SEC Filing Document

Company: ERock, Inc.
Ticker: 
CIK: 2110029
Filing Type: DRS/A
Document Type: DRS/A
Date Filed: 2026-04-24
Accession Number: 0001193125-26-177695
Exchange: 
SIC Code: 3620
SIC Description: Electrical Industrial Apparatus
URL: https://www.sec.gov/Archives/edgar/data/2110029/000119312526177695/filename1.htm

Chunk 30 of 107
Word Count: 1482
Character Count: 10130

Document Content:

affect the intended operational efficiency and performance. Should an operational risks materialize, it may result in the personal injury to or death of workers, the loss of equipment, damage to assembly facilities, monetary losses, delays and unanticipated fluctuations in production, environmental damage, administrative fines, increased insurance costs and potential legal liabilities, all which could have a material adverse effect on our business, results of operations, cash flows, financial condition or prospects. Furthermore, in recent periods, our internal operations have grown in complexity. We may in the future continue to grow our operations, both in terms of complexity and headcount. Any continued growth could increase our operational costs and failure to manage such growth could lead to additional costs in the future. Incorrect estimates or assumptions by management in connection with the preparation of our consolidated financial statements could materially and adversely affect our reported assets, liabilities, income, revenue or expenses.

The preparation of
our consolidated financial statements requires management to make critical accounting estimates and assumptions that affect the reported amounts of assets, liabilities, income, revenues or expenses during the reporting periods. Incorrect estimates
and assumptions by management could adversely affect our reported amounts of assets, liabilities, income, revenues and expenses during the reporting periods. If we make incorrect assumptions or estimates, our reported financial results may be over-
or understated, which could materially and adversely affect our business, financial condition and results of operations.

Any
capital preservation investments that we may invest in will be subject to market, interest and credit risk that may reduce its value.

In the future, we may invest in a variety of capital preservation investments, which may consist of debt securities, including,
but not limited to, money market funds, U.S. Treasuries or U.S. government securities. We currently do not use derivative financial instruments to adjust our investment portfolio risk or income profile. These investments, as well as any cash
deposited in bank accounts, are subject to general credit, liquidity, market and interest rate risks. If the global credit market experiences volatility or deteriorates, our investment portfolio may be impacted and some or all of our investments may
experience other-than-temporary impairment, which could materially and adversely affect our financial condition and results of operations.

Risks
Related to Our Operations

Operational disruptions in our areas of operation from weather, natural disasters, terrorism or other
similar causes could impact our business, financial condition and results of operations.

We operate in several
regions across the United States, each of which may be adversely affected by seasonal weather conditions and natural or man-made disasters. Natural disasters (such as earthquakes, tornadoes,

Table of Contents

hurricanes, wildfires or floods), periods of extreme weather conditions or temperatures, or acts of terrorism could damage or destroy our or our customers’ infrastructure in our areas of
operations or result in a disruption of our or their operations. During periods of heavy rain or extreme weather conditions, such as tornadoes, or after other disruptive events such as earthquakes, wildfires or floods, our or our customers’
infrastructure and assets may be damaged. Such disruptions could have a material adverse effect on our financial condition and results of operations. Public health emergencies could have a similar effect of disrupting ours or our customers’
businesses to the extent they impact the demand for natural gas, our areas of operation, the availability of supplies required by our customers, or the employees or other personnel who operate our or our customers’ businesses.

We may be subject to disruptions or failures in information technology systems and network infrastructures that could have a material
adverse effect on our business, financial condition and results of operations.

We rely on the efficient and
uninterrupted operation of complex information technology systems and network infrastructures to operate our business. In addition, our cloud-based monitoring service, Granite, which we use to track and monitor the performance of our power systems,
is dependent on cloud-based hosting services, along with the availability of internet or cellular data services at end-user premises. Despite testing by us, real or perceived errors, failures or bugs in our
power system infrastructure, software or technology, or the technology or software we license from third parties, including open source software, may not be found until our customers use our power systems. Real or perceived errors, failures or bugs
in our power systems could result in negative publicity, loss of or delay in market acceptance of our power systems, harm to our reputation, weakening of our competitive position or claims by customers for losses sustained by them. Disruption,
unauthorized access or failure of our information technology systems, third-party cloud hosting platforms or end-user data services as a result of software or hardware malfunctions, system implementations or
upgrades, computer viruses, cyber-attacks, third-party security breaches, employee/human error, theft or misuse, malfeasance, power disruptions, natural disasters or accidents could disrupt or damage the operations of power systems or render such
power systems inoperable or cause breaches of data security, failure of our service, including our O&M and asset management services, loss of intellectual property and critical data and the release and misappropriation of sensitive competitive
information and partner, customer and employee personal data. We have been and may in the future be subject to fraud attempts from outside parties through our electronic systems (such as “phishing”
e-mail communications to our finance, technical or other personnel), which could put us at risk for harm from fraud, theft or other loss if our internal controls do not operate as intended. Any such future
events could further harm our competitive position, result in a loss of customer confidence, cause us to incur significant costs to remedy any damages and ultimately materially adversely affect our business, financial condition and results of
operations.

Data security breaches and cyberattacks could compromise our intellectual property or other confidential information
and cause significant damage to our business, power systems performance and reputation.

We maintain information
that is confidential, proprietary or otherwise sensitive in nature on our information technology systems, and on the systems of our third-party providers. This information includes intellectual property, financial information and other confidential
information related to us and our employees, prospects, customers, suppliers and other business partners. Additionally, our information technology provides us with the ability to remotely control some variables of our power systems; they are
connected to, controlled and monitored by our centralized remote monitoring service. We rely on our internal software applications for many of the functions we use to operate our business generally. Cyberattacks are increasing in frequency and
evolving in nature. We and our third-party providers are at risk of attack through the use of increasingly sophisticated methods, including malware, phishing and the deployment of artificial intelligence to find and exploit vulnerabilities.

Our information technology systems, and those maintained by our third-party providers, have been in the past, and may be in
the future, subjected to attempts to gain unauthorized access, disable, destroy, maliciously control or cause other system disruptions. In some cases, it is difficult to anticipate or to detect immediately such incidents and the damage they caused.
While these types of incidents have not had a material effect on our business to date, future incidents involving access to our network or improper use of our systems, or those of our

Table of Contents

third parties, could compromise confidential, proprietary or otherwise sensitive information, as well as the operation of our power systems.

There is no assurance that any measures we may take to combat known and unknown cybersecurity risks will be sufficient to
prevent security breaches and cyberattacks. The security of our infrastructure, including the network that connects our power systems to our remote monitoring service, may be vulnerable to breaches, unauthorized access, misuse, computer viruses or
other malicious code and cyberattacks that could have a material adverse impact on our business and our power systems in the field, and the protective measures we have taken may be insufficient to prevent such events. A breach or failure of our
networks or computer or data management systems due to intentional actions such as cyberattacks, including ransomware attacks, phishing or denial-of-service attacks,
negligence or other reasons, whether as a result of actions by third-parties or our employees, could seriously disrupt our operations or could affect our ability to control or to assess the performance in the field of our power systems and could
result in disruption to our business and legal liability.

In addition, security breaches and cyberattacks could
negatively impact our reputation and our competitive position and could result in litigation with third parties, regulatory action and increased remediation costs, any of which could materially and adversely impact our business, our financial
condition, and our results of operations. Although we maintain insurance coverage that may cover certain liabilities in connection with some security breaches and cyberattacks, we cannot be certain it will be adequate for liabilities actually
incurred or that any insurer will not deny coverage of future claims.