Biggest changeFinancing and related risks • Our substantial debt could limit our ability to fund operations, expose us to interest rate volatility, limit our ability to raise additional capital and have a material adverse effect on our ability to fulfill our obligations under our credit agreement and indenture and to our Network Partners, Clients and members. • The indenture and the credit agreement contain covenants that impose significant operational and financial restrictions on us, and the failure to comply with these covenants would result in an event of default under these instruments. • We may be unable to generate or obtain sufficient capital to fund our business and growth strategy. -14- Table of Contents General Risk Factors • Our ability to secure insurance may not be sufficient to cover potential liabilities. • Natural disasters, pandemics or other epidemics (including the current COVID-19 pandemic), acts of terrorism, acts of war and other unforeseen events may cause damage or disruption to us or our customers. • Our quarterly operating results may fluctuate significantly from period to period, which could adversely impact the value of our common stock. • We do not intend to pay regular cash dividends on our common stock and, consequently, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock. • Provisions in our charter documents and under Delaware law could discourage a takeover that stockholders may consider favorable. • The exclusive forum provision in our amended and restated certificate of incorporation could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers or team members.
Biggest changeFinancing and related risks • Our substantial debt could limit our ability to fund operations, expose us to interest rate volatility, limit our ability to raise additional capital and have a material adverse effect on our ability to fulfill our obligations under our credit agreement and indenture and to our Network Partners, Clients and members. • The indenture and the credit agreement contain covenants that impose significant operational and financial restrictions on us, and the failure to comply with these covenants would result in an event of default under these instruments. • We may be unable to generate or obtain sufficient capital to fund our business and growth strategy.
Our direct HSA competitors are HSA custodians and administrators that include state or federally chartered banks, such as Webster and Optum Bank, insurance companies, well-known retail investment companies, such as Fidelity Investments, and non-bank custodians approved by the U.S. Treasury.
Our direct HSA competitors are HSA custodians and administrators that include state or federally chartered banks, such as Webster Bank and Optum Bank, insurance companies, well-known retail investment companies, such as Fidelity Investments, and non-bank custodians approved by the U.S. Treasury.
If we are unable to meet or exceed the net worth test required by the IRS, we could be unable to maintain our non-bank custodian status. As a non-bank custodian, we are required to comply with Treasury Regulations Section 1.408-2(e), or the Treasury Regulations, including the net worth requirements set forth therein.
If we are unable to meet or exceed the net worth test required by the IRS, we could be unable to maintain our non-bank custodian status. As a non-bank custodian, we are required to comply with Treasury Regulations Section 1.408-2(e), including the net worth requirements set forth therein.
In the provision of services to our customers, we and our third-party vendors may collect, access, use, maintain, and transmit personally identifiable information in ways that are subject to many of these laws and regulations. Although we have implemented measures to comply with these privacy laws, rules, and regulations, we have experienced data privacy incidents.
In the provision of services to our customers, we and our third-party vendors collect, access, use, maintain, and transmit personally identifiable information in ways that are subject to many of these laws and regulations. Although we have implemented measures to comply with these privacy laws, rules, and regulations, we have experienced data privacy incidents.
Increased focus on HSA-favorable healthcare regulatory reforms may create renewed interest and investment by our competitors in their HSA offerings and lead to greater competition, which could make it harder for us to maintain our growth trajectory.
An increased focus on HSA-favorable healthcare regulatory reforms may create renewed interest and investment by our competitors in their HSA offerings and lead to greater competition, which could make it harder for us to maintain our growth trajectory.
Our business depends on our Network Partners’ willingness to partner with us to offer their customers and/or employees our products and services. In particular, certain of our Network Partners enjoy significant market share in various geographic regions.
Our business increasingly depends on our Network Partners’ willingness to partner with us to offer their customers and/or employees our products and services. In particular, certain of our Network Partners enjoy significant market share in various geographic regions.
The CCPA requires companies, such as ours, that process information on California residents to make new disclosures to consumers about their data collection, use, and sharing practices, and allows consumers to opt out of certain data sharing with third parties and provides a new cause of action for data breaches.
The CPRA requires companies, such as ours, that process information on California residents to make new disclosures to consumers about their data collection, use, and sharing practices, and allows consumers to opt out of certain data sharing with third parties and provides a new cause of action for data breaches.
Legal and regulatory risks • The healthcare regulatory and political framework is uncertain and evolving, and we cannot predict the effect that further healthcare reform and other changes in government programs may have on our business, financial condition, or results of operations. • Changes in applicable federal and state laws relating to HSAs and other CDBs could materially adversely affect our business. • We are subject to privacy regulations, including regarding the access, use, and disclosure of personally identifiable information.
Legal and regulatory risks • The healthcare regulatory and political framework is uncertain and evolving, and we cannot predict the effect that further healthcare reform and other changes in government programs may have on our business, financial condition, or results of operations. -12- Table of Contents • Changes in applicable federal and state laws relating to HSAs and other CDBs could materially adversely affect our business. • We are subject to privacy regulations, including regarding the access, use, and disclosure of personally identifiable information.
Acquisitions also increase the risk of unforeseen legal liability, including for potential violations of applicable law or industry rules and regulations, arising from prior or ongoing acts or omissions by the acquired businesses which are not discovered by due diligence during the acquisition process.
Acquisitions also increase the risk of unforeseen legal liability, including for potential violations of applicable law or industry rules and regulations, arising from prior or ongoing acts or omissions by the acquired businesses that are not discovered by due diligence during the acquisition process.
Growth-related risks • We may not be able to operate, integrate, and scale our technology effectively to match our business growth. • Failure to manage future growth effectively could have a material adverse effect on our business, financial condition, and results of operations. • We may not accurately estimate the impact on our business of developing, introducing, and updating new and existing products and services. • We may need to record write-downs from future impairments of identified intangible assets and goodwill.
