations in respect of our term loan facility and revolving credit facility.

36

Our debt instruments restrict our current and future operations, particularly our ability to respond to changes or take certain actions.

The credit agreement governing our term loan facility and revolving credit facility impose significant operating and financial restrictions and limit our ability to:

As a result of these covenants and restrictions, we are and will be limited in how we conduct our business, and we may be unable to raise additional debt or equity financing to compete effectively or to take advantage of new business opportunities. In addition, we are required to maintain specified financial ratios and satisfy other financial condition tests. The terms of any future indebtedness we may incur could include more restrictive covenants. We cannot guarantee that we will be able to maintain compliance with these covenants in the future and, if we fail to do so, that we will be able to obtain waivers from the lenders and/or amend the covenants.

Our failure to comply with the restrictive covenants described above as well as others contained in our future debt instruments from time to time could result in an event of default, which, if not cured or waived, could result in our being required to repay these borrowings before their due date. If we are forced to refinance these borrowings on less favorable terms, our results of operations and financial condition could be adversely affected.

Our failure to comply with the agreements relating to our outstanding indebtedness, including as a result of events beyond our control, could result in an event of default that could materially adversely affect our business, results of operations, and financial condition.

If there were an event of default under any of the agreements relating to our outstanding debt, the holders of the defaulted debt could cause all amounts outstanding with respect to that debt to be due and payable immediately. Our assets or cash flow may not be sufficient to fully repay borrowing under our outstanding debt instruments if accelerated upon an event of default. Further, if we are unable to repay, refinance or restructure our secured debt, the holders of such debt could proceed against the collateral securing such debt. In addition, any event of default or declaration of acceleration under one debt instrument could also result in an event of default under one or more of our other debt instruments. As a result, any default by us on our debt could have a materially adverse effect on our business, results of operations, and financial condition.

The phase-out of LIBOR could affect interest rates under our credit facilities.

On July 27, 2017, the United Kingdom’s Financial Conduct Authority announced it intends to stop compelling banks to submit rates for the calculation of the London Interbank Offered Rate (“LIBOR”) after 2021. It is unclear if LIBOR will cease to exist at that time, if a new method of calculating LIBOR will be established, or if an alternative reference rate will be established. The Federal Reserve Board and the Federal

37

Reserve Bank of New York organized the Alternative Reference Rates Committee, which identified the Secured Overnight Financing Rate (“SOFR”) as its preferred alternative to U.S. dollar LIBOR in derivatives and other financial contracts. We are not able to predict when LIBOR will cease to be available or if SOFR, or another alternative reference rate, attains market traction as a LIBOR replacement. LIBOR is used as the reference rate for Eurocurrency borrowings under our credit facilities. If LIBOR ceases to exist, we and the administration agent for our credit facilities may amend our credit agreement to replace LIBOR with a different benchmark index and make certain other conforming changes to our credit agreement. As such, the interest rate on Eurocurrency borrowings under our credit facilities may change. The new rate may not be as favorable as those in effect prior to any LIBOR phase-out. Furthermore, the transition process may result in delays in funding, higher interest expense, additional expenses, and increased volatility in markets for instruments that currently rely on LIBOR, all of which could negatively impact our interest expense, results of operations, and cash flow.

Risks Related to this Offering and Ownership of Our Common Stock

We are an “emerging growth company” and we cannot be certain if the reduced disclosure requirements applicable to “emerging growth companies” will make our common stock less attractive to investors.

We are an “emerging growth company,” as defined in Section 2(a)(19) of the Securities Act, and we may take advantage of certain exemptions and relief from various reporting requirements that are applicable to other public companies that are not “emerging growth companies.” In particular, while we are an “emerging growth company”, among other exemptions:

In addition, Section 107 of the JOBS Act provides that an emerging growth company can take advantage of the extended transition period provided in Section 7(a)(2)(B) of the Securities Act for complying with new or revised accounting standards, meaning that the company can delay the adoption of certain accounting standards until those standards would otherwise apply to private companies. We have elected to take advantage of this extended transition period, and as a result, our financial statements may not be comparable with similarly situated public companies.

