Ovid Therapeutics (OVID) Risk Analysis

During the conduct of clinical trials, patients report changes in their health, including illnesses, injuries and discomforts, to their doctor. Often, it is not possible to determine whether or not the drug candidate being studied caused these conditions. Regulatory authorities may draw different conclusions or require additional testing to confirm these determinations, if they occur. In addition, it is possible that illnesses, injuries, discomforts or other adverse events that were observed in earlier trials, as well as conditions that did not occur or went undetected in previous trials will be reported by subjects as we test our drug candidates in larger, longer and more extensive clinical programs, or, as use of these drug candidates becomes more widespread if they receive regulatory approval. Many times, side effects are only detectable after investigational drugs are tested in large-scale, Phase 3 trials or, in some cases, after they are made available to patients on a commercial scale after approval. If clinical experience indicates that any of our drug candidates causes adverse events or serious or life-threatening adverse events, the development of that drug candidate may fail or be delayed, or, if the drug candidate has received regulatory approval, such approval may be revoked, which would harm our business, prospects, operating results and financial condition. Moreover, if we elect, or are required, to delay, suspend or terminate any clinical trial of our drug candidates, the commercial prospects of our drug candidates may be harmed and our ability to generate revenue through their sale may be delayed or eliminated. Any of these occurrences may harm our business, financial condition and prospects significantly. Additionally, if any of our drug candidates receive marketing approval, the FDA could require us to include a black box warning in our label or adopt REMS to ensure that the benefits outweigh its risks, which may include, among other things, a medication guide outlining the risks of the drug for distribution to patients and a communication plan to health care practitioners. Furthermore, if we or others later identify undesirable side effects caused by our drug candidates, several potentially significant negative consequences could result, including: regulatory authorities may suspend or withdraw approvals of such drug candidate;regulatory authorities may require additional warnings on the label;we may be required to change the way a drug candidate is administered or conduct additional clinical trials;we could be sued and held liable for harm caused to patients;we may need to conduct a recall; and our reputation may suffer. Any of these events could prevent us from achieving or maintaining market acceptance of our drug candidates and could significantly harm our business, prospects, financial condition and results of operations.

If we rely on third parties to manufacture or commercialize our current or any future drug candidates, or if we collaborate with additional third parties for the development of our current or any future drug candidates, we must, at times, share trade secrets with them. We may also conduct joint research and development programs that may require us to share trade secrets under the terms of our research and development partnerships or similar agreements. We seek to protect our proprietary technology in part by entering into confidentiality agreements and, if applicable, material transfer agreements, consulting agreements or other similar agreements with our advisors, employees, third-party contractors and consultants prior to beginning research or disclosing proprietary information. These agreements typically limit the rights of the third parties to use or disclose our confidential information, including our trade secrets. Despite the contractual provisions employed when working with third parties, the need to share trade secrets and other confidential information increases the risk that such trade secrets become known by our competitors, are inadvertently incorporated into the technology of others, or are disclosed or used in violation of these agreements. Given that our proprietary position is based, in part, on our know-how and trade secrets, a competitor's discovery of our trade secrets or other unauthorized use or disclosure could have an adverse effect on our business and results of operations. In addition, these agreements typically restrict the ability of our advisors, employees, third-party contractors and consultants to publish data potentially relating to our trade secrets. Despite our efforts to protect our trade secrets, our competitors may discover our trade secrets, either through breach of our agreements with third parties, independent development or publication of information by any third-party collaborators. A competitor's discovery of our trade secrets would harm our business.

