Company: BLND
Filing Date: 2025-08-07
Form Type: 10-Q
Source: 0001855747-25-000069
Chunk: 204

Company: Blend Labs, Inc.
Filing Date: 2025-08-07
Form: 10-Q
Item: Part I, Item 4
Chunk 204
---
 designed to maintain the confidentiality, integrity, and availability of such sensitive information. Additionally, in the ordinary course of our business, we collect, store, transmit, and otherwise process large amounts of confidential business information, including intellectual property, proprietary corporate and business information, and other confidential information. We also have arrangements in place with certain of our partners, vendors, and other service providers that require us to share certain information we maintain and otherwise process, including consumer information, with them. Certain elements of our operations (including elements of our information technology infrastructure) rely on third parties, and as a result, we use numerous third-party service providers that may have access to our computer networks and sensitive or confidential information. In addition, many of those third parties may subcontract or outsource some of their responsibilities to other third parties. Our information technology systems, including the functions of third parties that are involved with or have access to those systems, are large and complex, with many points of entry and access. Our systems and those of our third-party service providers are potentially vulnerable to and may be subject to unintentional, inadvertent, or malicious, internal and external cyberattacks and other means of compromising the security, integrity, or availability of systems and data, including hacking, intrusions, malware, ransomware and other malicious code, social engineering attacks, phishing and spearphishing attempts, fraudulent inducement, electronic fraud (including attempts to misrepresent personal or financial or information to obtain loans or other financial products), wire fraud attempts to overload our servers with distributed denial-of-service attacks, employee theft, error, or malfeasance, unauthorized access by third parties (including foreign governments or state actors with significant financial and technological resources) or internal actors, or other attacks, and other types of disruptions, exposure, and security breaches and incidents. Any vulnerabilities can be exploited from inadvertent or intentional actions of our employees, partners, vendors, service providers, customers, or by malicious third parties. While we take steps to ensure any such vulnerabilities are patched in our systems, but we cannot guarantee that all vulnerabilities have been patched in every system upon which we are dependent or that additional vulnerabilities of other software upon which we rely will not be discovered. Additionally, to the extent manual processes are involved in the handling of sensitive information, such sensitive information could be inadvertently misdirected despite our training and quality assurance precautions. While we have taken steps to protect the sensitive and confidential information that we have access to and have implemented multiple overlapping controls to reduce risk of a single control failure, our security measures or