UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

Form 10-K

(Mark one)

For the fiscal year ended December 31, 2023

or

For the transition period from to

Commission File Number: 001-36529

CareCloud, Inc.

(Exact name of registrant as specified in its charter)

(732) 873-5133

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☒

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐ No ☒

As of June 30, 2023, the aggregate market value of the registrant’s common stock held by non-affiliates of the registrant was approximately $30.4 million, based on the last reported trading price of the common stock on that date, as reported on the Nasdaq Global Market.

At March 19, 2024, the registrant had 16,118,492 shares of common stock, par value $0.001 per share, outstanding.

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the Proxy Statement for the Annual Meeting of Shareholders to be held on June 17, 2024 are incorporated by reference into Part III, Items 10, 11, 12, 13, and 14 of this Annual Report on Form 10-K.

Table of Contents

Forward-Looking Statements

Certain statements that we make from time to time, including statements contained in this Annual Report on Form 10-K, constitute “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended, or the Securities Act, and Section 21E of the Securities Exchange Act of 1934, as amended, or the Exchange Act. All statements other than statements of historical fact contained in this Annual Report on Form 10-K are forward-looking statements. These statements relate to anticipated future events, future results of operations or future financial performance. In some cases, you can identify forward-looking statements by terminology such as “may,” “might,” “will,” “shall,” “should,” “could,” “intends,” “expects,” “plans,” “goals,” “projects,” “anticipates,” “believes,” “seeks,” “estimates,” “forecasts,” “predicts,” “possible,” “potential,” “target,” or “continue” or the negative of these terms or other comparable terminology. Our operations involve risks and uncertainties, many of which are outside our control, and any one of which, or a combination of which, could materially affect our results of operations and whether the forward-looking statements ultimately prove to be correct. Forward-looking statements in this Annual Report on Form 10-K include, without limitation, statements reflecting management’s expectations for future financial performance and operating expenditures (including our ability to continue as a going concern, to raise additional capital and to succeed in our future operations), expected growth, profitability and business outlook, increased sales and marketing expenses, and the expected results from the integration of our acquisitions.

Forward-looking statements are only predictions, are uncertain and involve substantial known and unknown risks, uncertainties, and other factors that may cause our (or our industry’s) actual results, levels of activity or performance to be materially different from any future results, levels of activity or performance expressed or implied by these forward-looking statements. These factors include, among other things, the unknown risks and uncertainties that we believe could cause actual results to differ from these forward-looking statements as set forth under the heading, “Risk Factors” and elsewhere in this Annual Report on Form 10-K. New risks and uncertainties emerge from time to time, and it is not possible for us to predict all of the risks and uncertainties that could have an impact on the forward-looking statements, including without limitation, risks and uncertainties relating to:

Although we believe that the expectations reflected in the forward-looking statements contained in this Annual Report on Form 10-K are reasonable, we cannot guarantee future results, levels of activity, performance, or achievements. You should read this Annual Report on Form 10-K with the understanding that our actual future results, levels of activity, performance and events and circumstances may be materially different from what we currently expect. Except as required by law, we are under no duty to update or revise any of such forward-looking statements, whether as a result of new information, future events, or otherwise, after the date of this Annual Report on Form 10-K.

Summary of Risk Factors

The following is a summary of the principal risks and uncertainties that could materially adversely affect our business, financial condition and results of operations. You should read this summary together with the more detailed description of each risk factor contained in “Risk Factors” in Part 1, Item 1A below.

Risks Related to our Business

Risks Related to Our Acquisition Strategy

Regulatory Risks

Risks Related to Ownership of Shares of Our Common Stock

Risks Related to Ownership of Shares of Our Preferred Stock

PART I

Item 1. Business

Overview

CareCloud, Inc., (together with its consolidated subsidiaries, “CareCloud”, the “Company,” “we,” “us” and/or “our”) is a leading provider of technology-enabled services and solutions that redefine the healthcare revenue cycle management process. We provide technology-enabled revenue cycle management and a full suite of proprietary cloud-based solutions to healthcare providers, from small practices to enterprise medical groups, hospitals, and health systems throughout the United States. Healthcare organizations today operate in highly complex and regulated environments. Our suite of technology-enabled solutions helps our clients increase financial and operational performance, streamline clinical workflows, and improve the patient experience.

Our portfolio of proprietary software and business services includes: technology-enabled business solutions that maximize revenue cycle management and create efficiencies through platform agnostic AI-driven applications; cloud-based software that helps providers manage their practice and patient engagement while leveraging analytics to improve provider performance; digital health services to address value-based care and enable the delivery of remote patient care; healthcare IT professional services & staffing to address physician burnout, staffing shortages and leverage consulting expertise to transition into the next generation of healthcare; and, medical practice management services to assist medical providers with operating models and the tools needed to run their practice.

Our high-value business services, such as revenue cycle management, are often paired with our cloud-based software, premiere healthcare consulting and implementation services, and on-demand workforce staffing capabilities for high-performance medical groups and health systems nationwide.

Our technology-enabled business solutions can be categorized as follows:

Our medical practice management solutions include:

The modernization of the healthcare industry, along with the increased adoption of value-based care models, is transforming nearly every aspect of a healthcare organization from policy to providers; clinical care to member services, devices to data, and ultimately the quality of the patient’s experience as a healthcare consumer.

Our solutions enable clients to increase financial and operational performance, streamline clinical workflows, get better insight through data, and make better business and clinical decisions, resulting in improvement in patient care and collections while reducing administrative burdens and operating costs.

We create elegant, user-friendly applications that solve many of the challenges facing healthcare organizations. We partner with organizations to develop customized, best-in-class solutions to solve their specific challenges while ensuring they also meet future regulatory and organizational requirements and market demands.

Market Overview

In June 2023, Centers for Medicare & Medicaid Services (“CMS”)¹ reported that over 2022-2031 the average National Health Expenditures (“NHE”) growth (5.4%) is projected to outpace that of average Gross Domestic Product (“GDP”) growth (4.6%) resulting in an increase in the health spending share of GDP from 18.3% in 2021 to 19.6% in 2031.

Additionally, analysts from The Brainy Research have estimated the U.S. Healthcare IT industry market to be approximately $105 billion in 2022 and is projected to reach $370.5 billion by 2032, growing at a 13.4% compound annual growth rate (“CAGR”).² Its largest sub-segment, RCM, is reported to be nearly $140 billion in 2022 and is estimated to grow at a 10% CAGR through 2030 according to Grand View Research.³ The U.S. EHR market is expected to be valued at $40 billion by 2030 with a CAGR of 12.5% from 2022 to 2030.⁴ The Telehealth market is estimated to be approximately $30 billion in 2022 with a CAGR of 23% from 2023 to 2030.⁵

Our Market Opportunity

Considering the evolving needs of our clients and the market, we believe we continue to be uniquely positioned to provide tremendous value and support for our clients. We believe there are dynamics at play that are significantly increasing the market need for our products and services. These market dynamics present opportunities for us to innovate and focus on impacting the day-to-day challenges our clients face as they work to provide excellent patient care, all while managing and expanding their businesses.

Medical practices and health systems alike are transitioning to increasingly complex reimbursement delivery models. As an example, the industry has been gradually shifting from fee-for-service payments to value-based/clinical outcomes-based care payments. This transition comes in a multitude of forms including reimbursement models associated with quality incentive programs, capitation payments models, bundled payments, and at-risk payer contracts.

There are continuing legislative and regulatory reform efforts, as well as growing compliance requirements mandated by the federal government and other governmental agencies. This ever-evolving regulatory landscape increases the pressure placed on healthcare organizations to stay abreast of these changes and to remain in compliance. The complexities associated with emerging reimbursement models and continued government regulations present opportunities for us as healthcare organizations seek out partners that offer a broad range of software and services to help meet their needs.

Our clients also have to account for the rising cost of health insurance, changes in health benefit plan design, and the impact that these factors have had on the increase in patient consumerism. Patients are seeking lower cost care in response to insurance carriers shifting more of the cost burden onto patients, causing healthcare organizations to reconsider the full patient experience. Healthcare providers now need to think more deeply about patient expectations. This is especially true as COVID-19 has reshaped the sector and accelerated its digital transformation.

Further compounding the burden of rising health insurance cost is the ongoing shift in patient demographics. As the national population ages into Medicare eligibility, the reimbursement received for procedures and services provided to these patients decreases. Medicaid is now the largest insurance product in the country and continues to grow. Reimbursements overall are not increasing at the same rate as costs, driving providers and practices to search for increased efficiencies and savings wherever possible.

Strategic-thinking healthcare organizations across the country are aggressively addressing these new realities and are finding opportunities for growth and expansion. We see medical groups across the country and within all specialties and market segments, growing through consolidation and investing in their businesses at an accelerated pace. This is also leading clients to focus on delivering emerging and disruptive care delivery settings. Much of this change is driving executives and leaders to assess their IT and data strategy and reevaluate their adoption of next generation healthcare solutions. The healthcare industry has seen tremendous change over the last three years, with COVID-19 ushering in a new era of digital health. Our study of the evolving needs of our clients leads us to believe that there will be an increasing need for our services and products and emerging needs for the products and services that we are already developing.

1 CMS – National Health Expenditure Historical

2 The Brainy Research – US Healthcare IT Market

3 U.S. Revenue Cycle Management Market Size Report, 2030 (grandviewresearch.com)

4 US Electronic Health Record Market Set to Surge to $39.993 Billion by 2030 with Notable CAGR of 12.5% (yahoo.com)

5 Healthcare IT Market in US Size, Share, Trends | Report 2030 (alliedmarketresearch.com)

These trends will fuel growth over the next several years. In order for healthcare organizations to continue to succeed, these new realities require robust solutions and careful execution. Legacy tools that once powered these healthcare organizations are insufficient to support their growth and long-term strategies. Our solutions facilitate the transition needed by these organizations to adopt the next generation of healthcare solutions to drive their future growth. Our expansive product and services portfolio enables us to displace competitors and gain market share across a vast array of specialties, care settings and customer segments across the country.

Our Business Strategy

The Company is focused on reducing costs, returning to profitability and generating positive free cash flow in order to resume paying the Preferred Stock dividends. CareCloud is a market leading provider of technology-enabled and integrated end-to-end Software-as-a-Service (“SaaS”) solutions that help our clients with the business of medicine. Our mission is to redefine the next generation of technology-enabled revenue cycle solutions. To that end, we invest significant resources toward improving our current offerings and building new solutions that help transform our clients’ organizations with next generation technology. We expect to have increased software capabilities and offer additional complementary business services that will address the needs of the ever-changing, dynamic market conditions of the U.S. healthcare space.

To achieve our objective and mission, we employ the following strategies:

Providing comprehensive next generation RCM solutions to medical practices and hospitals. We believe that healthcare providers are in need of an integrated, end-to-end solution and a flexible service delivery model to manage the different facets of their businesses, from care delivery software, to claim submission, financial reporting, and data analytics.

Enhancing our solutions. We intend to continue to enhance our solutions with new functionality and features leveraging our own teams, partnerships, and acquisitions. We will continue to dedicate resources to research and development to bolster our existing applications and drive new opportunities for innovation on behalf of our clients.

Expanding into new categories/specialties/markets. We are focused on always reassessing the market landscape, seeking new opportunities to meet the needs of the clients in our addressable market with our products and services. This means developing new and exciting technologies, launching new services, entering new specialties that can leverage our solutions and enabling growth for our clients or expanding into adjacent markets that we may not serve today.

Relentlessly driving organic growth to expand our client base. We believe the market for our expansive value proposition is underserved, and we will continue to make investments to create awareness of our brand, optimize our sales and implementation lifecycles, and capture greater market share. We are investing in our sales and marketing activities, partners, and products to expand our client footprint.

Extending our relationships with existing clients. Our CareCloud Wellness offerings have been well-received allowing us to generate additional recurring revenue from existing clients. We intend to increase the number of SaaS subscription licenses and services purchased by our current clients as they use our solutions. We are also focused on converting SaaS clients into higher revenue per client offerings such as revenue cycle management and other business services. This expansion of services typically represents a 3-4x increase in overall revenue per client.

Leveraging significant cost advantages provided by our technology and global workforce. Our unique business model includes our cloud-based software and a cost-effective offshore workforce located in our Offshore Offices. We believe this operating model provides us with significant cost advantages compared to other revenue cycle management companies and it allows us to significantly reduce the operational costs of the companies we acquire.

Developing our partner ecosystem. We offer an integrated partner ecosystem providing healthcare organizations access to a variety of innovative solutions that complement our suite of products and services. Our partner ecosystem is a comprehensive collection of apps, services, specialty solutions, and clinical connections. This is an integral part of our vision to be the premier cloud-based platform for healthcare.

As the market continues to evolve, we may choose to build or partner for some or all of these solutions in order to broaden our product set. In the longer term, we also envision how this will allow for frictionless flow of information and care-coordination capabilities between medical providers and their patients.

Additionally, given the nature of our large data repository, which is ever-growing as each patient encounter is captured, opportunities exist to potentially monetize this data in an identified manner to help improve clinical outcomes and other financial metrics.

