NASDAQ: OM

We have generated meaningful evidence to demonstrate that providers can realize significant operational efficiencies, including reducing the cost of their dialysis programs. In addition, Tablo has been shown to deliver robust clinical care. In studies and surveys we have conducted, patients have reported quality of life benefits on Tablo compared to other dialysis machines. We believe Tablo empowers patients, who have traditionally been passive recipients of care, to regain agency and ownership of their treatment.

Kidney failure can be temporary and occur spontaneously due to an underlying medical condition, as is the case in acute kidney injury (AKI), or can worsen gradually over time, as is the case in chronic kidney disease (CKD), which may result in end-stage renal disease (ESRD). Kidney failure is commonly managed with hemodialysis, a procedure by which waste products and excess fluid are directly removed from a patient’s blood using an external dialysis machine. ESRD patients require complex management and the cost burden of administering dialysis is significant. Hemodialysis can be performed in multiple care settings, including the hospital, clinic or the patient’s home. Typically, different types of dialysis machines are used in different care settings and for different clinical needs. Tablo is an enterprise dialysis solution that allows providers to standardize to a single technology platform.

Driving adoption of Tablo in the acute setting has been our primary focus since Tablo’s clearance by the FDA for use in an acute or chronic care facility. We have experience helping nearly 1,000 acute-care facilities, with the goal of making dialysis financially, operationally and clinically better.

We support hospitals with our expertise, technology, data and analytics, electronic-health-record integration, dedicated service infrastructure, clinical insights and dialysis know-how to help stand up, take to scale and maintain an insourced dialysis service line. By standing up an insourced dialysis service line, certain of our customers have reported saving millions of dollars, reducing central-line blood stream infection rates, reducing length of stay in the intensive care unit (ICU), improving accreditation compliance, and improving nurse satisfaction and retention.

We have invested in growing our economic and clinical evidence, built field service, sales and clinical support teams with significant expertise, and implemented a comprehensive training and customer experience program. Our experience in the acute market has demonstrated Tablo’s clinical flexibility and operational versatility, while also delivering meaningful cost savings to the providers. In addition, we are working with skilled nursing facilities (SNFs), long-term acute care hospitals (LTACHs), and other post-acute providers to raise awareness of Tablo’s economic and clinical benefits to them and to patients. We plan to continue leveraging our commercial infrastructure, including our sales, field service and marketing teams, to broaden our installed base in the acute and post-acute care markets, as well as driving utilization and fleet expansion with our existing customers.

Tablo is also utilized for home-based dialysis. In 2020, Tablo was cleared by the FDA for patient use in the home. We believe our ability to reduce training time, patient dropout, and supplies and infrastructure required to deliver dialysis in the home can drive efficiency and economic improvements to the home care model. In our home investigational device exemption (IDE) trial, patients reported specific quality of life improvements compared to their experience on the incumbent home dialysis machine. To demonstrate the cost advantages of Tablo in the home setting, we are continuing to collect additional patient clinical experience and outcomes data.

3

Tablo Hemodialysis System

Tablo is an FDA-cleared single enterprise solution for hemodialysis, comprised of a compact console with integrated water purification, on-demand dialysate production and advanced software and connectivity capabilities. We designed Tablo from the ground up to be a single enterprise solution that can be utilized across the continuum of care, allowing dialysis to be delivered anytime, anywhere, and by virtually anyone. Unlike traditional hemodialysis machines, Tablo can be used seamlessly across multiple care settings and a wide range of clinical applications, all with the benefit of remote system management, monitoring and maintenance through two-way wireless data transmission capabilities.

Tablo is comprised of the following components:

•
Tablo Console. A proprietary, compact, mobile and versatile machine consisting of an integrated water purification, on-demand dialysate production system and simple-to-use touchscreen interface with 3D animations that guide the user through treatment from start to finish. Using advanced sensors, the console automates much of treatment setup and management and can automatically self-diagnose for potential machine issues. Tablo console can accommodate a wide range of treatment modalities, durations and flow rates, allowing for broad clinical applications. Tablo console requires only a standard electrical outlet and tap water to operate. This eliminates the need for industrial water treatment rooms, separate water purification machines and pre-filled bags of dialysate associated with traditional dialysis machines. We also offer TabloCart with Prefiltration drawer or storage drawer, an accessory for Tablo, that is configured based on the customer’s needs.

•
Tablo Cartridge. A proprietary, disposable single use pre-strung cartridge that easily clicks into place, minimizing steps, touch points and connections, allowing for set up of treatment supplies in less than 12 minutes. Tablo cartridge was designed to simplify and streamline treatment setup to minimize the potential for user error. Tablo cartridge is intended to facilitate extracorporeal blood purification for patients. One cartridge is used per treatment, except in the case of extended therapy, where multiple cartridges can be used if needed. Tablo cartridge consists of a user-friendly pre-configured blood, saline, and infusion tubing. Tablo cartridge requires only two connections to operate as compared to other machines that require stringing, hanging, snapping and tapping multiple lines. In our home IDE trial, patients were able to set up Tablo cartridge and dialysate concentrates in less than 12 minutes, on average. With an average prime period of approximately eight minutes, an uninterrupted patient can initiate therapy in as little as around 20 minutes, representing a significant improvement over traditional machines, which can take approximately 45 minutes to set up.

•
Tablo Data Ecosystem. As further described below in the section entitled “Tablo Data Ecosystem”, with Tablo, we are bringing data to dialysis. Tablo is built to live in a connected setting with cloud-based system monitoring, patient analytics and clinical recordkeeping.

4

Tablo Data Ecosystem

Tablo’s two-way wireless data transmission and connectedness help reduce maintenance costs and enable ongoing system improvements. This is all made possible by our team of experienced software, data science, and machine learning engineers.

Tablo leverages cloud technology to make it possible for providers to monitor devices remotely, view treatment data, perform patient and population analytics, and automate clinical recordkeeping. Tablo’s wireless connectivity enables us to release training, new features, and enhancements over-the-air (OTA) without interventions by field service engineers (FSEs). This means that customers can train and upgrade their device on their own schedule. We use these OTA updates to add new features designed to extend Tablo’s clinical applicability and enhance device uptime. We believe these OTA updates help Tablo get smarter over time.

Tablo’s connectedness allows continuous streaming of over 500,000 device performance data points to the cloud for every treatment. We use this data in conjunction with our diagnostic and predictive algorithms to monitor device performance, identify and diagnose failures and, in some instances, predict and prevent potential future device failures or malfunctions. Equipped with this information, our FSEs can visit sites knowing they have the correct parts and consumables to address the issues reported, and sometimes even those that are yet to come. In effect, this contributes to a reduction in service hours and an increase in device uptime.

The above functionality is enabled through the following key platforms: TabloHub®, a customer-facing portal; MyTablo, a patient-facing portal; and TabloDash, an internal data analytics platform.

TabloHub

TabloHub is designed to be a one-stop shop for providers that allows customers to monitor treatments in real-time across their fleet, visualize historical treatment records and statistics, see system disinfection and service records, search documentation, read news about Tablo, and perform various training. It is accessible from any device equipped with a web browser, be it a smart phone, a tablet, or a computer.

Through the Tablo application programming interface (API), providers can integrate Tablo with their Electronic Medical Records (EMR) to receive Tablo treatment data and flowsheets automatically. This helps reduce manual record keeping, record-entry errors, and auditing risks. This additional point of connectedness is designed to deliver data in compliance with the federal Health Insurance Portability and Accountability Act (HIPAA) Security Rule, and does not require any special equipment from the providers: it connects to the cloud using any standard Ethernet or Wi-Fi internet connections. TabloHub strengthens care, simplifies meeting documentation requirements, and makes system management easy.

5

MyTablo

MyTablo is a version of TabloHub designed for patients who are dialyzing at home or performing self-care at a clinic. Using MyTablo, patients can access training and download their treatment reports.

TabloDash

TabloDash is a powerful data analytics platform used by Outset team members to analyze diagnostic data produced by connected devices across all fleets, data from our customer relationship management system, and various other sources. Tablo captures approximately 3 million machine performance data points for every treatment on average, which are then used to fuel data analytics and machine learning algorithms that drive our research and development pipeline.

Through TabloDash, data can be visualized, graphed, aggregated, and queried to answer complex business intelligence questions, and build performance monitoring dashboards. For example, our service team uses TabloDash to analyze field response times, categorize failures by types, diagnose specific device issues, and monitor customer fleet performance.

TabloDash and its associated analytics network enable our FSEs to remotely monitor device performance, assess issues in real time and proactively determine appropriate corrective actions. These capabilities help reduce unnecessary onsite visits, shorten time to resolution and improve service part utilization. When a visit is required, TabloDash supports more effective dispatch by helping to ensure FSEs arrive prepared to address identified issues, including preventative maintenance needs, during a single visit. TabloDash is an important component of our service infrastructure, supporting efforts to optimize cost to serve while enhancing service quality and reducing device downtime.

With the above features and benefits in mind, we believe Tablo is well-positioned as a differentiated, all-in-one solution enabling transformational dialysis across the continuum of care, from hospital to home, in one of the largest, most expensive, least changed areas of healthcare.

