Company: PFSA
Filing Date: 2025-08-22
Form Type: S-1/A
Source: 0001213900-25-079829
Chunk: 73

Company: Profusa, Inc.
Filing Date: 2025-08-22
Form: S-1/A
Chunk 73
---
 liability under HIPAA, consumer protection laws, or other common law theories, subject us to litigation and federal and state governmental inquiries, damage our reputation, and otherwise be disruptive to our business and operations. Cyber incidents can result from deliberate attacks or unintentional events. We collect and store on our networks sensitive information, including intellectual property, proprietary business information and personally identifiable information of individuals, such as our customers and employees. The secure maintenance of this information and technology is critical to our business operations. We have implemented multiple layers of security measures to protect the confidentiality, integrity and availability of this data and the systems and devices that store and transmit such data. We utilize current security technologies, and our defenses are monitored and routinely tested internally and by external parties. Additionally, we use third party products such as Amazon Cognito that provide advanced user authentication services that aim to prevent bad actors from accessing our systems. Despite these efforts, threats from malicious persons and groups, new vulnerabilities and advanced new attacks against information systems create risk of cybersecurity incidents. These incidents can include, but are not limited to, gaining unauthorized access to digital systems for purposes of misappropriating assets or sensitive information, corrupting data, or causing operational disruption. Because the techniques used to obtain unauthorized access, disable or degrade service, or sabotage systems change frequently and may not immediately produce signs of intrusion, we may be unable to anticipate these incidents or techniques, timely discover them, or implement adequate preventative measures. When we leverage third -partytools to manage security features, we add an additional potential attack surface that is capable of being exploited. In response to the COVID -19pandemic, we have modified our business practices and implemented telework policies wherever possible for appropriate categories of “nonessential” employees to minimize the disruption to our operations, to the extent possible. The continuation of these telework policies means additional operational risk, including increased cybersecurity risk. These cyber risks include, among other risks, greater phishing, malware, and other cybersecurity attacks, vulnerability to or disruptions of our information technology infrastructure and systems to support remote operations, increased risk of unauthorized access, use or dissemination of confidential information, limited ability to restore the systems in the event of a systems failure or interruption, greater risk of a security breach resulting in destruction, alteration or misuse of valuable information, including proprietary business information and personally identifiable information of individuals, all of which could expose us to risks of data or financial loss, litigation and liability. These threats can come from a variety of sources, ranging in sophistication from an individual hacker to malfeasance by employees