Our Offerings

Our solutions are designed to systematically drive clinical quality and patient outcomes, streamline staff and provider workflows and reimbursements, as well as support different settings of care and healthcare models. Our product and service strategy is simple: we build products and deliver solutions that meet our clients’ needs.

Through the combination of our continued development of next generation solutions and strategic acquisition strategy, we provide comprehensive products and services tailored for small medical practices, large physician groups and health systems, as well as industry partners. We continue to optimize our technology offerings by integrating them into our application ecosystem and with other industry solutions. The interconnectivity of our solutions will continue driving a consolidation of brands within our product architecture, aimed at improving the awareness and alignment of our products to targeted industry segments.

Our robust product and service portfolio allows us to be both methodical and nimble across the healthcare organizations and market segments we serve while providing a framework to create solution sets for the market today and more importantly, for what our clients will need tomorrow.

We believe that our fully integrated solutions uniquely address the challenges in the industry. In most cases the standard fee for our complete, integrated, end-to-end solution is based upon a percentage of each client’s healthcare-related revenues, with a monthly minimum fee, plus a nominal one-time setup fee, which is competitively priced.

Research and Development

Our research and development focuses are on enhancing and expanding our service offerings while ensuring all offerings meet regulatory compliance standards. We continually update our software and technology infrastructures, regularly execute releases of new software enhancements, and adapt our offerings to better serve our medical group and health system clients confronting rapid changes in the healthcare market space.

Our agile software development methodology is designed to ensure that each software release is properly designed, built, tested, and released. Our product, engineering, quality assurance, and development operations teams are located both onshore and offshore. We complement our internal efforts with services from third-party technology providers for infrastructure, healthcare ecosystem connectivity needs such as prescriptions, clinical laboratories, or specific application requirements.

We also employ product management, user experience, and product marketing personnel who work continually on improvements to our products and services design.

Clients

We estimate that as of December 31, 2023, we provided software and services to approximately 40,000 providers (which we define as physicians, nurses, nurse practitioners, therapists, physician assistants and other clinicians that render bills for their services) practicing in approximately 2,600 independent medical practices and hospitals, representing 80 specialties and subspecialties in 50 states allowing for low revenue concentration risk.

In addition, we served approximately 150 clients that are not medical practices, but are primarily service organizations who serve the healthcare community. The foregoing numbers include clients leveraging any of our products or services and are based in part upon estimates where the precise number of practices or providers is unknown.

We service clients ranging from small practices to large groups and health systems. Our clients span from the single doctor independent medical practices to large medical groups, including an enterprise specialty-specific healthcare organization with more than 3,000 providers located across multiple states. We also service large major academic medical institutions, small and large hospitals and health systems with service areas covering millions of patients.

Sales and Marketing

Over the past several years, organic growth has been a company-wide focus. We have developed sales and marketing capabilities aimed at driving the growth of our client base, including small medical practices, large groups, and health systems. We expect to expand by selling our complete suite of software and services to new clients and up-selling additional solutions into our existing client base. We have a direct sales force including team members focused on specific functional or divisional areas, such as CareCloud Force (workforce augmentation) and medSR (healthcare IT consulting). This direct sales force is supplemented by offshore staff who support our sales and marketing efforts 24 hours per day. In addition, our direct sales are augmented through our partner initiatives and marketing campaigns. We continue to leverage and optimize various digital channels to present our solutions, identify national events to demonstrate our integrated capabilities and expand our participation in thought leadership and social communications to connect with the healthcare community.

Our Growth Levers

We believe that we are in a good position to grow through organic growth and partnerships.

Organic Growth and Direct Sales

We have organized our sales force into different segments to promote the respective products and services for that segment and best address our clients’ needs and our markets. With this design, our sales team can address a client’s specific needs, whether a new client is seeking our products or services for the first time, or a current client is in need of additional solutions.

Our marketing team operates in support of our sales force and provides specialized demand generation capabilities for sales efforts, product marketing to align solutions and segments, customer communication and upselling initiatives, and drives a national tradeshow strategy to showcase our brand. Our sales approach is consultative in nature for most of our offerings, which generally includes an analysis based on a prospective client’s needs, crafting service proposals, and negotiating contracts that culminate in the commencement of services.

Our go-to-market strategy is designed to meet our customers’ needs. Our vast array of products and services allow us to craft solutions that can meet our customers’ unique needs within a specific product category, client segment, or both.

Growth through Partnerships

In addition to our direct sales force, we maintain business relationships with third parties that utilize, promote, or support our sales or services within specific industries or geographic regions. Some of these partners are customers through CareCloud Force and others are more traditional channel partners who help promote our solutions. We believe we can further accelerate organic growth through industry participants, whereby we utilize them as channel partners to offer integrated solutions to their clients. We have entered into such engagements with industry participants, and developed application interfaces with numerous EHR systems, together with device and lab integration to support these relationships.

Competition

The market for RCM, practice management, EHR solutions, and related services is highly competitive, and we expect competition to increase in the future. We face competition from other providers of both integrated and stand-alone RCM providers, practice management, and EHR solutions, including competitors who utilize a web-based platform and providers of locally installed software systems.

Many of our competitors have longer operating histories, greater brand recognition and greater financial marketing. We also compete with various regional RCM companies, some of which may continue to consolidate and expand into broader markets. We expect that competition will continue to increase as a result of incentives provided by various governmental initiatives, and consolidation in both the information technology and healthcare industries. Large groups and health systems that have grown through consolidation often realize economies of scale by establishing billing and management offices to perform many of the services we offer themselves. In addition, our competitive edge could be diminished or completely lost if our competition develops similar offshore operations in Pakistan or other countries, such as India and the Philippines, where labor costs are lower than those in the U.S. (although higher than in Pakistan). Pricing pressures could negatively impact our margins, growth rate and market share.

We believe we have a competitive advantage, as we are able to deliver our industry-leading solutions at competitive prices because we leverage a combination of our proprietary software, which automates our workflows and increases efficiency, together with a global team that includes more than 300 experienced health industry experts onshore. These experts are supported by our highly educated and specialized offshore workforce of approximately 3,200 team members at labor costs that we believe are approximately one-tenth the cost of comparable U.S. employees.

Our unique business model has allowed us to become a leading consolidator in our industry sector, gaining us a reputation for acquiring and positively transforming distressed competitors into an accretive acquisition.

Employees

Including the employees of our subsidiaries, as of December 2023, the Company employed approximately 3,600 people worldwide on a full-time basis. Approximately 71% of our employees are focused on service and client delivery functions, approximately 10% are assigned to research and development, and approximately 2% are engaged in sales and marketing. The balance of the employees is classified as general and administrative, which includes support staff to maintain our offshore offices, a function that many businesses in other geographies might choose to outsource. We also utilize the services of a small number of part-time employees. In addition, all officers of the Company work on a full-time basis. During 2024, we anticipate further reducing our employee count.

Voting Rights of Our Directors, Executive Officers, and Principal Stockholders

As of December 31, 2023, approximately 38% of both the shares of our common stock and voting power of our common stock are held by our directors and executive officers. Therefore, they have the ability to control the outcome of matters submitted to our stockholders for approval, including the election of our directors, as well as the overall management and direction of our Company.

Corporate Information

We were incorporated in Delaware on September 28, 2001, under the name Medical Transcription Billing, Corp., and legally changed our name to MTBC, Inc. in February 2019. On March 29, 2021, we legally changed the name of the Company to CareCloud, Inc. Our principal executive offices are located at 7 Clyde Road, Somerset, New Jersey 08873, and our telephone number is (732) 873-5133. Our website address is www.CareCloud.com. Information contained on, or that can be accessed through, our website is not incorporated by reference into this Annual Report on Form 10-K, and you should not consider information on our website to be part of this document.

CareCloud.com, CareCloud, MTBC, A Unique Healthcare IT Company, and other trademarks and service marks of CareCloud appearing in this Annual Report on Form 10-K are the property of CareCloud. Trade names, trademarks and service marks of other companies appearing in this Annual Report on Form 10-K are the property of their respective holders.

We are a smaller reporting company. As a smaller reporting company, we may take advantage of specified reduced reporting requirements and are relieved of certain other significant requirements that are otherwise generally applicable to public companies. As a smaller reporting company, we have reduced disclosure obligations regarding executive compensation in our Annual Report, periodic reports and proxy statements and providing only two years of audited financial statements in our Annual Report and our periodic reports. This year the Company is not required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act of 2002, as amended. The Company is a non-accelerated filer.

Where You Can Find More Information

Our website, which we use to communicate important business information, can be accessed at: www.CareCloud.com. We make our Annual Reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and all amendments to those reports available free of charge on or through our website as soon as reasonably practicable after such material is electronically filed with or furnished to the Securities and Exchange Commission (“SEC”). Materials we file with or furnish to the SEC may also be read and copied at the SEC’s Public Reference Room at 100 F Street, NE, Washington, D.C. 20549. Information on the operation of the Public Reference Room may be obtained by calling the SEC at 1-800-SEC-0330. Also, the SEC’s website (www.sec.gov) contains reports, proxy and information statements, and other information that we file electronically with the SEC.

Item 1A. Risk Factors

Risks Related to Our Business

We operate in a highly competitive industry, and our competitors may be able to compete more efficiently or evolve more rapidly than we do, which could have a material adverse effect on our business, revenue, growth rates and market share.

The market for revenue cycle management and healthcare IT solutions is highly competitive, and we expect competition to increase in the future. We face competition from other providers of both integrated and stand-alone practice management, EHR and RCM solutions, including competitors who utilize a web-based platform and providers of locally installed software systems. Our competitors include larger healthcare IT companies, such as athenahealth, Inc., eClinicalWorks, Greenway Medical Technologies, Inc., NextGen, R1 RCM and Veradigm, all of which may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, regulations or customer needs and requirements. Many of our competitors have longer operating histories, greater brand recognition and greater financial marketing and other resources than us. We also compete with various regional RCM companies, some of which may continue to consolidate and expand into broader markets. We expect that competition will continue to increase as a result of incentives provided by the Health Information Technology for Economic and Clinical Health (“HITECH”) Act, and consolidation in both the information technology and healthcare industries. Competitors may introduce products or services that render our products or services obsolete or less marketable. Even if our products and services are more effective than the offerings of our competitors, current or potential customers might prefer competitive products or services to our products and services. In addition, our competitive edge could be diminished or completely lost if our competition develops similar offshore operations in Pakistan or other countries, such as India and the Philippines, where labor costs are lower than those in the U.S. (although higher than in Pakistan). Pricing pressures could negatively impact our margins, growth rate and market share.

In order to operate more efficiently, control costs and improve profitability, we incurred $645,000 of restructuring costs in 2023, primarily consisting of severance and separation costs associated with the optimization of the Company’s operations and profitability improvements. We expect to incur approximately an additional $250,000 of restructuring costs in 2024. There can be no assurance that these actions will achieve their intended benefits.

If we are unable to successfully introduce new products or services or fail to keep pace with advances in technology, we would not be able to maintain our customers or grow our business, which will have a material adverse effect on our business.

Our business depends on our ability to adapt to evolving technologies and industry standards and upgrade existing products and introduce new products and services accordingly. If we cannot adapt to changing technologies and industry standards, including changing requirements of third-party applications and software and meet the requirements of our customers, our products and services may become obsolete, and our business would suffer significantly. Because both the healthcare industry and the healthcare IT technology market are constantly evolving, our success will depend, in part, on our ability to continue to enhance our existing products and services, develop new technology that addresses the increasingly sophisticated and varied needs of our customers, respond to technological advances and emerging industry standards and practices on a timely and cost-effective basis, educate our customers to adopt these new technologies, and successfully assist them in transitioning to our new products and services. The development of our proprietary technology entails significant technical and business risks. We may not be successful in developing, using, marketing, selling, or maintaining new technologies effectively or adapting our proprietary technology to evolving customer requirements, emerging industry standards or changing third party applications, and, as a result, our business and reputation could materially suffer. We may not be able to introduce new products or services on schedule, or at all, or such products or services may not achieve market acceptance or existing products or services may cease to function properly. A failure by us to timely adapt to ever changing technologies or our failure to regularly upgrade existing or introduce new products or to introduce these products on schedule could cause us to not only lose our current customers but also fail to attract new customers.

The continued success of our business model is heavily dependent upon our offshore operations, and any disruption to those operations will adversely affect us.

The majority of our operations, including the development and maintenance of our web-based platform, our customer support services and medical billing activities, are performed by our highly educated workforce of approximately 3,200 employees in our Offshore Offices. Approximately 98% of our offshore employees are in our Pakistan Offices and our remaining employees are located at our smaller offshore operation center in Sri Lanka. The performance of our operations in our Pakistan Offices, and our ability to maintain our Offshore Offices, is an essential element of our business model, as the labor costs where our Pakistan Offices are located are substantially lower than the cost of comparable labor in India, the United States and other countries, and allows us to competitively price our products and services. Our competitive advantage will be greatly diminished and may disappear altogether if our operations in our Pakistan Offices are negatively impacted.