Competition

There are a number of dialysis machine manufacturers and dialysis service providers in the United States, Europe and Asia. Notable competitors in the United States include Fresenius Medical Care AG & Co. KGaA (Fresenius); DaVita, Inc. (DaVita), a dialysis service provider; Mozarc Medical, a dialysis products joint venture formed by DaVita and Medtronic plc (Medtronic); and B. Braun Medical Inc. (B. Braun). Vantive, formerly the Baxter kidney care segment, also offers specialized dialysis products that may be used by hospitals for inpatient dialysis. In addition, Quanta Dialysis Technologies Ltd.’s (Quanta) dialysis system has received FDA 510(k) clearance for use in acute and/or chronic and home settings. Of these competitors, Fresenius is the largest, and is vertically integrated, both manufacturing dialysis products and operating dialysis clinics along with providing inpatient dialysis services to hospitals and health systems. Some of these competitors are significantly larger than us with greater financial, marketing, sales and personnel resources, greater brand recognition and longer operating histories. We believe our ability to compete effectively will be dependent on our ability to effectively demonstrate the value of Tablo and insourcing with Tablo, maintain and improve product quality and feature functionality, build and maintain the infrastructure to support the operating needs of the business and continue to achieve operational efficiencies.

Acute Care

While historically customers in this market have focused on machine functionality and price, we believe they are increasingly focused on the total cost of patient care, which favors technology and services that can provide clinical versatility and improve operational efficiency. In the acute care setting, we compete primarily on the basis that our technology, expert know-how and services support the achievement of financial, clinical and operational improvements over traditional dialysis machines or outsourced dialysis offerings. We believe our ability to compete effectively will depend largely on our ability to demonstrate Tablo’s economic, clinical and operational benefits relative to outsourcing dialysis services.

Home Care

We believe competition in the home setting is based on a system’s clinical performance, its cost efficiency, its ease of use and patient preference. In the home hemodialysis setting, competitors include Fresenius (through its acquisition of NxStage) and Quanta which received FDA 510(k) clearance for home use in 2024. We believe through Tablo’s unique advantages it is easier and faster for patients to learn, and simpler for patients to operate at home, which may position us well against existing or future competitors. We believe these factors will reduce patient or caregiver burn-out, thereby extending patient retention, increasing home hemodialysis growth and improving associated margin for providers. We do not consider peritoneal dialysis (PD) to be competitive to our products given the differences in treatment modality, that PD is clinically limited to patients with certain pre-existing conditions such as congestive heart failure and obesity and that PD is regarded as a “temporary” modality since approximately 80% of patients are on the therapy for less than three years.

6

Intellectual Property

Our success depends in part on our ability to protect our proprietary technology and intellectual property rights. We rely on a combination of federal, state, common law and international rights, as well as contractual restrictions, to protect our intellectual property.

We seek patent protection for certain of our key innovations, processes and other inventions. We pursue the registration of our trademarks, service marks and domain names in the United States and in certain other locations. We control access to our proprietary technology by entering into confidentiality and invention assignment agreements with our employees and contractors, and confidentiality agreements with third parties. Our intellectual property includes specific algorithms for Tablo console, including those related to pressure sensors, blood leakage and pump control loops.

Patents

As of December 31, 2025, we had 33 issued U.S. patents, as well as 8 pending U.S. patent applications. We had an aggregate of 76 issued patents in Australia, Canada, China, France, Germany, Hong Kong, Japan, Spain, Sweden and the United Kingdom, as well as 32 pending patent applications in Australia, Brazil, Canada, China, the European Patent Office, Hong Kong, Japan, Saudi Arabia and United Arab Emirates. Some of our patents and other intellectual property cover aspects of Tablo that enable it to be used by anyone, including the patient, through the automation of functions formerly performed by dialysis center technicians using traditional dialysis systems. Our proprietary data ecosystem provides what we believe is a unique way of connecting providers and patients for real-time treatment monitoring, automated treatment documentation, and simplified compliance and record-keeping.

Our patents expire between June 2027 and April 2042. The term of individual patents depends upon the legal term for patents in the countries in which they are granted. In most countries, including the United States, the patent term is 20 years from the earliest claimed filing date of a non-provisional patent application in the applicable country. In the United States, a patent’s term may, in certain cases, be lengthened by patent term adjustment, which compensates a patentee for administrative delays by the United States Patent and Trademark Office (USPTO) in examining and granting a patent, or it may be shortened if a patent is terminally disclaimed over a commonly owned patent or a patent naming a common inventor and having an earlier expiration date. We cannot be sure that our pending patent applications or future patent applications will result in issued patents or that any patents that have issued or might issue in the future will protect our current or future products, provide us with any competitive advantage or will not be challenged, invalidated, or circumvented.

Various aspects of Tablo, including, without limitation, sensor technology, connectivity, automation, analytics and interface are covered by software, algorithms, processes, trade secret or other proprietary rights. We protect our trade secrets through a variety of measures, including confidentiality agreements and proprietary information agreements with suppliers, employees, consultants and others who may have access to our proprietary information. Trade secrets and proprietary information can be difficult to protect, however. While we have confidence in the measures we take to protect and preserve our trade secrets and proprietary information, such measures can be breached, and we may not have adequate remedies for any such breach. In addition, our trade secrets and proprietary information may otherwise become known or be independently discovered by competitors.

There is no active patent litigation involving any of our patents, and we have not received any notices claiming that our activities infringe a third party’s patent.

Manufacturing, Supply Chain and Logistics

We direct the manufacturing and supporting supply chain, distribution and logistics for Tablo console, Tablo cartridge and other consumables (electrolyte concentrates and plastic tubing that transports the concentrates into Tablo to enable on-demand dialysate production). We operate under a Quality Management System that has been certified to ISO 13485 Medical Device Quality Management System standard.

We manufacture our Tablo consoles and a substantial majority of Tablo cartridges at our manufacturing facility in Tijuana, Mexico. We are operating in Mexico in collaboration with TACNA Services (TACNA), a well-known outsourced business administration service provider that provides all the back-office and facility infrastructure support, allowing us to focus on our core competencies – design and high-volume manufacturing for reliability and cost reduction. Tablo consoles manufactured in our Mexico facility are tested at the facility using an integrated system testing protocols designed by us, and then direct-shipped to our distribution centers, using a network of short-haul and long-haul freight forwarders optimized for time and cost efficiency.

Pursuant to the terms of our manufacturing services agreement with TACNA (the TACNA Agreement), TACNA provides support services in connection with our manufacturing activities in Mexico. Under the TACNA Agreement, TACNA hires employees as requested by us and is responsible for human resource functions including maintenance of employee files and reports. TACNA is also responsible for performing internal statutory accounting and payroll services, as well as payables processing. Additional services that TACNA is obligated to provide under the TACNA Agreement include interfacing with both Mexican and U.S. governmental agencies, preparing import-export documentation, coordinating shipment of equipment, raw materials and finished products, and

7

obtaining necessary permits and licenses required in Mexico. Under the TACNA Agreement, TACNA’s services are generally performed under a pass-through cost model under which costs incurred are approved by us. We are also obligated to pay TACNA fees based on the number of employees under the TACNA Agreement. The TACNA Agreement has an initial three-year term and will continue thereafter until terminated by us or TACNA in accordance with the terms of the TACNA Agreement.

We also manufacture a small portion of Tablo cartridges through Infus Medical Co. Ltd. (Infus), a contract manufacturer with two facilities in Thailand, to supplement our in-house manufacturing production and provide additional flexibility.

The number of suppliers required for Tablo console production is approximately 100 worldwide. We consider a discrete number of these suppliers, located in the United States, Mexico, Europe and Asia, as critical providers of components such as pumps, motors, valves and PCBA boards. The various components for Tablo cartridge are manufactured by 13 different single and dual-source suppliers located in various countries including the United States, Mexico, Europe and Asia.

Government Regulation

United States Food and Drug Administration

In the United States, our products are subject to regulation by the FDA as medical devices pursuant to the Federal Food, Drug, and Cosmetic Act (FDCA). The FDA regulates the development, design, non-clinical and clinical research, manufacturing, safety, efficacy, labeling, packaging, storage, installation, servicing, recordkeeping, premarket clearance or approval, adverse event reporting, advertising, promotion, marketing and distribution, and import and export of medical devices to ensure that medical devices distributed domestically are safe and effective for their intended uses and otherwise meet the requirements of the FDCA.

FDA Premarket Clearance and Approval Requirements

Unless an exemption applies, each medical device commercially distributed in the United States requires either FDA clearance of a 510(k) premarket notification, approval of a de novo application, or approval of a premarket approval (PMA). Under the FDCA, medical devices are classified into one of three classes—Class I, Class II or Class III—depending on the degree of risk associated with each medical device and the extent of manufacturer and regulatory control needed to ensure its safety and effectiveness. Class I includes devices with the lowest risk to the patient and are those for which safety and effectiveness can be assured by adherence to the FDA’s General Controls for medical devices, which include compliance with the applicable portions of the Quality System Regulation (QSR), facility registration and product listing, reporting of adverse medical events, and truthful and non-misleading labeling, advertising, and promotional materials. Class II devices are subject to the FDA’s General Controls, and special controls as deemed necessary by the FDA to ensure the safety and effectiveness of the device. These special controls can include performance standards, post-market surveillance, patient registries and FDA guidance documents.

