Company: AX
Filing Date: 2025-08-21
Form Type: 10-K
Source: 0001299709-25-000125
Chunk: 109

Company: Axos Financial, Inc.
Filing Date: 2025-08-21
Form: 10-K
Item: Item 1A
Chunk 109
---
 for any reason without an immediately available substitute arrangement, our operations may be severely interrupted or delayed. If such interruption or delay were to continue for a substantial period of time, our business, prospects, financial condition and results of operations could be adversely affected.

Privacy concerns relating to our technology could damage our reputation and deter current and potential customers from using our products and services.

We are subject to various privacy, information security and data protection laws and regulations, such as the GLBA, which among other things requires privacy disclosures and maintenance of a robust security program. These laws and regulations are rapidly evolving and growing in complexity, and could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of consumer and employee information, and some of our current or planned business activities. The costs of compliance with these laws or regulatory actions may increase our operational costs, restrict our ability to provide certain products and services, reduce income from certain business initiatives, or result in interruptions or delays in the availability of systems.

Concerns about our practices with regard to the collection, use, disclosure or security of personal information of our customers or other privacy related matters, even if unfounded, could damage our reputation and results of operations. While we strive to comply with all applicable data protection laws and regulations, as well as our own posted privacy policies, any failure or perceived failure to comply may result in proceedings or actions against us by government entities or others, or could cause us to lose customers, which could potentially have an adverse effect on our business.

Misconduct by employees and third-party vendors could also result in fraudulent, improper or unauthorized activities on behalf of clients or improper use of confidential personal information. The Company may not be able to prevent employee errors or misconduct, and the precautions the Company takes to detect this type of activity might not be effective in all cases. Employee errors or misconduct could subject the Company to civil claims for negligence or regulatory enforcement actions, including fines and restrictions on our business.

As nearly all of our products and services are smartphone and internet-based, the amount of data we store for our customers on our servers (including personal information) has been increasing and will continue to increase. Any systems failure or compromise of our security that results in the release of our customers’ data could seriously limit the adoption of our products and services, as well as harm our reputation and brand and, therefore, our business. We may need to expend significant resources to protect against security breaches. System enhancements and updates may create