Pakistan and Sri Lanka have in the past experienced and could in the future continue to experience periods of political and social unrest, war and acts of terrorism. Our operations in our offshore locations may be negatively impacted by these and a number of other factors, including currency fluctuations, cost of labor and supplies, power grid and infrastructure issues, vandalism, and changes in local law, as well as laws within the United States relating to these countries. Client mandates or preferences for onshore service providers may also adversely impact our business model. Our operations in our Offshore Offices may also be affected by trade restrictions, such as tariffs or other trade controls. If we are unable to continue to leverage the skills and experience of our highly educated workforce, particularly in our Pakistan Offices, we may be unable to provide our products and services at attractive prices, and our business would be materially and negatively impacted or discontinued.

We believe that the labor costs in our Offshore Offices are approximately 9% of the cost of comparably educated and skilled workers in the U.S. If there were potential disruptions in any of these locations, they could have a negative impact on our business.

Our offshore operations expose us to additional business and financial risks which could adversely affect us and subject us to civil and criminal liability.

The risks and challenges associated with our operations outside the United States include laws and business practices favoring local competitors; compliance with multiple, conflicting and changing governmental laws and regulations, including employment and tax laws and regulations; and fluctuations in foreign currency exchange rates. Foreign operations subject us to numerous stringent U.S. and foreign laws, including the Foreign Corrupt Practices Act (“FCPA”), and comparable foreign laws and regulations that prohibit improper payments or offers of payments to foreign governments and their officials and political parties by U.S. and other business entities for the purpose of obtaining or retaining business. Safeguards we implement to discourage these practices may prove to be less than effective and violations of the FCPA and other laws may result in severe criminal or civil sanctions, or other liabilities or proceedings against us, including class action lawsuits and enforcement actions from the SEC, Department of Justice and overseas regulators.

We may be adversely affected by global climate change or by legal, regulatory, or market responses to such change.

The long-term effects of climate change are difficult to predict and may be widespread. The impacts may include physical risks (such as severe rains and flooding as a result of climate change that has been experienced in Pakistan), social and human effects (such as population dislocations or harm to health and well-being), compliance costs and transition risks (such as regulatory or technology changes), and other adverse effects. The effects could impair, for example, the availability and cost of certain products and energy (including utilities), which in turn may impact our ability to procure goods or services required for the operation of our business at the quantities and levels we require. We may bear losses incurred as a result of, for example, physical damage to, or destruction of, our facilities (such as our operation centers), and business interruption due to weather events that may be attributable to climate change. These events and impacts could materially adversely affect our business operations, financial position, or results of operation.

Changes in the healthcare industry could affect the demand for our services and may result in a decrease in our revenues and market share.

As the healthcare industry evolves, changes in our customer base may reduce the demand for our services, result in the termination of existing contracts, and make it more difficult to negotiate new contracts on terms that are acceptable to us. For example, the current trend toward consolidation of healthcare providers may cause our existing customer contracts to terminate as independent practices are merged into hospital systems or other healthcare organizations. Such larger healthcare organizations may have their own practice management, and EHR and RCM solutions, reducing demand for our services. If this trend continues, we cannot assure you that we will be able to continue to maintain or expand our customer base, negotiate contracts with acceptable terms, or maintain our current pricing structure, which would result in a decrease in our revenues and market share.

If providers do not purchase our products and services or delay in choosing our products or services, we may not be able to grow our business.

Our business model depends on our ability to sell our products and services. Acceptance of our products and services may require providers to adopt different behavior patterns and new methods of conducting business and exchanging information. Providers may not integrate our products and services into their workflow and may not accept our solutions and services as a replacement for traditional methods of practicing medicine. Providers may also choose to buy our competitors’ products and services instead of ours. Achieving market acceptance for our solutions and services will continue to require substantial sales and marketing efforts and the expenditure of significant financial and other resources to create awareness and demand by providers. If providers fail to broadly accept our products and services, our business, financial condition and results of operations will be adversely affected.

If the revenues of our customers decrease, or if our customers cancel or elect not to renew their contracts, our revenue will decrease.

Under most of our customer contracts, which include RCM, we base our charges on a percentage of the revenue that our customer collects through the use of our services. Many factors may lead to decreases in customer revenue, including:

As a result of our variable sales and implementation cycles, we may be unable to recognize revenue from prospective customers on a timely basis and we may not be able to offset expenditures.

The sales cycle for our services can be variable, typically ranging from two to four months from initial contact with a potential customer to contract execution to six to twelve months to rollout services which require each patient to participate. During the sales cycle, we expend time and resources in an attempt to obtain a customer without recognizing revenue from that customer to offset such expenditures. Our implementation cycle is also variable, typically ranging from two to four months from contract execution to completion of implementation. Each customer’s situation is different, and unanticipated difficulties and delays may arise as a result of a failure by us or by the customer to meet our respective implementation responsibilities. During the implementation cycle, we expend substantial time, effort, and financial resources implementing our services without recognizing revenue. Even following implementation, there can be no assurance that we will recognize revenue on a timely basis or at all from our efforts. In addition, cancellation of any implementation after it has begun may involve loss to us of time, effort, and expenses invested in the canceled implementation process, and lost opportunity for implementing paying customers in that same period of time.

We are required to collect sales and use taxes on certain products and services we sell in certain jurisdictions. We may be subject to liability for past sales and incur additional related costs and expenses, and our future sales may decrease.

We may lose sales or incur significant expenses should states be successful in imposing additional state sales and use taxes on our products and services. A successful assertion by one or more states that we should collect sales or other taxes on the sale of our products and services that we are currently not collecting could result in substantial tax liabilities for past sales, decrease our ability to compete with healthcare IT vendors not subject to sales and use taxes, and otherwise harm our business. Each state has different rules and regulations governing sales and use taxes, and these rules and regulations are subject to varying interpretations that may change over time. We review these rules and regulations periodically and, when we believe that our products or services are subject to sales and use taxes in a particular state, we voluntarily approach state tax authorities in order to determine how to comply with their rules and regulations. We cannot assure you that we will not be subject to sales and use taxes or related penalties for past sales in states where we believe no compliance is necessary.

If the federal government were to impose a tax on imports or services performed abroad, we might be subject to additional liabilities. At this time, there is no way to predict whether this will occur or estimate the impact on our business.

Vendors of products and services like ours are typically held responsible by taxing authorities for the collection and payment of any applicable sales and similar taxes. If one or more taxing authorities determine that taxes should have, but have not, been paid with respect to our products or services, we may be liable for past taxes in addition to taxes going forward. Liability for past taxes may also include very substantial interest and penalty charges. Nevertheless, customers may be reluctant to pay back taxes and may refuse responsibility for interest or penalties associated with those taxes. If we are required to collect and pay back taxes and the associated interest and penalties, and if our customers fail or refuse to reimburse us for all or a portion of these amounts, we will have incurred unplanned expenses that may be substantial. Moreover, imposition of such taxes on our products and services going forward will effectively increase the cost of those products and services to our customers and may adversely affect our ability to retain existing customers or to gain new customers in the states in which such taxes are imposed.

We may also become subject to tax audits or similar procedures in states where we already pay sales and use taxes. The incurrence of additional accounting and legal costs and related expenses in connection with, and the assessment of, taxes, interest, and penalties as a result of audits, litigation, or otherwise could be materially adverse to our current and future results of operations and financial condition.

If we lose the services of Mahmud Haq as Executive Chairman, A. Hadi Chaudhry as Chief Executive Officer and President, or other members of our management team, or if we are unable to attract, hire, integrate and retain other necessary employees, our business would be harmed.

Our future success depends in part on our ability to attract, hire, integrate and retain the members of our management team and other qualified personnel. In particular, we are dependent on the services of Mahmud Haq, our founder, principal stockholder and Executive Chairman, and A. Hadi Chaudhry, our Chief Executive Officer and President. Mr. Haq is instrumental in managing our offshore operations in our Pakistan Offices and coordinating those operations with our U.S. activities. The loss of Mr. Haq, who would be particularly difficult to replace, could negatively impact our ability to effectively manage our cost-effective workforce in our Pakistan Offices, which enables us to provide our products and solutions at attractive prices. Our future success also depends on the continued contributions of our other executive officers and certain key employees, each of whom may be difficult to replace, and upon our ability to attract and retain additional management personnel. Competition for such personnel is intense, and we compete for qualified personnel with other employers. We may face difficulty identifying and hiring qualified personnel at compensation levels consistent with our existing compensation and salary structure. If we fail to retain our employees, we could incur significant expenses in hiring, integrating and training their replacements, and the quality of our services and our ability to serve our customers could diminish, resulting in a material adverse effect on our business.

We may be unable to adequately establish, protect or enforce our patents, trade secrets and other intellectual property rights and we may incur significant costs in enforcing our intellectual property rights.

Our patents, trademarks, trade secrets, copyrights, and other intellectual property rights are important assets to us. Various events outside of our control pose a threat to our intellectual property rights, as well as to our products, services, and technologies. For instance, any of our current or future intellectual property rights may be challenged by others or invalidated through administrative process or litigation. Any of our pending or future patent applications, whether or not being currently challenged, may not be issued with the scope of the claims we seek, if at all.

Our success depends in part upon our ability to establish, protect and enforce our patents, trade secrets and other intellectual property and proprietary rights. If we fail to establish, protect or enforce these rights, we may lose customers and important advantages in the market in which we compete. We rely on a combination of patent, trademark, copyright and trade secret law and contractual obligations to protect our key intellectual property rights, all of which provide only limited protection. Our intellectual property rights may not be sufficient to help us maintain our position in the market and our competitive advantages.

Trade secrets may not be protectable if not properly kept confidential. We strive to enter into non-disclosure agreements with our employees, customers, contractors and business partners to limit access to and disclosure of our proprietary information. However, the steps we have taken may not be sufficient to prevent unauthorized use of our customer information, technology, and adequate remedies may not be available in the event of unauthorized use or disclosure of our trade secrets and proprietary information. Our ability to protect the trade secrets of our acquired companies from disclosure by the former employees of these acquired entities may be limited by law in the jurisdiction in which the acquired company and/or former employee resides, and/or where the disclosure occurred, and this leaves us vulnerable to the solicitation of the customers we acquire by former employees of the acquired business that join our competitors.

Accordingly, despite our efforts, we may be unable to prevent third parties from using our intellectual property for their competitive advantage. Any such use could have a material adverse effect on our business, results of operations and financial condition. Monitoring unauthorized uses of and enforcing our intellectual property rights can be difficult and costly. Legal intellectual property actions are inherently uncertain and may not be successful, and may require a substantial amount of resources and divert our management’s attention.

We have taken efforts to protect our proprietary rights, including a combination of license agreements, confidentiality policies and procedures, confidentiality provisions in employment agreements, confidentiality agreements with third parties, and technical security measures, as well as our reliance on copyright, patent, trademark, trade secret and unfair competition laws. These efforts may not be sufficient or effective. For example, the secrecy of our trade secrets or other confidential information could be compromised by our employees or by third parties, which could cause us to lose the competitive advantage resulting from those trade secrets or confidential information. Unauthorized third parties may try to copy or reverse engineer portions of our products or otherwise infringe upon, misappropriate or use our intellectual property. We may not be able to discover or determine the extent of any unauthorized use of our proprietary rights. We may also conclude that, in some instances, the benefits of protecting our intellectual property rights may be outweighed by the expense.

In addition, our platforms incorporate “open source” software components that are licensed to us under various public domain licenses. Open source license terms are often ambiguous, and there is little or no legal precedent governing the interpretation of many of the terms of certain of these licenses. Therefore, the potential impact of such terms on our business is somewhat unknown. Further, some enterprises may be reluctant or unwilling to use cloud-based services, because they have concerns regarding the risks associated with the security and reliability, among other things, of the technology delivery model associated with these services. If enterprises do not perceive the benefits of our services, then the market for these services may not expand as much or develop as quickly as we expect, either of which would adversely affect our business, financial condition, or operating results.

Legal standards relating to the validity, enforceability and scope of protection of intellectual property rights are uncertain and still evolving. The laws of some foreign countries may not be as protective of intellectual property rights as those in the United States, and effective intellectual property protection may not be available in every country in which our products and services are distributed.

Any impairment of our intellectual property rights, or our failure to protect our intellectual property rights adequately, could give our competitors access to our technology and could materially and adversely impact our business and operating results. Any increase in the unauthorized use of our intellectual property could also divert the efforts of our technical and management personnel and result in significant additional expense to us, which could materially and adversely impact our operating results. Finally, we may be required to spend significant resources to monitor and protect our intellectual property rights, including with respect to legal proceedings, which could result in substantial costs and diversion of resources and could materially and adversely impact our business, financial condition and operating results.

Claims by others that we infringe or may infringe on their intellectual property could force us to incur significant costs or revise the way we conduct our business.