Growth-related risks • Our acquisition strategy may not be successful. • We may not be able to operate, integrate, and scale our technology effectively to match our business growth. • Failure to manage future growth effectively could have a material adverse effect on our business, financial condition, and results of operations. • We may not accurately estimate the impact on our business of developing, introducing, and updating new and existing products and services. • We may need to record write-downs from future impairments of identified intangible assets and goodwill.
We have in the past acquired, and, as a key part of our strategy, seek to acquire or invest in, assets, businesses, products, or technologies that we believe could complement or expand our products and services, enhance our technical capabilities, or otherwise offer growth opportunities.
We have in the past acquired, and, as a key part of our strategy, seek to acquire or invest in, assets, businesses, products, or technologies that we believe would complement or expand our products and services, enhance our technical capabilities, or otherwise offer growth opportunities.
We have seen an increase in Network Partners that have decided to offer HSAs or other CDBs directly to their customers, and a continuation of this trend would significantly reduce our channel partner opportunities. -18- Table of Contents Well-known retail mutual fund companies, such as Fidelity Investments, have entered the HSA and CDB business and gained significant market share.
We have seen an increase in Network Partners that have decided to offer HSAs or other CDBs directly to their customers, and a continuation of this trend would significantly reduce our channel partner opportunities. Well-known retail mutual fund companies, such as Fidelity Investments, have entered the HSA and CDB business and gained significant market share.
As a result, some of these competitors may be in a position to devote greater resources to the development, promotion, sale, and support of their products and services and have offered, or may in the future offer, a wider range of products and services that are increasingly desired by potential customers, and they may also use advertising and marketing strategies (including loss-leaders) that achieve broader brand recognition or acceptance.
As a result, some of these competitors are in a position to devote greater resources to the development, promotion, sale, and support of their products and services and have offered, or may in the future offer, a wider range of products and services that are increasingly desired by potential customers, and they have also used advertising and marketing strategies (including loss-leaders) that achieve broader brand recognition or acceptance.
Any disruption of service at our facilities or our third-party data centers could interrupt or delay our customers’ access to our products and services. The ability of our team members, members, Network Partners, and Clients to access our technology platforms is critical to our business.
Any disruption of service at our facilities or our third-party data centers and cloud service providers could interrupt or delay our customers’ access to our products and services. The ability of our team members, members, Network Partners, and Clients to access our technology platforms is critical to our business.
We attempt to mitigate these risks through various business continuity efforts, including redundant infrastructure, 24/7/365 system activity monitoring, backup and recovery procedures, use of a secure storage facility for backup -22- Table of Contents media, separate test systems, and change management and system security measures, but our precautions may not protect against all potential problems.
We attempt to mitigate these risks through various business continuity efforts, including redundant infrastructure, 24/7/365 system activity monitoring, backup and recovery procedures, use of a secure storage facility for backup media, separate test systems, and change management and system security measures, but our precautions may not protect against all potential problems.
The substantial debt we have outstanding, combined with our other financial obligations and contractual commitments, has important consequences, including the following: • our level of debt may make it more difficult for us to satisfy our obligations with respect to our debt, and any failure to comply with the obligations under any of our debt instruments, including restrictive covenants, could result in an event of default under the Credit Agreement or the Indenture and the agreements governing such other debt; • we will be required to use a substantial portion of our cash flow from operations to pay principal and interest on our debt, thereby reducing the availability of our cash flow to fund working capital, capital expenditures, strategic acquisitions, investments and alliances and other general corporate requirements; • our interest expense could increase if interest rates increase because any outstanding borrowings under our Credit Facilities will be based on variable interest rates; • the interest rate on our Revolving Credit Facility is based on LIBOR, and although the Credit Agreement provides an alternative mechanism for determining the applicable interest rate when LIBOR is no longer -29- Table of Contents available, the interest rates we pay may be adversely affected as a result of potential disruptions in connection with the LIBOR phase-out; • the interest rate on our Revolving Credit Facility will depend on the level of our specified financial ratios, and therefore could increase if such specified financial ratios increase; • such substantial debt could leave us vulnerable to general economic downturns and adverse competitive and industry conditions and could place us at a competitive disadvantage compared to those of our competitors that are less leveraged; • our debt service obligations could limit our flexibility to plan for, or react to, changes in our business and the industry in which we operate; • our level of debt may restrict us from raising additional financing on satisfactory terms to fund working capital, capital expenditures, strategic acquisitions, investments and joint ventures and other general corporate requirements; • our level of debt may prevent us from raising the funds necessary to repurchase all of the Notes tendered to us upon the occurrence of a change of control, which would constitute an event of default under the Indenture; and • a potential failure to comply with the financial and other restrictive covenants in any of our debt instruments, which, among other things, require us to maintain specified financial ratios, could, if not cured or waived, have a material adverse effect on our ability to fulfill our obligations under the Notes and on our business and prospects generally.
