Item 1. Business
Overview
We are a leading provider of comprehensive solutions that transform the healthcare experience by engaging patients in their care and enabling healthcare provider organizations to optimize operational efficiency, improve profitability and enhance clinical care. As evidenced in industry survey reports from KLAS, an independent healthcare information technology research firm, we have been recognized as a leader based on our integration capabilities with healthcare provider organizations, the broad adoption of our patient intake functionalities and by overall client satisfaction. Through the SaaS-based Phreesia Platform, which we refer to as the Phreesia Platform or our Platform, we offer healthcare provider organizations, or provider clients, a robust suite of solutions to manage the patient intake process and an integrated payments solution for secure processing of patient payments. Our Platform also provides life sciences companies with an engagement channel for targeted and direct communication with patients. In fiscal 2020, we facilitated patient visits in over 1,600 healthcare provider organizations across all 50 states. We define a patient visit as an individual, in-person or telehealth visit to a healthcare provider, which may include multiple visits by the same patient. Additionally, our Platform processed nearly $1.9 billion in patient payments in fiscal 2020.
Patient intake is a complex and time-consuming process involving numerous tasks, including registration, insurance verification, patient questionnaires, patient-reported outcomes, or PROs, payments and scheduling. Inefficiencies during the intake process often result in lower patient and provider satisfaction, wasted time, missed revenue opportunities and diminished health outcomes. Phreesia was founded to revolutionize patient intake and to create a better, more engaging healthcare experience. We have created an integrated and streamlined system that automates data capture and engages patients before, during and after the point of care.
The Phreesia Platform manages the end-to-end patient intake process and encompasses a comprehensive range of services, including initial patient contact, registration, appointment scheduling, payments and post-appointment patient surveys. The Phreesia Platform securely collects and analyzes each patient’s information and provides engagement tools to efficiently guide each patient through their healthcare journey. We deploy our Platform across a range of modalities, including through patients’ mobile devices (Phreesia Mobile), through a web-based dashboard for providers (Phreesia Dashboard) and through our proprietary, self-service intake tablets (PhreesiaPads) and on-site kiosks (Arrivals Stations), all of which provide an individualized intake experience for each patient based on age, gender and appointment type. Our solutions are highly customizable and scalable to any size healthcare provider organization and can seamlessly integrate within a provider client’s workflows and leading Practice Management, or PM, and Electronic Health Record, or EHR, systems. Our Platform additionally allows for time-of-service and secure post-explanation of benefits integrated payments.
We serve an array of provider clients ranging from single-specialty practices, which include internal and family medicine, urology, dermatology and orthopedics, to large, multi-specialty groups. Our life sciences business additionally serves clients in the pharmaceutical, biotechnology and medical device industries, including 13 of the top 20 global pharmaceutical companies as measured by revenue in fiscal 2020.
Our Platform
The Phreesia Platform currently offers the following solutions to our clients:
•Our registration solution automates patient self-registration via Phreesia Mobile—either before or at the time of the patient’s visit—or through the use of a purpose-built PhreesiaPad or Arrivals Station for on-site check-in. The solution also includes the Phreesia Dashboard, which provider staff use to monitor and manage the intake process.
•Our patient activation solution enables providers to communicate with their patients through automated, tailored surveys, announcements, messaging and targeted health campaigns.
•Our revenue cycle solution provides insurance-verification processes, point-of-sale payments applications and cost estimation tools, which help providers maximize the timely collection of patient payments.
•Our clinical support solution collects clinical intake and PRO data for more than 25 specialties, enabling our clients to ask the right clinical questions of the right patients at the right time, and gather key data that aligns with their quality-reporting goals.
•Our appointments solution provides a comprehensive appointment scheduling system to provide clients with applications for online appointments, reminders and referral tracking.
•Our life sciences solution provides a channel for our life sciences clients to deliver targeted and clinically relevant marketing content to patients, which allows them to have more informed conversations with their providers. We also enable our life sciences clients to receive direct patient feedback to incorporate into their business models.
The Phreesia Platform provides significant and measurable value to patients, healthcare provider organizations and life sciences companies. For patients, we provide a seamless, individualized intake experience and flexible payment options. For provider clients, we enable them to increase collections, streamline the referral process, improve quality measures, increase patient satisfaction and consistently collect key clinical, demographic and social data. Based on client feedback received and our internal analysis, we believe that the majority of our provider clients have been able to increase time-of-service collections after installing our Platform. For life sciences clients, we increase patient awareness and education of their marketed products. Based on our analysis of client advertising campaigns conducted by Crossix and another data analytics company, which we commissioned, we believe patients exposed to a brand campaign using the Phreesia Platform more likely, on average, to have a prescription filled for that product than control patients.
The Phreesia Platform has evolved to provide a comprehensive range of applications and modules that address the growing needs of the healthcare market. The success and continued evolution of our company has been due in large part to the talent and engagement of the entire Phreesia team. Our team members are key pillars of our success and fostering and developing their talent is central to our culture.
Based on the significant value we provide to our clients, we have experienced strong organic revenue growth over the last three fiscal years. Total revenue increased approximately 25% from $79.8 million in fiscal 2018 to $99.9 million in fiscal 2019 and approximately 25% from $99.9 million in fiscal 2019 to $124.8 million in fiscal 2020. Adjusted EBITDA increased from a loss of $4.1 million in fiscal 2018 to income of $3.5 million in fiscal 2019 and to income of $4.8 million in fiscal 2020. See "Management's Discussion and Analysis of Financial Condition and Results of Operations — Non-GAAP Financial Measures — for more information as to how we define and calculate Adjusted EBITDA and for a reconciliation of net income, the most comparable GAAP measure.
Industry challenges and our opportunity
We develop and market solutions that increase efficiency, reduce costs and improve clinical effectiveness in the healthcare industry. We believe the following trends impacting the healthcare industry represent significant opportunities for us.
Inefficiency and waste amidst continually rising U.S. healthcare expenditure
The excess in healthcare spending is largely administrative-related, including complex billing procedures, non-standardized practices and a lack of communication between front- and back-office operations, leading to increased costs, errors and inefficient use of providers’ time. Physician practices, burdened by these complex administrative and billing tasks, require extensive support staff to handle these challenges. We believe there is a significant business opportunity and the market for our services will continue to grow as healthcare provider organizations and their staff seek to address these rising costs by eliminating waste and inefficiencies.
The patient intake process today is primarily manual, tedious, prone to costly errors and repetitive. By contrast, the Phreesia Platform provides an automated and comprehensive solution to address key provider pain points. As the leading patient intake platform, Phreesia increases staff and doctor efficiency and allows providers to maximize clinical time with patients, reduce administrative complexities and optimize the delivery of care.
Increasing patient financial responsibility in healthcare
As healthcare expenditures continue to rise, employers and health systems have shifted more of the cost to patients through increased cost sharing and the use of high-deductible health plans. These trends have resulted in significant increases in out-of-pocket patient spending, which CMS expects to total $586.0 billion by 2027. The emergence of the patient as a major payer of healthcare is a dramatic shift in the industry payment landscape, which requires provider staff to obtain payment from the patient before and after the point of care. These tasks are best accomplished with more automated registration, billing and collection workflows, as well as patient-centric payment options. Against this backdrop, patients have historically struggled to understand their bills. According to a McKinsey & Company analysis, by some estimates, healthcare provider organizations collect only half of patient balances after the patient's initial visit, which contributes to incremental financial pressure.
Phreesia’s comprehensive digital payment platform enables providers to more effectively engage patients and increase collections. Our robust suite of revenue cycle solutions drives profitability, increases transparency and enhances the patient financial experience.
Increasing consumerism in healthcare
As patients pay an ever-growing share of their healthcare costs, they are increasingly demanding higher quality care, increased cost transparency, shared decision making and convenience. As such, patient experience and satisfaction are becoming important priorities for providers as they compete to attract and retain new patients. Moreover, pharmaceutical companies are increasingly becoming more patient-centric due to increased competition and development of more targeted therapies.
We believe the Phreesia Platform drives improved patient satisfaction and education, efficiency and overall quality of care. Our Platform provides an end-to-end patient intake solution that engages patients directly on their device of choice (Phreesia Mobile, PhreesiaPad or Arrivals Station) to provide streamlined, self-service patient intake and empowers providers with intuitive, cloud-based software that drives actionable insights. Our automated and integrated intake solution allows us to achieve high levels of patient utilization, providing us and our provider clients with important access to patients at key moments of their care. We also help educate patients about relevant treatment options to encourage more engaging provider interaction, and we provide pharmaceutical companies with an effective channel to incorporate the patient voice in to their business models in an increasingly competitive, patient-centric healthcare environment.
Ongoing shift to value-based reimbursement models
The United States healthcare system has been shifting toward alternative payment models, in which healthcare provider organizations share financial risk and are reimbursed based on patients’ experience and outcomes, based on a review by the Health Care Payment & Learning Action Network. According to the American Hospital Association, the shift to these models requires healthcare provider organizations to manage new challenges related to measurement and reporting, population health management, care coordination and other patient demands, all of which may require additional staff and capabilities.
The Phreesia Platform provides real-time insights necessary to improve outcomes in a value-based operating model. We utilize industry-accepted PROs and clinical screening tools that have been developed by third parties and tested for reliability, sensitivity and validity. These PROs allow our healthcare provider clients to close gaps in care, identify successful treatments and engage patients in their care. At the same time, our ability to streamline the intake process and critical workflows improves provider and staff efficiency, allowing for optimal allocation of resources to manage the demands of a value-based care model.
Increasing focus on personalized healthcare solutions
We believe that the treatment and prevention of disease are becoming increasingly personalized, driven by technological advancements in the use of patient-specific health, lifestyle/environmental, genomic and other data to diagnose, treat and prevent disease at a personalized level. According to the Journal of the American Medical Association, pharmaceutical companies currently spend a substantial portion of their direct-to-consumer marketing dollars on television and print to reach large patient populations with chronic conditions such as diabetes and pain, which we believe is not as effective as targeted outreach. As new therapies, including those for smaller patient populations, are brought to market, pharmaceutical companies need cost-efficient marketing channels and capabilities to promote new medicines.
Phreesia’s high levels of patient engagement and robust targeting capabilities create an attractive marketing channel for life sciences companies to reach and inform targeted patient populations while they are seeking care which empowers patients to have informed conversations with their physician about their care plan and treatment options.
Our market opportunity
The Phreesia Platform serves a range of provider clients, including single-specialty practices, multi-specialty groups and large health systems. Through our life sciences solutions, we provide services to large and small pharmaceutical, medical device and biotechnology companies. We believe the current addressable market for our Platform and services is approximately $7.0 billion and is derived from: (1) the potential subscription-based revenue generated from the approximately 890,000 U.S.-based ambulatory care providers currently taking medical appointments, (2) consumer-related transaction and payment processing fees, which are based on a percentage of payments that can be processed via the Phreesia Platform and addresses approximately $91.0 billion of annual out of pocket patient spend in ambulatory healthcare related professional services, and (3) a portion of the $6.0 billion
spent by life sciences companies on direct-to-consumer prescription drug marketing. As we develop new products and services on the Phreesia Platform, we expect our total addressable market to grow. Our recent entry into acute-care organizations is an example of a new market offering that is not included in our current addressable market.
Our value proposition
We are focused on creating a better, more engaging healthcare experience for patients, healthcare provider organizations and life sciences companies. We believe our solutions provide a unique value proposition that is differentiated from what is offered by the traditional healthcare system.
Value proposition for patients
•Improved patient experience. Our Platform streamlines the patient intake process and provides consumer-centric options for check-in. We pre-populate information from prior visits, minimizing the frustration of repetitive questions during the intake process and streamlining the information for review by a clinician by the time the patient reaches the exam room. We also offer patients a convenient, flexible, secure intake experience that saves time and reduces the confusion and anxiety around payments. Additionally, our cost estimation tool allows patients to receive an accurate estimate of their out-of-pocket spend for a particular service prior to receiving care. Patients are also able to save time by requesting appointments directly on their healthcare provider organization’s website using our technology.
•Flexible payment options. Our Platform provides patients with flexibility and choice in how they pay for healthcare services. Patients are able to pay upfront or set up an automated payment plan that adheres to the provider client’s financial policies. Patients can also choose to pay online on their provider’s website or place a card on file. Our Platform also removes the need for difficult payment-related conversations with staff and ensures a level of personal privacy throughout the transaction.
•Engagement in care. By leveraging the power of self-service and providing individualized, flexible intake solutions, we engage patients early in their healthcare journey and empower them to be more active in their care decisions.
Value proposition for healthcare provider organizations
•Simplify operations and enhance staff efficiency. We enable healthcare provider organizations to streamline operations through automated patient intake and payments that are integrated into existing workflows and PM and EHR systems. By automating the numerous tasks of the intake process, our provider clients have been able to save time on patient check-ins.
•Improve cash flow and profitability. We enable our provider clients to increase collections and reduce costs. Based on client feedback received and our internal analysis, we believe that our flexible patient payment options, including card on file, have led to an increase in time-of-service collections for the majority of our provider clients. Our automated eligibility and benefits verification solution also reduces the number of denied claims.
•Enhance clinical quality. We enable our provider clients to more efficiently and effectively capture the right clinical information to meet their clinical goals and align with quality reporting initiatives. Our logic-driven targeting and delivery of PROs and other questionnaires help providers identify and target at-risk patients in need of specific care and reduce errors by avoiding the need to manually gather the information.
•Improve patient experience. We simplify the patient intake process to drive higher patient satisfaction, retention and engagement. Our streamlined intake and payments offering provides a consumer-friendly experience and engages patients to take control of their care. Through our patient surveys, providers are able to conduct outreach to patients within 24 hours of visit and generate real-time feedback that informs and drives improvement efforts.
Value proposition for life sciences organizations
•Targeted, direct digital marketing. We provide life sciences companies with a channel to identify, reach, educate and communicate with patients when they are most receptive and actively seeking care. Our data-driven solutions provide custom, targeted patient outreach based on various clinical, environmental and social data, allowing our clients to engage patients with clinically relevant medical content to help facilitate conversations with their providers about treatment options.
•Improve brand conversion and adherence. Our data and analytics capabilities identify patient populations that align with our life sciences clients’ target audiences. Based on our analysis of client advertising campaigns
conducted by Crossix and another data analytics company, which we commissioned, we believe patients exposed to a brand campaign using the Phreesia Platform are more likely, on average, to have a prescription filled for that product than control patients. Integration with our point-of-care solutions, which engage our patients in their own care, increases incremental prescriptions with existing patients, driving an adherence benefit and strong return to our clients.
•Feedback from patient voice. Our Patient Insights solution provides a channel for our life sciences clients to deliver real-time, dynamic surveys to highly targeted patients and capture direct patient feedback.
Our competitive strengths
Market leadership. We believe the Phreesia Platform is the most comprehensive and scalable patient intake and payments solution in the market, placing us at the point of care and in the center of the patient-provider relationship. Phreesia is an industry leader in market share and user engagement, in over 1,600 healthcare provider organizations. We were named the top-ranked patient intake management vendor for 2019 and 2020 by the healthcare IT research and insights firm KLAS.
Scalable SaaS-based platform embedded in mission-critical daily workflows. Our Platform seamlessly integrates into our provider clients’ daily workflows with bi-directional integration into PM and EHR systems collectively representing the majority of the total PM and EHR market. These robust integrations provide real-time exchange of clinical, demographic and financial information. For example, customized consent forms and questionnaires are uploaded directly into a provider client’s PM or EHR system immediately upon completion, which reduces staff time spent on administrative tasks. Our feature-rich SaaS technology architecture is highly scalable across healthcare provider organizations of all sizes, from small independent practices to large health systems with multiple locations, enabling us to implement our solutions quickly and cost-effectively.
Integrated payment platform. The integration of payments within our patient intake platform creates a seamless experience for both patients and providers and results in increased payments for healthcare provider organizations and revenue for Phreesia. Compared with disparate payment platforms and manual reconciliation processes, the Phreesia Platform automatically posts payments in real-time to a provider client’s PM system, creating material time and cost efficiencies for our provider clients. Our revenue cycle solutions, such as card on file, online payments and payment plans, provide convenient payment options for patients, lower bad debt expense for provider clients and reduce payment-related tasks for their staff.
Significant and measurable return on investment. We actively measure and report performance metrics for our provider clients, demonstrating significant and sustainable return on investment in multiple impact areas, often as early as 30-60 days after launch. Example impact areas include: increased collections, expanding staff and provider capacity, optimizing profitability by reducing back-office billing and collection costs, improving patient experience through streamlined scheduling and check-in process and flexible payment options, and enhancing clinical care by creating time savings for staff and clinicians.
Proven ability to innovate and meet the evolving needs of our clients. We have demonstrated the ability to quickly and reliably incorporate new applications into the Phreesia Platform to address the myriad of challenges facing healthcare provider organizations and we continue to evaluate the most impactful innovations that will drive a better healthcare experience. Our solution was initially designed as a patient check-in and messaging tool, but it has rapidly evolved into a comprehensive patient intake and payment platform designed to keep pace with evolving demand from patients and providers. We have introduced multiple new applications in the last three years, including Phreesia Mobile, which allows patients to check in conveniently from their own device and has significantly increased patient utilization and overall patient engagement, and Payment Assurance, which eliminates many of the manual tasks required to bill a patient. Additionally, Phreesia has been committed to supporting our provider organization clients as they respond to coronavirus, or COVID-19, by helping them stay safe, stay open and continue to see patients. To that end, we have released a number of new product offerings and features to align with our clients’ evolving needs and workflows, including tools for screening patients, supporting drive-through appointments and other no-waiting-room models, communicating with patients and promoting them to schedule appointments, collecting patient information during telehealth visits and reducing patient-staff contact during in-person visits.
Attractive, highly scalable financial model. Our revenue is largely derived from recurring monthly subscriptions and re-occurring payment processing fees, which should increase with growth of our client base and the ongoing shift of healthcare costs to patients. We have successfully expanded our products sold to existing clients by adding incremental providers and offering additional solutions to these clients. This has led to a 21% increase in average
revenue per provider client from fiscal 2019 to fiscal 2020. As our provider clients continue to add more providers to our Platform, we benefit from increased scale and strong unit economics.
Founder-led and deeply experienced management team with strong culture. Our founders, Chaim Indig and Evan Roberts, are pioneers in patient intake who have led our company through consistent and rapid growth over the past 14 years. Our senior leadership team has extensive healthcare, technology and payment knowledge and expertise, and an average 10-year tenure with Phreesia. Additionally, our dedicated sales, implementation, support and development teams also have significant healthcare, technology and payment experience and are a key competitive advantage to our success in the marketplace.
Attracting and retaining top talent is a high priority for us. Our strong company culture and investment in the long-term career growth for our people is evidenced by their long tenure with our organization. We believe our success is due in large part to the continued engagement of our talented and committed team. Modern Healthcare magazine recognized Phreesia as one of the “Best Places to Work in Healthcare” for three consecutive years, optimally positioning us to continue to attract top healthcare and technology talent. Additionally, we have supported our employees’ needs during the COVID-19 pandemic, including providing the tools needed to work from home and offering flexibility for those who have children at home.
Our growth strategies
The success of our business depends on acquiring new provider clients and increasing utilization among our existing provider clients, which in turn drives growth across our Platform and solutions. We believe we are well-positioned to benefit from a number of prevailing industry tailwinds across patient intake, patient payments and life sciences marketing. We intend to continue to proactively grow the business through the following strategies:
Expanding our Platform to new healthcare provider organizations
The market for a technology-powered intake and payment platform in the U.S. healthcare industry is early, large and underserved, and we believe we have a substantial opportunity to grow our client base and market share. With the ability to support over 25 different medical specialties and existing partnerships with leading PM and EHR providers, the Phreesia Platform is able to serve a large portion of the U.S. ambulatory and acute care market. The Phreesia Platform is currently used by a small percentage of ambulatory care organizations, and we plan to continue to expand our direct sales force to win new clients with a focus on larger ambulatory provider groups across specialties. In fiscal 2019, we also entered into the U.S acute care market and expect this to be a driver of meaningful future growth.
Deepening our relationship with existing provider clients
We generate recurring fees from our provider clients based on the number of providers who utilize the Phreesia Platform plus subscriptions for any add-on applications. As our provider clients realize the value of the Phreesia Platform, they typically purchase additional subscriptions for their providers. Our sales strategy is focused on expanding our revenue per provider client and we believe there is a significant opportunity to sell new applications as well as add additional provider clients.
Continuing to innovate and leverage our Platform to optimize healthcare delivery
We believe the depth, scalability and robust capabilities of our Phreesia Platform allow us to address key challenges facing healthcare delivery. As an innovative leader in the patient intake market, we intend to continue to invest in new value-added offerings for our clients. We have a well-defined technology roadmap to introduce new features and functionality to the Phreesia Platform, such as our appointments and cost estimation add-on applications. We intend to leverage our patient database and patient engagement capability to eliminate gaps in care and increase care coordination among all key healthcare constituents. By expanding and continuously enhancing the Phreesia Platform, we believe we can drive incremental revenue from existing clients as well as broaden the appeal of our solutions to potential new clients.
Pursuing opportunistic strategic investments, partnerships and acquisitions
Our strong growth has been completely organic as we have added provider clients and life sciences companies to our Platform while also expanding the solutions we offer those clients. Through our history, we have effectively partnered with leading PM and EHR solution providers, and will continue to evaluate strategic and innovative investments and partnerships to accelerate growth. We believe we are now at an appropriate stage and level of scale where we can consider acquisitions. We completed our first acquisition in December 2018 when we acquired Vital Score, Inc., which expanded our clinical and patient activation offerings and deepened our capabilities in motivational science.
