Company: BIAF
Filing Date: 2025-05-07
Form Type: 424B4
Source: 0001641172-25-008977
Chunk: 38

Company: bioAffinity Technologies, Inc.
Filing Date: 2025-05-07
Form: 424B4
Chunk 38
---
 return on our investment in research and development for new tests and products. In addition, legislation and regulations affecting the pricing of diagnostic tests, pharmaceuticals, or healthcare services may change in ways adverse to us before or after any of our proposed tests and products are approved for marketing.

Our internal information technology systems, or those of our third-party clinical research organizations or other contractors or consultants, may fail or suffer security breaches, loss or leakage of data, and other disruptions, which could result in a material disruption of our diagnostic tests’ or therapeutic product candidates’ development programs, compromise sensitive information related to our business, or prevent us from accessing critical information, potentially exposing us to liability or otherwise adversely affecting our business.

We are increasingly dependent upon information technology systems, infrastructure, and data to operate our business. In the ordinary course of business, we collect, store, and transmit confidential information (including but not limited to intellectual property, proprietary business information, and personal information). It is critical that we do so in a secure manner to maintain the confidentiality and integrity of such confidential information. We have also outsourced elements of our operations to third parties, and as a result we manage a number of third-party contractors who have access to our confidential information.

Despite the implementation of security measures, given their size and complexity and the increasing amounts of confidential information that they maintain, our internal information technology systems and those of our third-party clinical research organizations and other contractors and consultants are potentially vulnerable to breakdown or other damage or interruption from service interruptions, system malfunction, natural disasters, terrorism, war, and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our employees, contractors, consultants, business partners, and/or other third parties, or from cyberattacks by malicious third parties (including the deployment of harmful malware, ransomware, extortion, account takeover attacks, degradation of service attacks, denial-of-service attacks, “phishing,” or social engineering and other means to affect service reliability and threaten the confidentiality, integrity, and availability of information), which may compromise our system infrastructure or lead to data leakage. We have technology security initiatives and disaster recovery plans in place to mitigate our risk to these vulnerabilities, but these measures may not be adequately designed or implemented to ensure that our operations are not disrupted or that data security breaches do not occur. To the extent that any disruption or security breach were to result in a loss of or damage to our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability and reputational damage.

| 18