Company: REE
Filing Date: 2025-05-15
Form Type: 20-F
Source: 0001628280-25-025661
Chunk: 67

Company: REE Automotive Ltd.
Filing Date: 2025-05-15
Form: 20-F
Item: Item 3
Chunk 67
---
 and/or transmit data of our employees, suppliers, strategic partners, and customers, and, as applicable, are otherwise used to help operate and/or monitor our technology and our business. Any incident affecting the infrastructure and/or systems of these third parties that may be caused by cyber-attacks, natural disasters, fire, flood, severe storm, earthquake, power loss, telecommunications

Table of C ontents

failures (including internet failures), terrorist or other attacks, regional epidemics or global pandemics, and other similar events beyond our control could negatively affect our business operations. There can also be no assurance that any security measures that such third-parties have implemented for their systems and, where applicable, our systems, will be effective against current and/or future security threats, or that such third parties will properly monitor both their technology and systems and, where applicable our systems, and alert us of an ongoing threat or issue, when necessary or required. For example, we are aware that one of our third party’s systems was penetrated in the past, which has not had a material impact on REE to-date.

Likewise, we cannot guarantee that the third party software and/or systems that we use will not cause outages and/or other issues across our information technology systems along with their systems. For example, one of our service provider’s software updates caused significant temporary outages to its customers’ systems resulting in significant interruptions of their business operations. REE was not materially impacted from such event to-date. Although we strive to reduce the risk associated with such third parties, our ability to monitor and control these third-parties is limited. As a result, we may fail to conduct proper due diligence, adequately monitor their compliance, fail to receive notification of a cyber event, or may fail to discover their failure to comply with these requirements. Any of the foregoing could have a material adverse effect on our business, financial condition, results of operations, or prospects.

In addition, we outsource all of the infrastructure relating to our cloud solution to Amazon Web Services, or AWS, which is our sole provider of these services and hosts our platform and many of the internal programs that we use to operate our business. We rely solely upon AWS to ensure the uninterrupted operation of our cloud-based infrastructure, including in connection with our in-vehicle services and functionality. This cloud utilizes data connectivity to monitor performance and timely capture opportunities to enhance on-the-road performance and for safety and cost-saving preventative maintenance. Therefore, any significant disruption of, limitation of our access to, or other interference with our use