In the event of a cybersecurity incident or data breach, our company could be required to provide legal notifications and disclosures, and could suffer loss of business, severe reputational damage adversely affecting investor confidence, regulatory inquiries, investigations and orders, litigation, indemnity obligations, damages for contract breach, penalties and fines for violation of applicable laws or regulations, significant costs for remediation and other liabilities. For example, the loss of preclinical study or clinical trial data from completed or future preclinical studies or clinical trials could result in delays in our regulatory approval efforts and significantly increase our costs to recover or reproduce the data. To the extent that any disruption or security compromise or breach were to result in a loss or misappropriation of, or damage to, our data, systems, or applications, or inappropriate disclosure of confidential or proprietary information or other sensitive information, we could incur liability and the further development and commercialization of our product candidates could be delayed.
We have incurred and expect to incur significant expenses to prevent cybersecurity incidents and data breaches, including costs related to deploying additional personnel and protection technologies, training employees, and engaging third-party solution providers and consultants. Although we expend significant resources to create security protections that are designed to shield our confidential and/or proprietary information or other sensitive information, including customer data, against potential theft and security compromises or breaches, such measures cannot provide absolute security. Moreover, as we outsource more of our information systems to vendors and rely more on cloud-based information systems, the related security risks will increase, and we will need to expend additional resources to protect our technology and information systems.
Like other companies in our industry, we, and our third party vendors, have experienced and will continue to experience threats and cybersecurity incidents relating to our information technology systems and infrastructure. We remain at risk for future cybersecurity incidents and data breaches, including, without limitation, those that may occur as a result of third-party action, or wrongful conduct by insider employees or vendors or malfeasance and other causes. If, in the future, we experience a data breach or security incident, we could experience harm to our reputation, financial performance, and customer and vendor relationships. Further, we could experience possible legal notifications and disclosures, as well as litigation or regulatory investigations or actions by state and federal governmental authorities and non-U.S. authorities, including fines, penalties, and other legal and financial exposure and liabilities. Additionally, actual, potential or anticipated attacks or compromises may cause us to incur increasing costs, including costs to deploy additional personnel and protection technologies, train employees, conduct security incident investigation or remediation and engage third-party experts and consultants.
Our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations of liability in our contracts are sufficient to protect us from liabilities, damages, or claims related to our privacy and data security obligations. Further, although we maintain cyber liability insurance, this insurance may not provide adequate coverage against potential liabilities related to any experienced cybersecurity incident or breach.
Interruptions in the availability of server systems or communications with internet or cloud-based services, or failure to maintain the security, confidentiality, accessibility or integrity of data stored on such systems, could harm our business.
We rely upon a variety of internet service providers, third-party web hosting facilities and cloud computing platform providers to support our business. Failure to maintain the security, confidentiality, accessibility or integrity of data stored on or processed by such systems could result in interruptions in our operations, damage our reputation in the market, increase our service costs, cause us to incur substantial costs, subject us to liability for damages and/or fines, and divert our resources from other tasks, any one of which could materially adversely affect our business, financial condition, results of operations and prospects. If our security measures or those of our third-party data center hosting facilities, cloud computing platform providers, or third-party service partners, are breached, and unauthorized access is obtained to or there is misuse of our data or our information technology systems, we may incur significant legal and financial exposure and liabilities.
We also do not have control over the operations of the facilities of our cloud service providers and our third-party web hosting providers, and they also may be vulnerable to damage, security compromise or interruption from natural disasters, cybersecurity attacks, terrorist attacks, power outages and similar events or acts of misconduct. In addition, any changes in these providers’ service levels may adversely affect our ability to meet our requirements and operate our business.
Our use of new and evolving technologies, such as artificial intelligence, may present risks and challenges that can impact our business, including by posing cybersecurity and other risks to our confidential and/or proprietary information, including personal information, and as a result we may be exposed to reputational harm and liability.
We may use and integrate artificial intelligence (AI) into our business processes both in our own development and implementation of AI and through the adoption of commercially available tools. Use of this technology could pose cybersecurity, data privacy, IT, intellectual property, regulatory, legal, operational, competitive, reputational and other risks and challenges that could affect our business. Specifically, risks related to accuracy, bias, AI hallucinations, discrimination, harmful content, misinformation, fraud, scams, targeted attacks (including model poisoning or data poisoning), surveillance, data leakage, inequality, environmental harms, and other harms may flow from our development, use, or deployment of AI technologies.