Our competitors protect their proprietary rights by means of patents, trade secrets, copyrights, trademarks and other intellectual property. We have not conducted an independent review of patents and other intellectual property issued to third parties, who may have patents or patent applications relating to our proprietary technology. We may receive letters from third parties alleging, or inquiring about, possible infringement, misappropriation or violation of their intellectual property rights. Any party asserting that we infringe, misappropriate or violate proprietary rights may force us to defend ourselves, and potentially our customers, against the alleged claim. These claims and any resulting lawsuit, if successful, could subject us to significant liability for damages and/or invalidation of our proprietary rights or interruption or cessation of our operations. Any such claims or lawsuit could:

Furthermore, during the course of litigation, confidential information may be disclosed in the form of documents or testimony in connection with discovery requests, depositions or trial testimony. Disclosure of our confidential information and our involvement in intellectual property litigation could materially adversely affect our business. Some of our competitors may be able to sustain the costs of intellectual property litigation more effectively than we can because they have substantially greater resources. In addition, any litigation could significantly harm our relationships with current and prospective customers. Any of the foregoing could disrupt our business and have a material adverse effect on our business, operating results and financial condition.

In addition, contentions by a third party such as a vendor or partner that we may pose a threat to their intellectual property can disrupt our ability to work with such party and/or our customers who rely upon that third party’s product or services. Withdrawal of participation by key vendors or partners would cause a disruption of services to our clients and a loss of customers, which could negatively affect our business and financial performance.

Current and future litigation against us could be costly and time-consuming to defend and could result in additional liabilities.

We may from time to time be subject to legal proceedings and claims that arise in the ordinary course of business, such as claims brought by current and former clients in connection with commercial disputes and employment claims made by our current or former employees. Claims may also be asserted by or on behalf of a variety of other parties, including government agencies, patients of our physician clients, stockholders, the sellers of the businesses that we acquire, or the creditors of the businesses we acquire. Any litigation involving us may result in substantial costs and may divert management’s attention and resources, which may seriously harm our business, overall financial condition, and operating results. Insurance may not cover existing or future claims, be sufficient to fully compensate us for one or more of such claims, or continue to be available on terms acceptable to us. A claim brought against us that is uninsured or underinsured could result in unanticipated costs, thereby reducing our operating results and leading analysts or potential investors to reduce their expectations of our performance resulting in a reduction in the trading price of our stock.

Our proprietary software or service delivery platform may not operate properly, which could damage our reputation, give rise to claims against us, or divert application of our resources from other purposes, any of which could harm our business and operating results.

We may encounter human or technical obstacles that prevent our proprietary or acquired applications from operating properly. If our applications do not function reliably or fail to achieve customer expectations in terms of performance, customers could assert liability claims against us or attempt to cancel their contracts with us. This could damage our reputation and impair our ability to attract or maintain customers.

There are particular risks when we inherit technologies through the companies we acquire. These technologies, often developed by distressed companies, were not created under our direct supervision and control and therefore may not have been developed in accordance with our standards. Such acquired technologies could, and at times do, contain operational deficiencies, defects, glitches or bugs that may not be discovered immediately or otherwise could have been avoided had we built the technology ourselves. Whether technology we develop or technology we acquire, we will need to replace certain components and remediate software defects or bugs from time to time. There can be no assurance that such defects or bugs, or the process of remediating them, will not have a material impact on our business. Our inability to promptly and cost-effectively correct a product defect could result in the Company having to withdraw an important product from market, damage to our reputation, and result in material costs and expenses, any of which could have a material impact on our revenue, margins, and operating results.

Moreover, information services as complex as those we offer have in the past contained, and may in the future develop or contain, undetected defects or errors. We cannot assure you that material performance problems or defects in our products or services will not arise in the future. Errors may result from receipt, entry, or interpretation of patient information or from interface of our services with legacy systems and data that we did not develop and the function of which is outside of our control. Despite testing, defects or errors may arise in our existing or new software or service processes. Because changes in payer requirements and practices are frequent and sometimes difficult to determine except through trial and error, we are continuously discovering defects and errors in our software and service processes compared against these requirements and practices. These defects and errors and any failure by us to identify and address them could result in loss of revenue or market share, liability to customers or others, failure to achieve market acceptance or expansion, diversion of development resources, injury to our reputation, and increased service and maintenance costs. Defects or errors in our software might discourage existing or potential customers from purchasing our products and services. Correction of defects or errors could prove to be impossible or impracticable. The costs incurred in correcting any defects or errors or in responding to resulting claims or liability may be substantial and could adversely affect our operating results.

In addition, customers relying on our services to collect, manage, and report clinical, business, and administrative data may have a greater sensitivity to service errors and security vulnerabilities than customers of software products in general. We market and sell services that, among other things, provide information to assist healthcare providers in tracking and treating patients. Any operational delay in or failure of our technology or service processes may result in the disruption of patient care and could cause harm to patients and thereby create unforeseen liabilities for our business.

Our customers or their patients may assert claims against us alleging that they suffered damages due to a defect, error, or other failure of our software or service processes. A product liability claim or errors or omissions claim could subject us to significant legal defense costs and adverse publicity, regardless of the merits or eventual outcome of such a claim.

Our physicians rely on our platforms (including the platforms we acquired) to be certified by the Office of the National Coordinator for Health Information Technology (“ONC”). If this certification were to be challenged, we might face liability related to any incentive that the physicians received in reliance upon such certification.

If our security measures are breached or fail and unauthorized access is obtained to a customer’s data, our service may not be perceived as secure, the attractiveness of our services to current or potential customers may be reduced, and we may incur significant liabilities.

Our services involve the web-based storage and transmission of customers’ proprietary information and patient information, including health, financial, payment and other personal or confidential information. We rely on proprietary and commercially available systems, software, tools and monitoring, as well as other processes, to provide security for processing, transmission and storage of such information. Because of the sensitivity of this information and due to requirements under applicable laws and regulations, the effectiveness of our security efforts is very important. We maintain servers, which store customers’ data, including patient health records, in the U.S. and offshore. We also process, transmit and store some data of our customers on servers and networks that are owned and controlled by third-party contractors in India and elsewhere. Increasingly, threat actors are targeting the healthcare industry with ransomware and other malicious software. If our security measures are breached or fail as a result of third-party action, acts of terror, social unrest, employee error, malfeasance or for any other reasons, someone may be able to obtain unauthorized access to customer or patient data. Improper activities by third parties, advances in computer and software capabilities and encryption technology, new tools and discoveries and other events or developments may facilitate or result in a compromise or breach of our security systems. Our security measures may not be effective in preventing unauthorized access to the customer and patient data stored on our servers. If a breach of our security occurs, we could face damages for contract breach, penalties for violation of applicable laws or regulations, possible lawsuits by individuals affected by the breach and significant remediation costs and efforts to prevent future occurrences. In addition, whether there is an actual or a perceived breach of our security, the market perception of the effectiveness of our security measures could be harmed and we could lose current or potential customers.

Our products and services are required to meet the interoperability standards, which could require us to incur substantial additional development costs or result in a decrease in revenue.

Our customers and the industry leaders enacting regulatory requirements are concerned with and often require that our products and services be interoperable with other third-party healthcare information technology suppliers. Although our products comply with the latest ONC standards and provide seamless and secure access, use and sharing of electronic health records, market forces or regulatory authorities could create software interoperability standards that would apply to our solutions, and if our products and services are not consistent with those standards, we could be forced to incur substantial development costs. There currently exists a comprehensive set of criteria for the functionality, interoperability and security of various software modules in the healthcare information technology industry. However, those standards are subject to continuous modification and refinement. Maintaining compliance with industry interoperability standards and related requirements could result in larger than expected software development expenses and administrative expenses in order to conform to these requirements. These standards and specifications, once finalized, will be subject to interpretation by the entities designated to certify such technology. We will incur increased development costs in delivering solutions if we need to change or enhance our products and services to be in compliance with these varying and evolving standards. If our products and services are not consistent with these evolving standards, our market position and sales could be impaired and we may have to invest significantly in changes to our solutions.

Disruptions in internet or telecommunication service or damage to our data centers could adversely affect our business by reducing our customers’ confidence in the reliability of our services and products.

Our information technologies and systems are vulnerable to damage or interruption from various causes, including acts of God and other natural disasters, war and acts of terrorism and power losses, computer systems failures, internet and telecommunications or data network failures, operator error, losses of and corruption of data and similar events. Our customers’ data, including patient health records, reside on our own servers located in the U.S., and our Offshore Offices. Although we conduct business continuity planning to protect against fires, floods, other natural disasters and general business interruptions to mitigate the adverse effects of a disruption, relocation or change in operating environment at our data centers, the situations we plan for and the amount of insurance coverage we maintain may not be adequate in any particular case. In addition, the occurrence of any of these events could result in interruptions, delays or cessations in service to our customers. Any of these events could impair or prohibit our ability to provide our services, reduce the attractiveness of our services to current or potential customers and adversely impact our financial condition and results of operations.

In addition, despite the implementation of security measures, our infrastructure, data centers, or systems that we interface with or utilize, including the internet and related systems, may be vulnerable to physical break-ins, hackers, improper employee or contractor access, computer viruses, programming errors, denial-of-service attacks or other attacks by third-parties seeking to disrupt operations or misappropriate information or similar physical or electronic breaches of security. Any of these can cause system failure, including network, software or hardware failure, which can result in service disruptions. As a result, we may be required to expend significant capital and other resources to protect against security breaches and hackers or to alleviate problems caused by such breaches.

We may be subject to liability for the content we provide to our customers and their patients.

We provide content for use by healthcare providers in treating patients. This content includes, among other things, patient education materials, coding and drug databases developed by third parties, and prepopulated templates providers can use to document visits and record patient health information. If content in the third-party databases we use is incorrect or incomplete, adverse consequences, including death, may give rise to product liability and other claims against us. A court or government agency may take the position that our delivery of health information directly, including through licensed practitioners, or delivery of information by a third-party site that a consumer accesses through our solutions, exposes us to personal injury liability, or other liability for wrongful delivery or handling of healthcare services or erroneous health information. Our liability insurance coverage may not be adequate or continue to be available on acceptable terms, if at all. A claim brought against us that is uninsured or under-insured could harm our business. Even unsuccessful claims could result in substantial costs and diversion of management resources.

We are subject to the effect of payer and provider conduct that we cannot control and that could damage our reputation with customers and result in liability claims that increase our expenses.

We offer electronic claims submission services for which we rely on content from customers, payers, and others. While we have implemented features and safeguards designed to maximize the accuracy and completeness of claims content, these features and safeguards may not be sufficient to prevent inaccurate claims data from being submitted to payers. Should inaccurate claims data be submitted to payers, we may experience poor operational results and be subject to liability claims, which could damage our reputation with customers and result in liability claims that increase our expenses.

Failure by our clients to obtain proper permissions and waivers may result in claims against us or may limit or prevent our use of data, which could harm our business.

Our clients are obligated by applicable law to provide necessary notices and to obtain necessary permission waivers for use and disclosure of the information that we receive. If they do not obtain necessary permissions and waivers, then our use and disclosure of information that we receive from them or on their behalf may be limited or prohibited by state or federal privacy laws or other laws. This could impair our functions, processes, and databases that reflect, contain, or are based upon such data and may prevent use of such data. In addition, this could interfere with or prevent creation or use of rules, and analyses or limit other data-driven activities that benefit us. Moreover, we may be subject to claims or liability for use or disclosure of information by reason of lack of valid notice, permission, or waiver. These claims or liabilities could subject us to unexpected costs and adversely affect our operating results.

Any deficiencies in our financial reporting or internal controls could adversely affect our business and the trading price of our securities.

As a public company, we are required to maintain internal control over financial reporting and to report any material weaknesses in such internal controls. Section 404 of the Sarbanes-Oxley Act requires that we evaluate and determine the effectiveness of our internal control over financial reporting.

In the future, if we have a material weakness in our internal control over financial reporting, we may not detect errors on a timely basis and our financial statements may be materially misstated. In addition, our internal control over financial reporting would not prevent or detect all errors and fraud. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that misstatements due to error or fraud will not occur or that all control issues and instances of fraud will be detected.

If there are material weaknesses or failures in our ability to meet any of the requirements related to the maintenance and reporting of our internal controls, investors may lose confidence in the accuracy and completeness of our financial reports, which in turn could cause the price of our common stock and preferred stock to decline. Moreover, effective internal controls are necessary to produce reliable financial reports and to prevent fraud. If we have deficiencies in our internal controls, it may negatively impact our business, results of operations and reputation. In addition, we could become subject to investigations by Nasdaq, the SEC or other regulatory authorities, which could require additional management attention and which could adversely affect our business.

Our goodwill has been subject to impairment and may be subject to further impairment in the future, which could have a material adverse effect on our results of operations, financial condition, or future operating results.

We perform an annual goodwill impairment test on October 31^st of each year, or more frequently if indicators for potential impairment exist. As a result of the annual goodwill impairment test, we recorded impairment charges of approximately $2 million. Indicators that are considered include significant changes in performance relative to expected operating results, significant negative industry or economic trends, or a significant decline in our stock price and/or market capitalization or enterprise value for a sustained period of time. While we believe the assumptions used in determining whether there was an impairment and the amount of any resulting impairment were reasonable and commensurate with the views of a market participant, changes in key assumptions in the future, including increasing the discount rate, lowering forecast for revenue and operating margin, selection of guideline public companies or lowering the long-term growth rate, could result in additional charges; similarly, one or more changes in these assumptions in future periods due to changes in circumstances could result in additional future impairments. There was a triggering event at August 31, 2023, but it was determined that there was no impairment. During December 2023, the Company had an additional triggering event as a result of the suspension of the dividends on the Preferred Stock. As a result of the December triggering event, the Company recorded additional impairment charges of approximately $40 million and we cannot predict if or when additional future goodwill impairments may occur. Any additional goodwill impairments could have material adverse effects on our operating results, net assets, or our cost of, or access to, capital, which could harm our business. See Note 3, Goodwill and Intangible Assets - Net, to our consolidated financial statements in this Annual Report on Form 10-K for more details.

