Company: KNRX
Filing Date: 2025-08-21
Form Type: F-1/A
Source: 0001641172-25-025066
Chunk: 31

Company: KNOREX LTD.
Filing Date: 2025-08-21
Form: F-1/A
Chunk 31
---
 and litigating and resolving legal claims or governmental inquiries and investigations, all of which could divert the attention of our management and key personnel away from our business operations.

Our customers and other partners are primarily responsible for the security of their IT environments, and we rely heavily on them and other third parties to supply clean data content and/or to utilize our products and services in a secure manner. Each of these third parties may face risks relating to cyber security, which could disrupt their businesses and therefore materially impact ours. While we provide guidance and specific requirements in some cases, we do not directly control any of such parties’ cyber security operations, or the amount of investment they place in guarding against cyber security threats. Accordingly, we are subject to any flaws in or breaches of their systems, which could materially impact our business, financial condition and results of operations.

We face risks associated with security breaches as well as privacy and data protection regulations.

Our business involves the collection, storage, processing, and transmission of personal and sensitive data as discussed above. We are subject to numerous laws and regulations designed to protect such data, which may be updating from time to time. Laws and regulations that impact our business, and particularly laws, regulations and other measures governments may take based on privacy and data protection concerns, are increasingly strict and complex, change frequently and at times are in conflict among the various jurisdictions where we do business.

The industry self-regulatory bodies and governments, including the federal and state governments of the U.S., continue to consider and implement laws and regulations addressing data privacy, cybersecurity, and data protection laws, which include provisions relating to breaches. For example, statutory damages may be available to users through a private right of action for certain data breaches under the California Privacy Rights Act and potentially other states’ laws in the U.S., the General Data Protection Regulation in the European Union and the European Economic Area, the Singapore Personal Data Protection Act 2012 in Singapore, the Digital Personal Data Protection Act in India, Vietnam Personal Data Protection Decree in Vietnam, and the Personal Data Protection Act 2010 in Malaysia, in relation to the collection, use and/or disclosure of personal data. In certain jurisdictions there are laws and regulations that restrict the flow of data outside the country which may also constrain our activities and require the use of local servers. In any event, a significant security breach could materially harm our business, financial condition, and results of operations.

We may also be required to disclose personal data about an individual to a public agency, where the disclosure is necessary in the public interest