Aurora Innovation (AUR) Risk Factors

Our products and self-driving system are technical and complex, and commercial application requires that we meet very high standards for technology performance and system safety. We may be unable to timely release new products that meet our intended commercial use cases, and we may therefore experience more limited monetization of our technology. These risks are particularly relevant for factors such as our self-driving system's operational domain (i.e., the conditions under which our system is designed to operate), which includes variables such as traversable road networks, speeds, and weather patterns. It is possible that there may be additional limitations in our operating capabilities that are dependent upon a number of factors, including, for example, vehicle type (e.g., car, truck) and actor density (e.g., pedestrians, cyclists). If that is the case, we may be more restricted in our addressable market opportunities. Commercial deployment has taken longer in the self-driving industry than anticipated, and it may take us more time to complete our own technology development and commercialization than is currently projected. The achievement of broadly applicable self-driving technology will require further technology improvements including, for example, handling non-compliant or unexpected actor behavior and inclement weather conditions. These improvements may take us longer than expected which would increase our capital requirements for technology development, delay our timeline to commercialization, and reduce the potential financial returns that may be expected from the business.

We are at risk for interruptions, outages and breaches of, and cyber events and other incidents impacting: operational systems, including business, financial, accounting, product development, data processing or production processes, owned by us or our third-party vendors or suppliers; facility security systems, owned by us or our third-party vendors or suppliers; in-product technology owned by us or our third-party vendors or suppliers; our integrated software; or confidential, proprietary, and other data, including partners' or end-customers' or driver data, that we process or our third-party vendors or suppliers process on our behalf. Such cyber incidents could materially disrupt operational systems; result in loss of trade secrets or other proprietary or competitively sensitive information, technology or materials; compromise certain information of partners, end-customers, employees, suppliers, drivers or others, and lead to the loss or unavailability of, unauthorized access or damage to, or inappropriate access to, or use, disclosure or otherwise processing of, confidential information and other data we maintain or otherwise process or that is maintained or otherwise processed on our behalf; jeopardize the security of our facilities; or affect the performance of in-product technology. A cyber incident could be caused by disasters, insiders (through inadvertence or with malicious intent) or malicious third parties (including nation-states or nation-state supported actors) using sophisticated, targeted methods to circumvent firewalls, encryption and other security defenses, including hacking, distributed denial of service attacks, fraud, trickery or other forms of deception. The techniques used by cyber attackers change frequently and may be difficult to detect for long periods of time, and we may face difficulties and delays in identifying, responding to, and otherwise addressing security breaches and incidents. Geopolitical events such as Russia's actions in Ukraine and the Israel-Hamas war may increase our and our service providers' risks of cyber-attacks. Since the COVID-19 pandemic, more of our service providers' personnel are working remotely, which increases the risks of cyber-attacks, security breaches and incidents. Although we maintain and continue to develop information technology measures designed to protect us against intellectual property, technology, and materials theft, data breaches and other cyber incidents, including a formal incident response plan, such measures will require updates and improvements, and we cannot guarantee that such measures will be adequate to detect, prevent or mitigate cyber incidents. The implementation, maintenance, segregation and improvement of these systems requires significant management time, support and cost. Moreover, there are inherent risks associated with developing, improving, expanding and updating current systems, including the disruption of our data management, procurement, production execution, finance, supply chain and sales and service processes. These risks may affect our ability to manage our data and inventory, procure parts or supplies or produce, sell, deliver and service our solutions, adequately protect our intellectual property rights and proprietary or competitively sensitive information, technology or materials, or achieve and maintain compliance with, or realize available benefits under, applicable laws, regulations and contracts. Further, we utilize reputable third-party service providers or vendors for storage and hosting of a substantial portion of our data and source code. We cannot be sure that the systems upon which we rely, including those of our third-party vendors or suppliers, will be effectively implemented, maintained or expanded as planned. If we do not successfully implement, maintain or expand these systems as planned, our operations may be disrupted, our ability to accurately and timely report our financial results could be impaired, and deficiencies may arise in our internal control over financial reporting, which may impact our ability to certify our financial results. Moreover, our intellectual property rights and proprietary or competitively sensitive information, technology or materials could be compromised or misappropriated, and our reputation may be adversely affected. If these systems do not operate as we expect them to, we may be required to expend significant resources to make corrections or find alternative sources for performing these functions. A significant cyber incident could impact production capability, harm our reputation, cause us to breach our contracts with other parties or subject us to regulatory inquiries, investigations, and other proceedings, or claims, demands, or other litigation, and otherwise create material costs and liabilities, any of which could materially and adversely affect our business, financial condition and results of operations. In addition, our insurance coverage for cyber-attacks may not be sufficient to cover all the losses we may experience as a result of a cyber incident, and any cyber incident may result in an increase in our costs for insurance or insurance not being available to us on economically feasible terms, or at all. Insurers may also deny us coverage as to any future claim. Any of these results could materially and adversely affect our business, financial condition and results of operations.

