The nature of our business involves the receipt and storage of information about our customers.customers, including personal information and PHI. We have implemented programs to detect and alert us to data security incidents. However, because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and may be difficult to detect for long periods of time, we may be unable to anticipate these techniques or implement adequate preventive measures. Companies are increasingly subject to a wide variety of security incidents, cyber-attacks and other attempts to gain unauthorized access. These threats can come from a variety of sources, ranging in sophistication from an individual hacker to malfeasance by employees, consultants or other service providers to state-sponsored attacks. Cyber threats may be generic, or they may be custom-craftedcustom crafted against our information systems. In recent times, cyber-attacks have become more prevalent and much harder to detect and defend against. Our network and storage applications may be vulnerable to cyber-attack, malicious intrusion, malfeasance, loss of data privacy or other significant disruption and may be subject to unauthorized access by hackers, employees, consultants or other service providers. In addition, hardware, software or applications we develop or procure from third parties may contain defects in design or manufacture or other problems that could unexpectedly compromise information security. Unauthorized parties may also attempt to gain access to our systems or facilities through fraud, trickery or other forms of deceiving our employees, contractors and temporary staff. If we experience significant data security breaches or fail to detect and appropriately respond to significant data security breaches, we could be exposed to government enforcement actions and private litigation.litigation, as well as potentially incur significant costs and diversion of resources to comply with our contractual obligations to notify our customers of such security breaches, particularly with respect to any protected health information affected. Moreover, if a computer security breach affects our systems or results in the unauthorized access, use or disclosure of personal information, our reputation could be materially damaged. In addition, such a breach may require notification to governmental agencies, the media and/or affected individuals pursuant to various federal, state and international privacy and security laws, if applicable, including HIPAA or HITECH and its implementing rules and regulations, as well as regulations promulgated by the Federal Trade Commission and state breach notification laws. We would also be exposed to a risk of loss or litigation and potential liability under laws, regulations and contracts that protect the privacy and security of personal information. For example, as stated above, the CCPA imposes a private right of action for security breaches that could lead to some form of remedy including regulatory scrutiny, fines, private right of action settlements, and other consequences. The financial exposure from the events referenced above could either not be insured against or not be fully covered through any insurance that we may maintain, and there can be no assurance that the limitations of liability in any of our contracts would be enforceable or adequate or would otherwise protect us from liabilities or damages as a result of the events referenced above. Any of the foregoing could have a material adverse effect on our business, reputation, results of operations, financial condition and prospects. In addition, our customers could further lose confidence in our ability to protect their information, which could cause them to discontinue using our products or purchasing from us altogether.

The terms of many open source and other non-commercial licenses have not been judicially interpreted, and there is a risk that such licenses could be construed in a manner that could impose unanticipated conditions or restrictions on our ability to commercialize our solutions. In such event, in order to continue offering our solutions, we could be required to seek licenses

from alternative licensors, which may not be available on a commercially reasonable basis or at all, to re-engineer our solutions or to discontinue the sale of our solutions in the event we cannot obtain a license or re-engineer our solutions on a timely basis, any of which could harm our business and operating results. In addition, if an owner of licensed software were to allege that we had not complied with the conditions of the corresponding license agreement, we could incur significant legal costs defending ourselves against such allegations. In the event such claims were successful, we could be subject to significant damages, be required to disclose our source code, or be enjoined from the distribution of our solutions.

Many potential litigants have the capability to dedicate substantially greater resources to enforce their intellectual property rights and to defend claims that may be brought against them. Furthermore, a successful claimant could secure a judgment that requires us to pay substantial damages or prevents us from distributing certain solutions or performing certain services. We might also be required to seek a license and pay royalties for the use of such intellectual property, which may not be available on commercially acceptable terms or at all. Alternatively, we may be required to develop non-infringing technology, which could require significant effort and expense and may ultimately not be successful.

Our failure to obtain patents with claims of a scope necessary to cover our technology, or the invalidation of our patents, or our inability to protect any of our intellectual property, may weaken our competitive position and harm our business and operating results. We might be required to spend significant resources to monitor and protect our intellectual property rights. We may initiate claims or litigation against third parties for infringement of our proprietary rights or to establish the validity of our proprietary rights. Any litigation, whether or not it is resolved in our favor, could result in significant expense to us and divert the efforts of our technical and management personnel, which may harm our business, operating results and financial condition.

