Item 1. Business
Company overview
We are a leader and an innovator in providing technology-enabled services platforms that empower consumers to make healthcare saving and spending decisions. Consumers and employers use our platforms to manage tax-advantaged health savings accounts (“HSAs”) and other consumer-directed benefits (“CDBs”) offered by employers, including flexible spending accounts and health reimbursement arrangements (“FSAs” and “HRAs”), Consolidated Omnibus Budget Reconciliation Act (“COBRA”) administration, commuter and other benefits, compare treatment options and pricing, evaluate and pay healthcare bills, receive personalized benefit information, access remote and telemedicine benefits, earn wellness incentives, and receive investment advice to grow their tax-advantaged healthcare savings. We believe the secular shift to greater consumer responsibility for healthcare costs will require a significant portion of the approximately 190 million under-age 65 consumers with private health insurance in the United States to use platforms such as ours.
The core of our offerings is the HSA, a financial account through which consumers spend and save long-term for healthcare expenses on a tax-advantaged basis. As of January 31, 2020, we administered 5.3 million HSAs, with balances totaling $11.5 billion, which we call HSA Assets. During the years ended January 31, 2020 and 2019, we added approximately 1.5 million and 679,000 new HSAs, respectively. Also, as of January 31, 2020, we administered 7.4 million complementary CDBs. We refer to the aggregate number of HSAs and other CDBs on our platforms as Total Accounts, of which we had 12.8 million as of January 31, 2020.
We reach consumers primarily through relationships with their employers, which we call Clients. We reach Clients primarily through a sales force that calls on Clients directly, relationships with benefits brokers and advisors, and integrated partnerships with a network of health plans, benefits administrators, benefits brokers and consultants, and retirement plan recordkeepers, which we call Network Partners. As of January 31, 2020, our platforms were integrated with 165 Network Partners and more than 100,000 Clients.
We have grown our share of the growing HSA market from 4% in calendar year 2010 to 16% in 2019, including by 3% as a result of the acquisition of WageWorks on August 30, 2019. According to Devenir, today we are the largest HSA provider by accounts and second largest by assets. In addition, we believe we are the largest provider of other CDBs. We seek to differentiate ourselves through our proprietary technology, product breadth, ecosystem connectivity, and service-driven culture. Our proprietary technology is designed to help consumers optimize the value of their HSAs and other CDBs, as they gain confidence and skill in their management of financial responsibility for lifetime healthcare.
Our ability to engage consumers is enhanced by our platforms’ capacity to securely share data in both directions with others in the health, benefits, and retirement ecosystems, which we call Ecosystem Partners. Our commuter benefits offering also leverages connectivity to an ecosystem of mass transit, ride hailing, and parking providers. These strengths reflect our “DEEP Purple” culture of remarkable service to customers and teammates, achieved by driving excellence, ethics, and process into everything we do.
Our business model provides strong visibility into our future operating performance. As of the beginning of the past several fiscal years, we had approximately 90% visibility into the revenue of the subsequent fiscal year.
We earn revenue primarily from three sources: service, custodial, and interchange. We earn service revenue mainly from fees paid by Clients on a recurring per-account per-month basis. We earn custodial revenue mainly from HSA Assets held at our members’ direction in federally insured cash deposits, insurance contracts or mutual funds, and from investment of Client-held funds. We earn interchange revenue mainly from fees paid by merchants on payments that our members make using our physical payment cards and virtual platforms. See “Key components of our results of operations” for additional information on our sources of revenue.
Acquisition of WageWorks
On August 30, 2019, we completed the acquisition (the "Acquisition") of WageWorks, Inc. ("WageWorks") and paid approximately $2.0 billion in cash to WageWorks stockholders, financed through net borrowings of approximately $1.22 billion under a new term loan facility and approximately $816.9 million of cash on hand.
We expect the Acquisition to enable us to increase the number of our employer opportunities, the conversion of these opportunities to Clients, and the value of Clients in generating members, HSA Assets and complementary CDBs. WageWorks’ strength of selling to employers directly and through health benefits brokers and advisors complements our distribution through health plans, benefit administrators and retirement record-keeping partners.
With WageWorks’ CDB capabilities, we are working to provide employers with a single partner for both HSAs and other CDBs, which is preferred by the vast majority of employers according to research conducted for us by Aite Group. For Clients that partner with us in this way, we believe we can produce more value by encouraging both CDB participants to contribute to HSAs and HSA-only members to take advantage of tax savings by increasing their account balances in other CDBs. Accordingly, we believe that there are significant opportunities to expand the scope of services that we provide to our Clients.
Our products and services
Technology platforms. We offer multiple cloud-based platforms, accessed by our members online via a desktop or mobile device, through which individuals can make health saving and spending decisions, pay healthcare bills, compare treatment options and prices, receive personalized benefit and clinical information, earn wellness incentives, grow their savings and make investment choices. The platforms provide users with access to services we provide as well as services provided by third parties selected by us or by our Network Partners.
Among other features, our HSA platform includes the capability to present to users medical bills upon adjudication by a health plan, including details such as the amount paid by insurance, specific nature of the medical service provided, and diagnostic code. Users of our HSA platform can pay these bills from an account of ours or from any bank account, online, via a mobile device, or using our payment card. All users of our HSA platform gain access to our healthcare consumer specialists, available every hour of every day, via a toll-free telephone number or email. Our specialists can assist users with such tasks as optimizing the use of tax-advantaged accounts to reduce medical spending or selecting from among medical plans offered by an employer or health plan.
We acquired several other technology platforms as part of the Acquisition. These additional technology platforms are designed to be highly scalable based on an on-demand delivery model that Clients and members may access through a standard web browser on any internet-enabled device, including computers, smart phones, and other mobile devices such as tablet computers. Our on-demand delivery model for these platforms eliminates the need for our Clients to install and maintain hardware and software in order to support CDB programs and enables us to rapidly implement product enhancements across our entire user base.
We intend to phase out over time certain technology platforms, which will require us to migrate certain Clients to one of our remaining technology platforms.
Health savings accounts. The Medicare Modernization Act of 2003 created HSAs, a tax-exempt trust or custodial account managed by a custodian that is a bank, an insurance company, or a non-bank custodian specifically authorized by the Internal Revenue Service, or IRS, as meeting certain ownership, capitalization, expertise, and governance requirements. We are an IRS-approved non-bank custodian of our members' HSAs, designated to serve as both a passive and non-passive non-bank custodian of HSAs.
To be eligible to contribute to an HSA, an individual must be covered under a high deductible healthcare plan, or HDHP, have no additional health coverage, not be enrolled in Medicare, and not be claimed as a dependent on someone else’s tax return. HSAs have several tax-advantaged benefits, which we call the "triple tax savings": (1) individuals can claim a tax deduction for contributions they make to their HSAs, and contributions that their employers make to their HSAs may be excluded from their gross income for purposes of federal and most state income and employment tax; (2) the interest or earnings on the assets in the account, including reinvestment, accumulate without being subject to tax; and (3) distributions may be tax free if they are used to pay qualified medical expenses. There is no requirement to provide receipts to us to substantiate HSA distributions to members, whether made through our payment card or directly from our online HSA platform. Additionally, taxable distributions other than for qualified medical expenses are permitted without penalty (although subject to income tax) after age 65. Balances remain in the account until used, i.e., there is no “use or lose” requirement. An HSA is owned by the account holder; it remains the account holder’s property upon a change of employment, health plan or retirement.
Investment platform and advisory services. We offer a mutual fund investment platform and an online-only automated investment advisory service to all of our members whose account balances exceed a stated threshold. These services are entirely elective to the member. The advisory service is delivered through a web-based tool, AdvisorTM, which is offered and managed by HealthEquity Advisors, LLC, our SEC-registered investment adviser subsidiary. HealthEquity Advisors, LLC provides investment advice to its clients exclusively through the AdvisorTM tool on an interactive website. Members who utilize our mutual fund investment platform or subscribe for AdvisorTM services pay asset-based fees, which include the cost of the advisory service and all trading commissions and other expenses associated with transactions made through these online tools.
AdvisorTM provides investment education guidance and management, including maintaining HSA cash (liquidity) in amounts directed by the member, targeting risk appropriate portfolio diversification, and mutual fund selection.
We offer three levels of service to investors:
•Self-driven: For members who do not subscribe for AdvisorTM, we provide a mutual fund investment platform to invest HSA balances. Neither we nor AdvisorTM provides advice to members in respect of investments among funds on the platform;
•GPS: AdvisorTM provides guidance and advice, but the member makes the final investment decisions and implements portfolio allocation and investment advice through the HealthEquity platform; and
•Auto-pilot: AdvisorTM manages the account and implements portfolio allocation and investment advice automatically for the member.
Regardless of the level of service selected, members are responsible for their proportionate share of fees and expenses payable by the underlying mutual funds and other investment vehicles in which they invest.
Flexible spending accounts. Healthcare FSAs are employer-sponsored CDBs that enable employees to set aside pre-tax dollars to pay for eligible healthcare expenses that are not generally covered by insurance, such as co-pays, deductibles and over-the-counter medical products, as well as vision expenses, orthodontia, and medical devices. Our employer Clients also realize payroll tax (i.e., FICA and Medicare) savings on the pre-tax contributions made by their employees.
The IRS imposes a limit, indexed to inflation, on pre-tax dollar employee contributions made to healthcare FSAs. The IRS also allows a carryover of up to $500 that does not count against or otherwise affect the indexed salary reduction limit applicable to each plan year. Employers are able to contribute additional amounts in excess of this statutory limit, and may choose to do so in an effort to mitigate the impact of rising healthcare costs on their employees.
We also administer FSA programs for dependent care plans. These plans allow employees to set aside pre-tax dollars to pay for eligible dependent care expenses, which typically include child care or day care expenses but may also include expenses incurred from adult and elder care. Current laws and regulations impose a statutory limit on the amount of pre-tax dollars employees can contribute to dependent care FSAs with no carryover allowed. Like healthcare FSAs, employers can also contribute funds to employees’ dependent care FSAs, subject to the statutory annual limit on total contributions. As with healthcare FSAs, employers realize payroll tax savings on the pre-tax dependent care FSA contributions made by their employees.
In March 2016 WageWorks was selected by the United States Office of Personnel Management (“OPM”) to administer its Federal Flexible Spending Account Program (“FSAFEDS”). This relationship provides eligible federal government employees access to our advanced technology platforms and premium service capabilities. In addition, the United States Postal Service became a member of the OPM contract during the first quarter of 2017. These relationships were acquired by us through the Acquisition.
Health reimbursement arrangements. Under HRAs, employers provide their employees with a specified amount of reimbursement funds that are available to help employees defray their out-of-pocket healthcare expenses, such as deductibles, co-insurance and co-payments. HRAs may only be funded by employers and there is no limitation on how much employers may contribute; however, similar to other CDBs that are funded with pre-tax dollars, employers are required to establish the programs in such a way as to prevent discrimination in favor of highly compensated employees. HRAs must either be considered an excepted benefit (for example, a dental-only HRA or a vision-only HRA), a retiree HRA or be integrated with another group health plan. HRAs can be customized by employers so employers have the freedom to determine what expenses are eligible for reimbursement under these arrangements. At the end of the plan year, employers have the option to allow all or a portion of the unused funds to roll over and accumulate year-to-year if not spent. All amounts paid by employers into HRAs are deductible for tax purposes by the employer and tax-free to the employee.
COBRA. We offer COBRA continuation services to employer clients to meet the employer’s obligation to make available continuation of coverage for participants who are no longer eligible for the employer’s COBRA covered benefits, which include medical, dental, vision, HRAs and certain healthcare FSAs. COBRA requires employers to make health coverage available for qualified beneficiaries for a period of up to 36 months post-termination. As part of our COBRA program, we offer a direct billing service where former employee participants pay us directly as opposed to their employers for coverage they elect to continue. We handle the accounting and customer services for such terminated employees, as well as interfacing with the carrier regarding the employees’ eligibility for participation in the COBRA program.