Enhancing our margins through continued strategic growth
Our business model is based on developing and deploying new, value-added applications for our clients that increase revenue and enhance our attractive client unit economics. We have invested significantly to create a comprehensive, scalable technology platform that allows us to gain operating leverage and enhance margins. We expect to increase profitability and margins by adding larger new clients to our Platform and by expanding our existing clients with minimal incremental investments in our Platform. Moreover, we continually aim to improve the effectiveness and efficiency of our Platform.
Our products and services
Our Platform and suite of solutions are specifically designed to cater to the needs of patients, providers and life sciences companies while improving healthcare engagement.
Registration
Our Registration applications facilitate mobile and on-site check-in, create a more complete patient record and increase patient convenience and satisfaction. Our Registration solutions include:
•Phreesia mobile. Our mobile intake platform allows patients to check in securely and conveniently on their computer or mobile device, either prior to their visit or when they arrive at the office. Patients can also update their clinical and demographic information, take a photo to store in their patient record, capture images of their driver’s license and insurance card, sign forms and policies and pay copays and outstanding balances—all from the privacy and ease of their own device.
•PhreesiaPad. Our proprietary, secure tablet ensures ease of use for on-site check-ins. It allows patients to update their information, take a photo to store in their patient record, capture images of their driver’s license and insurance card, sign consent forms and pay copays and outstanding balances privately and securely. These tablets are durable, secure and easy for patients of all ages to use.
•Phreesia arrivals stations. Our Arrivals Stations, designed as a complement to Phreesia Mobile, allow patients to confirm their information and make payments while offering frequently returning or mobile patients a quick and easy self-service intake option.
•Phreesia dashboard. Our dashboard acts as the “command center for the waiting room” and allows staff to efficiently monitor the intake process, access relevant patient information and manage registration exceptions. Specific capabilities include: eligibility and benefits verification, e-cashiering, card processing at the time of service, payment plans, card on file, reconciliation reporting, analytics on patient collections and transaction and batch reporting.
•Specialty-specific intake workflows. Our workflows leverage our proprietary logic to guide patients through a tailored list of questions, allowing them to efficiently enter and verify their demographics, insurance data and clinical information.
•Consent management. Our automated consent forms streamline the process of collecting consents by ensuring that each patient receives the right forms. These forms can be customized by appointment type and can capture electronic signatures and send required forms directly to the PM or EHR system.
Appointments
Our Appointments applications allow for convenient online appointment requests for patients, appointment tracking and appointment management in one place, and provide insight into past and upcoming appointments. Our Appointments solutions include:
•Online appointments. Patients receive 24/7 access to book appointments on a practice’s website. Appointment requests populate into the Phreesia Appointments Hub for staff to track and schedule. Patients can confirm their appointment time and date via automated text or email.
•Referrals. Phreesia Referrals tracks all incoming referrals in a centralized list and allows referring providers to send and check the status of each request.
•Phreesia appointments Hub. Our Appointments Hub centralizes and tracks all incoming appointment requests, verifies patient insurance and allows staff to manage appointments and follow-up visits across multiple locations. The Phreesia Appointments Hub can also schedule appointments directly into select PM systems.
Revenue cycle
We are able to improve key revenue cycle metrics with our payment solutions, increasing time-of-service and post-visit collections as well as improving patient convenience with online payments and card on file. Our Revenue Cycle solutions include:
•Point-of-sale payments. Our point-of-sale payments solution offers self-service options on Phreesia Mobile, on the PhreesiaPad or at an Arrivals Station. Provider staff can also process time-of-service or post-explanation of benefits payments on the Phreesia Dashboard. We are able to replace or support a client’s existing payment processor with a fast and secure way to process transactions, as we accept all major credit cards (Visa, MasterCard, American Express and Discover). Additionally, we are Level 1 PCI-compliant and minimize PCI scope in order to prevent significant delays in compliance efforts.
•Eligibility and benefits verification. Our automated eligibility and benefits application streamlines verification, reduces staff’s manual workload and alerts them when attention is needed. We can run eligibility and benefits checks in advance so our clients know their patients’ primary and secondary insurance before their visit. We have achieved CAQH CORE Phase 1 Certification for seamless, secure healthcare administrative data exchange.
•E-Cashiering. We are able to track cash, check and card payments using one tool across all users and office locations. Our reports with bi-directional integration with PM systems simplify end-of-day reconciliation and payment posting.
•Payment plans. Our provider clients can give patients the option to set up private, automated payment plans when they check in, or have the staff create payment plans for them on the Phreesia Dashboard. Each plan is configured according to the healthcare provider organization’s financial policies and managed automatically.
•Online payments. Our online payments application allows practices to add a custom payment button to their website or send email reminders that direct patients to an online payment page.
•Payment assurance. Our patients may sign a financial policy that gives authorization to store their payment card on a secure platform, thus automatically collecting payments once claims are adjudicated.
•Cost estimation. This recently developed application searches patients’ upcoming scheduled appointments and automatically calculates their estimated payment, which staff can manage and track.
Clinical support
We are committed to delivering the appropriate PROs and assessments to practices as well as helping them efficiently identify at-risk patients and target them for follow-up care. Our Clinical Support solutions include:
•Care pathways. Our Care Pathways applications provide the necessary tools to identify and treat patients for specific health risks. From orthopedics and gastroenterology to otolaryngology, or ENT, and urology, our targeted clinical assessments screen patients for common morbidities associated with each specialty area.
•Wellness for primary care. Our Wellness for Primary Care application supports primary care providers as they take on increasing responsibility for their patients’ mental health needs. It identifies and screens patients for common behavioral and mental health conditions, including depression, anxiety and substance abuse, using questionnaires such as PHQ-2 and PHQ-9.
•Healthy child for pediatrics. We generate validated PRO data with our Healthy Child application for developmental conditions such as ADHD and autism, as well as behavioral health and wellness data for depression and the flu.
•Women’s wellness. Our Women’s Wellness application, which is used in OB/GYN practices, administers clinical questionnaires and gathers PRO data about depression, most recent mammograms and other relevant questions.
Patient activation
By providing patients with surveys, targeted messages and branded patient announcements before, during and after their visits, we are able to drive patient engagement and awareness of important practice information and available treatments and services. Our Patient Activation solutions include:
•Post-visit patient surveys. Our surveys are designed to provide clients with a better understanding of their patients’ experiences as well as insights to drive improvements. The surveys align with industry standards and capture key satisfaction metrics, such as Net Promoter Score.
•Health campaigns. Our application allows healthcare provider organizations to send targeted messages to specific patients, educating them about the care they need and prompting them to schedule important appointments. Patients can easily self-schedule or request appropriate appointments, such as Medicare annual wellness visits or diabetic eye exams.
•Social determinants of health. We allow healthcare provider organizations to ask patients privately about their access to healthy food, safe housing and other social determinants that can have a critical impact on their health. The gathered information is automatically integrated within PM and EHR systems, giving providers key data to better understand patients and connect them to needed services.
•Service promotions. Our clients can use our Platform to promote a health fair, in-house pharmacy, on-site physical therapy or other ancillary services.
•Announcements. We are able to send patients branded emails to share important announcements such as new locations, office closures and added services.
•Research. Our application allows clients to deliver targeted questionnaires to patients who may be interested in trials and research studies, generate summary reports and follow up with those who would like to participate.
Analytics and reports
Our robust analytics suite provides real-time operational, financial and clinical insights across our portfolio of products and applications. Example analytics and reports capabilities within our products include:
•Registration. Our Platform monitors patient check-in volumes by location and staff member, usage rates for mobile pre-registration and on-site check-ins, the average time it takes for a patient to complete check-in and patient satisfaction levels, among a variety of other registration features.
•Appointments. Our Platform calculates the volume of incoming appointment requests, tracks the time it takes for patients to schedule appointments and provides insights into top-referring providers.
•Revenue cycle. Our Platform monitors payments across a healthcare provider organization and reconciles all payments daily. Our Platform also tracks payment volumes by location, batch, user, payment method and type of charge.
•Clinical support. Our Platform generates reports that analyze PROs, shows the percentage of patients who request follow-up care and captures patient information that helps our provider clients and their patients meet quality reporting goals.
•Patient activation. Our Platform analyzes the impact of patient communications and preventive health initiatives. Furthermore, it views the number of patients who have seen messages, tracks email and text-message opens and monitors opt-in rates.
•Patient surveys. Our Platform tracks patient answers by location or provider, benchmarks against similar practices and calculates net promoter scores, which is a popular management tool used to gauge the loyalty of patients to their providers.
•Data extracts. Our Platform sends a secure, automated daily feed of patient data to a data warehouse or data lake, thereby eliminating the need to download and upload reports.
•Custom report capability. Our Platform produces custom reports for clients that feature client data such as utilization, social determinants of health, clinical quality and metrics.
COVID-19 Product Offerings
Our COVID-19 product applications and features are designed to align with our provider clients’ evolving needs and workflows and help them to stay safe, stay open and continue to see patients.
•COVID-19 Screening Module. Our module screens patients for self-reported COVID-19 risk factors before their appointment or upon arrival, and alerts both patients and staff to take appropriate action based on patients' responses. The screening module is based on Center for Disease Control guidelines and is updated regularly as those guidelines change.
•Patient Chat. Our Patient Chat product allows provider clients to send text messages to individual patients about their in-person or virtual visits. This capability helps to reduce face-to-face interactions, decrease phone-call volume and improve patient communication.
•Intake for Telehealth. Our Intake for Telehealth offering supports provider organizations as they shift visits to telehealth by allowing them to perform all the necessary intake tasks for each virtual visit, including
gathering consents, at scale. Intake for Telehealth also provides patients with information about how their telehealth visit will work.
•Zero-Contact Intake. Our Zero-Contact Intake offering enables clients to reduce contact between patients and staff during in-person visits. The product allows medical practices, emergency departments, urgent-care clinics and other care settings to send a link to patients so they can complete their intake from their home, their car or another no-waiting-room workflow. Staff can manage the intake process from a remote location without needing to handle patients’ paperwork, ID cards, insurance cards or credit cards.
Life sciences
Our partnerships with life sciences companies allow us to activate and engage patients by presenting targeted messages to appropriate patient populations, driving improved brand conversion and better patient understanding of behavior modification.
•Patient connect. Our Patient Connect feature enables clients to engage with relevant patients who voluntarily opt in and deliver pertinent, targeted messages at the point at which they are actively seeking care. Our tools raise awareness and engagement with patients and help them to start the right medical conversation with their physicians.
•Patient insights. We leverage our Platform to conduct primary research, gather PROs, understand patient sentiments and discover unmet patient needs, which aid life sciences companies in incorporating patient insights in their work.
•Analytics and predictive modeling. We partner with life sciences companies to develop analytic products to help predict outcomes, identify at-risk or undiagnosed patients and develop clinical decision support tools that may help providers make evidence-based decisions regarding treatment and diagnosis.
Our technology
We have developed our proprietary SaaS-based technology platform with a focus on delivering reliability, performance, security and privacy. The Phreesia Platform operates as a single, unified, multi-tenant platform that has demonstrated scalability and seamless integration within the operating infrastructure of our provider clients. Our core technology capabilities include:
•Robust integration. We integrate our technology into PMs, EHRs and ambulatory and acute system workflows for over 1,600 healthcare provider organizations. Data captured from the patient or generated by the use of our Platform automatically integrates into the PM and EHR systems of provider clients. We currently partner with leading PM and EHR providers that collectively represent the majority of the total PM and EHR market. Partners and provider clients can leverage our expanding APIs to embed the functionality of the Phreesia Platform for their patients, while controlling the look and feel.
•Embedded payments. The payment processing features of our Platform have been designed to operate seamlessly within the workflows of our provider clients, and our revenue cycle solutions can connect directly to payors, to multiple clearinghouses and directly with PM, EHR and other systems.
•Scalable at cost. We have developed a robust and scalable SaaS-based platform that allows us to quickly iterate on existing technology and develop new solutions quickly and efficiently to meet the needs of our clients. Our unique architecture also allows new integrated applications to be quickly deployed to clients and allows real-time integration without expensive and difficult-to-manage VPN tunnels. This is particularly important in a regulatory and industry environment that continues to evolve.
•Consumer-oriented. Through technology innovation, we have continued to ensure our products and services evolve to meet growing and increasingly consumer-centric demands.
•Reliable. Our technology is engineered to provide high reliability and availability. The Phreesia Platform performs hundreds of thousands of transactions, including eligibility and benefits verifications, payment card processing and email and text messaging, quickly and reliably at a low cost every day.
•Secure and private. We securely manage billions of data points for millions of patients using multiple devices. Maintaining the integrity of our Platform is critical to our business, our clients and the patients they treat. We routinely audit and review our security program.
Privacy and security
Privacy and security are our top priorities. We maintain a comprehensive security program designed to help safeguard the confidentiality, integrity and availability of our clients’ data, which includes both organizational and technical control measures and the security and privacy of our Platform. We have a system in place to monitor the safety of patient information as well as procedures designed to take immediate action.
We operate a single, unified, multi-tenant platform that offers reliability, performance, security and privacy for our clients. Our technology reliably integrates in thousands of client systems, and we have the infrastructure in place with two co-located data centers to handle mass amounts of sensitive patient information.
We use security auditors and industry-leading vendors, such as Sikich, Drummond, Bluefin and CORE, to ensure we have the controls and procedures in place to protect our clients’ sensitive information. We have the industry’s most well-known certifications, including PCI-DSS Level 1 Service Provider, Security Organization Control 2, or SOC 2, and PCI Point-to-Point Encryption, and are currently seeking a required biannual recertification from HITRUST. As a PCI-DSS Level 1 Service Provider, we are committed to upholding industry security standards to cardholder data. The Level 1 PCI compliance allows us to minimize clients’ PCI scope.
Our competitive landscape
We compete in a dynamic patient intake market with direct and indirect competitors that maintain varying degrees of resources and capabilities. We believe many direct competitors are focused on the basic aspects of electronic patient intake and are only starting to expand into the multiple adjacencies beyond patient registration. Some of our existing and potential partners, particularly EHR providers, have developed their own patient intake solutions and have become direct competitors. However, most of these offerings are limited in scope. Furthermore, the Phreesia Platform is integrated with a majority of the leading EHR systems, and we have put in place partnerships designed for shared financial success. KLAS, an independent healthcare information technology research firm, evaluates Phreesia against many of these direct competitors and named Phreesia the top-ranked patient intake management vendor for both 2019 and 2020, based on direct feedback from healthcare organizations across the country.
We believe companies in the patient intake market compete on the basis of several factors, including:
•price;
•breadth, depth, quality and reliability of product and service offerings;
•ease of use;
•ability to drive tangible return on investment;
•client-focused implementation services and training programs;
•healthcare domain expertise;
•patient clinical content offerings;
•client support and client services; and
•ability to integrate with all of a client’s existing systems, including EHR and/or PM systems
Life sciences marketing is highly competitive and rapidly evolving and consists of both traditional media platforms (e.g. television and print media) as well as more modern web-based and application-based platforms that provide direct-to-consumer marketing for the life sciences industries. Our targeted marketing solutions are unique and compete at the point of care as well as pre- and post-visit across an array of digital devices backed by our commitment to transparency and third-party auditing. We compete on the basis of several factors, including price, quality, transparency and the ability to demonstrate meaningful return on investment.
Sales and marketing
We market and sell our products and services to healthcare provider organizations throughout the United States using a go-to-market and direct sales organization comprised of highly trained and technical team members that are segmented into several highly targeted and coordinated teams. Our demand generation team develops content and identifies prospects that our sales development team research and qualify to generate high-grade, actionable sales programs. We utilize both an inside and outside direct sales force to execute on the qualified sales programs, partnering with client services to ensure the prospect is educated on the breadth of Phreesia’s capabilities and demonstrable value proposition. Our direct sales force is organized according to the size and needs of potential
clients, leveraging their deep experience to deliver a solution tailor-fit to the size and specialty of each practice. Through this targeted, coordinated approach, we maximize resource allocation and allow our direct sales team to concentrate on execution.
We also sell products and services to pharmaceutical brands and advertising agencies.
Subscriber services and support
Our operations and support organizations differentiate and enhance our clients’ and patients’ experience. Our teams have significant experience integrating with various EHR and PM systems, which can help take our provider clients from sale to go-live much quicker than other platforms. Our client-focused operations are structured to provide a seamless process.
•Client services. Our dedicated Client Services team is responsible for pre-sales engagement, new client onboarding and implementation, existing client implementation and on-site optimization. Our client services are organized by market specialization, ensuring that our teams provide deep expertise in the markets they support. In addition, our implementation teams have extensive knowledge of the PM and EHR systems that our provider clients use. Through our designed implementation approach and expertise, we are able to take provider clients live efficiently and quickly. Our Client Services teams are also able to demonstrate early return on investment in land-and-expand deals, enabling us to roll out to additional locations.
•Client success. Our success is driven by our ability to retain and expand relationships with existing and new clients. Our dedicated Client Success team is focused on the retention of our client base, coordinating directly with Sales and Client Services to meet this objective. Furthermore, we are continuously expanding our business by offering additional products to our clients and driving adoption and utilization.
•Client support. We provide technical support to our provider clients through our dedicated Client Support team to directly resolve any product and/or service issues. We serve as the single starting point for client issues and offer a collaborative support model in contrast to tiered support models. This model has proven to help large companies continue to scale, while leveraging the benefits of smaller operations.
We are committed to providing top-quality services and support, and we have been recognized for high performance in integration, implementation support and overall client satisfaction. In a 2020 industry survey report from the research firm KLAS, Phreesia earned the highest scores for service, satisfaction, and likelihood of buying again.
Commercial partnership agreements
athena
On January 10, 2014, we entered into a one-year partner agreement, which we refer to as the Partner Agreement, with athenahealth, Inc., or athena, a provider of electronic health record services, medical practice management services, patient communications services, care coordination services, data integration, insight and action services and medical applications. Pursuant to the Partner Agreement, we provide our patient self-check-in solutions to athena’s customers, and athena provides a license to use an electronic interface to permit data exchanges between athena’s platform and our Platform. In connection with the Partner Agreement, on April 11, 2014, we entered into revenue share addendums, pursuant to which we make quarterly revenue share payments to athena equal to a percentage of revenue received from certain athena clients. We also participate in various business activities for athena that may qualify us for changes in revenue share amounts. The Partner Agreement automatically renews for consecutive one-year terms beginning on January 10, 2015, unless earlier terminated. Either party may terminate the Partner Agreement for convenience upon 30 days’ prior written notice. The Partner Agreement is also subject to early termination upon an uncured material breach by the other party, or due to the other party’s bankruptcy, insolvency or dissolution.
Allscripts
On December 10, 2015, we entered into a five-year strategic alliance agreement, which we refer to as the Strategic Alliance Agreement, with Allscripts Healthcare, LLC, or Allscripts, a provider of electronic health record software solutions, clinical and revenue cycle software and information solutions for provider groups. Pursuant to the Strategic Alliance Agreement, we facilitate integration of our Platform offerings with Allscripts’ systems, and Allscripts markets and sublicenses those integrated offerings, including our payment processing services, eligibility and benefits services and patient intake management offerings, to prospective and existing Allscripts’ customers. Under
the terms of the Strategic Alliance Agreement, we pay Allscripts a percentage of revenues generated through our payment processing offerings, as well as set fees on sales of our patient intake management offerings to Allscripts customers, and Allscripts pays us subscription fees for our Platform offerings and related professional services fees. The Strategic Alliance Agreement automatically renews for successive one-year terms beginning on December 10, 2020, unless earlier terminated. Allscripts may terminate the Strategic Alliance Agreement for convenience upon one year’s prior written notice to us, or immediately upon written notice if we are determined ineligible to participate in federal healthcare programs or upon certain change of control transactions. Additionally, either party may terminate the Strategic Alliance Agreement upon an uncured material breach by the other party or upon the other party’s insolvency.
Healthcare laws and regulations
Our business is subject to extensive, complex and rapidly changing federal and state laws and regulations. Various federal and state agencies have discretion to issue regulations and interpret and enforce healthcare laws. While we believe we comply in all material respects with applicable healthcare laws and regulations, these regulations can vary significantly from jurisdiction to jurisdiction, and interpretation and enforcement of existing laws and regulations may change periodically. Moreover, in many jurisdictions in which we operate, neither our current nor our anticipated business model has been the subject of judicial or administrative interpretation. We cannot be assured that a review of our business by courts or regulatory authorities will not result in determinations that could adversely affect our operations or that the healthcare regulatory environment will not change in a way that restricts our operations. Federal and state legislatures also may enact various legislative proposals that could materially impact certain aspects of our business. In addition, our consumer transactions business is subject to certain financial services laws, regulations and rules, such as the Payment Card Industry Data Security Standards.
U.S. state and federal health information privacy and security laws
There are numerous U.S. federal and state laws and regulations related to the privacy and security of personally identifiable information, including health information. In particular, HIPAA establishes privacy and security standards that limit the use and disclosure of protected health information, referred to as PHI, and require the implementation of administrative, physical, and technical safeguards to ensure the confidentiality, integrity and availability of individually identifiable health information in electronic form. Our provider customers are regulated as covered entities under HIPAA. As a service provider who creates, receives, maintains or transmits PHI on behalf of our covered entity customers, Phreesia is a “business associate” as defined under HIPAA. Since the effective date of the HIPAA Omnibus Final Rule on September 23, 2013, certain HIPAA requirements are also directly applicable to business associates.
