Company: PFSA
Filing Date: 2025-10-29
Form Type: 424B3
Source: 0001213900-25-103174
Chunk: 70

Company: Profusa, Inc.
Filing Date: 2025-10-29
Form: 424B3
Chunk 70
---
 protection laws. As our customer base grows to include U.S. federal
government agencies, Profusa may also need comply with Federal Risk and Authorization Management Program and Cybersecurity Maturity Model
Certification requirements. These frameworks impose stringent cybersecurity standards and potentially significant non-compliance penalties.

In addition, foreign data protection,
privacy, and other laws and regulations can be more restrictive than those in the United States. For example, data localization laws
in some countries generally mandate that certain types of data collected in a particular country be stored and/or processed within that
country. We may be subject to inquiries, investigations and audits in Europe and around the world, particularly in the areas of consumer
and data protection, which will arise in the ordinary course of business and may increase in frequency as we continue to grow and expand
our operations. Legislators and regulators may make legal and regulatory changes, or interpret and apply existing laws, in ways that make
our products less useful to our customers, require us to incur substantial costs, expose us to unanticipated civil or criminal liability,
or cause us to change our business practices. These changes or increased costs could negatively impact our business and results of operations
in material ways.

In the ordinary course of our
business, we collect and store sensitive data, such as our proprietary business information and that of our clients, contractors, vendors
and others as well as personally identifiable information of our customers, vendors and others, which data may include full names, social
security numbers, addresses, and birth dates, in our data centers and on our networks. Our employees, contractor and vendors may also
have access to and may use personal health information in the ordinary course of our business. The secure processing, maintenance and
transmission of this information is critical to our operations. Despite our security measures and business controls, our information technology
and infrastructure may be vulnerable to attacks by hackers, breaches due to employee, contractor or vendor error, or malfeasance or other
disruptions or subject to the inadvertent or intentional unauthorized release of information. Any such occurrence could compromise our
networks and the information stored thereon could be accessed, publicly disclosed, lost or stolen. Any such access, disclosure or other
loss of information could result in legal claims or proceedings, and liability under laws that protect the privacy of personal information
and regulatory penalties, disrupt our operations and the services we provide to our clients or damage our reputation, any of which could
adversely affect our profitability, revenue and competitive position.

As we grow