authID Inc.: Form 10-K for the period ended Dec 31, 2023

Overview

authID Inc. (together with its subsidiaries, the “Company”, “authID”, “we” or “our”) ensures cyber-savvy enterprises “Know Who’s Behind the Device”TM for every customer or employee login and transaction. Through its easy-to-integrate, patented, biometric identity platform, authID quickly and accurately verifies a user’s identity, eliminating any assumption of ‘who’ is behind a device and preventing cybercriminals from taking over accounts. authID combines digital onboarding, biometric passwordless authentication and account recovery, with a fast, accurate, user-friendly experience – delivering identity verification in 700ms. Establishing a biometric root of trust for each user that is bound to their accounts, or provisioned devices, authID stops fraud at onboarding, eliminates password risks and costs, and provides the faster, frictionless, and more accurate user identity experience demanded by operators of today’s digital ecosystems.

Our Platform

Our VerifiedTM cloud-based platform was developed with internally developed software as well as acquired and licensed technology and provides the following core services:

• Biometric Identity Verification
• Biometric Identity Authentication
• Account / Access Recovery
• FIDO Passkey binding

Biometric Identity Verification

Biometric identity verification establishes the trusted identity of a user based on a variety of ground truth sources, including government-issued identity documents such as national IDs, driver’s licenses and passports or electronic machine-readable travel documents (or eMRTDs). Our VerifiedTM platform detects presentation attack and spoofing threats, evaluates the authenticity of security features present on a government-issued identity document, and biometrically matches the reference picture of the document with a live user’s selfie (a photograph that the user has taken of themselves). Usually occurring at account opening or onboarding, identity verification ensures that the enterprise knows that the person interacting with the enterprise is who they say they are, in real time. authID’s ProofTM identity verification product eliminates the need for costly and less accurate face-to-face, in-person ID checks and instead provides a verified identity in seconds. In a digital, online world of increasing fraud and security threats, Proof speeds up onboarding and offers our customers confidence in the identities of consumers, employees or third-party vendors.

Biometric Identity Authentication

Biometric identity authentication provides any organization with a secure, convenient solution to validate that an individual is the verified account owner for various purposes including passwordless login and performing specific transactions, or functions. The authID Verified product allows users to confirm their identity with their facial biometric by simply taking a selfie on a mobile phone or device of their choosing (as opposed to dedicated hardware). The solution includes a patented audit trail created for each transaction, containing the digitally signed transaction details, with proof of identity authentication and consent.

Account Access and Recovery

authID’s Verified biometric identity authentication solution allows users to recover, via a facial biometric, account access that is lost or blocked due to expired credentials, lockouts, lost or stolen devices, or compromised accounts. Because the account owner’s root of trust is established in the cloud, recovery is independent of any device or hardware. In this way, account recovery is instant, portable, and does not require the presence of or access to a previously provisioned device in order to secure access from a different device.

FIDO Passkey Binding

FIDO Passkey Binding enables enterprises and their users to bind biometrically verified user identities to FIDO2 passkeys, enabling strong authentication for device-based passwordless login and transaction authentication that is tied to a trusted identity. This solution establishes a digital chain of trust between biometrically verified individuals, their accounts, and their devices, thus eliminating passwords and protecting users and systems against fraud attacks.

Key Customer Benefits

Our solution allows our enterprise customers to:

• Verify and Authenticate users. Customers can use the authID platform not only to verify the identity of new users, but also to authenticate those users seamlessly on an ongoing basis to enable quick, secure logins and transaction authentications.
• Benefit from high-speed processing. Our solution returns a very low-latency response, key to enabling high-volume use cases (such as logins and high-value transactions) and providing a frictionless user experience.
• Precisely and accurately identify their consumers and employees, giving the enterprise complete confidence in who is accessing their digital assets.
• Provide a seamless user experience in terms of speed and self-guided flow, so that even users who are not tech-savvy are easily able to complete the identity verification and authentication processes.
• Support a wide variety of devices. Our cloud-based service is device agnostic and may be used to verify or authenticate users on any device with a camera, including shared devices, digital kiosks, etc.
• Integrate quickly and easily. We offer pre-integrated OIDC connections as well as integrations with several leading Identity and Access Management solutions.
• Offer broad identity document coverage. We can verify identities using a wide spectrum of government-issued documents from around the world.

Discontinued Operations

On May 4, 2022, the Board of Directors of authID (the “Board” or the “Board of Directors”) approved a plan to exit from certain non-core activities comprising the MultiPay correspondent bank payments services in Colombia and the Cards Plus cards manufacturing and printing business in South Africa (“Cards Plus business”). On August 29, 2022 the Company executed and completed the sale of the Cards Plus business. On June 30, 2023, the Company completed the sale of its legacy payments software by MultiPay. As of December 31, 2022, MultiPay S.A.S., and IDGS S.A.S assets are presented as assets held for sale on the Company’s Consolidated Balance Sheets and their operations together with those of Cards Plus Pty Ltd., presented as discontinued operations in the Consolidated Statements of Operations during the years ended December 31, 2023 and 2022, as they met the criteria for discontinued operations under applicable accounting guidance.

Corporate Information

The Company was incorporated in the State of Delaware on September 21, 2011, and changed our name from Ipsidy Inc. to authID Inc. on July 18, 2022. Our corporate headquarters is located at 1580 North Logan Street, Suite 660, Unit 51767, Denver, CO 80203 and our main phone number is (516) 274-8700. Our website address is www.authid.ai (http://www.authid.ai). The information contained on, or that can be accessed through, our website is not incorporated by reference into this Form 10-K and you should not consider information on our website to be part of this Form 10-K.

Global Market Opportunity

The momentum towards a digital economy in recent years, accompanied by a massive growth in cyberattacks, fraud, and account takeovers are driving the demand for more streamlined and more secure identity verification and authentication. The World Economic Forum estimates digitally enabled platform business models will drive 70% of new economic value created over the next ten years. Yet vast amounts of data have been compromised, and ransomware attacks have cost businesses hundreds of millions in remediation costs, lost revenue and brand equity. MGM Resorts estimated that the cyber-attack reported in September 2023, cost them over $100 million alone. Passwords and device authentication alone no longer provide the security needed to fight today’s rampant cyber-attacks and account takeover schemes.

According to Statista, approximately 480,000 incidents of cyberattacks were reported in the United States in 2022, nearly a 100% increase since 2016. In the 2023 Verizon Data Breach Investigation Report, 83% of 4,000 data breaches studied involved external actors, while 74% of all breaches were attributed to some form of social engineering, stolen credentials, or human error. Verizon also found that Business Email Compromise (BEC) attacks now represent more than 50% of social engineering incidents, having almost doubled in recent years. Further it is predicted that Artificial Intelligence (AI) will almost certainly increase the volume and heighten the impact of cyberattacks over the next two years (NCSC Assessment, Jan 1, 2024).

Financial services, ecommerce, the sharing economy, and healthcare businesses, among other industry verticals, are confronted by the challenges of identifying their customers, patients and beneficiaries with ease and certainty in the digital world. Organizations across all sectors need to control access to their data and applications by their employees. Governments around the world are enacting new data privacy regulations and pushing for stronger authentication methods in commerce, which impose a “call to action” for many of these entities.

These factors have created a hyper-growth market for the identity verification and authentication industry as well as increased buyer demand for integrated identity platforms that can provide a range of identity solutions to address the full authentication lifecycle of the user journey. The demand for Integrated Identity Platforms is estimated to reach a market size of $48 billion in 2023, increasing at a 24.6% CAGR to reach almost $116 billion by 2027 (Forbes Tech Council, June 6, 2023).

Growth Strategy

We orient our business strategy and invest for future growth by focusing on the following key priorities:

• Drive new customer growth. We intend to continue to build our customer base with a focus on key markets and verticals with the strongest need for high-assurance identity verification and authentication, including highly regulated sectors and organizations with high-risk transactions. This entails targeting less complex, less resource-intensive opportunities, as well as larger, higher revenue-generating brands. We concentrate on enhancing, or complementing legacy platforms as a top-of-funnel, high-assurance provider where appropriate.
• Accelerate onboarding and usage within our customer base. As we continue to acquire meaningful contracts, we intend to invest in bringing customers live on our platform quickly, ensuring that they realize the benefits of our platform and ramp up their usage, while speeding up time to revenue.
• Strategically develop our partner network. There are major cybersecurity and identity organizations with which we can partner to expand our customer reach quickly and efficiently. We are identifying and pursuing strategic reseller and similar partner opportunities to complement our direct sales team.
• Innovate and advance our platform. We intend to continue to invest in research and development and hiring top technical talent to meet the identity proofing and authentication needs of our existing and prospective customers, as well as support new use cases, diversify our product offerings, and continually improve our key differentiators of speed, accuracy, and user experience.
• Select Acquisitions. As we have done in the past, we intend to selectively pursue acquisitions that will help us achieve our strategic goals, enhance our technology capabilities and accelerate growth. We believe pursuing these types of acquisitions will increase our ability to work with existing customers, add new customers, enter new markets, develop new services and enhance our processing platform capabilities. However, we have no commitments with respect to any such acquisitions at this time.

Sales and Marketing

authID provides its Verified platform based on a subscription and usage-based model, with fees per transaction, enrolled or active users.

We sell our platform primarily through our direct sales team, which consists of inside sales and field sales professionals based in the United States. To power our efforts, we have built a team of subject matter experts in the identity space, and applied a regimented sales execution strategy, allowing us to win against competitors with comparable products but a sub-optimal approach to the market. In the last six months of 2023, our new leadership team significantly expanded our sales force and technical sales support. We also use a premier lead generation service and digital marketing in order to carefully target potential customers and provide qualified leads for our sales representatives to develop.

We also work with channel partners, such as banking infrastructure or cybersecurity providers who provide our services to their customers through reseller arrangements and allow us to broaden our customer reach.

Competition

The market for our service offerings is highly competitive and rapidly evolving. We face competition from a broad range of providers with solutions across the identity management lifecycle, including:

• Vendors providing identity verification or proofing through both biometric and non-biometric solutions (such as data-based verification using identity proxies, such as DMV records and addresses), both on-premise and cloud-based.
• Vendors of passwordless identity authentication using device-based and cloud-based biometrics.
• Larger companies providing identity and access management platforms, adding identity authentication services to their offering at low/no cost.
• New entrants seeking to develop and market competing technologies.

It is also possible that, as the digital identity market continues to grow and evolve, larger companies with significant resources may increase their presence in the market and develop competing solutions through internal efforts or partnerships with existing players.

Due to our ability to serve both identity verification and authentication needs, as well as the tendency for enterprises to acquire multiple digital identity solutions, we can and often do co-exist with competing products within our customer base.

Research and Development

Our research and development team is responsible for the design, development, testing and quality of our platform as well as any new technologies, features, integrations and improvements. The team includes specialists in software engineering, user experience, quality assurance, product management, infrastructure, and technical writing. Our employees are located primarily in the United States, with additional sub-contractors based in Europe, India and the Caribbean. We intend to continue to invest in our technology to strengthen and expand our platform to stay ahead of our competition and meet the evolving needs of our current and prospective customers.

Intellectual Property

We rely on a combination of patents, trademarks, copyrights, trade secrets and contractual provisions to protect our proprietary technology. For example, we enter into confidentiality and invention assignment agreements with our employees, consultants and other third parties, and control access to software, services, documentation and other proprietary information. We believe the duration of our patents is adequate relative to the expected lives of our service offerings. We also purchase or license technology that we incorporate into our products or services. While it may be necessary in the future to seek or renew licenses relating to various aspects of our products, we believe, based upon past experience and industry practice, such licenses generally could be obtained on commercially reasonable terms.

Governmental Regulations

Due to the security applications and biometric technology associated with the Company’s products and platforms, the activities and operations of the Company are subject to license restrictions and other regulations, such as (without limitation) export controls and other security regulation by government agencies. Expansion of the Company’s activities in areas such as financial services may require government licensing in different jurisdictions and may subject it to additional regulation and oversight.

Data protection legislation in various countries in which the Company does business may require it to register its databases with governmental authorities in those countries and to comply with additional disclosure and consent requirements with regard to the collection, storage and use of personal information of individuals resident in those countries. Several US states have adopted or are considering adopting a Biometric Information Privacy Act, or BIPA modelled on the Illinois statute, which governs the collection, processing, storage and distribution of biometric information such as facial biometric templates and fingerprints. Several of these new statutes give individuals rights of action to sue violators, which have resulted in several class action lawsuits. These regulations could have a significant impact on our business.

Human Capital

As of December 31, 2023, the Company had a total of approximately 22 employees who are located in the United States and Colombia as well as outsourced service providers. There are 17 employees in the United States who provide overall Company strategic, business and technological leadership. Employees in the U.S. receive health benefits on a cost-sharing basis and employees in Colombia are provided the respective Government required benefits.

Subsidiaries

Currently, the Company has four U.S. subsidiaries: Innovation in Motion Inc., Fin Holdings, Inc., ID Solutions Inc. and authID Gaming Inc. The Company has one subsidiary in Colombia: MultiPay S.A.S. The Company has one subsidiary in the United Kingdom: Ipsidy Enterprises Limited. The Company is the sole shareholder of all its subsidiaries.