Violations of HIPAA may result in civil and criminal penalties and a single breach incident can result in violations of multiple standards. We must also comply with HIPAA’s breach notification rule. Under the breach notification rule, business associates must notify covered entities of a breach, and those covered entities must notify affected individuals without unreasonable delay in the case of a breach of unsecured PHI, which may compromise the privacy, security or integrity of the PHI. In addition, notification must be provided to the U.S. Department of Health and Human Services, or HHS, and the local media in cases where a breach affects more than 500 individuals. Breaches affecting fewer than 500 individuals must be reported to HHS on an annual basis. In the event of a breach, our covered entity customers may require we provide assistance in the breach notification process and may seek indemnification and other contractual remedies.
State attorneys general also have the right to prosecute HIPAA violations committed against residents of their states. While HIPAA does not create a private right of action that would allow individuals to sue in civil court for a HIPAA violation, its standards have been used as the basis for the duty of care in state civil suits, such as those for negligence or recklessness in misusing personal information. In addition, HIPAA mandates that HHS conduct periodic compliance audits of HIPAA covered entities and their business associates for compliance. It also tasks HHS with establishing a methodology whereby harmed individuals who were the victims of breaches of unsecured PHI may receive a percentage of the Civil Monetary Penalty fine paid by the violator. In light of the HIPAA Omnibus Final Rule, recent enforcement activity, and statements from HHS, we expect increased federal and state HIPAA privacy and security enforcement efforts.
Many states in which we operate and in which our patients reside also have laws that protect the privacy and security of sensitive and personal information, including health information. These laws may be similar to or even more protective than HIPAA and other federal privacy laws. For example, the laws of the State of California, in which we operate, are more restrictive than HIPAA. California recently enacted and has proposed companion regulations to the California Consumer Privacy Act, or CCPA, which went into effect January 1, 2020. The CCPA creates new individual privacy rights for California consumers (as defined in the law) and places increased privacy and security
obligations on entities handling personal data of consumers or households. The CCPA requires covered companies to provide certain disclosures to consumers about its data collection, use and sharing practices, and to provide affected California residents with ways to opt-out of certain sales or transfers of personal information. As of March 28, the California State Attorney General has proposed varying versions of companion draft regulations which are not yet finalized. Despite the delay in adopting regulations, the California State Attorney General will commence enforcement actions against violators beginning July 1, 2020. While any information we maintain in our role as a business associate may be exempt from the CCPA, other records and information we maintain on our customers may be subject to the CCPA. Where state laws are more protective than HIPAA, we must comply with the state laws we are subject to, in addition to HIPAA. In certain cases, it may be necessary to modify our planned operations and procedures to comply with these more stringent state laws. Not only may some of these state laws impose fines and penalties upon violators, but also some, unlike HIPAA, may afford private rights of action to individuals who believe their personal information has been misused. In addition, state laws are changing rapidly, and there is discussion of a new federal privacy law or federal breach notification law, to which we may be subject.
In addition to HIPAA, state health information privacy and state health information privacy laws, we may be subject to other state and federal privacy laws, including laws that prohibit unfair privacy and security practices and deceptive statements about privacy and security and laws that place specific requirements on certain types of activities, such as data security and texting.
In recent years, there have been a number of well publicized data breaches involving the improper use and disclosure of personally identifiable information and PHI. Many states have responded to these incidents by enacting laws requiring holders of personal information to maintain safeguards and to take certain actions in response to a data breach, such as providing prompt notification of the breach to affected individuals and state officials. In addition, under HIPAA and pursuant to the related contracts that we enter into with our business associates, we must report breaches of unsecured PHI to our contractual partners following discovery of the breach. Notification must also be made in certain circumstances to affected individuals, federal authorities and others.
Telephone Consumer Protection Act (TCPA)
The Telephone Consumer Protection Act, or TCPA, is a federal statute that protects consumers from unwanted telephone calls and faxes. Since its inception, the TCPA’s purview has extended to text messages sent to consumers. Our services that leverage text messaging are subject to the TCPA and its regulations and agency guidance.
U.S. corporate practice of medicine; fee splitting
Approximately 30 states have enacted laws prohibiting business corporations, such as Phreesia, from practicing medicine and employing or engaging physicians to practice medicine, generally referred to as the prohibition against the corporate practice of medicine. These laws, which vary among the states that have enacted them, are designed to prevent interference in the medical decision-making process by anyone who is not a licensed physician. We frequently enter into services contracts with healthcare provider organizations pursuant to which we provide them with revenue cycle management, insurance enrollment verification, patient intake, scheduling, appointment reminders and a range of other services. These contractual relationships are subject to various state laws, including those of New York, Texas and California, that prohibit fee splitting or the practice of medicine by lay entities or persons and are intended to prevent unlicensed persons from interfering with or influencing the physician’s professional judgment. In addition, various state laws also generally prohibit the sharing of professional services income with nonprofessional or business interests. Activities other than those directly related to the delivery of healthcare may be considered an element of the practice of medicine in many states. Under the corporate practice of medicine restrictions of certain states, decisions and activities such as scheduling, contracting, setting rates, the provision of medical equipment and the hiring and management of clinical personnel may implicate the restrictions on the corporate practice of medicine.
Some of these requirements may apply to us even if we do not have a physical presence in the state, based solely on our agreements with providers licensed in the state. However, regulatory authorities or other parties, including our providers, may assert that we are engaged in the corporate practice of medicine or that our contractual arrangements with our provider clients constitute unlawful fee splitting. In this event, failure to comply could lead to adverse judicial or administrative action against us and/or our provider clients, civil or criminal penalties, receipt of cease and desist orders from state regulators, loss of provider licenses, the need to make changes to the terms of engagement of our provider clients that interfere with our business and other materially adverse consequences.
U.S. federal and state fraud and abuse laws
Federal Stark Law
We may be subject to the federal self-referral prohibitions, commonly known as the Stark Law. Where applicable, this law prohibits a physician from referring Medicare patients to an entity providing “designated health services” if the physician or a member of such physician’s immediate family has a “financial relationship” with the entity, unless an exception applies. The penalties for violating the Stark Law include the denial of payment for services ordered in violation of the statute, mandatory refunds of any sums paid for such services, civil penalties for each violation and twice the dollar value of each such service and possible exclusion from future participation in the federally funded healthcare programs. A person who engages in a scheme to circumvent the Stark Law’s prohibitions may be fined for each applicable arrangement or scheme. The Stark Law is a strict liability statute, which means proof of specific intent to violate the law is not required. In addition, the government and some courts have taken the position that claims presented in violation of the various statutes, including the Stark Law, can be considered a violation of the federal False Claims Act (described below) based on the contention that a provider impliedly certifies compliance with all applicable laws, regulations and other rules when submitting claims for reimbursement. A determination of liability under the Stark Law could have a material adverse effect on our business, financial condition and results of operations.
Federal Anti-Kickback Statute
We are also subject to the federal Anti-Kickback Statute. The Anti-Kickback Statute is broadly worded and prohibits the knowing and willful offer, payment, solicitation or receipt of any form of remuneration in return for, or to induce, (i) the referral of a person covered by Medicare, Medicaid or other governmental programs, (ii) the furnishing or arranging for the furnishing of items or services reimbursable under Medicare, Medicaid or other governmental programs or (iii) the purchasing, leasing, ordering, arranging, or recommending the purchasing, leasing or ordering of any item or service reimbursable under Medicare, Medicaid or other governmental programs. Certain federal courts have held that the Anti-Kickback Statute can be violated if “one purpose” of a payment is to induce referrals. In addition, a person or entity does not need to have actual knowledge of this statute or specific intent to violate it to have committed a violation, making it easier for the government to prove that a defendant had the requisite state of mind or “scienter” required for a violation. Moreover, the government may assert that a claim including items or services resulting from a violation of the Anti-Kickback Statute constitutes a false or fraudulent claim for purposes of the False Claims Act, as discussed below. Violations of the Anti-Kickback Statute can result in exclusion from Medicare, Medicaid or other governmental programs as well as civil and criminal penalties, including fines and penalties up to three times the amount of the unlawful remuneration. Imposition of any of these penalties could have a material adverse effect on our business, financial condition and results of operations. In addition to a few statutory exceptions, the U.S. Department of Health and Human Services Office of Inspector General, or OIG, has published safe-harbor regulations that outline categories of activities that are deemed protected from prosecution under the Anti-Kickback Statute provided all applicable criteria are met. The failure of a financial relationship to meet all of the applicable safe harbor criteria does not necessarily mean that the particular arrangement violates the Anti-Kickback Statute. However, conduct and business arrangements that do not fully satisfy each applicable safe harbor may result in increased scrutiny by government enforcement authorities, such as the OIG. On October 9, 2019, OIG and the Centers for Medicare and Medicaid Services, or CMS, proposed further modifications to the federal Anti-Kickback safe harbor protections for certain coordinated care and value-based arrangements among clinicians, providers and others. CMS also proposed multiple new exceptions and revisions to current exceptions for value-based arrangements under the Stark Law. It is unknown at this time which, if any, of these modifications will go into effect and what effect it will have on our business.
False Claims Act
Both federal and state government agencies have continued civil and criminal enforcement efforts as part of numerous ongoing investigations of healthcare companies and their executives and managers. Although there are a number of civil and criminal statutes that can be applied to healthcare providers and their service providers, a significant number of these investigations involve the federal False Claims Act. These investigations can be initiated not only by the government but also by a private party asserting direct knowledge of fraud. These “qui tam” whistleblower lawsuits may be initiated against any person or entity alleging such person or entity has knowingly or recklessly presented, or caused to be presented, a false or fraudulent request for payment from the federal government, or has made a false statement or used a false record to get a claim approved. In addition, the improper retention of an overpayment for 60 days or more is also a basis for a False Claim Act action, even if the claim was originally submitted appropriately. Penalties for False Claims Act violations include fines for each false claim, plus up to three times the amount of damages sustained by the federal government. A False Claims Act violation may provide the basis for exclusion from the federally funded healthcare programs. In addition, some states have adopted similar fraud, whistleblower and false claims provisions.
State fraud and abuse laws
Several states in which we operate have also adopted similar fraud and abuse laws as described above. The scope of these laws and the interpretations of them vary from state to state and are enforced by state courts and
regulatory authorities, each with broad discretion. Some state fraud and abuse laws apply to items or services reimbursed by any third party payor, including commercial insurers, not just those reimbursed by a federally funded healthcare program. A determination of liability under such state fraud and abuse laws could result in fines and penalties and restrictions on our ability to operate in these jurisdictions.
Other healthcare laws
HIPAA established several separate criminal penalties for making false or fraudulent claims to insurance companies and other non-governmental payors of healthcare services. Under HIPAA, these two additional federal crimes are: “Healthcare Fraud” and “False Statements Relating to Healthcare Matters.” The Healthcare Fraud statute prohibits knowingly and recklessly executing a scheme or artifice to defraud any healthcare benefit program, including private payors. A violation of this statute is a felony and may result in fines, imprisonment or exclusion from government sponsored programs. The False Statements Relating to Healthcare Matters statute prohibits knowingly and willfully falsifying, concealing or covering up a material fact by any trick, scheme or device or making any materially false, fictitious or fraudulent statement in connection with the delivery of or payment for healthcare benefits, items or services. A violation of this statute is a felony and may result in fines or imprisonment. This statute could be used by the government to assert criminal liability if a healthcare provider knowingly fails to refund an overpayment. These provisions are intended to punish some of the same conduct in the submission of claims to private payors as the federal False Claims Act covers in connection with governmental health programs.
In addition, the Civil Monetary Penalties Law imposes civil administrative sanctions for, among other violations, inappropriate billing of services to federally funded healthcare programs and employing or contracting with individuals or entities who are excluded from participation in federally funded healthcare programs. Moreover, a person who offers or transfers to a Medicare or Medicaid beneficiary any remuneration, including waivers of co-payments and deductible amounts (or any part thereof), that the person knows or should know is likely to influence the beneficiary’s selection of a particular provider, practitioner or supplier of Medicare or Medicaid payable items or services may be liable for civil monetary penalties for each wrongful act. Moreover, in certain cases, providers who routinely waive copayments and deductibles for Medicare and Medicaid beneficiaries can also be held liable under the Anti-Kickback Statute and civil False Claims Act, which can impose additional penalties associated with the wrongful act. One of the statutory exceptions to the prohibition is non routine, unadvertised waivers of copayments or deductible amounts based on individualized determinations of financial need or exhaustion of reasonable collection efforts. The OIG emphasizes, however, that this exception should only be used occasionally to address special financial needs of a particular patient. Although this prohibition applies only to federal healthcare program beneficiaries, the routine waivers of copayments and deductibles offered to patients covered by commercial payors may implicate applicable state laws related to, among other things, unlawful schemes to defraud, excessive fees for services, tortious interference with patient contracts and statutory or common law fraud.
Healthcare reform in first quarter 2020
On March 9, 2020, the HHS Office of the National Coordinator for Health Information Technology, or ONC, and CMS promulgated final rules aimed at supporting seamless and secure access, exchange, and use of electronic health information, or EHI, by increasing innovation and competition by giving patients and their healthcare providers secure access to health information and new tools, allowing for more choice in care and treatment. The final rules are intended to clarify and operationalize provisions of the 21st Century Cures Act, or Cures Act, regarding interoperability and “information blocking,” and create significant new requirements for health care industry participants. Information blocking is defined as any activity that is likely to interfere with, prevent, or materially discourage access, exchange, or use of EHI, where a health information technology developer, health information network or health information exchange knows or should know that such practice is likely to interfere with access to, exchange or use of EHI. The new rules create significant new requirements for health care industry participants, and require certain electronic health record technology to incorporate standardized application programming interfaces, or APIs, to allow individuals to securely and easily access structured EHI using smartphone applications. The ONC will also implement provisions of the Cures Act requiring that patients can electronically access all of their EHI (structured and/or unstructured) at no cost. Finally, to further support access and exchange of EHI, the final ONC rule implements the information blocking provisions of the Cures Act and identifies eight “reasonable and necessary activities” as exceptions to information blocking activities, as long as specific conditions are met. Pursuant to the final rule, health IT developers will be subject to requirements such as prohibitions on participating in any action that constitutes information blocking, providing certification to the Secretary of HHS that they will not take actions that constitute information blocking, and other requirements regarding information blocking six months from when the final rule is published in the Federal Register. Certified API Developers must comply with new administrative requirements within six months of when the rule is published in the Federal Register and must provide all certified API technology within twenty-four months after publication of the rule in the Federal Register.
The final CMS rule focuses on patients in Medicare Advantage organizations, Medicaid and Children’s Health Insurance Program (CHIP) fee-for-service programs, Medicaid managed care plans, CHIP managed care entities,
and qualified health plan issuers on the federally-facilitated exchanges and enacts measures to enable patients to have both their clinical and administrative information travel with them. By January 1, 2021, payors must make patient data dating back to January 1, 2016 available through an API.
Intellectual property
Our continued growth and success depends, in part, on our ability to protect our intellectual property and proprietary technology, including the Phreesia Platform. We primarily protect our intellectual property through a combination of trademarks, trade secrets and other contractual rights, including confidentiality, non-disclosure and assignment-of-invention agreements with our employees, independent contractors, consultants and companies with which we conduct business.
However, these intellectual property rights and procedures may not prevent others from creating a competitive SaaS platform or otherwise competing with us. We may be unable to obtain, maintain and enforce the intellectual property rights on which our business depends, and assertions by third parties that we violate their intellectual property rights could have a material adverse effect on our business, financial condition and results of operations.
Employees
As of January 31, 2020, we had 532 full-time employees, including 185 in services and support, 173 in sales and marketing, 116 in research and development and 58 in general and administrative. As of January 31, 2020, we had 345 full-time employees in the United States and 187 full-time employees internationally. None of our employees are represented by labor unions or covered by collective bargaining agreements. We consider our relationship with our employees to be good and we have not experienced any work stoppages.
Corporate Information
We were incorporated under the laws of the State of Delaware in 2005. Our principal executive office is located at 432 Park Avenue South, 12th Floor, New York, New York 10016, and our telephone number is (888) 654-7473. Our website address is http://www.Phreesia.com. We do not incorporate the information on or accessible through our website into this report, and you should not consider any information on, or that can be accessed through, our website as part of this report.
Available Information
Our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and all amendments to these filings, are available free of charge from our investor relations website at https://ir.Phreesia.com as soon as reasonably practicable following our filing with or furnishing to the Securities and Exchange Commission, or SEC, of any of these reports. The SEC maintains an Internet website at https://www.sec.gov that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC.
Phreesia investors and others should note that we announce material information to the public about our company, products and services and other issues through a variety of means, including our website at https://www.Phreesia.com, our investor relations website at https://ir.Phreesia.com, press releases, SEC filings and public conference calls, in order to achieve broad, non-exclusionary distribution of information to the public. We also use the following social media channels as a means of disclosing information about the company, our platform, our planned financial and other announcements and attendance at upcoming investor and industry conferences, and other matters and for complying with our disclosure obligations under Regulation FD:
PHREESIA Twitter Account (https://twitter.com/Phreesia)
PHREESIA Company Blog (https://www.phreesia.com/blog)
PHREESIA Facebook Page (https://www.facebook.com/Phreesia)
PHREESIA LinkedIn Page (https://www.linkedin.com/company/Phreesia)
PHREESIA Instagram Page (https://www.instagram.com/Phreesiacareers)
We encourage our investors and others to review the information we make public in these locations as such information could be deemed to be material information. Please note that this list may be updated from time to time.
The contents of any website referred to in this Annual Report on Form 10-K are not intended to be incorporated into this Annual Report on Form 10-K or in any other report or document we file with the SEC, and any references to our websites are intended to be inactive textual references only.
Item 1A. Risk factors
A description of the risks and uncertainties associated with our business and industry is set forth below. You should carefully consider the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including our financial statements and notes thereto and the “Management’s discussion and analysis of financial condition and results of operations” section of Annual Report on Form 10-K before deciding whether to purchase shares of our common stock. If any of the following risks are realized, our business, financial condition, operating results and prospects could be materially and adversely affected. In that event, the price of our common stock could decline, perhaps significantly. Additional risks and uncertainties not presently known to us or that we currently deem immaterial also may impair our business operation. Certain statements in this Annual Report on Form 10-K are forward-looking statements. See the section of this Annual Report on Form 10-K titled “Special Note Regarding Forward-Looking Statements.”
Risk factors
Risks relating to our business and industry
We have experienced net losses in the past and we may not achieve profitability in the future.
We have incurred significant operating losses since our inception. For the fiscal years ended January 31 2020, 2019 and 2018, we had net losses of $20.3 million, $15.1 million, and $18.2 million, respectively, and losses from operations of $15.3 million, $9.5 million and $14.6 million, respectively. Our operating expenses may increase substantially in the foreseeable future as we continue to invest to grow our business and build relationships with our clients and partners, develop the SaaS-based Phreesia Platform, which we refer to as the Phreesia Platform or our Platform, develop new solutions and comply with being a public company. We expect to incur significant additional expenses as a public company. These efforts may prove to be more expensive than we currently anticipate, and we may not succeed in increasing our revenue sufficiently to offset these higher expenses. In addition, to the extent we are successful in increasing our client base, we could incur increased losses because significant costs associated with entering into client agreements are generally incurred up front, while revenue is generally recognized ratably over the term of the agreement. As a result, we may need to raise additional capital through equity and debt financings in order to fund our operations. If we are unable to effectively manage these risks and difficulties as we encounter them, our business, financial condition and results of operations may suffer.
The healthcare industry is rapidly evolving and the market for technology-enabled services that empower healthcare consumers is relatively immature and unproven. If we are not successful in promoting the benefits of our Platform, our growth may be limited.
The market for our products and services is subject to rapid and significant changes. The market for technology-enabled services that empower healthcare consumers is characterized by rapid technological change, new product and service introductions, increasing patient financial responsibility, consumerism and engagement, the ongoing shift to value-based care and reimbursement models, and the entrance of non-traditional competitors. In addition, there may be a limited-time opportunity to achieve and maintain a significant share of this market due in part to the rapidly evolving nature of the healthcare and technology industries and the substantial resources available to our existing and potential competitors. The market for technology-enabled services that empower healthcare consumers is relatively new and unproven, and it is uncertain whether this market will achieve and sustain high levels of demand and market adoption.
In order to remain competitive, we are continually involved in a number of projects to compete with these new market entrants by developing new services, growing our client base and penetrating new markets. Some of these projects include the expansion of our integration capabilities with additional electronic health record, or EHR, and practice management, or PM, solutions, the expansion of our mobile platform and the recent roll-out of our cost estimation features. These projects carry risks, such as cost overruns, delays in delivery, performance problems and lack of acceptance by our clients. Our integration partners may also decide to develop and offer their own patient engagement solutions that are similar to our Platform offerings.
Our success depends on providing high-quality products and services that healthcare providers use to improve clinical, financial and operational performance and which are used and positively received by patients. If we cannot adapt to rapidly evolving industry standards and technology and increasingly sophisticated and varied healthcare provider and patient needs, our existing technology could become undesirable, obsolete or harm our reputation. We must continue to invest significant resources in our personnel and technology in a timely and cost-effective manner
in order to enhance our existing products and services and introduce new high-quality products and services that existing clients and potential new clients will want. Our operating results would also suffer if our innovations are not responsive to the needs of our existing clients or potential new clients, are not appropriately timed with market opportunity, are not effectively brought to market or significantly increase our operating costs. If our new or modified product and service innovations are not responsive to the preferences of healthcare providers and their patients, emerging industry standards or regulatory changes, are not appropriately timed with market opportunity or are not effectively brought to market, we may lose existing clients or be unable to obtain new clients and our results of operations may suffer.
