Company: BLND
Filing Date: 2025-08-07
Form Type: 10-Q
Source: 0001855747-25-000069
Chunk: 206

Company: Blend Labs, Inc.
Filing Date: 2025-08-07
Form: 10-Q
Item: Part I, Item 4
Chunk 206
---
 may face increased compliance burdens regarding such requirements with regulators and customers regarding our products and services and will incur additional costs for oversight and monitoring of our own supply chain. 

Although we have developed systems and processes that are designed to help protect the confidential and sensitive information we maintain and our partners, vendors, and other service providers maintain on our behalf, including personal information of our customers, consumers, and employees, protect our systems, prevent data loss, and prevent security breaches and security incidents, these security measures may not have fully protected our systems in the past and cannot guarantee security in the future. We also have incorporated, and may continue to incorporate, artificial intelligence (“AI”) technologies into our platform and otherwise in our business, which may increase cybersecurity risks. Further, AI technologies may be used in connection with certain cybersecurity attacks, resulting in heightened risks of security breaches and incidents. The information technology systems and infrastructure used in our business may be vulnerable to cyberattacks or security breaches or incidents, and third parties may be able to access data, including personal information of our customers, consumers, or employees, or other sensitive and proprietary data, accessible through those systems. Employee and service provider error, malfeasance, or other errors in the storage, use, or transmission of any of these types of data could result in an actual or perceived privacy or security breach or other security incident. Although we have policies and technologies restricting access to the personal information we store, these policies and technologies may not be effective in all cases. Further, we must expend significant resources to build and maintain our privacy and data security systems; however, if we do not provide adequate funding or prioritize programs and strategic initiatives related to privacy and cybersecurity, we may be more vulnerable to breaches or attacks. Any breach of privacy, or any security breach or other incident, could interrupt our operations, result in our platform being unavailable, result in loss of or improper access to, or acquisition, disclosure, or other processing of sensitive or confidential information, personal information, or other data, result in fraudulent transfer of funds. Further, any such event, or the perception it has occurred, may harm our reputation, brand, and competitive position, damage our relationships with our customers, subject us to adverse media coverage, or result in claims, regulatory investigations, and proceedings and significant legal, regulatory, and financial exposure, including ongoing monitoring by regulators, and any such incidents or any perception that our security measures are inadequate could lead to loss of customer confidence in, or decreased use of, our platform, any of which could adversely affect our