Company: BIAF
Filing Date: 2025-06-27
Form Type: POS AM
Source: 0001641172-25-016923
Chunk: 27

Company: bioAffinity Technologies, Inc.
Filing Date: 2025-06-27
Form: POS AM
Chunk 27
---
 so in a secure manner to maintain the confidentiality and integrity of such confidential information. We have also outsourced elements of our operations to third parties, and as a result we manage a number of third-party contractors who have access to our confidential information.

Despite the implementation of security measures, given their size and complexity and the increasing amounts of confidential information that they maintain, our internal information technology systems and those of our third-party clinical research organizations and other contractors and consultants are potentially vulnerable to breakdown or other damage or interruption from service interruptions, system malfunction, natural disasters, terrorism, war, and telecommunication and electrical failures, as well as security breaches from inadvertent or intentional actions by our employees, contractors, consultants, business partners, and/or other third parties, or from cyberattacks by malicious third parties (including the deployment of harmful malware, ransomware, extortion, account takeover attacks, degradation of service attacks, denial-of-service attacks, “phishing,” or social engineering and other means to affect service reliability and threaten the confidentiality, integrity, and availability of information), which may compromise our system infrastructure or lead to data leakage. We have technology security initiatives and disaster recovery plans in place to mitigate our risk to these vulnerabilities, but these measures may not be adequately designed or implemented to ensure that our operations are not disrupted or that data security breaches do not occur. To the extent that any disruption or security breach were to result in a loss of or damage to our data or applications, or inappropriate disclosure of confidential or proprietary information, we could incur liability and reputational damage.

Hackers and data thieves are increasingly sophisticated and operate large-scale and complex automated attacks which may remain undetected until after they occur. We cannot assure you that our data protection efforts and our investment in information technology will prevent significant breakdowns, data leakages, breaches in our systems, or other cyber incidents that could have a material adverse effect upon our reputation, business, operations, or financial condition. For example, if such an event were to occur and cause interruptions in our operations, it could result in a material disruption of our programs, and the development of our diagnostic tests and therapeutic product candidates could be delayed. In addition, the loss of clinical trial data for our diagnostic tests and therapeutic product candidates could result in delays in our marketing approval efforts and significantly increase our costs to recover or reproduce the data. Furthermore, significant disruptions of our internal information technology systems or security breaches could result in the loss, misappropriation, and/or unauthorized access, use, or disclosure of, or the prevention of access to