Company: QTIWW
Filing Date: 2025-01-16
Form Type: S-1
Source: 0001628280-25-001723
Chunk: 55

Company: QT IMAGING HOLDINGS, INC.
Filing Date: 2025-01-16
Form: S-1
Chunk 55
---
 of operations. Any such proceeding or action, and any related indemnification obligations, could damage our reputation, force us to incur significant expenses in defense of such proceeding or action, distract our management, increase our costs of doing business or result in the imposition of financial liability.

Despite our efforts to ensure the integrity, confidentiality, availability, and authenticity of our proprietary systems and information, it is possible that we may not be able to anticipate or to implement effective preventive measures against all cyber threats. No security solution, strategy, or measures can address all possible security threats or block all methods of penetrating a network or otherwise perpetrating a security incident. The risk of unauthorized circumvention of our security measures or those of our third-party providers, customers and partners has been heightened by advances in computer and software capabilities and the increasing sophistication of hackers, including those operating on behalf of nation-state actors, who employ complex techniques involving the theft or misuse of personal and financial information, counterfeiting, “phishing” or social engineering incidents, account takeover attacks, denial or degradation of service attacks, malware, fraudulent payment and identity theft. Because the techniques used by hackers change frequently and are increasingly complex and sophisticated, and new technologies may not be identified until they are launched against a target, we and our third-party service providers may be unable to anticipate these techniques or detect an incident, assess its severity or impact, react or

<div align='center'>32</div>

#### Table of Contents
appropriately respond in a timely manner or implement adequate preventative measures. Our systems are also subject to compromise from internal threats, such as theft, misuse, unauthorized access or other improper actions by employees, service provides and other third parties with otherwise legitimate access to our systems or databases. The latency of a compromise is often measured in months, but could be years, and we may not be able to detect a compromise in a timely manner.

Due to applicable laws and regulations or contractual obligations, we may also be held responsible for any failure or cybersecurity breaches attributed to our third-party service providers as they relate to the information that we share with them. Although we generally have agreements relating to data privacy and security in place with our third-party service providers, they are limited in nature and we cannot guarantee that such agreements will prevent the accidental or unauthorized access to or disclosure, loss, destruction, disablement, corruption or encryption of, use or misuse of or modification of confidential, proprietary or sensitive information, including personal information, or enable us to obtain reimbursement from third-party service providers in the event we should suffer incidents