While most Class I devices are exempt from the 510(k) premarket notification requirement, manufacturers of most Class II devices are required to submit to the FDA a premarket notification under Section 510(k) of the FDCA requesting permission to commercially distribute the device. The FDA’s permission to commercially distribute a device subject to a 510(k) premarket notification is generally known as 510(k) clearance. Devices deemed by the FDA to pose the greatest risks, such as life sustaining, life supporting or some implantable devices, or devices that have a new intended use, or use advanced technology that is not substantially equivalent to that of a legally marketed device, are placed in Class III, requiring approval of a PMA. Some pre-amendment devices are unclassified, but are subject to FDA’s premarket notification and clearance process in order to be commercially distributed. Tablo is a Class II device subject to 510(k) clearance.

510(k) Clearance Marketing Pathway

To obtain 510(k) clearance, we must submit to the FDA a premarket notification submission demonstrating that the proposed device is “substantially equivalent” to a predicate device already on the market. A predicate device is a legally marketed device that is not subject to PMA, i.e., a device that was legally marketed prior to May 28, 1976 (pre-amendments device) and for which a PMA is not required, a device that has been reclassified from Class III to Class II or I, or a device that was found substantially equivalent through the 510(k) process. The FDA’s 510(k) clearance process usually takes from three to twelve months, but often takes longer. The FDA may require additional information, including clinical data, to make a determination regarding substantial equivalence. In addition, the FDA collects user fees for certain medical device submissions and annual fees for medical device establishments.

If the FDA agrees that the device is substantially equivalent to a predicate device currently on the market, it will grant 510(k) clearance to commercially market the device. If the FDA determines that the device is “not substantially equivalent” to a previously cleared device, the device is automatically designated as a Class III device. The device sponsor must then fulfill more rigorous PMA requirements, or can request a risk-based classification determination for the device in accordance with the “de novo” process, which is a route to market for novel medical devices that are low to moderate risk and are not substantially equivalent to a predicate device. If a de novo request is granted, the device may be legally marketed and a new classification is established. If the device is classified as

8

Class II, the device may serve as a predicate for future 510(k) submissions. If the device is not approved through de novo review, then it must go through the standard PMA process for Class III devices.

After a device receives 510(k) marketing clearance, any modification that could significantly affect its safety or effectiveness, or that would constitute a major change or modification in its intended use, will require a new 510(k) clearance or, depending on the modification, PMA approval. The FDA requires each manufacturer to determine whether the proposed change requires submission of a 510(k) or a PMA in the first instance, but the FDA can review any such decision and disagree with a manufacturer’s determination. If the FDA disagrees with a manufacturer’s determination, the FDA can require the manufacturer to cease marketing and/or request the recall of the modified device until 510(k) marketing clearance or PMA approval is obtained. Also, in these circumstances, the manufacturer may be subject to significant regulatory fines or penalties.

PMA Approval Pathway

Class III devices require approval of a PMA before they can be marketed, although some pre-amendment Class III devices for which the FDA has not yet required a PMA are cleared through the 510(k) process. The PMA process is more demanding than the 510(k) premarket notification process. In a PMA application, the manufacturer must demonstrate that the device is safe and effective, and the PMA application must be supported by extensive data, including data from preclinical studies and human clinical trials. The PMA application must also contain a full description of the device and its components, a full description of the methods, facilities, and controls used for manufacturing, and proposed labeling. Following receipt of a PMA application, the FDA determines whether the application is sufficiently complete to permit a substantive review. If the FDA accepts the application for review, it has 180 days under the FDCA to complete its review of a PMA application, although in practice, the FDA’s review often takes significantly longer, and can take up to several years. An advisory panel of experts from outside the FDA may be convened to review and evaluate the application and provide recommendations to the FDA as to the approvability of the device. The FDA may or may not accept the panel’s recommendation. In addition, the FDA will generally conduct a pre-approval inspection of the applicant or its third-party manufacturers’ or suppliers’ manufacturing facility or facilities to ensure compliance with the QSR. PMA devices are also subject to the payment of user fees.

The FDA will approve the new device for commercial distribution if it determines that the data and information in the PMA application constitute valid scientific evidence and that there is reasonable assurance that the device is safe and effective for its intended use(s). A PMA may include post-approval conditions intended to ensure the safety and effectiveness of the device, including, among other things, restrictions on labeling, promotion, sale and distribution, and collection of long-term follow-up data from patients in the clinical study that supported the PMA or requirements to conduct additional clinical studies post-approval. The FDA may condition PMA approval on some form of post-market surveillance when deemed necessary to protect the public health or to provide additional safety and efficacy data for the device in a larger population or for a longer period of use. In such cases, the manufacturer might be required to follow certain patient groups for a number of years and to make periodic reports to the FDA on the clinical status of those patients. Failure to comply with the conditions of approval can result in material adverse enforcement action, including withdrawal of the approval.

Certain changes to an approved device, such as changes in manufacturing facilities, methods, or quality control procedures, or changes in the design performance specifications, which affect the safety or effectiveness of the device, require submission of a PMA supplement. PMA supplements often require submission of the same type of information as a PMA, except that the supplement is limited to information needed to support any changes from the device covered by the original PMA and may not require as extensive clinical data or the convening of an advisory panel. Certain other changes to an approved device require the submission of a new PMA, such as when the design change causes a different intended use, mode of operation, and technical basis of operation, or when the design change is so significant that a new generation of the device will be developed, and the data that were submitted with the original PMA are not applicable for the change in demonstrating a reasonable assurance of safety and effectiveness. None of our products are currently marketed pursuant to a PMA.

De novo Classification

Medical device types that the FDA has not previously classified as Class I, II or III are automatically classified into Class III regardless of the level of risk they pose. To market low to moderate risk medical devices that are automatically placed into Class III due to the absence of a predicate device, a manufacturer may request a de novo down-classification. This procedure allows a manufacturer whose novel device is automatically classified into Class III to request classification of its medical device into Class I or Class II on the basis that the device presents low or moderate risk, rather than requiring the submission and approval of a PMA application. A medical device may be eligible for de novo classification if the manufacturer first submitted a 510(k) premarket notification and received a determination from the FDA that the device was not substantially equivalent, or a manufacturer may request de novo classification directly without first submitting a 510(k) premarket notification to the FDA and receiving a not substantially equivalent determination. The FDA is required to classify the device within 120 calendar days following receipt of the de novo application, although in practice, the FDA’s review may take significantly longer. During the pendency of the FDA’s review, the

9

FDA may issue an additional information letter, which places the de novo request on hold and stops the review clock pending receipt of the additional information requested. In the event the de novo requestor does not provide the requested information within 180 calendar days, the FDA will consider the de novo request to be withdrawn. If the manufacturer seeks reclassification into Class II, the manufacturer must include a draft proposal for special controls that are necessary to provide a reasonable assurance of the safety and effectiveness of the medical device. In addition, the FDA may reject the de novo request for classification if it identifies a legally marketed predicate device that would be appropriate for a 510(k) or determines that the device is not low to moderate risk or that general controls would be inadequate to control the risks and special controls cannot be developed. In the event the FDA determines the data and information submitted demonstrate that general controls or general and special controls are adequate to provide reasonable assurance of safety and effectiveness, the FDA will grant the de novo request for classification. When the FDA grants a de novo request for classification, the device is granted marketing authorization and further can serve as a predicate for future devices of that type, through a 510(k) premarket notification.

Breakthrough Device Program

The FDA has implemented a Breakthrough Device Program that is intended to help patients receive more timely access to breakthrough medical technologies that have the potential to provide more effective treatment or diagnosis for life-threatening or irreversibly debilitating diseases or conditions. A device also must meet one of the following criteria: (i) it represents breakthrough technology; (ii) there is no approved or cleared alternative; (iii) it offers significant advantages over existing cleared or approved devices; or (iv) availability of the device is in the best interest of patients. Under the program, a manufacturer is eligible to receive priority review and interactive communications from the FDA regarding device development and clinical trial protocols, all the way through to commercialization decisions.

Clinical Trials

Clinical trials are almost always required to support a PMA and are sometimes required to support a 510(k) submission. All clinical investigations of devices to determine safety and effectiveness must be conducted in accordance with the FDA’s IDE regulations which govern investigational device labeling, prohibit promotion of the investigational device, and specify an array of recordkeeping, reporting and monitoring responsibilities of study sponsors and study investigators. If the device presents a “significant risk,” to human health, as defined by the FDA, the FDA requires the device sponsor to submit an IDE application to the FDA, which must become effective prior to commencing human clinical trials. A significant risk device is one that presents a potential for serious risk to the health, safety or welfare of a patient and either is implanted, used in supporting or sustaining human life, substantially important in diagnosing, curing, mitigating or treating disease or otherwise preventing impairment of human health, or otherwise presents a potential for serious risk to a subject. An IDE application must be supported by appropriate data, such as animal and laboratory test results, showing that it is safe to test the device in humans and that the testing protocol is scientifically sound. The IDE will automatically become effective 30 days after receipt by the FDA unless the FDA notifies the company that the investigation may not begin. If the FDA determines that there are deficiencies or other concerns with an IDE for which it requires modification, the FDA may permit a clinical trial to proceed under a conditional approval.