Available Information

Our Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and any amendment to these reports are filed with the SEC. Such reports and other information filed by us with the SEC are available free of charge on our website at investors.authid.ai as soon as reasonably practicable after we electronically file such material with, or furnish it to, the SEC. The SEC maintains an internet site that contains reports, proxy and information statements and other information regarding issuers that file electronically with the SEC at www.sec.gov (http://www.sec.gov). The information contained on the websites referenced in this Form 10-K is not incorporated by reference into this filing.

Recent Developments

On February 15, 2024, Mr. Joe Trelin tendered his resignation as Chairman and a Director of the Company, effective immediately. On February 20, 2024, the board of directors of the Company (the “Board”) accepted his resignation and agreed to vest the unvested portion of an option granted to Mr. Trelin June 28, 2023, amounting to 6,511 shares. The Company is currently in discussions with one or more candidates to be appointed as an additional Independent Director, but no agreement has been reached regarding such appointment at this time. On February 20, 2024, the Board appointed Michael Thompson to the Audit Committee in compliance with Rule 5605(c)(2)(A) of the Nasdaq Rules. See “Subsequent Events” for further information.

Summary of Risk Factors The following summarizes the principal factors that make an investment in our company speculative or risky, all of which are more fully described in the Risk Factors section below. This summary should be read in conjunction with the Risk Factors section and should not be relied upon as an exhaustive summary of the material risks facing our business. The following factors could result in harm to our business, reputation, revenue, financial results, and prospects, among other impacts:

• We have a history of losses and we may not be able to achieve profitability going forward.
• We have yet to achieve positive cash flow and, given our projected funding needs, our ability to generate positive cash flow is uncertain.
• Our limited operating history makes it difficult for us to evaluate our future business prospects and make decisions based on those estimates of our future performance.
• There can be no assurance that we will successfully commercialize our products that are currently in development or that our existing products will sustain market acceptance.
• We depend upon key personnel and need additional personnel.
• Acquisitions present many risks that could have a material adverse effect on our business and results of operations.
• The market for our products is characterized by changing technology, requirements, standards and products, and we may be adversely affected if we do not respond promptly and effectively to these changes.
• If our technology and solutions are not adopted and used by customer organizations, we will not be able to grow our business and our operations will be negatively affected.
• We have in the past entered into and may seek in the future to enter into contracts with governments, as well as state and local governmental agencies and municipalities, which subjects us to certain risks associated with such types of contracts.
• We may have to seek business through a competitive bidding process.
• We rely in part on third-party software to develop and provide our solutions.
• We have historically depended upon a small number of large system sales ranging up to $1,500,000 and we may fail to achieve one or more large sales in the future, or fail to successfully transition to new products generating recurring revenues.
• Our efforts to expand our international operations are subject to a number of risks, any of which could adversely reduce our future international sales and increase our losses.
• We are exposed to risks in operating in foreign markets, which may make operating in those markets difficult and thereby force us to curtail our business operations.
• Cyber-attacks, breaches of network or information technology security, presentation attacks, natural disasters, pandemics, or terrorist attacks could have an adverse effect on our business.
• The War in Ukraine and the Middle East may impact the business of the Company, the markets in which it operates and the financial markets, in which the Company needs to raise capital.
• Interruptions, delays in service or defects in our systems could impair the delivery of our services and harm our business.
• Third parties could obtain access to our proprietary information or could independently develop similar technologies.
• Third parties may assert that we are infringing their intellectual property rights; IP litigation could require us to incur substantial costs even when our efforts are successful.
• Our officers, directors and holders of 5% of outstanding shares together beneficially own a significant portion of our Common Stock and, as a result, can exercise control over stockholder and corporate actions.
• We face competition. Some of our competitors have greater financial or other resources, longer operating histories and greater name recognition than we do and one or more of these competitors could use their greater resources and/or name recognition to gain market share at our expense or could make it very difficult for us to establish market share.
• Government regulation could negatively impact the business.
• Our business is subject to changing regulations regarding corporate governance, disclosure controls, internal control over financial reporting and other compliance areas that will increase both our costs and the risk of noncompliance. If we fail to comply with these regulations, we could face difficulties in preparing and filing timely and accurate financial reports.
• Our amended and restated bylaws designate certain courts as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees.
• We are an “emerging growth company” and we cannot be certain if the reduced disclosure requirements applicable to “emerging growth companies” will make our Common Stock less attractive to investors.
• There can be no assurance that we will be able to comply with the continued listing standards of the Nasdaq Capital Market. Our failure to meet the continued listing requirements of the Nasdaq Capital Market could result in a de-listing of our Common Stock.
• Sales of a substantial number of shares of our Common Stock in the public market by our existing stockholders could cause our share price to fall.
• We may be subject to securities litigation, which is expensive and could divert management attention.
• If securities or industry analysts do not publish or cease publishing research or reports about us, our business or our market, or if they adversely change their recommendations or publish negative reports regarding our business or our Common Stock, our stock price and trading volume could decline.
• The market price of our common stock has been volatile and your investment in our stock could suffer a decline in value.
• We do not anticipate paying any cash dividends in the foreseeable future.

We have a history of losses and we may not be able to achieve profitability going forward.

We have an accumulated deficit of approximately $159.5 million as of December 31, 2023 and incurred an operating loss of approximately $19.4 million for the year ended December 31, 2023. We have had net losses in most of our quarters since our inception. We expect that we will continue to incur net losses in 2024. We may incur losses in the future for a number of reasons, including the other risks described in this report, and we may encounter unforeseen expenses, difficulties, complications, delays and other unknown events. Accordingly, we may not be able to achieve or maintain profitability. Our management is developing plans and executing certain programs to alleviate the negative trends and conditions described above, however there is no guarantee that such plans will be successfully implemented. Our ability to curtail our operating losses or generate a profit may be further impacted by the fact that our business plan is largely unproven. There is no assurance that even if we successfully implement our business plan, that we will be able to curtail our losses. If we incur significant additional operating losses, our stock price may decline, perhaps significantly and the Company will need to raise substantial additional capital in order to be able to continue to operate, which will dilute the existing stockholders and such dilution may be significant. Additional capital may not be available on terms acceptable to the Company, or at all.

We have yet to achieve positive cash flow and, given our projected funding needs, our ability to generate positive cash flow is uncertain.

We have had negative cash flow from operating activities of approximately $8.4 million and approximately $12.8 million for the years ended December 31, 2023 and 2022, respectively. We anticipate that we will continue to have negative cash flows from operating activities through March 31, 2025 as we expect to incur increased research and development, sales and marketing, and general and administrative expenses. Our business will require significant amounts of working capital to support our growth, particularly as we seek to introduce our new offered products. An inability to generate positive cash flow from operations may adversely affect our ability to raise needed capital for our business on reasonable terms, if at all. It may also diminish supplier or customer willingness to enter into transactions with us, and have other adverse effects that may impact our long-term viability. There can be no assurance we will achieve positive cash flows in the foreseeable future.

We need access to additional financing, which may not be available to us on acceptable terms, or at all. If we cannot access additional financing when we need it and on acceptable terms, our business, prospects, financial condition, operating results and ability to continue as a going concern will be adversely affected. As a result of these factors, there is substantial doubt about the Company’s ability to continue as a going concern.

Our growth-oriented business plan to offer products to our customers will require continued capital investment. Our research and development activities will also require continued investment. We raised approximately $15.4 million and $9.6 million net proceeds after expenses in 2023 and 2022, respectively, through equity and debt financing at varying terms.

Our limited operating history makes it difficult for us to evaluate our future business prospects and make decisions based on those estimates of our future performance.

We have a limited operating history and have generated limited revenue. As we look to further expand our existing products it is difficult, if not impossible, to forecast our future results based upon our historical data. Because of the uncertainties related to our lack of historical operations, we may be hindered in our ability to anticipate and timely adapt to increases or decreases in revenues or expenses. If we make poor budgetary decisions as a result of unreliable historical data, we could be less profitable or incur additional losses, which may result in a decline in our stock price.

There can be no assurance that we will successfully commercialize our products that are currently in development or that our existing products will sustain market acceptance.

There is no assurance that we will ever successfully commercialize our platform and related solutions or that we will experience market reception for our products in development or increased market reception for our existing products. There is no guarantee that we will be able to successfully implement our new products utilizing the acquired and internally developed technology, products, and customer base. There is no assurance that our existing products or solutions will achieve market acceptance or that our new products or solutions will achieve market acceptance. Further, there can be no guarantee that we will not lose business to our existing or potential new competitors.

We depend upon key personnel and need additional personnel.

On March 23, 2023, Rhon Daguro was appointed as our Chief Executive Officer. Our success depends on the continued services of Mr. Daguro and of certain other members of the current management team. Our executive team is incentivized by stock compensation grants that align the interests of investors with the executive team and certain executives have employment retention agreements. The loss of key management, engineering employees or third- party contractors could have a material and adverse effect on our business operations. Additionally, the success of our operations will largely depend upon our ability to successfully attract and maintain competent and qualified key management personnel. As with any company with limited resources, there can be no guarantee that we will be able to attract such individuals or that the presence of such individuals will necessarily translate into profitability for our company. If we are successful in attracting and retaining such individuals, it is likely that our payroll costs and related expenses will increase significantly and that there will be additional dilution to existing stockholders as a result of equity incentives that may need to be issued to such management personnel. Our inability to attract and retain key personnel may materially and adversely affect our business operations. Any failure by our management to effectively anticipate, implement, and manage personnel required to sustain our growth would have a material adverse effect on our business, financial condition, and results of operations.

Acquisitions present many risks that could have a material adverse effect on our business and results of operations.

In the past we have closed acquisitions of various companies. We may also pursue select acquisitions in the future. The success of our future growth strategy will depend on our ability to integrate our existing operations, together with any future acquisition of which none are planned at this date. Integrating the operations of our existing business with any future acquisitions, including anticipated cost savings and additional revenue opportunities, involves a number of challenges. The failure to meet these integration challenges could seriously harm our results of operations and the market price of our shares may decline as a result. Realizing the benefits of any future acquisition will depend in part on the integration of intellectual property, products, operations, personnel and sales force and the completion of assignments of current and past contracts and rights. These integration activities are complex and time-consuming, and we may encounter unexpected difficulties or incur unexpected costs. We may not successfully integrate our existing and acquired operations, and may not realize the anticipated net reductions in costs and expenses and other benefits and synergies of the acquisition to the extent, or in the timeframe, anticipated. In addition to the integration risks, we could face numerous other risks, including, but not limited to, the following:

• diversion of our management’s attention from normal daily operations of our business;
• our inability to maintain the key business relationships and the reputations of the businesses we acquire;
• dilution to stockholders resulting from any acquisitions, which are paid for with Company securities;
• increased costs related to acquired operations and continuing support and development of acquired products;
• our responsibility for the liabilities of the businesses we acquire;
• changes in how we are required to account for our acquisitions under accounting principles generally accepted in U.S.;
• our inability to apply and maintain our internal standards, controls, procedures and policies to acquired businesses; and
• potential loss of key employees of the companies we acquire.

The occurrence of any of these risks could have a material adverse effect on our business, results of operations, financial condition or cash flows, particularly in the case of a larger acquisition, or concurrent acquisitions.

The market for our products is characterized by changing technology, requirements, standards and products, and we may be adversely affected if we do not respond promptly and effectively to these changes.

The market for our verified products is characterized by evolving technologies, changing industry standards, changing political and regulatory environments, frequent new product introductions and rapid changes in customer requirements. The introduction of products embodying new technologies and the emergence of new industry standards and practices can render existing products obsolete and unmarketable. In addition cyber attack attempts are increasing in number, magnitude, and technical sophistication, and we expect emerging technologies to contribute to the increasing sophistication of attacks and to lead to new threats. For example, threat actors may leverage emerging artificial intelligence (or, AI) technologies to develop new hacking tools and attack vectors, generate deep fake images, exploit vulnerabilities, obscure their activities, and increase the difficulty of threat attribution. Our future success will depend on our ability to enhance our existing products and to develop, or acquire and introduce, on a timely and cost-effective basis, new products and product features that counter these new threats, keep pace with technological developments and emerging industry standards and address the increasingly sophisticated needs of our customers. In the future:

• we may not be successful in developing and marketing new products or product features that respond to new AI driven cyberattacks, technological change or evolving industry standards;
• we may experience difficulties that could delay or prevent the successful development, or acquisition, introduction and marketing of these new products and features; or
• our new products and product features may not adequately meet the requirements of the marketplace and achieve market acceptance.

If we are unable to respond promptly and effectively to new cybersecurity threats and attacks, changing technologies and market requirements, we will be unable to compete effectively in the future.

There can be no assurance that we will successfully identify new product opportunities and develop and bring new products to market in a timely manner, or that the products and technologies developed by others will not render our products or technologies obsolete or noncompetitive. The failure of our new product development efforts could have a material adverse effect on our business, results of operations and future growth.