We may remain an “emerging growth company” until the fiscal year-end following the fifth anniversary of the completion of this initial public offering, though we may cease to be an “emerging growth company” earlier under certain circumstances, including (1) if our gross revenues exceed $1.07 billion in any fiscal year, (2) if we become a large accelerated filer, with at least $700 million of equity securities held by non-affiliates, or (3) if we issue more than $1.0 billion in non-convertible notes in any three year period.

We cannot predict if investors may find our common stock less attractive if we rely on the exemptions and relief granted by the JOBS Act. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock, and our stock price may decline and/or become more volatile.

We will be a “controlled company” within the meaning of the Nasdaq rules and the rules of the SEC and, as a result, qualify for, and intend to rely on, exemptions from certain corporate governance requirements. You will not have the same protections afforded to stockholders of other companies that are subject to such requirements.

After completion of this offering, our Sponsor will continue to control a majority of the voting power of our outstanding common stock. As a result, we will be a “controlled company” within the meaning of the corporate

38

governance standards of Nasdaq. Under these rules, a company of which more than 50% of the voting power is held by an individual, group, or another company is a “controlled company” and may elect not to comply with certain corporate governance requirements, including the requirement that:

Following this offering, we intend to utilize these exemptions. As a result, we may not have a majority of independent directors, our compensation committee and nominating and governance committee may not consist entirely of independent directors. Accordingly, you may not have the same protections afforded to stockholders of companies that are subject to all of the corporate governance requirements of Nasdaq.

Our Sponsor controls us and its interests may conflict with yours in the future.

Immediately following this offering, our Sponsor will beneficially own         % of our common stock, or         % if the underwriters exercise in full their option to purchase additional shares. Our Sponsor will be able to control the election and removal of our directors and thereby determine our corporate and management policies, including potential mergers or acquisitions, payment of dividends, asset sales, amendment of our certificate of incorporation or bylaws and other significant corporate transactions for so long as our Sponsor and its affiliates retain significant ownership of us. This concentration of our ownership may delay or deter possible changes in control of the Company, which may reduce the value of an investment in our common stock. So long as our Sponsor continues to own a significant amount of our combined voting power, even if such amount is less than 50%, our Sponsor will continue to be able to strongly influence or effectively control our decisions and, so long as our Sponsor and its affiliates collectively own at least         % of all outstanding shares of our stock entitled to vote generally in the election of directors, our Sponsor will be able to appoint individuals to our board of directors under the stockholders agreement that we expect to enter into in connection with this offering. See “Certain Relationships and Related Party Transactions—Stockholders Agreement.” The interests of our Sponsor may not coincide with the interests of other holders of our common stock.

In the ordinary course of their business activities, our Sponsor and its affiliates may engage in activities where their interests conflict with our interests or those of our stockholders. Our certificate of incorporation will provide that our Sponsor, any of its affiliates or any director who is not employed by us (including any non-employee director who serves as one of our officers in both his or her director and officer capacities) or his or her affiliates will not have any duty to refrain from engaging, directly or indirectly, in the same business activities or similar business activities or lines of business in which we operate. Our Sponsor also may pursue acquisition opportunities that may be complementary to our business and, as a result, those acquisition opportunities may not be available to us. In addition, our Sponsor may have an interest in pursuing acquisitions, divestitures and other transactions that, in their judgment, could enhance its investment, even though such transactions might involve risks to you.

In addition, the Sponsor and its affiliates will be able to determine the outcome of all matters requiring stockholder approval and will be able to cause or prevent a change of control of the Company or a change in the composition of our board of directors and could preclude any acquisition of the Company. This concentration of voting control could deprive you of an opportunity to receive a premium for your shares of common stock as part of a sale of the Company and ultimately might affect the market price of our common stock.

39

We will incur increased costs and become subject to additional regulations and requirements as a result of becoming a public company, and our management will be required to devote substantial time to new compliance matters, which could lower our profits or make it more difficult to run our business.