We are increasingly dependent on information technology systems and infrastructure, including mobile technologies, to operate our business. In the ordinary course of our business, we collect, store, process and transmit large amounts of sensitive data, and, as a result, we and the third parties with whom we work face a variety of continuously evolving threats that have caused and could cause future security incidents. In addition, many of those third parties in turn subcontract or outsource some of their responsibilities to other third parties. While all information technology operations are inherently vulnerable to inadvertent or intentional security breaches, incidents, attacks and exposures, the accessibility and distributed nature of our information technology systems, and the sensitive data stored on those systems, make such systems vulnerable to unintentional or malicious, internal and external attacks on our technology environment. We have also outsourced elements of our operations (including elements of our information technology infrastructure) to third parties, and as a result, certain third parties with whom we work have access to our computer networks and/or our sensitive data. In addition, many of those third parties in turn subcontract or outsource some of their responsibilities to other third parties. Our ability to monitor the third parties' information security practices is limited, and these third parties may not have adequate information security measures in place. When the third parties with whom we work experience a security incident or other interruption, which has occurred in the past, we could experience adverse consequences. For example, in the third quarter of 2024, we were notified of a business email compromise impacting a development collaborator, which resulted in our payment being misdirected to a fraudulent account. The funds were fully recovered in January 2025. In the absence of recovery of funds or other remuneration, we may be entitled to damages if our third-party service providers fail to satisfy their privacy or security-related obligations to us, any award may be insufficient to cover our damages, or we may be unable to recover such award. In addition, supply chain attacks have increased in frequency and severity, and we cannot guarantee that third parties' infrastructure in our supply chain or our third-party partners' supply chains have not been compromised. Increasing global tensions, including tensions between China and Taiwan, the ongoing war between Russia and Ukraine and the war involving Israel, among others, are likely to increase the frequency of cybersecurity attacks. In addition, hybrid work has increased risks to our information technology systems and data as our employees utilize network connections, computer and devices outside our premises or network, including working at home, while in transit and in public locations. Additionally, future or past business transactions (such as acquisitions or integrations) could expose us to additional cybersecurity risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities' systems and technologies. Furthermore, we may discover security issues that were not identified during due diligence of such acquired or integrated entities, and it may be difficult to integrate companies into our information technology environment and security program. We take steps designed to detect, mitigate, and remediate vulnerabilities in our information systems (such as our hardware and/or software, including that of third parties upon which we rely); however we may not detect and remediate all such vulnerabilities on a timely basis. Further, we may and have experienced delays in deploying remedial measures and patches designed to address identified vulnerabilities. For example, we have had situations in which a vulnerability has been identified, but the remediating patch download and installation was delayed due to the user being offline or the computer not being rebooted in a timely manner to finalize the installation. Non-remediated vulnerabilities could be exploited and result in a security incident. Cyberattacks, malicious internet-based activity, online and offline fraud, and other similar activities are increasing in their frequency, levels of persistence, sophistication and intensity, and are also being conducted by sophisticated and organized groups and individuals with a wide range of motives (including, but not limited to, industrial espionage) and expertise, including organized criminal groups, "hacktivists," nation states and others. Such attacks could include the deployment of harmful malware (including as a result of advanced persistent threat intrusions), ransomware attacks, denial-of-service attacks, credential stuffing and/or harvesting, social engineering (including through deep fakes, which may be increasingly more difficult to identify as fake, and phishing attacks), supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss of sensitive data or other information technology assets, adware, attacks enhanced or facilitated by artificial intelligence, telecommunications failures, earthquakes, fires, floods and other means to affect service reliability and threaten the confidentiality, integrity and availability of our information systems and sensitive data. In particular, severe ransomware attacks are becoming increasingly prevalent and can lead