If our technology and solutions are not adopted and used by customer organizations, we will not be able to grow our business and our operations will be negatively affected.

Our ability to grow depends significantly on whether organizations of various types and sizes adopt our technology and solutions as part of their new standards. If these organizations do not adopt our technology, we may not be able to penetrate some of the new markets we are targeting, or we may lose some of our existing customer base.

In order for us to achieve our growth objectives, our identity verification and authentication technologies and solutions must be adapted to and adopted in a variety of areas including, among others, computer and online systems access control, and identity verification for transaction authentication purposes.

We cannot accurately predict the future growth rate, if any, or the ultimate size of these markets. The growth of the market for our products and services depends on a number of factors such as the cost, performance and reliability of our products and services compared to the products and services of our competitors, customer perception of the benefits of our products and solutions, public perception of the intrusiveness of these solutions and the manner in which organizations use the information collected, customer satisfaction with our products and services and marketing efforts and publicity for our products and services. Our products and services may not adequately address market requirements and may not gain wide market acceptance. If our solutions or our products and services do not gain wide market acceptance, our business and our financial results will suffer.

We have in the past entered into and may seek in the future to enter into contracts with governments, as well as state and local governmental agencies and municipalities, which subjects us to certain risks associated with such types of contracts.

Most contracts with governments or with state or local agencies or municipalities, or Governmental Contracts, are awarded through a competitive bidding process, and some of the business that we expect to seek in the future will likely be subject to a competitive bidding process (See “We may have to seek business through a competitive bidding process” below).

We may not be afforded the opportunity in the future to bid on contracts that are held by other companies and are scheduled to expire, if the governments, or the applicable state or local agency or municipality determines to extend the existing contract. If we are unable to win new contract awards or retain those contracts, if any, that we are awarded over any extended period, our business, prospects, financial condition and results of operations will be adversely affected.

In addition, Governmental Contracts subject us to risks associated with public budgetary restrictions and uncertainties, actual contracts that are less than awarded contract amounts, the requirement for posting a performance bond and the related cost and cancellation at any time at the option of the governmental agency. Any failure to comply with the terms of any Governmental Contracts could result in substantial civil and criminal fines and penalties, as well as suspension from future contracts for a significant period of time, any of which could adversely affect our business by requiring us to pay significant fines and penalties or prevent us from earning revenues from Governmental Contracts during the suspension period. Cancellation of any one of our major Governmental Contracts could have a material adverse effect on our financial condition.

Additionally, we are subject to the U.S. Foreign Corrupt Practices Act, or the FCPA, and other laws in the United States and elsewhere that prohibit improper payments or offers of payments to United States’, or foreign governments and their officials and political parties for the purpose of obtaining or retaining business. Our activities in the United States and elsewhere create the risk of unauthorized payments or offers of payments by one of our employees, contractors or customers that could be in violation of various laws, including the FCPA, even though these parties are not always subject to our control. We have implemented safeguards to discourage these practices by our employees, consultants and customers. However, our existing safeguards and any future improvements may prove to be less than effective, and our employees, contractors or customers may engage in conduct for which we might be held responsible. Violations of the FCPA or similar laws may result in severe criminal or civil sanctions and we may be subject to other liabilities, which could adversely affect our business, financial condition and results of operations.

Governments may be in a position to obtain greater rights with respect to our intellectual property than we would grant to other entities. Governmental agencies also have the power, based on financial difficulties or investigations of their contractors, to deem contractors unsuitable for new contract awards. Because we will engage in the government contracting business, we will be subject to additional regulatory and legal compliance requirements, as well as audits, and may be subject to investigation, by governmental entities. Compliance with such additional regulatory requirements are likely to result in additional operational costs in performing such Governmental Contracts which may impact our profitability. Failure to comply with the terms of any Governmental Contract could result in substantial civil and criminal fines and penalties, as well as suspension from future contracts for a significant period of time, any of which could adversely affect our business by requiring us to pay the fines and penalties and prohibiting us from earning revenues from Governmental Contracts during the suspension period.

Furthermore, governmental programs can experience delays or cancellation of funding and suspension of appropriations has occurred, for example the partial United States government shutdown in 2018/19, which can be unpredictable; this may make it difficult to forecast our revenues on a quarter-by-quarter basis.

We may have to seek business through a competitive bidding process.

Competitive bidding, whether for contracts with governments or with private enterprises, presents a number of risks, including:

• the frequent need to compete against companies or teams of companies with more financial and marketing resources and more experience than we have in bidding on and performing major contracts;
• the substantial cost and managerial time and effort necessary to prepare bids and proposals for contracts that may not be awarded to us;
• the need to accurately estimate the resources and cost structure that will be required to service any fixed-price contract that we are awarded; and
• the expense and delay that may arise if our competitors protest or challenge new contract awards made to us pursuant to competitive bidding or subsequent contract modifications, and the risk that any of these protests or challenges could result in the resubmission of bids on modified specifications, or in termination, reduction or modification of the awarded contract.

If we are unable to win particular contracts that are awarded through the competitive bidding process, we will incur expenses associated with such competitive bidding and may not be able to operate in the market for the products and services that are provided under those contracts for a number of years.

We rely in part on third-party software to develop and provide our solutions.

We rely in part on software licensed from third parties to develop and offer some of our solutions. Any loss of the right to use any such software or other intellectual property required for the development and maintenance of our solutions, or any defects or other issues with such software could result in problems or delays in the provision of our solutions until equivalent technology is either developed by us, or, if available from others, is identified, obtained, and integrated, which could harm our business.

We have historically depended upon a small number of large system sales ranging up to $1,500,000 and we may fail to successfully transition to new products generating recurring revenues.

Historically, we have derived a substantial portion of our revenues from a small number of sales of large, relatively expensive systems, typically ranging in price up to $1,500,000. We have changed the product set of the business to eliminate system sales and have developed a new range of software as a service (SaaS) based products and solutions, which are in a lower price range and intended to generate recurring revenue from a large number of customers. We have invested heavily in developing and launching such products but there is no guarantee that such efforts will be successful and that a satisfactory return on such investment will be achieved. We are still endeavoring to enter into multi-year contracts for our new products with minimum commitments ranging in price from $50,000 to $1,800,000 and we may, or may not, be successful in achieving such sales. Accordingly, our quarterly results are difficult to predict because we cannot predict in which quarter, if any, substantial sales (whether measured in commitment volumes, or number of contracts) will occur in a given year, nor when (if at all), or at what rate the ramp in sales of new products will occur. As a result, we believe that quarter-to-quarter comparisons of our sales are not a good indication of our future performance. In some future quarters, our sales may be below the expectations of securities analysts and investors, in which case the market price of our Common Stock may decrease significantly.

Our efforts to expand our international operations are subject to a number of risks, any of which could adversely reduce our future international sales and increase our losses.

Most of our revenues historically to date are attributable to sales and business operations in jurisdictions other than the United States. Although we are now focusing our efforts in generating more United States based revenues, we continue to pursue international sales, in particular in Europe. Our international operations could be subject to a number of risks, any of which could adversely affect our future international sales and operating results, including:

• trade restrictions;
• export duties and tariffs;
• export regulations or restrictions including sanctions;
• local Data Privacy and other regulations
• uncertain political, regulatory and economic developments;
• labor and social unrest;
• inability to protect our intellectual property rights;
• highly aggressive competitors;
• currency issues, including currency exchange risk;
• difficulties in staffing, managing and supporting foreign operations;
• longer payment cycles;
• increased collection risks; and
• impact of the Coronavirus or other pandemics;
• impact of wars and terrorism

Negative developments in any of these areas in one or more countries could result in a reduction in demand for our products, the cancellation or delay of orders already placed, difficulty in collecting receivables, and a higher cost of doing business, any of which could adversely affect our business, results of operations or financial condition.

We are exposed to risks in operating in foreign markets, which may make operating in those markets difficult and thereby force us to curtail our business operations.

In conducting our business in foreign countries, we are subject to political, economic, legal, operational and other risks that are inherent in operating in other countries. Risks inherent to operating in other countries range from difficulties in settling transactions in emerging markets to possible nationalization, expropriation, price controls and other restrictive governmental actions. We also face the risk that exchange controls or similar restrictions imposed by foreign governmental authorities may restrict our ability to convert local currency received or held by us in their countries into U.S. dollars or other currencies, or to take those dollars or other currencies out of those countries.

It is possible that countries in which we do or intend to do business, or companies and their principals become subject to sanctions under U.S. law. This would prevent us from doing business with those countries or with those entities or individuals. We could be exposed to fines and penalties in the event of breach any applicable sanctions legislation or orders. In addition, we might be required to suspend or terminate existing contracts in order to comply with such sanctions legislation or orders, which would adversely impact our future revenues and cash flows.

Cyber-attacks, breaches of network or information technology security, presentation attacks, natural disasters, pandemics or terrorist attacks could have an adverse effect on our business.

Cyber-attacks or other breaches of network or information technology (IT) security, natural disasters, pandemics such as Covid-19, terrorist acts or acts of war may cause equipment failures or disrupt our systems and operations. We may be subject to attempts to breach the security of our networks and IT infrastructure through cyber-attack, presentation attacks to biometric data capture systems, including deep fakes and other threats developed by use of AI driven technologies, malware, computer viruses and other means of unauthorized access. While we regularly review our security policies, protocols, controls and systems to determine their effectiveness for detection and prevention of such attacks, and to make improvements and fix any known vulnerabilities where necessary, new means and methods for such attacks are constantly being developed by bad actors, facilitated by the easy access to generative AI and we may not become aware of such new attacks or vulnerabilities prior to being subject to such an attack. There is no guarantee that we can prevent all such attacks, even if we become aware of their potential. While we maintain insurance coverage for some of these events, the potential liabilities associated with these events could exceed the insurance coverage we maintain. A failure to protect the privacy of customer and employee confidential data against breaches of network or IT security could result in damage to our reputation. To date, we have not been subject to cyber-attacks or other cyber incidents that we are aware of which, individually or in the aggregate, resulted in a material impact to our operations or financial condition.

For us to further penetrate the marketplace, the marketplace must be confident that we provide effective security protection for governmental and other secured identification documents and other personally identifiable information or protected personal information, or PII. Although we are not aware that we have experienced any act of sabotage or unauthorized access by a third party of our software or technology to date, if an actual or perceived breach of security occurs in our internal systems or those of our customers, regardless of whether we caused the breach, it could adversely affect the market’s perception of our products and services. This could cause us to lose customers, resellers, alliance partners or other business partners, thereby causing our revenues to decline. If we or our customers were to experience a breach of our internal systems, our business could be severely harmed by adversely affecting the market’s perception of our products and services.

Most recently, we have considered the impact of the coronavirus pandemic (COVID-19) on our overall operations. The continuing impact of this disease or any other disease which may give rise to a pandemic in the United States and worldwide are unknown, and the widespread growth in infections, or travel restrictions, quarantines or site closures imposed as a result of disease, is among other things, impacting the ability of our employees, sub-contractors, or our customers’ employees and sub-contractors to attend places of work, to meet with potential customers, or undertake implementations at our customer’s locations. In addition, the disease could lead to disruptions in our supply chain, causing shortages or unavailability of software updates, or necessary equipment. Any of these outcomes could have a material adverse effect on our business, financial condition, results of operations, and cash flows.

War in Ukraine and the Middle East may impact the business of the Company, the markets in which it operates and the financial markets, in which the Company needs to raise capital.

The war in Ukraine and the Middle East may impact the Company and its operations in a number of different ways, which are yet to be fully assessed and are therefore uncertain. The Company’s principal concern is for the safety of the personnel who support from those regions. The Company works with third party sub-contractors for outsourced services, including software engineering and development, some of whom are based in Eastern Europe. The Company also works with outsourced engineers and developers and third-party providers in other parts of the world, including the United States, Europe, India, and Latin America. While the continuing impact of this conflict and the response of the United States and other countries to it by means of trade and economic sanctions, or other actions is still unknown, it could disrupt our ability to work with certain contractors. The Company has taken steps to diversify its sub-contractor base, which may in the short term give rise to additional costs and delays in delivering software and product upgrades.

The uncertainty impacting and potential interruption in energy and other supply chains resulting from military hostilities in Europe and the Middle East and the response of the United States and other countries to it by means of trade and economic sanctions, or other actions, may give rise to increases in costs of goods and services generally and may impact the market for our products as prospective customers reconsider additional capital expenditure, or other investment plans until the situation becomes clearer. On the other hand, the threat of increased cyber-attacks from multiple threat actors, including state-sponsored organizations may prompt enterprises to adopt additional security measures such as those offered by the Company.

For so long as the hostilities continue and perhaps even thereafter as the situation in Europe and the Middle East unfolds, we may see increased volatility in financial markets and a flight to safety by investors, which may impact our stock price and make it more difficult for the Company to raise additional capital at the time when it needs to do so, or for financing to be available upon acceptable terms. All or any of these risks separately, or in combination could have a material adverse effect on our business, financial condition, results of operations, and cash flows.