The substantial debt we have outstanding, combined with our other financial obligations and contractual commitments, has important consequences, including the following: • our level of debt may make it more difficult for us to satisfy our obligations with respect to our debt, and any failure to comply with the obligations under any of our debt instruments, including restrictive covenants, could result in an event of default under the Credit Agreement or the Indenture and the agreements governing such other debt; • we will be required to use a substantial portion of our cash flow from operations to pay principal and interest on our debt, thereby reducing the availability of our cash flow to fund working capital, capital expenditures, strategic acquisitions, investments and alliances and other general corporate requirements; • our interest expense has increased substantially, and could continue to increase, if interest rates continue to increase, because any outstanding borrowings under our Credit Facilities are based on variable interest rates; • the interest rate on our Revolving Credit Facility is based on LIBOR, and although the Credit Agreement provides an alternative mechanism for determining the applicable interest rate when LIBOR is no longer available, the interest rates we pay may be adversely affected as a result of potential disruptions in connection with the LIBOR phase-out; • the interest rate on our Revolving Credit Facility will depend on the level of our specified financial ratios, and therefore could increase if such specified financial ratios increase; • such substantial debt could leave us vulnerable to general economic downturns and adverse competitive and industry conditions and could place us at a competitive disadvantage compared to those of our competitors that are less leveraged; • our debt service obligations could limit our flexibility to plan for, or react to, changes in our business and the industry in which we operate; • our level of debt may restrict us from raising additional financing on satisfactory terms to fund working capital, capital expenditures, strategic acquisitions, investments and joint ventures and other general corporate requirements; • our level of debt may prevent us from raising the funds necessary to repurchase all of the Notes tendered to us upon the occurrence of a change of control, which would constitute an event of default under the Indenture; and • a potential failure to comply with the financial and other restrictive covenants in any of our debt instruments, which, among other things, require us to maintain specified financial ratios, could, if not cured or waived, have a material adverse effect on our ability to fulfill our obligations under the Notes and on our business and prospects generally. -27- Table of Contents The Indenture and the Credit Agreement contain covenants that impose significant operational and financial restrictions on us, and the failure to comply with these covenants would result in an event of default under these instruments.
If our members do not continue to utilize our payment cards, our results of operations, business, and prospects would be materially adversely affected. We derived 17%, 15%, and 16% of our total revenue during the fiscal years ended January 31, 2022, 2021, and 2020, respectively, from interchange fees that are paid to us when our customers utilize our payment cards.
If our members do not continue to utilize our payment cards, our results of operations, business, and prospects would be materially adversely affected. We derived 17%, 17%, and 15% of our total revenue during the fiscal years ended January 31, 2023, 2022, and 2021, respectively, from interchange fees that are paid to us when our customers utilize our payment cards.
We, and the banks that issue our prepaid debit cards, are subject to Payment Card Industry Data Security Standards and Visa and MasterCard association rules that could subject us to a variety of fines or penalties that may be levied by the card associations or networks for acts or omissions by us or businesses that work with us, including card processors.
We, and the banks that issue our prepaid debit cards, are subject to Payment Card Industry Data Security Standards and Visa and MasterCard association rules that could subject us to a variety of fines or penalties that may be levied by the card associations or networks for acts or omissions by us or businesses that work with us, -22- Table of Contents including card processors.
If our business does not continue to grow or if we fail to effectively manage any future growth, our business, financial condition, and results of operations could be materially and adversely affected. -28- Table of Contents We may not accurately estimate the impact on our business of developing, introducing, and updating new and existing products and services.
If our business does not continue to grow or if we fail to effectively manage any future growth, our business, financial condition, and results of operations could be materially and adversely affected. We may not accurately estimate the impact on our business of developing, introducing, and updating new and existing products and services.
Integration of our acquisitions could take longer than anticipated and could result in the loss of key team members, the disruption of our ongoing business and the acquired business, tax costs or inefficiencies, or inconsistencies in standards, controls, information technology systems, procedures and policies, any of which could adversely affect our ability to maintain relationships with team members, Clients, Network Partners or other third parties, and could harm our financial performance.
Integration of our acquisitions could take longer and be more costly than anticipated, and it could result in the loss of key team members, the disruption of our ongoing business and the acquired business, tax costs or inefficiencies, or inconsistencies in standards, controls, information technology systems, procedures and policies, any of which could adversely affect our ability to maintain relationships with team members, Clients, Network Partners or other third parties, and could harm our financial performance.
We rely on a combination of trademark and copyright laws, trade secret protection, and confidentiality and license agreements to protect the intellectual property rights related to our products and services such as our technology platforms, applications and the content on our website. We also rely on intellectual property licensed from third parties.
We rely on a combination of trademark and copyright laws, trade secret protection, and confidentiality and license agreements to protect the intellectual property rights related to our products and services such as our technology platforms, applications and the content on our website. We also rely on intellectual property licensed from third -20- Table of Contents parties.
Our facilities and our third-party data centers are vulnerable to interruption or damage from a number of sources, many of which are beyond our control, including, without limitation: • extended power loss; • telecommunications failures from multiple telecommunications providers; • natural disaster or an act of terrorism; • software and hardware errors, or failures in our own systems or in other systems; • network environment disruptions such as computer viruses, hacking and similar problems in our own systems and in other systems; • theft and vandalism of equipment; and • actions or events caused by or related to third parties.
Our facilities, our third-party data centers, and our cloud service providers are vulnerable to interruption or damage from a number of sources, many of which are beyond our control, including, without limitation: • extended power loss; • telecommunications failures from multiple telecommunications providers; • natural disaster or an act of terrorism; -19- Table of Contents • software and hardware errors, or failures in our own systems or in other systems; • network environment disruptions such as computer viruses, hacking and similar problems in our own systems and in other systems; • theft and vandalism of equipment; and • actions or events caused by or related to third parties.
If our customers do not use these payment cards at the rate we expect, if they elect to withdraw funds using a non-revenue generating mechanism such as direct reimbursement, if the impacts of the COVID-19 pandemic continue, or if other alternatives to these payment cards develop, our results of operations, business, and prospects would be materially adversely affected.
If our customers do not use these payment cards at the rate we expect, if they elect to withdraw funds using a non-revenue generating mechanism such as direct reimbursement, if the impacts of societal changes arising out of the COVID-19 pandemic continue, or if other alternatives to these payment cards develop, our results of operations, business, and prospects would be materially adversely affected.