In addition, the study must be approved by, and conducted under the oversight of, an Institutional Review Board (IRB) for each clinical site. The IRB is responsible for the initial and continuing review of the IDE study, and may pose additional requirements for the conduct of the study. If an IDE application is approved by the FDA and one or more IRBs, human clinical trials may begin at a specific number of investigational sites with a specific number of patients, as approved by the FDA. If the device presents a non-significant risk to the patient, a sponsor may begin the clinical trial after obtaining approval for the trial by one or more IRBs without separate approval from the FDA, but must still follow abbreviated IDE requirements, such as monitoring the investigation, ensuring that the investigators obtain informed consent, and labeling and record-keeping requirements. Acceptance of an IDE application for review does not guarantee that the FDA will allow the IDE to become effective and, if it does become effective, the FDA may or may not determine that the data derived from the trials support the safety and effectiveness of the device or warrant the continuation of clinical trials. An IDE supplement must be submitted to, and approved by, the FDA before a sponsor or investigator may make a change to the investigational plan that may affect its scientific soundness, study plan or the rights, safety or welfare of human subjects.

During a study, the sponsor is required to comply with the applicable FDA requirements, including, for example, trial monitoring, selecting clinical investigators and providing them with the investigational plan, ensuring IRB review, adverse event reporting, record keeping and prohibitions on the promotion of investigational devices or on making safety or effectiveness claims for them. The clinical investigators in the clinical study are also subject to FDA regulations and must obtain patient informed consent, rigorously follow the investigational plan and study protocol, control the disposition of the investigational device, and comply with all reporting and recordkeeping requirements. Additionally, after a trial begins, we, the FDA or the IRB could suspend or terminate a clinical trial at any time for various reasons, including a belief that the risks to study subjects outweigh the anticipated benefits.

10

Post-market Regulation

After a device is cleared or approved for marketing, numerous and pervasive regulatory requirements continue to apply. These include:

•
establishment registration and device listing with the FDA;

•
QSR requirements, which require manufacturers, including third-party manufacturers, to follow stringent design, testing, control, documentation and other quality assurance procedures during all aspects of the design and manufacturing process;

•
labeling regulations and FDA prohibitions against the promotion of investigational products, or the promotion of “off-label” uses of cleared or approved products;

•
requirements related to promotional activities;

•
clearance or approval of product modifications to 510(k)-cleared devices that could significantly affect safety or effectiveness or that would constitute a major change in intended use of one of our cleared devices, or approval of certain modifications to PMA-approved devices;

•
medical device reporting regulations, which require that a manufacturer report to the FDA if a device it markets may have caused or contributed to a death or serious injury, or has malfunctioned and the device or a similar device that it markets would be likely to cause or contribute to a death or serious injury, if the malfunction were to recur;

•
correction, removal and recall reporting regulations, which require that manufacturers report to the FDA field corrections and product recalls or removals if undertaken to reduce a risk to health posed by the device or to remedy a violation of the FDCA that may present a risk to health;

•
the FDA’s recall authority, whereby the agency can order device manufacturers to recall from the market a product that is in violation of governing laws and regulations; and

•
post-market surveillance activities and regulations, which apply when deemed by the FDA to be necessary to protect the public health or to provide additional safety and effectiveness data for the device.

Quality Systems Regulation Requirements

Our manufacturing processes are required to comply with the applicable portions of the QSR, which cover the methods and the facilities and controls for the design, manufacture, testing, production, processes, controls, quality assurance, labeling, packaging, distribution, installation and servicing of finished devices intended for human use. The QSR requires that each manufacturer establish a quality systems program by which the manufacturer monitors the manufacturing process and maintains records that show compliance with FDA regulations and the manufacturer’s written specifications and procedures relating to the devices. The QSR also requires, among other things, maintenance of records and certain documentation, a device master file, device history file, and complaint files. QSR compliance is necessary to receive and maintain FDA clearance or approval to market new and existing products. As a manufacturer, we are subject to periodic scheduled or unscheduled audits or inspections by the FDA. Our failure to maintain compliance with the QSR requirements could result in the shut-down of, or restrictions on, our manufacturing operations and the recall or seizure of our products, which would have a material adverse effect on our business. The discovery of previously unknown problems with any of our products, including unanticipated adverse events or adverse events of increasing severity or frequency, whether resulting from the use of the device within the scope of its clearance or off-label by a physician in the practice of medicine, could result in restrictions on the device, including the removal of the product from the market or voluntary or mandatory device recalls.

The FDA has broad regulatory compliance and enforcement powers. If the FDA determines that we failed to comply with applicable regulatory requirements, it can take a variety of compliance or enforcement actions, which may result in any of the following sanctions:

•
FDA untitled letters, FDA Form 483s, FDA warning letters, it has come to our attention letters, fines, injunctions, consent decrees and civil penalties;

•
unanticipated expenditures to address or defend such actions;

•
customer notifications or repair, replacement, refunds, recall, detention or seizure of our products;

•
recall, detention or seizure of our products;

•
operating restrictions, partial suspension or total shutdown of production;

•
refusing or delaying our requests for regulatory approvals or clearances of new products or modified products;

11

•
withdrawing of 510(k) clearances or PMA approvals that have already been granted;

•
refusal to grant export approval for our products; or

•
criminal prosecution.

The FDA can also publish Safety Communications or Letters to Health Care Providers when the agency becomes aware of new issues involving a specific product or, more broadly, a product family. These communications are posted on the FDA’s website and describe the FDA’s analysis of a current issue and provide specific regulatory approaches and clinical recommendations for patient management.

Current FDA Regulatory Status

We currently have regulatory clearances required to market Tablo in the U.S. for use in patients with acute and/or chronic renal failure, with or without ultrafiltration, in an acute or chronic care facility. Tablo is also indicated for use in the home and observed by a trained individual. Treatments must be administered under a physician’s prescription and observed by a trained individual who is considered competent in the use of the device. The FDA’s authorizations for the Tablo System, Tablo Cartridge and TabloCart with Prefiltration have thus far been granted as 510(k) clearances.

Since Tablo’s original clearance by the FDA for home use in March 2020, we have made certain changes to the device over time and, where appropriate, have submitted 510(k) applications for certain modifications to Tablo. In May 2021, we submitted a 510(k) application to the FDA covering the design changes for patient use in the home. In May 2022, after further discussions with the FDA and receiving indications that the clearance of this 510(k) submission would be delayed beyond our original expectations, we implemented a shipment hold on the distribution and marketing of Tablo for use in the home environment pending the FDA’s review and clearance of this 510(k) submission. In late July 2022, the FDA cleared this 510(k) submission of Tablo for patient use in the home and we resumed marketing and shipping Tablo for home use.

We continue to seek opportunities for product improvements and feature enhancements, which will, from time to time, require FDA clearance or approval before commercial launch. For example, in January 2026, the FDA granted 510(k) clearance of our next-generation Tablo platform.

The FDA conducted their first quality system inspection of our San Jose, California facility which concluded in February 2023. At completion, the FDA issued a Form FDA-483 identifying four inspectional observations. We provided our response plan to the FDA in March 2023, completed the associated remediation workstreams, and submitted our final update to the FDA regarding actions taken to address these observations. The FDA conducted a follow-up inspection of our San Jose, California facility, which concluded in September 2024. At completion, the FDA did not issue a Form-483. The FDA Establishment Inspection Reports for the 2023 and 2024 inspections were received in February 2025. The FDA concluded that no further regulatory action is necessary and the two inspections are “closed” under 21 CFR 20.64(d)(3). Although we believe we are in material compliance with the QSR, there is no guarantee that subsequent inspections of our facility by the FDA or other regulatory authorities will not result in similar observations with respect to our quality system, which could adversely affect our business.

In July 2023, we received a warning letter (the Warning Letter) from the FDA that raised two observations. The first observation asserted that certain content reviewed by the FDA and found on our website promotes Continuous Renal Replacement Therapy (CRRT), a modality outside of the current indications for Tablo. The second observation asserted that TabloCart with Prefiltration required prior 510(k) clearance for marketing authorization. TabloCart with Prefiltration is an accessory to Tablo launched in the third quarter of 2022. We took action to address the first observation regarding CRRT promotion through revision of processes and procedures and updates to existing labeling and promotional materials. We also took action to address the second observation regarding TabloCart with Prefiltration. Although we evaluated TabloCart with Prefiltration prior to marketing and distributing the product and concluded that no marketing authorization was necessary, we paused distribution of TabloCart with Prefiltration pending the FDA’s review and clearance of a 510(k) application for TabloCart with Prefiltration, which we submitted in September 2023. In early May 2024, we received 510(k) clearance from the FDA for TabloCart with Prefiltration, and we subsequently resumed distribution of TabloCart with Prefiltration. In February 2025, we were notified by the FDA that the issues cited in the Warning Letter had been addressed.

Healthcare Fraud and Abuse Laws

Certain U.S. federal healthcare fraud and abuse laws apply to our business because our customers submit claims for payment for our products and services to federal healthcare programs (as that term is defined at 42 U.S.C. § 1320a–7b(f)), such as Medicare and Medicaid. The principal federal fraud and abuse laws that apply in these circumstances are discussed below.