Commuter Programs. We administer pre-tax commuter benefit programs. Employers are permitted to provide employees with commuter benefits including qualified transit (which includes vanpooling) and parking. The maximum monthly federal (and sometimes state) tax free exclusion is adjusted for inflation. For 2020, the maximum pre-tax monthly limits are $270 for qualified transit and $270 for qualified parking.
Our technology
Our proprietary technology is deployed as a cloud-based solution that is accessible to customers through the web and mobile devices. We utilize a multi-tenant architecture that allows changes made for one Network Partner to be extended to all others. This architecture provides operating leverage by reducing costs and improving efficiencies, enabling us to maximize the utilization of our infrastructure capacity with a reduction in required maintenance. We are increasing investment in our technology and communications systems to support new opportunities and enhance security, privacy, and platform infrastructure. During the years ended January 31, 2020, 2019, and 2018, we capitalized software development costs of $24.1 million, $9.3 million, and $8.1 million, respectively. In addition, we incurred $23.8 million, $13.7 million, and $12.2 million, respectively, in software development costs primarily related to the post-implementation and operation stages of our proprietary software.
Our solution is hosted on a virtual private cloud with an ability to scale on demand. This allows us to quickly support our current and projected growth. We utilize multiple redundant third-party data centers to ensure continuous access and data availability. The data centers are purpose-built facilities for hosting mission critical systems with multiple built-in redundancy layers to minimize service disruptions and meet industry-standard measures.
Due to the sensitive nature of our customers’ data, we have a heightened focus on data security and protection. We have implemented industry-standard processes, policies, and tools through all levels of our software development and network administration, reducing the risk of vulnerabilities in our system.
Our competitive landscape
Our direct competitors are HSA custodians and other CDB providers. Many of these are state or federally chartered banks and other financial institutions for which we believe technology-based healthcare services are not a core business. Certain of our direct competitors have chosen to exit the market despite increased demand for these services. This has created, and we believe will continue to create, opportunities for us to leverage our technology platforms and capabilities to increase our market share. However, some of our direct competitors (including well-known mutual fund companies such as Fidelity Investments and healthcare service companies such as United Health Group's Optum) are in a position, should they choose, to devote more resources to the development, sale and support of their products and services than we have at our disposal. In addition, numerous indirect competitors, including benefits administration technology and service providers, partner with banks and other HSA custodians to compete with us. Our Network Partners may also choose to offer competitive services directly, as some health plans have done. Our success depends on our ability to predict and react quickly to these and other industry and competitive dynamics.
Our competitive strengths and strategy
We believe we are well-positioned to benefit from the transformation of the healthcare benefits market. Our technology platforms are aligned with a healthcare environment that rewards consumer engagement and fosters an integrated consumer experience.
Leadership and first-mover advantage. We have established a defensible leadership position in the HSA industry through our first-mover advantage, focus on innovation, and differentiated capabilities. Our leadership position is evidenced by the quadrupling of our market share (measured by HSA Assets), from 4% in December 2010 to 16% in December 2019, as noted by the 2019 Devenir HSA Research Report, which indicates we are the second largest HSA custodian by market share measured by HSA Assets.
Complete solution for managing consumer healthcare saving and spending. Our members utilize our platforms in a number of ways and in varying frequencies. For example, our members utilize our HSA platform to evaluate and pay healthcare bills through the member portal, which allows members to pay their healthcare providers, receive reimbursements and learn of savings opportunities for prescription drugs. Members also utilize the platform’s mobile app to view and pay claims on-the-go, including uploading medical and insurance documentation to the platform with their mobile phone cameras.
Bundled solution for HSAs and complementary CDBs. We are the largest custodian and administrator of HSAs (by number of accounts), as well as a market-share leader in each of the major categories of complementary CDBs, including FSAs and HSAs, COBRA and commuter benefits administration. Our Clients and their benefits
advisors increasingly seek HSA providers that can deliver an integrated offering of HSAs and complementary CDBs. With WageWorks’ CDB capabilities, we can provide employers with a single partner for both HSAs and complementary CDBs, which is preferred by the vast majority of employers, according to research conducted for us by Aite Group. We believe that the combination of HSA and complementary CDB offerings significantly strengthens our value proposition to employers, health benefits brokers and consultants, and Network Partners as a leading single-source provider.
Proprietary and integrated technology platforms. We have proprietary cloud-based technology platforms, developed and refined during more than a decade of operations and acquired through the Acquisition, which we believe are highly differentiated in the marketplace for a number of key reasons:
•Purpose-built technology: Our platforms were designed specifically to serve the needs of healthcare consumers, health plans and employers. We believe they provide greater functionality and flexibility than the technologies used by our competitors, many of which were originally developed for banking, benefits administration or retirement services. We believe we are one of few providers with platforms that encompass all of the core functionality of healthcare saving and spending in integrated, secure, and compliant systems, including custodial administration of individual savings and investment accounts, card and electronic funds transaction processing, benefits enrollment and eligibility, electronic and paper medical claims processing, medical bill presentment, tax-advantaged reimbursement account and health incentive administration, HSA trust administration, online investment advice, and sophisticated analytics.
•Data integration: Our technology platforms allow us to integrate data from disparate sources, which enables us to seamlessly incorporate personal health information, clinical insight, and individually tailored strategies into the consumer experience. We currently have more than 15,000 distinct integrations with health plans, pharmacy benefit managers, employers, and other benefits provider systems. Many of our partners’ systems rely on custom data models, non-standard formats, complex business rules, and security protocols that are difficult or expensive to change.
•Configurability: Our flexible technology platforms enable us to create a unique solution for each of our Network Partners. For example, a HealthEquity team member can readily configure product attributes, including integration with a partner’s chosen healthcare price transparency or wellness tools, single sign on, sales and broker support sites, branding, member communication, custom fulfillment and payment card, savings options and interest rates, fees, and mutual fund investment choices.
Differentiated consumer experience. We have designed our solutions and support services to deliver a differentiated consumer experience, which is a function of our culture and technology. We believe this provides a significant competitive advantage relative to legacy competitors whom we believe prioritize transaction processing and benefits administration.
•Culture: We call our culture “DEEP Purple,” which we define as driving excellence, ethics, and process while providing remarkable service. Our DEEP Purple culture is a significant factor in our ability to attract and retain customers and to nimbly address opportunities in the rapidly changing healthcare sector.
•Technology: Our technology helps us to deliver on our commitment to DEEP Purple. We tailor the content of our platforms and the guidance of our experts to be timely, personal, and relevant to each member. For example, our technology generates health savings strategies that are delivered to our members when they interact with our platforms or call us. We employ individuals who provide real-time assistance to our members via telephone, email, or chat.
•Customer service and education: As a key part of our strategy and commitment to DEEP Purple, our team members work directly with our Network Partners to engage with consumers, educating them about the benefits of our HSAs and our other products and providing personalized guidance.
We believe our DEEP Purple culture drives our success. Our commitment to DEEP Purple has been rewarded with consumer loyalty scores that exceed those of most banks and traditional health insurers.
Large and diversified channel access. We believe our differentiated distribution platforms provide a competitive advantage by efficiently enabling us to reach a growing consumer market. Our platforms are built on a business-to-business-to-consumer, or B2B2C, channel strategy, whereby we work with Network Partners to reach consumers in addition to marketing our services to these potential members directly. Reaching the consumer is critical in order for us to increase the number of our HSA members.
We work directly with our Network Partners to reach the consumer in various ways. Our Health Plan and Administrator Partners collectively employ thousands of sales representatives and account managers who promote
both the Health Plan and Administrators Partner’s health insurance products, such as HDHPs, and our HSAs. Our Employer Partners collectively employ thousands of human resources professionals who are tasked with explaining the benefits of our HSAs to their employees. Our sales and account management teams work with and train the sales representatives and account management teams and the human resource professionals of our Network Partners on the benefits of enrolling in, contributing to, and saving and spending through our HSAs, and our Network Partners then convey these benefits to prospective members. As a result of this collaboration, we develop relationships with each member who enrolls in an HSA with us. This personalized engagement with our members constitutes our B2B2C channel strategy.
Scalable operating model. We believe that our technology is scalable because our products and services are accessed primarily through our technology platforms, which are cloud based. After initial on-boarding and a period of education, our service costs for any given customer typically decline over time. Our opportunity to earn high-margin revenue from existing HSA members grows over time because our HSA members’ balances typically grow, increasing custodial revenue without significant incremental cost to us.
Strong customer retention rates. Retention of our HSA members has been strong over time. Individually owned trust accounts, including HSAs, have inherently high switching costs, as switching requires a certain amount of effort on the part of the account holder and may result in closure fees. We believe that our retention rates are also high due to our HSA platform’s integration with the broader healthcare system used by our HSA members and our customer engagement and focus on the consumer experience.
Selectively pursue strategic acquisitions. We have a successful history of acquiring HSA portfolios and businesses that strengthen our platform, including the recent acquisition of WageWorks. We expect to continue this growth strategy and regularly evaluate opportunities. We have developed an internal capability to source, evaluate, and integrate acquisitions that have created value for stockholders. We believe the nature of our competitive landscape provides significant acquisition opportunities. Many of our competitors view their HSA businesses as non-core functions. We believe they may look to divest these assets and, in certain cases, be limited from making acquisitions due to depository capital requirements.
Government regulation
Our business is subject to extensive, complex, and rapidly changing federal and state laws and regulations.
IRS regulations
We are subject to applicable IRS regulations, which lay the foundation for tax savings and eligible expenses under the HSAs, HRAs, and FSAs we administer. The IRS issues guidance regarding these regulations regularly. In addition, we are subject to conflict of interest and other prohibited transaction rules that are enforced through excise taxes under the Internal Revenue Code. Although the excise taxes are enforced by the IRS, the underlying rules are promulgated by the Department of Labor.
In February 2006, HealthEquity, Inc. received designation by the U.S. Department of Treasury to act as a passive non-bank custodian, which allows HealthEquity, Inc. to hold custodial assets for individual account holders. In July 2017, HealthEquity, Inc. received designation by the U.S. Department of Treasury to act as both a passive and non-passive non-bank custodian, which allows HealthEquity, Inc. to hold custodial assets for individual account holders and use discretion to direct investment of such assets held. As a passive and non-passive non-bank custodian, the Company must maintain net worth (assets minus liabilities) greater than 2% of passive custodial funds held at each calendar year-end and 4% of the non-passive custodial funds held at each calendar year-end in order to take on additional custodial assets. As of December 31, 2019, the Company's year-end for trust and tax purposes, the net worth of the Company exceeded the required thresholds.
Privacy and data security regulations
In the provision of HSA custodial services and directed TPA services for FSAs and HRAs, we are subject to the Financial Services Modernization Act of 1999 (Gramm-Leach-Bliley Act or GLBA), the Health Insurance Portability and Accountability Act of 1996 (HIPAA, as amended by the Health Information Technology for Economic and Clinical Health Act), and similar state laws.
GLBA imposes financial privacy and security requirements on financial institutions that relate to the collection, storage, use, and disclosure of an account holder’s nonpublic personal information. Nonpublic personal information includes information that is collected or generated in the course of offering a financial product or service. For example, nonpublic personal information includes information submitted by a prospective account holder in an application, an account holder’s name and contact information, and transaction information. Because part of our business is the administration of financial products such as HSAs, we are required under the Consumer Financial
Protection Bureau’s financial privacy rule under GLBA to send a notice of privacy practices to account holders and to comply with restrictions on the disclosure of nonpublic personal information to non-affiliated third parties. We are also required under GLBA to establish reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of nonpublic personal information pursuant to the Federal Trade Commission’s safeguards rule. Violations of GLBA can result in civil and criminal penalties.
