Company: ANTX
Filing Date: 2025-03-25
Form Type: 10-K
Source: 0000950170-25-044366
Chunk: 119

Company: AN2 Therapeutics, Inc.
Filing Date: 2025-03-25
Form: 10-K
Item: Item 1A
Chunk 119
---
 and regulations are often subject to varying interpretations, in many cases due to their lack of specificity, and, as a result, their application in practice may evolve over time as new guidance is provided by regulatory and governing bodies. This could result in continuing uncertainty regarding compliance matters and higher costs necessitated by ongoing revisions to disclosure and governance practices.

Pursuant to Section 404, we will be required to furnish a report by our senior management on our internal control over financial reporting. However, while we remain an emerging growth company, we will not be required to include an attestation report on internal control over financial reporting issued by our independent registered public accounting firm. To prepare for eventual compliance with Section 404, we have engaged in a process to document and evaluate our internal control over financial reporting, which is both costly and challenging. In this regard, we will need to continue to dedicate internal resources, engage outside consultants, and adopt a detailed work plan to assess and document the adequacy of internal control over financial reporting, continue steps to improve control processes as appropriate, validate through testing that controls are functioning as documented, and implement a continuous reporting and improvement process for internal control over financial reporting. Despite our efforts, there is a risk that we will not be able to conclude, within the prescribed timeframe or at all, that our internal control over financial reporting is effective as required by Section 404. Identifying material weaknesses could result in an adverse reaction in the financial markets due to a loss of confidence in the reliability of our financial statements.

Significant disruptions of our or our vendors’ information technology systems or cybersecurity incidents could result in significant financial, legal, regulatory, business, and reputational harm to us.

We are increasingly dependent on information technology systems and infrastructure, including mobile technologies, to operate our business. In the ordinary course of our business, we collect, store, process, and transmit large amounts of confidential information, including intellectual property, proprietary business information, personal information (including health information), and other confidential information. It is critical that we do so in a secure manner to maintain the confidentiality, integrity, and restricted availability of such information. We have also outsourced elements of our operations, including elements of our information technology infrastructure and data processing, to third parties and, as a result, we manage a number of third-party vendors who have access to our computer networks or our information. In addition, many of those third parties in turn subcontract or outsource some of their responsibilities to other third parties. While all information technology operations are inherently vulnerable to inadvertent or