Interruptions, delays in service or defects in our systems could impair the delivery of our services and harm our business.

We depend on the efficient and uninterrupted operation of our computer network systems, software, telecommunications networks, and processing centers, as well as the systems and services of third parties, in order to provide services to our customers. Almost all of our network systems are hosted “in the cloud” by internationally recognized third party service providers such as Microsoft Azure and Amazon Web Services. Our systems and data centers are vulnerable to damage or interruption from, among other things, fire, natural disaster, power loss, telecommunications failure, terrorist acts, war, unauthorized entry, human error, and computer viruses or other defects. They may also be subject to break-ins, sabotage, intentional acts of vandalism and similar misconduct. We have security, backup and recovery systems in place, and business continuity plans that will be designed to ensure our systems will not be inoperable. However, there is still a risk that a system outage or data loss may occur which would not only damage our reputation but could also require the payment of penalties or damages to our clients if our systems do not meet certain operating standards. Despite precautions taken at these facilities, the occurrence of a natural disaster or an act of sabotage or terrorism, a decision to close the facilities without adequate notice or other unanticipated problems at these facilities could result in lengthy interruptions in our service. Our property and business interruption insurance may not be applicable or adequate to compensate us for all losses or failures that may occur.

Any damage to, failure of, or defects, bugs or errors in our systems or those of third parties, errors or delays in the processing of payment or other transactions, telecommunications failures or other difficulties could result in loss of revenue, loss of customers, loss of customer and consumer data, harm to our business or reputation, exposure to fraud losses or other liabilities, negative publicity, additional operating and development costs, and diversion of technical and other resources.

Third parties could obtain access to our proprietary information or could independently develop similar technologies.

Our success depends in part on our ability to protect our core technology and intellectual property. To date, we have relied primarily on a combination of patents, patent applications, trade secret and copyright laws, as well as nondisclosure and other contractual restrictions on copying, reverse engineering and distribution to protect our proprietary technology. There can be no assurance that any of our patent applications will result in the issuance of a patent or that the examination process will not require us to narrow our claims in any application. In addition, any patents may be contested, circumvented, found unenforceable or invalid and we may not be able to prevent third parties from infringing on them.

Despite the precautions we take, third parties may copy or obtain and use our technologies, ideas, know-how and other proprietary information without authorization or may independently develop technologies similar or superior to our technologies. In addition, the confidentiality and non-competition agreements between us and most of our employees, distributors and clients may not provide meaningful protection of our proprietary technologies or other intellectual property in the event of unauthorized use or disclosure. If we are not able to successfully defend our industrial or intellectual property rights, we may lose rights to technologies that we need to develop our business, which may cause us to lose potential revenues, or we may be required to pay significant license fees for the use of such technologies.

Our current patents and any patents that we may register in the future may provide only limited protection for our technology and may not be sufficient to provide competitive advantages to us. For example, competitors could be successful in challenging any issued patents or, alternatively, could develop similar or more advantageous technologies on their own or design around our patents. Any inability to protect intellectual property rights in our technology could enable third parties to compete more effectively with us.

In addition, the laws of certain foreign countries may not protect our intellectual property rights to the same extent as do the laws of the United States. Our means of protecting our intellectual property rights in the United States or any other country in which we operate may not be adequate to fully protect our intellectual property rights.

Third parties may assert that we are infringing their intellectual property rights; IP litigation could require us to incur substantial costs even when our efforts are successful.

We may face intellectual property litigation, which could be costly, harm our reputation, limit our ability to sell our products, force us to modify our products or obtain appropriate licenses, and divert the attention of management and technical personnel. Our products employ technology that may infringe on the proprietary rights of others, and, as a result, we could become liable for significant damages and suffer other harm to our business.

We have not been subject to material intellectual property litigation to date. Litigation may be necessary in the future to enforce any patents we have or may obtain and/or any other intellectual property rights, to protect our trade secrets, to determine the validity and scope of the proprietary rights of others, or to defend against claims of infringement or invalidity, and we may not prevail in any such future litigation. Litigation, whether or not determined in our favor or settled, could be costly, could harm our reputation and could divert the efforts and attention of our management and technical personnel from normal business operations. In addition, adverse determinations in litigation could result in the loss of our proprietary rights, subject us to significant liabilities, require us to seek licenses from third parties, prevent us from licensing our technology or selling or manufacturing our products, or require us to expend significant resources to modify our products or attempt to develop non-infringing technology, any of which could seriously harm our business.

Our products may contain technology provided to us by third parties. Because we did not develop such technology ourselves, we may have little or no ability to determine in advance whether such technology infringes the intellectual property rights of any other party. Our suppliers and licensors may not be required to indemnify us in the event that a claim of infringement is asserted against us, or they may be required to indemnify us only with respect to intellectual property infringement claims in certain jurisdictions, and/or only up to a maximum amount, above which we would be responsible for any further costs or damages. In addition, we have indemnification obligations to certain parties with respect to any infringement of third-party patents and intellectual property rights by our products. If litigation were to be filed against these parties in connection with our technology, we would be required to defend and indemnify such parties.

Our officers, directors and holders of 5% of outstanding shares together beneficially own a significant portion of our Common Stock and, as a result, can exercise control over stockholder and corporate actions.

Our officers and directors and the holders of at least 5% of the outstanding shares of the Company currently beneficially own approximately 19.6% of our outstanding Common Stock, and 24.4% on a fully diluted basis assuming the exercise of both vested and unvested options and warrants. As such, they have a significant influence over most matters requiring approval by stockholders, including the election of directors and approval of significant corporate transactions. This concentration of ownership may also have the effect of delaying or preventing a change in control, which in turn could have a material adverse effect on the market price of the Company’s Common Stock or prevent stockholders from realizing a premium over the market price for their Shares.

We face competition. Some of our competitors have greater financial or other resources, longer operating histories and greater name recognition than we do and one or more of these competitors could use their greater resources and/or name recognition to gain market share at our expense or could make it very difficult for us to establish market share.

The market for our service offerings is highly competitive and rapidly evolving. We face competition from a broad range of providers with solutions across the identity management lifecycle, including:

• Vendors providing identity verification or proofing through both biometric and non-biometric solutions (such as data-based verification using identity proxies, such as DMV records and addresses), both on-premise and cloud-based.
• Vendors of passwordless identity authentication using device-based and cloud-based biometrics.
• Larger companies providing identity and access management platforms, adding identity authentication services to their offering at low/no cost.
• New entrants seeking to develop and market competing technologies.

It is also possible that, as the digital identity market continues to grow and evolve, larger companies with significant resources may increase their presence in the market and develop competing solutions through internal efforts or partnerships with existing players.

Due to our ability to serve both identity verification and authentication needs, as well as the tendency for enterprises to acquire multiple digital identity solutions, we can and often do co-exist with competing products within our customer base.

The resources available to our competitors to develop new products and introduce them into the marketplace exceed the resources currently available to us. Some of our competitors have longer operating histories and greater name recognition than we do and one or more of these competitors could use their greater resources and/or name recognition to gain market share at our expense or could make it very difficult for us to establish market share. As a result, our competitors may be able to compete more aggressively and sustain that competition over a longer period of time that we can. This intense competitive environment may require us to make changes in our products, pricing, licensing, services, distribution, or marketing to develop a market position. Each of these competitors has the potential to capture market share in our target markets, which could have an adverse effect on our position in our industry and on our business and operating results.

Government regulation could negatively impact the business.

We do not have or require any approval from government authorities or agencies in order to operate our regular business and operations. However, data protection legislation in various countries in which the Company does business (including Colombia and the United Kingdom) may require it to register its databases with governmental authorities in those countries and to comply with additional disclosure and consent requirements with regard to the collection, storage and use of personal information of individuals resident in those countries. To the extent that our business is based on Governmental Contracts, the relevant government authorities will need to approve us as a supplier and the terms of those contracts. However, it is possible that any proposed expansion to our business and operations in the future would require government approvals. Due to the security applications and biometric technology associated with our products and platforms the activities and operations of our company are or could become subject to license restrictions and other regulations, such as (without limitation) export controls and other security regulation by government agencies. As indicated in, “We are exposed to risks in operating in foreign markets” above, the imposition of sanctions on particular countries, entities or individuals would prevent us from doing business with such countries, entities or individuals. If our existing and proposed products become subject to licensing, export control and other regulations, we may incur increased costs necessary to comply with existing and newly adopted or amended laws and regulations or penalties for any failure to comply. Our operations could be adversely affected, directly or indirectly, by existing or future laws and regulations (and amendments thereto) relating to our business or industry.

Some states in the United States have adopted legislation governing the collection, use of, and storage of biometric information and other states are considering such legislation. Specifically, several states are considering adopting a Biometric Information Privacy Act, or BIPA modelled on the Illinois statute, which governs the collection, processing, storage and distribution of biometric information such as facial biometric templates and fingerprints. Several of these new statutes give individuals rights of action to sue violators, which have resulted in a number of class action lawsuits. The widespread adoption of such legislation could result in restrictions on our current or proposed business activities, or we may incur increased costs to comply with such regulations.

We are required to comply with stringent, complex, and evolving laws, rules, regulations, and standards in many jurisdictions, as well as contractual obligations, relating to cybersecurity and data privacy. Our compliance efforts are complicated by the fact that these requirements and obligations may be subject to uncertain or inconsistent interpretations and enforcement, and may conflict among various jurisdictions. Any failure or perceived failure by us to comply with applicable laws, rules, regulations, standards, certifications, or contractual obligations, or any compromise of security that results in unauthorized access to, or unauthorized loss, destruction, use, modification, acquisition, disclosure, release, or transfer of personal information, may result in outcomes such as: requirements to modify or cease certain operations or practices; the expenditure of substantial costs, time, and other resources; proceedings or actions against us; legal liability; governmental investigations; enforcement actions; claims; fines; judgments; awards; penalties; sanctions; and potentially costly litigation (including class actions).

Our business is subject to changing regulations regarding corporate governance, disclosure controls, internal control over financial reporting and other compliance areas that will increase both our costs and the risk of noncompliance. If we fail to comply with these regulations, we could face difficulties in preparing and filing timely and accurate financial reports.

We are subject to the reporting requirements of the Securities Exchange Act of 1934, as amended, or the Exchange Act, the Sarbanes-Oxley Act and the Dodd-Frank Act. We are also subject to the corporate governance and other listing rules of the Nasdaq Stock Market LLC (“Nasdaq”). Maintaining compliance with these rules and regulations, particularly after we cease to be an emerging growth company, will increase our legal, accounting and financial compliance costs, will make some activities more difficult, time-consuming and costly and may also place increased strain on our personnel, systems and resources.

The Sarbanes-Oxley Act requires, among other things, that we maintain effective disclosure controls and procedures and at the time we cease to be an emerging growth company and a smaller reporting company, we will be required to provide attestation that we maintain effective disclosure controls and procedures by our registered public accounting firm. Any failure to develop or maintain effective controls, or any difficulties encountered in their implementation or improvement, could harm our operating results or cause us to fail to meet our reporting obligations. Any failure to implement and maintain effective internal control also could adversely affect the results of periodic management evaluations regarding the effectiveness of our internal control over financial reporting that are required to include in our periodic reports filed with the SEC, under Section 404(a) of the Sarbanes-Oxley Act or the annual auditor attestation reports regarding effectiveness of our internal controls over financial reporting that we will be required to include in our periodic reports filed with the SEC upon our ceasing to be an emerging growth company and a smaller reporting company, unless, under the JOBS Act, we meet certain criteria that would require such reports to be included prior to then, under Section 404(b) of the Sarbanes-Oxley Act. Ineffective disclosure controls and procedures and internal control over financial reporting could also cause investors to lose confidence in our reported financial and other information, which would likely have a negative effect on the trading price of shares of our Common Stock.

In order to maintain the effectiveness of our disclosure controls and procedures and internal control over financial reporting going forward, we will need to expend significant resources and provide significant management oversight. There is a substantial effort involved in continuing to implement appropriate processes, document our system of internal control over relevant processes, assess their design, remediate any deficiencies identified and test their operation. As a result, management’s attention may be diverted from other business concerns, which could harm our business, operating results and financial condition. These efforts will also involve substantial accounting-related costs. We may experience difficulty in meeting these reporting requirements in a timely manner.

As disclosed in our previous filings, we had a material weakness in our control over financial reporting starting with the quarter ended June 30, 2023. Management has taken action to remediate the various elements of this material weakness, with immediate effect in relation to the financial statements for the year ending December 31, 2023. We remediated this material weakness and put in place a process to undertake an ongoing review of the Company’s activities during each quarter to identify the potential complex accounting matters and if necessary to engage a professional CPA advisory firm to review the proposed accounting treatment on these complex accounting matters that may arise in the future.

If we are unable to maintain key controls currently in place or that we implement in the future and pending such implementation, or if any difficulties are encountered in their implementation or improvement, (1) our management might not be able to certify, and our independent registered public accounting firm might not be able to report on, the adequacy of our internal control over financial reporting, which would cause us to fail to meet our reporting obligations, (2) misstatements in our financial statements may occur that may not be prevented or detected on a timely basis and (3) we may be deemed to have significant deficiencies or material weaknesses, any of which could adversely affect our business, financial condition and results of operations.

