Item 4. Controls and Procedures

(a) Evaluation of Disclosure Controls and Procedures. Our management, with the participation of our Chief Executive Officer and our Chief Financial Officer, conducted an evaluation, pursuant to Rule 13a-15 promulgated under the Securities Exchange Act of 1934, as amended (the "Exchange Act"), of the effectiveness of our "disclosure controls and procedures" as of the end of the period covered by this quarterly report. Based on this evaluation, the Chief Executive Officer and Chief Financial Officer concluded that the disclosure controls and procedures were effective as of the end of the period covered by this quarterly report.

(b) Changes in Internal Control over Financial Reporting. There were no changes in our internal control over financial reporting identified in connection with the evaluation required by Rules 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the three months ended September 30, 2025 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

(c) Limitations on the Effectiveness of Controls. Our management, including our Chief Executive Officer and Chief Financial Officer, believes that our disclosure controls and procedures and internal control over financial reporting are designed and operated to be effective at the reasonable assurance level. However, our management does not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, have been detected. These inherent limitations include the realities that judgments in decision making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by management override of the controls. The design of any system of controls is also based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.

Table of Contents

PART II - OTHER INFORMATION

On March 20, 2024, the Company received a subpoena from the U.S. Attorney’s Office for the Northern District of California. On April 30, 2024, the Company received a subpoena from the Securities and Exchange Commission. The Company is cooperating fully with both government agencies.

On May 2, 2024, a putative stockholder class action was filed against the Company and certain of our officers in the United States District Court for the Northern District of California. The named plaintiff alleges violations of Section 10(b) of the Exchange Act and Securities and Exchange Commission Rule 10b-5, and Section 20(a) of the Exchange Act, on the basis that the defendants allegedly made false and misleading statements about our business, results, internal controls, and accounting practices between May 3, 2019 and March 24, 2024. The lawsuit seeks, among other relief, a determination that the alleged claims may be asserted on a class-wide basis, unspecified damages, attorneys' fees, other expenses and costs. We filed a motion to dismiss the lawsuit on October 10, 2024. The motion was granted in part on January 6, 2025. On July 15, 2025, the parties entered a Stipulation of Settlement to resolve the action. The Court granted preliminary approval of the settlement on September 4, 2025. The settlement remains subject to final court approval, to be addressed at a hearing on December 18, 2025. We expect the amount paid in settlement to be fully covered by our insurance.

On February 14, 2025, and February 26, 2025, respectively, certain of the Company’s current and former directors and officers were named as defendants in two shareholder derivative lawsuits (in which the Company is a nominal defendant) filed in the United States District Court for the Northern District of California. The lawsuits alleged, among other things, violations of Section 14(a) of the Exchange Act, breach of fiduciary duty, unjust enrichment, and waste of corporate assets and generally alleged the same purported misconduct as alleged in the putative stockholder class action described above. The lawsuits sought, among other relief, unspecified damages, restitution, attorneys’ fees, and other expenses and costs. On April 17, 2025, and April 18, 2025, respectively, the plaintiffs filed notices of voluntary dismissal without prejudice, subject to court approval, to pursue remedies under Delaware law. The cases were dismissed on April 28, 2025 and August 19, 2025, respectively.

On August 6, 2025, certain of the Company's current and former directors and officers were named as defendants in an additional shareholder derivative lawsuit (in which the Company is a nominal defendant) filed in the United States District Court for the District of Delaware. The lawsuit makes generally the same types of allegations and seeks the same types of relief as the derivative lawsuits above, and makes additional allegations that certain directors' and officers' alleged knowledge of the purported misconduct constituted insider trading. We filed a motion to dismiss the lawsuit on October 20, 2025.

These matters are subject to uncertainties and we cannot predict the outcome nor reasonably estimate a range of loss or penalties, if any, relating to these matters prior to resolution.