Risk Factors Update Summary

• Material weaknesses in internal control over financial reporting identified, with a significant adverse effect.
• Accumulated deficits increased from $147.3 million in 2022 to $248.1 million in 2023.
• Added mention of "cyber incident" as a risk factor, highlighting potential reputational damage.
• Highlighted the impact of changes in energy and EHS regulations on the business, emphasizing potential costs.
• Full-time employees increased from 170 in 2022 to 179 in 2023. Part-time employees decreased from 7 to 4.
• Not having a meaningful history of operation for complex software systems could harm financial results.
• Added emphasis on privacy, information security, and data protection laws, highlighting potential liabilities.
• Increased focus on licensing, permitting, and operational requirements, stressing compliance costs and risks.
• Increased focus on environmental, health, and safety (EHS) issues, emphasizing potential liabilities.
• Mentioned potential adverse effects of noncompliance with EHS laws on business continuity and brand.