Company: SXI
Filing Date: 2025-08-04
Form Type: 10-K
Source: 0001437749-25-024450
Chunk: 19

Company: STANDEX INTERNATIONAL CORP/DE/
Filing Date: 2025-08-04
Form: 10-K
Item: Item 1
Chunk 19
---
 required pension contributions could require us to dedicate a greater portion of our cash flow from operations to making contributions, which could negatively impact our financial flexibility.

      12

Our business could be negatively impacted by cybersecurity threats, information systems and network interruptions, and other security threats or disruptions.

Our information technology networks and related systems are critical to the operation of our business and essential to our ability to successfully perform day-to-day operations. Cybersecurity threats are persistent, evolve quickly, and include, but are not limited to, computer viruses, ransomware, attempts to access information, denial of service and other electronic security breaches. These events could disrupt our operations or customers and other third-party IT systems in which we are involved and could negatively impact our reputation among our customers and the public which could have a negative impact on our financial conditions, results of operations, or liquidity.

We are subject to increasing regulation associated with data privacy and processing, the violation of which could result in significant penalties and harm our reputation.

Regulatory scrutiny of privacy, data protection, collection, use and sharing of data is increasing on a global basis. Like all global companies, we are subject to a number of laws, rules and directives (“privacy laws”) relating to the collection, use, retention, security, processing and transfer (“processing”) of personally identifiable information about our employees, customers and suppliers (“personal data”) in the countries where we operate. The most notable of these privacy laws is the EU’s General Data Protection Regulation (“GDPR”), which came into effect in 2018. GDPR extends the scope of the EU data protection law to all foreign companies processing data of EU residents and imposes a strict data protection compliance regime with severe penalties for non-compliance of up to the greater of 4% of worldwide turnover and €20 million. While we continue to strengthen our data privacy and protection policies and to train our personnel accordingly, a determination that there have been violations of GDPR or other privacy or data protection laws could expose us to significant damage awards, fines and other penalties that could, individually or in the aggregate, materially harm our results of operations and reputation.

Various restrictions in our charter documents, Delaware law and our credit agreement could prevent or delay a change in control that is not supported by our board of directors.

We are subject to several provisions in our charter documents, Delaware law and our credit facility that may discourage, delay or prevent a merger, acquisition or change of control that a stockholder may consider favorable. These anti-takeover provisions include:

      • 
      maintaining a classified board