We are a party to several related-party agreements with our founder and Executive Chairman, Mahmud Haq, which have significant contractual obligations. These agreements are reviewed by our Audit Committee on an annual basis.

Since inception, we have entered into several related-party transactions with our founder and Executive Chairman, Mahmud Haq, which subject us to significant contractual obligations. We believe these transactions reflect terms comparable to those that would be available from third parties. Our independent audit committee has reviewed these arrangements and continues to do so on an annual basis.

Although we have procedures in place to identify related party transactions, it is possible that such transactions could occur without being contemporaneously identified, reviewed and approved by the Audit Committee.

We depend on key information systems and third-party service providers.

We depend on key information systems to accurately and efficiently transact our business, provide information to management and prepare financial reports. These systems and services are vulnerable to interruptions or other failures resulting from, among other things, natural disasters, terrorist attacks, software, equipment or telecommunications failures, processing errors, computer viruses, other security issues or supplier defaults. Security, backup and disaster recovery measures may not be adequate or implemented properly to avoid such disruptions or failures. Any disruption or failure of these systems or services could cause substantial errors, processing inefficiencies, security breaches, inability to use the systems or process transactions, loss of customers or other business disruptions, all of which could negatively affect our business and financial performance.

Systems failures or cyberattacks and resulting interruptions in the availability of or degradation in the performance of our websites, applications, products or services could harm our business.

As cybersecurity attacks continue to evolve and increase, our information systems could also be penetrated or compromised by internal and external parties’ intent on extracting confidential information, disrupting business processes or corrupting information. Our systems may experience service interruptions or degradation due to hardware and software defects or malfunctions, computer denial-of-service and other cyberattacks, human error, earthquakes, hurricanes, floods, fires, natural disasters, power losses, disruptions in telecommunications services, fraud, military or political conflicts, terrorist attacks, computer viruses, or other events. Our systems are also subject to break-ins, sabotage and intentional acts of vandalism. Some of our systems are not fully redundant and our disaster recovery planning is not sufficient for all eventualities. We have experienced and will likely continue to experience system failures, denial of service attacks and other events or conditions from time to time that interrupt the availability or reduce the speed or functionality of our websites and mobile applications. These events likely will result in loss of revenue. A prolonged interruption in the availability or reduction in the speed or other functionality of our websites and mobile applications could materially harm our business. Frequent or persistent interruptions in our services could cause current or potential users to believe that our systems are unreliable, leading them to switch to our competitors or to avoid our sites, and could permanently harm our reputation and brands. Moreover, to the extent that any system failure or similar event results in damages to our customers or their businesses, these customers could seek significant compensation from us for their losses and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address. These risks could arise from external parties or from acts or omissions of internal or service provider personnel. Such unauthorized access could disrupt our business and could result in the loss of assets, litigation, remediation costs, damage to our reputation and failure to retain or attract customers following such an event, which could adversely affect our business.

We use artificial intelligence in our business, and challenges with properly managing its use could result in reputational and competitive harm, legal liability, and adversely affect our results of operations.

We currently incorporate artificial intelligence (“AI”) solutions into our intelligent cloud products, and these applications will become important in our operations over time. Our competitors or other third parties may incorporate AI into their products and offerings quicker or more successfully than us, which could impair our ability to compete effectively and adversely affect our results of operations. Additionally, if the content, analyses, or recommendations that AI applications assist in producing are, or are alleged to be inaccurate, deficient, or biased, our business, financial condition, and results of operations may be adversely affected. The use of AI applications has resulted in, and may in the future result in, cybersecurity incidents that implicate the sensitive data of customers analyzed within such applications. Any such cybersecurity incidents related to our use of AI applications for analysis of sensitive data could adversely affect our reputation and results of operations. AI also presents emerging ethical issues and if our use of AI becomes controversial, we may experience brand or reputational harm, competitive harm, or legal liability. The rapid evolution of AI, including potential government regulation of AI and its various uses will require significant resources to develop, test and maintain our intelligence cloud platform, offerings, services, and features to help us implement AI ethically in order to minimize any unintended, harmful impact.

Rapid technological change in the telehealth industry presents us with significant risks and challenges.

The telehealth market is characterized by rapid technological change, changing consumer requirements, short product lifecycles and evolving industry standards. Our success will depend on our ability to enhance our solution with next-generation technologies and to develop or to acquire and market new services to access new consumer populations. There is no guarantee that we will possess the resources, either financial or personnel, for the research, design and development of new applications or services, or that we will be able to utilize these resources successfully and avoid technological or market obsolescence. Further, there can be no assurance that technological advances by one or more of our competitors or future competitors will not result in our present or future applications and services becoming uncompetitive or obsolete.

Our business, financial condition, results of operations and growth may be adversely affected by pandemics, epidemics or other public health emergencies, such as COVID-19.

We are subject to risks related to a public health crisis such as a global pandemic similar to the coronavirus (COVID-19). Numerous governmental jurisdictions, including the State of New Jersey where we maintain our principal executive offices, and those in which many of our U.S. and international offices are based may impose “shelter-in-place” orders, quarantines, executive orders and similar government orders and restrictions for their residents to control the spread of public health emergencies. Such orders or restrictions, and the perception that such orders or restrictions could occur, could result in business closures, work stoppages, slowdowns and delays, work-from-home policies, travel restrictions and cancellation of events, among other effects, thereby negatively impacting our customers, employees, and offices, among others.

A recession or prolonged economic contraction as a result of health emergencies could harm the business and results of operations of our enterprise customers, resulting in potential business closures, layoffs of employees and a significant increase in unemployment in the United States and elsewhere. The occurrence of any such events may lead to reduced income for customers and reduced size of workforces, which could reduce our revenue and harm our business, financial condition and results of operations.

The prolonged impact of these public health emergencies is highly uncertain and unpredictable, depending upon the severity and duration of the emergency and the effectiveness of actions taken globally to contain or mitigate its effects. Future financial impact cannot be estimated reasonably at this time, but may materially adversely affect our business, results of operations and financial condition.

Risks Related to Our Acquisition Strategy

At the current prices of our common and Preferred Stock, we may be unable to execute accretive acquisitions.

Historically we have used our common and Preferred Stock to pay for acquisitions. Due to the depressed market prices of these securities, we may not be able to use these securities to execute future acquisitions.

We may be unable to retain customers following their acquisition, which may result in a decrease in our revenues and operating results.

Customers of the businesses we acquire often have the right to terminate their service contracts for any reason at any time upon notice of 90 days or less. These customers may elect to terminate their contracts as a result of our acquisition or choose not to renew their contracts upon expiration. Legal and practical limitations on our ability to enforce non-competition and non-solicitation provisions against customer representatives and sales personnel that leave the businesses we acquire to join competitors may result in the loss of customers. In the past, our failure to retain acquired customers has at times resulted in decreases in our revenues. Our inability to retain customers of businesses we acquire could adversely affect our ability to benefit from those acquisitions and to grow our future revenues and operating income.

Acquisitions may subject us to liability with regard to the creditors, customers, and shareholders of the sellers.

While we attempt to limit our exposure to the liabilities associated with the businesses we acquire, we cannot guarantee that we will be successful in avoiding all material liability. Regardless of how we structure the acquisition, whether as an asset purchase, stock purchase, merger or other business combination, creditors, customers, vendors, governmental agencies and other parties at times seek to hold us accountable for unpaid debts, breach of contract claims, regulatory violations and other liabilities that relate to the business we acquired. Disaffected shareholders of the businesses we acquire have also attempted to interfere with our business acquisitions or brought claims against us. We attempt to minimize all of these risks through thorough due diligence, negotiating indemnities and holdbacks, obtaining relevant representations from sellers, procuring insurance coverage and leveraging experienced professionals when appropriate.

Future acquisitions may result in potentially dilutive issuances of equity securities, the incurrence of indebtedness and increased amortization expense.

Future acquisitions may result in dilutive issuances of equity securities, the incurrence of debt, the assumption of known and unknown liabilities, the write-off of software development costs and the amortization of expenses related to intangible assets, all of which could have an adverse effect on our business, financial condition and results of operations.

Regulatory Risks

The healthcare industry is heavily regulated. Our failure to comply with regulatory requirements could create liability for us, result in adverse publicity and negatively affect our business.

The healthcare industry is heavily regulated and is constantly evolving due to the changing political, legislative, regulatory landscape and other factors. Many healthcare laws are complex, and their application to specific services and relationships may not be clear. In particular, many existing healthcare laws and regulations, when enacted, did not anticipate or address the services that we provide. Further, healthcare laws differ from state to state and it is difficult to ensure that our business, products and services comply with evolving laws in all states. By way of example, certain federal and state laws forbid billing based on referrals between individuals or entities that have various financial, ownership, or other business relationships with healthcare providers. These laws vary widely from state to state, and one of the federal laws governing these relationships, known as the Stark Law, is very complex in its application. Similarly, many states have laws forbidding physicians from practicing medicine in partnership with non-physicians, such as business corporations, as well as laws or regulations forbidding splitting of physician fees with non-physicians or others. Other federal and state laws restrict assignment of claims for reimbursement from government-funded programs, the manner in which business service companies may handle payments for such claims and the methodology under which business services companies may be compensated for such services.

The 21^st Century Cures Act (the “Cures Act”), passed by Congress in 2016, is meant to improve various aspects of the healthcare industry, including interoperability and information blocking. The Cures Act’s interoperability provisions relate to Information Exchange and Certification administered by the ONC. The certification involves complex and specific requirements related to various types of requests for the access, exchange or use of Electronic Health Information. In addition, the information blocking rule aims to resolve concerns that individuals in the healthcare industry intentionally prevent the exchange of information between multiple stakeholders. The Cures Act allows for penalties for stakeholders, including but not limited to, health IT developers and providers who do not comply with same. While we remain committed to efficient exchange of information in the healthcare industry and continue meeting all new certification requirements, failure to comply with these regulatory requirements, could create liability for us, result in adverse publicity and negatively affect our business.

The Office of Inspector General (“OIG”) of the Department of Health and Human Services (“HHS”) has a longstanding concern that percentage-based billing arrangements may increase the risk of improper billing practices. In addition, certain states have adopted laws or regulations forbidding splitting of fees with non-physicians which may be interpreted to prevent business service providers, including medical billing providers, from using a percentage-based billing arrangement. The OIG and HHS recommend that medical billing companies develop and implement comprehensive compliance programs to mitigate this risk. While we have developed and implemented a comprehensive billing compliance program that we believe is consistent with these recommendations, our failure to ensure compliance with controlling legal requirements, accurately anticipate the application of these laws and regulations to our business and contracting model, or other failure to comply with regulatory requirements, could create liability for us, result in adverse publicity and negatively affect our business.

The federal Anti-Kickback Statute (“AKS”) prohibits us from knowingly and willfully soliciting, receiving, offering or providing remuneration in exchange for referrals or recommendations for purposes of selling products or services which are paid for by federal healthcare programs such as Medicare and Medicaid. In addition, a claim including products or services resulting from a violation of AKS constitutes a violation of the federal False Claims Act (“FCA”). If we are determined to have violated the FCA, we may be required to pay up to three times the actual damages sustained by the government, plus mandatory civil penalties for each separate false claim. If we are found to be in violation of the FCA, AKS, ACA, or any other applicable state or any federal fraud and abuse laws, whether by our current practices or for the past practices of a company we acquire, we may be subject to substantial civil damages and criminal penalties and fines that could have a material adverse impact on our business.

In addition, federal and state legislatures and agencies periodically consider proposals to revise aspects of the healthcare industry or to revise or create additional statutory and regulatory requirements. For instance, the current administration may make changes to the ACA, the nature and scope of which are presently unknown. Similarly, certain computer software products are regulated as medical devices under the Federal Food, Drug, and Cosmetic Act. While the Food and Drug Administration (“FDA”) has sometimes chosen to disclaim authority to, or to refrain from actively regulating certain software products which are similar to our products, this area of medical device regulation remains in flux. We expect that the FDA will continue to be active in exploring legal regimes for regulating computer software intended for use in healthcare settings. Any additional regulation can be expected to impose additional overhead costs on us and should we fail to adequately meet these legal obligations, we could face potential regulatory action. Regulatory authorities such as the Centers for Medicare and Medicaid Services may also impose functionality standards with regard to electronic prescribing technologies. If implemented, proposals like these could impact our operations, the use of our services and our ability to market new services, or could create unexpected liabilities for us. We cannot predict what changes to laws or regulations might be made in the future or how those changes could affect our business or our operating costs.