We believe demand for our products and services has been driven in large part by increasing patient responsibility, engagement and consumerism, high deductible health plans and declining reimbursements. According to the American Hospital Association, the shift to value-based reimbursement models requires healthcare provider organizations to manage new challenges related to measurement and reporting, population health management, care coordination and other patient demands, all of which may require additional staff and capabilities. Our ability to streamline the intake process and critical workflows in order to improve provider and staff efficiency and allow for optimal allocation of resources will be critical to our business. Our success also depends to a substantial extent on the ability of our Platform to increase patient engagement, and our ability to demonstrate the value of our Platform to provider clients, patients and life sciences companies. If our existing clients do not recognize or acknowledge the benefits of our Platform or our Platform does not drive patient engagement, then the market for our products and services might not develop at all, or it might develop more slowly than we expect, either of which could adversely affect our operating results.
In addition, we have limited insight into trends that might develop and affect our business. We might make errors in predicting and reacting to relevant business, legal and regulatory trends and healthcare reform, which could harm our business. If any of these events occur, it could materially adversely affect our business, financial condition or results of operations.
Finally, our competitors may have the ability to devote more financial and operational resources than we can to developing new technologies and services, including services that provide improved operating functionality, and adding features to their existing service offerings. If successful, their development efforts could render our services less desirable, resulting in the loss of our existing clients or a reduction in the fees we generate from our products and services.
We have grown rapidly in recent periods, and if we fail to manage our growth effectively, our expenses could increase more than expected, our revenue may not increase and we may be unable to implement our business strategy.
We have experienced significant growth in recent periods, which puts strain on our business, operations and employees. We anticipate that our operations will continue to rapidly expand. To manage our current and anticipated future growth effectively, we must continue to maintain and enhance our IT infrastructure, financial and accounting systems and controls. We must also attract, train and retain a significant number of qualified sales and marketing personnel, client support personnel, professional services personnel, software engineers, technical personnel and management personnel, and the availability of such personnel, in particular software engineers, may be constrained, including if we experience negative publicity, a strike or other work stoppages that could adversely affect our ability to attract and retain personnel.
A key element of how we manage our growth is our ability to scale our capabilities and satisfactorily implement our solution for our clients’ needs. Our provider clients often require specific features or functions unique to their organizational structure, which, at a time of significant growth or during periods of high demand, may strain our implementation capacity and hinder our ability to successfully implement our solution to our clients in a timely manner. Our success also depends on our ability to satisfactorily integrate our Platform with the EHR and PM systems utilized by our provider clients. If we are unable to address the needs of our provider clients, including by integrating our Platform with the EHR and PM systems of our provider clients, or our provider clients are unsatisfied with the quality of our solution or services, they may not renew their contracts, seek to cancel or terminate their relationship with us or renew on less favorable terms, any of which could adversely affect our business.
Failure to effectively manage our growth could also lead us to over-invest or under-invest in development and operations, result in weaknesses in our infrastructure, systems or controls, give rise to operational mistakes, financial losses, loss of productivity or business opportunities and result in loss of employees and reduced productivity of remaining employees. Our growth is expected to require significant capital expenditures and may divert financial resources from other projects such as the development of new applications and services. We may also need to make further investments in our technology and automate portions of our solution or services to
decrease our costs. If our management is unable to effectively manage our growth, our expenses may increase more than expected, our revenue may not increase or may grow more slowly than expected and we may be unable to implement our business strategy.
We derive a significant portion of our revenues from our largest clients.
Historically, we have relied on a limited number of clients for a substantial portion of our total revenue and accounts receivable. The sudden loss of any of our clients, or the renegotiation of any of our client contracts, could adversely affect our operating results.
Because we rely on a limited number of clients for a significant portion of our revenues, we depend on the creditworthiness of these clients. If the financial condition of our clients declines, our credit risk could increase. Should one or more of our significant clients declare bankruptcy, it could adversely affect the collectability of our accounts receivable and affect our bad debt reserves and net income.
Most of our provider client contracts have an annual term. However, these contracts may be terminated before their term expires for various reasons. For example, after a specified period, certain of these contracts are terminable for convenience by our clients during an initial term and after the client has paid a termination fee. Certain of our contracts are terminable immediately upon the occurrence of certain events. For example, certain of our life sciences contracts may be terminated by the client immediately following certain actions by the Food and Drug Administration, or FDA. If any of our contracts with our clients is terminated, we may not be able to recover all fees due under the terminated contract, which may adversely affect our operating results.
The growth of our business relies, in part, on the growth and success of our clients and certain revenues from our engagements, which are difficult to predict and are subject to factors outside of our control.
We enter into agreements with our provider clients, under which a significant portion of our fees are variable, including fees which are dependent upon the number of add-on features to the Phreesia Platform subscribed for by our clients and the number of patients utilizing our payment processing tools. If there is a general reduction in spending by healthcare provider organizations on healthcare technology solutions, it may result in a reduction in fees generated from our provider clients or a reduction in the number of add-on features subscribed for by our provider clients. This could lead to a decrease in our revenue, which could harm our business, financial condition and results of operations.
In addition, the number of patients utilizing our payment processing tools, and the amounts those patients pay to their healthcare providers directly for services, is often impacted by factors outside of our control, such as the number of patients with high deductible health plans. Accordingly, revenue under these agreements is uncertain and unpredictable. If the number of patients utilizing our payment systems, or the aggregate amounts paid by such patients directly to their healthcare providers through the Phreesia Platform, were to be reduced by a material amount, such decrease would lead to a decrease in our revenue, which could harm our business, financial condition and results of operations. In addition, growth forecasts of our clients are subject to significant uncertainty and are based on assumptions and estimates that may prove to be inaccurate. Even if the markets in which our provider clients compete meet the size estimates and growth forecasted, including with respect to the number of patients and revenues derived from their healthcare services, the number of patients using our payment processing tools, and the aggregate dollar amount of payments made by patients directly to their healthcare providers through the Phreesia Platform, could fail to grow at similar rates, if at all.
We also generate revenue through fees charged to our life sciences clients by delivering targeted messages to patients who opt-in to such communications. We refer to this service offering as Phreesia Connect. These messages enable life sciences companies to engage with patients and deliver relevant, targeted messages at the point when such patients are actively seeking care. The success of Phreesia Connect is driven, in part, by our ability to maintain high patient opt-in rates, the number of newly approved drugs and the success of newly launched drugs, each of which is impacted by factors outside of our control. If there is a reduction in newly approved drugs, or newly launched drugs are not successful, this could negatively affect the ability of our life science clients to deliver relevant, targeted messages to patients who would have otherwise been candidates to receive such drugs, and accordingly may reduce patient opt-in rates. A reduction in patient opt-in rates through Phreesia Connect could lead to a decrease in our revenue, which could harm our business, financial condition and results of operations.
We may potentially compete with our partners, which may adversely affect our business.
Our partners, including our integration partners for EHR and PM solutions, could become our competitors by offering similar services. Some of our partners offer, or may begin to offer, services, including patient intake and engagement services, payment processing tools and targeted patient communication services, in addition to any EHR and PM systems, in the same or similar manner as we do. Although there are many potential opportunities for,
and applications of, these services, our partners may seek opportunities or target new clients in areas that may overlap with those that we have chosen to pursue. In such cases we may potentially compete against our partners. Competition from our partners may adversely affect our business and results from operations.
If our existing clients do not continue to renew their contracts with us, renew at lower fee levels or decline to purchase additional applications and services from us, it could have a material adverse effect on our business, financial condition and results of operations.
We expect to derive a significant portion of our revenue from renewal of existing clients’ contracts and sales of additional applications and services to existing clients. As part of our growth strategy, for instance, we have recently focused on expanding our services amongst current clients. As a result, achieving a high client retention rate and selling additional applications and services are critical to our future business, revenue growth and results of operations.
Factors that may affect our retention rate and our ability to sell additional applications and services include, but are not limited to, the following:
• the price, performance and functionality of our Platform;
• patient acceptance and adoption of services and utilization of our payment processing tools;
• the availability, price, performance and functionality of competing solutions;
• our ability to develop and sell complimentary applications and services;
• the stability, performance and security of our hosting infrastructure and hosting services;
• changes in healthcare laws, regulations or trends; and
• the business environment of our clients.
We typically enter into annual contracts with our clients, which have a stated initial term of one year and automatically renew for one-year subsequent terms. Most of our clients have no obligation to renew their subscriptions for our Platform solution after the initial term expires. In addition, our clients may negotiate terms less advantageous to us upon renewal, which may reduce our revenue from these clients and may decrease our annual revenue. If our clients fail to renew their contracts, renew their contracts upon less favorable terms or at lower fee levels or fail to purchase new products and services from us, our revenue may decline or our future revenue growth may be constrained. Should any of our clients terminate their relationship with us after implementation has begun, we would not only lose our time, effort and resources invested in that implementation, but we would also have lost the opportunity to leverage those resources to build a relationship with other clients over that same period of time.
Failure to adequately expand our direct sales force will impede our growth.
We believe that our future growth will depend on the continued development of our direct sales force and its ability to obtain new clients and to manage our existing client base. Identifying and recruiting qualified personnel and training them requires significant time, expense and attention. It can take six months or longer before a new sales representative is fully trained and productive. Our business may be adversely affected if our efforts to expand and train our direct sales force do not generate a corresponding increase in revenue. In particular, if we are unable to hire and develop sufficient numbers of productive direct sales personnel or if new direct sales personnel are unable to achieve desired productivity levels in a reasonable period of time, sales of our services will suffer and our growth will be impeded.
We typically incur significant upfront costs in our client relationships, and if we are unable to develop or grow these relationships over time, we are unlikely to recover these costs and our operating results may suffer.
We devote significant resources to establish relationships with new clients and deepen relationships with existing clients. Our sales cycle for our services can be variable, typically ranging from two to eight months from initial contact to contract execution. However, there is potential for our sales cycle to extend beyond two to eight months as a result of COVID-19. During the period of our sales cycle, our efforts involve educating our clients and patients about the use, technical capabilities and benefits of our products and services. We do not provide access to the Platform and do not charge fees during this initial sales period. For clients that decide to enter into a contract with us, some of these contracts may provide for a preliminary trial period where a subset of providers from the client is granted access to our Platform for our standard fees. Following any such trial period, we aim to increase the number of providers within the client that utilize the Platform. Accordingly, our operating results depend in substantial part on our ability to deliver a successful client and patient experience and persuade our clients and
patients to grow their relationship with us over time. As we expect to grow rapidly, our client acquisition costs could outpace our build-up of recurring revenue, and we may be unable to reduce our total operating costs through economies of scale such that we are unable to achieve profitability. Any increased or unexpected costs or unanticipated delays, including delays caused by factors outside of our control, could cause our operating results to suffer.
If the estimates and assumptions we use to determine the size of our target market are inaccurate, our future growth rate may be impacted and our business would be harmed.
Market estimates and growth forecasts that we disclose are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts relating to the size and expected growth of the market for our services may prove to be inaccurate. Even if the market in which we compete meets our size estimates and forecasted growth, our business could fail to grow at similar rates, if at all. Accordingly, any forecasts of market growth that we disclose should not be taken as indicative of our future growth.
The principal assumptions relating to our market opportunity include the number of healthcare providers currently taking appointments, the amount of annual out of pocket consumer spend for healthcare-related professional services and the amount of annual spend by life sciences companies on digital patient engagement at the point of care. Our market opportunity is also based on the assumption that the strategic approach that our solution enables for our potential clients will be more attractive to our clients than competing solutions.
If these assumptions prove inaccurate, our business, financial condition and results of operations could be adversely affected.
We are subject to data privacy and security laws and regulations governing our collection, use, disclosure, or storage of personally identifiable information, including personal health information and payment card data, which may impose restrictions on us and our operations and subject us to penalties if we are unable to fully comply with such laws.
As described below, we are required to comply with numerous federal and state laws and regulations governing the collection, use, disclosure, storage and transmission of personally identifiable information, including personal health information, that we may obtain or have access to in connection with the provision of our services. These laws and regulations, including their interpretation by governmental agencies, are subject to frequent change and could have a negative impact on our business.
We are a “Business Associate” as defined under the federal Health Insurance Portability and Accountability Act of 1996, as amended by the Health Information Technology for Economic and Clinical Health Act, or HITECH Act, and their implementing regulations, which we collectively refer to as HIPAA, and the U.S. Department of Health and Human Services Office of Civil Rights, or OCR, may impose penalties on a Business Associate for a failure to comply with applicable requirement of HIPAA. Penalties will vary significantly depending on factors such as the date of the violation, whether the Business Associate knew or should have known of the failure to comply, or whether the Business Associate’s failure to comply was due to willful neglect. Currently, these penalties include civil monetary penalties for violations. However, a single breach incident can result in violations of multiple requirements, resulting in possible penalties in excess of pre-set annual limits. Further, a person who knowingly obtains or discloses individually identifiable health information in violation of HIPAA may face a monetary criminal penalty and imprisonment up to one year. The criminal penalties increase if the wrongful conduct involves false pretenses, and further increase if the wrongful conduct involves the intent to sell, transfer, or use identifiable health information for commercial advantage, personal gain, or malicious harm. The U.S. Department of Justice, or the DOJ, is responsible for criminal prosecutions under HIPAA. State attorneys general also have the right to prosecute HIPAA violations committed against residents of their states. While HIPAA does not create a private right of action that would allow individuals to sue in civil court for HIPAA violations, its standards have been used as the basis for the duty of care in state civil suits, such as those for negligence or recklessness in misusing individuals’ health information. Furthermore, in the event of a breach as defined by HIPAA, the Business Associate may have to comply with specific reporting requirements under HIPAA regulations.
Numerous other federal and state laws may apply that restrict the use and protect the privacy and security of personally identifiable information, as well as employee personal information. These include state medical privacy laws, state social security number protection laws and federal and state consumer protection laws. These various laws in many cases are not preempted by HIPAA and may be subject to varying interpretations by the courts and government agencies, creating complex compliance issues for us and our partners and potentially exposing us to additional expense, adverse publicity and liability, any of which could adversely affect our business.
Federal and state consumer protection laws are increasingly being applied by the United States Federal Trade Commission, or FTC, and states’ attorneys general to regulate the collection, use, storage and disclosure of personal or personally identifiable information, through websites or otherwise, and to regulate the presentation of website content.
The security measures that we and our third-party vendors and subcontractors have in place to ensure compliance with privacy and data protection laws may not protect our facilities and systems from security breaches, acts of vandalism or theft, computer viruses, misplaced or lost data, programming and human errors or other similar events. In 2013, we experienced a security breach involving a stolen laptop, which we reported to OCR. Under the HITECH Act, as a Business Associate we may also be liable for privacy and security breaches and failures of our subcontractors. Even though we provide for appropriate protections through our agreements with our subcontractors, we still have limited control over their actions and practices. A breach of privacy or security of individually identifiable health information by a subcontractor may result in an enforcement action, including criminal and civil liability, against us. We are not able to predict the extent of the impact such incidents may have on our business. Our failure to comply may result in criminal and civil liability because the potential for enforcement action against Business Associates is now greater. Enforcement actions against us could be costly and could interrupt regular operations, which may adversely affect our business. While we have not received any notices of violation of the applicable privacy and data protection laws and believe we are in compliance with such laws, there can be no assurance that we will not receive such notices in the future.
There is ongoing concern from privacy advocates, regulators and others regarding data privacy and security issues, and the number of jurisdictions with data privacy and security laws has been increasing. Also, there are ongoing public policy discussions regarding whether the standards for de-identification, anonymization or pseudonymization of health information are sufficient, and the risk of re-identification sufficiently small, to adequately protect patient privacy. We expect that there will continue to be new proposed laws, regulations and industry standards concerning privacy, data protection and information security in the United States, including the California Consumer Privacy Act, or CCPA, which went into effect January 1, 2020. The CCPA creates new individual privacy rights for California consumers (as defined in the law) and places increased privacy and security obligations on entities handling personal data of consumers or households. The CCPA requires covered companies to provide certain disclosures to consumers about its data collection, use and sharing practices, and to provide affected California residents with ways to opt-out of certain sales or transfers of personal information. A series of legislative amendments to the CCPA were enacted on October 11, 2019, and the California State Attorney General proposed companion draft regulations which were last updated on February 10, 2020. The California State Attorney General will commence enforcement actions against violators beginning July 1, 2020. While the legislation includes an exception for activities that are subject to HIPAA, we cannot yet determine the impact the CCPA or other such future laws, regulations and standards may have on our business. Future laws, regulations, standards and obligations, and changes in the interpretation of existing laws, regulations, standards and obligations could impair our or our clients’ ability to collect, use or disclose information relating to consumers, which could decrease demand for our Platform, increase our costs and impair our ability to maintain and grow our client base and increase our revenue. New laws, amendments to or re-interpretations of existing laws and regulations, industry standards and contractual obligations could impair our or our customers’ ability to collect, use or disclose information relating to patients or consumers, which could decrease demand for our Platform offerings, increase our costs and impair our ability to maintain and grow our client base and increase our revenue. In view of new or modified federal or state laws and regulations, industry standards, contractual obligations and other legal obligations, or any changes in their interpretation, we may find it necessary or desirable to fundamentally change our business activities and practices or to expend significant resources to modify our software or platform and otherwise adapt to these changes.
In addition to government regulation and the securities laws, we are subject to self-regulatory standards and industry certifications that may legally or contractually apply to us. These include the Payment Card Industry Data Security Standards, or PCI-DSS, with which we are currently compliant. We received HITRUST certification in 2017 and are currently seeking a biannual recertification. In the event we fail to comply with the PCI-DSS or fail to maintain our Security Organization Control 2 or receive recertification from HITRUST, we could be in breach of our obligations under customer and other contracts, fines and other penalties could result, and we may suffer reputational harm and damage to our business. Further, our clients may expect us to comply with more stringent privacy and data security requirements than those imposed by laws, regulations or self-regulatory requirements, and we may be obligated contractually to comply with additional or different standards relating to our handling or protection of data on or by our offerings.
Any failure or perceived failure by us to comply with federal or state laws or regulations, industry standards or other legal obligations, or any actual or suspected privacy or security incident, whether or not resulting in unauthorized access to, or acquisition, release or transfer of personally identifiable information or other data, may result in
governmental enforcement actions and prosecutions, private litigation, fines and penalties or adverse publicity and could cause our clients to lose trust in us, which could have an adverse effect on our reputation and business. We may be unable to make such changes and modifications in a commercially reasonable manner or at all, and our ability to develop new products and features could be limited. Any of these developments could harm our business, financial condition and results of operations. Privacy and data security concerns, whether valid or not valid, may inhibit market adoption of our Platform.
Privacy concerns or security breaches relating to our Platform could result in economic loss, damage to our reputation, deterring users from using our products and our exposure to legal penalties and liability.
We collect, process and store significant amounts of data concerning our clients, including data pertaining to personally identifiable information, such as health information, of patients received in connection with the utilization of our Platform by patients of our healthcare provider and life sciences clients. While we have taken reasonable steps to protect such data, techniques used to gain unauthorized access to data and systems, disable or degrade service, or sabotage systems are constantly evolving, and we may be unable to anticipate such techniques or implement adequate preventative measures to avoid unauthorized access or other adverse impacts to such data or our systems.
We may be subject to state laws requiring notification of affected individuals and state regulators in the event of a breach of personal information, which is a broader class of information than the health information protected by HIPAA. Furthermore, certain health privacy laws, data breach notification laws, consumer protection laws and genetic testing laws may apply directly to our business and/or those of our collaborators and may impose restrictions on our collection, use and dissemination of individuals’ health information. Patients about whom we obtain health information, as well as the providers who share this information with us, may have statutory or contractual rights that limit our ability to use and disclose the information. We may be required to expend significant capital and other resources to ensure ongoing compliance with applicable privacy and data security laws. Claims that we have violated individuals’ privacy rights or breached our contractual obligations, even if we are not found liable, could be expensive and time-consuming to defend and could result in adverse publicity that could harm our business.
Like all internet services, our service is vulnerable to software bugs, computer viruses, internet worms, break-ins, phishing attacks, attempts to overload servers with denial-of-service, or other attacks or similar disruptions from unauthorized use of our and third-party computer systems, any of which could lead to system interruptions, delays, or shutdowns, causing loss of critical data or the unauthorized access of data. Computer malware, viruses, and computer hacking and phishing attacks have become more prevalent in our industry. Functions that facilitate interactivity with other internet platforms could increase the scope of access of hackers to user accounts. Though it is difficult to determine what, if any, harm may directly result from any specific interruption or attack, any failure to maintain performance, reliability, security and availability of our products to the satisfaction of our clients and their patients may harm our reputation and our ability to retain existing clients. In 2013, we experienced a security breach when one of our employees had a laptop containing Protected Health Information (as defined under HIPAA) stolen. This breach did not result in any claims against us, and since this incident, we have implemented policies that prohibit the download and storage of Protected Health Information and adopted a policy of encryption for all company laptops. Although we have in place systems and processes that are designed to protect our data, prevent data loss, disable undesirable accounts and activities on our Platform and prevent or detect security breaches, we cannot assure you that such measures will provide absolute security. If an actual or perceived breach of security occurs to our systems or a third party’s systems, we also could be required to expend significant resources to mitigate the breach of security and to address matters related to any such breach, including notifying users or regulators. Although we maintain insurance for our business, the coverage under our policies may not be adequate to compensate us for all losses that may occur.
