Tivic Health Systems (TIVC) Risk Factors

The global data protection landscape is rapidly evolving, and there has been an increasing focus on privacy and data protection issues with the potential to affect our business. We are subject to numerous state, federal and foreign laws, requirements and regulations governing the collection, transmission, use, disclosure, storage, retention and security of personal and personally-identifying information, such as information that we may collect in connection with conducting our business in the United States and abroad. Implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, and we cannot yet determine the impact future laws, regulations, standards or perception of their requirements may have on our business. This evolution may create uncertainty in our business; affect our ability to operate in certain jurisdictions; or to collect, store, transfer use and share personal information; necessitate the acceptance of more onerous obligations in our contracts; result in liability or impose additional costs on us. The cost of compliance with these laws, regulations and standards is high and is likely to increase in the future. Any failure or perceived failure by us to comply with federal, state or foreign laws or regulation, our internal policies and procedures, or our contracts governing our processing of personal information could result in negative publicity, government investigations and enforcement actions, fines, imprisonment of company officials and public censure, claims by third parties, damage to our reputation and loss of goodwill, any of which could have a material adverse effect on our business, financial condition and results of operations.

Our future success depends heavily upon the continued services of our executive officers and key personnel. The Company is headquartered in California, which is an at will employment state. Accordingly, the employment agreements that we have entered into with our executive officers and other key personnel do not require them to continue to work for us for any specified period and, therefore, they may terminate employment with us at any time, for any reason and with no advance notice. The replacement of members of our senior management team or other key personnel would likely involve significant time and costs, and the loss of these employees may significantly delay or prevent the achievement of our business objectives. In addition, our ability to recruit and retain talent in all areas of the business, including but not limited to skilled hires in marketing, product development, regulatory, clinical, quality, logistics, and finance, faces significant competition. We may not be able to hire or retain the type and number of managerial, sales and technical personnel necessary for future success. We will need to devote considerable resources to ensure that we retain our employees in the face of a highly competitive market for talented personnel. If we fail to attract and retain the skilled employees required, this could harm our business and hamper future expansion of our business operations.

We have insurance to protect our assets, operations and employees. While we believe our insurance coverage addresses the material risks to which we are exposed and is adequate and customary in our current state of operations, such insurance is subject to coverage limits and exclusions and may not be available for the risks and hazards to which we are exposed. Also, our insurance may be insufficient to cover the costs of any securities-related or other lawsuits or litigation, regardless of the merits of any such lawsuits or litigation. In addition, no assurance can be given that such insurance will be adequate to cover our liabilities or will be generally available in the future or, if available, that premiums will be commercially justifiable or affordable. If we were to incur substantial liability and such damages were not covered by insurance or were in excess of policy limits, or if we were to incur such liability at a time when we are not able to obtain liability insurance, our business, results of operations and financial condition could be materially adversely affected.

We may pursue marketing and selling our products internationally, which would likely be primarily done through e-commerce accelerators, distribution arrangements and regional licensing. We have limited experience operating outside the United States, and we will likely need to rely heavily on distributors and licensees in the event that we expand internationally. Expansion into international markets may expose us to, among other things, the following additional risks: - strain on our managerial resources;- pricing pressure that we may experience internationally;- a shortage of high-quality e-commerce accelerators, distributors, and licensees;- competitive disadvantage to competition with established business and customer relationships;- foreign currency exchange rate fluctuations;- the imposition of additional U.S. and foreign governmental controls or regulations;- economic instability;- changes in duties and tariffs, license obligations and other non-tariff barriers to trade;- the imposition of restrictions on the activities of foreign agents, representatives and distributors;- scrutiny of foreign tax authorities which could result in significant fines, penalties and additional taxes being imposed on us;- laws and business practices favoring local companies;- difficulties in maintaining consistency with our internal guidelines;- difficulties in enforcing agreements and collecting receivables through certain foreign legal systems;- the imposition of costly and lengthy new export licensing requirements;- the imposition of U.S. or international sanctions against a country, company, person or entity with whom we do business that would restrict or prohibit continued business with the sanctioned country, company, person or entity; and - the imposition of new trade restrictions.

Tariffs could increase the cost of our products and raw materials that go into making them. These increased costs could adversely impact the gross margin that we earn on our products. Tariffs could also make our products more expensive for customers, which could make our products less competitive and reduce consumer demand. Countries may also adopt other protectionist measures that could limit our ability to offer our products. Political uncertainty surrounding international trade disputes and protectionist measures could also have a negative effect on consumer confidence and spending, which could have a material adverse effect on our business, financial condition and results of operations.