As a public company, we will incur significant legal, regulatory, finance, accounting, investor relations and other expenses that we have not incurred as a private company, including costs associated with public company reporting requirements and costs of recruiting and retaining non-executive directors. We also have incurred and will incur costs associated with the Sarbanes-Oxley Act, and the Dodd-Frank Wall Street Reform and Consumer Protection Act, or the Dodd-Frank Act, and related rules implemented by the SEC, and Nasdaq. The expenses incurred by public companies generally for reporting and corporate governance purposes have been increasing. We expect these rules and regulations to increase our legal and financial compliance costs and to make some activities more time-consuming and costly, although we are currently unable to estimate these costs with any degree of certainty. Our management will need to devote a substantial amount of time to ensure that we comply with all of these requirements, diverting the attention of management away from revenue-producing activities. These laws and regulations also could make it more difficult or costly for us to obtain certain types of insurance, including director and officer liability insurance, and we may be forced to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage. These laws and regulations could also make it more difficult for us to attract and retain qualified persons to serve on our board of directors, our board committees or as our executive officers. Furthermore, if we are unable to satisfy our obligations as a public company, we could be subject to delisting of our common stock, fines, sanctions and other regulatory action and potentially civil litigation.

Failure to comply with requirements to design, implement and maintain effective internal controls could have a material adverse effect on our business and stock price.

As a privately-held company, we were not required to evaluate our internal control over financial reporting in a manner that meets the standards of publicly traded companies required by Section 404(a) of the Sarbanes-Oxley Act, or Section 404.

As a public company, we will have significant requirements for enhanced financial reporting and internal controls. The process of designing and implementing effective internal controls is a continuous effort that requires us to anticipate and react to changes in our business and the economic and regulatory environments and to expend significant resources to maintain a system of internal controls that is adequate to satisfy our reporting obligations as a public company. If we are unable to establish or maintain appropriate internal financial reporting controls and procedures, it could cause us to fail to meet our reporting obligations on a timely basis, result in material misstatements in our consolidated financial statements and harm our operating results. In addition, we will be required, pursuant to Section 404, to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting in the second annual report following the completion of this offering. This assessment will need to include disclosure of any material weaknesses identified by our management in our internal control over financial reporting. The rules governing the standards that must be met for our management to assess our internal control over financial reporting are complex and require significant documentation, testing and possible remediation. Testing and maintaining internal controls may divert our management’s attention from other matters that are important to our business. If we are no longer an “emerging growth company,” our auditors will be required to issue an attestation report on the effectiveness of our internal controls on an annual basis.

In connection with the implementation of the necessary procedures and practices related to internal control over financial reporting, we may identify deficiencies that we may not be able to remediate in time to meet the deadline imposed by the Sarbanes-Oxley Act for compliance with the requirements of Section 404. In addition, we may encounter problems or delays in completing the remediation of any deficiencies identified by our independent registered public accounting firm in connection with the issuance of their attestation report. Our testing, or the subsequent testing (if required) by our independent registered public accounting firm, may reveal

40

deficiencies in our internal controls over financial reporting that are deemed to be material weaknesses. Any material weaknesses could result in a material misstatement of our annual or quarterly consolidated financial statements or disclosures that may not be prevented or detected.

We may not be able to conclude on an ongoing basis that we have effective internal control over financial reporting in accordance with Section 404 or our independent registered public accounting firm may not issue an unqualified opinion. If either we are unable to conclude that we have effective internal control over financial reporting or our independent registered public accounting firm is unable to provide us with an unqualified report (to the extent it is required to issue a report), investors could lose confidence in our reported financial information, which could have a material adverse effect on the trading price of our common stock.

There may not be an active, liquid trading market for shares of our common stock, which may cause shares of our common stock to trade at a discount from the initial offering price and make it difficult to sell the shares of common stock you purchase.

Prior to this offering, there has not been a public trading market for shares of our common stock. We cannot predict the extent to which investor interest in us will lead to the development of a trading market or how active and liquid that market may become. If an active and liquid trading market does not develop or continue, you may have difficulty selling your shares of our common stock at an attractive price or at all. The initial public offering price per share of common stock will be determined by agreement among us, the selling stockholders and the representatives of the underwriters, and may not be indicative of the price at which shares of our common stock will trade in the public market after this offering. The market price of our common stock may decline below the initial offering price and you may not be able to sell your shares of our common stock at or above the price you paid in this offering, or at all.

Our stock price may change significantly following this offering, and you may not be able to resell shares of our common stock at or above the price you paid or at all, and you could lose all or part of your investment as a result.

Even if a trading market develops, the market price of our common stock may be highly volatile and could be subject to wide fluctuations. You may not be able to resell your shares at or above the initial public offering price due to a number of factors such as those listed in “—Risks Related to Our Business” and the following:

41