If we are not able to maintain and enhance our reputation and brand recognition, our business and results of operations will be harmed.
We believe that maintaining and enhancing our reputation and brand recognition is critical to our relationships with existing clients and the patients that they serve and to our ability to attract new clients. The promotion of our brand may require us to make substantial investments and we anticipate that, as our market becomes increasingly competitive, these marketing initiatives may become increasingly difficult and expensive. Our marketing activities may not be successful or yield increased revenue, and to the extent that these activities yield increased revenue, the increased revenue may not offset the expenses we incur and our results of operations could be harmed. In addition, any factor that diminishes our reputation or that of our management, including failing to meet the expectations of our clients and patients, could make it substantially more difficult for us to attract new clients. Similarly, because our partners often act as references for us with prospective new provider clients, any existing
partner that questions the quality of our work or that of our employees could impair our ability to secure additional new clients. If we do not successfully maintain and enhance our reputation and brand recognition with our clients and their patients, our business may not grow and we could lose our relationships with clients, which would harm our business, results of operations and financial condition.
Consolidation in the healthcare industry could have a material adverse effect on our business, financial condition and results of operations.
Many healthcare industry participants are consolidating to create larger and more integrated healthcare delivery systems with greater market power. We expect regulatory and economic conditions to result in additional consolidation in the healthcare industry in the future. As consolidation accelerates, the economies of scale of our clients’ organizations may grow. If a client experiences sizable growth following consolidation, it may determine that it no longer needs to rely on us and may reduce its demand for our products and services. In addition, as healthcare providers and life sciences companies consolidate to create larger and more integrated healthcare delivery systems with greater market power, these providers may try to use their market power to negotiate fee reductions for our products and services. Finally, consolidation may also result in the acquisition or future development by our healthcare provider and life sciences clients of products and services that compete with our products and services. Any of these potential results of consolidation could have a material adverse effect on our business, financial condition and results of operations.
We may face intense competition, which could limit our ability to maintain or expand market share within our industry, and if we do not maintain or expand our market share our business and operating results will be harmed.
The market for our products and services is fragmented, competitive and characterized by rapidly evolving technology standards, client needs and the frequent introduction of new products and services. Our competitors range from smaller niche companies to large, well-financed and technologically-sophisticated entities. As costs fall and technology improves, increased market saturation may change the competitive landscape in favor of competitors with greater scale than we currently possess.
We compete on the basis of several factors, including breadth, depth and quality of product and service offerings, ability to deliver clinical, financial and operational performance improvement through the use of products and services, quality and reliability of services, ease of use and convenience, brand recognition and the ability to integrate our Platform solutions with various PM and EHR systems and other technology. Some of our competitors have greater name recognition, longer operating histories and significantly greater resources than we do. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, or client requirements. In addition, current and potential competitors have established, and may in the future establish, cooperative relationships with vendors of complementary products, technologies or services to increase the availability of their products to the marketplace. Accordingly, new competitors or alliances may emerge that have greater market share, larger client bases, more widely adopted proprietary technologies, greater marketing expertise, greater financial resources and larger sales forces than we have, which could put us at a competitive disadvantage.
Further, in light of these advantages, even if our products or services are more effective than the product or service offerings of our competitors, current or potential clients might accept competitive products and services in lieu of purchasing our products or services. In addition to new niche vendors, who offer stand-alone products and services, we also face competition from EHR and PM providers, including those with which we have integration partnerships. EHR or PM providers may have existing systems in place at clients in our target market. These EHR and PM providers may now, or in the future, offer or promise products or services similar to ours, which offer ease of integration with existing systems and leverage existing client and vendor relationships.
We also compete on the basis of price. We may be subject to pricing pressures as a result of, among other things, competition within the industry, consolidation of healthcare industry participants, practices of managed care organizations, government action and financial stress experienced by our clients. If our pricing experiences significant downward pressure, our business will be less profitable and our results of operations will be adversely affected.
We cannot be certain that we will be able to retain our current clients or expand our client base in this competitive environment. If we do not retain current clients or expand our client base, or if we have to renegotiate existing contracts, our business, financial condition and results of operations will be harmed. Moreover, we expect that competition will continue to increase as a result of consolidation in both the healthcare information technology and healthcare industries. If one or more of our competitors or potential competitors were to merge or partner with
another of our competitors, the change in the competitive landscape could also adversely affect our ability to compete effectively and could harm our business, financial condition and results of operations.
We are bound by exclusivity provisions that restrict our ability to enter into certain sales and marketing relationships in order to market and sell our services.
Some of our client contracts include exclusivity or other restrictive clauses. Any contracts with exclusivity or other restrictive provisions may limit our ability to conduct business with certain potential clients. Client contracts with exclusivity or other restrictive provisions may constrain our ability to partner with or provide services to other prospective clients or purchase services from other vendors within certain time periods. Accordingly, these exclusivity clauses may prevent us from entering into long-term relationships with potential clients and could cause our business, financial condition and results of operations to be harmed.
The healthcare regulatory and political framework is uncertain and evolving.
Healthcare laws and regulations are rapidly evolving and may change significantly in the future, which could adversely affect our financial condition and results of operations. For example, in March 2010, the Patient Protection and Affordable Care Act, or ACA, was adopted, which is a healthcare reform measure that provides healthcare insurance for approximately 30 million additional Americans. The ACA includes a variety of healthcare reform provisions and requirements that became effective at varying times through 2018 and substantially changes the way healthcare is financed by both governmental and private insurers, which may significantly impact our industry and our business. Since its enactment, there have been numerous judicial, administrative, executive, and legislative challenges to certain aspects of the ACA, and we expect there will be additional challenges and amendments to the ACA in the future. Various portions of the ACA are currently undergoing legal and constitutional challenges in the Fifth Circuit Court and the United States Supreme Court; the Trump Administration has issued various Executive Orders which eliminated cost sharing subsidies and various provisions that would impose a fiscal burden on states or a cost, fee, tax, penalty or regulatory burden on individuals, healthcare providers, health insurers, or manufacturers of pharmaceuticals or medical devices; and Congress has introduced several pieces of legislation aimed at significantly revising or repealing the ACA. It is unclear whether the ACA will be overturned, repealed, replaced, or further amended. We cannot predict what affect further changes to the ACA would have on our business. On March 2, 2020, the Supreme Court of the United States agreed to hear arguments which are expected to determine the fate of the ACA. Pending review, the ACA remains in effect, but it is unclear how this decision, and other efforts to repeal and replace the ACA will impact the ACA and our business.
Further, on March 9, 2020, the U.S. Department of Health and Human Services, or HHS, Office of the National Coordinator for Health Information Technology, or ONC, and CMS promulgated final rules aimed at supporting seamless and secure access, exchange, and use of electronic health information, or EHI, by increasing innovation and competition by giving patients and their healthcare providers secure access to health information and new tools, allowing for more choice in care and treatment. The final rules are intended to clarify and operationalize provisions of the 21st Century Cures Act, or Cures Act, regarding interoperability and “information blocking,” and create significant new requirements for health care industry participants. Information blocking is defined as activity that is likely to interfere with, prevent, or materially discourage access, exchange, or use of EHI, where a health information technology developer, health information network or health information exchange knows or should know that such practice is likely to interfere with access to, exchange or use of EHI. The new rules create significant new requirements for health care industry participants, and require certain electronic health record technology to incorporate standardized application programming interfaces, or APIs, to allow individuals to securely and easily access structured EHI using smartphone applications. The ONC will also implement provisions of the Cures Act requiring that patients can electronically access all of their EHI (structured and/or unstructured) at no cost. Finally, to further support access and exchange of EHI, the final ONC rule implements the information blocking provisions of the Cures Act and identified eight “reasonable and necessary activities” as exceptions to information blocking activities, as long as specific conditions are met. Pursuant to the final rule, health IT developers will be subject to requirements such as prohibitions on participating in any action that constitutes information blocking, providing certification to the Secretary of HHS that they will not take actions that constitute information blocking, and other requirements regarding information blocking six months from when the final rule is published in the Federal Register. Certified API Developers must comply with new administrative requirements within six months of when the rule is published in the Federal Register and must provide all certified API technology within twenty-four months after publication of the rule in the Federal Register.
The final CMS rule focuses on patients enrolled in Medicare Advantage plans, Medicaid and Children’s Health Insurance Program (CHIP) fee-for-service programs, Medicaid managed care plans, CHIP managed care entities, and qualified health plans on the federally-facilitated exchanges, and enacts measures to enable patients to have
both their clinical and administrative information travel with them. By January 1, 2021, payors must make patient data dating back to January 1, 2016 available through an API.
These rules constitute a significant departure from previous regulations regarding patient data.. These rules may benefit us in that certain EHR vendors will no longer be permitted to interfere with our attempts at integration, but the rules may also make it easier for other similar companies to enter the market, creating increased competition and reducing our market share. It is unclear at this time what the costs of compliance with the final rules will be, and what additional risks there may be to our business.
In addition, we are subject to various other laws and regulations, including, among others, the Stark Law relating to self-referrals, anti-kickback laws, antitrust laws and the privacy and data protection laws described below.
If we are unable to obtain, maintain and enforce intellectual property protection for our technology and products or if the scope of our intellectual property protection is not sufficiently broad, others may be able to develop and commercialize technology and products substantially similar to ours, and our ability to successfully commercialize our technology and products may be adversely affected.
Our business depends on proprietary technology and content, including software, databases, confidential information and know-how, the protection of which is crucial to the success of our business. We rely on a combination of trademark, trade-secret and copyright laws, confidentiality procedures and contractual provisions to protect our intellectual property rights in our proprietary technology and content. We are pursuing the registration of our trademarks and service marks in the United States. We may, over time, increase our investment in protecting our intellectual property through additional trademark, patent and other intellectual property filings that could be expensive and time-consuming. Effective trademark, trade-secret and copyright protection is expensive to develop and maintain, both in terms of initial and ongoing registration requirements and the costs of defending our rights. These measures, however, may not be sufficient to offer us meaningful protection. If we are unable to protect our intellectual property and other proprietary rights, our competitive position and our business could be harmed, as third parties may be able to commercialize and use technologies and software products that are substantially the same as ours without incurring the development and licensing costs that we have incurred. Any of our owned or licensed intellectual property rights could be challenged, invalidated, circumvented, infringed or misappropriated, our trade secrets and other confidential information could be disclosed in an unauthorized manner to third parties, or our intellectual property rights may not be sufficient to permit us to take advantage of current market trends or otherwise provide us with competitive advantages, which could result in costly redesign efforts, discontinuance of certain offerings or other competitive harm.
Monitoring unauthorized use of our intellectual property is difficult and costly. From time to time, we seek to analyze our competitors’ products and services, and may in the future seek to enforce our rights against potential infringement. However, the steps we have taken to protect our proprietary rights may not be adequate to prevent infringement or misappropriation of our intellectual property. We may not be able to detect unauthorized use of, or take appropriate steps to enforce, our intellectual property rights. Any inability to meaningfully protect our intellectual property rights could result in harm to our ability to compete and reduce demand for our technology and products. Moreover, our failure to develop and properly manage new intellectual property could adversely affect our market positions and business opportunities. Also, some of our products and services rely on technologies and software developed by or licensed from third parties. Any disruption or disturbance in such third-party products or services, which we have experienced in the past, could interrupt the operation of our Platform. We may not be able to maintain our relationships with such third parties or enter into similar relationships in the future on reasonable terms or at all.
We may also be required to protect our proprietary technology and content in an increasing number of jurisdictions, a process that is expensive and may not be successful, or which we may not pursue in every location. In addition, effective intellectual property protection may not be available to us in every country, and the laws of some foreign countries may not be as protective of intellectual property rights as those in the United States. Additional uncertainty may result from changes to intellectual property legislation enacted in the United States and elsewhere, and from interpretations of intellectual property laws by applicable courts and agencies. Accordingly, despite our efforts, we may be unable to obtain and maintain the intellectual property rights necessary to provide us with a competitive advantage. Our failure to obtain, maintain and enforce our intellectual property rights could therefore have a material adverse effect on our business, financial condition and results of operations.
If our trademarks and trade names are not adequately protected, we may not be able to build name recognition in our markets of interest and our business may be adversely affected.
We believe that the Phreesia brand is critical to the success of our business, and we utilize trademark registration and other means to protect it. Our business would be harmed if we were unable to protect our brand against infringement and its value was to decrease as a result.
The registered or unregistered trademarks or trade names that we own or license may be challenged, infringed, circumvented, declared generic, lapsed or determined to be infringing on or dilutive of other marks. We may not be able to protect our rights in these trademarks and trade names, which we need in order to build name recognition with potential partners. In addition, third parties may in the future file for registration of trademarks similar or identical to our trademarks. If they succeed in registering or developing common law rights in such trademarks, and if we are not successful in challenging such third-party rights, we may not be able to use these trademarks to commercialize our technologies or products in certain relevant countries. If we are unable to establish name recognition based on our trademarks and trade names, we may not be able to compete effectively and our business may be adversely affected.
Third parties may initiate legal proceedings alleging that we are infringing or otherwise violating their intellectual property rights, the outcome of which would be uncertain and could have a material adverse effect on our business, financial condition and results of operations.
Our commercial success depends on our ability to develop and commercialize our services and use our proprietary technology without infringing the intellectual property or proprietary rights of third parties. Intellectual property disputes can be costly to defend and may cause our business, operating results and financial condition to suffer. As the market for healthcare in the United States expands and more patents are issued, the risk increases that there may be patents issued to third parties that relate to our products and technology of which we are not aware or that we must challenge to continue our operations as currently contemplated. Whether merited or not, we may face allegations that we, our partners, our licensees or parties indemnified by us have infringed or otherwise violated the patents, trademarks, copyrights, or other intellectual property rights of third parties. Such claims may be made by competitors seeking to obtain a competitive advantage or by other parties. Additionally, in recent years, individuals and groups have begun purchasing intellectual property assets for the purpose of making claims of infringement and attempting to extract settlements from companies like ours. We may also face allegations that our employees have misappropriated the intellectual property or proprietary rights of their former employers or other third parties. It may be necessary for us to initiate litigation to defend ourselves in order to determine the scope, enforceability and validity of third-party intellectual property or proprietary rights, or to establish our respective rights. Regardless of whether claims that we are infringing patents or other intellectual property rights have merit, such claims can be time-consuming, divert management’s attention and financial resources and can be costly to evaluate and defend. Results of any such litigation are difficult to predict and may require us to stop commercializing or using our products or technology, obtain licenses, modify our services and technology while we develop non-infringing substitutes or incur substantial damages, settlement costs or face a temporary or permanent injunction prohibiting us from marketing or providing the affected products and services. If we require a third-party license, it may not be available on reasonable terms or at all, and we may have to pay substantial royalties, upfront fees or grant cross-licenses to intellectual property rights for our products and services. We may also have to redesign our products or services so they do not infringe third-party intellectual property rights, which may not be possible or may require substantial monetary expenditures and time, during which our technology and products may not be available for commercialization or use. Even if we have an agreement to indemnify us against such costs, the indemnifying party may be unable to uphold its contractual obligations. If we cannot or do not obtain a third-party license to the infringed technology, license the technology on reasonable terms or obtain similar technology from another source, our revenue and earnings could be adversely impacted.
From time to time, we may be subject to legal proceedings and claims in the ordinary course of business with respect to intellectual property. We are not currently subject to any claims from third parties asserting infringement of their intellectual property rights. Some third parties may be able to sustain the costs of complex litigation more effectively than we can because they have substantially greater resources. Even if resolved in our favor, litigation or other legal proceedings relating to intellectual property claims may cause us to incur significant expenses and could distract our technical and management personnel from their normal responsibilities. In addition, there could be public announcements of the results of hearings, motions or other interim proceedings or developments, and if securities analysts or investors perceive these results to be negative, it could have a material adverse effect on the price of our common stock. Moreover, any uncertainties resulting from the initiation and continuation of any legal proceedings could have a material adverse effect on our ability to raise the funds necessary to continue our operations. Assertions by third parties that we violate their intellectual property rights could therefore have a material adverse effect on our business, financial condition and results of operations.
Our use of “open source” software could adversely affect our ability to offer our services and subject us to possible litigation.
We may use open source software in connection with our products and services. Companies that incorporate open source software into their products have, from time to time, faced claims challenging the use of open source software and/or compliance with open source license terms. As a result, we could be subject to suits by parties claiming ownership of what we believe to be open source software or claiming noncompliance with open source licensing terms. Some open source software licenses require users who distribute software containing open source software to publicly disclose all or part of the source code to such software and/or make available any derivative works of the open source code, which could include valuable proprietary code of the user, on unfavorable terms or at no cost. While we monitor the use of open source software and try to ensure that none is used in a manner that would require us to disclose our proprietary source code or that would otherwise breach the terms of an open source agreement, such use could inadvertently occur, in part because open source license terms are often ambiguous. Any requirement to disclose our proprietary source code or pay damages for breach of contract could have a material adverse effect on our business, financial condition and results of operations and could help our competitors develop products and services that are similar to or better than ours.
If we are unable to protect the confidentiality of our trade secrets, know-how and other proprietary information, the value of our technology and products could be adversely affected.
We may not be able to protect our trade secrets, know-how and other proprietary information adequately. Although we use reasonable efforts to protect this proprietary information and technology, our employees, consultants and other parties may unintentionally or willfully disclose our information or technology to competitors. Enforcing a claim that a third party illegally obtained and is using any of our proprietary information or technology is expensive and time-consuming, and the outcome is unpredictable. In addition, courts outside the United States are sometimes less willing to protect trade secrets, know-how and other proprietary information. We rely, in part, on non-disclosure, confidentiality and invention assignment agreements with our employees, consultants and other parties to protect our trade secrets, know-how and other intellectual property and proprietary information. These agreements may not be self-executing, or they may be breached and we may not have adequate remedies for such breach. Moreover, third parties may independently develop similar or equivalent proprietary information or otherwise gain access to our trade secrets, know-how and other proprietary information.
We rely on our third-party vendors and partners to execute our business strategy. Replacing them would be difficult and disruptive to our business. If we are unsuccessful in forming or maintaining such relationships on terms favorable to us, our business may not succeed.
We have entered into contracts with third-party vendors to provide critical services relating to our business, including initial software development and cloud hosting. Some of these third-party vendors utilize employees or consultants located offshore. We also rely on third-party providers to enable automated eligibility and benefits verification through our Platform. We depend on our third-party processing partners to perform payment processing services, which generate almost all of our payments revenue. Our processing partners may go out of business or otherwise be unable or unwilling to continue providing such services, which could significantly and materially reduce our payments revenue and disrupt our business. A number of our processing contracts require us to assume liability for any losses our processing partners may suffer as a result of losses caused by our provider clients and their patients, including losses caused by chargebacks and fraud. Thus, in the event of a significant loss by our processing partners, we may be required to pay out a large amount of cash in one or two business days following such event and, if we do not have sufficient cash on hand, may be deemed in breach of such contracts. A contractual dispute with our processing partners could adversely impact our revenue. Certain contracts may expire or be terminated, and we may not be able to enter into a new payment processor relationship that replicates the associated revenue for a considerable period of time.
In the event that these service providers fail to maintain adequate levels of support, do not provide high quality service, increase the fees they charge us, discontinue their lines of business, terminate our contractual arrangements or cease or reduce operations, we may suffer additional costs and be required to pursue new third-party relationships, which could materially disrupt our operations and our ability to provide our products and services, and could divert management’s time and resources. It would be difficult to replace some of our third-party vendors in a timely manner if they were unwilling or unable to provide us with these services in the future, and our business and operations could be adversely affected. If these services fail or are of poor quality, our business, reputation and operating results could be harmed.
In addition, we have entered into strategic alliances with providers of EHR and PM solutions, and we intend to pursue such alliances in the future. These strategic alliance agreements are typically structured as commercial and technical partnership agreements, pursuant to which we integrate certain of our Platform solutions into the EHR and PM systems that are utilized by many of our clients, for agreed payments to such integration partners. The success of our business strategy relies, in part, on our ability to form and maintain these alliances with such partners in order to facilitate and permit the integration of our Platform into the EHR and PM systems used by our provider clients and their patients. If providers of EHR or PM solutions amend, terminate or fail to perform their obligations under their strategic alliance agreements with us, our Platform solutions may no longer integrate with the EHR and PM systems of our provider clients, which would materially and adversely affect our business results.
We may also seek new strategic alliances in the future, and we may not be successful in entering into future alliances on terms favorable to us. Any delay in entering into strategic alliances with providers of EHR or PM solutions would likely either delay the development and adoption of our products and services and reduce their competitiveness, or prevent the integration of our product offerings, in each case with respect to healthcare provider organizations that utilize such EHR or PM solutions. Any such delay could adversely affect our business.
We rely on a limited number of third-party suppliers and contract manufacturers to support our products, and a loss or degradation in performance of these suppliers and contract manufacturers could have a negative effect on our business, financial condition and results of operations.
We rely on third-party suppliers and contract manufacturers for the materials and components used to operate our Phreesia Platform and product offerings, and to manufacture and assemble our hardware, including the PhreesiaPad and our on-site kiosks, which we refer to as Arrivals Stations. We rely on a sole supplier, for example, as the manufacturer of our PhreesiaPads and Arrivals Stations, which help drive our business and support our provider, patient processing and life sciences offerings. In connection with these services, our supplier builds new hardware for us and refurbishes and maintains existing hardware.