HIPAA covered entities and their business associates are required to adhere to HIPAA privacy and security standards. Covered entities include most healthcare providers, health plans, and healthcare clearinghouses. Because we perform services (such as FSA services) for covered entities that include processing protected health information, we are a business associate and subject to HIPAA. The two rules that most significantly affect our business are: (i) the Standards for Privacy of Individually Identifiable Health Information, or the Privacy Rule; and (ii) the Security Standards for the Protection of Electronic Protected Health Information, or the Security Rule. The Privacy Rule restricts the use and disclosure of protected health information, and requires us to safeguard that information and provide certain rights to individuals with respect to that information. The Security Rule establishes requirements for safeguarding protected health information transmitted or stored electronically. Both civil and criminal penalties apply for violating HIPAA, which may be enforced by both the Department of Health and Human Services’ Office for Civil Rights and state attorneys general. Violations of HIPAA may also subject us to contractual remedies under the terms of agreements with covered entities.
States also have laws and regulations that impose additional restrictions on our collection, storage, and use of personally identifiable information. Privacy regulation has become a priority issue in many states, including California, which in 2018 enacted the California Consumer Privacy Act broadly regulating California residents’ personal information and providing California residents with various rights to access and control their data.
ERISA
Our private-sector clients’ FSAs, HRAs, COBRA continuation insurance, and other account-based retirement plans are covered by the Employee Retirement Income Security Act of 1974, as amended, or ERISA, which governs “employee benefits plans.” Title I of ERISA does not generally apply to HSAs. ERISA generally imposes extensive reporting requirements on employers, as well as an obligation to provide various disclosures to covered employees and beneficiaries; and employers and third-party administrators that have authority or discretion over management, administration, or investment of plan assets are subject to fiduciary responsibility under ERISA. ERISA's requirements affect our FSAs, HRAs, and COBRA administration businesses. The Department of Labor can bring enforcement actions or assess penalties against employers, investment advisers, administrators, and other service providers for failing to comply with ERISA’s requirements. Participants and beneficiaries may also file lawsuits against employers, investment advisers, administrators, and other service providers under ERISA.
Department of Labor
The Department of Labor, or the DOL, regulates plans that are subject to ERISA, including health FSAs, HRAs, and 401(k) and other retirement plans, as well as COBRA administration. The DOL also issues guidance related to fiduciary responsibility and prohibited transactions under ERISA and the Internal Revenue Code that affect administration of HSAs (as well as health FSAs, HRAs, and retirement plans).
The DOL issues regulations, technical releases, and other guidance that apply to employee benefit plans, tax-favored savings arrangements (including HSAs) and COBRA administration, generally. In addition, in response to a request by an individual or an organization, the DOL’s Employee Benefits Security Administration may issue an advisory opinion that interprets and applies ERISA and/or corresponding prohibited transaction rules under the Internal Revenue Code to a specific situation, including issues related to consumer-centric healthcare accounts and retirement plans.
Healthcare reform
In March 2010, the federal government enacted significant reforms to healthcare benefits through the Affordable Care Act. The legislation amended various provisions in many federal laws, including the Internal Revenue Code and ERISA. The reforms included new excise taxes that incentivize employers to provide health benefits (including HSA-compatible benefits) to all full-time employees and new coverage mandates for health plans. The rules directly affect health FSAs and HRAs and have an indirect effect on HSAs. Further changes to the Affordable Care Act and related healthcare regulation remain under consideration, including proposed "Medicare for all" plans.
Investment Advisers Act of 1940
Our subsidiary HealthEquity Advisors, LLC is an SEC-registered investment adviser that provides web-only automated investment advisory services to members. As an SEC-registered investment adviser, it must comply with
the requirements of the Investment Advisers Act of 1940, or the Advisers Act, and related Securities and Exchange Commission, or SEC, regulations and is subject to periodic inspections by the SEC staff. Such requirements relate to, among other things, fiduciary duties to clients, disclosure obligations, recordkeeping and reporting requirements, marketing restrictions limitations on agency cross and principal transactions between the adviser and its clients, and general anti-fraud prohibitions. The SEC is authorized to institute proceedings and impose sanctions for violations of the Advisers Act, ranging from fines and censure to termination of an investment adviser’s registration. Investment advisers also are subject to certain state securities laws and regulations. Failure to comply with the Advisers Act or other federal and state securities and regulations could result in investigations, sanctions, profit disgorgement, fines or other similar consequences.
Intellectual property
Intellectual property is important to our success. We rely on trademarks and other forms of intellectual property rights and measures, including trade secrets, know-how and other unpatented proprietary processes, and nondisclosure agreements, to maintain and protect proprietary aspects of our products and technologies. We require our team members and consultants to execute confidentiality agreements in connection with their employment or consulting relationships with us. We also require our team members and consultants to disclose and assign to us all inventions conceived during the term of their employment or engagement while using our property or which relate to our business.
Geographic areas
Our sole geographic market is the U.S.
Employees
We refer to our employees as our team members. As of January 31, 2020, we had 2,931 team members, including 1,958 in service delivery, 495 in technology and development, and 478 in sales and marketing, general and administrative. We consider our relationship with our team members to be good. None of our team members are represented by a labor union or are party to a collective bargaining agreement.
Corporate information
HealthEquity, Inc. was incorporated as a Delaware corporation on September 18, 2002. Our principal business office is located at 15 W. Scenic Pointe Dr., Ste. 100, Draper, Utah 84020. Our website address is www.healthequity.com. We do not incorporate the information contained on, or accessible through, our corporate website into this Annual Report on Form 10-K, and you should not consider it to be part of this report.
Where you can find additional information
Our website is located at www.healthequity.com, and our investor relations website is located at ir.healthequity.com. Copies of our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and any amendments to these reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act are available, free of charge, on our investor relations website as soon as reasonably practicable after we file such material electronically with or furnish it to the SEC.
Item 1A. Risk factors
You should carefully consider the risks described below together with the other information set forth in this Annual Report on Form 10-K, which could materially affect our business, financial condition, and future results. The risks described below are not the only risks facing our company. Risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially adversely affect our business, financial condition, and operating results. If any of the following risks are realized, our business, financial condition, results of operations, and prospects could be materially and adversely affected. In that event, the trading price of our common stock could decline.
Risks relating to the Acquisition and the integration of the WageWorks business into the Company
We may experience difficulties in integrating the operations of WageWorks into our business and in realizing the expected benefits of the Acquisition.
The success of the Acquisition depends in part on our ability to realize the anticipated business opportunities from combining the operations of WageWorks with our business in an efficient and effective manner. The integration process is an expensive multi-year process that could take longer and cost more than anticipated and result in the loss of Clients.
As part of the integration process, we are working to migrate certain Clients to different technology platforms, which could result in Client attrition if we are unable to meet Client expectations or if we are unable to meet the technical requirements of our Clients. Clients may also decide to not cooperate with the platform migration process, resulting in delays to and additional costs associated with this process or the loss of those Clients. The challenges associated with the platform migration process may result in Client dissatisfaction, potentially impairing our long-term relationship with our Clients. We may also face challenges in integrating the back-office systems and people associated with these technology platforms.
Another important aspect of the integration process is the integration of prior WageWorks acquisitions, as WageWorks historically allowed its acquired companies to continue functioning relatively independently, including through the use of independent technology platforms. For example, WageWorks was not able to completely integrate its acquisition of ADP’s Consumer Health Spending Account, COBRA, and direct bill businesses, resulting in the attrition of the clients associated with this business, which may continue to occur. Failure to successfully integrate these prior acquisitions as part of our overall integration process may adversely impact our ability to succeed as a combined company.
The integration process has also resulted, and may continue to result in, the loss of team members, as some team members have decided to seek alternative employment, including members of the finance team. In addition, our management team and other team members are spending significant amounts of time on integration efforts, which may distract them from their other responsibilities.
Integration could also disrupt each company's ongoing businesses, result in tax inefficiencies, or create inconsistencies in standards, controls, information technology systems, procedures, and policies, any of which could adversely affect our ability to maintain relationships with third parties, or our ability to achieve the anticipated benefits of the Acquisition, and could harm our financial performance.
If we are unable to successfully or timely integrate the operations of WageWorks with our business, we may incur unanticipated costs and be unable to realize the revenue growth, synergies, and other anticipated benefits resulting from the Acquisition, and our business, results of operations, and financial condition could be materially and adversely affected.
The synergies attributable to the Acquisition may vary from expectations.
We may fail to realize our anticipated benefits and synergies expected from the Acquisition, which could adversely affect our business, financial condition, and operating results. The success of the Acquisition will depend, in significant part, on our ability to successfully integrate the acquired business, grow the revenue of the combined company and realize the anticipated strategic benefits and synergies from the combination. We believe that the addition of WageWorks complements our strategy by giving us access to more of the fast-growing HSA market by expanding our direct distribution to employers and benefits advisors as a single source, premier provider of HSAs and complementary CDBs. However, achieving these goals requires growth of the revenue of the combined company, the integration of the WageWorks' CDB and other offerings with our technology platforms, realization of target custodial and other revenue synergies, and realization of the targeted cost synergies expected from the Acquisition. This growth and the anticipated benefits of the transaction may not be realized fully or at all, or may
take longer or cost more to realize than expected. Actual operating, technological, strategic, and revenue opportunities, if achieved at all, may be less significant than expected or may take longer or cost more to achieve than anticipated. If we are not able to achieve these objectives and realize the anticipated benefits and synergies expected from the Acquisition within the anticipated timing or at all, our business, financial condition, and operating results may be adversely affected.
The restatement of WageWorks’ previously issued financial results resulted in securities class action and stockholder litigation, as well as government investigations that could result in enforcement actions, which could have a material adverse impact on us.
WageWorks and certain of its former directors and officers are subject to securities class action and stockholder litigation relating to its previous public disclosures. In addition, WageWorks and certain of its former directors and officers are subject to government investigations arising out of the misstatements in its previously issued financial statements. See Note 7—Commitments and contingencies of the Notes to consolidated financial statements for a description of these legal proceedings and investigations. The legal proceedings may result in substantial liability and other adverse consequences. In addition, WageWorks could become subject to additional private litigation or investigations, or one or more government enforcement actions, arising out of alleged misstatements in its previously issued financial statements. Our management team may be required to devote significant time and attention to these matters, and these and any additional matters that arise could have a material adverse impact on our results of operations, financial condition, liquidity, and cash flows. We may also incur significant additional expenses in connection with these proceedings and investigations in order to defend this litigation and to fulfill indemnification obligations to former officers and directors of WageWorks.
WageWorks previously identified material weaknesses in its internal control over financial reporting which could, if not remediated, adversely affect our ability to report our financial condition and results of operations in a timely and accurate manner.
Our management is responsible for establishing and maintaining adequate internal control over financial reporting, as defined in Rule 13a-15(f) under the Exchange Act. WageWorks determined previously that its internal control over financial reporting was not effective due to the existence of unremediated material weaknesses in its internal control over financial reporting. See Item 9A - Controls and Procedures for a description of WageWorks' material weaknesses in its internal control over financial reporting.
We are developing a remediation plan designed to address the material weaknesses, but our remediation efforts are ongoing. If our remedial measures are insufficient to address the material weaknesses, or if additional material weaknesses or significant deficiencies in our internal control are discovered or occur in the future, it may materially adversely affect our ability to report our financial condition and results of operations in a timely and accurate manner. If we are unable to report our results in a timely and accurate manner, we may not be able to comply with the applicable covenants in our credit agreement, and may be required to seek waivers or repay amounts under the credit agreement earlier than anticipated, which could adversely impact our liquidity and financial condition. Although we continually review and evaluate internal control systems to allow management to report on the sufficiency of our internal controls over financial reporting, we cannot assure you that we will not discover additional weaknesses in our internal control over financial reporting.
The complexity of the integration and transition associated with the Acquisition, together with the resulting increased scale and national presence, may affect our internal control over financial reporting and ability to effectively and timely report financial results.
The additional scale of the combined company's operations, together with the complexity of the integration effort, including the integration of, changes to or implementation of critical information technology systems, may adversely affect our ability to report financial results on a timely basis. In addition, we have to train new team members and third-party providers. The Acquisition requires significant modifications to our internal control systems, processes, and information systems, both on a transition basis and over the longer-term as we fully integrate the combined company. Due to the complexity of the Acquisition, we cannot be certain that changes to our internal control over financial reporting will be effective for any period, or on an ongoing basis. If we are unable to accurately report our financial results in a timely manner or are unable to assert that our internal controls over financial reporting are effective, our business, financial condition and results of operations, and the market perception thereof, may be materially adversely affected.