The U.S. federal Anti-Kickback Statute is a broad criminal statute that prohibits, among other things, the knowing and willful offer, solicitation, receipt, or payment of any remuneration, directly or indirectly, overtly or covertly, in cash or in kind, for the purpose of inducing or rewarding the order, purchase, use or recommendation of items or services that may be paid for, in whole or in part, by a federal healthcare program, such as Medicare or Medicaid. This includes products, like Tablo, that are purchased and used

12

in a service that is paid for by such programs. A person or entity does not need to have actual knowledge of the statute or specific intent to violate it in order to have committed a violation. Further, the term “remuneration” has been broadly interpreted to include anything of value. The Patient Protection and Affordable Care Act and the Health Care Reconciliation Act of 2010, as amended (collectively, the ACA), specified that any claims submitted as a result of a violation of the federal Anti-Kickback Statute constitute false claims and are subject to enforcement under the federal False Claims Act, which is discussed in more detail below. Government officials continue to focus their enforcement efforts on the sales and marketing activities of medical device manufacturers and other healthcare companies and routinely bring cases under the federal Anti-Kickback Statute and federal False Claims Act against individuals or entities who allegedly offer unlawful inducements to potential or existing customers in an attempt to procure their business. Judgments and settlements of these cases by healthcare companies have involved significant fines and, in some instances, criminal pleas and convictions, as well as exclusion from participation in federal healthcare programs. A violation of the federal Anti-Kickback Statue includes per violation civil monetary penalties and significant criminal fines, additional civil penalties and treble damages under the federal False Claims Act, as discussed in more detail below, possible imprisonment, and mandatory exclusion from participation in the federal healthcare programs, meaning that federal healthcare programs would no longer cover or reimburse (directly or indirectly) for products or services furnished by the excluded entity or individuals.

Given the breadth of the federal Anti-Kickback Statute, and in order to protect certain common business arrangements and activities that may otherwise implicate the law, there are statutory exceptions and regulatory safe harbors that protect certain arrangements from liability under the law when all elements of an applicable exception or safe harbor are met. However, these exceptions and safe harbors are narrowly drawn, and there are no exceptions or safe harbors for many other common business activities, like the provision of meals, educational grants or reimbursement support programs, among others. Given that the federal Anti-Kickback Statute is an intent-based law, the failure of a transaction or arrangement to fit precisely within an exception or safe harbor does not necessarily mean that it is illegal or that prosecution will be pursued. Rather, the determination of a violation then turns on the specific facts and circumstances, and arrangements that fall outside an available exception or safe harbor are typically subject to greater scrutiny.

The federal civil False Claims Act (FCA) imposes civil penalties against individuals or entities for, among other things, knowingly presenting, or causing to be presented, claims for payment of government funds that are false or fraudulent, or knowingly making, using, or causing to be made or used a false record or statement material to an obligation to pay money to the government, or knowingly concealing or knowingly and improperly avoiding, decreasing, or concealing an obligation to pay money to the federal government. This statute also permits a private individual acting as a “qui tam whistleblower” to bring actions on behalf of the federal government alleging violations of the FCA and to share in any monetary recovery. FCA liability is potentially significant in the healthcare industry because the statute provides for treble damages and mandatory penalties for each false claim submitted or statement made. Government enforcement agencies and private whistleblowers have investigated medical device manufacturers for, or asserted liability under, the FCA for a variety of alleged inappropriate promotional and marketing activities, including those involving the provision of free product or other items of value to customers, certain financial arrangements with healthcare providers, the provision of billing, coding, and reimbursement advice, and purported “off-label” promotion of products, among other things.

Another key federal healthcare law is the federal all-payor healthcare fraud statute, which was added by HIPAA. The federal all-payor healthcare fraud statute imposes liability for, among other things, knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program, or knowingly and willfully falsifying, concealing or covering up a material fact or making any materially false statement, in connection with the delivery of, or payment for healthcare benefits, items or services by a healthcare benefit program, which includes both government and privately funded benefits programs. Similar to the U.S. federal Anti-Kickback Statute, a person or entity does not need to have actual knowledge of the statute or specific intent to violate them in order to have committed a violation.

The Physician Payments Sunshine Act (Sunshine Act) requires us to track and report annually certain data on payments and other transfers of value we make to U.S. teaching hospitals and U.S.-licensed physicians, physician assistants, nurse practitioners, clinical nurse specialists, certified nurse anesthetists, anesthesiology assistants, and certified nurse-midwives. Manufacturers are also required to report ownership and investment interests held by U.S. physicians and their immediate family members in the manufacturer. The data are sent to the Center for Medicare and Medicaid Services (CMS) for public disclosure on the Open Payments website. Failure to timely and accurately report information in accordance with the Sunshine Act may result in significant financial penalties.

In addition to these federal laws, there are state laws and regulations, including state anti-kickback and false claims laws, that may apply to our business practices, including but not limited to: research activities; sales and marketing arrangements; claims involving healthcare items or services reimbursed by any third- party payor, including private insurers; state laws that require medical device companies to comply with the medical device industry’s voluntary compliance guidelines and the relevant compliance guidance promulgated by the U.S. federal government, or otherwise restrict payments that may be made to healthcare providers and other potential referral sources; and state laws and regulations that require drug and device manufacturers to file reports relating to pricing and marketing information, which requires tracking gifts and other remuneration and items of value provided to healthcare

13

professionals and entities. In some states, applicable state anti-kickback laws apply with respect to all payors, including commercial health insurance companies.

Through our compliance efforts, we strive to design our business operations and relationships with our customers to comply with all applicable law. However, many of the laws and regulations applicable to us are broad in scope and may be interpreted or applied by prosecutorial, regulatory or judicial authorities or whistleblowers in ways that we cannot predict. Thus, it is possible that governmental entities or other parties could interpret these laws differently or assert non-compliance with respect to one or more of our business operations and relationships. If our operations are found to be in violation of any of these laws or any other governmental regulations that may apply to us, we may be subject to significant civil, criminal, and administrative penalties, damages, fines, imprisonment, and/or exclusion from government-funded healthcare programs, such as Medicare and Medicaid. In addition, we may become subject to additional oversight and reporting requirements under a corporate integrity agreement as part of a settlement to resolve allegations of non-compliance with these laws (even if we do not admit violations). We may also need to curtail or restructure our operations as a result of being found to violate these laws, having such violations asserted against us, or based on enforcement actions instituted with respect to comparable practices by others. Any of these outcomes could have an adverse effect on our financial condition and ability to conduct our operations.

Privacy and Security

In the course of performing our business we obtain personally identifiable information (PII), including health-related information. Numerous federal and state laws and regulations, including the Healthcare Insurance Portability and Accountability Act (HIPAA), govern the collection, dissemination, security, use and confidentiality of patient-identifiable health information or personal information. Such laws and regulations relating to privacy, data protection, and consumer protection are evolving and subject to potentially differing interpretations. These requirements may be interpreted and applied in a manner that varies from one jurisdiction to another and/or may conflict with other laws or regulations.

HIPAA establishes a set of national privacy and security standards for the protection of individually identifiable health information, including protected health information (PHI) for certain covered entities, including healthcare providers that submit certain covered transactions electronically, as well as their “business associates,” which are persons or entities that perform a function or provide certain services for, or on behalf of, a covered entity that involve creating, receiving, maintaining or transmitting PHI. HIPAA also imposes breach reporting obligations on such covered entities and their respective business associates. Penalties for failure to comply with a requirement of HIPAA vary significantly depending on the failure and could include civil monetary or criminal penalties. HIPAA also authorizes state attorneys general to file suit under HIPAA on behalf of state residents. Courts can award damages, costs and attorneys’ fees related to violations of HIPAA in such cases. While HIPAA does not create a private right of action allowing individuals to sue us in civil court for HIPAA violations, its standards have been used as the basis for a duty of care claim in state civil suits such as those for negligence or recklessness in the misuse or breach of PHI. The Department of Health and Human Services Office for Civil Rights (OCR) has adopted privacy regulations to govern the use and disclosure of PHI (the Privacy Rule). HHS has also adopted data security regulations that require covered entities and business associates to implement administrative, physical and technical safeguards to protect the confidentiality, integrity and availability of PHI that is electronically created, received, maintained or transmitted (such as between us and our affiliated practices) (the Security Rule). OCR has recently increased its enforcement of compliance with HIPAA, including the Security Rule, bringing actions against entities which have failed to implement security measures sufficient to reduce risks to electronic PHI or to conduct an accurate and thorough risk analysis, among other violations. HIPAA enforcement actions may lead to monetary penalties and costly and burdensome corrective action plans. We are also required to report known breaches of PHI consistent with applicable breach reporting requirements set forth in applicable laws and regulations. Further, on December 10, 2020, OCR issued proposed revisions to the Privacy Rule aimed at reducing regulatory burdens that may exist in discouraging coordination of care, including creating an exception to the minimum necessary standard for healthcare coordination, and other proposals to increase patient access to their health information, among other changes. On April 22, 2024, OCR issued a Final Rule, HIPAA Privacy Rule to Support Reproductive Health Care Privacy, which is intended to strengthen the Privacy Rule by prohibiting the disclosure of PHI related to lawful reproductive health care in certain circumstances. However, this Final Rule has now been repealed.

Additionally, on December 1, 2022, OCR issued a bulletin on the requirements under HIPAA for online tracking technologies (e.g., cookies, pixels) to protect the privacy and security of health information. This bulletin outlined OCR’s position on the use of online tracking technology vendors, when certain information received by such vendors constitutes PHI under HIPAA. While subsequent judicial developments vacated the guidance, we may incur additional expense to comply with this bulletin and future guidance from the OCR, and agency’s heightened focus on website tracking technologies could pose enforcement risk in the future.