Any of our other suppliers or third-party contract manufacturers may be unwilling or unable to supply the necessary materials and components or manufacture and assemble our products reliably and at the levels we anticipate or that are required by the market. Our ability to supply our products commercially and to develop any future products depends, in part, on our ability to obtain these materials, components and products in accordance with regulatory requirements and in sufficient quantities for commercialization.
While our suppliers and contract manufacturers have generally met our demand for products and services on a timely basis in the past, we cannot guarantee that they will in the future be able to meet our demand for products, either because of acts of nature, the nature of our agreements with those manufacturers or our relative importance to them as a customer, and our manufacturers may decide in the future to discontinue or reduce the level of business they conduct with us. If we are required to change contract manufacturers due to any change in or termination of our relationships with these third parties, or if our manufacturers are unable to obtain the materials they need to produce our products at consistent prices or at all (including, without limitation, because of the effect of tariffs or other trade restrictions), we may lose sales, experience manufacturing or other delays, incur increased costs or otherwise experience impairment to our client relationships. We cannot guarantee that we will be able to establish alternative relationships on similar terms, without delay or at all.
While we believe replacement suppliers and manufacturers exist for all materials, components and services necessary to our systems and the Phreesia Platform, establishing additional or replacement suppliers for any of these materials, components or services, if required, could be time-consuming and expensive, may result in interruptions in our operations and product delivery, may affect the performance of our business or could require that we modify our operations. Even if we are able to find replacement suppliers or third-party contract manufacturers, we will be required to verify that the new supplier or third-party manufacturer maintains facilities, procedures and operations that comply with our quality expectations and applicable regulatory requirements.
If our third-party suppliers fail to deliver the required quantities of materials on a timely basis and at commercially reasonable prices, and we are unable to find one or more replacement suppliers capable of production at a substantially equivalent cost in substantially equivalent volumes and quality on a timely basis, the supply of our products to clients and the development of any future products will be delayed, limited or prevented, which could have a material adverse effect on our business, financial condition and results of operations.
Any restrictions on our use of, or ability to license, data, or our failure to license data and integrate third-party technologies, could have a material adverse effect on our business, financial condition and results of operations.
We depend upon licenses from third parties for some of the technology and data used in our applications, and for some of the technology platforms upon which these applications are built and operate. We expect that we may need to obtain additional licenses from third parties in the future in connection with the development of our products and services. In addition, we obtain a portion of the data that we use from government entities, public records and our partners for specific partner engagements. We believe that we have all rights necessary to use the data that is incorporated into our products and services. However, we cannot assure you that our licenses for information will allow us to use that information for all potential or contemplated applications and products. In addition, certain of our products depend on maintaining our data and analytics platform, which is populated with data disclosed to us by healthcare providers, life sciences companies and their respective patients and other partners with their consent. If these clients, patients or partners revoke their consent for us to maintain, use, de-identify and share this data, consistent with applicable law, our data assets could be degraded.
In the future, data providers could withdraw their data from us or restrict our usage for any reason, including if there is a competitive reason to do so, if legislation is passed restricting the use of the data or if judicial interpretations are issued restricting use of the data that we currently use in our products and services. In addition, data providers could fail to adhere to our quality control standards in the future, causing us to incur additional expense to appropriately utilize the data. If a substantial number of data providers were to withdraw or restrict their data, or if they fail to adhere to our quality control standards, and if we are unable to identify and contract with suitable alternative data suppliers and integrate these data sources into our service offerings, our ability to provide products and services to our partners would be materially adversely impacted, which could have a material adverse effect on our business, financial condition and results of operations.
We also integrate into our proprietary applications and use third-party software to maintain and enhance, among other things, content generation and delivery, and to support our technology infrastructure. Some of this software is proprietary and some is open source software. Our use of third-party technologies exposes us to increased risks, including, but not limited to, risks associated with the integration of new technology into our solutions, the diversion of our resources from development of our own proprietary technology and our inability to generate revenue from licensed technology sufficient to offset associated acquisition and maintenance costs. These technologies may not be available to us in the future on commercially reasonable terms or at all and could be difficult to replace once integrated into our own proprietary applications. Most of these licenses can be renewed only by mutual consent and may be terminated if we breach the terms of the license and fail to cure the breach within a specified period of time. Our inability to obtain, maintain or comply with any of these licenses could delay development until equivalent technology can be identified, licensed and integrated, which would harm our business, financial condition and results of operations.
Most of our third-party licenses are non-exclusive and our competitors may obtain the right to use any of the technology covered by these licenses to compete directly with us. If our data suppliers choose to discontinue support of the licensed technology in the future, we might not be able to modify or adapt our own solutions.
If we cannot implement our solution for clients or resolve any technical issues in a timely manner, we may lose clients and our reputation may be harmed.
Our clients utilize a variety of data formats, applications and infrastructure and our solution must support our clients’ data formats. Furthermore, the healthcare industry has shifted towards digitalized record keeping, and accordingly, many of our provider clients have developed their own software, or utilize third-party software, for practice management and secure storage of electronic medical records. Our ability to develop and maintain logic-based and scalable technology for patient intake management and engagement and payment processing that successfully integrates with our clients’ software systems for practice management and storage of electronic medical records is critical. If our Platform does not currently support a client’s required data format or appropriately integrate with clients’ systems, then we must configure our Platform to do so, which increases our expenses.
Additionally, we do not control our clients’ implementation schedules. As a result, if our clients do not allocate the internal resources necessary to meet their implementation responsibilities or if we face unanticipated implementation difficulties, the implementation may be delayed. If the client implementation process is not executed successfully or if execution is delayed, we could incur significant costs, clients could become dissatisfied and decide not to increase utilization of our solution or not to implement our solution beyond an initial period prior to their term commitment or, in some cases, revenue recognition could be delayed. In addition, competitors with more efficient operating models with lower implementation costs could jeopardize our client relationships.
Our clients and patients depend on our support services to resolve any technical issues relating to our solution and services, and we may be unable to respond quickly enough to accommodate short-term increases in demand for
support services, particularly as we increase the size of our client bases (including healthcare provider organizations and the number of patients that they serve). We also may be unable to modify the format of our support services to compete with changes in support services provided by competitors. It is difficult to predict client and patient demand for technical support services, and if client or patient demand increases significantly, we may be unable to provide satisfactory support services to our clients. Further, if we are unable to address the needs of our clients and their patients in a timely fashion or further develop and enhance our solution, or if a client or patient is not satisfied with the quality of work performed by us or with the technical support services rendered, then we could incur additional costs to address the situation or be required to issue credits or refunds for amounts related to unused services, and our profitability may be impaired and clients’ or patients’ dissatisfaction with our solution could damage our ability to expand the number of applications and services purchased by such clients. These clients may not renew their contracts, seek to terminate their relationship with us or renew on less favorable terms. Moreover, negative publicity related to our client and patient relationships, regardless of its accuracy, may further damage our business by affecting our reputation or ability to compete for new business with current and prospective clients. If any of these were to occur, our revenue may decline and our business, financial condition and results of operations could be adversely affected.
We rely on Internet infrastructure, bandwidth providers, data center providers, other third parties and our own systems for providing services to our clients, and any failure or interruption in the services provided by these third parties or our own systems could expose us to litigation and negatively impact our relationships with clients, adversely affecting our brand and our business.
Our ability to deliver our products and services, particularly our cloud-based solutions, is dependent on the development and maintenance of the infrastructure of the Internet and other telecommunications services by third parties. This includes maintenance of a reliable network connection with the necessary speed, data capacity and security for providing reliable Internet access and services and reliable telephone and facsimile services. Our services are designed to operate without interruption in accordance with our service level commitments.
However, we have experienced limited interruptions in these systems in the past, including server failures that temporarily slow down the performance of our services, and we may experience more significant interruptions in the future. We rely on internal systems as well as third-party suppliers, including bandwidth and telecommunications equipment providers, to provide our services. We do not maintain redundant systems or facilities for some of these services. Interruptions in these systems, whether due to system failures, computer viruses, physical or electronic break-ins or other catastrophic events, could affect the security or availability of our services and prevent or inhibit the ability of our partners to access our services. In the event of a catastrophic event with respect to one or more of these systems or facilities, we may experience an extended period of system unavailability, which could result in substantial costs to remedy those problems or negatively impact our relationship with our clients, our business, results of operations and financial condition. To operate without interruption, both we and our service providers must guard against:
•damage from fire, power loss and other natural disasters;
•telecommunications failures;
•software and hardware errors, failures and crashes;
•security breaches, computer viruses and similar disruptive problems; and
•other potential interruptions.
Any disruption in the network access, telecommunications or co-location services provided by third-party providers or any failure of or by third-party providers’ systems or our own systems to handle current or higher volume of use could significantly harm our business. We exercise limited control over our third-party suppliers, which increases our vulnerability to problems with services they provide. We have experienced failures by third-party providers’ systems which resulted in a limited interruption of our system, although this failure did not result in any claims against us. Any errors, failures, interruptions or delays experienced in connection with these third-party technologies and information services or our own systems could negatively impact our relationships with clients and adversely affect our business and could expose us to third-party liabilities. Although we maintain insurance for our business, the coverage under our policies may not be adequate to compensate us for all losses that may occur. In addition, we cannot provide assurance that we will continue to be able to obtain adequate insurance coverage at an acceptable cost.
The reliability and performance of our Internet connection may be harmed by increased usage or by denial-of-service attacks. The Internet has experienced a variety of outages and other delays as a result of damages to portions of its infrastructure, and it could face outages and delays in the future. These outages and delays could reduce the level of Internet usage as well as the availability of the Internet to us for delivery of our Internet-based services.
We depend on our senior management team, and the loss of one or more of our executive officers or key employees or an inability to attract and retain highly skilled employees could adversely affect our business.
Our success depends, in part, on the skills, working relationships and continued services of our founders, Chaim Indig (Chief Executive Officer) and Evan Roberts (Chief Operating Officer), and senior management team and other key personnel. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives, which could disrupt our business. The replacement of one or more of our executive officers or other key employees would likely involve significant time and costs and may significantly delay or prevent the achievement of our business objectives.
In addition, competition for qualified management in our industry is intense. Many of the companies with which we compete for management personnel have greater financial and other resources than we do. While we have entered into offer letters or employment agreements with certain of our executive officers, all of our employees are “at-will” employees, and their employment can be terminated by us or them at any time, for any reason and without notice, subject, in certain cases, to severance payment rights. In order to retain valuable employees, in addition to salary and cash incentives, we provide stock options that vest over time or based on performance. The value to employees of stock options that vest over time or based on performance will be significantly affected by movements in our stock price that are beyond our control and may at any time be insufficient to counteract offers from other organizations. The departure of key personnel could adversely affect the conduct of our business. In such event, we would be required to hire other personnel to manage and operate our business, and there can be no assurance that we would be able to employ a suitable replacement for the departing individual, or that a replacement could be hired on terms that are favorable to us. In addition, volatility or lack of performance in our stock price may affect our ability to attract replacements should key personnel depart. If we are not able to retain any of our key management personnel, our business could be harmed.
We may make future acquisitions and investments which may be difficult to integrate, divert management resources, result in unanticipated costs or dilute our stockholders.
We have in the past acquired, and we may in the future acquire or invest in, businesses, products or technologies that we believe could complement or expand our products and services, enhance our technical capabilities or otherwise offer growth opportunities. We cannot assure you that we will realize the anticipated benefits of these or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating and pursuing suitable acquisitions, whether or not they are consummated.
There are inherent risks in integrating and managing acquisitions. If we acquire additional businesses, we may not be able to assimilate or integrate the acquired personnel, operations and technologies successfully or effectively manage the combined business following the acquisition, and our management may be distracted from operating our business. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including, without limitation:
•difficulty integrating the purchased operations, products or technologies and maintaining the quality and security standards consistent with our brand;
•the need to integrate or implement additional controls, procedures and policies;
•unanticipated costs or liabilities associated with the acquisition;
•our inability to comply with the regulatory requirements applicable to the acquired business;
•substantial unanticipated integration costs;
•assimilation of the acquired businesses, which may divert significant management attention and financial resources from our other operations and could disrupt our ongoing business;
•use of substantial portions of our available cash or the incurrence of debt to consummate the acquisition;
•the loss of key employees, particularly those of the acquired operations;
•difficulty retaining or developing the acquired business’ customers;
•adverse effects on our existing business relationships;
•failure to realize the potential cost savings or other financial benefits or the strategic benefits of the acquisitions, including failure to consummate any proposed or contemplated transaction; and
•liabilities from the acquired businesses for infringement of intellectual property rights or other claims and failure to obtain indemnification for such liabilities or claims.
Acquisitions also increase the risk of unforeseen legal liability, including for potential violations of applicable law or industry rules and regulations, arising from prior or ongoing acts or omissions by the acquired businesses which are not discovered by due diligence during the acquisition process. Generally, if an acquired business fails to meet our expectations, our operating results, business and financial condition may suffer. Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, which could adversely affect our business, results of operations or financial condition. Even if we are successful in completing and integrating an acquired business, the acquired business may not perform as we expect or enhance the value of our business as a whole.
We may become subject to litigation, which could have a material adverse effect on our business, financial condition and results of operations.
We may become subject to litigation in the future. Some of these claims may result in significant defense costs and potentially significant judgments against us, some of which we are not, or cannot be, insured against. We generally intend to defend ourselves vigorously; however, we cannot be certain of the ultimate outcomes of any claims that may arise in the future. Resolution of these types of matters against us may result in our having to pay significant fines, judgments or settlements, which, if uninsured, or if the fines, judgments and settlements exceed insured levels, could adversely impact our earnings and cash flows, thereby having a material adverse effect on our business, financial condition, results of operations, cash flow and per share trading price of our common stock. Certain litigation or the resolution of certain litigation may affect the availability or cost of some of our insurance coverage, which could adversely impact our results of operations and cash flows, expose us to increased risks that would be uninsured and adversely impact our ability to attract directors and officers.
Our operating results have in the past and may continue to fluctuate significantly and if we fail to meet the expectations of analysts or investors, our stock price and the value of your investment could decline substantially.
Our operating results are likely to fluctuate, and if we fail to meet or exceed the expectations of securities analysts or investors, the trading price of our common stock could decline. Moreover, our stock price may be based on expectations of our future performance that may be unrealistic or that may not be met. Some of the important factors that could cause our revenues and operating results to fluctuate from quarter to quarter include:
•the extent to which our services achieve or maintain market acceptance;
•our ability to introduce new services and enhancements to our existing services on a timely basis;
•new competitors and the introduction of enhanced products and services from new or existing competitors;
•the length of our contracting and implementation cycles;
•the financial condition of our current and potential clients;
•the ability of our Platform to integrate with the systems, including EHR and PM systems, utilized by our provider clients;
•changes in client budgets and procurement policies;
•amount and timing of our investment in research and development activities;
•technical difficulties or interruptions in our services;
•our ability to hire and retain qualified personnel, including the rate of expansion of our sales force;
•changes in the regulatory environment related to healthcare;
•regulatory compliance costs;
•the timing, size and integration success of potential future acquisitions; and
•unforeseen legal expenses, including litigation and settlement costs.
Many of these factors are not within our control, and the occurrence of one or more of them might cause our operating results to vary widely. As such, we believe that quarter-to-quarter comparisons of our revenues and operating results may not be meaningful and should not be relied upon as an indication of future performance.
A significant portion of our operating expense is relatively fixed in nature and planned expenditures are based in part on expectations regarding future revenue. Accordingly, unexpected revenue shortfalls may decrease our margins and could cause significant changes in our operating results from quarter to quarter.
As a result of our variable sales and implementation cycles, we may be unable to recognize revenue to offset expenditures, which could result in fluctuations in our results of operations or otherwise harm our future operating results.
The sales cycle for our services can be variable, typically ranging from two to eight months from initial contact to contract execution. During the sales cycle, we expend time and resources, and we do not recognize any revenue to offset such expenditures. Our implementation cycle is also variable, typically ranging from one to 24 months from contract execution to completion of implementation. The variability of our sales and implementation cycles are dependent on numerous factors, including the size and complexity of the applicable customer. Some of our new-client set-up projects are complex and require a lengthy delay and significant implementation work, including to educate prospective clients about the uses and benefits of our Platform. Each customer’s situation is different, and unanticipated difficulties and delays may arise as a result of failure by us or by the client to meet our respective implementation responsibilities. During the implementation cycle, we expend substantial time, effort and financial resources implementing our service, but accounting principles do not allow us to recognize the resulting revenue until the service has been implemented, at which time we begin recognition of implementation revenue over the life of the contract. This could harm our future operating results.
After a client contract is signed, we provide an implementation process for the client during which appropriate connections and registrations are established and checked, data is loaded into our Platform system, data tables are set up and practice personnel are given initial training. The length and details of this implementation process vary widely from client to client. Typically, implementation of larger clients takes longer than implementation for smaller clients. Implementation for a given client may be cancelled. Despite the fact that we typically require a deposit in advance of implementation, some clients have cancelled before our service has been started. In addition, implementation may be delayed or the target dates for completion may be extended into the future for a variety of reasons, including to meet the needs and requirements of the customer, because of delays with payer processing and because of the volume and complexity of the implementations awaiting our work. If implementation periods are extended, our revenue cycle will be delayed and our financial condition may be adversely affected. In addition, cancellation of any implementation after it has begun may involve loss to us of time, effort and expenses invested in the cancelled implementation process and lost opportunity for implementing paying clients in that same period of time.
These factors may contribute to substantial fluctuations in our operating results, particularly in the near term and during any period in which our sales volume is relatively low. As a result, in future reporting periods, our operating results could fall below the expectations of securities analysts or investors, in which event our stock price would likely decrease.
Certain of our operating results and financial metrics, including the key metrics included in this report, may be difficult to predict as a result of seasonality.
We believe there are significant seasonal factors that may cause us to record higher revenue in some quarters compared with others. We believe this variability is largely due to our focus on the healthcare industry. For example, with respect to our provider clients, we receive a disproportionate increase in revenue from such clients during the first two to three months of the calendar year relative to the other months of the year, which is driven, in part, by the resetting of patient deductibles at the beginning of each calendar year. Sales for our life sciences solutions are also seasonal, primarily due to the annual spending patterns of our clients. This portion of our sales is usually the highest in the fourth quarter of each calendar year. While we believe we have visibility into the seasonality of our business, our rapid growth rate over the last several years may have made seasonal fluctuations more difficult to detect. If our rate of growth slows over time, seasonal or cyclical variations in our operations may become more pronounced, and our business, results of operations and financial position may be adversely affected.
We have identified a material weakness in our internal control over financial reporting and may identify additional material weaknesses in the future or otherwise fail to maintain an effective system of internal controls, which may result in material misstatements of our financial statements or cause us to fail to meet our periodic reporting obligations.
As a public company, we are required to maintain internal control over financial reporting and to report any material weaknesses in such internal control. Section 404 of the Sarbanes-Oxley Act of 2002, or the Sarbanes-Oxley Act, requires that we evaluate and determine the effectiveness of our internal control over financial reporting and, beginning with our annual report for the fiscal year ending January 31, 2021, provide a management report on the internal control over financial reporting. Our independent registered public accounting firm is not required to audit the effectiveness of our internal control over financial reporting until after we are no longer an “emerging growth company,” as defined in the Jumpstart Our Business Startups Act, or JOBS Act.
Prior to our initial public offering, or IPO, we were a private company and had limited accounting and financial reporting personnel and other resources with which to address our internal controls and procedures. In connection with the audit of our financial statements as of and for the fiscal year ended January 31, 2020, we and our independent registered public accounting firm identified a material weakness in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis.
We determined that we had a material weakness because we did not maintain a sufficient complement of personnel with an appropriate degree of knowledge, experience, and training, commensurate with our accounting and reporting requirements. As a result of the lack of personnel, we had inappropriate segregation of duties throughout several control processes, including the review and approval of manual journal entries. Accordingly, internal controls over our financial statement close process were not designed appropriately to detect a material error in the financial statements in a timely manner.
To address this material weakness, we have hired and will continue hiring additional accounting personnel and implement process level and management review controls. While we are implementing a plan to remediate this material weakness, we cannot predict the success of such plan or the outcome of our assessment of these plans at this time. If our steps are insufficient to successfully remediate the material weakness and otherwise establish and maintain an effective system of internal control over financial reporting, the reliability of our financial reporting, investor confidence in us and the value of our common stock could be materially and adversely affected. We can give no assurance that this implementation will remediate this deficiency in internal control or that additional material weaknesses in our internal control over financial reporting will not be identified in the future. Our failure to implement and maintain effective internal control over financial reporting could result in errors in our financial statements that could result in a restatement of our financial statements, cause us to fail to meet our reporting obligations.
Effective internal control over financial reporting is necessary for us to provide reliable and timely financial reports and, together with adequate disclosure controls and procedures, are designed to reasonably detect and prevent fraud. Any failure to implement required new or improved controls, or difficulties encountered in their implementation could cause us to fail to meet our reporting obligations. For as long as we are an “emerging growth company” under the JOBS Act, our independent registered public accounting firm will not be required to attest to the effectiveness of our internal control over financial reporting pursuant to Section 404. We could be an “emerging growth company” for up to five years. An independent assessment of the effectiveness of our internal control over financial reporting could detect problems that our management’s assessment might not. Undetected material weaknesses in our internal control over financial reporting could lead to financial statement restatements and require us to incur the expense of remediation.
We may be subject to additional tax liabilities in connection with our operations or due to future legislation, each of which could materially impact our financial position and results of operation.