WageWorks may have liabilities that are not known at this time.
As a result of the Acquisition, WageWorks became our subsidiary, subject to all of its liabilities, including the class action and derivative lawsuits and SEC investigation described above, as well as contractual indemnification
obligations to its Clients arising from WageWorks' service delivery issues. There could be unasserted claims, assessments or contractual indemnification obligations that we failed or were unable to discover or identify in the course of performing due diligence investigations of WageWorks. Any such liabilities, individually or in the aggregate, could have a material adverse effect on our financial results. We may learn additional information about WageWorks that adversely affects us, such as unknown, unasserted, or contingent liabilities and issues relating to compliance with applicable laws.
Risks relating to our business and industry
A widespread health pandemic, such as the current outbreak of the COVID-19 virus, could materially impact our business.
Our business could be severely impacted by a widespread regional, national or global health pandemic. For example, a widespread health pandemic may cause our account holders to use HSA funds to cover healthcare expenses on a much larger scale than normal, which could impact our relationships with our depository partners that hold these funds, cause us to incur fees as a result of lower account balances held with depository partners and reduce revenue we receive on such funds. In addition, a health pandemic may cause interest rates to decline, which would negatively impact the interest rates we receive when depositing new HSA Assets or client-held funds with our depository partners. In addition, a health pandemic may cause stock market fluctuations which could negatively impact HSA investment assets and the related fees that we earn from them. A health pandemic may also impact the number of sales opportunities available to the Company. Finally, our ability to provide high levels of service to our clients could also be negatively impacted if a large number of our team members or employees of our vendors that we rely upon are unable to fulfill their responsibilities due to sickness.
We expect our business to be adversely affected by the recent outbreak of the COVID-19 virus, including as a result of the associated interest rate cuts by the Federal Reserve and other market conditions that have caused interest rates to decline significantly and, as a result, funds that we place with our depository partners in this environment will receive lower interest rates than we originally expected. We expect stock market fluctuations to negatively impact HSA investment assets and the related fees we earn from them. Sales opportunities have also been impacted, with some opportunities delayed or now being held virtually. We may be unable to meet our service level commitments to our clients as a results of disruptions to our work force and disruptions to third part contracts that we rely on to provide our services. Our financial results related to certain of our products may be adversely affected, such as commuter benefits, due to many of our members working from home during the outbreak or other impacts from the outbreak. Clients may be unable to pay fees required under contracts and exercise "force majeure" or similar clauses, which would negatively impact our financial results. In the event our financial results are severely impacted, it may make it more difficult for us to comply with the financial covenants in our credit agreement, which could result in a breach of the financial covenants and the acceleration of our outstanding debt by our lenders. The extent to which the COVID-19 virus will negatively impact our business remains highly uncertain and as a result may have a material adverse impact on our business and financial results.
Our business is fundamentally dependent upon the availability and adoption of tax-advantaged health savings accounts and other CDBs by consumers and employers. Any diminution in, elimination of, or change in the availability of tax benefits or use of these accounts would materially adversely affect our results of operations, financial condition, business, and prospects.
Substantially all of our revenue is earned from tax-advantaged HSAs and other CDBs. Based on our experience with our customers, we believe that many consumers are not familiar with, or do not fully appreciate, the tax-advantaged benefits of HSAs and other CDBs. If employers reduce or cease to offer HSAs or other CDB programs, the tax benefits for these accounts are reduced or eliminated, or the rate of adoption of these accounts decreases, our results of operations, financial condition, business, and prospects would be materially and adversely affected.
Our industry is rapidly evolving and undergoing significant technological change. If we are not successful in adapting to the evolving environment and promoting and improving the benefits of our technology platforms, our growth may be limited, and our business may be adversely affected.
The market for our products and services is subject to rapid and significant change and competition. The market for technology-enabled services that empower consumers of HSAs and other CDBs is characterized by rapid technological change, new product and service introductions, evolving industry standards, changing customer needs, existing competition, and the entrance of non-traditional competitors. In addition, there may be a limited-time opportunity to achieve and maintain a significant share of this market due in part to our rapidly evolving industry and the substantial resources available to our existing and potential competitors. It is uncertain whether our market will achieve and sustain high levels of demand and market adoption. In order to remain competitive, we are continually involved in a number of projects to develop new services or compete with these new market entrants. These
projects carry risks, such as cost overruns, delays in delivery, performance problems, and lack of acceptance by our customers.
Our success depends to a substantial extent on the willingness of consumers to increase their use of technology platforms to manage their saving and spending through HSAs and other CDBs, the ability of our platforms to increase consumer engagement, and our ability to demonstrate the value of our platforms to our existing customers and potential customers. If our existing customers do not recognize or acknowledge the benefits of our platforms or our platforms do not drive consumer engagement, then the market for our products and services might develop more slowly than we expect, which could adversely affect our operating results. In addition, we have limited insight into trends that might develop and affect our business. We might make errors in predicting and reacting to relevant business, legal, and regulatory trends, which could harm our business. If any of these events occur, it could materially adversely affect our business, financial condition or results of operations.
Finally, our competitors may have the ability to devote more financial and operational resources than we can to developing new technologies and services, including services that provide improved operating functionality, and adding features to their existing service offerings. If successful, their development efforts could render our services less desirable, resulting in the loss of our existing customers or a reduction in the fees we earn from our products and services.
We may be unable to compete effectively against our current and future competitors, which could have a material adverse effect on our results of operations, financial condition, business, and prospects.
The market for our products and services is highly competitive, rapidly evolving, and fragmented. We view our competition in terms of direct and indirect competitors. Our direct HSA competitors are HSA custodians that include state or federally chartered banks, such as Webster and Optum Bank, insurance companies, well-known retail investment companies, such as Fidelity Investments, and non-bank custodians approved by the U.S. Treasury as meeting certain ownership, capitalization, expertise, and governance requirements.
The HSA market is highly fragmented. We also have numerous indirect HSA competitors, including benefits administrators and health plans, that license technology platforms and partner with other HSA custodians to provide "white label" HSA offerings. Increased focus on HSA-favorable healthcare regulatory reforms may create renewed interest and investment by our competitors in their HSA offerings and lead to greater competition, which could make it harder for us to maintain our growth trajectory. Our competitors may also offer reduced fee or no-fee HSAs, which may permit them to increase market share in our market and lead to customer and Network Partner attrition, or cause us to reduce our fees; and this risk could be compounded if legal requirements or administrative rules are interpreted in a way that makes compliance more onerous for us than for our competitors. Our other CDB competitors include health insurance carriers, human resources consultants and outsourcers, payroll providers, national CDB specialists, regional third-party administrators, and commercial banks.
If one or more of our competitors were to merge or partner with another of our competitors, the change in the competitive landscape could materially adversely affect our ability to compete effectively. Our competitors may also establish or strengthen cooperative relationships with our current or future Network Partners or other strategic partners, thereby limiting our ability to promote our solution with these parties. Our Health Plan and Administrator Partners may also decide to offer HSAs or other CDBs directly, which would significantly reduce our channel partner opportunities.
Well-known retail mutual fund companies, such as Fidelity Investments, have entered the HSA business and Fidelity and other mutual fund companies may decide to expand their presence in the market. These investment companies have significant advantages over us in terms of brand name recognition, years of experience managing tax-advantaged retirement accounts (e.g., 401(k) and IRA), highly developed recordkeeping, trust functions, and fund advisory and customer relations management, among others. If we are unable to compete effectively with new competitors, our results of operations, financial condition, business, and prospects could be materially adversely affected.
Many of our competitors, in particular banks, insurance companies, and other financial institutions, have longer operating histories and significantly greater financial, technical, marketing, and other resources than we have. As a result, some of these competitors may be in a position to devote greater resources to the development, promotion, sale, and support of their products and services and have offered, or may in the future offer, a wider range of products and services that are increasingly desired by potential customers, and they may also use advertising and marketing strategies that (including loss-leaders) achieve broader brand recognition or acceptance.
Developments in the rapidly changing healthcare industry could adversely affect our business.
Substantially all of our revenue is derived from healthcare-related saving and spending by consumers, which could be affected by changes affecting the broader healthcare industry, including decreased spending in the industry overall. General reductions in expenditures by healthcare industry participants could result from, among other things:
•government regulation or private initiatives that affect the manner in which healthcare industry participants interact with consumers and the general public;
•consolidation of healthcare industry participants;
•reductions in governmental funding for healthcare; and
•adverse changes in general business or economic conditions affecting healthcare industry participants.
Even if general expenditures by industry participants remain the same or increase, developments in the healthcare industry may result in reduced spending in some or all of the specific market segments that we serve now or in the future. The healthcare industry has changed significantly in recent years, and we expect that significant changes will continue to occur. However, the timing and impact of developments in the healthcare industry are difficult to predict. We cannot assure you that the demand for our products and services will continue to exist at current levels or that we will have adequate technical, financial, and marketing resources to react to changes in the healthcare industry.
If our members do not continue to utilize our payment cards, our results of operations, business, and prospects would be materially adversely affected.
We derived 16%, 21%, and 22% of our total revenue during the years ended January 31, 2020, 2019, and 2018, respectively, from fees that are paid to us when our customers utilize our payment cards. These fees represent a percentage of the expenses transacted on each card. If our customers do not use these payment cards at the rate we expect, if they elect to withdraw funds using a non-revenue generating mechanism such as direct reimbursement, or if other alternatives to these payment cards develop, our results of operations, business, and prospects would be materially adversely affected.
Data security, technological, and intellectual property risks
As one of the largest providers of HSAs and other CDBs, we are frequently the target of cyber-attacks or other privacy or data security incidents. If our security measures are breached or unauthorized access to data is otherwise obtained, our technology platforms may be perceived as not being secure, our customers may reduce the use of, or stop using, our products and services, we may incur significant liabilities, our reputation may be harmed, and we could lose sales and customers.
Our proprietary technology platforms enable the exchange of, and access to, sensitive information, and, as a result, we are frequently the target of cyber-attacks or other privacy or data security incidents. As a result of the Acquisition, we are one of the largest providers of HSAs and other CDBs and therefore an even more attractive target for cyber-attacks. The Acquisition has also added several new technology platforms that we must continue to secure and monitor, aligning them to our industry benchmark security posture.
Security breaches could result in the loss of this sensitive information, theft or loss of actual funds, litigation, indemnity obligations to our customers, fines and other liabilities, including under laws that protect the privacy of personal information, disrupt our operations and the services we provide to our members and Network Partners, damage our reputation, and cause a loss of confidence in our products and services. While we have security measures in place, we have experienced data privacy incidents, including several incidents in 2018. As a result, or if our security measures are breached again or unauthorized access to data is otherwise obtained as a result of third-party action, team member error or otherwise, our reputation could be significantly damaged, our business may suffer and we could incur substantial liability which could result in loss of sales and customers.
In addition, we are continuing to evaluate the security measures associated with the technology platforms used by WageWorks, and we may find that current security measures for these platforms are not sufficient. The integration of the WageWorks technology platforms with our technology platforms may create further vulnerabilities in our systems. If third parties improperly obtain and use the personal information of our customers, we may be required to expend significant resources to resolve these problems.
A major breach of our network security and systems could have serious negative consequences for our businesses, including:
•possible fines, penalties and damages;
•reduced demand for our services;
•an unwillingness of consumers and other data owners to provide us with their payment information;
•an unwillingness of customers and other data owners to provide us with personal information; and
•harm to our reputation and brand.
Because techniques used to obtain unauthorized access to or sabotage systems change frequently and generally are not identified until they are launched against a target, we may be unable to anticipate these techniques or to implement adequate preventative measures. Any or all of these issues could negatively impact our ability to attract new customers and increase engagement by existing customers, and/or subject us to third-party lawsuits, regulatory fines, contractual liability, and/or other action or liability, thereby harming our operating results.