In addition, various federal and state legislative and regulatory bodies, or self-regulatory organizations, may expand current laws or regulations, enact new laws or regulations or issue revised rules or guidance regarding privacy, data protection and consumer protection. For instance, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA) gives California residents rights to access, correct and delete their personal information, to opt out of the sale or sharing of certain personal information, to limit uses of certain sensitive data under certain circumstances, and to receive detailed information about how their

14

personal information is used by requiring covered companies to provide disclosures to California consumers (as that term is broadly defined). The 2020 amendments also created a California data protection agency authorized to issue substantive regulations and has resulted in increased privacy and information security enforcement. The CCPA regulations also impose proscriptive requirements on businesses regarding how to properly demonstrate compliance with the law’s requirements. The CCPA provides for civil penalties for violations, as well as a private right of action for data breaches that is expected to increase data breach litigation. Rulemaking by the California Privacy Protection Agency (CPPA) is ongoing – the CPPA has administrative enforcement authority over CCPA and oversees CCPA rulemaking. Although there are limited exemptions for PHI and the CCPA’s implementation standards and enforcement practices are likely to remain uncertain for the foreseeable future, the CCPA may increase our compliance costs and potential liability. Additional compliance investment and potential business process changes may be required. Laws similar to the California laws have passed or have been proposed in several other states and also have been proposed at the federal level. To the extent these laws apply to our operations, they may ultimately have conflicting requirements that would further complicate compliance. Further, new health information standards, whether implemented pursuant to HIPAA, congressional action or otherwise, could have a significant effect on the manner in which we handle health-related information, and the cost of complying with these standards could be significant. If we do not comply with existing or new laws and regulations related to patient health information, we could be subject to criminal or civil sanctions.

Additionally, the Federal Trade Commission (FTC) and many state attorneys general are interpreting existing federal and state consumer protection laws to impose evolving standards for the online collection, use, dissemination and security of health-related and other personal information. Courts may also adopt the standards for fair information practices promulgated by the FTC, which concern consumer notice, choice, security and access. Consumer protection laws require us to publish statements that describe how we handle personal information and choices individuals may have about the way we handle their personal information. At the state level, for example, the Washington State My Health My Data Act, which went into effect in 2024, contains requirements such as the provision of specific health-data consumer disclosures and consumer rights (including the right to consent to the processing of their health data) in addition to other compliance and security requirements. The My Health My Data Act considers violations of this law to be an unfair or deceptive act in trade or commerce and an unfair method of competition subject to the Washington Consumer Protection Act. To the extent this or other similar laws apply to us, and the information that we publish is considered untrue or our practices are deemed not to comply with these requirements, we may be subject to government claims of unfair or deceptive trade practices, which could lead to significant liabilities and consequences. Furthermore, according to the FTC, violating consumers’ privacy rights or failing to take appropriate steps to keep consumers’ personal information secure may constitute unfair or deceptive acts or practices in violation of Section 5 of the FTC Act. The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Individually identifiable health information is considered sensitive data that merits stronger safeguards. The FTC has also been active with respect to enforcement of its Health Breach Notification Rule and in scrutinizing the use and disclosure of sensitive personal information. The FTC also finalized changes to the Health Breach Notification Rule in April 2024. The FTC’s guidance for appropriately securing consumers’ personal information is similar to what is required by the HIPAA Security Rule. Enforcement by the FTC under the FTC Act can result in civil penalties or enforcement actions.

We may also be subject to laws and regulations in foreign countries covering data privacy and other protection of health and employee information that may be more onerous than corresponding U.S. laws. These regulations may require that we obtain individual consent before we collect or process personal data, restrict our use or transfer of personal data, impose technical and organizational measures to ensure the security of personal data, add obligations to our data analytics services, and require that we notify regulatory agencies, individuals or the public about any data security breaches. If we expand our international operations, we may be required to expend significant time and resources to put in place additional mechanisms to ensure compliance with multiple robust and evolving data privacy laws as they become applicable to our business.

Failure to comply with applicable data protection laws and regulations could result in government enforcement actions (which could include civil and/or criminal penalties), private litigation and/or adverse publicity and could negatively affect our operating results and business. Compliance with these laws is difficult, constantly evolving, time consuming, and requires a flexible privacy framework and substantial resources. Compliance efforts will likely be an increasing and substantial cost in the future.

For information related to our cybersecurity risk management, strategy and governance, see the section entitled “Cybersecurity” under Part I, Item 1C below.

Reimbursement in the Clinic and Home Settings

We sell our Tablo to dialysis clinic operators (or providers). These clinics, in turn, provide equipment and services to the patient and are reimbursed by Medicare, Medicaid, and other third-party payors, such as private insurance.

Medicare

15

In the clinic and home setting, the largest payor of dialysis services is Medicare, and Medicare requires all dialysis patients to be under the care of a dialysis clinic provider, whether they are in the clinic or in the home.

Most patients who require regular dialysis, that is, those with ESRD, have coverage through Medicare Part B, which, effective January 1, 2011, pays dialysis clinics through a prospective, bundled payment system. Reimbursement is generally provided on a per treatment basis, and it is the same whether the patient is treated in the clinic or in the home setting. We believe that the current per treatment reimbursement amount received by our customers under Medicare Part B adequately covers the amortization of the cost of capital equipment, and specifically our Tablo console, as well as the per treatment supplies and disposables cost for Tablo, whether it is in the home or the in-clinic setting. Dialysis clinics’ continuing use of Tablo, however, will depend on whether the cost of treatments involving Tablo (including the amortized cost of Tablo console and other capital equipment) will continue to be adequately covered by the reimbursement that the dialysis clinics receive from Medicare and any other third-party payors.

Under the ESRD Prospective Payment System (PPS), CMS generally makes a single bundled payment to the dialysis facility for each dialysis treatment that covers all renal dialysis services, which is broadly defined and includes home dialysis and most related drugs. On November 24, 2025, CMS published the final rule for Calendar Year (CY) 2026, which increased the base reimbursement rate per dialysis treatment to $281.71, an increase of $7.89 over the CY 2025 base rate of $273.82. CMS may adjust the base rate to account for factors that increase the cost of providing dialysis to a certain patient, for example, based on patient factors such as age, body surface area, low body mass index, and certain comorbidities, and based on facility factors like volume and geographic location. With a vast majority of U.S. ESRD patients covered by Medicare, the Medicare reimbursement rate is an important factor in a healthcare provider’s decision to use Tablo and limits the fees for which we can sell or rent Tablo. As part of the CY 2026 final rule, CMS continued to extend Medicare coverage to allow payment for renal dialysis services furnished to acute kidney failure (AKI) patients in their homes at a payment rate of $281.71, in line with the updated ESRD PPS base rate. The CY 2026 final rule also terminated the End-Stage Renal Disease Treatment Choices Model (ETC Model), a mandatory payment model that adjusted certain Medicare payments to select ESRD facilities, nephrologists, and other clinicians managing beneficiaries with ESRD, effective December 31, 2025. Additionally, the final rule continues to allow ESRD facilities to bill Medicare for the home and self-dialysis training add-on payment adjustment for beneficiaries with AKI in CY 2026 and updates requirements for the ESRD Quality Incentive Program (QIP) to remove the Facility Commitment to Health Equity measure beginning with the CY 2027 ESRD QIP.

Current CMS rules limit the number of hemodialysis treatments paid for by Medicare Part B to three times a week, unless there is medical justification provided by the dialysis facility based on information from the patient’s physician for additional treatments. Using currently available technology, most patients who receive home dialysis have been prescribed to receive more than three treatments per week. Tablo can allow providers to prescribe as few as three home dialysis treatments per week. However, to the extent that providers continue to prescribe more than three home dialysis treatments per week and Medicare contractors determine they will not pay for such additional treatments, use of Tablo could be adversely impacted. As there is not a uniform national standard for what constitutes medical justification, a clinic’s decision as to how much it is willing to spend on home dialysis equipment and services will be at least partly dependent on the number of weekly treatments prescribed for home dialysis with Tablo and, if greater than three, the level of confidence the center has in the predictability of receiving reimbursement from Medicare for additional treatments per week based on submitted claims for medical justification.

Since January 1, 2021, there has been a significant increase in dialysis patients enrolled in a Medicare Advantage plan as a result of the 21st Century Cures Act, which amended the Social Security Act to allow ESRD patients covered under Medicare to enroll in Medicare Advantage plans for the first time. While Medicare Advantage plans must provide at least the same level of coverage for Medicare beneficiaries as traditional Medicare, reimbursement to dialysis facilities is most often higher than traditional Medicare with a wide range of variability in payment rates to providers. Reimbursement rates depend on each Medicare Advantage plan’s contracts and network agreements with each dialysis facility. The CY 2021 Medicare ESRD PPS final rule, among other things, encouraged the development of new and innovative home dialysis machines to give Medicare beneficiaries more dialysis treatment options in the home and improve their quality of life. Specifically, the CY 2021 final rule included capital equipment in transitional add-on payment adjustments for new and innovative equipment and supplies (TPNIES). For home dialysis equipment CMS provided a pathway for capital related assets (CRA) to secure TPNIES. We applied for and received CRA TPNIES in connection with the use of Tablo by one patient per one machine in the home, pursuant to which Medicare paid 65% of the Medicare Administrative Contractor-determined pre-adjusted per treatment amount for two calendar years beginning in CY 2022. However, this two-year eligibility period ended on December 31, 2023, meaning Tablo has not been eligible for, and providers have not received, TPNIES since January 1, 2024.

Medicaid

Many ESRD patients also have Medicaid coverage that is supplemental to Medicare coverage, as it helps cover Medicare Part B coinsurance and items and services not covered by Medicare Part B. Some ESRD patients, however, may have Medicaid as their primary coverage. Because Medicaid is a state-administered program, Medicaid reimbursement for dialysis services varies by state.