We are subject to federal and state income, sales, use, value added and other taxes in the United States and other countries in which we conduct business, and such laws and rates vary by jurisdiction. We are now registered in all states that assess sales taxes. Certain jurisdictions may seek to impose additional sales, use, value added or other taxes on us, including for past sales by us, which could result in tax assessments, penalties and interest, and we may be required to collect such taxes in the future.
Although we believe our tax practices and provisions are reasonable, the final determination of tax audits and any related litigation could be materially different from our historical tax practices, provisions and accruals. If we receive an adverse ruling as a result of an audit, or we unilaterally determine that we have misinterpreted provisions of the tax regulations to which we are subject, there could be a material effect on our tax provision, net income or cash flows in the period or periods for which that determination is made, which could materially impact our financial results. Further, any changes in the taxation of our activities, including certain proposed changes in U.S. tax laws, may increase our effective tax rate and adversely affect our financial position and results of operations. In addition, liabilities associated with taxes are often subject to an extended or indefinite statute of limitations period. Therefore,
we may be subject to additional tax liability (including penalties and interest) for a particular year for extended periods of time.
Interruption or failure of our information technology and communications systems could impair our ability to effectively deliver our products and services, which could cause us to lose clients and harm our operating results.
Our business depends on the continuing operation of our technology infrastructure and systems. Proprietary software development is time-consuming, expensive and complex, and may involve unforeseen difficulties. We may encounter technical obstacles in enhancing our existing software and developing new software, and it is possible that we may discover additional problems that prevent our proprietary applications from operating properly. In addition, any damage to or failure of our existing systems could result in interruptions in our ability to deliver our products and services. Interruptions in our service could reduce our revenue and profits, and our reputation could be damaged if people believe our systems are unreliable.
Our systems and operations are vulnerable to damage or interruption from earthquakes, terrorist attacks, floods, fires, power loss, break-ins, hardware or software failures, telecommunications failures, computer viruses or other attempts to harm our systems and similar events. Any unscheduled interruption in our service would result in an immediate loss of revenue. Frequent or persistent system failures that result in the unavailability of our Platform or slower response times could reduce our clients’ ability to access our Platform, impair our delivery of our products and services and harm the perception of our Platform as reliable, trustworthy and consistent. Our insurance policies provide only limited coverage for service interruptions and may not adequately compensate us for any losses that may occur due to any failures or interruptions in our systems.
Natural or man-made disasters and other similar events may significantly disrupt our business and negatively impact our business, financial condition and results of operations.
Our offices may be harmed or rendered inoperable by natural or man-made disasters, including earthquakes, power outages, fires, floods, nuclear disasters and acts of terrorism or other criminal activities, which may render it difficult or impossible for us to operate our business for some period of time. For example, our headquarters is located in the greater New York City area, a region with a history of terrorist attacks and hurricanes. Any disruptions in our operations related to the repair or replacement of our offices, could negatively impact our business and results of operations and harm our reputation. Insurance may not be sufficient to compensate for losses that may occur. Any such losses or damages could have a material adverse effect on our business, financial condition and results of operations. In addition, our clients’ facilities may be harmed or rendered inoperable by such natural or man-made disasters, which may cause disruptions, difficulties or material adverse effects on our business.
Business or economic disruptions or global health concerns have and may continue to seriously harm our business and increase our costs and expenses.
Broad-based business or economic disruptions could adversely affect our business. For example, in December 2019 an outbreak of a novel strain of coronavirus (COVID-19) originated in Wuhan, China, and it has spread to a number of other countries, including the United States and more specifically, New York, New York where our primary office is located. On March 11, 2020, the World Health Organization declared COVID-19 a pandemic, and on March 13, 2020, the United States declared a national emergency with respect to COVID-19. The global impact of the outbreak has been rapidly evolving and many countries, including the United States, has led to the implementation of various responses, including government-imposed quarantines, travel restrictions, business and school closures and other public health safety measures. COVID-19 has and may continue to materially and adversely impact our business and results of operations due to, among other factors:
•a general decline in business activity including the impact of our clients' office closures;
•a disproportionate impact on the healthcare groups and other healthcare professionals with whom we contract;
•disruptions to our supply chains and our third-party vendors, partners, and suppliers;
•difficulty accessing the capital and credit markets on favorable terms, or at all, and a severe disruption and instability in the global financial markets, or deteriorations in credit and financing conditions which could affect our access to capital necessary to fund business operations or address maturing liabilities on a timely basis;
•the potential negative impact on the health or productivity of employees, especially if a significant number of them are impacted;
•a deterioration in our ability to ensure business continuity during a disruption; and
•social, economic, and labor instability in the countries in which we or the third parties with whom we engage operate.
The rapid development and fluidity of this situation precludes any prediction as to the ultimate adverse impact of COVID-19. Nevertheless, COVID-19 presents material uncertainty which has and may continue to adversely affect our results of operations, financial condition and cash flows.
If our services fail to provide accurate and timely information, or if our content or any other element of our service is associated with errors or malfunctions, we could have liability to clients, providers or patients which could adversely affect our results of operations.
Our software, content and services are used to assist medical groups, health systems and payors with managing the patient intake process and to empower patients and healthcare organizations as they navigate the challenges of an evolving healthcare system. If our software, content or services fail to provide accurate and timely information or are associated with errors or malfunctions, then clients, providers or patients could assert claims against us that could result in substantial costs to us, harm our reputation in the industry and cause demand for our services to decline.
Our proprietary service is utilized in patient intake and engagement and to help healthcare providers better understand patients through medical histories, insurance benefits and socio-economic indicators. If our service fails to provide accurate and timely information, or if our content or any other element of our service is associated with errors or malfunctions, we could have liability to clients, providers or patients.
The assertion of such claims and ensuing litigation, regardless of its outcome could result in substantial cost to us, divert management’s attention from operations, damage our reputation and decrease market acceptance of our services. We attempt to limit by contract our liability for damages and to require that our clients assume responsibility for medical care and approve key system rules, protocols and data. Despite these precautions, the allocations of responsibility and limitations of liability set forth in our contracts may not be enforceable, may not be binding upon patients or may not otherwise protect us from liability for damages.
We maintain general liability and insurance coverage, but this coverage may not continue to be available on acceptable terms or may not be available in sufficient amounts to cover one or more large claims against us. In addition, the insurer might disclaim coverage as to any future claim. One or more large claims could exceed our available insurance coverage.
Our proprietary software may contain errors or failures that are not detected until after the software is introduced or updates and new versions are released. It is challenging for us to test our software for all potential problems because it is difficult to simulate the wide variety of computing environments or methodologies that our clients may deploy or rely upon. From time to time we have discovered defects or errors in our software, and such defects or errors can be expected to appear in the future. Defects and errors that are not timely detected and remedied could expose us to risk of liability to clients, providers and patients and cause delays in introduction of new services, result in increased costs and diversion of development resources, require design modifications or decrease market acceptance or client satisfaction with our services. If any of these risks occur, they could materially adversely affect our business, financial condition or results of operations.
Our marketing efforts depend significantly on our ability to receive positive references from our existing clients.
Our marketing efforts depend significantly on our ability to call upon our current clients to provide positive references to new potential clients. Given our limited number of long-term clients, the loss or dissatisfaction of any client could substantially harm our brand and reputation, inhibit widespread adoption of our solution and impair our ability to attract new clients and maintain existing clients. Any of these consequences could lower our revenues and have a material adverse effect on our business, financial condition and results of operations.
Our payments platform is a core element of our business. If our payments platform is limited, restricted, curtailed or degraded in any way, or if we fail to continue to grow and develop our payments platform, our business may be materially and adversely affected.
Our payments platform is a core element of our business. For the fiscal year ended January 31, 2020, our payments platform generated 37% of our total revenue. Our future success depends in large part on the continued growth and development of our payments platform. If such activities are limited, restricted, curtailed or degraded in any way, or if we fail to continue to grow and develop our payments platform, our business may be materially and adversely affected. The utilization of our payment processing tools may be impacted by factors outside of our control, such as
disruptions in the payment processing industry generally. If the number of patients utilizing our payments platform, or the aggregate amounts paid by such patients directly to their healthcare providers through our payments platform, were to be reduced as a result of disruptions in the payment processing industry, it could result in a decrease to our revenue, which could harm our business, financial condition and results of operations.
The continued growth and development of our payment processing activities will also depend on our ability to anticipate and adapt to changes in client behavior. For example, client behavior may change regarding the use of credit card transactions, including the relative increased use of cash, crypto-currencies, other emerging or alternative payment methods and credit card systems that we or our processing partners do not adequately support or that do not provide adequate commissions to independent sales organizations such as us. Any failure to timely integrate emerging payment methods (e.g. ApplePay or Bitcoin) into our software, anticipate client behavior changes, or contract with payment processing partners that support such emerging payment technologies could cause us to lose traction among our clients, resulting in a corresponding loss of revenue, in the event such methods become popular among their customers.
Increases in card network fees and other changes to fee arrangements may result in the loss of clients who use our payment processing services or a reduction in our earnings.
From time to time, card networks, including Visa, MasterCard, American Express and Discover, increase the fees that they charge acquirers, which would be passed down to processors, payment facilitators and merchants. We could attempt to pass these increases along to our clients, but this strategy might result in the loss of clients to competitors who do not pass along the increases. If competitive practices prevent us from passing along the higher fees to our clients in the future, we may have to absorb all or a portion of such increases, which may increase our operating costs and reduce our earnings.
If we fail to comply with the applicable requirements of card networks, they could seek to fine us, suspend us or terminate our payment facilitator status. If our clients or sales partners incur fines or penalties that we cannot collect from them, we may have to bear the cost of such fines or penalties.
We provide a payments solution for the secure processing of patient payments. Our payment processing tools can connect to multiple clearinghouses and can also connect directly with patients. We have developed partnerships with primary credit card processors in the United States to facilitate payment processing, and are registered with Visa, MasterCard, American Express, Discover and other card networks as service providers for acquiring member institutions. These card networks set the operating rules and standards with which we must comply. The termination of our status as a certified service provider, a decision by the card networks to exclude payment facilitators or bar us from serving as such, or any changes in network rules or standards, including interpretation and implementation of the operating rules or standards, that increase the cost of doing business or limit our ability to provide transaction processing services to our clients or partners, could adversely affect our business, financial condition or results of operations.
As such, we and our clients are subject to card network rules that could subject us or our clients to a variety of fines or penalties that may be levied by card networks for certain acts or omissions by us. The rules of card networks are set by their boards, which may be influenced by card issuers. Many banks directly or indirectly sell processing services to clients in direct competition with us. These banks could attempt, by virtue of their influence on the networks, to alter the networks’ rules or policies to the detriment of non-members including our businesses. If a client or sales partner fails to comply with the applicable requirements of card networks, it could be subject to a variety of fines or penalties that may be levied by card networks. If we cannot collect processing fees from the applicable client, we may have to bear the cost of such fines or penalties, resulting in lower earnings for us. The termination of our registration, including a card network barring us from acting as a payment facilitator, or any changes in card network rules that would impair our registration, could require us to stop providing payment processing services relating to the affected card network, which would adversely affect our ability to conduct our business.
Our business and growth strategy depend on our ability to maintain and expand a network of provider clients. If we are unable to do so, our future growth would be limited and our business, financial condition and results of operations would be harmed.
Our success is dependent upon our continued ability to maintain a network of qualified provider clients. If we are unable to recruit and retain healthcare groups and other healthcare professionals, it would have a material adverse effect on our business and ability to grow and would adversely affect our results of operations. In any particular market, healthcare groups and professionals could demand higher payments or take other actions that could result in higher medical costs, less attractive service for our clients and the patients that they serve or difficulty meeting regulatory or accreditation requirements. Our ability to develop and maintain satisfactory relationships with qualified
healthcare groups and professionals also may be negatively impacted by other factors not associated with us, such as changes in Medicare and/or Medicaid reimbursement levels and other pressures on healthcare providers and consolidation activity among hospitals, physician groups and healthcare providers. The failure to maintain or to secure new cost-effective client contracts may result in a loss of or inability to grow our client base, higher costs, healthcare provider network disruptions, less attractive service for our clients and/or difficulty in meeting regulatory or accreditation requirements, any of which could have a material adverse effect on our business, financial condition and results of operations.
We may be liable for use of incorrect or incomplete data we provide which could harm our business, financial condition and results of operations.
We store and display data for use by healthcare providers in handling patient intake and engagement, including data regarding personal health information of patients. Our clients, their patients, or third parties provide us with most of this data. If this data is incorrect or incomplete or if we make mistakes in the capture or input of this data, adverse consequences may occur and give rise to product liability and other claims against us. In addition, a court or government agency may take the position that our storage and display of health information exposes us to liability for wrongful delivery or handling of healthcare services or erroneous health information. While we maintain insurance coverage, we cannot be certain that this coverage will prove to be adequate or will continue to be available on acceptable terms, if at all. Even unsuccessful claims could result in substantial costs and diversion of management resources. A claim brought against us that is uninsured or under-insured could harm our business, financial condition and results of operations.
Our services present the potential for embezzlement, identity theft or other similar illegal behavior by our employees or subcontractors with respect to third parties.
Among other things, our services involve handling payments from patients for many of our clients, and this frequently includes original checks and/or credit card information. Even in those cases in which we do not handle payments, our services also involve the use and disclosure of personal and business information that could be used to impersonate third parties or otherwise gain access to their data or funds. If any of our employees or subcontractors takes, converts or misuses such funds, documents or data, we could be liable for damages, and our business reputation could be damaged or destroyed.
If we cannot maintain our corporate culture as we grow, we could lose the innovation, teamwork, passion and focus on execution that we believe contribute to our success, and our business may be harmed.
We believe that a critical component to our success has been our corporate culture. We have invested substantial time and resources in building our team. As we continue to grow, we may find it difficult to maintain these important aspects of our corporate culture. Any failure to preserve our culture could negatively affect our future success, including our ability to retain and recruit personnel and to effectively focus on and pursue our corporate objectives.
Any failure to offer high-quality client support services could adversely affect our relationships with our clients and strategic partners and our operating results.
Our clients and patients depend on our support and client education organizations to educate them about, and resolve technical issues relating to, our products and services. We may be unable to respond quickly enough to accommodate short-term increases in client demand for education and support services. Increased client demand for these services, without a corresponding increase in revenue, could increase costs and adversely affect our operating results. In addition, our sales process is highly dependent on the reputation of our products and services and business and on positive recommendations from our existing clients. Any failure to maintain high-quality education and technical support, or a market perception that we do not maintain high-quality education support, could adversely affect our reputation, our ability to sell our products and services to existing and prospective clients and our business and operating results.
Our ability to limit our liabilities by contract or through insurance may be ineffective or insufficient to cover our future liabilities.
We attempt to limit, by contract, our liability for damages arising from our negligence, errors, mistakes or security breaches. Contractual limitations on liability, however, may not be enforceable or may otherwise not provide sufficient protection to us from liability for damages and we are not always able to negotiate meaningful limitations. We maintain liability insurance coverage, including coverage for cyber security and errors and omissions. It is possible, however, that claims could exceed the amount of our applicable insurance coverage, if any, or that this coverage may not continue to be available on acceptable terms or in sufficient amounts. Even if these claims do not result in liability to us, investigating and defending against them could be expensive and time-consuming and could divert management’s attention away from our operations. In addition, negative publicity caused by these events may
delay market acceptance of our products and services, any of which could materially and adversely affect our reputation and our business.
Changes in laws and regulations relating to interchange fees on payment card transactions would adversely affect our revenue and results of operations.
A provision of the Dodd-Frank Wall Street Reform and Consumer Protection Act, or Dodd-Frank Act, known as the Durbin Amendment empowered the Federal Reserve Board, or FRB, to establish and regulate a cap on the interchange fees that merchants pay banks for electronic clearing of debit card transactions. The final rule implementing the Durbin Amendment established standards for assessing whether debit card interchange fees received by debit card issuers were reasonable and proportional to the costs incurred by issuers for electronic debit transactions, and it established a maximum permissible interchange fee that an issuer may receive for an electronic debit transaction, limiting the fee revenue to debit card issuers and payment processors. HSA-linked payment cards are currently exempt from the rule, assuming the card is the only means of access to the underlying funds (except when all remaining funds are provided to the cardholder in a single transaction). The FRB is empowered to issue amendments to the rule, or a state or federal legislative body could enact new legislation, which could change the scope of the current rule and the basis upon which interchange rate caps are calculated. To the extent that HSA-linked payment cards and other exempt payment cards used on our Platform (or their issuing banks) lose their exempt status under the current rules or if the current interchange rate caps applicable to other payment cards used on our Platform are reduced, any such amendment, rulemaking, or legislation could impact interchange rates applicable to payment card transactions processed through our Platform. As a result, this could decrease our revenue and profit and could have a material adverse effect on our financial condition and results of operations.
Our ability to use our net operating losses to offset future taxable income may be subject to certain limitations.
As of January 31, 2020, we had U.S. federal and state net operating loss carryforwards, or NOLs, of $124.5 million due to prior period losses, which, subject to the following discussion, are generally available to be carried forward to offset a portion of our future taxable income, if any, until such NOLs are used or expire. In general, under Section 382 of the Internal Revenue Code of 1986, as amended, or the Code, a corporation that undergoes an “ownership change” is subject to limitations on its ability to utilize its pre-ownership change NOLs to offset future taxable income. Similar rules may apply under state tax laws. Our existing NOLs may be subject to limitations arising from previous ownership changes. Future changes in our stock ownership, some of which are outside of our control, could result in an ownership change under Section 382 of the Code. In addition, under the Tax Act, the amount of post 2017 NOLs that we are permitted to utilize in any taxable year is limited to 80% of our taxable income in such year, where taxable income is determined without regard to the NOL deduction itself. For these reasons, we may not be able to realize a tax benefit from the use of our NOLs. We have a valuation allowance related to our NOLs to recognize only the portion of the deferred tax asset that is more likely than not to be realized.
Economic uncertainties or downturns in the general economy or the industries in which our clients operate could disproportionately affect the demand for our solution and negatively impact our results of operations.
Market volatility and economic uncertainty remain widespread, making it potentially very difficult for our clients and us to accurately forecast and plan future business activities. During challenging economic times, our clients and patients may have difficulty gaining timely access to sufficient credit or obtaining credit on reasonable terms, which could impair their ability to make timely payments to us and adversely affect our revenue. If that were to occur, our financial results could be harmed. Further, challenging economic conditions may impair the ability of our clients to pay for the applications and services they already have purchased from us and, as a result, our write-offs of accounts receivable could increase. Patients utilizing our payment processing tools may also fail to make such payments on a timely basis or at all. We cannot predict the timing, strength or duration of any economic slowdown or recovery. If the condition of the general economy or markets in which we operate worsens, our business could be harmed.
If we or our clients fail to comply with federal and state laws governing submission of false or fraudulent claims to government healthcare programs and financial relationships among healthcare providers, we or our clients may be subject to civil and criminal penalties or loss of eligibility to participate in government healthcare programs.
As a participant in the healthcare industry, our operations and relationships, and those of our clients, are regulated by a number of federal, state and local governmental entities. The impact of these regulations can adversely affect us even though we may not be directly regulated by specific healthcare laws and regulations. We must ensure that our products and services can be used by our clients in a manner that complies with those laws and regulations. Inability of our clients to do so could affect the marketability of our products and services or our compliance with our
client contracts, or even expose us to direct liability under the theory that we had assisted our clients in a violation of healthcare laws or regulations.
A number of federal and state laws, including anti-kickback restrictions and laws prohibiting the submission of false or fraudulent claims, apply to healthcare providers and others that make, offer, seek or receive referrals or payments for products or services that may be paid for through any federal or state healthcare program and, in some instances, any private program. For example, the federal Anti-Kickback Statute prohibits any person or entity from offering, paying, soliciting or receiving anything of value, directly or indirectly, covertly or overtly, in cash or in kind, for the referral of patients covered by Medicare, Medicaid and other federal healthcare programs or the leasing, purchasing, ordering or arranging for or recommending the lease, purchase or order of any item, good, facility or service covered by these programs. A person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. Further, courts have found that if “one purpose” of remuneration is to induce referrals, the federal Anti-Kickback Statute is violated.
On October 9, 2019, OIG and CMS proposed further modifications to the federal Anti-Kickback Statute and the Physician Self-Referral Law, or the Stark Law. Under the proposed rules, OIG proposes to add safe harbor protections under the Anti-Kickback Statute for certain coordinated care and value-based arrangements among clinicians, providers and others. CMS also proposed multiple new exceptions and revisions to current exceptions for value-based arrangements under the Stark Law. It is unknown at this time which, if any, of these modifications will go into effect and what effect it will have on our business.
HIPAA, as amended by the HITECH Act, and their respective implementing regulations, also impose criminal and civil liability for knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program (including private payors) or obtain, by means of false or fraudulent pretenses, representations, or promises, any of the money or property owned by, or under the custody or control of, any healthcare benefit program, regardless of the payor (e.g., public or private) and knowingly and willfully falsifying, concealing or covering up by any trick or device a material fact or making any materially false statements in connection with the delivery of, or payment for, healthcare benefits, items or services. Similar to the federal Anti-Kickback Statute, a person or entity can be found guilty of violating HIPAA without actual knowledge of the statute or specific intent to violate it.