Further, our ability to provide our telehealth services in each state is dependent upon a state’s treatment of telehealth and emerging technologies (such as digital health services), which are subject to changing political, regulatory and other influences. Many states have laws that limit or restrict the practice of telehealth, such as laws that require a provider to be licensed and/or physically located in the same state where the patient is located. For example, California, Massachusetts, and Oregon, among others, are not members of the Interstate Medical Licensure Compact, which streamlines the process by which physicians licensed in one state are able to practice in other participating states. Failure to comply with these laws could result in denials of reimbursement for services (to the extent such services are billed), recoupments of prior payments, professional discipline for providers or civil or criminal penalties.

If we do not maintain the certification of our EHR solutions pursuant to the HITECH Act and Cures Act, our business, financial condition and results of operations will be adversely affected.

The HITECH Act provides financial incentives for healthcare providers that demonstrate “meaningful use” of an EHR and mandates use of health information technology systems that are certified according to technical standards developed under the supervision of the U.S. Department of Health and Human Services (“HHS”). The HITECH Act also imposes certain requirements upon governmental agencies to use, and requires healthcare providers, health plans, and insurers contracting with such agencies to use, systems that are certified according to such standards. The healthcare IT industry continues to experience changes as a result of new laws, regulations, and changes to healthcare industry standards. For instance, the meaningful use incentive program has since expired and has been consolidated, among other incentive programs, within the Merit-based Incentive Payment System (“MIPS”), which was created as part of the Quality Payment Program (“QPP”), launched by CMS after passage of the Medicare Access and CHIP Reauthorization Act (“MACRA”). MACRA and regulations promulgated by it change the way CMS rewards clinicians in the healthcare industry by rewarding value-based care over volume-based care. MIPS requires substantial reporting mechanisms based on clinical quality measures that highly depend on reporting feature within EHR systems.

The HITECH and Cures Acts (as described in more detail above) contain certification requirements which affect our business because we have invested and continue to invest in conforming our products and services to these standards. HHS has developed certification programs for electronic health records and health information exchanges. Our web-based EHR solutions have been certified as complete EHR systems by ICSA Labs or Drummond Group, non-governmental, independent certifying bodies. We must ensure that our EHR solutions continue to be certified according to applicable HITECH Act and Cures Act technical standards so that our customers qualify for any MIPS/MACRA incentive payments and are not subject to penalties for non-compliance. Failure to maintain this certification under the HITECH Act and Cures Act could jeopardize our relationships with customers who are relying upon us to provide certified software, and will make our products and services less attractive to customers than the offerings of other EHR vendors who maintain certification of their products.

If a breach of our measures protecting personal data covered by HIPAA or the HITECH Act occurs, we may incur significant liabilities.

The Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”), and the regulations that have been issued under it contain substantial restrictions and requirements with respect to the use, collection, storage and disclosure of individuals’ protected health information. Under HIPAA, covered entities must establish administrative, physical and technical safeguards to protect the confidentiality, integrity and availability of electronic protected health information maintained or transmitted by them or by others on their behalf. In February 2009, HIPAA was amended by the HITECH Act to add provisions that impose certain of HIPAA’s privacy and security requirements directly upon business associates of covered entities. Under HIPAA and the HITECH Act, our customers are covered entities and we are a business associate of our customers as a result of our contractual obligations to perform certain services for those customers. The HITECH Act transferred enforcement authority of the security rule from CMS to the Office for Civil Rights of HHS, thereby consolidating authority over the privacy and security rules under a single office within HHS. Further, HITECH empowered state attorneys’ general to enforce HIPAA.

The HITECH Act heightened enforcement of privacy and security rules, indicating that the imposition of penalties will be more common in the future and such penalties will be more severe. For example, the HITECH Act requires that the HHS fully investigate all complaints if a preliminary investigation of the facts indicates a possible violation due to “willful neglect” and imposes penalties if such neglect is found. Further, where our liability as a business associate to our customers was previously merely contractual in nature, the HITECH Act now treats the breach of duty under an agreement by a business associate to carry the same liability as if the covered entity engaged in the breach. In other words, as a business associate, we are now directly responsible for complying with HIPAA. We may find ourselves subject to increased liability as a possible liable party and we may incur increased costs as we perform our obligations to our customers under our agreements with them.

Finally, regulations also require business associates to notify covered entities, who in turn must notify affected individuals and government authorities of data security breaches involving unsecured protected health information. We have performed an assessment of the potential risks and vulnerabilities to the confidentiality, integrity and availability of electronic health information. In response to this risk analysis, we implemented and maintain physical, technical and administrative safeguards intended to protect all personal data and have processes in place to assist us in complying with applicable laws and regulations regarding the protection of this data and properly responding to any security incidents. If we knowingly breach the HITECH Act’s requirements, we could be exposed to criminal liability. A breach of our safeguards and processes could expose us to civil penalties of up to $1.5 million for each incident and the possibility of civil litigation.

If we or our customers fail to comply with federal and state laws governing submission of false or fraudulent claims to government healthcare programs and financial relationships among healthcare providers, we or our customers may be subject to civil and criminal penalties or loss of eligibility to participate in government healthcare programs.

As a participant in the healthcare industry, our operations and relationships, and those of our customers, are regulated by a number of federal, state and local governmental entities. The impact of these regulations can adversely affect us even though we may not be directly regulated by specific healthcare laws and regulations. We must ensure that our products and services can be used by our customers in a manner that complies with those laws and regulations. Inability of our customers to do so could affect the marketability of our products and services or our compliance with our customer contracts, or even expose us to direct liability under the theory that we had assisted our customers in a violation of healthcare laws or regulations. A number of federal and state laws, including anti-kickback restrictions and laws prohibiting the submission of false or fraudulent claims, apply to healthcare providers and others that make, offer, seek or receive referrals or payments for products or services that may be paid for through any federal or state healthcare program and, in some instances, any private program. These laws are complex and their application to our specific services and relationships may not be clear and may be applied to our business in ways that we do not anticipate. Federal and state regulatory and law enforcement authorities have recently increased enforcement activities with respect to Medicare and Medicaid fraud and abuse regulations and other healthcare reimbursement laws and rules. From time to time, participants in the healthcare industry receive inquiries or subpoenas to produce documents in connection with government investigations. We could be required to expend significant time and resources to comply with these requests, and the attention of our management team could be diverted by these efforts. The occurrence of any of these events could give our customers the right to terminate our contracts with us and result in significant harm to our business and financial condition.

These laws and regulations may change rapidly, and it is frequently unclear how they apply to our business. Any failure of our products or services to comply with these laws and regulations could result in substantial civil or criminal liability and could, among other things, adversely affect demand for our services, invalidate all or portions of some of our contracts with our customers, require us to change or terminate some portions of our business, require us to refund portions of our revenue, cause us to be disqualified from serving customers doing business with government payers, and give our customers the right to terminate our contracts with them, any one of which could have an adverse effect on our business.

Potential healthcare reform and new regulatory requirements placed on our products and services could increase our costs, delay or prevent our introduction of new products or services, and impair the function or value of our existing products and services.

Our products and services may be significantly impacted by healthcare reform initiatives and will be subject to increasing regulatory requirements, either of which could negatively impact our business in a multitude of ways. If substantive healthcare reform or applicable regulatory requirements are adopted, we may have to change or adapt our products and services to comply. Reform or changing regulatory requirements may also render our products or services obsolete or may block us from accomplishing our work or from developing new products or services. This may in turn impose additional costs upon us to adapt to the new operating environment or to further develop or modify our products and services. Such reforms may also make the introduction of new products and service costlier or more time-consuming than we currently anticipate. These changes may also prevent our introduction of new products and services or make the continuation or maintenance of our existing products and services unprofitable or impossible.

Additional regulation of the disclosure of medical information outside the United States may adversely affect our operations and may increase our costs.

Federal or state governmental authorities may impose additional data security standards or additional privacy or other restrictions on the collection, use, transmission, and other disclosures of medical information. Legislation has been proposed at various times at both the federal and the state level that would limit, forbid, or regulate the use or transmission of medical information outside of the United States. Such legislation, if adopted, may render our use of our servers in Offshore Offices for work related to such data impracticable or substantially more expensive. Alternative processing of such information within the United States may involve substantial delay in implementation and increased cost.

Our services present the potential for embezzlement, identity theft, or other similar illegal behavior by our employees.

Among other things, our services from time to time involve handling mail from payers and payments from patients for our customers, and this mail frequently includes original checks and credit card information and occasionally includes currency. Where requested, we deposit payments and process credit card transactions from patients on behalf of customers and then forward these payments to the customers. Even in those cases in which we do not handle original documents or mail, our services also involve the use and disclosure of personal and business information that could be used to impersonate third parties or otherwise gain access to their data or funds. The manner in which we store and use certain financial information is governed by various federal and state laws. If any of our employees takes, converts, or misuses such funds, documents, or data, we could be liable for damages, subject to regulatory actions and penalties, and our business reputation could be damaged or destroyed. In addition, we could be perceived to have facilitated or participated in illegal misappropriation of funds, documents, or data and therefore be subject to civil or criminal liability.

Risks Related to Ownership of Shares of Our Common Stock

Our revenues, operating results and cash flows may fluctuate in future periods and we may fail to meet investor expectations, which may cause the price of our common stock to decline.

Variations in our quarterly and year-end operating results are difficult to predict and may fluctuate significantly from period to period. If our sales or operating results fall below the expectations of investors or securities analysts, the price of our common stock could decline substantially. Specific factors that may cause fluctuations in our operating results include:

Future sales of shares of our common stock could depress the market price of our common stock.

Sales of a substantial number of shares of our common stock in the public market could occur at any time. If our stockholders sell, or the market perceives that our stockholders intend to sell substantial amounts of our common stock in the public market, the market price of our common stock could decline significantly.

Mahmud Haq currently controls 31.7% of our outstanding shares of common stock, which will prevent investors from influencing significant corporate decisions.

Mahmud Haq, our founder and Executive Chairman, beneficially owns 31.7% of our outstanding shares of common stock. As a result, Mr. Haq exercises a significant level of control over all matters requiring stockholder approval, including the election of directors, amendment of our certificate of incorporation, and approval of significant corporate transactions. This control could have the effect of delaying or preventing a change of control of our company or changes in management, and will make the approval of certain transactions difficult or impossible without his support, which in turn could reduce the price of our common stock.

Provisions of Delaware law, of our amended and restated charter and amended and restated bylaws may make a takeover more difficult, which could cause our common stock price to decline.

Provisions in our amended and restated certificate of incorporation and amended and restated bylaws and in the Delaware General Corporation Law (“DGCL”) may make it difficult and expensive for a third party to pursue a tender offer, change in control or takeover attempt, which is opposed by management and the Board of Directors. Public stockholders who might desire to participate in such a transaction may not have an opportunity to do so. We have a staggered Board of Directors that makes it difficult for stockholders to change the composition of the Board of Directors in any one year. Further, our amended and restated certificate of incorporation provides for the removal of a director only for cause upon the affirmative vote of the holders of at least 50.1% of the outstanding shares entitled to cast their vote for the election of directors, which may discourage a third party from making a tender offer or otherwise attempting to obtain control of us. These and other anti-takeover provisions could substantially impede the ability of public stockholders to change our management and Board of Directors. Such provisions may also limit the price that investors might be willing to pay for shares of our Preferred Stock in the future.

Any issuance of additional preferred stock in the future may dilute the rights of our existing stockholders.

Our Board of Directors has the authority to issue up to 7,000,000 shares of preferred stock and to determine the price, privileges and other terms of these shares, of which 4,526,231 shares of Series A Preferred Stock and 1,468,792 of Series B Preferred Stock have been issued as of December 31, 2023. Our Board of Directors may exercise its authority with respect to the remaining shares of preferred stock without any further approval of common stockholders. The rights of the holders of common stock may be adversely affected by the rights of future holders of preferred stock.

We do not intend to pay cash dividends on our common stock.

Currently, we do not anticipate paying any cash dividends to holders of our common stock. As a result, capital appreciation, if any, of our common stock will be a stockholder’s sole source of gain.

Complying with the laws and regulations affecting public companies will increase our costs and the demands on management and could harm our operating results.

As a public company, the Sarbanes-Oxley Act requires, among other things, that we assess the effectiveness of our internal control over financial reporting annually and the effectiveness of our disclosure controls and procedures quarterly. As a “smaller reporting company,” we elected to avail ourselves of the exemption from the requirement that our independent registered public accounting firm attest to the effectiveness of our internal control over financial reporting under Section 404 of the Sarbanes-Oxley Act. We were not required to have this attestation performed for the years 2023 or 2022. In future years, if we are required to have our independent registered public accounting firm attest the effectiveness of our internal control over financial reporting, the cost of our compliance with Section 404 will correspondingly increase. Our compliance with applicable provisions of Section 404 requires that we incur substantial accounting expense and expend significant management time on compliance-related issues and stay in compliance with reporting requirements. Moreover, if we are not able to stay in compliance with the requirements of Section 404 applicable to us in a timely manner, or if we or our independent registered public accounting firm identifies any deficiencies in our internal control over financial reporting that are deemed to be material weaknesses, the market price of our stock could decline and we could be subject to sanctions or investigations by the SEC or other regulatory authorities, which would require additional financial and management resources.

