53 government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing sensitive information (including personal data); litigation (including class claims); indemnification obligations; negative publicity; reputational harm; monetary fund diversions; diversion of management attention; interruptions in our operations (including availability of clinical trial data); financial loss; and other similar harms. Some of our contracts may not contain limitations of liability, and even where they do, there can be no assurance that limitations or exclusions of liability in our contracts may not be enforceable or adequate or protect us from liability or damages. Our insurance coverage may not be adequate for cybersecurity liabilities, may not continue to be available to us on economically reasonable terms, or at all, and insurers could deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could materially and adversely affect our reputation, business, financial condition and results of operations. In addition to experiencing a security incident, third parties may gather, collect, or infer sensitive information about us from public sources, data brokers, or other means that reveals competitively sensitive details about our organization and could be used to undermine our competitive advantage or market position. Additionally, our sensitive information could be leaked, disclosed, or revealed as a result of or in connection with our employees’, personnels’, or vendors’ use of generative AI technologies. Business disruptions could seriously harm our future revenue and financial condition and increase our costs and expenses. Our operations, and those of our third party vendors, suppliers, and other contractors and consultants, could be subject to earthquakes, power shortages, telecommunications failures, water shortages, floods, hurricanes, typhoons, fires, extreme weather conditions, medical epidemics and other natural or man-made disasters or business interruptions, for which we are partly uninsured. In addition, we rely on our third-party research institution collaborators for conducting research and development of our product candidates, and they may be affected by government shutdowns or withdrawn funding. Reductions in force and decreased funding at FDA may delay review and response to our submissions and applications and have material adverse impact on our business. The occurrence of any of these business disruptions could seriously harm our operations and financial condition and increase our costs and expenses. For example, in connection to health epidemics, the various quarantines, shelter-in-place and similar government orders, or the perception that such orders, shutdowns or other restrictions on the conduct of business operations could occur, related to infectious diseases, could adversely affect our business, financial condition or results of operations by limiting our ability to manufacture product, forcing temporary closure of facilities that we rely upon or increasing the costs associated with obtaining clinical supplies of our product candidates. The extent to which health epidemics could impact our results will depend on future developments, which are highly uncertain and cannot be accurately predicted, including the severity and the actions to contain or treat such outbreaks, epidemics, or pandemics, among others. Our operations are located at facilities in Palo Alto, California and Switzerland. Damage or extended periods of interruption to our corporate, development or research facilities due to fire, natural disaster, power loss, communications failure, unauthorized entry or other events could cause us to cease or delay development of some or all of our product candidates. Although we maintain property damage and business interruption insurance coverage on these facilities, our insurance might not cover all losses under such circumstances and our business may be seriously harmed by such delays and interruption. Our enterprise resource planning, or ERP, system is critical to our ability to accurately maintain books and records and prepare our financial statements. If we encounter unforeseen problems with our ERP system or other systems and infrastructure, our business, operations, and financial results could be adversely affected. Our business is subject to economic, political, regulatory and other risks associated with international operations. Our business is subject to risks associated with conducting business internationally. Some of our suppliers and collaborative relationships are located outside the United States. Accordingly, our future results could be harmed by a variety of factors, including: • economic weakness, including inflation or political instability in particular non-U.S. economies and markets; • differing and changing regulatory requirements, pricing and reimbursement regimes in non-U.S. countries;

Kodiak Vision Sciences: Annual Report 2025 - Page 65 Kodiak Vision Sciences: Annual Report 2025 Page 64 Page 66