00019903542025falseFYP2Yhttp://fasb.org/us-gaap/2025#UsefulLifeShorterOfTermOfLeaseOrAssetUtilityMember258iso4217:USDxbrli:sharesiso4217:USDxbrli:sharesxbrli:pureway:derivative_instrumentway:segmentway:installmentway:clientway:vendorway:instrument00019903542025-01-012025-12-3100019903542025-06-3000019903542026-02-1100019903542025-12-3100019903542024-12-310001990354us-gaap:NonrelatedPartyMember2025-12-310001990354us-gaap:NonrelatedPartyMember2024-12-310001990354us-gaap:RelatedPartyMember2025-12-310001990354us-gaap:RelatedPartyMember2024-12-3100019903542024-01-012024-12-3100019903542023-01-012023-12-310001990354us-gaap:NonrelatedPartyMember2025-01-012025-12-310001990354us-gaap:NonrelatedPartyMember2024-01-012024-12-310001990354us-gaap:NonrelatedPartyMember2023-01-012023-12-310001990354us-gaap:RelatedPartyMember2025-01-012025-12-310001990354us-gaap:RelatedPartyMember2024-01-012024-12-310001990354us-gaap:RelatedPartyMember2023-01-012023-12-310001990354us-gaap:CommonStockMember2024-12-310001990354us-gaap:AdditionalPaidInCapitalMember2024-12-310001990354us-gaap:AccumulatedOtherComprehensiveIncomeMember2024-12-310001990354us-gaap:RetainedEarningsMember2024-12-310001990354us-gaap:AdditionalPaidInCapitalMember2025-01-012025-12-310001990354us-gaap:CommonStockMember2025-01-012025-12-310001990354us-gaap:RetainedEarningsMember2025-01-012025-12-310001990354us-gaap:AccumulatedOtherComprehensiveIncomeMember2025-01-012025-12-310001990354us-gaap:CommonStockMember2025-12-310001990354us-gaap:AdditionalPaidInCapitalMember2025-12-310001990354us-gaap:AccumulatedOtherComprehensiveIncomeMember2025-12-310001990354us-gaap:RetainedEarningsMember2025-12-310001990354us-gaap:CommonStockMember2023-12-310001990354us-gaap:AdditionalPaidInCapitalMember2023-12-310001990354us-gaap:AccumulatedOtherComprehensiveIncomeMember2023-12-310001990354us-gaap:RetainedEarningsMember2023-12-3100019903542023-12-310001990354us-gaap:AdditionalPaidInCapitalMember2024-01-012024-12-310001990354us-gaap:CommonStockMember2024-01-012024-12-310001990354us-gaap:RetainedEarningsMember2024-01-012024-12-310001990354us-gaap:AccumulatedOtherComprehensiveIncomeMember2024-01-012024-12-310001990354us-gaap:CommonStockMember2022-12-310001990354us-gaap:AdditionalPaidInCapitalMember2022-12-310001990354us-gaap:AccumulatedOtherComprehensiveIncomeMember2022-12-310001990354us-gaap:RetainedEarningsMember2022-12-3100019903542022-12-310001990354us-gaap:AdditionalPaidInCapitalMember2023-01-012023-12-310001990354us-gaap:CommonStockMember2023-01-012023-12-310001990354us-gaap:RetainedEarningsMember2023-01-012023-12-310001990354us-gaap:AccumulatedOtherComprehensiveIncomeMember2023-01-012023-12-3100019903542024-05-152024-05-150001990354us-gaap:CommonClassAMember2024-05-152024-05-150001990354us-gaap:IPOMember2024-06-012024-06-300001990354us-gaap:IPOMember2024-06-300001990354us-gaap:OverAllotmentOptionMember2024-06-012024-06-300001990354us-gaap:OverAllotmentOptionMember2024-07-052024-07-050001990354way:FirstLienTermLoanFacilityMember2024-01-012024-12-310001990354way:FirstLienTermLoanFacilityMember2023-01-012023-12-310001990354way:InstitutionalInvestorsMemberway:FirstSecondaryOfferingMember2025-02-242025-02-240001990354way:InstitutionalInvestorsMemberway:SecondSecondaryOfferingMember2025-05-152025-05-150001990354way:InstitutionalInvestorsMemberway:ThirdSecondaryOfferingMember2025-09-102025-09-100001990354way:InstitutionalInvestorsMemberway:SecondaryOfferingMember2025-01-012025-12-310001990354srt:MinimumMember2025-01-012025-12-310001990354srt:MaximumMember2025-01-012025-12-310