to significant interruptions in our operations, ability to provide our products or services, loss of sensitive data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Significant disruptions of our, our third-party vendors' and/or business partners' information technology systems or other similar data security incidents could adversely affect our business operations and/or result in the loss,misappropriation, and/or unauthorized access, use or disclosure of, or the prevention of access to, sensitive data, which could result in financial, legal, regulatory, business and reputational harm to us. In addition, information technology system disruptions, whether from attacks on our technology environment or from computer viruses, natural disasters, terrorism, war and telecommunication and electrical failures, could result in a material disruption of our development programs and our business operations. For example, the loss of clinical trial data from completed or future clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. It may be difficult and/or costly to detect, investigate, mitigate, contain and remediate a security incident. Our efforts to do so may not be successful. For example, we utilize a phishing reporting feature that allows our IT function to analyze and assess whether suspicious emails are phishing attempts. This system is reliant on artificial intelligence and employee awareness and diligence, both of which may be exploited or not always successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems. We have in the past and will in the future expend significant resources or modify our business activities to try to protect against current and constantly evolving security incidents. Additionally, certain data privacy and security obligations will require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our information technology systems and sensitive data. Applicable data privacy and security obligations may require us to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security incidents. Such disclosures are costly, and the disclosure or the failure to comply with such requirements could lead to adverse consequences. If we (or a third party with whom we work) experience a security incident or are perceived to have experienced a security incident, including but not limited to a security incident involving personal information regarding our patients or employees, we may experience adverse consequences, such as disruptions to our business, harm to our reputation, government enforcement actions (for example, investigations, fines, penalties, audits, and inspections), additional reporting requirements, and/or oversight, or we may otherwise be subject to liability under laws, regulations and contractual obligations, including those that protect the privacy and security of personal information. This could result in increased costs to us, and result in significant legal and financial exposure and/or reputational harm. In addition, any failure or perceived failure by us or our vendors or business partners to comply with our privacy, confidentiality or data security-related legal or other obligations to third parties, or any further security incidents or other inappropriate access events that result in the unauthorized access, release or transfer of sensitive data, may result in governmental investigations, enforcement actions, regulatory fines, litigation, or public statements against us by advocacy groups or others, and could cause third parties, including clinical sites, regulators or current and potential partners, to lose trust in us or we could be subject to claims by third parties that we have breached our privacy- or confidentiality-related obligations, which could materially and adversely affect our business and prospects. Moreover, data security incidents and other inappropriate access can be difficult to detect, and any delay in identifying them may lead to increased harm of the type described above. While we have implemented security measures intended to protect our information technology systems and infrastructure, there can be no assurance that such measures will be effective. Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our data privacy and security obligations. While we are seeking cybersecurity insurance coverage to cover certain aspects of the cyber risks described above, there is no guarantee that we will obtain cybersecurity insurance coverage sufficient to cover the risks described here. Furthermore, any losses suffered by the company may not be adequately covered by insurance or other contractual rights available to us. The successful assertion of one or more large claims against us that exceed or are not covered by our insurance coverage or changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could make us unable to acquire such insurance and may have an adverse effect on our business, financial condition, and results of operations. In addition to experiencing a security incident, third parties may gather, collect or infer sensitive information about us from public sources, data brokers or other means that reveal competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Additionally, sensitive company information could be leaked, disclosed or revealed as a result of or in connection with our employees', personnel's, or vendors' use of generative artificial intelligence technologies.