A transition to a new vendor could take a significant amount of time and resources and, if we are unable to complete a transition to a new provider on a timely basis, or at all, we could be forced to temporarily or permanently discontinue certain services, such as our payment card services, which could disrupt services to our customers and adversely affect our business, financial condition, and results of operations.
Transitioning to a new vendor often takes a significant amount of time and resources and, if we are unable to complete a transition to a new provider on a timely basis, or at all, we could be forced to temporarily or permanently discontinue certain services, such as our payment card services, which could disrupt services to our customers and adversely affect our business, financial condition, and results of operations.
These fees represent a percentage of the expenses transacted on each card. The COVID-19 pandemic has had a materially adverse impact on the interchange fees generated due to decreased usage of our payment cards in our commuter product and in healthcare spending.
These fees represent a percentage of the expenses transacted on each card. For example, the COVID-19 pandemic had a materially adverse impact on the interchange fees generated due to decreased usage of our payment cards in our commuter product and in healthcare spending.
As a result of any such dispute, we may have to: • develop non-infringing technology; • pay damages; • enter into royalty or licensing agreements; -23- Table of Contents • cease providing certain products or services; or • take other actions to resolve the claims.
As a result of any such dispute, we may have to: • develop non-infringing technology; • pay damages; • enter into royalty or licensing agreements; • cease providing certain products or services; or • take other actions to resolve the claims.
State and federal laws and regulations govern the collection, dissemination, access, and use of personally identifiable information, including HIPAA and HITECH, which govern the treatment of protected health information, and the Gramm-Leach Bliley Act, which governs the treatment of nonpublic personal information.
State and federal laws and regulations govern the collection, dissemination, access, and use of personally identifiable information, including HIPAA and HITECH, which govern the treatment of protected health information, -21- Table of Contents and the Gramm-Leach Bliley Act, which governs the treatment of nonpublic personal information.
Our other CDB administration competitors include health insurance carriers, human resources consultants and outsourcers, payroll providers, national CDB specialists, regional third-party administrators, and commercial banks, and these competitors may enter the HSA market or expand existing HSA offerings to compete with us.
Our other CDB administration competitors include health insurance carriers, human resources consultants and outsourcers, payroll providers, national CDB specialists, regional third-party administrators, and commercial banks, and these competitors have entered, and others may also enter, the HSA market or expand existing HSA offerings to compete with us.
Substantially all of our revenue is derived from healthcare-related saving and spending by consumers, which could be affected by changes affecting the broader healthcare industry, including decreased spending in the industry overall.
Substantially all of our revenue is derived from healthcare-related saving and spending by consumers, which could be affected by changes affecting the broader healthcare industry, including decreased spending in the industry -16- Table of Contents overall.
We may make our members whole for losses sustained when using our payment cards, even in instances where we are not directly responsible -21- Table of Contents for the underlying cause of such loss.
We may make our members whole for losses sustained when using our payment cards, even in instances where we are not directly responsible for the underlying cause of such loss.
Failure to adequately place and safeguard our custodial assets, or the failure of any of our depository or insurance company partners, could materially and adversely affect our business, financial condition and results of operations.
Failure to adequately place and safeguard our custodial assets and Client-held funds, or the failure of any of our depository or insurance company partners, could materially and adversely affect our business, financial condition and results of operations.
Such requirements relate to, among other things, fiduciary duties to clients, disclosure obligations, recordkeeping and reporting requirements, marketing restrictions, limitations on agency cross and principal transactions between the adviser and its clients, and general -26- Table of Contents anti-fraud prohibitions.
Such requirements relate to, among other things, fiduciary duties to clients, disclosure obligations, recordkeeping and reporting requirements, marketing restrictions, limitations on agency cross and principal transactions between the adviser and its clients, and general anti-fraud prohibitions.
Our consolidated balance sheet includes significant intangible assets, including approximately $1.65 billion in goodwill and $973.1 million in intangible assets, together representing approximately 84% of our total assets as of January 31, 2022. The determination of related estimated useful lives and whether these assets are impaired involves significant judgments.
Our consolidated balance sheet includes significant intangible assets, including approximately $1.65 billion in goodwill and $936.4 million in intangible assets, together representing approximately 84% of our total assets as of January 31, 2023. The determination of related estimated useful lives and whether these assets are impaired involves significant judgments.
We have entered into contracts with third-party vendors to provide critical services relating to our business, including the redesign of our technology platforms, fraud management and other customer verification services, transaction processing and settlement, telephony services, call centers and card production.
Replacing our third-party vendors would be difficult and disruptive to our business. We have entered into contracts with third-party vendors to provide critical services relating to our business, including the redesign of our technology platforms, fraud management and other customer verification services, transaction processing and settlement, telephony services, call centers and card production.
Any diminution in, elimination of, or change in the availability of tax benefits for HSAs and other CDBs, or in the use of these accounts, would materially adversely affect us. Substantially all of our revenue is earned from tax-advantaged HSAs and other CDBs.
Risks relating to our business and industry Any diminution in, elimination of, or change in the availability of tax benefits for HSAs and other CDBs, or in the use of these accounts, would materially adversely affect us. Substantially all of our revenue is earned from tax-advantaged HSAs and other CDBs.
Risk Factors Summary The following is a summary of the principal risks that could adversely affect our business, operations and financial results: Risks relating to our business and industry • The COVID-19 pandemic has materially impacted our business and this impact may continue. • Our acquisition strategy and the integration of our recent and future acquisitions may not be successful. • Our management has identified material weaknesses in our internal control over financial reporting that could adversely affect our ability to report our financial condition and results of operations in a timely and accurate manner. • Any diminution in, elimination of, or change in the availability of tax benefits for HSAs and other CDBs, or in the use of these accounts, would materially adversely affect us. • Failure to adequately place and safeguard our custodial assets, or the failure of any of our depository or insurance company partners, could materially and adversely affect our business, financial condition and results of operations. • A decline in interest rate levels, including an environment of negative interest rates, may reduce our ability to earn income on our HSA Assets and Client-held funds and to attract HSA contributions. • If we are not successful in adapting to our rapidly evolving industry, our growth may be limited, and our business may be adversely affected. • We may be unable to compete effectively against our current and future competitors. • Developments in the rapidly changing healthcare industry could adversely affect our business. • If our members do not continue to utilize our payment cards, our results of operations, business, and prospects would be materially adversely affected.