Implementing any appropriate changes to our internal controls may require specific compliance training of our directors, officers and employees, entail substantial costs in order to modify our existing accounting systems, and take a significant period of time to complete. Such changes may not, however, be effective in maintaining the adequacy of our internal controls, and any failure to maintain that adequacy, or consequent inability to produce accurate financial statements on a timely basis, could increase our operating costs and could materially impair our ability to operate our business. In the event that we are not able to demonstrate compliance with Section 404 of the Sarbanes-Oxley Act in a timely manner, our internal controls are perceived as inadequate or that we are unable to produce timely or accurate financial statements, our stock price could decline and we could be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources.

Our amended and restated bylaws designate certain courts as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our stockholders, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, or employees.

Our amended and restated bylaws provide that, unless we consent in writing to an alternative forum, the Court of Chancery of the State of Delaware will be the exclusive forum for: (i) any derivative action or proceeding brought on behalf of the Company; (ii) any action asserting a claim for breach of a fiduciary duty owed by any director, officer, employee, or agent of ours to us or our stockholders; (iii) any action asserting a claim arising pursuant to any provision of the Delaware General Corporation Law, the Certificate of Incorporation, or the bylaws; and (iv) any action asserting a claim governed by the internal affairs doctrine (the “Delaware Forum Provision”). In addition, our amended and restated bylaws provide that any person or entity purchasing or otherwise acquiring any interest in shares of our common stock is deemed to have notice of and consented to the Delaware Forum Provision.

Section 27 of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), creates exclusive federal jurisdiction over all suits brought to enforce any duty or liability created by the Exchange Act or the rules and regulations thereunder. As a result, the Delaware Forum Provision will not apply to suits brought to enforce any duty or liability created by the Exchange Act or any other claim for which the federal courts have exclusive jurisdiction. We note, however, that there is uncertainty as to whether a court would enforce this provision and that investors cannot waive compliance with the federal securities laws and the rules and regulations thereunder.

We recognize that the Delaware Forum Provision in our amended and restated bylaws may impose additional litigation costs on stockholders in pursuing any such claims, particularly if the stockholders do not reside in or near the State of Delaware. Additionally, the Delaware Forum Provision may limit our stockholders’ ability to bring a claim in a forum that they find favorable for disputes with us or our directors, officers or employees, which may discourage such lawsuits against us and our directors, officers and employees even though an action, if successful, might benefit our stockholders. The Court of Chancery of the State of Delaware may also reach different judgments or results than would other courts, including courts where a stockholder considering an action may be located or would otherwise choose to bring the action, and such judgments may be more or less favorable to us than our stockholders.

We are an “emerging growth company” and we cannot be certain if the reduced disclosure requirements applicable to “emerging growth companies” will make our Common Stock less attractive to investors.

We are an “emerging growth company,” as defined in the JOBS Act, and we expect to take advantage of certain exemptions and relief from various reporting requirements that are applicable to other public companies that are not “emerging growth companies.” In particular, while we are an “emerging growth company” (1) we will not be required to comply with the auditor attestation requirements of Section 404(b) of the Sarbanes-Oxley Act, (2) we will be exempt from any rules that may be adopted by the Public Company Accounting Oversight Board requiring mandatory audit firm rotations or a supplement to the auditor’s report on financial statements, (3) we will be subject to reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements and (4) we will not be required to hold nonbinding advisory votes on executive compensation or stockholder approval of any golden parachute payments not previously approved.

In addition, we are eligible to delay the adoption of new or revised accounting standards applicable to public companies until those standards apply to private companies, and as a result, we may not comply with new or revised accounting standards on the relevant dates on which adoption of such standards is required for non-emerging growth companies. The Company has adopted and will be adopting all standards as they become effective for public companies.

We also take advantage of reduced disclosure requirements, including regarding executive compensation. If we remain an “emerging growth company” in the future, we may take advantage of other exemptions, including the exemptions from the advisory vote requirements and executive compensation disclosures under the Dodd-Frank Wall Street Reform and Customer Protection Act, and the exemption from the provisions of Section 404(b) of the Sarbanes-Oxley Act. We may take advantage of these provisions at least until December 31, 2024. However, if certain events occur prior to such date, including if we are deemed a “large accelerated filer” under the Exchange Act, our annual gross revenues exceed $1.07 billion or we issue more than $1.0 billion of non- convertible debt in any three-year period, we may cease to be an emerging growth company prior to such date.

The exact implications of the JOBS Act are still subject to interpretations and guidance by the SEC and other regulatory agencies, and we cannot assure you that we will be able to take advantage of all of the benefits of the JOBS Act. In addition, investors may find our Common Stock less attractive if we rely on the exemptions and relief granted by the JOBS Act. If some investors find our Common Stock less attractive as a result, there may be a less active trading market for our Common Stock and our stock price may decline and/or become more volatile.

There can be no assurance that we will be able to comply with the continued listing standards of the Nasdaq Capital Market. Our failure to meet the continued listing requirements of the Nasdaq Capital Market could result in a de-listing of our Common Stock.

We cannot assure you that we will be able to comply with the continuing listing requirements that we are required to meet in order to maintain a listing of our Common Stock on the Nasdaq Capital Market. If we fail to satisfy the continued listing requirements of the Nasdaq Capital Market, such as the minimum bid price requirement, or the minimum stockholder’s equity requirement, the Nasdaq Capital Market may take steps to de-list our Common Stock. Such a de-listing would likely have a negative effect on the price of our Common Stock and would impair our stockholders’ ability to sell or purchase our Common Stock when they wish to do so. In the event of a de-listing, we would take actions to restore our compliance with the Nasdaq Capital Market’s listing requirements, but we can provide no assurance that any action taken by us would result in our Common Stock becoming listed again, or that any such action would stabilize the market price or improve the liquidity of our Common Stock.

Specifically, on January 25, 2023, the Company received a notice letter from the Listing Qualifications staff of the Nasdaq that it was not in compliance with the Nasdaq Listing Rule 5550(a)(2) that the Company maintain a bid price for the Company’s common stock above $1.00 per share (“Bid Price Requirement”). On April 4, 2023, the Company received a notice letter from the Listing Qualifications staff of Nasdaq indicating that the Company was not in compliance with Nasdaq Listing Rule 5550(b)(1) (“Rule 5550(b)(1)”) as the Company’s stockholders’ equity was below $2.5 million, which is the minimum stockholders’ equity required for compliance with Rule 5550(b)(1). Further, as of April 3, 2023, the Company did not meet the alternative compliance standards relating to the market value of listed securities, or net income from continuing operations. As a result of the Company’s fund-raising activities in May 2023, the Company’s total stockholder equity was approximately $9.6 million, as reported on the Company’s Form 10-Q for the period ended June 30, 2023. On May 30, 2023, the Company received notice from Nasdaq, that Nasdaq Staff had determined, that the Company complied with Rule 5550(b)(1). As a result of the 1-for-8 reverse stock split that the Company undertook in July 2023, the Company received notice on July 24, 2023 from Nasdaq that the Company was in compliance with the Bid Price Requirement and the matter raised by their letter of January 25, 2023 was closed.

Sales of a substantial number of shares of our Common Stock in the public market by our existing stockholders could cause our share price to fall.

Sales of a substantial number of shares of our Common Stock in the public market, or the perception that these sales might occur, including sales by our executive officers, directors and significant stockholders could depress the market price of our Common Stock and could impair our ability to raise capital through the sale of additional equity securities. We are unable to predict the effect that sales may have on the prevailing market price of our Common Stock.

We may be subject to securities litigation, which is expensive and could divert management attention.

In the past, companies that have experienced volatility in the market price of their stock have been subject to securities class action litigation. We may be the target of this type of litigation in the future. Litigation of this type could result in substantial costs and diversion of management’s attention and resources, which could seriously hurt our business. Any adverse determination in litigation could also subject us to significant liabilities.

If securities or industry analysts do not publish or cease publishing research or reports about us, our business or our market, or if they adversely change their recommendations or publish negative reports regarding our business or our Common Stock, our stock price and trading volume could decline.

The trading market for our Common Stock will be influenced by the research and reports that industry or securities analysts may publish about us, our business, our market or our competitors. We do not have any control over these analysts and we cannot provide any assurance that analysts will cover us or provide favorable coverage. If any of the analysts who may cover us adversely change their recommendation regarding our shares, or provide more favorable relative recommendations about our competitors, our stock price would likely decline. If any analysts who may cover us were to cease coverage of the Company or fail to regularly publish reports on us, we could lose visibility in the financial markets, which in turn could cause our stock price or trading volume to decline.

The market price of our common stock has been volatile and your investment in our stock could suffer a decline in value.

The market price of our common stock has experienced significant price and volume fluctuations. For example, during the three year period ended December 31, 2023, the closing price of our common stock ranged from $2.40 to $141.44. In addition, the stock market has from time to time experienced significant price and volume fluctuations that have particularly affected the market prices for the common stock of technology companies and that have often been unrelated to the operating performance of particular companies. These broad market fluctuations may adversely affect the market price of our common stock. You may not be able to resell your shares at or above the price you paid for them due to fluctuations in the market price of our stock caused by changes in our operating performance or prospects and other factors.

Some specific factors, in addition to the other risk factors identified above, that may have a significant effect on the price of our stock, many of which we cannot control, include but are not limited to:

• our announcements or our competitors’ announcements of technological innovations;
• actual or anticipated quarterly variations in operating results;
• variance in our financial performance from our own financial guidance, or from expectations of securities analysts;
• changes in our product pricing policies or those of our competitors;
• our involvement in claims of infringement of intellectual property rights or other litigation;
• the public’s reaction to our press releases, our other public announcements and our filings with the SEC;
• changes in accounting standards, policies, guidance, interpretations or principles;
• changes in our growth rate or our competitors’ growth rates;
• developments regarding our patents or proprietary rights or those of our competitors;
• our inability to raise additional capital as needed;
• changes in financial markets or general economic conditions, or in market valuations of other technology companies;
• short sales, hedging and other derivative transactions and short selling campaigns involving our capital stock;
• sales of stock by the Company, or members of our management team or Board or significant stockholders; and
• changes in stock market analyst recommendations or earnings estimates regarding our stock, other comparable companies or our industry generally.

We do not anticipate paying any cash dividends in the foreseeable future.

We have never declared or paid cash dividends, and we do not anticipate paying cash dividends in the foreseeable future. Therefore, investors should not rely on an investment in our Common Stock as a source for any future dividend income. Our board of directors has complete discretion as to whether to distribute dividends. Even if our board of directors decides to declare and pay dividends, the timing, amount and form of future dividends, if any, will depend on our future results of operations and cash flow, our capital requirements and surplus, our financial condition, contractual restrictions and other factors deemed relevant by our board of directors.

Cyber criminals are becoming more sophisticated and effective every day, and they are increasingly targeting companies similar to ours operating in the technology, software and identification space. All companies utilizing technology are subject to threats of breaches of their cybersecurity programs. To mitigate the threat to our business, we take a comprehensive approach to cybersecurity risk management and make securing the data customers and other stakeholders entrust to us a top priority. Our Board of directors and our management are actively involved in the oversight of our risk management program, of which cybersecurity represents an important component. As described in more detail below, we have established policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats. We have devoted significant financial and personnel resources to implement and maintain security measures to meet regulatory requirements and customer expectations, and we intend to continue to make significant investments to maintain the security of our data and cybersecurity infrastructure. There can be no guarantee that our policies and procedures will be properly followed in every instance or that those policies and procedures will be effective to prevent cyberattack incidents. Such incidents, whether or not successful, could result in our incurring significant costs related to, for example, rebuilding our internal systems, implementing additional threat protection measures, providing modifications or replacements to our products and services, defending against litigation, responding to regulatory inquiries or actions, paying damages, providing customers with incentives to maintain a business relationship with us, or taking other remedial steps with respect to third parties, as well as incurring significant reputational harm. In addition, these threats are constantly evolving, thereby increasing the difficulty of successfully defending against them or implementing adequate preventative measures. We have seen an increase in cyberattack volume, frequency, and sophistication. Although our Risk Factors include further detail about the material cybersecurity risks we face, we believe that as of the date of this Annual Report on Form 10-K, risks from prior cybersecurity threats, have not materially affected our business to date. We can provide no assurance that there will not be incidents in the future or that they will not materially affect us, including our business strategy, results of operations, or financial condition.

Risk Management and Strategy

Our policies, standards, processes and practices for assessing, identifying, and managing material risks from cybersecurity threats are based on frameworks established by the International Organization for Standardization, specifically ISO/IEC 27001:2013 and other applicable industry standards. We have established comprehensive Information Security Management Systems (“ISMS”) policies, which are independently reviewed and audited annually for conformity and effectiveness under ISO/IEC 27001. Our cybersecurity program in particular focuses on the following key areas:

Collaboration

Our cybersecurity risks are identified and addressed through a comprehensive, cross-functional approach. Key security, risk, and compliance stakeholders, including a member of the Board meet at least monthly in our Security Steering Committee (the “Security Committee”) to develop strategies for preserving the confidentiality, integrity and availability of our company and customer information, identifying, preventing and mitigating cybersecurity threats, and effectively responding to cybersecurity incidents. We maintain controls and procedures that are designed to ensure prompt escalation of certain cybersecurity incidents so that decisions regarding public disclosure and reporting of such incidents can be made by management and the Board in a timely manner.

