Company: PFSA
Filing Date: 2025-08-21
Form Type: S-1/A
Source: 0001213900-25-079401
Chunk: 68

Company: Profusa, Inc.
Filing Date: 2025-08-21
Form: S-1/A
Chunk 68
---
 laws. As our customer base grows to include U.S. federal government agencies, Profusa may also need comply with Federal Risk and Authorization Management Program and Cybersecurity Maturity Model Certification requirements. These frameworks impose stringent cybersecurity standards and potentially significant non -compliancepenalties. In addition, foreign data protection, privacy, and other laws and regulations can be more restrictive than those in the United States. For example, data localization laws in some countries generally mandate that certain types of data collected in a particular country be stored and/or processed within that country. We may be subject to inquiries, investigations and audits in Europe and around the world, particularly in the areas of consumer and data protection, which will arise in the ordinary course of business and may increase in frequency as we continue to grow and expand our operations. Legislators and regulators may make legal and regulatory changes, or interpret and apply existing laws, in ways that make our products less useful to our customers, require us to incur substantial costs, expose us to unanticipated civil or criminal liability, or cause us to change our business practices. These changes or increased costs could negatively impact our business and results of operations in material ways. In the ordinary course of our business, we collect and store sensitive data, such as our proprietary business information and that of our clients, contractors, vendors and others as well as personally identifiable information of our customers, vendors and others, which data may include full names, social security numbers, addresses, and birth dates, in our data centers and on our networks. Our employees, contractor and vendors may also have access to and may use personal health information in the ordinary course of our business. The secure processing, maintenance and transmission of this information is critical to our operations. Despite our security measures and business controls, our information technology and infrastructure may be vulnerable to attacks by hackers, breaches due to employee, contractor or vendor error, or malfeasance or other disruptions or subject to the inadvertent or intentional unauthorized release of information. Any such occurrence could compromise our networks and the information stored thereon could be accessed, publicly disclosed, lost or stolen. Any such access, disclosure or other loss of information could result in legal claims or proceedings, and liability under laws that protect the privacy of personal information and regulatory penalties, disrupt our operations and the services we provide to our clients or damage our reputation, any of which could adversely affect our profitability, revenue and competitive position. As we grow and expand our administrative, customer support or IT support services, we may also utilize the services of personnel and contractors located outside