Furthermore, investor perceptions of our Company may suffer if deficiencies are found, and this could cause a decline in the market price of our common and preferred stock. Irrespective of compliance with Section 404, any failure of our internal control over financial reporting could have a material adverse effect on our stated operating results and harm our reputation. If we are unable to implement these changes effectively or efficiently, it could harm our operations, financial reporting, or financial results and could result in an adverse opinion on internal control from our independent registered public accounting firm.

We are a smaller reporting company and we cannot be certain if the reduced disclosure requirements applicable to smaller reporting companies will make our common stock less attractive to investors.

There are many exemptions available to smaller reporting companies like us that have less than $250 million of worldwide common equity held by non-affiliates. The disclosures we will be required to provide in our SEC filings are still less than they would be if we were not considered a smaller reporting company. Specifically, smaller reporting companies are able to provide simplified executive compensation disclosures in their fillings and have certain other decreased disclosure obligations in their SEC filings. Our status as a smaller reporting company may make it harder for investors to analyze our results of operations and financial prospects. We cannot predict if investors will find our common stock less attractive because we will rely on the exemption available to smaller reporting companies. If some investors find our common stock less attractive as a result, there may be a less active trading market for our common stock and our stock price may be more volatile.

New climate disclosure rules, if adopted by the SEC, may increase our costs and litigation risks, which could materially and adversely affect our future results of operations and financial condition.

During 2022, the SEC proposed new climate disclosure rules, which, if adopted, would require new climate-related disclosure in SEC filings, including certain climate-related metrics and greenhouse gas emissions data, information about climate-related targets and goals, transition plans, if any, and extensive attestation requirements. In addition to requiring public companies to quantify and disclose direct emissions data, the new rules also would require disclosure of climate impact arising from the operations and uses by the company’s business partners and contractors and end-users of the company’s products and/or services. We are currently assessing the impact of the new rules, if adopted as proposed, but at this time, we cannot predict the costs of implementation or any potential adverse impacts resulting from the new rules if adopted. However, we may incur increased costs relating to the assessment and disclosure of climate-related risks and increased litigation risks related to disclosures made pursuant to the new rules, either of which could materially and adversely affect our future results of operations and financial condition.

Risks Related to Ownership of Shares of Our Preferred Stock

In December 2023 we suspended the dividends on the Preferred Stock and they have not been reinstated. If and when they are reinstated, we may not be able to continue to pay dividends on the Preferred Stock if we fall out of compliance with our loan covenants and are prohibited by our bank lender from paying dividends or if we have insufficient cash to make dividend payments.

Our ability to pay cash dividends on the Preferred Stock requires us to have either net profits or positive net assets (total assets less total liabilities), and to be able to pay our debts as they become due in the usual course of business. We cannot predict with certainty whether we will remain in compliance with the covenants of our senior secured lender, Silicon Valley Bank, a division First Citizens Bank, (“SVB”), which include, among other things, generating adjusted EBITDA or complying with a minimum liquidity ratio at times when we are utilizing our line of credit. If we fall out of compliance, our lender may exercise any of its rights and remedies under the loan agreement, including restricting us from making dividend payments.

Notwithstanding these factors, during December 2023, the Company suspended the dividends on the Preferred Stock. If and when the dividends are reinstated, we may not maintain sufficient cash to continue to pay dividends on the Preferred Stock and we cannot assure you that our businesses will generate sufficient cash flow from operations or that future borrowings will be available to us in an amount sufficient to enable us to make the Preferred Stock dividend payments that are currently due or in arrears and to fund our other liquidity needs. Our ability to pay dividends may again be impaired if any of the risks described in this document, including the documents incorporated by reference herein, were to occur. Also, payment of our dividends depends upon our financial condition, remaining in compliance with our affirmative and negative loan covenants with SVB, which we may be unable to do in the future, and other factors as our Board of Directors may deem relevant from time to time.

Our Series A and Series B Preferred Stock rank junior to all of our indebtedness and other liabilities.

Our Series A Preferred Stock ranks pari passu to our Series B Preferred Stock with respect to the distribution of assets upon our liquidation, dissolution or winding-up of our affairs. In the event of our bankruptcy, liquidation, dissolution or winding-up of our affairs, our assets will be available to pay obligations on the Preferred Stock only after all of our indebtedness and other liabilities have been paid. The rights of holders of the Preferred Stock to participate in the distribution of our assets will rank junior to the prior claims of our current and future creditors and any future series or class of preferred stock we may issue that ranks senior to the Preferred Stock. Also, the Preferred Stock effectively ranks junior to all existing and future indebtedness and to the indebtedness and other liabilities of our existing subsidiaries and any future subsidiaries. Our existing subsidiaries are, and future subsidiaries would be, separate legal entities and have no legal obligation to pay any amounts to us in respect of dividends due on the Preferred Stock. If we are forced to liquidate our assets to pay our creditors, we may not have sufficient assets to pay amounts due on any or all of the Preferred Stock then outstanding. We may in the future incur debt and other obligations that will rank senior to the Preferred Stock. At December 31, 2023, our total liabilities equaled approximately $36.1 million.

Certain of our existing or future debt instruments may restrict the authorization, payment or setting apart of dividends on the Preferred Stock. Our Credit Agreement with SVB restricts the payment of dividends in the event of any event of default, including failure to meet certain financial covenants. There can be no assurance that we will remain in compliance with the SVB Credit Agreement, and if we default, we may be contractually prohibited from paying dividends on the Preferred Stock. Also, future offerings of debt or senior equity securities may adversely affect the market price of the Preferred Stock. If we decide to issue debt or senior equity securities in the future, it is possible that these securities will be governed by an indenture or other instruments containing covenants restricting our operating flexibility. Additionally, any convertible or exchangeable securities that we issue in the future may have rights, preferences and privileges more favorable than those of the Preferred Stock and may result in dilution to owners of the Preferred Stock. We and, indirectly, our shareholders, will bear the cost of issuing and servicing such securities. Because our decision to issue debt or equity securities in any future offering will depend on market conditions and other factors beyond our control, we cannot predict or estimate the amount, timing or nature of our future offerings. The holders of the Preferred Stock will bear the risk of our future offerings, which may reduce the market price of the Preferred Stock and will dilute the value of their holdings.

We may issue additional shares of Preferred Stock and additional series of preferred stock that rank on parity with the Preferred Stock as to dividend rights, rights upon liquidation or voting rights.

We are allowed to issue additional shares of Preferred Stock and additional series of preferred stock that would rank equal to or below the Preferred Stock as to dividend payments and rights upon our liquidation, dissolution or winding up of our affairs pursuant to our amended and restated certificate of incorporation and the certificate of designations relating to the Preferred Stock without any vote of the holders of the Preferred Stock. Upon the affirmative vote of the holders of at least two-thirds of the outstanding shares of Preferred Stock (voting together as a class with all other series of parity preferred stock we may issue upon which like voting rights have been conferred and are exercisable), we are allowed to issue additional series of preferred stock that would rank above the Preferred Stock as to dividend payments and rights upon our liquidation, dissolution or the winding up of our affairs pursuant to our amended and restated certificate of incorporation and the certificate of designations relating to the Preferred Stock. The issuance of additional shares of Preferred Stock and additional series of preferred stock could have the effect of reducing the amounts available to the Preferred Stock upon our liquidation or dissolution or the winding up of our affairs. It also may reduce dividend payments on the Preferred Stock if we do not have sufficient funds to pay dividends on all Preferred Stock outstanding and other classes or series of stock with equal priority with respect to dividends.

Also, although holders of Preferred Stock are entitled to limited voting rights with respect to the circumstances under which the holders of Preferred Stock are entitled to vote, the Preferred Stock votes separately as a class along with all other series of our preferred stock that we may issue upon which like voting rights have been conferred and are exercisable. As a result, the voting rights of holders of Preferred Stock may be significantly diluted, and the holders of such other series of preferred stock that we may issue may be able to control or significantly influence the outcome of any vote.

Future issuances and sales of senior or pari passu preferred stock, or the perception that such issuances and sales could occur, may cause prevailing market prices for the Preferred Stock and our common stock to decline and may adversely affect our ability to raise additional capital in the financial markets at times and prices favorable to us.

Market interest rates may materially and adversely affect the value of the Preferred Stock.

One of the factors that influences the price of the Preferred Stock is the dividend yield on the Preferred Stock (as a percentage of the market price of each class of the Preferred Stock) relative to market interest rates. An increase in market interest rates may lead prospective purchasers of the Preferred Stock to expect a higher dividend yield (and higher interest rates would likely increase our borrowing costs and potentially decrease funds available for dividend payments). Thus, higher market interest rates could cause the market price of the Preferred Stock to materially decrease.

Holders of the Preferred Stock may be unable to use the dividends-received deduction and may not be eligible for the preferential tax rates applicable to “qualified dividend income”.

Distributions paid to corporate U.S. holders of the Preferred Stock may be eligible for the dividends-received deduction, and distributions paid to non-corporate U.S. holders of the Preferred Stock may be subject to tax at the preferential tax rates applicable to “qualified dividend income,” if we have current or accumulated earnings and profits, as determined for U.S. federal income tax purposes. We do not currently have such accumulated earnings and profits. Additionally, we may not have sufficient current earnings and profits during future fiscal years for the distributions on the Preferred Stock to qualify as dividends for U.S. federal income tax purposes. If the distributions fail to qualify as dividends, U.S. holders would be unable to use the dividends-received deduction and may not be eligible for the preferential tax rates applicable to “qualified dividend income.” If any distributions on the Preferred Stock with respect to any fiscal year are not eligible for the dividends-received deduction or preferential tax rates applicable to “qualified dividend income” because of insufficient current or accumulated earnings and profits, it is possible that the market value of the Preferred Stock might decline.

Our Preferred Stock has not been rated.

We have not sought to obtain a rating for the Preferred Stock. No assurance can be given, however, that one or more rating agencies might not independently determine to issue such a rating or that such a rating, if issued, would not adversely affect the market price of the Preferred Stock. Also, we may elect in the future to obtain a rating for the Preferred Stock, which could adversely affect the market price of the Preferred Stock. Ratings only reflect the views of the rating agency or agencies issuing the ratings and such ratings could be revised downward, placed on a watch list or withdrawn entirely at the discretion of the issuing rating agency if in its judgment circumstances so warrant. Any such downward revision, placing it on a watch list or withdrawal of a rating could have an adverse effect on the market price of the Preferred Stock.

We may redeem the Series A and Series B Preferred Stock at any time.

Since November 4, 2020, we may, at our option, redeem the Series A Preferred Stock, in whole or in part, at any time or from time to time. On March 18, 2022, we redeemed 800,000 shares of the Series A Preferred Stock in accordance with our amended and restated certificate of designations for the Series A Preferred Stock. Since February 15, 2024, we may, at our option, redeem the Series B Preferred Stock, in whole or in part, at any time or from time to time, paying a small premium if we choose to redeem any Series B Preferred Stock prior to February 15, 2027. Also, upon the occurrence of a change of control, we may, at our option, redeem the Preferred Stock, in whole or in part, within 120 days after the first date on which such change of control occurred. We may have an incentive to redeem the Preferred Stock voluntarily if market conditions allow us to issue other preferred stock or debt securities at a rate that is lower than the dividend on the Preferred Stock. If we redeem the Preferred Stock, then from and after the redemption date, dividends will cease to accrue on shares of Preferred Stock, the shares of Preferred Stock shall no longer be deemed outstanding and all rights as a holder of those shares will terminate, except the right to receive the redemption price plus accumulated and unpaid dividends, if any, payable upon redemption. The Company also intends to allow holders of the Series A Preferred Stock in the future to exchange their shares of the Series A Preferred Stock into an equivalent number of shares of the Series B Preferred Stock. Currently, the dividends on the Preferred Stock are suspended. At the time of redemption, any accumulated and unpaid dividends up to, but not including the date of redemption, is required to be paid.

The market price of our Preferred Stock is variable and is substantially affected by various factors.

The market price of our Preferred Stock is subject to wide fluctuations in response to numerous factors. These factors include, but are not limited to, the following:

A holder of Preferred Stock has extremely limited voting rights.

The voting rights for a holder of Preferred Stock are limited. Our shares of common stock are the only class of our securities that carry full voting rights, and Mahmud Haq, our Executive Chairman, beneficially owns approximately 31.7% of our outstanding shares of common stock. As a result, Mr. Haq exercises a significant level of control over all matters requiring stockholder approval, including the election of directors, amendment of our certificate of incorporation, and approval of significant corporate transactions. This control could have the effect of delaying or preventing a change of control of our Company or changes in management, and will make the approval of certain transactions difficult or impossible without his support, which in turn could reduce the price of our Preferred Stock.

Voting rights for holders of the Preferred Stock exist primarily with respect to the ability to elect, voting together with the holders of any other series of our preferred stock having similar voting rights, two additional directors to our Board of Directors, subject to limitations, in the event that eighteen monthly dividends (whether or not consecutive) payable on the Preferred Stock are in arrears, and with respect to voting on amendments to our articles of incorporation or articles of amendment relating to the Preferred Stock that materially and adversely affect the rights of the holders of Preferred Stock or authorize, increase or create additional classes or series of our capital stock that are senior to the Preferred Stock. Other than the limited circumstances and except to the extent required by law, holders of Preferred Stock do not have any other voting rights.