Our business model relies on outsourced manufacturing of vehicles, including outsourced manufacturing of our self-driving system hardware and vehicle integration. The cost of tooling a manufacturing facility with a collaboration partner is high, and collaboration with third parties to manufacture vehicles and self-driving system hardware is subject to risks that are outside of our control. We have in the past, and could in the future, experience delays in development and production when and if our partners do not meet agreed upon timelines or experience capacity constraints. There is a risk of potential disputes between Aurora and Continental, as well as between Continental and other third-party partners, which could stop or slow vehicle production, and we could be affected by adverse publicity related to our partners, whether or not such publicity is related to such third parties' collaboration with us. In addition, we cannot guarantee that our suppliers will not deviate from agreed-upon quality standards. If Continental is unable to perform under the Strategic Partnership Agreement, we may be unable to enter into agreements with manufacturers on terms and conditions acceptable to us and therefore we may need to contract with other third parties or significantly add to our own production capacity. We may not be able to engage other third parties or establish or expand our own production capacity to meet our needs on acceptable terms, or at all. The expense and time required to adequately complete any transition may be greater than anticipated. Any of the foregoing could materially and adversely affect our business, financial condition and results of operations.

Our success depends, in significant part, on the continued services of our senior management team, which has extensive experience in the self-driving industry. The loss of any one or more members of our senior management team, for any reason, including resignation or retirement, could impair our ability to execute our business strategy and could materially and adversely affect our business, financial condition and results of operations. In particular, we are highly dependent on Chris Urmson, our Founder and Chief Executive Officer, who remains deeply involved in all aspects of our business, including product development. If Mr. Urmson ceased to be involved with Aurora, this would adversely affect our business because his departure could make it more difficult to, among other things, compete with other market participants, manage our R&D activities and retain existing partners or cultivate new ones. Negative public perception of, or negative news related to, Mr. Urmson may adversely affect our brand, relationship with partners or standing in the industry. Our success similarly hinges on the ability to attract, motivate, develop and retain a sufficient number of other highly skilled personnel, including software, hardware, systems engineering, automotive, safety, operations, design, finance, marketing, and support personnel. Competition for qualified highly skilled personnel can be strong, and we can provide no assurance that we will be successful in attracting or retaining such personnel now or in the future. Employees may be more likely to leave us if the shares of our capital stock they own or the shares of our capital stock underlying their equity incentive awards have significantly reduced in value or the vested shares of our capital stock they own or vested shares of our capital stock underlying their equity incentive awards have significantly appreciated. The significant reduction in the value of our common stock may require us to grant additional or larger individual equity incentive awards in order to prevent employee departures and to attract new personnel. The issuance of additional shares upon settlement or exercise of those awards would result in dilution to the holders of our common stock and increase the number of shares eligible for resale in the public market, and may have a negative impact on our stock price. Many of our employees may receive significant proceeds from sales of our equity in the public markets once their applicable vesting restrictions are satisfied, which may reduce their motivation to continue to work for us. Further, any inability to recruit, develop and retain qualified employees may result in high employee turnover and may force us to pay significantly higher wages, which may harm our profitability. Additionally, we do not carry key person insurance for any of our management executives, and the loss of any key employee or our inability to recruit, develop and retain these individuals as needed, could materially and adversely affect our business, financial condition and results of operations.

On April 26, 2023, we entered into the Strategic Partnership Agreement with Continental, which was amended on August 30, 2023 and further amended and restated on September 27, 2023. Pursuant to the Strategic Partnership Agreement, Continental will, as our "Hardware-as-a-Service" partner, develop the necessary hardware, firmware, fallback system integration, and related services to allow for the integration of the Aurora Driver into production vehicles at OEMs. The Strategic Partnership Agreement provides that we will pay Continental on a per-mile basis for vehicles operated by the Aurora Driver using the future generation of our Aurora Driver hardware system. The term of the Strategic Partnership Agreement continues until March 31, 2031. Pursuant to the Strategic Partnership Agreement, Aurora and Continental are each subject to defined and limited exclusivity periods, subject to various exclusions and early termination triggers. If the services contemplated by the agreement with Continental are not performed, including by reason of termination of the agreement, or if Continental becomes insolvent, ceases or significantly reduces its operations or experiences financial distress, or if any environmental, economic or other outside factors impact their operations, our ability to procure the necessary hardware, firmware, fallback system integration, and related services may be impaired, and we may not be able to obtain, or may face increased costs related to, such hardware, firmware, and services. If we lose Continental as a partner, or if the terms of the Strategic Partnership Agreement are ineffective at incentivizing performance for any reason, there could be an adverse effect on our business, financial condition, results of operations and prospects. While we believe that the Strategic Partnership Agreement contains provisions that adequately disincentivize non-performance by the parties, and while even in the event of non-performance we believe we may be able to establish alternate supply relationships and can obtain or engineer replacement components, we may be unable to do so in the short term (or at all) at prices or quality levels and/or on terms that are favorable to us and we may experience significant delays while re-engineering our system to accept any replacement parts. While we plan to obtain components from multiple sources whenever it is desirable and permissible under the Strategic Partnership Agreement, in addition to Continental, as it relates to the Aurora Driver, some of the other components used in our hardware and technology will be purchased from single suppliers. We refer to these component suppliers as our single source suppliers. These components are susceptible to supply shortages, long lead times for components, and supply changes, any of which could disrupt our supply chain and could delay commercialization of our products to users. For example, the Aurora Driver relies on single source suppliers for several components including GPU microchips which we use for machine learning inference, lidars, vehicle electronic control units, and automotive radar sensors. Supply of these components world-wide may be adversely affected by the business disruptions as well as industry consolidation and geopolitical conditions such as international trade wars like the U.S. trade war with China, Russia's actions in Ukraine, the Israel-Hamas war and other hostilities in the Middle East and increased political tensions in Russia, Europe or Asia. Such shortages, increased component lead times, reduced allocations of components and decommitments of orders have resulted in and may continue to result in increased component prices, fewer sourcing options, unpredictability of supply, prolonged manufacturing disruptions and increased product lead times. We are reliant on third-party suppliers to design, develop, industrialize and manufacture components for us. In order for these suppliers to undertake the investment needed to produce these components, they may require us to commit to terms, pricing or purchase volumes that are not acceptable to us.