Even if we obtain any regulatory approval for our current or future drug candidates, such approvals will be subject to ongoing regulatory requirements for manufacturing, labeling, packaging, storage, advertising, promotion, sampling, record-keeping and submission of safety and other post-market information. Any regulatory approvals that we receive for our current or future drug candidates may also be subject to a REMS, limitations on the approved indicated uses for which the drug may be marketed or to the conditions of approval, or contain requirements for potentially costly post-marketing testing, including Phase 4 trials, and surveillance to monitor the quality, safety and efficacy of the drug. In addition, drug manufacturers and their facilities are subject to payment of user fees and continual review and periodic inspections by the FDA and other regulatory authorities for compliance with cGMP requirements and adherence to commitments made in the NDA, BLA or foreign marketing application. If we, or a regulatory authority, discover previously unknown problems with a drug, such as adverse events of unanticipated severity or frequency, or problems with the facility where the drug is manufactured or if a regulatory authority disagrees with the promotion, marketing or labeling of that drug, a regulatory authority may impose restrictions relative to that drug, the manufacturing facility or us, including requesting a recall or requiring withdrawal of the drug from the market or suspension of manufacturing. If we fail to comply with applicable regulatory requirements following approval of our current or future drug candidates, a regulatory authority may: issue an untitled letter or warning letter asserting that we are in violation of the law;seek an injunction or impose administrative, civil or criminal penalties or monetary fines;suspend or withdraw regulatory approval;suspend any ongoing clinical trials;refuse to approve a pending NDA or comparable foreign marketing application (or any supplements thereto) submitted by us or our strategic partners;restrict the marketing or manufacturing of the drug;seize or detain the drug or otherwise require the withdrawal of the drug from the market;refuse to permit the import or export of drug candidates; or refuse to allow us to enter into supply contracts, including government contracts. Moreover, the FDA strictly regulates the promotional claims that may be made about drug products. In particular, a product may not be promoted for uses that are not approved by the FDA as reflected in the product's approved labeling. The FDA and other agencies actively enforce the laws and regulations prohibiting the promotion of off-label uses, and a company that is found to have improperly promoted off-label uses may be subject to significant civil, criminal and administrative penalties. Any government investigation of alleged violations of law could require us to expend significant time and resources in response and could generate negative publicity. The occurrence of any event or penalty described above may inhibit our ability to commercialize our current or future drug candidates and harm our business, financial condition, results of operations and prospects. In addition, the FDA's policies, and those of equivalent foreign regulatory agencies, may change and additional government regulations may be enacted that could cause changes to or delays in the drug review process, or suspend or restrict regulatory approval of our drug candidates. We cannot predict the likelihood, nature or extent of government regulation that may arise from future legislation or administrative action, either in the United States or abroad. If we are slow or unable to adapt to changes in existing requirements or the adoption of new requirements or policies, or if we are not able to maintain regulatory compliance, we may lose any marketing approval that we may have obtained and we may not achieve or sustain profitability, which would harm our business, financial condition, results of operations and prospects.

The market price of our common stock may be volatile. In the past, companies that have experienced volatility in the market price of their stock have been subject to securities class action litigation. We may be the target of this type of litigation in the future. Securities litigation against us could result in substantial costs and divert our management's attention from other business concerns, which could seriously harm our business.

We are highly dependent on our senior management team, including our Chairman and Chief Executive Officer, Dr. Levin. The employment agreements we have with these officers do not prevent such persons from terminating their employment with us at any time. The loss of the services of any of these persons could impede the achievement of our research, development, operational, financial and commercialization objectives. In addition, we are dependent on our continued ability to attract, retain and motivate highly qualified additional management, clinical and scientific personnel. If we are not able to retain our management and to attract, on acceptable terms, additional qualified personnel necessary for the continued development of our business, we may not be able to sustain our operations or grow. This risk may be further amplified given the particularly competitive hiring market in New York City, the location of our corporate headquarters. We may not be able to attract or retain qualified personnel in the future due to the intense competition for qualified personnel among biotechnology, pharmaceutical and other businesses. Many of the other pharmaceutical companies that we compete against for qualified personnel and consultants have greater financial and other resources, different risk profiles and a longer history in the industry than we do. They also may provide more diverse opportunities and better chances for career advancement. Some of these characteristics may be more appealing to high-quality candidates and consultants than what we have to offer. If we are unable to continue to attract, retain and motivate high-quality personnel and consultants to accomplish our business objectives, the rate and success at which we can discover and develop drug candidates and our business will be limited and we may experience constraints on our development objectives. Our future performance will also depend, in part, on our ability to successfully integrate newly hired executive officers into our management team and our ability to develop an effective working relationship among senior management. Our failure to integrate these individuals and create effective working relationships among them and other members of management could result in inefficiencies in the development and commercialization of our drug candidates, harming future regulatory approvals, sales of our drug candidates and our results of operations. Additionally, we do not currently maintain "key person" life insurance on the lives of our executives or any of our employees.