Risk Assessment

At least annually, we conduct a cybersecurity risk assessment that takes into account information from internal stakeholders, known information security vulnerabilities, and information from external sources (e.g., reported security incidents that have impacted other companies, industry trends, and evaluations by third parties and consultants). The results of the assessment are used to drive alignment on, and prioritization of, initiatives to enhance our security controls, make recommendations to improve processes, and inform a broader enterprise-level risk assessment that is presented to our Board and members of management. Risk assessment is integral to all engineering, business and operational decisions and in addition to the annual reviews, is an ongoing effort, as circumstances and facts arise.

Self Audit

At least annually we conduct a self-audit of our information security management systems (“ISMS”), in order to identify if there is any non-conformance with our ISMS policies and procedures. The results of the self-audit are reported to our Steering Committee and our external auditor for ISO/IEC 27001 compliance.

Technical Safeguards

We regularly assess and deploy technical safeguards designed to protect our information systems from cybersecurity threats. Such safeguards are regularly evaluated and improved based on vulnerability assessments, cybersecurity threat intelligence and incident response experience.

Incident Response and Recovery Planning

We have established comprehensive incident response and recovery plans and continue to regularly test and evaluate the effectiveness of those plans. Our incident response and recovery plans address — and guide our employees, management and the Board on — our response to a cybersecurity incident.

Third-Party Risk Management

We have implemented controls designed to identify and mitigate cybersecurity threats associated with our use of third-party service providers. Such providers are subject to security risk assessments at the time of onboarding and contract renewal. We use a variety of inputs in such risk assessments, including information supplied by providers and third parties. In addition, we require our providers to meet appropriate security requirements, controls and responsibilities.

Education and Awareness

Our policies require each of our employees to contribute to our data security efforts. We regularly remind employees of the importance of handling and protecting customer and employee data, including through regular privacy and security training and testing to enhance employee awareness of how to detect and respond to cybersecurity threats.

External Assessments

Our cybersecurity policies, standards, processes and practices are regularly assessed by consultants and external independent auditors. These assessments include a variety of activities including information security assessments, audits and independent reviews of our ISMS, control environment and operating effectiveness. For example, in 2022 and 2023, we conducted independent audits to assess our ISMS against the ISO/IEC 27001:2013 standard and received certification of compliance with the standard. In 2022 we also undertook independent testing to achieve conformance with ISO 30107-3 Level 1 and 2 for Presentation Attack Detection (PAD), for our Bioweb server and Verified dashboard. We also undertake regular penetration testing of our systems. The results of significant assessments are reported to management and the Board. Cybersecurity processes are adjusted based on the information provided from these assessments. We have also obtained industry certifications and attestations that demonstrate our dedication to protecting the data our customers entrust to us.

Governance

Board Oversight

Our Board, in coordination with the Security Committee, oversees our management of cybersecurity risk. They receive regular reports from management about the prevention, detection, mitigation, and remediation of cybersecurity incidents, including material security risks and information security vulnerabilities. Our Security Committee directly oversees our cybersecurity program. The Board receives periodic updates from management on cybersecurity risk resulting from risk assessments, progress of risk reduction initiatives, external auditor feedback, control maturity assessments, and relevant internal and industry cybersecurity incidents.

Management’s Role

Our Chief Technology Officer (“CTO”), Senior Vice President of Engineering (“SVP-Engineering”), Data Engineering and Security Director and General Counsel have primary responsibility for assessing and managing material cybersecurity risks and are members of management’s Security Committee, which is a governing body that drives alignment on security decisions across our company. The Security Committee meets monthly to review security performance metrics, identify security risks, and assess the status of approved security enhancements. The Security Committee also considers and makes recommendations on security policies and procedures, security service requirements, and risk mitigation strategies.

Our CTO has served in various roles in information technology and information security for over 35 years, which have covered operations management experience in Government Security, Identity Access Management and SaaS solutions industries. Our SVP-Engineering has over 30 years of experience in software development and engineering, starting in the U.S. Marine Corps. Our Data Engineering and Security Director has over 10 years experience in information technology, with a focus on data engineering and information security. Our General Counsel has over 12 years of experience managing risks, including risks arising from cybersecurity threats, at several publicly-traded technology companies.

The Company’s Headquarters are now located 1580 North Logan Street, Suite 660, Unit 51767, Denver, CO 80203. This is a virtual office address, we do not have any physical offices and all employees work remotely.

From time to time the Company is a party to various legal or administrative proceedings arising in the ordinary course of our business. While any litigation contains an element of uncertainty, we have no reason to believe that the outcome of such proceedings will have a material adverse effect on the financial condition or results of operations of the Company.

The discussion and analysis of our financial condition and results of operations are based on our financial statements, which we have prepared in accordance with accounting principles generally accepted in the United States of America (“U.S. GAAP”). The preparation of these financial statements requires us to make estimates and assumptions that affect the reported amounts of assets and liabilities and the disclosure of contingent assets and liabilities at the date of the financial statements, as well as the reported revenues and expenses during the reporting periods. On an ongoing basis, we evaluate estimates and judgments, including those described in greater detail below. We base our estimates on historical experience and on various other factors that we believe are reasonable under the circumstances, the results of which form the basis for making judgments about the carrying value of assets and liabilities that are not readily apparent from other sources. Actual results may differ from these estimates under different assumptions or conditions.

As used in this “Management’s Discussion and Analysis of Financial Condition and Results of Operation,” except where the context otherwise requires, the term “we,” “us,” “our,” “authID” or “the Company,” refers to the business of authID Inc.

Overview

authID Inc. (together with its subsidiaries, the “Company”, “authID”, “we” or “our”) ensures cyber-savvy enterprises “Know Who’s Behind the Device”TM for every customer or employee login and transaction. Through its easy-to-integrate, patented, biometric identity platform, authID quickly and accurately verifies a user’s identity, eliminating any assumption of ‘who’ is behind a device and preventing cybercriminals from taking over accounts. authID combines digital onboarding, biometric passwordless authentication and account recovery, with a fast, accurate, user-friendly experience – delivering identity verification in 700ms. Establishing a biometric root of trust for each user that is bound to their accounts, or provisioned devices, authID stops fraud at onboarding, eliminates password risks and costs, and provides the faster, frictionless, and more accurate user identity experience demanded by operators of today’s digital ecosystems.

Our Platform

Our VerifiedTM cloud-based platform was developed with internally developed software as well as acquired and licensed technology and provides the following core services:

• Biometric Identity Verification
• Biometric Identity Authentication
• Account / Access Recovery
• FIDO Passkey binding

Biometric Identity Verification

Biometric identity verification establishes the trusted identity of a user based on a variety of ground truth sources, including government-issued identity documents such as national IDs, driver’s licenses and passports or electronic machine-readable travel documents (or eMRTDs). Our VerifiedTM platform detects presentation attack and spoofing threats, evaluates the authenticity of security features present on a government-issued identity document, and biometrically matches the reference picture of the document with a live user’s selfie (a photograph that the user has taken of themselves). Usually occurring at account opening or onboarding, identity verification ensures that the enterprise knows that the person interacting with the enterprise is who they say they are, in real time. authID’s ProofTM identity verification product eliminates the need for costly and less accurate face-to-face, in-person ID checks and instead provides a verified identity in seconds. In a digital, online world of increasing fraud and security threats, Proof speeds up onboarding and offers our customers confidence in the identities of consumers, employees or third-party vendors.

Biometric Identity Authentication

Biometric identity authentication provides any organization with a secure, convenient solution to validate that an individual is the verified account owner for various purposes including passwordless login and performing specific transactions, or functions. The authID Verified product allows users to confirm their identity with their facial biometric by simply taking a selfie on a mobile phone or device of their choosing (as opposed to dedicated hardware). The solution includes a patented audit trail created for each transaction, containing the digitally signed transaction details, with proof of identity authentication and consent.

Account Access and Recovery

authID’s Verified biometric identity authentication solution allows users to recover, via a facial biometric, account access that is lost or blocked due to expired credentials, lockouts, lost or stolen devices, or compromised accounts. Because the account owner’s root of trust is established in the cloud, recovery is independent of any device or hardware. In this way, account recovery is instant, portable, and does not require the presence of or access to a previously provisioned device in order to secure access from a different device.

FIDO Passkey Binding

FIDO Passkey Binding enables enterprises and their users to bind biometrically verified user identities to FIDO2 passkeys, enabling strong authentication for device-based passwordless login and transaction authentication that is tied to a trusted identity. This solution establishes a digital chain of trust between biometrically verified individuals, their accounts, and their devices, thus eliminating passwords and protecting users and systems against fraud attacks.

Key Customer Benefits

Our solution allows our enterprise customers to:

• Verify and Authenticate users. Customers can use the authID platform not only to verify the identity of new users, but also to authenticate those users seamlessly on an ongoing basis to enable quick, secure logins and transaction authentications.
• Benefit from high-speed processing. Our solution returns a very low-latency response, key to enabling high-volume use cases (such as logins and high-value transactions) and providing a frictionless user experience.
• Precisely and accurately identify their consumers and employees, giving the enterprise complete confidence in who is accessing their digital assets
• Provide a seamless user experience in terms of speed and self-guided flow, so that even users who are not tech-savvy are easily able to complete the identity verification and authentication processes
• Support a wide variety of devices. Our cloud-based service is device agnostic and may be used to verify or authenticate users on any device with a camera, including shared devices, digital kiosks, etc.
• Integrate quickly and easily. We offer pre-integrated OIDC connections as well as integrations with several leading Identity and Access Management solutions.
• Offer broad identity document coverage. We can verify identities using a wide spectrum of government-issued documents from around the world.

Discontinued Operations

On May 4, 2022, the Board of Directors of authID (the “Board” or the “Board of Directors”) approved a plan to exit from certain non-core activities comprising the MultiPay correspondent bank payments services in Colombia and the Cards Plus cards manufacturing and printing business in South Africa (“Cards Plus business”). On August 29, 2022 the Company executed and completed the sale of the Cards Plus business. On June 30, 2023, the Company completed the sale of its legacy payments software by MultiPay. As of December 31, 2022, MultiPay S.A.S., and IDGS S.A.S assets are presented as assets held for sale on the Company’s Consolidated Balance Sheets and their operations together with those of Cards Plus Pty Ltd., presented as discontinued operations in the Consolidated Statements of Operations during the years ended December 31, 2023 and 2022, as they met the criteria for discontinued operations under applicable accounting guidance.

Key Trends

We believe that our financial results will be impacted by several market trends in the identity verification and authentication markets, as well as expanding digital transformation efforts across a wide range of market segments. These trends include:

• growing concerns over identity theft, fraud and account takeover, resulting from the acceleration of digital transformation, for example online shopping and remote working and the growth in AI assisted fraud;
• the growth in the sharing economy; and
• the increase in electronic payments and alternative money transfer solutions provided by both bank and non-bank entities. The key drivers for these alternative payment methods are consumer demands for safe, convenient payment transactions, with less friction.

Our results are also impacted by the changes in levels of spending on identity verification, management and security methods, and thus, negative trends in the global economy and other factors which negatively impact such spending may negatively impact the growth in our revenue from those products. The global economy has been undergoing a period of political and economic uncertainty and stock markets are experiencing high levels of volatility, and it is difficult to predict how long this uncertainty and volatility will continue.

We plan to grow our business by increasing the use of our services by our existing customers, by adding new customers through our direct salesforce, channel partners and by expanding into new markets and innovation. If we are successful in these efforts, we would expect our revenue to continue to grow.

Going Concern

The Company’s consolidated financial statements included in this Annual Report have been prepared in accordance with U.S. GAAP assuming the Company will continue on a going concern basis, which implies the Company will continue to meet its obligations and continue its operations for the next year following the issuance date of these financial statements.

As of December 31, 2023, the Company had an accumulated deficit of approximately $159.5 million. For the year ended December 31, 2023, the Company earned revenue of approximately $0.19 million, used $8.4 million to fund its operations, and incurred a net loss from continuing operations of approximately $19.6 million. The continuation of the Company as a going concern is dependent upon financial support from the Company’s stockholders and noteholders, the ability of the Company to obtain additional debt or equity financing to continue operations, the Company’s ability to generate sufficient cash flows from operations, successfully locating and negotiating with other business entities for potential acquisition and /or acquiring new clients to generate revenues and cash flows.

As discussed in “Liquidity and Capital Resources” below, the Company secured additional financing during 2023 which provides funding for its current operations as it continues to invest in its product, people, and technology. The Company projects that the investments will lead to revenue expansion thereby reducing liquidity needs. However, in order to further implement its business plan and satisfy its working capital requirements, the Company will need to raise additional capital. There is no guarantee that the Company will be able to raise additional equity or debt financing at acceptable terms, if at all.