Private Insurance

16

Finally, some patients may have coverage through private insurance, for example through a marketplace plan set up under the ACA or through an employer or union group health plan. Private insurance reimbursement is generally higher than government reimbursement, but private insurance coverage and reimbursement varies by sponsor and plan.

Reimbursement in the Critical Care Setting

For Medicare patients, both AKI and fluid overload therapies provided in an in-patient hospital setting are reimbursed under Medicare Part A through the Hospital Inpatient Prospective Payment System using the Medicare Severity Diagnosis Related Group System (MS-DRG). Under this system, reimbursement is determined based on a patient’s diagnoses, demographics, and procedures furnished during the stay, and is intended to cover all of the hospital’s costs of treating the patient. Longer hospitalization stays and higher labor needs, which are typical for patients with acute kidney failure and fluid overload, must be managed in order for care of these patients to be cost-effective. Similar to dialysis clinics that are reimbursed by Medicare Part B under the ESRD bundled payment methodology, we believe that there is a significant incentive for hospitals to find the most cost-efficient way to treat these patients in order to improve hospital economics for these therapies.

In the in-patient setting under Medicare, dialysis and ultrafiltration (UF) are not directly reimbursed, but rather are paid for out of the amount paid to inpatient hospitals in connection with the patient’s applicable MS-DRG for his/her admission. In most cases, AKI or fluid overload requiring dialysis or ultrafiltration will increase the severity of the underlying diagnosis and therefore could result in higher reimbursement than those cases without dialysis. Given that dialysis is a “fixed cost” for providers within the MS-DRG, we believe that there is significant motivation for providers to attempt to reduce costs associated with dialysis in order to improve overall service line profitability.

United States Health Reform

Changes in healthcare policy could increase our costs and subject us to additional legislative and regulatory requirements that may interrupt commercialization of our current and future products, decrease our revenue and adversely impact sales of, and pricing of and reimbursement for, our current and future products. The United States and some foreign jurisdictions are considering or have enacted a number of other legislative and regulatory proposals to change the healthcare system in ways that could affect our ability to sell our products profitably. Among policy makers and payors in the United States and elsewhere, there is significant interest in promoting changes in healthcare systems with the stated goals of containing healthcare costs, improving quality and/or expanding access. Current and future legislative proposals to further reform healthcare or reduce healthcare costs may limit coverage of or lower reimbursement for the procedures associated with the use of our products. The cost containment measures that payors and providers are instituting and the effect of any healthcare reform initiatives implemented in the future could impact our revenue from the sale of our products.

The implementation of the ACA in the United States, for example, has changed healthcare financing and delivery by both governmental and private insurers substantially, and affected medical device manufacturers significantly. The ACA, among other things, implemented payment system reforms including a national pilot program on payment bundling to encourage hospitals, physicians and other providers to improve the coordination, quality and efficiency of certain healthcare services through bundled payment models. Additionally, the ACA encouraged states to expand eligibility criteria for Medicaid programs and created a new Patient-Centered Outcomes Research Institute to oversee, identify priorities in, and conduct comparative clinical effectiveness research, along with funding for such research.

There have been judicial and Congressional challenges to various elements of the ACA, as well as efforts to modify certain aspects of the ACA. For example, Congress eliminated, starting January 1, 2019, the tax penalty for not complying with the ACA’s individual mandate to carry health insurance. The Further Consolidated Appropriations Act of 2020, Pub. L. No. 116-94, signed into law December 20, 2019, fully repealed the ACA’s “Cadillac Tax” on certain high-cost employer-sponsored insurance plans, the annual fee imposed on certain health insurance providers based on market share (repeal effective in 2021), and the medical device excise tax on non-exempt medical devices. The American Rescue Plan of 2021, Pub. L. No. 117-2, enacted on March 11, 2021, temporarily increased premium tax credit assistance for those eligible for subsidies for 2021 and 2022 and removed the 400% federal poverty level limit that otherwise applies for purposes of eligibility to receive premium tax credits. Recently, the Inflation Reduction Act of 2022 extended this increased tax credit assistance and removal of the 400% federal poverty limit through 2025. This tax credit assistance expired on December 31, 2025. As a result, it is possible that fewer people may be insured in future years, and a significant reduction in the population covered under private health insurance may result in patient decisions to postpone or decide against receiving services and further difficulties in collecting patient payment and deductible receivables. It is unclear if efforts to challenge, or modify, or alter the implementation or interpretation of the ACA will affect our business, financial condition and results of operations.

In addition, other legislative changes have been proposed and adopted since the ACA was enacted. For example, the Budget Control Act of 2011, among other things, resulted in reductions in payments to Medicare providers of 2% per fiscal year, which went into effect on April 1, 2013 and, due to subsequent legislative amendments to the statute, will remain in effect into 2032 unless additional Congressional action is taken, with the exception of a temporary suspension of the 2% cut in Medicare payments from May

17

1, 2020 through March 31, 2022 due to the COVID-19 pandemic. The law provided for 1% Medicare sequestration in the second quarter of 2022, with the full 2% sequestration going into effect thereafter through the first eleven months of the FY 2032 sequestration order, unless additional Congressional action is taken. As long as these cuts remain in effect, they could adversely impact payment for any products we may commercialize in the future. Additionally, the American Taxpayer Relief Act of 2012, among other things, reduced CMS payments to several types of providers, including hospitals, and extended the statute of limitations period for the government to recover Medicare overpayments to providers from three to five years.

Moreover, other legislative and executive actions have encouraged the development of new payment and care models for ESRD patients. For example, CMS published a final rule on September 29, 2020 that among other things, implemented the End-Stage Renal Disease Treatment Choices (ETC) Model, a mandatory payment model that adjusted certain Medicare payments to select ESRD facilities, nephrologists, and other clinicians managing beneficiaries with ESRD starting January 1, 2021. Specifically, the ETC Model adjusted certain ESRD facilities’ treatment base rates under the ESRD Prospective Payment System and managed clinicians’ monthly Medicare capitation payments to incentivize greater use of home dialysis and kidney transplants. CMS released its Third Annual Evaluation Report that included results from Measurement Years 4 through 6 on August 24, 2025. However, although the ETC Model was originally set to continue until June 30, 2027, CMS published a final rule on November 24, 2025 that terminated the ETC Model effective December 31, 2025. CMS explained that it has the authority to terminate a model that does not improve quality of care without increasing Medicare spending before concluding that the ETC Model has not enhanced the quality of care for ESRD patients as reflected through the key model measures of home dialysis modalities, transplant waitlisting, and living donor transplantation. As a result, the ETC Model payment adjustments will only apply to claim service dates ending on or before December 31, 2025, and CMS stopped sharing any data sharing and reports as of November 30, 2025, including any information about model performance in Measurement Years 7 through 10.

Additionally, on January 1, 2022, CMS implemented the Kidney Care Choices Model, a voluntary Medicare payment model with four distinct payment options designed to help providers reduce costs and improve quality of care for patients with late-stage chronic kidney disease and ESRD, to delay the need for dialysis, and to encourage kidney transplantation. The Kidney Care Choices Model is set to run through 2027. More recently, on November 26, 2024, CMS issued a final rule announcing a six-year mandatory alternative payment model, the Increasing Organ Transplant Access Model (IOTA Model). The IOTA Model, which will begin on July 1, 2025 and end on June 30, 2031, will test whether performance-based incentives (including both upside and downside risk payments) for participating kidney transplant hospitals will incentivize increased numbers of kidney transplants for patients with ESRD. Specifically, in performance year 1, participating transplant hospitals will only have the potential for a positive payment adjustment, but in performance year 2, the participating hospitals will have the potential for both positive and negative payment adjustments. The final rule also established standard provisions, applicable to the ETC and IOTA Models, that address beneficiary protections, cooperation in model evaluation and monitoring, audits and record retention, rights in data and intellectual property, monitoring and compliance, remedial action, model termination by CMS, limitations on review, provisions on bankruptcy and other notifications, and the reconsideration review process. Changes to the models of patient care, including an increased focus on treatments earlier in disease progression, may adversely affect our customers’ businesses and potentially decrease the demand for our product or result in additional pricing pressures. Further, with home dialysis as a growing trend in the industry, a failure to implement our expansion into home dialysis could have a material adverse impact on our business.

We believe that there will continue to be proposals and other actions by legislators and other policymakers at both the federal and state levels, and by regulators and third-party payors to reduce costs and/or expand individual healthcare coverage. Changes to federal and state legislatures and executive offices have resulted in and will likely continue to result in further healthcare policy changes. For example, on July 9, 2021, former President Biden issued an executive order to promote competition in the American economy, including in the healthcare sector. Among the provisions in the executive order was a directive to HHS to standardize plan options in the national health insurance marketplaces (i.e., the Exchanges) to facilitate improved comparison shopping for insurance plans. Additionally, on June 21, 2022, in the case of Marietta v. DaVita, the Supreme Court of the United States addressed the question of whether a group health plan that provides limited benefits for outpatient dialysis – but does so uniformly for all plan participants – violates the Medicare Secondary Payer Act (MSPA), a law which makes Medicare a “secondary” payer to an individual’s existing insurance plan for certain medical services, including dialysis, when that plan already covers the same services. Specifically, the Supreme Court held that because the Plan’s terms apply uniformly to all covered individuals, the Plan does not “differentiate in the benefits it provides” to individuals with ESRD or “take into account” whether an individual is entitled to or eligible for Medicare, and thus does not violate the MSPA.