Although our customer agreements contain terms and conditions, including disclaimers of liability, that are intended to reduce or eliminate our potential liability, we could be required to spend significant amounts of management time and resources to defend ourselves against product liability, tort, warranty or other claims. If any such claims were to prevail, we could be forced to pay damages, comply with injunctions or stop distributing our solutions. Even if potential claims do not result in liability to us, investigating and defending against these claims could be expensive and time consuming and could divert management’s attention away from our business. We maintain general liability insurance coverage, including coverage for errors and omissions; however, this coverage may not be sufficient to cover large claims against us or otherwise continue to be available on acceptable terms. Further, the insurer could attempt to disclaim coverage as to any particular claim.

We intend to continue to make investments to support business growth and may require additional funds to respond to business challenges, which include the need to develop new solutions or enhance existing solutions, enhance our operating infrastructure, expand our sales and marketing capabilities, expand into non-healthcare markets, and acquire complementary businesses, technologies or assets. Accordingly, we may need to engage in additional equity or debt financing to secure funds. Equity and debt financing, however, might not be available when needed or, if available, might not be available on terms satisfactory to us. If we raise additional funds through equity financing, our stockholders may experience dilution. Debt financing, if available, may involve covenants restricting our operations or our ability to incur additional debt. If we are unable to obtain adequate financing or financing on terms satisfactory to us in the future, our ability to continue to support our business growth and to respond to business challenges could be significantly limited as we may have to delay, reduce the scope of or eliminate some or all of our initiatives, which could harm our operating results.

We provide certain products that are, and others that may become, subject to regulation by the FDAFood and Drug Administration (FDA) and similar agencies in other countries, or the jurisdiction of these agencies could be expanded in the future to include our solutions. The FDA regulates certain products, including software-based products, as “medical devices” based, in part, on the intended use of the product and the risk the device poses to the patient should the device fail to perform properly. For example, the clinical alert notification solution we acquired as part of our acquisition of Extension Healthcare and the clinical communications product we acquired from mVisum are regulated by the FDA as Class II medical devices. Although we have concluded that our wireless badgeBadge is

regulations, obtain premarket approval from the FDA or foreign regulatory agencies, and satisfy the extensive reporting requirements. In addition, failure to comply with these regulations could result in enforcement actions and monetary penalties. The clinical alert notification solution

There is an increasing focus on the governance of environmental and social risks in our industry. A number of our customers have adopted, or may adopt, procurement policies that include E&S provisions that their suppliers must comply with, or they may seek to include such provisions in their procurement terms and conditions. An increasing number of participants in the industry are also joining voluntary E&S initiatives, such as the Responsible Business Alliance. These E&S provisions and initiatives are subject to change, can be unpredictable, and may be difficult and expensive for us to comply with, given the complexity of our supply chain and our outsourced manufacturing. If we acquiredare unable to comply or are unable to cause our suppliers or contract manufacturers to comply, with such policies or provisions, a customer may stop purchasing products from us, and may take legal action against us, which could harm our reputation, revenue and results of operations.

In addition, as part of their E&S programs, an increasing number of customers are seeking to source products that do not contain minerals sourced from areas where proceeds from the sale of such minerals are likely to be used to fund armed conflict, such as in the Democratic Republic of the Congo. This could adversely affect the sourcing, availability and pricing of minerals used in the manufacture of our acquisitionequipment. Since our supply chain is complex, we are not currently able to definitively ascertain the origins of Extension Healthcareall of the minerals and metals used in our products. As a result, we may face difficulties in satisfying these customers’ demands, which may harm our sales and operating results.

event of our bankruptcy, liquidation, reorganization, or other winding up, our assets that secure debt ranking senior or equal in right of payment to the Notes will be available to pay obligations on the Notes only after the secured debt has been repaid in full from these assets, and the clinical communications productassets of our subsidiaries will be available to pay obligations on the Notes only after all claims senior to the Notes have been repaid in full. There may not be sufficient assets remaining to pay amounts due on any or all of the Notes then outstanding. The indentures governing the Notes do not prohibit us from incurring additional senior debt or secured debt, nor do they prohibit any of our current or future subsidiaries from incurring additional liabilities.

Our ability to make scheduled payments of the principal of, to pay interest on or to refinance our indebtedness, including the Notes, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. Our business may not continue to generate cash flow from operations in the future sufficient to service our debt and make necessary capital expenditures. If we acquired from mVisum are regulatedunable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt or obtaining additional equity capital on terms that may be onerous or highly dilutive. Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations, including the Notes or otherwise.