We use information technology and other computer resources to carry out important operational activities and to maintain our business records. As part of our normal business activities, we permit certain employees to perform some or all of their business activities remotely, we collect and store certain personal identifying and/or confidential information relating to our employees, customers, vendors and suppliers, and we maintain operational and financial information related to our business. Furthermore, we rely on products and services provided by third-party suppliers to operate certain critical business systems, including without limitation, cloud-based infrastructure, encryption and authentication technology, email, and other functions, which exposes us to supply-chain attacks or other business disruptions. We face risks associated with security breaches through cyber-attacks or cyber-intrusions, malware, computer viruses and malicious codes, ransomware, attachments to e-mail, unauthorized access attempts, denial of service attacks,phishing, social engineering, persons with access to systems inside our organization, and other significant disruptions of our information technology networks and related systems. The risk of a security breach has generally increased as the frequency, intensity and sophistication of attempted attacks and intrusions from around the world have increased. Even the most well protected information, networks, systems and facilities remain potentially vulnerable because the techniques, tools and tactics used in such attempted security breaches evolve and generally are not recognized until launched against a target, and in some cases are designed to not be detected and, in fact, may not be detected. Accordingly, we may be unable to anticipate these techniques or to implement adequate security barriers, disaster recovery or other preventative or corrective measures, and thus it is impossible for us to entirely counteract this risk or fully mitigate the harms after such an attack. We have implemented certain systems and processes intended to address ongoing and evolving cybersecurity risks, secure our information technology, applications and computer systems, and prevent unauthorized access to or loss of sensitive, confidential and personal data. Although we and our service providers employ what we believe are adequate security, disaster recovery and other preventative and corrective measures, our security measures, taken as a whole, may not be sufficient for all possible situations and may be vulnerable to, among other things, fraud, hacking, employee error, system error, and faulty password management. Additionally, we rely on third-parties for virtually all of our operating infrastructure, who may themselves have standards of materiality of cybersecurity risks that differ from the materiality standards of Tivic itself. Our ability to conduct our business may be impaired if our or our services providers' information technology networks, systems or resources, including our and their websites or e-mail systems, are compromised, degraded, damaged or fail, whether due to a virus or other harmful circumstance, fraud, intentional penetration or disruption of our or their information technology resources by: - a third party,- natural disaster,- a failure of hardware or software due to a design or programmatic flaw,- a failure of hardware or software security controls,- telecommunications system failure,- service provider error or failure,- fraudulent transactions,- intentional or unintentional personnel actions,- lost connectivity to our networked resources, or - a failure of disaster recovery system. A significant and extended disruption could damage our business or reputation and cause, amongst other things, loss of revenues or customer relationships, unintended and/or unauthorized public disclosure or the misappropriation of proprietary, personal identifying and confidential information, and us to incur significant expenses to address and remediate or otherwise resolve these kinds of issues. Our disaster recovery procedures and contingency planning rely heavily on third-party providers and may prove insufficient to fully protect Tivic operations and business interests The release of confidential information may also lead to litigation or other proceedings against us by affected individuals, business partners and/or regulators, and the outcome of such proceedings, which could include losses, penalties, fines, injunctions, expenses and charges recorded against our earnings and cause us reputational harm and/or could have a material and adverse effect on our business, financial position or results of operations.

We may fail to adapt our technology to user requirements or emerging treatment standards. Microcurrent and other neuromodulation therapies are not currently considered standard of care for inflammation and may not ever be considered standard of care. Treatment standards may not evolve to incorporate our product. New industry standards for the development, manufacture and marketing of medical devices may evolve and we may not be able to conform to the changes, meet new standards in a timely fashion or maintain a competitive position in the market. In particular, regulatory standards for bioelectronic treatments of medical conditions are evolving. If we face material delays in introducing our products and new technology, we may fail to attract new customers.

We currently compete in the sinus, cold and allergy market segment, a segment with large, entrenched players. We expect to experience competition from current and potential new competitors, some of which may be better established and have significantly greater financial, technical, marketing and distribution resources. We encounter competition from larger, well-established and well-financed entities that may continue to acquire, invest in, or form joint ventures with producers of alternate sinus care technologies. Our competitors may be able to respond more quickly to new or emerging technologies and changes in customer requirements than we can. Our market position could erode rapidly as a result of the development of new, superior products and technology by competitors. In addition, current and potential competitors may have greater name recognition, broader physician reach and more extensive customer bases. Increased competition could result in price reductions, lower volume sales, and reduced gross margins. There can be no assurance that we will be able to compete successfully against our current or future competitors or that competitive pressures will not have a material adverse effect on our business, financial condition and results of operations.

Our data on the available market for our current products and future products is based on a number of internal and third-party research reports, estimates and assumptions. While we believe that such research, our assumptions and the data underlying our estimates are reasonable, these assumptions and estimates may not be correct. In addition, the statements in this Report relating to, among other things, the expected growth in the market for our ClearUP device are based on a number of internal and third-party data, estimates and assumptions, and may prove to be inaccurate. If the actual number of consumers who would benefit from our products, the price at which we can sell future products or the available market for our products is smaller than we estimate, it could have a material adverse effect on our business, financial condition and results of operations.

Our future growth depends on the commercial success of our technology and initial products. It is not certain that our target customers will choose our technology for technical, cost, support or commercial reasons. If our target customers do not widely adopt and purchase our technology, our future growth will be limited. Further, our resources and investments may not be adequate to achieve the targeted level of manufacturing and sales set out in our business plan.

We are heavily dependent on customers who use our ClearUP device to provide good reviews and word-of-mouth recommendations to contribute to our growth. Customers who are dissatisfied with their experiences with our products or services may post negative reviews. We may also be the subject of blog, forum or other media postings that include inaccurate statements and/or create negative publicity. In addition, any negative news regarding bioelectronic medicine may adversely impact our business. Any negative reviews or publicity, whether real or perceived, disseminated by word-of-mouth, by the general media, by electronic or social networking means or by other methods, could harm our reputation and brand and could severely diminish consumer confidence in our products.