We may be subject, in the ordinary course of business, to losses resulting from automobile liability, product liability, accidents, acts of God, and other claims against us, for which we may have no or limited insurance coverage. Further, because we operate in a new and thus inherently risky industry, insurance policies may not be available to us on terms and rates that are acceptable to us or at all. In addition, as a general matter, the policies that we do have may include significant deductibles or self-insured retentions, and we cannot be certain that our future insurance coverage will be sufficient to cover all future losses or claims against us. A loss that is uninsured or which exceeds policy limits may require us to pay substantial amounts, which could materially and adversely affect our business, financial condition and results of operations. Further, actions or inactions of others in our industry, through no fault of our own, may materially increase the cost of insurance and/or materially decrease the coverages available to us on commercially reasonable terms.

A significant natural disaster, such as an earthquake, fire, flood, hurricane or significant power outage or other similar events, such as infectious disease outbreaks or pandemic events (such as the outbreak of the COVID-19 pandemic), could materially and adversely affect our business, financial condition and results of operations. We have several offices located in the San Francisco Bay Area, a region known for seismic activity. In addition, natural disasters, acts of terrorism or war, including the ongoing geopolitical tensions related to Russia's actions in Ukraine and the Israel-Hamas war, could cause disruptions in our remaining operations, our or our partners' businesses, our suppliers' or the economy as a whole. We also rely on information technology systems to communicate among our workforce and with third parties. Any disruption to our communications, whether caused by a natural disaster or by man-made problems, such as power disruptions, could adversely affect our business. We do not have a formal disaster recovery plan or policy in place and do not currently require that our partners have such plans or policies in place. To the extent that any such disruptions result in development or commercialization delays or impede our partners' and suppliers' ability to timely deliver product components, or the deployment of our products, this could materially and adversely affect our business, financial condition and results of operations.

The market for self-driving technology is highly competitive and can be easily influenced by rapid technological change. Our future success will depend on our ability to develop and commercialize in a sufficiently timely manner in order to maintain competitiveness. Several companies, including, but not limited to, Waymo, GM Cruise, Tesla, Zoox/Amazon, Motional, Torc Robotics, Kodiak Robotics, Stack AV and Intel Mobileye are investing heavily in building this technology. These companies compete with us directly by offering self-driving technology for the same or similar use cases. If our competitors, including those previously mentioned, broadly commercialize their technology before we do, develop superior technology, or are perceived to have better technology, they may capture market opportunities and establish relationships with customers and partners that might otherwise have been available to us. Material commercialization of self-driving technology first involves pilot deployments, which we and other competitors are currently performing. Competitors may initiate similar deployments in various different use cases and/or geographies earlier than we will. Several of these competitors have substantially greater financial, marketing, R&D, and other resources. In the event that one or many of these competitors broadly commercializes their technology before we do, our business prospects and financial performance would be adversely impacted.

Self-driving technology is still nascent and is neither generally understood nor universally accepted. We are at risk of adverse publicity that stems from any public incident involving self-driving vehicles (whether involving Aurora or a competitor), which could result in decreased end-customer demand for our technology. Part of our commercialization plan includes public awareness and education campaigns, but this guarantees neither public nor customer acceptance of our services. If we cannot gain sufficient trust in our technology, we will be unable to commercialize as intended. We may also experience adverse publicity that argues self-driving technology is replacing human jobs and disrupting the economy. Such media attention could cause current and future partners to terminate their business with us, which would significantly impact our ability to make future sales. Further, as the market for self-driving cars develops, the differences in the approaches of Aurora and others will become more widely known to suppliers, insurers, regulators and others. Until these distinctions are known and appreciated, the actions of a single market participant may be imputed to the self-driving industry as a whole. As such, as a result of an action or inaction by a third-party, it is possible that suppliers, insurers, regulators and others may refuse or cease to interact with or conduct business with the self-driving industry as a whole, including Aurora. If the market does not accept and adopt our services and technology at the pace we expect or at all, it could materially and adversely affect our business, prospects, financial condition and results of operations.