We do not currently have the ability to independently conduct any preclinical studies or clinical trials. We intend to rely on CROs and clinical trial sites to ensure the proper and timely conduct of our preclinical studies and clinical trials, and we expect to have limited influence over their actual performance. We intend to rely upon CROs to monitor and manage data for our clinical programs, as well as the execution of future preclinical studies. We expect to control only certain aspects of our CROs' activities. Nevertheless, we will be responsible for ensuring that each of our preclinical studies or clinical trials are conducted in accordance with the applicable protocol, legal, regulatory and scientific standards and our reliance on the CROs does not relieve us of our regulatory responsibilities. We and our CROs will be required to comply with GLPs and GCPs, which are regulations and guidelines enforced by the FDA and are also required by the Competent Authorities of the Member States of the European Economic Area and comparable foreign regulatory authorities in the form of International Council for Harmonization guidelines for any of our drug candidates that are in preclinical and clinical development. The regulatory authorities enforce GCPs through periodic inspections of trial sponsors, principal investigators and clinical trial sites. Although we will rely on CROs to conduct GCP-compliant clinical trials, we remain responsible for ensuring that each of our GLP preclinical studies and clinical trials is conducted in accordance with its investigational plan and protocol and applicable laws and regulations, and our reliance on the CROs does not relieve us of our regulatory responsibilities. If we or our CROs fail to comply with GCPs, the clinical data generated in our clinical trials may be deemed unreliable and the FDA or comparable foreign regulatory authorities may require us to perform additional clinical trials before approving our marketing applications. Accordingly, if our CROs fail to comply with these regulations or fail to recruit a sufficient number of subjects, we may be required to repeat clinical trials, which would delay the regulatory approval process. While we will have agreements governing their activities, our CROs will not be our employees, and we will not control whether or not they devote sufficient time and resources to our future clinical and preclinical programs. These CROs may also have relationships with other commercial entities, including our competitors, for whom they may also be conducting clinical trials, or other drug development activities which could harm our business. We face the risk of potential unauthorized disclosure or misappropriation of our intellectual property by CROs, which may reduce our trade secret protection and allow our potential competitors to access and exploit our proprietary technology. If our CROs do not successfully carry out their contractual duties or obligations, fail to meet expected deadlines, or if the quality or accuracy of the clinical data they obtain is compromised due to the failure to adhere to our clinical protocols or regulatory requirements or for any other reasons, our clinical trials may be extended, delayed or terminated, and we may not be able to obtain regulatory approval for, or successfully commercialize any drug candidate that we develop. As a result, our financial results and the commercial prospects for any drug candidate that we develop would be harmed, our costs could increase, and our ability to generate revenue could be delayed. In addition, principal investigators for our clinical trials may serve as scientific advisors or consultants to us from time to time and receive compensation in connection with such services. Under certain circumstances, we may be required to report some of these relationships to the FDA. The FDA may conclude that a financial relationship between us and a principal investigator has created a conflict of interest or otherwise affected interpretation of the trial. The FDA may therefore question the integrity of the data generated at the applicable clinical trial site and the utility of the clinical trial itself may be jeopardized. This could result in a delay in approval, or rejection, of our marketing applications by the FDA and may ultimately lead to the denial of marketing approval of our current and future drug candidates. If our relationship with these CROs terminates, we may not be able to enter into arrangements with alternative CROs or do so on commercially reasonable terms. Switching or adding additional CROs involves substantial cost and requires management time and focus. In addition, there is a natural transition period when a new CRO commences work. As a result, delays occur, which can negatively impact our ability to meet our desired clinical development timelines. Though we intend to carefully manage our relationships with our CROs, there can be no assurance that we will not encounter challenges or delays in the future or that these delays or challenges will not have a negative impact on our business, financial condition and prospects.