The SEC and other regulatory and self-regulatory authorities have implemented various rules and taken certain actions, and may in the future adopt additional rules and take other actions, that may impact those engaging in short selling activity involving equity securities (including our common stock). Such rules and actions include Rule 201 of SEC Regulation SHO, the adoption by the FDAFinancial Industry Regulatory Authority, Inc. and the national securities exchanges of a “Limit Up-Limit Down” program, the imposition of market-wide circuit breakers that halt trading of securities for certain periods following specific market declines, and the implementation of certain regulatory reforms required by the Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010. Any governmental or regulatory action that restricts the ability of the holders the Notes to effect short sales of our common stock, borrow our common stock, or enter into swaps on our common stock could adversely affect the trading price and the liquidity of the Notes.

We expect that the trading price of the Notes will be significantly affected by the market price of our common stock. The stock market in recent years has experienced significant price and volume fluctuations that have often been unrelated to the operating performance of companies. The market price of our common stock could fluctuate significantly for many reasons. A decrease in the market price of our common stock would likely adversely impact the trading price of the Notes. The market price of our common stock could also be affected by possible sales of our common stock by investors who view the Notes as Class II medical devices.a more attractive means of equity participation in us and by hedging or arbitrage trading activity that we expect to develop involving our common stock. This trading activity could, in turn, affect the trading price of the Notes.

Our corporate headquarters are located in the San Francisco Bay Area, a region known for seismic activity, and many critical components of our solutions are sourced in Asia and Mexico, regions known to suffer natural disasters.disasters and epidemics or contagious diseases. A significant natural disaster, such as an earthquake, fire or a flood, or epidemic or contagious disease, occurring at our headquarters, our other facilities or where our contract manufacturer or its suppliers are located, could harm our business, operating results and financial condition. In addition, acts of terrorism could cause disruptions in our business, the businesses of our customers and suppliers, or the economy as a whole. We also rely on information technology systems to communicate among our workforce located worldwide, and in particular, our senior management, general and administrative, and research and development activities that are coordinated with our corporate headquarters in the San Francisco Bay Area. Any disruption to our internal communications, whether caused by a natural disaster, an epidemic or contagious disease, or by man-made problems, such as power disruptions, in the San Francisco Bay Area, Asia or Mexico could delay our research and development efforts, cause delays or cancellations of customer orders or delay deployment of our solutions, which could harm our business, operating results and financial condition.

The Sarbanes-Oxley Act requires, among other things, that we assess the effectiveness of our internal control over financial reporting annually and disclosure controls and procedures quarterly. In particular, we must obtain confidence in our internal control over financial reporting to allow management to report on the effectiveness of our internal control over financial reporting as required by Section 404 of the Sarbanes-Oxley Act. To the extent we find a material weakness or other deficiency in our internal control over financial reporting, the accuracy and timeliness of our financial reporting may be adversely affected.

As a public company, we incur substantial legal, accounting and other expenses. The Sarbanes-Oxley Act, Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 and rules subsequently implemented by the SEC and our stock exchange, impose various requirements on public companies, including certain corporate governance practices. Our management and other personnel devote a substantial amount of time to these compliance requirements. Moreover, these rules and regulations, along with compliance with accounting principles and regulatory interpretations of such principles, as amended by the JOBS Act, have increased and will continue to increase our legal, accounting and financial compliance costs and have made and will continue to make some activities more time-consuming and costly.costly to the extent we remain a public company.

We have in the past been, and may in the future become, subject to claims and litigation alleging violations of the securities laws or other related claims, which could harm our business and require us to incur significant costs. For example, a purported securities class action was filed in August 2013 in the United States District Court for the Northern District of California against us and certain of our officers and directors. The suit purported to allege claims for allegedly misleading statements regarding our business

legal expenses, settlement costs or damage awards that could have a material impact on our financial position, results of operations and cash flows.

The trading market for our common stock depends in part on the research and reports that securities or industry analysts publish about us and our business. We do not control these analysts or the content and opinions included in their reports. The price of our common stock could decline if one or more analysts downgrade our common stock or if those analysts issue other unfavorable commentary or cease publishing reports about us or our business. If one or more analysts cease coverage of our company or fail to regularly publish reports about our company, we could lose visibility in the financial market, which in turn could cause our stock price to decline. Further, securities or industry analysts may elect not to provide research coverage of our common stock and such lack of research coverage may adversely affect the market price of our common stock.

We have generated operating cash flows in the past and our $332.4 million in cash. In addition, $2.5 million has been set aside for retention bonuses for key employeescash and short-term investments provides us with ample liquidity to meet our current needs. However, given the dynamic nature of which $0.5 million and $1.0 million was paid in December 2016 and October 2017, respectively and $1.0 million will be paid in October 2018.this situation, we cannot accurately estimate the impacts of COVID-19 on our financial condition, results of operations or cash flows.