The Preferred Stock is not convertible, and investors will not realize a corresponding upside if the price of the common stock increases.

The Preferred Stock is not convertible into the common stock and earns dividends at a fixed rate. Accordingly, an increase in the market price of our common stock will not necessarily result in an increase in the market price of our Preferred Stock. The market value of the Preferred Stock may depend more on dividend and interest rates for other preferred stock, commercial paper and other investment alternatives and our actual and perceived ability to pay dividends on, and in the event of dissolution satisfy the liquidation preference with respect to, the Preferred Stock.

While the dividend on the Preferred Stock is suspended, we may be unable to raise additional capital without incurring excessive dilution.

In December 2023, we suspended payment on the Preferred Stock dividends. While the dividend is suspended, we are not able to use our at-the-market (“ATM”) facilities or utilize our shelf registration statement. Additionally, investors may not have interest in purchasing our securities while the dividend is suspended.

Item 1B. Unresolved Staff Comments

None.

Item 1C. Cybersecurity

Cybersecurity Risk Management and Strategy

We recognize the importance of assessing, identifying, and managing material risks associated with cybersecurity threats, as such term is defined in Item 106(a) of Regulation S-K. These risks include internal and external threats, data loss, phishing attacks, distributed denial of service attacks, third party risks, unpatched systems, weak authentications and zero-day vulnerabilities.

Identifying and assessing cybersecurity risk is integrated into our overall risk management systems and processes. Cybersecurity risks related to our business, technical operations, privacy and compliance issues are identified and addressed through a multi-faceted approach including third party assessments, internal IT Audit, IT security, governance, risk and compliance reviews. To defend, detect and respond to cybersecurity incidents, the Company conducts proactive cybersecurity reviews of systems and applications, audits applicable data policies, performs penetration testing using external third-party tools and techniques to test security controls, conducts employee training, monitors emerging laws and regulations related to data protection and information security and implements appropriate changes.

We have implemented incident response and breach management processes which have four overarching and interconnected stages: 1) preparation for a cybersecurity incident, 2) detection and analysis of a security incident, 3) containment, eradication and recovery, and 4) post-incident analysis. Such incident responses are overseen by leaders from our Information Security, Compliance and Legal teams regarding matters of cybersecurity.

Security events and data incidents are evaluated, ranked by severity and prioritized for response and remediation. Incidents are evaluated to determine materiality as well as operational and business impact, and reviewed for privacy impact. As of the date of this Form 10-K, we have not experienced a cybersecurity threat or incident that resulted in a material adverse impact to our business or operations.

We also conduct exercises to simulate responses to cybersecurity incidents. Our team of cybersecurity professionals then collaborate with technical and business stakeholders across our business units to further analyze the risk to the Company, and form detection, mitigation and remediation strategies.

As part of the above processes, we regularly engage consultants to assess our internal cybersecurity programs and compliance with applicable practices and standards. For 2023, our Information Security Management System is compliant with ISO 27001. We also had a SOC 2, Type 2 review performed for the year 2023.

Our risk management program also assesses third party risks, and we perform third-party risk management to identify and mitigate risks from third parties such as vendors, suppliers, and other business partners associated with our use of third-party service providers.

We describe whether and how risks from identified cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition, under the heading “Disruptions in internet or telecommunication service or damage to our data centers could adversely affect our business by reducing our customers’ confidence in the reliability of our services and products” included as part of our risk factor disclosures in Item 1A of this Annual Report on Form 10-K.

Our Vice President of IT Infrastructure is responsible for overseeing the Company’s cybersecurity. He has a Bachelor’s degree in computer science and has 16 years of extensive experience spanning diverse IT domains, with a specialized emphasis on Information Security across endpoints, servers, data centers, cloud infrastructure, and enterprise applications. He has been actively overseeing the strategic implementation of cybersecurity in accordance with information security management standards, HIPAA, and SOC 2 policies and procedures throughout the entire organization. This multifaceted responsibility involves managing and ensuring compliance with internationally recognized standards such as the ISO 27001 framework, healthcare regulatory guidelines under HIPAA and other recognized standards.

Cybersecurity Governance

Cybersecurity is an important part of our risk management processes and an area of focus for our Board of Directors and management. Our Cybersecurity subcommittee of the Board of Directors is responsible for the oversight of risks from cybersecurity threats. Members of the Cybersecurity subcommittee receive updates on a quarterly basis from senior management, including leaders from our Information Security, Finance, Internal Audit, Compliance and Legal teams regarding matters of cybersecurity. This includes existing and new cybersecurity risks, status on how management is addressing and/or mitigating those risks, cybersecurity and data privacy incidents, (if any), and status on key information security initiatives.

Our cybersecurity risk management and strategy processes are overseen by leaders from our Information Technology department. These individuals are informed about, and monitor the prevention, mitigation, detection and remediation of cybersecurity incidents through their management of, and participation in, the cybersecurity risk management and strategy processes described above, including the operation of our incident response plan, and report to the Cybersecurity subcommittee on any appropriate items.

Item 2. Properties

Our corporate headquarters are located at 7 Clyde Road, Somerset, New Jersey 08873 where we occupy approximately 2,400 square feet of space under a month-to-month lease. Additionally, at December 31, 2023 we lease approximately 73,000 square feet of office space in 15 locations throughout the U.S., with lease terms that are typically five years or less. We also lease approximately 40,000 square feet for five pediatric offices in the Midwest, with leases that will expire between December 2025 and April 2036.

We lease approximately 14,000 square feet of land in Islamabad, Pakistan, where we constructed modular buildings used for office space and computer server facilities for three years expiring on September 30, 2024, with the first two years under a non-cancellable lease. The Company also leases a total of approximately 255,000 square feet of office space in Bagh and Karachi, Pakistan, and in Sri Lanka. The lease in Sri Lanka expires in March 2024 and we intend to renew it for an additional year at expiration.

We believe our current facilities are adequate for our current needs and that suitable additional space will be available as and when needed.

Item 3. Legal Proceedings

On December 22, 2023, an arbitrator rendered a decision in favor of Ramapo Anesthesiologists, PC (“Ramapo”) and granted in part and denied in part certain claims brought against Origin Healthcare Solutions, LLC; Meridian Medical Management, Inc.; and the Company for alleged breach of contract and other allegations. Ramapo was awarded mitigation related costs of $117,000. The payment for such an award was made during the first quarter of 2024. The deadline for Ramapo to file a summary action in New Jersey seeking to overturn the arbitrator’s decision is April 20, 2024. The Company’s portion of the settlement is approximately $32,000 and our insurance will pay the balance. The Company’s portion has been recorded in accrued expenses in the December 31, 2023 consolidated balance sheet.

From time to time, we may become involved in other legal proceedings arising in the ordinary course of our business. Including the proceeding described above, we are not presently a party to any legal proceedings that, in the opinion of our management, would individually or taken together have a material adverse effect on our business, consolidated results of operations, financial position or cash flows of the Company.

Please see “Risk Factor - Acquisitions may subject us to liability with regard to the creditors, customers, and shareholders of the sellers.” in Part 1, Item 1A of this Annual Report on Form 10-K.

Item 4. Mine Safety Disclosures

None.

PART II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Our common stock has been listed since July 23, 2014 and is trading on the Nasdaq Global Market under the symbol “CCLD”.

Common Stockholders

As of December 31, 2023, there were approximately 6,800 holders of record of our common stock.

Dividends on Common Stock

We have not declared a cash dividend on our common stock since we became public on July 23, 2014, and currently we do not anticipate paying any cash dividends to holders of our common stock in the foreseeable future. The Company is prohibited from paying any dividends on common stock without the prior written consent of its senior lender, SVB.

Sales of Unregistered Securities

There were no sales of unregistered equity securities during the year ended December 31, 2023.

Purchases of Equity Securities by the Issuer and Affiliated Purchasers

There was no share repurchase activity during the three months ended December 31, 2023.

Securities Authorized for Issuance under the Equity Compensation Plan

As of December 31, 2023, the following table shows the number of securities to be issued upon vesting under the equity compensation plan approved by the Company’s Board of Directors.

Equity Compensation Plan Information

Item 6. [Reserved]

Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations

The following is a discussion of our consolidated financial condition and results of operations for the years ended December 31, 2023 and 2022 and other factors that are expected to affect our prospective financial condition. The following discussion and analysis should be read together with our Consolidated Financial Statements and related notes beginning on page F-1 of this Annual Report on Form 10-K.

Some of the statements set forth in this section are forward-looking statements relating to our future results of operations. Our actual results may vary from the results anticipated by these statements. Please see “Forward-Looking Statements” on page 2 of this Annual Report on Form 10-K.

Overview

The Company is a healthcare information technology company that provides technology-enabled business solutions and Software-as-a-Service offerings (“SaaS”), which are often bundled, but are occasionally provided individually, together with related business services to healthcare providers and hospitals throughout the United States. The SaaS component is not material to the overall contract compared to the stand-alone value of RCM. Our integrated SaaS platform includes technology-enabled revenue cycle management (“RCM”), practice management (“PM”), electronic health records (“EHR”), artificial intelligence (“AI”) tools, business intelligence, telehealth, patient experience management (“PXM”) solutions and complementary software tools and business services for high-performance medical groups and health systems.

At a high level, these solutions can be categorized as follows:

Our offshore operations in Pakistan and Sri Lanka together accounted for approximately 9% and 14% of total expenses for the years ended December 31, 2023 and 2022, respectively. A significant portion of those expenses were personnel-related costs (approximately 76% and 79% of foreign costs for the years ended December 31, 2023 and 2022, respectively). Because personnel-related costs are significantly lower in Pakistan and Sri Lanka than in the U.S. and many other offshore locations, we believe our offshore operations give us a competitive advantage over many industry participants. All of the medical billing companies that we have acquired used domestic labor or subcontractors from higher cost locations to provide all or a substantial portion of their services. We are able to achieve significant cost reductions as we shift these labor costs to our offshore operations.

Key Performance Measures

We consider numerous factors in assessing our performance. Key performance measures used by management include adjusted EBITDA, adjusted operating income, adjusted operating margin, adjusted net income and adjusted net income per share. These key performance measures are non-GAAP financial measures, which we believe better enable management and investors to analyze and compare the underlying business results from period to period.

These non-GAAP financial measures should not be considered in isolation, or as a substitute for or superior to, financial measures calculated in accordance with accounting principles generally accepted in the United States of America (“GAAP”). Moreover, these non-GAAP financial measures have limitations in that they do not reflect all the items associated with the operations of our business as determined in accordance with GAAP. We compensate for these limitations by analyzing current and future results on a GAAP basis, as well as a non-GAAP basis, and we provide reconciliations from the most directly comparable GAAP financial measures to the non-GAAP financial measures. Our non-GAAP financial measures may not be comparable to similarly titled measures of other companies. Other companies, including companies in our industry, may calculate similarly titled non-GAAP financial measures differently than we do, limiting the usefulness of those measures for comparative purposes.

Adjusted EBITDA, adjusted operating income, adjusted operating margin, adjusted net income and adjusted net income per share provide an alternative view of performance used by management and we believe that an investor’s understanding of our performance is enhanced by disclosing these adjusted performance measures.

Adjusted EBITDA excludes the following elements which are included in GAAP net (loss) income:

Set forth below is a presentation of our adjusted EBITDA for the years ended December 31, 2023 and 2022:

Adjusted operating income and adjusted operating margin exclude the following elements which are included in GAAP operating (loss) income:

Set forth below is a presentation of our adjusted operating income and adjusted operating margin, which represents adjusted operating income as a percentage of net revenue, for the years ended December 31, 2023 and 2022:

Adjusted net income and adjusted net income per share exclude the following elements which are included in GAAP net (loss) income:

No tax effect has been provided in computing non-GAAP adjusted net income and non-GAAP adjusted net income per share as the Company has sufficient carry forward net operating losses to offset the applicable income taxes. The following table shows our reconciliation of GAAP net (loss) income to non-GAAP adjusted net income for the years ended December 31, 2023 and 2022:

For purposes of determining non-GAAP adjusted earnings per share, the Company used the number of common shares outstanding at the end of December 31, 2023 and 2022. Non-GAAP adjusted diluted earnings per share was computed using an as-converted method and includes warrants that are in-the-money as of that date as well as outstanding unvested RSUs. Non-GAAP adjusted earnings per share and non-GAAP adjusted diluted earnings per share do not take into account dividends on the Preferred Stock. No tax effect has been provided in computing non-GAAP adjusted earnings per share and non-GAAP adjusted diluted earnings per share as the Company has sufficient carry forward net operating losses to offset the applicable income taxes.

Consolidated Statements of Operations Data

Consolidated Balance Sheet Data

Other Financial Data

To provide investors with additional insight and allow for a more comprehensive understanding of the information used by management in its financial and operational decision-making, we supplement our consolidated financial statements presented on a basis consistent with U.S. generally accepted accounting principles, or GAAP, with adjusted EBITDA, (previously defined), a non-GAAP financial measure of earnings.

Quarterly Results of Operations