Many states also have similar anti-kickback laws that are not necessarily limited to items or services for which payment is made by a federal healthcare program. Moreover, both federal and state laws forbid bribery and similar behavior. These laws are complex and their application to our specific services and relationships may not be clear and may be applied to our business in ways that we do not anticipate. Determination by a court or regulatory agency that our services violate these laws could subject us to civil or criminal penalties, could invalidate all or portions of some of our client contracts, could require us to change or terminate some portions of our business, could require us to refund portions of our services fees, could cause us to be disqualified from serving clients doing business with government payors and could have an adverse effect on our business. Even an unsuccessful challenge by regulatory authorities of our activities could result in adverse publicity and could require a costly response from us.
There are federal and state laws that forbid the offering or giving of remuneration, which includes, without limitation, any transfer of items or services for free or for less than fair market value (with limited exceptions), in exchange for patient referrals, patient brokering, remuneration of patients or billing based on referrals between individuals and/or entities that have various financial, ownership or other business relationships. In many cases, billing for care arising from such actions is illegal. These limitations can vary widely from state to state, and application of these state laws, the federal anti-inducement law and the Stark Law is very complex. Any determination by a state or federal regulatory agency that any of our clients violate or have violated any of these laws may result in allegations that claims that we have processed or forwarded are improper. This could subject us to civil or criminal penalties, could require us to change or terminate some portions of our business, could require us to refund portions of our services fees and could have an adverse effect on our business. Even an unsuccessful challenge by regulatory authorities of our activities could result in adverse publicity and could require a costly response from us.
Federal and state regulatory and law enforcement authorities have recently increased enforcement activities with respect to Medicare and Medicaid fraud and abuse regulations and other healthcare reimbursement laws and rules. From time to time, participants in the healthcare industry receive inquiries or subpoenas to produce documents in connection with government investigations. We could be required to expend significant time and resources to comply with these requests, and the attention of our management team could be diverted by these efforts. The occurrence of any of these events could give our clients the right to terminate our contracts with us and result in significant harm to our business and financial condition.
These laws and regulations may change rapidly, and it is frequently unclear how they apply to our business. Any failure of our products or services to comply with these laws and regulations could result in substantial civil or criminal liability and could, among other things, adversely affect demand for our services, force us to expend significant capital, research and development and other resources to address the failure, invalidate all or portions of some of our contracts with our clients, require us to change or terminate some portions of our business, require us to refund portions of our revenue, cause us to be disqualified from serving clients doing business with government payors, and give our clients the right to terminate our contracts with them, any one of which could have an adverse effect on our business.
The U.S. Food and Drug Administration may in the future determine that our technology solutions are subject to the Federal Food, Drug, and Cosmetic Act and we may face additional costs and risks as a result.
The FDA may promulgate a policy or regulation that affects our products and services. For example, the FDA in future rule-making may consider our technology solution as a medical device. Medical devices are subject to extensive regulation by the FDA under the Federal Food, Drug, and Cosmetic Act, or FDCA. Under the FDCA, medical devices include any instrument, apparatus, machine, contrivance or other similar or related articles that is intended for use in the diagnosis of disease or other conditions, or in the cure, mitigation, treatment or prevention of disease. FDA regulations govern among other things, product development, testing, manufacture, packaging, labeling, storage, clearance or approval, advertising and promotion, sales and distribution and import and export.
Non-compliance with applicable FDA requirements can result in, among other things, public warning letters, fines, injunctions, civil penalties, recall or seizure of products, total or partial suspension of production, failure of the FDA to grant marketing approvals, withdrawal of marketing approvals, a recommendation by the FDA to disallow us from entering into government contracts and criminal prosecutions. The FDA also has the authority to request repair, replace or refund of the cost of any device.
Potential additional regulation of the disclosure of health information outside the United States may adversely affect our operations and may increase our costs.
Federal or state governmental authorities may impose additional data security standards or additional privacy or other restrictions on the collection, use, transmission and other disclosures of health information. In the future, industry requirements or guidance (e.g., payor requirements), contractual obligations, and/or legislation at both the federal and the state level may limit, forbid or regulate the use or transmission of health information outside of the United States. These developments, if adopted, may render our use of our office in Ottawa, Ontario, Canada, for work related to such data impracticable or substantially more expensive. Alternative means of supporting our clients with the use of such information within the United States may involve substantial delay in implementation and increased cost.
Individuals may claim our text messaging services are not compliant with the Telephone Consumer Protection Act.
The Telephone Consumer Protection Act, or TCPA, is a federal statute that protects consumers from unwanted telephone calls and faxes. Since its inception, the TCPA’s purview has extended to text messages sent to consumers. We must ensure that our services that leverage text messaging comply with TCPA regulations and agency guidance. While we strive to adhere to strict policies and procedures, the Federal Communications Commission, or FCC, as the agency that implements and enforces the TCPA, may disagree with our interpretation of the TCPA and subject us to penalties and other consequences for noncompliance. Determination by a court or regulatory agency that our services violate the TCPA could subject us to civil penalties, could invalidate all or portions of some of our client contracts, could require us to change or terminate some portions of our business, could require us to refund portions of our services fees, and could have an adverse effect on our business. Even an unsuccessful challenge by consumers or regulatory authorities of our activities could result in adverse publicity and could require a costly response from us.
Our risk management policies and procedures may not be fully effective in mitigating our risk exposure in all market environments or against all types of risk.
We operate in a rapidly changing industry. Accordingly, our risk management policies and procedures may not be fully effective to identify, monitor and manage all risks our business encounters. If our policies and procedures are not fully effective or we are not successful in identifying and mitigating all risks to which we are or may be exposed, we may suffer uninsured liability, harm to our reputation or be subject to litigation or regulatory actions that could adversely affect our business, financial condition or results of operations.
Our office in Ottawa, Canada is subject to the laws and regulations of the government of Canada and its subdivisions.
Our office in Ottawa, Ontario, Canada is subject to additional laws and regulations by the government of Canada, as well as its provinces. These include Canadian federal and local corporation requirements, restrictions on exchange of funds, employment-related laws and qualification for tax status. If we fail to comply with Canadian laws and regulations, or if the government of Canada or its provinces determines that our corporate actions do not comply with applicable Canadian law, we could face sanctions or fines, which could have a material adverse effect on our business.
Changes in accounting rules, assumptions and/or judgments could materially and adversely affect us.
Accounting rules and interpretations for certain aspects of our operations are highly complex and involve significant assumptions and judgment. These complexities could lead to a delay in the preparation and dissemination of our financial statements. Furthermore, changes in accounting rules and interpretations or in our accounting assumptions and/or judgments could significantly impact our financial statements. In some cases, we could be required to apply a new or revised standard retroactively, resulting in restating prior period financial statements. Any of these circumstances could have a material adverse effect on our business, prospects, liquidity, financial condition and results of operations.
Risks relating to our indebtedness
In order to support the growth of our business, we may need to incur additional indebtedness under our current credit facilities or seek capital through new equity or debt financings, which sources of additional capital may not be available to us on acceptable terms or at all.
Our operations have consumed substantial amounts of cash since inception and we intend to continue to make significant investments to support our business growth, respond to business challenges or opportunities, develop new applications and services, enhance our existing solution and services, enhance our operating infrastructure and potentially acquire complementary businesses and technologies. For the fiscal year ended January 31, 2020 our net cash provided by operating activities was $0.8 million and for the fiscal year ended January 31, 2019, our net cash used in operating activities was $2.1 million. As of January 31, 2020, we had $90.3 million of cash and cash equivalents, which are held for working capital purposes. As of January 31, 2020, we had $20.0 million of outstanding borrowings under our credit facility and $0 outstanding under our revolving line of credit, with the ability to borrow up to an additional $25.0 million in term loan borrowings and $25.0 million in our revolving line of credit. Borrowings under our credit facility are secured by substantially all of our properties, rights and assets, excluding intellectual property.
Our future capital requirements may be significantly different from our current estimates and will depend on many factors, including the need to:
•finance unanticipated working capital requirements;
•develop or enhance our technological infrastructure and our existing products and services;
•fund strategic relationships, including joint ventures and co-investments;
•fund additional implementation engagements;
•respond to competitive pressures; and
•acquire complementary businesses, technologies, products or services.
Accordingly, we may need to engage in equity or debt financings or collaborative arrangements to secure additional funds. Additional financing may not be available on terms favorable to us, or at all. If we raise additional funds through further issuances of equity or convertible debt securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences and privileges superior to those of holders of our common stock. Any debt financing secured by us in the future could involve additional restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. In addition, during times of economic instability, it has been difficult for many companies to obtain financing in the public markets or to obtain debt financing, and we may not be able to obtain additional financing on commercially reasonable terms, if at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us, it could have a material adverse effect on our business, financial condition and results of operations.
Restrictive covenants in the agreements governing our credit facility may restrict our ability to pursue our business strategies.
The credit agreement governing our credit facility contains certain customary restrictive covenants that limit our ability to incur additional indebtedness and liens, merge with other companies or consummate certain changes of control, acquire other companies, engage in new lines of business, make certain investments, pay dividends, create subsidiaries, enter into certain transactions with affiliates, and transfer or dispose of assets as well as financial covenants requiring us to maintain a specified level of recurring revenue growth, a specified maximum funded debt to recurring revenue ratio and a specified amount of minimum liquidity.
Our ability to comply with these covenants may be affected by events beyond our control, and we may not be able to meet those covenants. A breach of any of these covenants could result in a default under the loan agreement, which could cause all of the outstanding indebtedness under our credit facility to become immediately due and payable and terminate all commitments to extend further credit. These covenants could also limit our ability to seek capital through the incurrence of new indebtedness or, if we are unable to meet our obligations, require us to repay any outstanding amounts with sources of capital we may otherwise use to fund our business, operations and strategy.
Despite our outstanding indebtedness, we may still be able to incur substantially more debt. This could further exacerbate the risks associated with our substantial leverage.
We may incur substantial additional indebtedness in the future. Although the agreement governing our credit facility contains restrictions on the incurrence of additional indebtedness, these restrictions are subject to a number of qualifications and exceptions and the indebtedness we can incur in compliance with these restrictions could be substantial. If we incur additional debt, the risks associated with our substantial leverage would increase.
Risks relating to ownership of our common stock
Our share price may be volatile, and you could lose all or part of your investment.
The trading price of our common stock may be volatile and subject to wide price fluctuations in response to various factors, including:
•market conditions in the broader stock market in general, or in our industry in particular;
•actual or anticipated fluctuations in our quarterly financial reports and results of operations;
•our ability to satisfy our ongoing capital needs and unanticipated cash requirements;
•indebtedness incurred in the future;
•introduction of new products and services by us or our competitors;
•issuance of new or changed securities analysts’ reports or recommendations;
•sales of large blocks of our common stock;
•additions or departures of key personnel;
•regulatory developments;
•litigation and governmental investigations;
•economic and political conditions or events; and
•our sale of common stock or other securities in the future.
These and other factors may cause the market price and demand for our common stock to fluctuate substantially, which may limit or prevent investors from readily selling their shares of common stock and may otherwise negatively affect the liquidity of our common stock. In addition, in the past, when the market price of a stock has been volatile, holders of that stock have instituted securities class action litigation against the company that issued the stock. If any of our stockholders brought a lawsuit against us, we could incur substantial costs defending the lawsuit. Such a lawsuit could also divert the time and attention of our management from our business.
The trading market for our common stock is also influenced by the research and reports that industry or securities analysts publish about us or our business. If one or more securities or industry analysts cease coverage of our company or fail to publish reports on us regularly, we could lose visibility in the financial markets, which in turn could cause our stock price or trading volume to decline. If one or more of the analysts who cover us downgrades our common stock or provides more favorable recommendations about our competitors, or if our results of operations do not meet their expectations, our stock price could decline.
If a substantial number of shares become available for sale and are sold in a short period of time, the market price of our common stock could decline.
If our existing stockholders sell substantial amounts of our common stock in the public market, the market price of our common stock could decrease significantly. The perception in the public market that our existing stockholders might sell shares of common stock could also depress our market price. As of January 31, 2020, we had a total of 36,610,763 shares of common stock outstanding. The market price of shares of our common stock may drop significantly when the restrictions on resale by our existing stockholders lapse. A decline in the price of shares of our common stock might impede our ability to raise capital through the issuance of additional shares of our common stock or other equity securities.
In addition, certain stockholders are entitled, under our investors’ rights agreement, to require us to register shares owned by them for public sale in the United States. We also filed a registration statement to register shares reserved for future issuance under our equity compensation plans. As a result, subject to the satisfaction of applicable exercise periods, the shares issued upon exercise of outstanding stock options or upon settlement of outstanding RSU awards will be available for immediate resale in the United States in the open market, subject to volume limitations under Rule 144 for our executive officers and directors.
Sales of our common stock pursuant to registration rights may make it more difficult for us to sell equity securities in the future at a time and at a price that we deem appropriate. These sales could also cause the trading price of our common stock to fall and make it more difficult for you to sell shares of our common stock.
Additionally, certain of our employees, executive officers and directors have entered or may enter into Rule 10b5-1 trading plans providing for sales of shares of our common stock from time to time. Under a Rule 10b5-1 trading plan, a broker executes trades pursuant to parameters established by the employee, officer, or director when entering into the plan, without further direction from the employee, officer, or director. A Rule 10b5-1 trading plan may be amended or terminated in some circumstances. Our employees, executive officers and directors also may buy or sell additional shares outside of a Rule 10b5-1 trading plan when they are not in possession of material, nonpublic information, subject to the Rule 144 limitations referred to above.
Anti-takeover provisions under our incorporation documents and Delaware law could delay or prevent a change of control which could limit the market price of our common stock and may prevent or frustrate attempts by our stockholders to replace or remove our current management.
Our amended and restated certificate of incorporation and amended and restated bylaws contain provisions that could delay or prevent a change of control of our company or changes in our board of directors that our stockholders might consider favorable. Some of these provisions include:
•a board of directors divided into three classes serving staggered three-year terms, such that not all members of the board will be elected at one time;
•a prohibition on stockholder action through written consent, which requires that all stockholder actions be taken at a meeting of our stockholders;
•a requirement that special meetings of stockholders be called only by the board of directors acting pursuant to a resolution approved by the affirmative vote of a majority of the directors then in office;
•advance notice requirements for stockholder proposals and nominations for election to our board of directors;
•a requirement that no member of our board of directors may be removed from office by our stockholders except for cause and, in addition to any other vote required by law, upon the approval of not less than 75% of all outstanding shares of our voting stock then entitled to vote in the election of directors;
•a requirement of approval of not less than 75% of all outstanding shares of our voting stock to amend any bylaws by stockholder action or to amend specific provisions of our amended and restated certificate of incorporation; and
•the authority of the board of directors to issue preferred stock on terms determined by the board of directors without stockholder approval and which preferred stock may include rights superior to the rights of the holders of common stock.
In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporate Law, which may prohibit certain business combinations with stockholders owning 15% or more of our outstanding voting stock. These anti-takeover provisions and other provisions in our amended and restated certificate of incorporation and amended and restated bylaws could make it more difficult for stockholders
or potential acquirers to obtain control of our board of directors or initiate actions that are opposed by the then-current board of directors and could also delay or impede a merger, tender offer or proxy contest involving our company. These provisions could also discourage proxy contests and make it more difficult for you and other stockholders to elect directors of your choosing or cause us to take other corporate actions you desire. Any delay or prevention of a change of control transaction or changes in our board of directors could cause the market price of our common stock to decline.
Our amended and restated bylaws designate the Court of Chancery of the State of Delaware, or the Chancery Court, as the exclusive forum for certain litigation that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers or employees.
Our amended and restated bylaws provide that, unless we consent in writing to the selection of an alternative forum, the Chancery Court will be the sole and exclusive forum for state law claims for (1) any derivative action or proceeding brought on our behalf, (2) any action asserting a claim of breach of a fiduciary duty owed by any of our directors, officers or other employees to us or our stockholders, (3) any action asserting a claim pursuant to any provision of the General Corporation Law of the State of Delaware, our amended and restated certificate of incorporation or our amended and restated bylaws, or (4) any action asserting a claim governed by the internal affairs doctrine. This exclusive forum provision does not apply to any causes of action arising under the Securities Act of 1933, as amended, or the Securities Exchange Act of 1934, as amended.
This choice of forum provision may impose additional litigation costs on stockholders in pursuing such claims, particularly if the stockholders do not reside in or near the state of Delaware. Additionally, the forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers or other employees, which may discourage such lawsuits. The Court of Chancery of the State of Delaware may also reach different judgments or results than would other courts, including courts where a stockholder considering an action may be located or otherwise would choose to bring the action, and such judgments made be more or less favorable to us than our stockholders. Alternatively, if a court were to find the choice of forum provision in our amended and restated bylaws to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, results of operations and financial condition.
We do not currently intend to pay dividends on our common stock and, consequently, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock.
We have never declared or paid any cash dividends on our common stock and do not currently intend to do so for the foreseeable future. We currently intend to invest our future earnings, if any, to fund our growth. Therefore, you are not likely to receive any dividends on your common stock for the foreseeable future and the success of an investment in shares of our common stock will depend upon any future appreciation in its value. There is no guarantee that shares of our common stock will appreciate in value or even maintain the price at which our stockholders have purchased their shares.
We are an emerging growth company, and we cannot be certain if the reduced reporting requirements applicable to emerging growth companies will make our common stock less attractive to investors.
We are an emerging growth company, as defined in the JOBS Act, enacted in April 2012. For as long as we continue to be an emerging growth company, we may take advantage of exemptions from various reporting requirements that are applicable to other public companies that are not emerging growth companies, including not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, reduced disclosure obligations regarding executive compensation and our periodic reports and proxy statements and exemptions from the requirements of holding nonbinding advisory votes on executive compensation and stockholder approval of any golden parachute payments not previously approved. We could be an emerging growth company for up to five years following the year in which we completed our IPO, although circumstances could cause us to lose that status earlier. We will remain an emerging growth company until the earlier of (1) the last day of the fiscal year (a) following the fifth anniversary of the completion of our IPO; (b) in which we have total annual gross revenue of at least $1.07 billion; or (c) in which we are deemed to be a large accelerated filer, which requires the market value of our common stock that is held by non-affiliates to exceed $700 million as of the prior July 31st; and (2) the date on which we have issued more than $1.0 billion in non-convertible debt during the prior three-year period. We cannot predict if investors will find our common stock less attractive because we may rely on these exemptions. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and our stock price may be more volatile.
Under the JOBS Act, emerging growth companies can also delay adopting new or revised accounting standards until such time as those standards apply to private companies. We have elected not to “opt out” of such extended transition period, which means that when a standard is issued or revised and it has different application dates for public or private companies, we will adopt the new or revised standard at the time private companies adopt the new or revised standard and will do so until such time that we either (i) irrevocably elect to “opt out” of such extended transition period or (ii) no longer qualify as an emerging growth company. This may make comparison of our financial statements with the financial statements of another public company that is not an emerging growth company, or an emerging growth company that has opted out of using the extended transition period, difficult or impossible because of the potential differences in accounting standards used.
We could be subject to securities class action litigation.
In the past, securities class action litigation has often been brought against a company following a decline in the market price of its securities. If we face such litigation, it could result in substantial costs and a diversion of management’s attention and resources, which could have a material adverse effect on our business, financial condition or results of operations.
We are subject to increased costs as a result of operating as a public company, and our management will devote substantial time to new compliance initiatives.
As a public company, we will continue to incur significant legal, accounting and other expenses that we did not incur as a private company prior to our IPO. We are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended, which require, among other things, that we file with the Securities and Exchange Commission, or SEC, annual, quarterly and current reports with respect to our business and financial condition. In addition, the Sarbanes-Oxley Act, as well as rules subsequently adopted by the SEC and the New York Stock Exchange to implement provisions of the Sarbanes-Oxley Act, impose significant requirements on public companies, including requiring the establishment and maintenance of effective disclosure and financial controls and changes in corporate governance practices. Further, in July 2010, the Dodd-Frank Act was enacted. There are significant corporate governance and executive compensation related provisions in the Dodd-Frank Act that require the SEC to adopt additional rules and regulations in these areas, such as “say on pay” and proxy access. Recent legislation permits emerging growth companies to implement many of these requirements over a longer period and up to five years from their initial public offerings. We intend to take advantage of this new legislation but cannot guarantee that we will not be required to implement these requirements sooner than budgeted or planned and thereby incur unexpected expenses. Stockholder activism, the current political environment and the current high level of government intervention and regulatory reform may lead to substantial new regulations and disclosure obligations, which may lead to additional compliance costs and impact the manner in which we operate our business in ways we cannot currently anticipate.
We expect the rules and regulations applicable to public companies to continue to increase our legal and financial compliance costs and to make some activities more time-consuming and costly. If these requirements divert the attention of our management and personnel from other business concerns, they could have a material adverse effect on our business, financial condition and results of operations. The increased costs will decrease our net income or increase our net loss, and may require us to reduce costs in other areas of our business or increase the prices of our products or services. For example, we expect these rules and regulations to make it more difficult and more expensive for us to obtain director and officer liability insurance and we may be required to incur substantial costs to maintain the same or similar coverage. We cannot predict or estimate the amount or timing of additional costs we may incur to respond to these requirements. The impact of these requirements could also make it more difficult for us to attract and retain qualified persons to serve on our board of directors, our board committees or as executive officers.
An active public market may not develop or be sustained.
The lack of an active market may impair your ability to sell your shares at the time you wish to sell them or at a price that you consider reasonable. The lack of an active market may also reduce the fair market value of your shares. An inactive market may impair our ability to raise capital to continue to fund operations by selling shares and may impair our ability to acquire other companies or technologies by using our shares as consideration.