Company: PFSA
Filing Date: 2025-09-17
Form Type: S-1/A
Source: 0001213900-25-088333
Chunk: 67

Company: Profusa, Inc.
Filing Date: 2025-09-17
Form: S-1/A
Chunk 67
---
 the COVID -19pandemic, we have modified our business practices and implemented telework policies wherever possible for appropriate categories of “nonessential” employees to minimize the disruption to our operations, to the extent possible. The continuation of these telework policies means additional operational risk, including increased cybersecurity risk. These cyber risks include, among other risks, greater phishing, malware, and other cybersecurity attacks, vulnerability to or disruptions of our information technology infrastructure and systems to support remote operations, increased risk of unauthorized access, use or dissemination of confidential information, limited ability to restore the systems in the event of a systems failure or interruption, greater risk of a security breach resulting in destruction, alteration or misuse of valuable information, including proprietary business information and personally identifiable information of individuals, all of which could expose us to risks of data or financial loss, litigation and liability. These threats can come from a variety of sources, ranging in sophistication from an individual hacker to malfeasance by employees, consultants or other service providers to criminal or other unauthorized threat actors, including state -sponsoredattacks. Cyber threats may be generic, or they may be custom -craftedagainst our information systems. Over the past several years, cyber attacks have become more prevalent and much harder to detect and defend against. These threat actors may be able to penetrate our security measures, breach our information technology systems, misappropriate or compromise confidential and proprietary information of our Company and our customers, cause system disruptions and shutdowns, or introduce ransomware, malware, or vulnerabilities into our products, systems, and networks or those of our customers and partners. Our network and storage applications, as well as those of our contractors, may be vulnerable to cyber -attack, malicious intrusion, malfeasance, loss of data privacy or other significant disruption and may be subject to unauthorized access by hackers, employees, consultants or other service providers. In addition, hardware, software or applications we develop or procure from third parties may contain defects in design or manufacture or other problems that could unexpectedly compromise information security or other problems that unexpectedly could interfere with the operation of our products. Unauthorized parties may also attempt to gain access to our systems or facilities through fraud, trickery or other forms of deceiving our employees, contractors and temporary staff. 39 We are and may continue to be subject to cybersecurity incidents that bypass our security measures. Such incidents may impact the integrity, availability or privacy of personal health information or other data subject to privacy laws or disrupt our information systems, devices or business, including our ability to deliver services to our customers. As a