We have incurred, and expect to continue to incur, significant costs to protect against security breaches. We may incur significant additional costs in the future to address problems caused by our previous or any further security breaches. Cybersecurity breaches could compromise our data and the data of our customers and partners, which may expose us to liability and would likely cause our business and reputation to suffer.
Our ability to ensure the security of our technology platforms and thus sensitive customer and partner information is critical to our operations. We rely on standard Internet and other security systems to provide the security and authentication necessary to effect secure transmission of data. Despite our security measures, our information technology and infrastructure is vulnerable to cybersecurity threats, including attacks by hackers and other malfeasance. Such security breaches could compromise our networks and result in the information stored or transmitted there to be accessed, publicly disclosed, lost, or stolen. Such access, disclosure, or other loss of information could result in legal claims or proceedings leading to liability, including under laws that protect the privacy of personal information, disrupt our operations and the services we provide to our clients, damage our reputation, and cause a loss of confidence in our products and services, which could adversely affect our business, operations, and competitive position.
Fraudulent and other illegal activity involving our products and services, including our payment cards, could lead to financial and reputational damage to us and reduce the use and acceptance of our technology platforms.
Criminals are using increasingly sophisticated methods to capture personal information in order to engage in illegal activities such as counterfeiting and identity theft. We rely upon third parties for some transaction processing services, data feeds, and vendors, which subjects us to risks related to the vulnerabilities of those third parties. For example, we are exposed to risks relating to the theft of payment card numbers housed in a merchant's point of sale systems if our members use our payment cards at a merchant whose systems are compromised. We may make our customers whole for losses sustained when using our payment cards, even in instances where we are not directly responsible for the underlying cause of such loss. A single significant incident of fraud, or increases in the overall level of fraud, involving our payment cards, our custodial accounts or our reimbursement administration services, could result in financial and reputational damage to us, which could reduce the use and acceptance of our products and services, or cause our customers to cease doing business with us.
We rely on software licensed from third parties that may be difficult to replace or that could cause errors or failures of our technology platforms that could lead to lost customers or harm to our reputation.
We rely on certain cloud-based software licensed from third parties to run our business. This software may not continue to be available to us on commercially reasonable terms and any loss of the right to use any of this software could result in delays in the provisioning of our products and services until equivalent technology is either developed by us, or, if available, is identified, obtained, and integrated, which could harm our business. In addition, we have certain service level agreements with certain of our employer clients for which the availability of this software is critical. Any decrease in the availability of our service as a result of errors, defects, a disruption or failure of our licensed software may require us to provide significant fee credits or refunds to our customers. Our software licensed from third parties is also subject to change or upgrade, which may result in our incurring significant costs to implement such changes or upgrades.
Developing and implementing new and updated applications, features, and services for our technology platforms may be more difficult than expected, may take longer and cost more than expected, or may result in the platforms not operating as expected, which may harm our operating results or may not result in sufficient increases in revenue to justify the costs.
Attracting and retaining new customers requires us to continue to improve the technology underlying our proprietary technology platforms and requires our technology to operate as expected. In addition, customers are increasingly seeking a bundled solution, encompassing a wide range of features. Accordingly, we must continue to develop new
and updated applications, features, and services, and maintain existing applications, features, and services. If we are unable to do so on a timely basis or if we are unable to implement new applications, features and services that enhance our customers’ experience without disruption to our existing ones or if we encounter technical obstacles that result in the technology not operating properly, we may lose potential and existing customers. We rely on a combination of internal development, strategic relationships, licensing, and acquisitions to develop our content offerings and HSA and other CDB services. These efforts may:
•cost more than expected;
•take longer than originally expected;
•require more testing than originally anticipated;
•require significant cost to address or resolve technical defects or obstacles;
•require additional advertising and marketing costs; and
•require the acquisition of additional personnel and other resources.
The revenue opportunities earned from these efforts may fail to justify the amounts spent. In addition, material performance problems, defects or errors in our existing or new software may occur in the future, which may harm our operating results.
Our technology platforms are hosted by third-party data centers. Any disruption of service at our facilities or our third-party hosting providers could interrupt or delay our customers’ access to our products and services, which could harm our operating results.
The ability of our team members, members, Health Plan and Administrator Partners, and Employer Partners to access our technology platforms is critical to our business. We cannot ensure that the measures we have taken will be effective to prevent or minimize interruptions to our operations. Our facilities and our third-party data centers are vulnerable to interruption or damage from a number of sources, many of which are beyond our control, including, without limitation:
•extended power loss;
•telecommunications failures from multiple telecommunications providers;
•natural disaster or an act of terrorism;
•software and hardware errors, or failures in our own systems or in other systems;
•network environment disruptions such as computer viruses, hacking and similar problems in our own systems and in other systems;
•theft and vandalism of equipment; and
•actions or events caused by or related to third parties.
We attempt to mitigate these risks through various business continuity efforts, including redundant infrastructure, 24/7/365 system activity monitoring, backup and recovery procedures, use of a secure storage facility for backup media, separate test systems, and change management and system security measures, but our precautions may not protect against all potential problems. Our data recovery centers are equipped with physical space, power, storage and networking infrastructure and Internet connectivity to support our technology platforms in the event of the interruption of services at our data centers. Even with these data recovery centers, our operations would be interrupted during the transition process should our primary data center experience a failure. Disruptions at our data centers could cause disruptions to our online platforms and data loss or corruption. We have experienced interruptions and delays in service and availability for data centers, and bandwidth and other technology issues in the past. Any future errors, failure, interruptions or delays experienced in connection with these third-party technologies could delay our customers’ access to our products, which would harm our business. This could damage our reputation, subject us to potential liability or costs related to defending against claims or cause our customers and strategic partners to cease doing business with us, any of which could negatively impact our revenue.
Interruption or failure of our information technology and communications systems could impair our ability to effectively deliver our products and services, which could cause us to lose customers and harm our operating results.
Our business depends on the continuing operation of our technology infrastructure and systems. Any damage to or failure of our systems could result in interruptions in our ability to deliver our products and services. Interruptions in our service could reduce our revenue and profits, and our reputation could be damaged if people believe our systems are unreliable. Our systems and operations are vulnerable to damage or interruption from earthquakes, terrorist attacks, floods, fires, power loss, break-ins, hardware or software failures, telecommunications failures, computer viruses or other attempts to harm our systems, and similar events.
Any unscheduled interruption in our service could result in an immediate loss of revenue. Frequent or persistent system failures that result in the unavailability of our technology platforms or slower response times could reduce our customers’ ability to access our platforms, impair our delivery of our products and services, and harm the perception of our platforms as reliable, trustworthy, and consistent. Our insurance policies provide only limited coverage for service interruptions and may not adequately compensate us for any losses that may occur due to any failures or interruptions in our systems.
Some of our technology platforms may link to or utilize open source software, and any failure to comply with the terms of one or more of these open source licenses could negatively affect our business.
Some of our technology platforms may incorporate software covered by open source licenses. The terms of various open source licenses have not been interpreted by United States courts, and there is a risk that such licenses could be construed in a manner that imposes unfavorable conditions on us. For example, by the terms of certain open source licenses, we could be required to offer our technology platforms that incorporate the open source software for no cost, that we make publicly available source code for modifications or derivative works that we created based upon, incorporating or using the open source software, and/or that we license such modifications or derivative works under the terms of the particular open source license. If portions of our proprietary software are determined to be subject to an open source license, then the value of our technologies and services could be reduced. In addition to risks related to license requirements, usage of open source software may be riskier than use of third-party commercial software, as open source licensors generally do not provide warranties or controls on the origin of the software. Many of the risks associated with usage of open source software cannot be eliminated and could negatively affect our business.
We must adequately protect our brands and the intellectual property rights related to our products and services and avoid infringing on the proprietary rights of others.
We believe that the HealthEquity and WageWorks brands are critical to the success of our business, and we utilize trademark registration and other means to protect these brands. Our business would be harmed if we were unable to protect our brands against infringement and the value of our brands was to decrease as a result.
We rely on a combination of trademark and copyright laws, trade secret protection, and confidentiality and license agreements to protect the intellectual property rights related to our products and services such as our applications and the content on our website. We also rely on intellectual property licensed from third parties. We may unknowingly violate the intellectual property or other proprietary rights of others and, thus, may be subject to claims by third parties. If so, we may be required to devote significant time and resources to defending against these claims or to protecting and enforcing our own rights. As a result of any such dispute, we may have to:
•develop non-infringing technology;
•pay damages;
•enter into royalty or licensing agreements;
•cease providing certain products or services; or
•take other actions to resolve the claims.
Additionally, we have largely relied, and expect to continue to rely, on copyright, trade secret, and trademark laws, as well as generally relying on confidentiality procedures and agreements with our team members, consultants, customers, and vendors, to control access to, and distribution of, technology, software, documentation, and other confidential information. Despite these precautions, it may be possible for a third party to copy or otherwise obtain, use, or distribute our technology without authorization, particularly in foreign jurisdictions where some of our intellectual property rights may not be protected by intellectual property laws. If this were to occur, we could lose revenue as a result of competition from products infringing or misappropriating our technology and intellectual property and we may be required to initiate litigation to protect our proprietary rights and market position. U.S. copyright, trademark, and trade secret laws offer us only limited protection and the laws of some foreign countries do not protect proprietary rights to the same extent. Accordingly, defense of our trademarks and proprietary technology may become an increasingly important issue as we continue to expand our operations.
Policing unauthorized use of our trademarks and technology is difficult and the steps we take may not prevent misappropriation of the trademarks or technology on which we rely. If competitors are able to use our trademarks or technology without recourse, our ability to compete would be harmed and our business would be materially and adversely affected. We may elect to initiate litigation in the future to enforce or protect our proprietary rights or to determine the validity and scope of the rights of others.
The loss of our intellectual property or the inability to secure or enforce our intellectual property rights or to defend successfully against an infringement action could harm our business, results of operations, financial condition, and prospects.
If we are unable to promote our brands effectively, our business may suffer.
We believe that promoting our brands in an effective manner is critical to achieving widespread acceptance of our products and services, attracting new customers and strategic partners, and integrating the WageWorks business and clients. Brand promotion activities may not generate customer awareness or increase revenue, and even if they do, any increase in revenue may not offset the expenses we incur in building our brands. If we fail to successfully promote our brands, or incur substantial expenses in doing so, we may fail to attract or retain a sufficient number of customers and strategic partners necessary to realize a sufficient return on our brand-building efforts, to achieve the widespread brand awareness that is critical for broad customer adoption of our products and services, or to fully and effectively integrate the WageWorks business and clients.
Confidentiality arrangements with team members and others may not adequately prevent disclosure of trade secrets and other proprietary information.
We have devoted substantial resources to the development of our technology, business operations and business plans. In order to protect our trade secrets and proprietary information, we rely in significant part on confidentiality arrangements with our team members, independent contractors, advisors, customers, and other partners. These arrangements may not be effective to prevent disclosure of confidential information, including trade secrets, and may not provide an adequate remedy in the event of unauthorized disclosure of confidential information. In addition, others may independently discover trade secrets and proprietary information, and in such cases we would not be able to assert trade secret rights against such parties. The loss of trade secret protection could make it easier for third parties to compete with our products and services by copying functionality. In addition, any changes in, or unexpected interpretations of, the trade secret and other intellectual property laws may compromise our ability to enforce our trade secret and intellectual property rights. Costly and time-consuming litigation could be necessary to enforce and determine the scope of our proprietary rights, and failure to obtain or maintain trade secret protection could adversely affect our competitive business position.
If we cannot protect our domain names, our ability to successfully promote our brands will be impaired.