Risk factors summary The following is a summary of the principal risks that could adversely affect our business, operations and financial results: Risks relating to our business and industry • Any diminution in, elimination of, or change in the availability of tax benefits for HSAs and other CDBs, or in the use of these accounts, would materially adversely affect us. • Failure to adequately place and safeguard our custodial assets and Client-held funds, or the failure of any of our depository or insurance company partners, could materially and adversely affect our business, financial condition and results of operations. • Integration of our recent acquisitions may not be successful. • A decline in interest rate levels, including an environment of negative interest rates, would reduce our ability to earn income on our HSA Assets and Client-held funds and to attract HSA contributions. • If we are not successful in adapting to our rapidly evolving industry, our growth may be limited, and our business may be adversely affected. • We may be unable to compete effectively against our current and future competitors. • Developments in the rapidly changing healthcare industry could adversely affect our business. • The COVID-19 pandemic and resulting societal and economic changes has materially impacted our business and this impact may continue. • If our members do not continue to utilize our payment cards, our results of operations, business, and prospects would be materially adversely affected. • Failure to maintain effective internal control over financial reporting could have a material adverse effect on our reputation, results of operations and financial condition.
Data security, technological, and intellectual property risks • Cyber-attacks, including ransomware attacks, or other privacy or data security incidents could materially adversely impact our business. • Fraudulent and other illegal activity involving our products and services could lead to financial and reputational damage to us and reduce the use and acceptance of our products and services. • We rely on software licensed from third parties that may be difficult to replace or that could cause errors or failures of our technology platforms that could lead to lost customers or harm to our reputation. • Developing and implementing new and updated applications, features, and services for our technology platforms may be more difficult than expected, may take longer and cost more than expected, or may result in the platforms not operating as expected. • Any disruption of service at our facilities or our third-party data centers could interrupt or delay our customers’ access to our products and services. • Interruption or failure of our information technology and communications systems could impair our ability to effectively deliver our products and services. -13- Table of Contents • Our technology platforms may link to or utilize open source software, and any failure to comply with the terms of one or more of these open source licenses could negatively affect our business. • Failure to adequately protect our brands and other intellectual property rights, and infringement of the intellectual property rights of others, would negatively impact our business. • If we are unable to promote our brands effectively, our business may suffer. • Confidentiality arrangements with team members and others may not adequately prevent disclosure of trade secrets and other proprietary information.
Data security, technological, and intellectual property risks • Cyber-attacks, including ransomware attacks, or other privacy or data security incidents could materially adversely impact our business. • Fraudulent and other illegal activity involving our products and services could lead to financial and reputational damage to us and reduce the use and acceptance of our products and services. • We rely on software licensed from third parties that may be difficult to replace or that could cause errors or failures of our technology platforms that could lead to lost customers or harm to our reputation. • Developing and implementing new and updated applications, features, and services for our technology platforms may be more difficult than expected, may take longer and cost more than expected, or may result in the platforms not operating as expected. • Any disruption of service at our facilities or our third-party data centers and cloud providers could interrupt or delay our customers’ access to our products and services. • Interruption or failure of our information technology and communications systems could impair our ability to effectively deliver our products and services. • Our technology platforms may link to or utilize open source software, and any failure to comply with the terms of one or more of these open source licenses could negatively affect our business. • Failure to adequately protect our brands and other intellectual property rights, and infringement of the intellectual property rights of others, would negatively impact our business.
Our competitors may also establish or strengthen cooperative relationships with our current or future Network Partners or other strategic partners, thereby limiting our ability to promote our solution with these parties.
Our competitors have and may continue to establish or strengthen cooperative relationships with our current or future Network Partners or other strategic partners, thereby limiting our ability to promote our solution with these parties.
Even if we can secure our systems against these activities, we are vulnerable through third parties. We rely upon third parties for some transaction processing services, data feeds, and vendors, which subjects us to risks related to the vulnerabilities of those third parties.
Even if we can secure our systems against these activities, we -18- Table of Contents are vulnerable through third parties. We rely upon third parties for certain services, such as some transaction processing services and data feeds, which subjects us to risks related to the vulnerabilities of those third parties.
This software may not continue to be available to us on commercially reasonable terms and any loss of the right to use any of this software could result in delays in the provisioning of our products and services until equivalent technology is either developed by us, or, if available, identified, obtained, and integrated, which would likely take a significant amount of time and harm our business.
This software may experience outages, may not continue to be available to us on commercially reasonable terms and any loss of the right to use any of this software could result in, among others, delays in producing our financial statements, risks to our security environment, or the provisioning of our products and services until equivalent technology is either developed by us, or, if available, identified, obtained, and integrated, which would likely take a significant amount of time and harm our business.
Our subsidiary HealthEquity Trust Company is a non-depository trust company and subject to regulation and supervision by the Wyoming Division of Banking. Compliance with regulatory requirements may divert internal resources and take significant time and effort.
Our subsidiary HealthEquity Trust Company is a non-depository trust company and subject to regulation and supervision by the Wyoming Division of Banking. Compliance with regulatory requirements requires resources and takes significant time and effort.
We may also be unable to establish comparable new third-party relationships on as favorable terms or at all, which could materially and adversely affect our business, financial condition, and results of operations.