There is no assurance that the Company will ever be profitable. These consolidated financial statements do not include any adjustments to reflect the possible future effects on the recoverability and classification of assets or the amounts and classifications of liabilities that may result should the Company be unable to continue as a going concern. As there can be no assurance that the Company will be able to achieve positive cash flows (become cash flow profitable) and raise sufficient capital to maintain operations, there is substantial doubt about the Company’s ability to continue as a going concern.

Subsequent Events

On February 15, 2024, Mr. Joe Trelin tendered his resignation as Chairman and a Director of the Company, effective immediately. On February 20, 2024, the board of directors of the Company (the “Board”) accepted his resignation and agreed to vest the unvested portion of an option granted to Mr. Trelin June 28, 2023, amounting to 6,511 shares.

Pursuant to Rule 5605(b)(1) of the Rules of the Nasdaq Stock Market, (“Nasdaq”), a majority of the Board must be comprised of Independent Directors as defined in Rule 5605(a)(2). As a result of Mr. Trelin’s resignation, the Board currently consists of six directors of which three are considered Independent Directors. The Company is currently in discussions with one or more candidates to be appointed as an additional Independent Director, but no agreement has been reached regarding such appointment at this time. Pursuant to Rule 5605(b)(1)(A), the Company has a cure period, within which to restore the majority of Independent Directors, expiring on the earlier of the date of the next Annual Meeting or one year from the date of the vacancy (subject to a minimum period of 180 days from the date of the vacancy).

On February 20, 2024, the Board appointed Michael Thompson to the Audit Committee in compliance with Rule 5605(c)(2)(A) of the Nasdaq Rules.

Related Party Transactions

On June 6, 2023, the Company entered into a services agreement with The Pipeline Group, Inc. (“TPG”). Ken Jisser, a director of the Company, is the founder and CEO of TPG, a technology-enabled services company that aims to deliver business results for companies looking to build a predictable and profitable pipeline. The agreement provides that TPG will assist in providing outsourced sales including business development resources for outbound calling, provide support for automated dialing technology, classify customer data and other sales related services for an initial term of one year. These services and their contracted pricing has been evaluated by Management based on historical experience with similar providers and determined to be priced at fair, market rates. On October 25, 2023, and on December 19, 2023, the Company entered into amendments to the above services agreement, pursuant to which TPG will provide certain additional services to the Company. In consideration of the services, the Company will pay TPG $98,000 per month during the remainder of the initial one-year term ending in June 2024. The foregoing is only a summary of the material terms of the agreements entered with TPG and does not purport to be a complete description of the rights and obligations of the parties thereunder. The summary of the agreement entered with TPG is qualified in its entirety by reference to the forms of such agreements, which were filed as exhibits to the Company’s Current Report and are incorporated by reference herein (See “Exhibits”).

The Company has entered into various investment, credit and funding agreements with Mr. Stephen Garchik, which are summarized in the following paragraphs. Mr. Garchik is now a holder of more than 10% of the issued and outstanding common stock of the Company. Mr. Garchik’s financial support for the Company has been a material factor in the continued operation of the Company over the period covered by this Annual Report and its current financial position. Full details of these transactions are set forth in Item 13 “Certain Relationships and Related Transactions and Director Independence” and in Note 8 “Related Party Transactions” to the Audited Consolidated Financial Statements of the Company as of and for the years ended December 31, 2022 and 2023, which are exhibited hereto (the “Consolidated Financial Statements”).

On March 21, 2022 the Company entered into the Original Facility Agreement with Mr. Garchik, pursuant to which Mr. Garchik agreed to provide a $10.0 million unsecured standby line of credit facility. On April 18, 2022, Joseph Trelin, as Garchik’s designee under the Original Facility Agreement, was appointed as a member of the Board of Directors of the Company. By virtue of such right of nomination Mr. Garchik considered himself a “director by deputization”.

As described in Note 6 “Working Capital Facility”, to the Consolidated Financial Statements, the Original Facility Agreement was amended and restated effective March 8, 2023 pursuant to which amendment the amount of the facility was reduced to $3.6 million, and an initial advance of $900,000 was made. Under the A&R Facility Agreement Garchik had a one-time right for the nomination of four designees specified in writing by Garchik for appointment to our board of directors. On March 9, 2023 Rhoniel Daguro, Ken Jisser, Michael Thompson and Thomas Szoke as Garchik’s designees under the A&R Facility Agreement, were appointed as members of the Board of Directors of the Company. On May 25, 2023, the Company and Mr. Garchik agreed to terminate the A&R Facility Agreement and satisfied and offset the outstanding balance of the Note and accrued interest in the amount of $929,250 with the purchase price of 253,617 shares of common stock. In addition, Mr. Garchik invested a further $1,000,000 on the same date. The purchase price of the shares issued in these two transactions was the same as the purchase price paid by all other investors (who were not directors) in the same round and was the Nasdaq Official Closing Price in effect on the date of the transaction.

Further, On May 23, 2023, pursuant to an Exchange Agreement, Mr. Garchik, exchanged a Convertible Note and accrued interest in the amount of $1,014,625 for 268,705 shares of common stock. The price of the shares issued to Mr. Garchik under the Exchange Agreement was the same as the purchase price paid by all other investors (who were not directors) pursuant to the Exchange Agreement and was the Nasdaq Official Closing Price in effect on the date of the transaction. As a result of such exchange, the issuance of shares in satisfaction of the Credit Facility and the purchase of additional shares of common stock as referenced above (See Note 9 “Shareholders’ Equity” to the Consolidated Financial Statements), Mr. Garchik is now a holder of more than 10% of the outstanding shares of the Company’s common stock.

On November 20, 2023, Mr. Garchik, purchased 166,667 shares of Company’s common stock at a price of $1,000,000. The purchase price of the shares issued in this transaction was the same as the purchase price paid by all other investors in the same round and was higher than the Nasdaq Official Closing Price in effect on the date of the transaction.

As further described in Item 13 “Certain Relationships and Related Transactions and Director Independence” and in Note 8 “Related Party Transactions” to the Consolidated Financial Statements, the Company has entered into various equity investments and employment agreements with Directors and Officers of the Company.

Critical Accounting Policies and Estimates

Our significant accounting policies are more fully described in the notes to our consolidated financial statements. Those material accounting estimates that we believe are the most critical to an investor’s understanding of our financial results and condition are discussed immediately below and are particularly important to the portrayal of our financial position and results of operations and require the application of significant judgment by our management to determine the appropriate assumptions to be used in the determination of certain estimates.

Use of Estimates

In preparing these consolidated financial statements in conformity with U.S. GAAP, management is required to make estimates and assumptions that may affect the reported amounts of assets and liabilities and disclosure of contingent assets and liabilities as of the date of the consolidated financial statements and the reported amount of revenues and expenses during the reporting periods. Actual results could differ from those estimates.

Revenue Recognition

Revenue recognition policy for significant revenue generating activities from continuing operations:

All contracts are reviewed for their respective performance obligations and related revenue and expense recognition implications. A performance obligation under the revenue standard is defined as a promise to provide a “distinct” good or service to a customer and is the unit of account for revenue recognition. The Company’s revenues that are derived from the identity services could include multiple performance obligations. Additionally, the contracts could include implementation services, or support on an “as needed” basis and we will review each contract and determine whether such performance obligations are separate and distinct and apply the standard accordingly to the revenue and expense derived from or related to each such service.

Goodwill

Goodwill is recorded when the purchase price paid for an acquisition exceeds the fair value of net identified tangible and intangible assets acquired. The Company performs an annual impairment test of goodwill and further periodic tests to the extent indicators of impairment develop between annual impairment tests. The Company’s impairment review process compares the fair value of the reporting unit to it carrying value, including the goodwill related to the reporting unit utilizing qualitative considerations. To determine the fair value of the reporting unit, the Company may use various approaches including an asset or cost approach, market approach or income approach or any combination thereof. These approaches may require the Company to make certain estimates and assumptions including future cash flows, revenue and expenses. These estimates and assumptions are reviewed each time the Company tests goodwill for impairment and are typically developed as part of the Company’s routine business planning and forecasting process. While the Company believes its estimates and assumptions are reasonable, variations from those estimates could produce materially different results.

During the year ended December 31, 2023 and 2022, the Company’s projection and assessment did not indicate that an impairment charge was required as its fair value was in excess of carrying value.

Stock-based compensation

The Company has accounted for stock-based compensation under the provisions of FASB ASC 718 – “Stock Compensation” which requires the use of the fair-value based method to determine compensation for all arrangements under which employees and others receive shares of stock or equity instruments (stock options and common stock purchase warrants). For both employee and non-employee awards, the fair market value of each stock option award is estimated on the date of grant using the Black-Scholes and/or Monte-Carlo valuation models as appropriate that uses assumptions for expected volatility, expected dividends, expected term, and the risk-free interest rate. Expected volatilities are based on historical volatility of the Company’s stock and other factors estimated over the expected term of the stock options. For employee awards, the expected term of options granted is derived based on exercise history. We continually monitor exercise activity from the date of grant and consider our short history and certain stock price growth during various periods to determine if expected term should be modified. The risk-free rate is based on the U.S. Treasury yield curve in effect at the time of grant for the period of the expected term. The Company accounts for forfeitures of employee awards as they occur.

Adjusted EBITDA

This discussion includes information about Adjusted EBITDA that is not prepared in accordance with U.S. GAAP. Adjusted EBITDA is not based on any standardized methodology prescribed by U.S. GAAP and is not necessarily comparable to similar measures presented by other companies. A reconciliation of this non-GAAP measure is included below.

Adjusted EBITDA is a non-GAAP financial measure that represents U.S. GAAP net income (loss) adjusted to exclude (1) interest expense, (2) interest income, (3) provision for income taxes, (4) depreciation and amortization, (5) stock-based compensation expense (stock options) and (6) certain other items management believes affect the comparability of operating results. Other items included the following:

• Conversion expense of $7.5 million in 2023 and $0 in 2022
• Severance cost of $0.9 million in 2023 and $0.2 million in 2022
• Impairment loss of $0 in 2023 and $1.1 million in 2022
• Loss on debt extinguishment of $0.4 million in 2023 and $0 in 2022

Management believes that Adjusted EBITDA, when viewed with our results under U.S. GAAP and the accompanying reconciliations, provides useful information about our period-over-period results. Adjusted EBITDA is presented because management believes it provides additional information with respect to the performance of our fundamental business activities and is also frequently used by securities analysts, investors and other interested parties in the evaluation of comparable companies. We also rely on Adjusted EBITDA as a primary measure to review and assess the operating performance of our company and our management, and it will be a focus as we invest in and grow the business.

Adjusted EBITDA has limitations as an analytical tool, and you should not consider it in isolation from, or as a substitute for, analysis of our results as reported under GAAP. Some of these limitations are:

• Adjusted EBITDA does not reflect our cash expenditures or future requirements for capital expenditures or contractual commitments;
• Adjusted EBITDA does not reflect changes in, or cash requirements for, our working capital needs;
• Although depreciation and amortization are non-cash charges, the assets being depreciated and amortized will often have to be replaced in the future, and Adjusted EBITDA does not reflect any cash requirements for such replacements;
• Adjusted EBITDA does not include the impact of certain charges or gains resulting from matters we consider not to be indicative of our ongoing operations.

Because of these limitations, adjusted EBITDA should not be considered as a measure of discretionary cash available to us to invest in the growth of our business. We compensate for these limitations by relying primarily on our U.S. GAAP results and using Adjusted EBITDA only as a supplement to our U.S. GAAP results.

Reconciliation of Net Loss From Continuing Operations to Adjusted EBITDA Continuing Operations

The decrease in Adjusted EBITDA Loss From Continuing Operations in 2023 compared to 2022 is principally due to cost saving measures taken in 2023 resulting in lower headcount costs and lower third-party vendors costs. Additionally, a significant reduction in stock option expense is related to the reversal of the charge associated with unvested performance-based grants when certain senior level executives departed the organization in 2023 and was offset by one-time expenses related to the conversion of convertible debt to equity.

Results of Operations and Financial Condition for the Year Ended December 31, 2023 as Compared to the Year Ended December 31, 2022 – Continuing Operations

Revenues, net

During the year ended December 31, 2023, the Company revenues from Verified software license were approximately $186,000 compared to approximately $157,000 for the year ended December 31, 2022. Verified software license revenue increased as we acquired new customers.

During the year ended December 31, 2023, Legacy authentication services revenues were approximately $4,000 compared to approximately $371,000 for the year ended December 31, 2022. Revenue from Legacy authentication services dropped significantly due to one large customer, that decommissioned a legacy product offering in 2022 and another large customer that had a one-off order in 2022.

General and administrative expenses

During the year ended December 31, 2023, general and administrative expenses decreased by approximately $6.8 million compared to the year ended December 31, 2022, principally due to lower stock-based compensation expenses as well as the Company’s cost saving measures resulting in lower headcount costs and lower third-party vendor costs.