We currently own the web domain names www.healthequity.com and www.wageworks.com, among others, which are critical to the operation of our business. The acquisition and maintenance of domain names, or Internet addresses, is generally regulated by governmental agencies and their designees. The regulation of domain names in the U.S. is subject to change. Governing bodies may establish additional top-level domains, appoint additional domain name registrars or modify the requirements for holding domain names. Furthermore, it is unclear whether laws protecting trademarks and similar proprietary rights will be extended to protect domain names. Therefore, we may be unable to prevent third parties from acquiring domain names that are similar to, infringe upon, or otherwise decrease the value of our trademarks and other proprietary rights. We may not be able to successfully implement our business strategy of establishing strong branding if we cannot prevent others from using similar domain names or trademarks. This failure could impair our ability to increase our market share and revenue.
Legal and regulatory risks
The healthcare regulatory and political framework is uncertain and evolving, and we cannot predict the effect that further healthcare reform and other changes in government programs may have on our business, financial condition, or results of operations.
Healthcare laws and regulations are rapidly evolving and may change significantly in the future, which could adversely affect our financial condition and results of operations. For example, the Affordable Care Act, which includes a variety of healthcare reform provisions and requirements that have become effective at varying times, substantially changed the way healthcare is financed by both governmental and private insurers and may significantly impact our industry. Further changes to the Affordable Care Act and related healthcare regulation remain under consideration.
In addition, current proposals to implement a single payer or "Medicare for all" system in the U.S., if adopted, could have a material adverse effect on our business. The full impact of recent healthcare reform and other changes in the healthcare industry and in healthcare spending is unknown, and may be affected by the results of the current presidential and other elections this year. Accordingly, we are unable to predict what effect the Affordable Care Act or other healthcare reform measures that may be adopted in the future will have on our business.
Changes in applicable federal and state laws relating to the tax benefits available through tax-advantaged healthcare accounts such as HSAs and other healthcare-related CDBs would materially adversely affect our business.
The efforts of governmental and third-party payers to raise revenue or contain or reduce the costs of healthcare as well as legislative and regulatory proposals aimed at changing the U.S. healthcare system, which could include restructuring the tax benefits available through HSAs, HRAs, FSAs, and similar tax-advantaged healthcare accounts, may adversely affect our business, operating results, and financial condition. For example, the federal government or states may seek to raise revenues by enacting tax laws that eliminate the tax deductions available to individuals who contribute to HSAs. Our business is substantially dependent on the tax benefits available through HSAs and other healthcare-related CDBs. We cannot predict if any new healthcare reforms will ultimately become law, or if enacted, what their terms or the regulations promulgated pursuant to such reforms will be. If the laws or regulations are changed to limit or eliminate the tax benefits available through these accounts, such a change would have a material adverse effect on our business.
We are subject to privacy regulations, including regarding the access, use, and disclosure of personally identifiable information. If we or any of our third-party vendors experience a privacy breach, it could result in substantial financial and reputational harm, including possible criminal and civil penalties.
State and federal laws and regulations govern the collection, dissemination, access, and use of personally identifiable information, including HIPAA and HITECH, which govern the treatment of protected health information, and the Gramm-Leach Bliley Act, which governs the treatment of nonpublic personal information. In the provision of services to our customers, we and our third-party vendors may collect, access, use, maintain, and transmit personally identifiable information in ways that are subject to many of these laws and regulations. Although we have implemented measures to comply with these privacy laws, rules, and regulations, we have experienced data privacy incidents. Any further unauthorized disclosure of personally identifiable information experienced by us or our third-party vendors could result in substantial financial and reputational harm, including possible criminal and civil penalties. In many cases, we are subject to HIPAA and other privacy regulations because we are a business associate providing services to covered entities; as a result, the covered entities direct HIPAA compliance matters in the event of a security breach, which complicates our ability to address harm caused by the breach. As a result of the Acquisition, we now obtain substantially more HIPAA data than before the Acquisition. Additionally, as we have in connection with prior security incidents, we may be required to report breaches to partners, regulators, state attorney generals, and impacted individuals depending on the severity of the breach, our role, legal requirements, and contractual obligations.
Privacy regulation has become a priority issue in many states, and as such the regulatory environment is continually changing. For example, the California Consumer Privacy Act ("CCPA") became effective on January 1, 2020. The CCPA requires companies, such as ours, that process information on California residents to make new disclosures to consumers about their data collection, use, and sharing practices, and allows consumers to opt out of certain data sharing with third parties and provides a new cause of action for data breaches. Other governmental authorities are also considering legislative and regulatory proposals concerning data protection.
Continued compliance with current and potential new privacy laws, rules, and regulations and meeting consumer expectations with respect to the control of personal data in a rapidly changing technology environment could result in higher compliance and technology costs for us, as well as costly penalties in the event we are deemed to not be in compliance with such laws, rules, and regulations.
Changes in laws and regulations relating to interchange fees on payment card transactions would adversely affect our revenue and results of operations.
Existing laws and regulations limit the fees or interchange rates that can be charged on payment card transactions. For example, the Federal Reserve Board has the power to regulate payment card interchange fees and has issued a rule setting a cap on the interchange fee an issuer can receive from a single payment card transaction. Our HSA-linked payment cards are exempt from this rule (although we are subject to a general requirement of reasonable compensation for services rendered). To the extent that our payment cards lose their exempt status, the interchange rates applicable to transactions involving our payment cards could be impacted, which would decrease our revenue and profit and could have a material adverse effect on our financial condition and results of operations.
Changes in credit card association or other network rules or standards set by Visa or MasterCard, or changes in card association and debit network fees or products or interchange rates, could materially adversely affect our results of operations, business, and financial position.
We, and the banks that issue our prepaid debit cards, are subject to Visa and MasterCard association rules that could subject us to a variety of fines or penalties that may be levied by the card associations or networks for acts or omissions by us or businesses that work with us, including card processors. The termination of the card association registrations held by us or any of the banks that issue our cards, or any changes in card association or other debit network rules or standards, including interpretation and implementation of existing rules, participants deciding to use PIN networks, standards or guidance that increase the cost of doing business or limit our ability to provide our products and services, or limit our ability to receive interchange fees, could have a material adverse effect on our results of operations, financial condition, business, and prospects. In addition, from time-to-time, card associations increase the organization or processing fees that they charge, which could increase our operating expenses, reduce our profit margin and materially adversely affect our results of operations, financial condition, business, and prospects.
We are subject to complex regulation, and any compliance failures or regulatory action could adversely affect our business.
Our business, including HSAs and many of the CDB plans we administer and our investment adviser and trust company subsidiaries, is subject to extensive, complex, and frequently changing federal and state laws and regulations, including IRS, Health and Human Services (“HHS”), and Department of Labor (“DOL”) regulations; ERISA, HIPAA, HITECH, and other privacy and data security regulations; the Advisers Act; state banking laws; and the Patient Protection and Affordable Care Act.
Our subsidiary HealthEquity Advisors, LLC is an SEC-registered investment adviser that provides automated web-only investment advisory services. As such, it must comply with the requirements of the Advisers Act and related SEC regulations and is subject to periodic inspections by the SEC staff. Such requirements relate to, among other things, fiduciary duties to clients, disclosure obligations, recordkeeping and reporting requirements, marketing restrictions, limitations on agency cross and principal transactions between the adviser and its clients, and general anti-fraud prohibitions. The SEC is authorized to institute proceedings and impose sanctions for violations of the Advisers Act, ranging from fines and censure to termination of an investment adviser’s registration. Investment advisers also are subject to certain state securities laws and regulations.
Our subsidiary HealthEquity Trust Company is a non-depository trust company and subject to regulation and supervision by the Wyoming Division of Banking.
Compliance with regulatory requirements may divert internal resources and take significant time and effort. Any claim of non-compliance, regardless of merit or ultimate outcome, could subject us to investigation by the HHS, the DOL, the SEC, the Wyoming Division of Banking, or other regulatory authorities. This in turn could result in additional claims or class action litigation brought on behalf of our members or Network Partners, any of which could result in substantial cost to us and divert management’s attention and other resources away from our operations. Furthermore, investor perceptions of us may suffer, and this could cause a decline in the market price of our common stock. Our compliance processes may not be sufficient to prevent assertions that we failed to comply with any applicable law, rule or regulation. In addition, all of our business is subject, to varying degrees, to fiduciary and other service provider obligations under ERISA, the Internal Revenue Code, and underlying regulations. A failure to comply could subject us to disgorgement of profits, excise taxes, civil penalties, private lawsuits, and other costs, including reputational harm.
If we are unable to meet or exceed the net worth test required by the IRS, we could be unable to maintain our non-bank custodian status, which would have a material adverse impact on our ability to operate our business.
As a non-bank custodian, we are required to comply with Treasury Regulations Section 1.408-2(e), or the Treasury Regulations, including the net worth requirements set forth therein. If we should fail to comply with the Treasury Regulations’ non-bank custodian requirements, including the net worth requirements, such failure would materially and adversely affect our ability to maintain our current custodial accounts and grow by adding additional custodial accounts, and it could result in the institution of procedures for the revocation of our authorization to operate as a non-bank custodian.
Risks relating to our partners and service providers
Our distribution model relies on the cooperation of our Network Partners. If our Network Partners choose to partner with other providers of technology-enabled services that empower healthcare consumers, including HSA services, or otherwise reduce offering, or cease to offer, our products and services, our business could be materially and adversely affected.
Our business depends on our Network Partners’ willingness to partner with us to offer their customers and/or employees our products and services. In particular, certain of our Network Partners enjoy significant market share in various geographic regions. If these Network Partners choose to partner with our competitors, or otherwise reduce offering, or cease to offer, our products and services, our results of operations, business, and prospects could be materially adversely affected.
We rely on a limited number of bank identification number sponsors for our payment cards, and a change in relationship with any of these sponsors or the failure by these sponsors to comply with certain banking regulations could materially and adversely affect our business.
We rely on a limited number of bank identification number, or BIN, sponsors in relation to the payment cards we issue. A BIN sponsor is a bank or credit union that provides the BIN that allows a prepaid card program to run on one of the major card brand networks (e.g., VISA, MasterCard, Discover or American Express). Our BIN sponsors enable us to link the payment cards that we offer our members to the VISA and Mastercard networks, thereby allowing our members to use our payment cards to pay for expenses with a “swipe” of the card. If any material adverse event were to affect our BIN sponsors, including a significant decline in the financial condition of any of our BIN sponsors, a decline in the quality of service provided by our BIN sponsors, the inability of our BIN sponsors to comply with applicable banking and financial service regulatory requirements, systems failure or the inability of our BIN sponsors to pay us fees, our business, financial condition, and results of operations could be materially and adversely affected because we may be forced to reduce the availability of, or eliminate entirely, our payment card offering. In addition, we do not have long-term contracts with our BIN sponsors, and our BIN sponsors may increase the fees charged to us or terminate our relationship. If we were required to change BIN sponsors, we could not accurately predict the success of such change or that the terms of our agreement with a new BIN sponsor would be as favorable to us, especially in light of the recent increased regulatory scrutiny of the payment card industry, which has rendered the market for BIN sponsor services less competitive.
We rely on our federally insured custodial depository partners for certain custodial account services from which we earn fees. A business failure in any federally insured custodial depository partner would materially and adversely affect our business.
As a non-bank custodian, we rely on our federally insured custodial depository partners to hold our custodial cash assets. If any material adverse event were to affect one of our federally insured depository partners, including a significant decline in its financial condition, a decline in the quality of its service, loss of deposits, its inability to comply with applicable banking and financial services regulatory requirements, systems failure or its inability to pay us fees, our business, financial condition, and results of operations could be materially and adversely affected. If we were required to change depository partners, we could not accurately predict the success of such change or that the terms of our agreement with a new depository partner would be as favorable to us as our current agreements, especially in light of the consolidation in the banking industry, which has rendered the market for federally insured retail banking services less competitive.
We receive important services from third-party vendors. Replacing them would be difficult and disruptive to our business.