We may also be unable to establish comparable new third-party relationships on as favorable terms or at all, which could materially and adversely affect our business, financial condition, and results of operations. Growth-related risks Our acquisition strategy may not be successful.
If we were required to change BIN sponsors, we could not accurately predict the success of such change or that the terms of our agreement with a new BIN sponsor would be as favorable to us, especially in light of the regulatory scrutiny of the payment card industry, which has rendered the market for BIN sponsor services less competitive. -27- Table of Contents Replacing our third-party vendors would be difficult and disruptive to our business.
If we were required to change BIN sponsors, we could not accurately predict the success of such change or that the terms of our agreement with a new BIN sponsor would be as favorable to us, especially in light of the regulatory scrutiny of the payment card industry, which has rendered the market for BIN sponsor services less competitive.
To fund our expanding business and growth strategy, we must have sufficient working capital to continue to make significant investments in our service offerings, advertising, technology, and other activities.
We may be unable to generate or obtain sufficient capital to fund our business and growth strategy. To fund our expanding business and growth strategy, we must have sufficient working capital to continue to make significant investments in our service offerings, advertising, technology, and other activities.
The success of our acquisitions will depend in part on our ability to realize the anticipated business opportunities from combining the operations of these businesses with our business in an efficient and effective manner.
The success of our recent acquisitions depends in part on our ability to realize the anticipated business opportunities from combining the operations of the acquired businesses with our business in an efficient and effective manner.
The pursuit of potential acquisitions may divert the attention of management and cause us to incur -15- Table of Contents various expenses related to identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated.
The pursuit of potential acquisitions has in the past, and may in the future, divert the attention of management and cause us to incur various expenses related to identifying, investigating, and pursuing suitable acquisitions, whether or not they are consummated.
Any unscheduled interruption in our service could negatively impact our financial results. In addition, our insurance policies provide only limited coverage for service interruptions and may not adequately compensate us for any losses that may occur due to any failures or interruptions in our systems.
In addition, our insurance policies provide only limited coverage for service interruptions and may not adequately compensate us for any losses that may occur due to any failures or interruptions in our systems.
Privacy regulation has become a priority issue in many states, and as such the regulatory environment is continually changing. For example, the California Consumer Privacy Act ("CCPA") became effective on January 1, 2020.
Privacy regulation has become a priority issue in many states, and as such the regulatory environment is continually changing. For example, the CPRA became effective on January 1, 2023.
We cannot ensure that the measures we have taken to enable access to our technology platforms will be effective to prevent or minimize interruptions to our operations. Our technology platforms are hosted by third-party data centers.
We cannot ensure that the measures we have taken to enable access to our technology platforms will be effective to prevent or minimize interruptions to our operations. Our technology platforms are hosted by third-party data centers, and we increasingly rely on third-party cloud service providers to support our technology platforms.
In certain geographies, we have multiple Network Partners that may be competing against each other for the same business, which may result in our inability to bid for certain business or could result in us upsetting a Network Partner that we choose not to partner with in a certain bid or that expects us to bid exclusively with them.
In other geographies, we have multiple Network Partners that compete against each other for the same business, which at times results in our inability to bid for certain business or in us upsetting a Network Partner that we choose not to partner with in a certain bid or that expects us to bid exclusively with them.
As we continue to grow, including through the integration of team members joining us through our acquisitions, we have found it difficult to maintain these important aspects of our corporate culture.
As we continue to grow, including through the integration of team members joining us through our acquisitions, we have found it difficult to maintain these important aspects of our corporate culture. In addition, it is difficult to instill our culture in our now predominantly remote workforce.
Accordingly, we must continue to develop new and updated applications, features, and services, and maintain existing applications, features, and services.
Accordingly, we are continuing to develop new and updated applications, features, and services, and maintain existing applications, features, and services.
The loss of our intellectual property or the inability to secure or enforce our intellectual property rights or to defend successfully against an infringement action could harm our business, results of operations, financial condition, and prospects. If we are unable to promote our brands effectively, our business may suffer.
The loss of our intellectual property or the inability to secure or enforce our intellectual property rights or to defend successfully against an infringement action could harm our business, results of operations, financial condition, and prospects.
Changes to the regulatory landscape impacting our products may require substantial time and costs for us to ensure our products are compliant. For example, regulatory changes related to our FSA and COBRA products enacted in the wake of the COVID-19 pandemic created uncertainty and additional workload on our team members and resulted in additional costs.
For example, regulatory changes related to our FSA and COBRA products enacted in the wake of the COVID-19 pandemic created uncertainty and additional workload on our team members and resulted in additional costs.
Continued compliance with current and potential new privacy laws, rules, and regulations and meeting consumer expectations with respect to the control of personal data in a rapidly changing technology environment could result in higher compliance and technology costs for us, as well as costly penalties in the event we are deemed to not be in compliance with such laws, rules, and regulations. -25- Table of Contents Legislative, regulatory, and legal developments involving taxes could adversely affect our results of operations and cash flows.
Continued compliance with current and potential new privacy laws, rules, and regulations and meeting consumer expectations with respect to the control of personal data in a rapidly changing technology environment could result in higher compliance and technology costs for us, as well as costly penalties in the event we are deemed to not be in compliance with such laws, rules, and regulations.
A BIN sponsor is a bank or credit union that provides the BIN that allows a prepaid card program to run on one of the major card brand networks (e.g., VISA, MasterCard, Discover or American Express).
We rely on a limited number of bank identification number ("BIN") sponsors in relation to the payment cards we issue. A BIN sponsor is a bank or credit union that provides the BIN that allows a prepaid card program to run on one of the major card brand networks (e.g., VISA, MasterCard, Discover or American Express).
