Company: BLND
Filing Date: 2025-05-08
Form Type: 10-Q
Source: 0001855747-25-000041
Chunk: 64

Company: Blend Labs, Inc.
Filing Date: 2025-05-08
Form: 10-Q
Item: Part I, Item 8
Chunk 64
---
 to identify and prevent. Certain efforts may be state-sponsored or supported by significant financial and technological resources, making them even more difficult to detect, remediate, and otherwise respond to. 

There also have been and may continue to be significant supply chain attacks, and we cannot guarantee that our or our partners’, vendors’, or service providers’ systems and networks have not been breached or that they do not contain exploitable defects or bugs that could result in a breach of or incident impacting, or a disruption to our systems and networks or the systems and networks of third parties that support us and our services. In addition, laws, regulations, government guidance, and industry standards and practices in the United States and elsewhere are rapidly evolving to combat these threats. We may face increased compliance burdens regarding such requirements with regulators and customers regarding our products and services and will incur additional costs for oversight and monitoring of our own supply chain. 

Although we have developed systems and processes that are designed to help protect the confidential and sensitive information we maintain and our partners, vendors, and other service providers maintain on our behalf, including personal information of our customers, consumers, and employees, protect our systems, prevent data loss, and prevent security breaches and security incidents, these security measures may not have fully protected our systems in the past and cannot guarantee security in the future. We also have incorporated, and may continue to incorporate, artificial intelligence (“AI”) technologies into our platform and otherwise in our business, which may increase cybersecurity risks. Further, AI technologies may be used in connection with certain cybersecurity attacks, resulting in heightened risks of security breaches and incidents. The information technology systems and infrastructure used in our business may be vulnerable to cyberattacks or security breaches or incidents, and third parties may be able to access data, including personal information of our customers, consumers, or employees, or other sensitive and proprietary data, accessible through those systems. Employee and service provider error, malfeasance, or other errors in the storage, use, or transmission of any of these types of data could result in an actual or perceived privacy or security breach or other security incident. Although we have policies and technologies restricting access to the personal information we store, these policies and technologies may not be effective in all cases. Further, we must expend significant resources to build and maintain our privacy and data security systems; however, if we do not provide adequate funding or prioritize programs and strategic initiatives related to privacy and cybersecurity, we may be more vulnerable to breaches or attacks. Any breach of privacy, or any security breach or other incident, could