We have entered into contracts with third-party vendors to provide critical services relating to our business, including the integration of the WageWorks business into the HealthEquity business, the redesign of our HSA technology platform, fraud management and other customer verification services, transaction processing and settlement, telephony services, and card production. In addition, WageWorks uses third-party vendors for its call centers and COBRA claims and transaction processing and also uses one of our competitors for other services. In the event that these service providers fail to maintain adequate levels of support, do not provide high quality service, increase the fees they charge us, discontinue their lines of business, terminate our contractual arrangements or cease or reduce operations, we may suffer additional costs and be required to pursue new third-party relationships, which could harm our reputation, materially disrupt our operations and our ability to provide our products and services, and could divert management’s time and resources. If we are unable to complete a transition to a new provider on a timely basis, or at all, we could be forced to temporarily or permanently discontinue certain services, which could disrupt services to our customers and adversely affect our business, financial condition, and results of
operations. We may also be unable to establish comparable new third-party relationships on as favorable terms or at all, which could materially and adversely affect our business, financial condition, and results of operations.
Acquisition and growth-related risks
As part of our acquisition strategy, we seek to acquire or invest in other companies or technologies, which could divert management’s attention, fail to be consummated, or even if consummated, fail to meet our expectations, result in additional dilution to our stockholders, increase expenses, disrupt our operations, and harm our operating results.
We have in the past acquired, and, as part of our strategy, seek to acquire or invest in, assets, businesses, products, or technologies that we believe could complement or expand our products and services, enhance our technical capabilities, or otherwise offer growth opportunities. There is no assurance that we will be successful in consummating such acquisitions, or even if consummated, realize the anticipated benefits of these or any future acquisitions. The pursuit of potential acquisitions may divert the attention of management and cause us to incur various expenses related to identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated.
There are inherent risks in integrating and managing acquisitions. If we acquire additional businesses, we may not be able to assimilate or integrate the acquired personnel, operations, and technologies successfully or effectively manage the combined business following the acquisition, and our management may be distracted from operating our business. We also may not achieve the anticipated benefits from the acquired business due to a number of factors, including, without limitation:
•unanticipated costs or liabilities associated with the acquisition;
•incurrence of acquisition-related costs, which would be recognized as a current period expense;
•inability to earn sufficient revenue to offset acquisition or investment costs;
•the inability to maintain relationships with customers and partners of the acquired business;
•the difficulty of incorporating acquired technology and rights into our technology platforms and of maintaining quality and security standards consistent with our brand;
•the need to integrate or implement additional controls, procedures, and policies;
•harm to our existing business relationships with customers and strategic partners as a result of the acquisition;
•the diversion of management’s time and resources from our core business;
•the potential loss of key team members;
•use of resources that are needed in other parts of our business and diversion of management and employee resources;
•our ability to coordinate organizations that are geographically diverse and that have different business cultures;
•our inability to comply with the regulatory requirements applicable to the acquired business;
•the inability to recognize acquired revenue in accordance with our revenue recognition policies; and
•use of substantial portions of our available cash or the incurrence of debt to consummate the acquisition.
Acquisitions also increase the risk of unforeseen legal liability, including for potential violations of applicable law or industry rules and regulations, arising from prior or ongoing acts or omissions by the acquired businesses which are not discovered by due diligence during the acquisition process. Generally, if an acquisition fails to meet our expectations, our operating results, business, and financial condition may suffer. Acquisitions could also result in dilutive issuances of equity securities or the incurrence of debt, which could adversely affect our business, results of operations, or financial condition. Even if we are successful in completing and integrating an acquisition, the acquisition may not perform as we expect or enhance the value of our business as a whole.
We must be able to operate, integrate, and scale our technology effectively to match our business growth.
Our ability to continue to provide our products and services to a growing number of customers, as well as to enhance our existing products and services, attract new customers and strategic partners, offer new products and services, and integrate the WageWorks business into our business, is dependent on our information technology systems. If we are unable to manage the technology associated with our business effectively, we could experience increased costs, reductions in system availability, and customer loss. We are currently investing in a significant modernization of our proprietary technology platforms to support new opportunities and enhance security, privacy, and platform infrastructure. If we are unsuccessful in implementing these upgrades to our platforms, we may be unable to adequately meet the needs of our customers and/or implement technology-based innovation in response
to a rapidly changing market, which could harm our reputation and adversely impact our business, financial condition, and results of operations.
Failure to manage future growth effectively could have a material adverse effect on our business, financial condition, and results of operations.
The continued rapid expansion and development of our business, including as a result of the Acquisition, has placed a significant strain upon our management and administrative, operational, and financial infrastructure. As of January 31, 2020, we had approximately 5.3 million HSAs and $11.5 billion in HSA assets representing growth of 34% and 43%, respectively, from January 31, 2019. For the year ended January 31, 2020, our total revenue and Adjusted EBITDA were approximately $532.0 million and $196.5 million, respectively, which represents year-over-year annual growth rates of approximately 85% and 66%, respectively. See “Key financial and operating metrics” for the definition of Adjusted EBITDA and a reconciliation of net income, the most comparable GAAP measure, to Adjusted EBITDA. Our growth strategy contemplates further increasing the number of our HSAs and our HSA Assets at relatively higher growth rates than industry averages. However, the rate at which we have been able to add new HSAs in the past may not be indicative of the rate at which we will be able to add additional HSAs in the future.
Our success depends in part upon the ability of our executive officers to manage growth effectively. Our ability to grow also depends upon our ability to successfully hire, train, supervise, and manage new team members, obtain financing for our capital needs, expand our systems effectively, control increasing costs, allocate our human resources optimally, maintain clear lines of communication between our operational functions and our finance and accounting functions, and manage the pressures on our management and administrative, operational, and financial infrastructure. There can be no assurance that we will be able to accurately anticipate and respond to the changing demands we will face as we continue to expand our operations or that we will be able to manage growth effectively or to achieve further growth at all. If our business does not continue to grow or if we fail to effectively manage any future growth, our business, financial condition, and results of operations could be materially and adversely affected.
We plan to extend and expand our products and services and introduce new products and services, and we may not accurately estimate the impact of developing, introducing, and updating these products and services on our business.
We intend to continue to invest in technology and development to create new and enhanced products and services to offer our customers and to enhance the capabilities of our platforms. We may not be able to anticipate or manage new risks and obligations or legal, compliance, or other requirements that may arise in these areas. The anticipated benefits of such new and improved products and services may not outweigh the costs and resources associated with their development. Some new services may be received negatively by our existing and/or potential customers and strategic partners and have to be put on hold or canceled entirely.
Our ability to attract and retain new customer revenue from existing customers will depend in large part on our ability to enhance and improve our existing products and services and to introduce new products and services. The success of any enhancement or new product or service depends on several factors, including the timely completion, introduction, and market acceptance of the enhancement or new product or service. Any new product or service we develop or acquire may not be introduced in a timely or cost-effective manner and may not achieve the broad market acceptance necessary to earn significant revenue. If we are unable to successfully develop or acquire new products or services or enhance our existing products or services to meet member or network partner requirements, our results of operations, financial condition, business or prospects may be materially adversely affected.
We have recorded a significant amount of intangible assets, which increased substantially as a result of the Acquisition. We may need to record write-downs from future impairments of identified intangible assets and goodwill, which could adversely affect our costs and business operations.
Our consolidated balance sheet includes significant intangible assets, including approximately $1.33 billion in goodwill and $783.3 million in intangible assets, together representing approximately 82% of our total assets as of January 31, 2020. The determination of related estimated useful lives and whether these assets are impaired involves significant judgments. We test our goodwill for impairment each fiscal year, but we also test goodwill and other intangible assets for impairment at any time when there is a change in circumstances that indicates that the carrying value of these assets may be impaired. Any future determination that these assets are carried at greater than their fair value could result in substantial non-cash impairment charges, which could significantly impact our reported operating results.
Risks relating to our service and culture
Any failure to offer high-quality customer support services could adversely affect our relationships with our customers and strategic partners and our operating results.
Our customers depend on our support and customer education organizations to educate them about, and resolve technical issues relating to, our products and services. We may be unable to respond quickly enough to accommodate short-term increases in customer demand for education and support services. Increased customer demand for these services, without a corresponding increase in revenue, could increase costs and adversely affect our operating results. In addition, our sales process is highly dependent on the reputation of our products, services, and business and on positive recommendations from our existing customers. Further, WageWorks uses third-party vendors for its call centers and COBRA claims and transaction processing, including certain offshore vendors, which vendors may not provide the same quality of support services for our Clients and members. Any failure to maintain high-quality education and technical support, or a market perception that we do not maintain high-quality education support, could adversely affect our reputation, our ability to sell our products and services to existing and prospective customers and our business and operating results. We promote 24/7/365 education and support along with our proprietary technology platforms. Interruptions or delays that inhibit our ability to meet that standard may hurt our reputation or ability to attract and retain customers.
We rely on our management team and key team members and our business could be harmed if we are unable to retain qualified personnel.
Our success depends, in part, on the skills, working relationships and continued services of our founder and senior management team and other key personnel. While we have entered into offer letters or employment agreements with certain of our executive officers, all of our team members are “at-will” employees, and their employment can be terminated by us or them at any time, for any reason, and without notice, subject, in certain cases, to severance payment rights. In order to retain valuable team members, in addition to salary and cash incentives, we provide stock options and other equity-based awards that vest over time or based on performance. The value to team members of these awards will be significantly affected by movements in our stock price that are beyond our control and may at any time be insufficient to counteract offers from other organizations. The departure of key personnel could adversely affect the conduct of our business. In such event, we would be required to hire other personnel to manage and operate our business, and there can be no assurance that we would be able to employ a suitable replacement for the departing individual, or that a replacement could be hired on terms that are favorable to us. Volatility or lack of performance in our stock price may affect our ability to attract replacements should key personnel depart.
Our success also depends on our ability to attract, retain, and motivate additional skilled management personnel. For example, competition for qualified personnel in our field and geographic market is intense due to the limited number of individuals who possess the skills and experience required by our industry, particularly in the technology-related fields. In addition, we have experienced employee turnover as a result of the Acquisition and expect to continue to experience employee turnover in the future. New hires require significant training and, in most cases, take significant time before they achieve full productivity. New team members may not become as productive as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals. If our retention efforts are not successful or our employee turnover rate increases in the future, our business will be harmed.
If we cannot maintain our corporate culture as we grow, we could lose the innovation, teamwork, passion, and focus on execution that we believe contribute to our success, and our business may be harmed.
We believe that a critical component to our success has been our corporate culture. We have invested substantial time and resources in building our team. As we continue to grow, including through the integration of WageWorks team members, we may find it difficult to maintain these important aspects of our corporate culture. Any failure to preserve our culture could negatively affect our future success, including our ability to retain and recruit personnel and to effectively focus on and pursue our corporate objectives.
Financing, tax and related risks
We may require significant capital to fund our business, and our inability to generate and obtain such capital could harm our business, operating results, financial condition, and prospects.
To fund our expanding business, we must have sufficient working capital to continue to make significant investments in our service offerings, advertising, technology, and other activities. As a result, in addition to the revenue we earn from our business, we may need additional equity or debt financing to provide the funds required for these endeavors. If such financing is not available on satisfactory terms or at all, we may be unable to operate or expand
our business in the manner and at the rate desired. The debt we incurred in connection with the Acquisition of WageWorks may make it more challenging to incur additional debt, as the associated credit agreement includes prohibitions against incurring additional debt without approval from our existing lenders, and other lenders may not be willing to take on the risk of adding to our existing leverage, In addition, debt financing increases expenses, may contain covenants that restrict the operation of our business and must be repaid regardless of operating results. Equity financing, or debt financing that is convertible into equity, could result in additional dilution to our existing stockholders, and any new securities we issue could have rights, preferences, and privileges superior to those associated with our common stock. Furthermore, the current economic environment may make it difficult for us to raise additional capital or obtain additional credit, when needed, on acceptable terms or at all.
Our inability to generate or obtain the financial resources needed to fund our business and growth strategies may require us to delay, scale back or eliminate some or all of our operations or the expansion of our business, which may have a material adverse effect on our business, operating results, financial condition, and prospects.
The terms of our credit facility require us to meet certain operating and financial covenants and place restrictions on our operating and financial flexibility.