Interruptions in our service could negatively impact our financial results, and our reputation could be damaged if our systems are viewed as unreliable. Our systems and operations are vulnerable to damage or interruption from earthquakes, terrorist attacks, floods, fires, power loss, break-ins, hardware or software failures, telecommunications failures, computer viruses or other attempts to harm our systems, and similar events.
Our systems and operations are vulnerable to damage or interruption from earthquakes, terrorist attacks, floods, fires, power loss, break-ins, hardware or software failures, failures from third-party vendors who support our systems and operations, telecommunications failures, computer viruses or other attempts to harm our systems, and similar events. Any unscheduled interruption in our service could negatively impact our financial results.
As of January 31, 2022, we had approximately 7.2 million HSAs and $19.6 billion in HSA assets representing growth of 25% and 37%, respectively, from January 31, 2021. Our growth strategy contemplates further increasing the number of our HSAs, CDBs and our HSA Assets at relatively higher growth rates than industry averages.
As of January 31, 2023, we had approximately 8.0 million HSAs and $22.1 billion in HSA assets representing growth of 11% and 13%, respectively, from January 31, 2022. Our growth strategy contemplates further increasing the number of our HSAs, CDBs and our HSA Assets at relatively higher growth rates than industry averages.
For example, the Credit Agreement may make it more challenging to incur additional debt, as it includes prohibitions against incurring additional debt without approval from our existing lenders, and other lenders may not be willing to take on the risk of adding to our existing leverage, In addition, debt financing increases expenses, may contain additional covenants that restrict the operation of our business and must be repaid regardless of operating results.
For example, the Credit Agreement may make it more challenging to incur additional debt, as it includes prohibitions against incurring additional debt without approval from our existing lenders, and other lenders may not be willing to take on the risk of adding to our existing leverage.
Item 1A. Risk factors You should carefully consider the risks described below together with the other information set forth in this Annual Report on Form 10-K, which could materially affect our business, financial condition, and future results. The risks described below are not the only risks facing our company.
Item 1A. Risk factors You should carefully consider the risks described below together with the other information set forth in this Annual Report on Form 10-K. If any of the risks described below are realized, our business, financial condition, results of operations, and prospects could be materially and adversely affected.
We partner with our depository and insurance company partners to hold our HSA Assets and other Client-held funds. We earn a significant portion of our consolidated revenue from fees we earn from our depository and insurance company partners, approximately 27%, 26%, and 34% during the fiscal years ended January 31, 2022, 2021, and 2020, respectively.
We earn a significant portion of our consolidated revenue from fees we earn from our depository and insurance company partners, approximately 33%, 27%, and 26% during the fiscal years ended January 31, 2023, 2022, and 2021, respectively.
The extent to which the COVID-19 pandemic will continue to negatively impact our business remains highly uncertain and, as a result, may continue to have a material and adverse impact on our business and financial results. Our acquisition strategy and the integration of our recent and future acquisitions may not be successful.
The extent to which the COVID-19 pandemic and the societal and economic changes arising out of the pandemic will continue to negatively impact our business remains highly uncertain and, as a result, may continue to have a material and adverse impact on our business and financial results.
Such penalties or reductions, if imposed, could have a material and adverse impact on our business, financial condition and results of operations. In addition, certain of our insurance company partners have commitments to us with respect to the interest rates paid; however, some of these commitments are conditional upon certain market events and/or satisfaction of our obligations to the partner.
In addition, certain of our insurance company partners have commitments to us with respect to the interest rates paid; however, some of these commitments are conditional upon certain market events and/or satisfaction of our obligations to the partner.
Risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially adversely affect our business, financial condition, and operating results. If any of the following risks are realized, our business, financial condition, results of operations, and prospects could be materially and adversely affected.
The risks described below are not the only risks facing our company. Risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially adversely affect our business, financial condition, and operating results.
We cannot provide assurance that, if the indebtedness under our Credit Facilities or the Notes were to be accelerated, our assets would be sufficient to repay in full that indebtedness and our other indebtedness.
We cannot provide assurance that, if the indebtedness under our Credit Facilities or the Notes were to be accelerated, our assets would be sufficient to repay in full that indebtedness and our other indebtedness. If not cured or waived, such acceleration could have a material adverse effect on our business and our prospects.
Risks relating to our business and industry The COVID-19 pandemic has materially impacted our business and this impact may continue. Our business has been, and may continue to be, materially and adversely affected by the COVID-19 pandemic.
The COVID-19 pandemic and resulting societal and economic changes has materially impacted our business and this impact may continue. Our business has been adversely affected by the COVID-19 pandemic, and we may continue to be adversely affected by the societal and economic changes arising out of the pandemic.
Our inability to generate or obtain the financial resources needed to fund our business and growth strategies may require us to delay, scale back or eliminate some or all of our operations or the expansion of our business, which may have a material adverse effect on our business, operating results, financial condition, and prospects.
Our inability to generate or obtain the financial resources needed to fund our business and growth strategies may require us to delay, scale back or eliminate some or all of our operations or the expansion of our business, which may have a material adverse effect on our business, operating results, financial condition, and prospects. -28- Table of Contents General risk factors Natural disasters, pandemics or other epidemics, acts of terrorism, acts of war, adverse economic conditions, and other unforeseen events, may cause damage or disruption to us or our customers.
A decline in prevailing interest rates, such as the current low interest rate environment due to the COVID-19 pandemic, or a negative interest rate environment, has and may continue to negatively affect our business by reducing the yield we realize on our HSA Assets and other Client-held funds.
A decline in prevailing interest rates has in the past and may again in the future negatively affect our business by reducing the yield we realize on our HSA Assets and other Client-held funds. A negative interest rate environment would also reduce the yield we realize on our HSA Assets and other Client-held funds.
Such security breaches could compromise our networks and result in the information stored or transmitted there to be accessed, publicly disclosed, lost, or stolen.