Market acceptance and sales of any drug candidates that we commercialize, if approved, will depend in part on the extent to which coverage and adequate reimbursement for these drugs and related treatments will be available from third-party payors, including government health administration authorities, managed care organizations and other private health insurers. Third-party payors decide which therapies they will pay for and establish reimbursement levels. Third-party payors often rely upon Medicare coverage policy and payment limitations in setting their own coverage and reimbursement policies. However, decisions regarding the extent of coverage and amount of reimbursement to be provided for any drug candidates that we develop will be made on a payor-by-payor basis. One third-party payor's determination to provide coverage for a drug does not assure that other payors will also provide coverage, and adequate reimbursement, for the drug. Additionally, a third-party payor's decision to provide coverage for a therapy does not imply that an adequate reimbursement rate will be approved. Each third-party payor determines whether or not it will provide coverage for a therapy, what amount it will pay the manufacturer for the therapy, and on what tier of its formulary it will be placed. The position on a third-party payor's list of covered drugs, or formulary, generally determines the co-payment that a patient will need to make to obtain the therapy and can strongly influence the adoption of such therapy by patients and physicians. Patients who are prescribed treatments for their conditions and providers prescribing such services generally rely on third-party payors to reimburse all or part of the associated healthcare costs. Patients are unlikely to use our drugs unless coverage is provided and reimbursement is adequate to cover a significant portion of the cost of our drugs. A primary trend in the U.S. healthcare industry and elsewhere is cost containment. Third-party payors have attempted to control costs by limiting coverage and the amount of reimbursement for particular medications. We cannot be sure that coverage and reimbursement will be available for any drug that we commercialize and, if reimbursement is available, what the level of reimbursement will be. Inadequate coverage and reimbursement may impact the demand for, or the price of, any drug for which we obtain marketing approval. If coverage and adequate reimbursement are not available, or are available only to limited levels, we may not be able to successfully commercialize our current and any future drug candidates that we develop. Further, coverage policies and third-party payor reimbursement rates may change at any time. Even if favorable coverage and reimbursement status is attained, less favorable coverage policies and reimbursement rates may be implemented in the future.

The global economy, including credit and financial markets, has experienced extreme volatility and disruptions, including, among other things, severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, supply chain shortages, fluctuations in inflation and interest rates, and uncertainty about economic stability. For example, during 2022 and 2023, the Federal Reserve raised interest rates multiple times in response to concerns about inflation. Higher interest rates, coupled with reduced government spending and volatility in financial markets may increase economic uncertainty and affect consumer spending. Trade policies and geopolitical disputes and conflicts can result in tariffs, sanctions and other measures that restrict international trade, and may adversely affect our costs of doing business, particularly if these measures occur in regions where our suppliers source components or raw materials. Similarly, tensions between China and Taiwan, the ongoing war between Russia and Ukraine and the war involving Israel have created volatility in the global capital markets and are expected to have further global economic consequences, including disruptions of the global supply chain and energy markets. Increased inflation may result in increased operating costs (including labor costs) and may affect our operating budgets. In addition, the U.S. Federal Reserve has raised interest rates in response to concerns about inflation. Additionally, trade policies and geopolitical disputes and other international conflicts can result in tariffs, sanctions and other measures that restrict international trade, and can materially adversely affect our business, particularly if these measures occur in regions where drug products are manufactured or raw materials are sourced. With the new administration in the U.S., additional and higher tariffs and sanctions may be imposed on goods imported from other countries which could increase the cost of goods needed to commercialize our products and continue development of our product candidates. Further, such actions by the U.S. could result in retaliatory action by those countries which could impact our ability to profitably commercialize our products in those jurisdictions. As a result, our business, operations and financial condition could be materially harmed. Any such volatility and disruptions may adversely affect our business or the third parties on whom we rely. If the equity and credit markets deteriorate, including as a result of political unrest or war, it may make any necessary debt or equity financing more difficult to obtain in a timely manner or on favorable terms, more costly or more dilutive. Increased inflation rates can adversely affect us by increasing our costs, including labor and employee benefit costs.