Research and development expenses

During the year ended December 31, 2023, research and development expenses decreased by approximately $3.5 million compared to the year ended December 31, 2022, principally due to lower stock-based compensation expenses as well as the Company’s cost saving measures resulting in lower headcount costs and lower third-party vendor costs.

Depreciation and amortization expense

During the year ended December 31, 2023, depreciation and amortization decreased by approximately $0.5 million compared to the year ended December 31, 2022, as the Company reduced the value of certain legacy business assets in 2022.

Interest expense

Interest expense during the year ended December 31, 2023 compared to the year ended December 31, 2022 decreased by $0.3 million, principally due to the exchange of Convertible Notes for common stock in May 2023.

Discontinued operations

The Board of Directors of authID considers it in the best interests of the Company to focus its business activities on providing biometric authentication products and services by means of our proprietary Verified platform. Accordingly, on May 4, 2022, the Board approved a plan to exit from certain non-core activities comprising the MultiPay correspondent bank, payments services in Colombia and the Cards Plus cards manufacturing and printing business in South Africa.

Cards Plus business in South Africa

On August 29, 2022, the Company completed the sale of Cards Plus for a price of $300,000 of which $150,000 was received and the remaining balance of $150,000 was recorded in other current asset, less $3,272 in costs to sell, and recognized a loss of $188,247 from the transaction. While the Company and Cards Plus continue to actively pursue payment of the remaining balance of $150,000, which is subject to regulatory approval, management re-evaluated the likelihood of recovery and recorded an allowance for doubtful account during the 3 months ending September 30, 2023 related to the collection of the receivable.

MultiPay business in Colombia

The Company exited the MultiPay business in Colombia but still maintains an authID customer support and operations team in Bogota, which performs essential functions to support the global operations of our Verified product.

In June 2023, MultiPay finalized the sale of the Company’s proprietary software to its major customer for approximately $96,000. As a result, the Company recognized a gain of approximately $216,000 which included the release of a foreign currency translation gain of approximately $155,000.

The financial statements of Cards Plus and MultiPay had been classified as discontinued operations as of December 31, 2023 and 2022, under generally accepted accounting principles.

Ukraine & Middle East

The war in Ukraine and the Middle East may impact the Company and its operations in a number of different ways, which are yet to be fully assessed and are therefore uncertain. The Company’s principal concern is for the safety of the personnel who support from those regions. The Company works with third party sub-contractors for outsourced services, including software engineering and development, some of whom are based in Eastern Europe. The Company also works with outsourced engineers and developers and third-party providers in other parts of the world, including the United States, Europe, India, and Latin America. While the continuing impact of this conflict and the response of the United States and other countries to it by means of trade and economic sanctions, or other actions is still unknown, it could disrupt our ability to work with certain contractors. The Company has taken steps to diversify its sub-contractor base, which may in the short term give rise to additional costs and delays in delivering software and product upgrades.

The uncertainty impacting and potential interruption in energy and other supply chains resulting from military hostilities in Europe and the Middle East and the response of the United States and other countries to it by means of trade and economic sanctions, or other actions, may give rise to increases in costs of goods and services generally and may impact the market for our products as prospective customers reconsider additional capital expenditure, or other investment plans until the situation becomes clearer. On the other hand, the threat of increased cyber-attacks from multiple threat actors, including state-sponsored organizations may prompt enterprises to adopt additional security measures such as those offered by the Company.

For so long as the hostilities continue and perhaps even thereafter as the situation in Europe and the Middle East unfolds, we may see increased volatility in financial markets and a flight to safety by investors, which may impact our stock price and make it more difficult for the Company to raise additional capital at the time when it needs to do so, or for financing to be available upon acceptable terms. All or any of these risks separately, or in combination could have a material adverse effect on our business, financial condition, results of operations, and cash flows.

Macro-Economic Conditions

The global economy has been undergoing a period of political and economic uncertainty and stock markets are experiencing high levels of volatility, and it is difficult to predict how long this uncertainty and volatility will continue. The continuing wars in Ukraine and the Middle East, inflationary pressures, rising energy prices and increases in interest rates have impacted the United States and other major economies and have created uncertainty regarding a possible recession. As a result, many businesses, especially in the technology sector have made significant cut-backs in expenditure, including reductions in force and investment freezes. Our sales and results are also impacted by the changes in levels of spending on identity verification, management and security methods, and thus, negative trends in the global economy and other factors which negatively impact such spending may negatively impact the growth of our revenue from those products.

Liquidity and Capital Resources

As of December 31, 2023, current assets were $10.9 million and current liabilities outstanding amounted to $1.7 million which resulted in net working capital of $9.2 million.

Net cash used by operating activities was $8.4 million for the year ended December 31, 2023 compared to $12.8 million in 2022. Cash used in operations for 2023 and 2022 was primarily the result of funding the business operations as the Company invested in people and product. However, the Company’s cost savings measures reduced the year over year levels.

Net cash generated/(used) in investing activities in 2023 and 2022 was approximately $75,000 and ($182,000) as the Company received proceeds from the sale of its discontinued businesses.

Net cash provided by financing activities for 2023 was approximately $15.4 million, compared to $10.2 million in 2022. Cash provided by financing activities in 2023 consisted primarily of the net proceeds from the sale of common stock in May 2023 and November 2023 and a $0.5 million initial drawdown net of debt issuance costs under the Company’s A&R Facility Agreement.

In 2024, the Company will continue to be opportunistic and judicious in raising additional funds to support its operations and investments as it creates a sustainable organization. There is no guarantee that such financing will be available if available on acceptable terms.

Our growth-oriented business plan to offer products to our customers will require continued capital investment. Research and development activities and technology deployment will require continued investment.

The Company projects that the current and past investments in technology and systems will lead to revenue expansion thereby reducing liquidity needs. However, to further implement its business plan and satisfy its working capital requirements, the Company will need to raise more capital. There is no guarantee that the Company will be able to raise additional equity or debt financing at acceptable terms, if at all. We expect that we will need additional funding in the 4th quarter of 2024.

There is no guarantee that our current business plan will not change, and because of such change, we will need additional capital to implement such business plan. Further, assuming we achieve our expected growth plan, of which there is no guarantee, we will need additional capital to implement growth beyond our current business plan. As a result of these factors, there is substantial doubt about the Company’s ability to continue as a going concern.

Description of Indebtedness

As described in Item 1A, (Risk Factors) the Company has a history of losses and may not be able to achieve profitability in the near term. The Company has not been able to achieve positive cash flows from operations and raised additional financing in 2023 and 2022 from the sale of equity and convertible notes.

As of December 31, 2023, the Company has a series of Senior Secured Convertible Notes outstanding for approximately $0.25 million due in March 2025.

See Notes 6 and 7 of the Consolidated Financial Statements for additional information associated with the credit facility and convertible notes payable.

Equity Financing

See Note 9 of the Consolidated Financial Statements for additional information associated with equity financing in 2023 and 2022.

2023 Common Stock Transactions

• Between May 23 and June 7, 2023, the Company entered into a securities purchase agreement with accredited investors (the “Purchase Agreement”), pursuant to which the Company agreed to issue and sell, in a public offering an aggregate of 1,113,828 shares (the “Registered Shares”) of the Company’s common stock and in a concurrent private placement 1,121,482 shares (the “PIPE Shares”) of Common Stock (the “May 2023 Offering”) at a per share price between $3.664 and $5.632 per share (or $4.00 if the purchaser is a director of the Company). The purchasers under the Purchase Agreement included Garchik and four directors of the Company, including the Chief Executive Officer and Chairman of the Board of Directors.
• On May 23, 2023, pursuant to a Securities Purchase Agreement, Mr. Garchik capitalized the outstanding principal balance of $900,000 under the Initial Promissory Note, into 245,634 shares of common stock, respectively.
• Between May 23 and June 7, 2023, the Company entered into an exchange agreement with certain holders (“Holders”) of the March 2022 Senior Secured Convertible Notes (the “Convertible Notes”) of the Company (the “Exchange Agreement”), pursuant to which the Company issued 2,348,347 shares (the “Exchange Shares”) of common stock to the Holders in exchange for the Holders’ Convertible Notes (the “Note Exchange”) at a per share price between $3.776 and $5.80 per share (or $4.12 if the Holder is a director, officer or insider of the Company.
• On November 20, 2023, authID Inc. (the “Company”) entered into a securities purchase agreement with accredited investors (the “November Purchase Agreement”), pursuant to which the Company agreed to issue and sell, in a registered offering (the “November Offering”) an aggregate of 1,574,990 shares of the Company’s common stock at a per share price of $6.00. The purchasers under the November Purchase Agreement included Stephen J. Garchik and three directors of the Company, including the Chief Executive Officer and Chairman of the Board of Directors.
• The Company issued 111,516 shares of common stock for approximately $388,000 of interest accrued under the Convertible Notes and Credit Facility.

2022 Common Stock Transactions

• On March 18 and March 21, 2022, the Company entered into Subscription Agreements (the “Subscription Agreements”) with an accredited investor and certain members of authID’s management team (the “PIPE Investors”), and, pursuant to the Subscription Agreements, sold to the PIPE Investors a total of 132,940 shares of our common stock at prices of $24.24 per share for an outside investor and $29.60 per share for the management investors (the “PIPE”). The aggregate gross proceeds from the PIPE are approximately $3.3 million.
• The Company issued a total of 3,562 shares of our common stock to the Note Investors as an additional origination fee.
• On March 21, 2022, the Company entered into a Facility Agreement with a current shareholder and noteholder of the Company, pursuant to which the shareholder agreed to provide the Company a $10.0 million unsecured standby letter of credit facility. Pursuant to the Credit Facility, the Company paid a facility commitment fee of 12,500 shares of our common stock with a fair market value of $24.24 per share upon the effective date of the Credit Facility.
• During the year ended December 31, 2022, a holder of a Convertible Note converted the full principal amount of $50,000 and accrued interest of $406 into 1,690 and 17 shares of our common stock, respectively.
• During the year ended December 31, 2022, the Company issued 59,981 shares of common stock for approximately $696,000 of interest related to the Convertible Notes. See Note 9 for details.
• Certain warrant, stock option and convertible note holders exercised their respective warrants and stock options and conversion right and were issued approximately 44,152 shares of our common stock.

Off-Balance Sheet Arrangements

We have no off-balance sheet financing arrangements.

Contractual Obligations

As of December 31, 2023, the Company had the following contractual obligations.

Evaluation of Disclosure Controls and Procedures

As of the end of the period covered by this Annual Report, our Chief Executive Officer and Chief Financial Officer performed an evaluation of the effectiveness of our disclosure controls and procedures as defined in Rules 13a-15 and 15d-15(e) of the Exchange Act. Based on the evaluation, the Chief Executive Officer and Chief Financial Officer concluded that, as of December 31, 2023, the Company’s disclosure controls and procedures are effective to ensure that the information required to be disclosed by the Company in the report that it files or submits under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms.

Management’s Report on Internal Control Over Financial Reporting

The Company’s management is responsible for establishing and maintaining adequate internal control over financial reporting for the Company, as defined in Rules 13a-15(f) and 15d-15(f) under the Securities Exchange Act of 1934, as amended. Our internal control over financial reporting is designed to provide reasonable, but not absolute, assurance regarding the reliability of financial reporting and the preparation of financial statements in accordance with U.S. accepted accounting principles. Our management, including the Chief Executive Officer and Chief Financial Officer, does not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent or detect all errors and all fraud. A control system, no matter how well-designed and operated, can provide only reasonable, not absolute, assurance that the control system’s objectives will be met. The design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Further, because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud, if any, have been detected and such evaluation is subject to the risks discussed in item 1A – Risk Factors of this Report.

The Company’s management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2023, using the criteria established in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on management’s assessment using the above criteria, management concluded that the Company maintained effective internal control over financial reporting as of December 31, 2023.

Material Weakness in Internal Control Over Financial Reporting

During the three months ended June 30, 2023, the Company identified a material weakness in its internal control over financial reporting related to the review of accounting treatment for the Convertible Notes exchange. The Convertible Note exchange transaction which gave rise to this issue (See Note 7 “Convertible Notes Payable”) was a complex and infrequent transaction, which required particular accounting treatment. The correct accounting treatment was not immediately identified by the Company, due to the Company’s limited resources available for advanced technical analysis and advice, similar to other companies of our size. The correct accounting treatment was identified and reflected prior to filing of the quarterly report on Form 10-Q for the quarter ended June 30, 2023 and no previously published financial statements were impacted by this issue.

We remediated this material weakness and put in place a process to undertake an ongoing review of the Company’s activities during each quarter to identify the potential complex accounting matters and, if necessary, to engage a professional certified public accounting advisory firm to review the proposed accounting treatment on these complex accounting matters that may arise in the future.

A material weakness is a deficiency, or combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the company’s annual or interim financial statements will not be prevented or detected on a timely basis.

Changes in Internal Control over Financial Reporting

During the last fiscal year, there have been no changes except as noted above in our internal control over financial reporting that occurred during our last fiscal year that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.