Despite our security measures, our information technology and infrastructure are vulnerable to cybersecurity threats, including attacks by hackers and other malfeasance. Such security breaches could compromise our networks and result in the information stored or transmitted there to be accessed, publicly disclosed, lost, or stolen.
If we are not able to achieve these objectives and realize the anticipated synergies expected from these acquisitions within the anticipated timing or at all, our business, financial condition, and operating results may be adversely affected. The Further business is being carved out from the operations of its parent company.
If we are not able to achieve these objectives and realize the synergies expected from these acquisitions within the anticipated timing or at all, our business, financial condition, and operating results may be adversely affected. Our management team and other team members are spending significant amounts of time on integration efforts relating to the Further Acquisition.
If these Network Partners choose to instead partner with our competitors, or otherwise reduce offering, or cease to offer, our products and services, our results of operations, business, and prospects could be materially adversely affected.
If these Network Partners choose to instead partner with our competitors, or otherwise reduce offering, or cease to offer, our products and services, our results of operations, business, and prospects could be materially adversely affected. -24- Table of Contents A change in relationship with any of our bank identification number sponsors, or the failure by these sponsors to comply with certain banking regulations, could materially and adversely affect our business.
Our success depends, in part, on the skills, working relationships and continued services of our executive leadership team and other key personnel.
We rely on our management team and team members and our business could be harmed if we are unable to retain qualified personnel. Our success depends, in part, on the skills, working relationships and continued services of our executive leadership team and other key personnel.
Our success depends on the willingness of consumers to increase their use of HSAs and other CDBs, our ability to increase engagement, and our ability to demonstrate the value of our services to our existing and potential Clients, Network Partners and members.
These projects carry risks, such as cost overruns, delays in delivery, performance problems, and lack of acceptance by our Clients, Network Partners and members. -15- Table of Contents Our success depends on the willingness of consumers to increase their use of HSAs and other CDBs, our ability to increase engagement, and our ability to demonstrate the value of our services to our existing and potential Clients, Network Partners and members.
If we fail to comply with those minimum HSA Asset requirements, including as a result of withdrawals by our members, we may be subject to penalties payable to our partners or a reduction in the interest payable. These requirements accordingly restrict our ability to quickly terminate our arrangements with these partners and remove our HSA Assets.
If we fail to comply with those minimum HSA Asset requirements, including as a result of withdrawals by our members, we may be subject to penalties payable to our partners or a reduction in the interest payable. Such penalties or reductions, if imposed, could have a material and adverse impact on our business, financial condition and results of operations.
In addition to any potential penalties payable, if we were required to change depository or insurance company partners, we cannot accurately predict the success of such change or that the terms of our agreement with the new partner would be as favorable to us as our current agreements. -17- Table of Contents A decline in interest rate levels, including an environment of negative interest rates, may reduce our ability to earn income on our HSA Assets and Client-held funds and to attract HSA contributions.
In addition to any potential penalties payable, if we were required to change depository or insurance company partners, we cannot accurately predict the success of such change or that the terms of our agreement with the new partner would be as favorable to us as our current agreements. -14- Table of Contents Integration of our recent acquisitions may not be successful.
We may be unable to meet our service level commitments to our Clients as a result of disruptions to our work force and disruptions to third-party contractors that we rely on to provide our services.
Outbreaks of new COVID-19 variants or other future pandemics may result in us being unable to meet our service level commitments to our Clients and Network Partners as a result of disruptions to our workforce and disruptions to third-party contractors that we rely on to provide our services.
For example, competition for qualified personnel in our field and geographic markets is intense due to the limited number of individuals who possess the skills and experience required by our industry, particularly in the technology-related fields.
For example, competition for qualified personnel in our field is intense due to the limited number of individuals who possess the skills and experience required by our industry, particularly in technology-related fields where we have recently experienced significant turnover. New hires require significant training and, in most cases, take significant time before they achieve full productivity.
Costly and time-consuming litigation could be necessary to enforce and determine the scope of our proprietary rights, and failure to obtain or maintain trade secret protection could adversely affect our competitive business position. -24- Table of Contents Legal and regulatory risks The healthcare regulatory and political framework is uncertain and evolving, and we cannot predict the effect that further healthcare reform and other changes in government programs may have on our business, financial condition, or results of operations.
Legal and regulatory risks The healthcare regulatory and political framework is uncertain and evolving, and we cannot predict the effect that further healthcare reform and other changes in government programs may have on our business, financial condition, or results of operations.
Natural disasters, pandemics or other epidemics (including the current COVID-19 pandemic) acts of war (including the current war between Russia and Ukraine), terrorist attacks, and the escalation of military activity in response to such attacks or otherwise may have negative and significant effects, such as imposition of increased security measures, changes in applicable laws, market disruptions, and job losses.
Natural disasters, pandemics or other epidemics, acts of war (including the current war between Russia and Ukraine), terrorist attacks, the escalation of military activity in response to such attacks, adverse economic conditions (including the recent increase in inflation and its impact on our labor and third-party vendor costs), or otherwise may have negative and significant effects, such as imposition of increased security measures, changes in applicable laws, market disruptions, increased costs to operate our business, reduced economic activity among our clients, and job losses, which could in turn have a material adverse effect on our business, financial condition, and results of operations.
The full impact of healthcare reform and other changes in the healthcare industry and in healthcare spending is unknown and may be affected by President Biden's administration and a Democratically controlled Congress. Accordingly, we are unable to predict what effect healthcare reform measures will have on our business.
The full impact of healthcare reform and other changes in the healthcare industry and in healthcare spending is unknown. Accordingly, we are unable to predict what effect healthcare reform measures will have on our business. Changes in applicable federal and state laws relating to HSAs and other CDBs could materially adversely affect our business.