The current presidential administration has also signaled its intent to continue to pursue healthcare reform measures. For example, President Trump has issued a number of Executive Orders that signal his administration’s intent to reduce federal spending on government-funded healthcare programs, such as Medicaid. In addition, on June 28, 2024, the U.S. Supreme Court issued an opinion holding that courts reviewing agency action pursuant to the Administrative Procedure Act (APA) “must exercise their independent judgment” and “may not defer to an agency interpretation of the law simply because a statute is ambiguous.” The decision affects how lower courts evaluate challenges to agency interpretations of law, including those by CMS and other agencies with significant oversight of the healthcare industry. The new framework is likely to increase both the frequency of such challenges and their odds of success by eliminating one way in which the government previously prevailed in such cases. As a result, significant

18

regulatory policies may be subject to increased litigation and judicial scrutiny. Any resulting changes in regulation may result in unexpected delays, increased costs, or other negative impacts that are difficult to predict but could have a material adverse effect on our business and financial condition. For example, certain of these changes could impose additional limitations on the rates we will be able to charge for our current and future products or the amounts of reimbursement available for our current and future products from governmental agencies or third-party payors.

Human Capital Resources

As of December 31, 2025, we had 310 full-time employees, with 58% in our field sales and service teams and 42% in the rest of the company. Our workforce hails from across industries, including technology, medical devices, life sciences, hospitals and other healthcare organizations.

As of December 31, 2025, our manufacturing facility in Tijuana, Mexico had 254 full-time team members on-site across quality, engineering, manufacturing, supply chain, and other support functions. TACNA facilitates the hiring of new team members and is responsible for human resource functions and payroll processing.

Starting in 2023 through the beginning of 2025, we implemented four workforce reductions. These actions were taken to align our level of investment with our key strategic priorities, with the goal of continuing to drive efficiency and effectiveness in serving both our patients and our shareholders.

There are no unions represented within our employee base and none of our employees are covered under collective bargaining agreements.

Talent and Pay Philosophies

We are committed to attracting the best talent we can find, while providing our employees with challenging work in a fast-paced environment. We recruit broadly and purposefully, and welcome diverse candidates.

Our work environment is goal-driven, and we believe in paying for outstanding performance and future potential. We offer competitive, market-based salaries, an annual cash bonus program tied to individual and company performance, an equity incentive compensation program including an employee stock purchase plan, a 401(k) retirement savings plan with company match, a comprehensive benefits package, team incentives and peer incentives.

Performance Management, Career Development, Engagement and Inclusive Workplace

We have a structured approach for employee performance management, development and growth. During 2025, managers generally held two key performance conversations per year with their team members; a year-end performance conversation is focused on evaluating the success and learning of the past year, and a mid-year performance conversation is focused on skill development and future growth opportunities.

We offer numerous avenues for employees to gain experience, exposure and build new skills. For example, we have invested in various training and development opportunities for our employees.

We strongly believe in growing from within and provide opportunities for in-role stretch assignments, cross-group short assignments, internal mobility, and promotions. We conduct an enterprise-wide employee survey at least semi-annually to monitor employee engagement and identify areas of focus for our human capital management program.

We are committed to creating and nurturing an inclusive workplace, where everyone feels respected, valued, and included – not only because it’s the right thing to do, but also because we strongly believe that it’s vital to our success and crucial to fully support the diverse communities we serve.

Employee Health and Safety

At Outset, safety is a priority and is part of everyone’s job. We are committed to providing a safe workplace and we comply with applicable health and safety laws and regulations. We strictly prohibit any violent or threatening behavior on our premises or during any work-related activities. Our employees participate in applicable emergency response training and periodic drills to help maintain awareness of security, safety and emergency response protocols.

As an organization, one of our top priorities is to maintain the wellbeing of our employees and their families. Our comprehensive and competitive benefits program is designed to help employees balance their work lives and personal lives by giving them a sense of peace of mind related to their healthcare. We maintain a whole person wellbeing approach, providing resources to support physical, mental, financial, professional and social wellbeing.

19

Available Information

We make our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and amendments to those reports, available free of charge at our website as soon as reasonably practicable after they have been filed with the Securities and Exchange Commission (SEC). Our website address is www.outsetmedical.com. Information on our website is not part of this report. The SEC maintains a website that contains the materials we file with the SEC at www.sec.gov.

Information About Our Executive Officers

The following table sets forth information concerning our executive officers and director as of the date of this Annual Report:

Name

Age

Position(s)

Executive Officers

Leslie Trigg

55

President, Chief Executive Officer and Chair of the Board

Renee Gaeta

44

Chief Financial Officer

John L. Brottem

52

General Counsel and Secretary

Marc Nash

37

Executive Vice President, R&D, Operations and Service

Leslie Trigg

Leslie Trigg has served as our President and CEO and a member of our Board since November 2014 and as Chair of our Board since February 2022. Ms. Trigg joined the Company from Warburg Pincus, a private equity firm, where she was an Executive in Residence from March 2012 to March 2014. Prior to that, Ms. Trigg served in several roles at Lutonix (acquired by CR Bard), a medical device company, from January 2010 to February 2012, most recently as Executive Vice President, and as Chief Business Officer of AccessClosure (acquired by Cardinal Health), a medical device company, from September 2006 to June 2009. She also previously held positions with FoxHollow Technologies (acquired by ev3/Covidien), a manufacturer of devices to treat peripheral artery disease, Cytyc, a diagnostic and medical device company, Pro-Duct Health (acquired by Cytyc), a medical device company, and Guidant, a cardiovascular medical device company. Ms. Trigg has served on the board of directors of Exact Sciences Corporation, a molecular diagnostics company, since April 2025, and also serves on the board of directors of the Medical Device Manufacturers Association (MDMA). Previously, Ms. Trigg served on the boards of directors of Adaptive Biotechnologies Corporation, a biotechnology company, from March 2021 to June 2023, ARYA Sciences Acquisition Corp IV, a special purpose acquisition company, from March 2021 to July 2024, and Cardiovascular Systems, Inc., a medical device company, from 2010 to 2017. Ms. Trigg holds a B.S. degree from Northwestern University and an M.B.A. from The Haas School of Business, University of California, Berkeley.

Renee Gaeta

Renee Gaeta has served as our Chief Financial Officer since June 2025. Prior to joining the Company, Ms. Gaeta served as the Chief Financial Officer of Shockwave Medical, Inc., a medical device company, from February 2024 until it was acquired by Johnson & Johnson in May 2024. Prior to that, she served as Chief Financial Officer of Eko Health, a cardiopulmonary digital health company, from July 2021 to February 2024. From July 2017 to July 2021, Ms. Gaeta was Chief Financial Officer at Establishment Labs Holdings, Inc., a global medical technology company, and from August 2014 to June 2017, she served as Vice President, Corporate Controller at Sientra, Inc., a medical aesthetics company. Earlier in her career, Ms. Gaeta spent ten years at KPMG LLP where she held various positions of increasing responsibility. Ms. Gaeta has served on the board of directors of Candel Therapeutics, Inc., a biopharmaceutical company, since August 2022. Previously, she also served on the board of directors of SeaSpine Holdings Corporation, a global medical technology company, from February 2019 to January 2023 when it merged with Orthofix Medical. Ms. Gaeta holds a B.S. from Loyola Marymount University and is a Certified Public Accountant in the State of California.

John L. Brottem

John L. Brottem has served as our General Counsel and Secretary since May 2020. Prior to joining the Company, Mr. Brottem served in a number of roles at Omnicell, Inc., a leading provider of medication management automation solutions and adherence tools for healthcare systems and pharmacies: as Vice President, Legal and Deputy General Counsel from September 2019 to May 2020; as Vice President, Legal and Associate General Counsel from April 2016 to September 2019; and Senior Director, Legal and Associate General Counsel from November 2011 to April 2016. Prior to Omnicell, Mr. Brottem was Corporate Counsel at Brocade Communications Systems, Inc., a networking solutions company, from January 2009 to November 2011; Corporate Counsel at Foundry Networks, Inc., a networking solutions company, from February 2008 to January 2009; and Associate at Cooley Godward Kronish LLP, an international law firm, from November 2001 to February 2008. Mr. Brottem holds a B.A. from Occidental College and a J.D. from the University of California, Davis, School of Law.

20

Marc Nash

Marc Nash has served as our Executive Vice President, R&D, Operations and Service since August 2025. Mr. Nash joined the Company in December 2019 as Senior Director of Operations, was named Vice President, Manufacturing in March 2021 and was named Senior Vice President, Operations, Software and R&D in July 2023. Prior to joining the Company, from June 2016 through June 2019, Mr. Nash served as Director of Operations at Epocal Inc., a medical technology company (and a subsidiary of Alere, Inc. acquired by Siemens Healthineers), during which time he was responsible for the end-to-end manufacturing operations of point of care diagnostics products and platforms. From 2012 through 2016, Mr. Nash held various positions of increasing responsibility at Alere Inc., a medical technology company, where he was responsible for the transfer, consolidation and enhancement of class II and class III point of care and rapid diagnostic products globally. Mr. Nash holds a B.S. from Union College and an M.B.A. from the University of Haifa, Israel.

21