Company: NDRA
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001654954-25-003612
Chunk: 59

Company: ENDRA Life Sciences Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 59
---
, health care providers and other business partners, which could cause disruption in our business and operations. Our facilities and our laboratory equipment would be costly to replace and could require substantial lead time to repair or replace. Although we believe we possess adequate insurance for the disruption of our business from causalities, such insurance may not be sufficient to cover all of our potential losses and may not continue to be available to us on acceptable terms, or at all.

Our business could be negatively impacted by corporate social responsibility and sustainability matters.

There has been an increased focus from investors, customers, employees and other stakeholders concerning corporate social responsibility and sustainability matters, including addressing climate change and diversity in company management, which may result in increases in our costs to operate our business or restrict certain aspects of our activities. The standards by which corporate social responsibility and sustainability efforts and related matters are measured are developing and evolving, and certain areas are subject to assumptions that could change over time and the extent and severity of climate change impacts are unknown. In addition, we could be criticized for the scope of such initiatives or goals or a lack of diversity on our board of directors or among our executive officers, or perceived as not acting responsibly in connection with these matters. Any such matters could have a material adverse impact on our future results of operations, financial position and cash flows.

Item 1B. Unresolved Staff Comments

Not applicable.

Item 1C. Cybersecurity

We have established procedures for evaluating, recognizing, and managing significant risks stemming from potential unauthorized events occurring on or through our electronic information systems. These procedures comprise an important part of our overall enterprise risk management system and are aimed at preventing, detecting, or mitigating data breaches, theft, misuse, unauthorized access, or any other security incidents or vulnerabilities affecting digitally stored data. Internally we have an Internet, Email and Computer Use Policy and all of our employees have been trained on the policy and related tools. Additionally, we employ processes to manage and identify risks arising from cybersecurity threats linked to supplier and customer relationships and our utilization of third-party technology and systems. Our operations involve collecting and storing information in cloud systems, such as Google Drive, and we rely on third-party providers, such as Google, whose systems may encounter interruptions and/or cybersecurity incidents.

We adhere to a risk management framework based on applicable laws and regulations to handle cybersecurity risks across our products, services, infrastructure and corporate assets. We regularly conduct risk assessments to gauge the effectiveness of our systems, identifying areas for improvement. These processes enable us to make informed, risk-based decisions and prioritize