On August 30, 2019, we entered into a new $1.6 billion credit agreement, which consists of (i) a five-year senior secured term loan A facility in the aggregate principal amount of $1.25 billion and (ii) a five-year senior secured revolving credit facility in an aggregate principal amount of up to $350 million. The credit agreement is secured by a lien covering substantially all of our assets. The credit agreement contains customary affirmative and negative covenants, including covenants related to the following subjects: mergers and sales of assets; limitations on the incurrence of certain liens; limitations on certain indebtedness; limitations on the ability to pay dividends; certain affiliate transactions; and financial performance covenants. If we default under the credit agreement, the lenders will be able to declare all obligations immediately due and payable and take control of our pledged assets, potentially requiring us to renegotiate the credit agreement on terms less favorable to us or to immediately cease operations. The lenders' rights to repayment would be senior to the rights of the holders of our common stock to receive any proceeds.
We may be adversely affected by interest rate changes due to the floating interest rate under our credit agreement.
Borrowings under the credit agreement bear interest at an annual rate equal to, at the option of the Company, either (i) LIBOR (adjusted for reserves) plus a margin ranging from 1.25% to 2.25% or (ii) an alternate base rate plus a margin ranging from 0.25% to 1.25%, with the applicable margin determined by reference to a leverage-based pricing grid set forth in the credit agreement. As such, our financial position may be adversely affected by fluctuations in interest rates. In addition, although the credit agreement provides an alternative mechanism for determining the applicable interest rate when LIBOR is no longer available, the interest rates we pay may be adversely affected as a result of potential disruptions in the credit market at the end of 2021 when LIBOR is scheduled to be phased out.
A decline in interest rate levels, including an environment of negative interest rates, or lower asset values due to market conditions or other factors may reduce our ability to earn income on our HSA Assets and Client-held funds and to attract HSA contributions, which would adversely affect our profitability.
As a non-bank custodian, we partner with our depository partners to hold our HSA Assets and other Client-held funds. We earn a significant portion of our consolidated revenue from fees we earn from our depository partners, approximately 34%, 44%, and 38% during the years ended January 31, 2020, 2019, and 2018, respectively. A decline in prevailing interest rates, such as the current low interest rate environment due to the COVID-19 pandemic, or a negative interest rate environment may negatively affect our business by reducing the yield we realize on our HSA Assets and other Client-held funds. In addition, if we do not offer competitive interest rates, our members may choose another HSA custodian. Similarly, if the value of the invested funds we hold declines, whether due to market conditions or other factors, our fees, which are based on a percentage of the asset values, would be adversely affected. Any such scenario could materially and adversely affect our business and results of operations.
Our ability to secure insurance may not be sufficient to cover potential liabilities.
We maintain various forms of liability insurance coverage, including coverage for errors and omissions, fiduciary, cybersecurity, employment practices, and directors and officers insurance. It is possible, however, that claims could exceed the amount of our applicable insurance coverage, if any, or that this coverage may not continue to be available on acceptable terms or in sufficient amounts. Even if these claims do not result in liability to us, investigating and defending against them could be expensive and time-consuming and could divert management’s attention away from our operations. In addition, negative publicity caused by these events may affect the current
market acceptance of our products and services, any of which could materially adversely affect our reputation and our business.
We are subject to taxes in numerous jurisdictions. Legislative, regulatory, and legal developments involving income taxes could adversely affect our results of operations and cash flows.
We are subject to U.S. federal, U.S. state income, payroll, property, sales and use, and other types of taxes in numerous jurisdictions. Significant judgment is required in determining our provisions for income taxes. Changes in tax rates, enactments of new tax laws, revisions of tax regulations, and claims or litigation with taxing authorities could result in substantially higher taxes.
If one or more jurisdictions successfully assert that we should have collected or in the future should collect additional sales and use taxes on our fees, we could be subject to additional liability with respect to past or future sales and the results of our operations could be adversely affected.
We do not collect sales and use taxes in all jurisdictions in which our customers are located, based on our belief that such taxes are not applicable. Sales and use tax laws and rates vary by jurisdiction and such laws are subject to interpretation. In those jurisdictions and in those cases where we do believe sales taxes are applicable, we collect and file timely sales tax returns. Currently, such taxes are minimal. Jurisdictions in which we do not collect sales and use taxes may assert that such taxes are applicable, which could result in the assessment of such taxes, interest, and penalties, and we could be required to collect such taxes in the future. This additional sales and use tax liability could adversely affect the results of our operations.
Natural disasters, pandemics or other epidemics (including the current COVID-19 pandemic), acts of terrorism, acts of war and other unforeseen events may cause damage or disruption to us or our customers, which could materially and adversely affect our business, financial condition, and operating results.
Natural disasters, pandemics or other epidemics (including the current COVID-19 pandemic) acts of war, terrorist attacks, and the escalation of military activity in response to such attacks or otherwise may have negative and significant effects, such as imposition of increased security measures, changes in applicable laws, market disruptions, and job losses. Such events may have an adverse effect on the economy in general. Moreover, the potential for future terrorist attacks and the national and international responses to such threats could affect the business in ways that cannot be predicted. The effect of any of these events or threats could have a material adverse effect on our business, financial condition, and results of operations.
Risks relating to owning our common stock
If we are unable to maintain effective internal controls over financial reporting in the future, investors may lose confidence in the accuracy and completeness of our financial reports and the market price of our common stock could be adversely affected.
As a public company, we are required to maintain internal controls over financial reporting and to report any material weaknesses in such internal controls. A material weakness is a deficiency, or a combination of deficiencies, in financial reporting such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis. Section 404 of the Sarbanes-Oxley Act, or Sarbanes-Oxley, requires that we evaluate and determine the effectiveness of our internal controls over financial reporting and provide a management report on internal controls over financial reporting. Sarbanes-Oxley also requires that our management report on internal controls over financial reporting be attested to by our independent registered public accounting firm. As described above, these risks are magnified as we integrate WageWorks into our internal controls and seek to remediate WageWorks' various material weaknesses.
If we have a material weakness in our internal controls over financial reporting, we may not detect errors on a timely basis and our financial statements may be materially misstated. If we identify material weaknesses in our internal controls over financial reporting, if we are unable to comply with the requirements of Section 404 of Sarbanes-Oxley in a timely manner, if we are unable to assert that our internal controls over financial reporting are effective, or if our independent registered public accounting firm is unable to express an opinion as to the effectiveness of our internal controls over financial reporting, investors may lose confidence in the accuracy and completeness of our financial reports and the market price of our common stock could be adversely affected. In addition, we could become subject to investigations by the stock exchange on which our securities are listed, the SEC or other regulatory authorities, which could require additional financial and management resources.
Our quarterly operating results may fluctuate significantly from period to period, which could adversely impact the value of our common stock.
Our quarterly operating results, including our revenue, gross profit, net income, and cash flows, may vary significantly in the future, which could cause our stock price to decline rapidly, may lead analysts to change their long-term models for valuing our common stock, could cause short-term liquidity issues, may impact our ability to retain or attract key personnel or cause other unanticipated issues. In addition, our operating results are impacted by the Acquisition of WageWorks. If our quarterly operating results or guidance fall below the expectations of research analysts or investors, the price of our common stock could decline substantially. Our quarterly operating expenses and operating results may vary significantly in the future and period-to-period comparisons of our operating results may not be meaningful. You should not rely on the results of one quarter as an indication of future performance.
The market price of our common stock has been, and may continue to be, volatile.
The stock market in general has been highly and increasingly volatile. The market price and trading volume for our common stock has been, and may continue to be, highly volatile, and investors in our common stock may experience a decrease in the value of their shares, including decreases unrelated to our operating performance or prospects. Factors that could cause the market price of our common stock to fluctuate significantly include:
•our operating and financial performance and prospects and the performance of other similar companies;
•the effects of the ongoing COVID-19 pandemic on our business and results of operations;
•our quarterly or annual earnings or those of other companies in our industry;
•conditions that impact demand for our products and services;
•the public’s reaction to our press releases, financial guidance and other public announcements, and filings with the SEC;
•changes in earnings estimates or recommendations by securities or research analysts who track our common stock;
•market and industry perception of our success, or lack thereof, in pursuing our growth strategy;
•our ability to integrate the operations of WageWorks and to realize the expected synergies and other benefits of the Acquisition;
•changes in short-term interest rates or expectations of what short-term interest rates will be;
•strategic actions by us or our competitors, such as acquisitions or restructurings;
•any data breaches or interruptions in our services;
•changes in government and other regulations, particularly those relating to the benefits of HSAs and other CDBs;
•changes in accounting standards, policies, guidance, interpretations, or principles;
•arrival and departure of key personnel;
•sales of common stock by us, our investors or members of our Board and management team; and
•changes in general market, economic, and political conditions in the U.S. and global economies or financial markets, including those resulting from natural disasters, telecommunications failure, cyber-attack, civil unrest in various parts of the world, acts of war, terrorist attacks, or other catastrophic events.
Any of these factors may result in large and sudden changes in the trading volume and market price of our common stock and may prevent you from being able to sell your shares at or above the price you paid for your shares of our common stock. Following periods of volatility in the market price of a company’s securities, stockholders often file securities class-action lawsuits against such company. Our involvement in a class-action lawsuit could divert our senior management’s attention and, if adversely determined, could have a material and adverse effect on our business, financial condition, and results of operations.
We do not intend to pay regular cash dividends on our common stock and, consequently, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock.
We have no current plans to declare and pay any cash dividends for the foreseeable future. We currently intend to retain all our future earnings, if any, to fund our growth. Therefore, you are not likely to receive any dividends on your common stock for the foreseeable future and the success of an investment in our common stock will depend upon any future appreciation in its value. There is no guarantee that our common stock will appreciate in value or even maintain the price at which our stockholders have purchased their shares.
Future offerings of debt or equity securities, which may rank senior to our common stock, may adversely affect the market price of our common stock.
If we decide to issue debt securities in the future, which would rank senior to shares of our common stock, it is likely that they will be governed by an indenture or other instrument containing covenants restricting our operating flexibility. Additionally, any equity securities or convertible or exchangeable securities that we issue in the future may have rights, preferences and privileges more favorable than those of our common stock and may result in dilution to owners of our common stock. We and, indirectly, our stockholders will bear the cost of issuing and servicing such securities. Because our decision to issue debt or equity securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. Thus, holders of our common stock will bear the risk of our future offerings reducing the market price of our common stock and diluting the value of their shareholdings in us.
Provisions in our charter documents and under Delaware law could discourage a takeover that stockholders may consider favorable.
Certain provisions in our governing documents could make a merger, tender offer or proxy contest involving us difficult; even if such events would be beneficial to the interests of our stockholders. These provisions include the inability of our stockholders to act by written consent and certain advance notice procedures with respect to stockholder proposals and nominations for candidates for the election of directors. In addition, because we are incorporated in Delaware, we are governed by the provisions of Section 203 of the Delaware General Corporation Law which, subject to certain exceptions, prohibits stockholders owning in excess of 15% of our outstanding voting stock from merging or combining with us. Accordingly, our board of directors could rely upon these or other provisions in our governing documents and Delaware law to prevent or delay a transaction involving a change in control of our company, even if doing so would benefit our stockholders.
Our amended and restated certificate of incorporation provides that the Court of Chancery of the State of Delaware is the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers or team members.
Our amended and restated certificate of incorporation provides that the Court of Chancery of the State of Delaware is the exclusive forum for any derivative action or proceeding brought on our behalf, any action asserting a claim for breach of a fiduciary duty owed by any of our directors and officers to us or our stockholders, any action asserting a claim arising pursuant to any provision of the Delaware General Corporation Law, our amended and restated certificate of incorporation or our amended and restated bylaws, or any action asserting a claim governed by the internal affairs doctrine. The choice of forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or our directors, officers or other team members, which may discourage such lawsuits against us and our directors, officers, and other team members. Alternatively, if a court were to find the choice of forum provision contained in our amended and restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could adversely affect our business and financial condition.