001990354way:ImplementationFeesAndHardwareSalesMember2025-01-012025-12-310001990354way:ImplementationFeesAndHardwareSalesMember2024-01-012024-12-310001990354way:ImplementationFeesAndHardwareSalesMember2023-01-012023-12-310001990354way:IncrementalCostsOfObtainingContractMember2025-12-310001990354way:IncrementalCostsOfObtainingContractMember2024-12-310001990354way:IncrementalCostsOfObtainingContractMember2025-01-012025-12-310001990354way:IncrementalCostsOfObtainingContractMember2024-01-012024-12-310001990354way:IncrementalCostsOfObtainingContractMember2023-01-012023-12-310001990354way:CostsToFulfillContractMember2025-12-310001990354way:CostsToFulfillContractMember2024-12-310001990354way:CostsToFulfillContractMember2025-01-012025-12-310001990354way:CostsToFulfillContractMember2024-01-012024-12-310001990354way:CostsToFulfillContractMember2023-01-012023-12-310001990354us-gaap:OfficeEquipmentMember2025-12-310001990354us-gaap:ComputerEquipmentMember2025-12-310001990354us-gaap:FurnitureAndFixturesMember2025-12-310001990354us-gaap:BuildingMember2025-12-310001990354srt:MinimumMemberus-gaap:SoftwareAndSoftwareDevelopmentCostsMember2025-12-310001990354srt:MaximumMemberus-gaap:SoftwareAndSoftwareDevelopmentCostsMember2025-12-310001990354us-gaap:LeaseholdsAndLeaseholdImprovementsMember2025-12-310001990354way:PrepaidExpensesMember2025-12-310001990354way:PrepaidExpensesMember2024-12-310001990354us-gaap:OtherNoncurrentAssetsMember2025-12-310001990354us-gaap:OtherNoncurrentAssetsMember2024-12-310001990354us-gaap:IPOMember2024-06-060001990354us-gaap:SoftwareDevelopmentMember2025-12-310001990354us-gaap:InterestRateSwapMember2025-12-310001990354way:InterestRateSwapMaturingOnJanuary312026Member2025-12-310001990354way:InterestRateSwapMaturingOnMarch312027Member2025-12-310001990354us-gaap:InterestRateSwapMember2024-10-300001990354us-gaap:InterestRateSwapMember2022-11-290001990354us-gaap:SubscriptionAndCirculationMember2025-01-012025-12-310001990354us-gaap:SubscriptionAndCirculationMember2024-01-012024-12-310001990354us-gaap:SubscriptionAndCirculationMember2023-01-012023-12-310001990354way:VolumeBasedRevenueMember2025-01-012025-12-310001990354way:VolumeBasedRevenueMember2024-01-012024-12-310001990354way:VolumeBasedRevenueMember2023-01-012023-12-310001990354way:ImplementationServicesAndOtherRevenueMember2025-01-012025-12-310001990354way:ImplementationServicesAndOtherRevenueMember2024-01-012024-12-310001990354way:ImplementationServicesAndOtherRevenueMember2023-01-012023-12-310001990354way:IodineMember2025-01-012025-12-3100019903542026-01-012025-12-3100019903542027-01-012025-12-310001990354way:IodineMember2026-01-012025-12-310001990354way:IodineMember2027-01-012025-12-310001990354way:ReportableSegmentMember2025-01-012025-12-310001990354way:ReportableSegmentMember2024-01-012024-12-310001990354way:ReportableSegmentMember2023-01-012023-12-310001990354us-gaap:CommercialPaperMember2025-12-310001990354us-gaap:USTreasuryBillSecuritiesMember2025-12-310001990354us-gaap:USGovernmentAgenciesDebtSecuritiesMember2025-12-310001990354us-gaap:CommercialPaperMemberus-gaap:CarryingReportedAmountFairValueDisclosureMember2025-12-310001990354us-gaap:CommercialPaperMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel1Member2025-12-310001990354us-gaap:CommercialPaperMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel2Member2025-12-310001990354us-gaap:CommercialPaperMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel3Member2025-12-310001990354us-gaap:USTreasuryBillSecuritiesMemberus-gaap:CarryingReportedAmountFairValueDisclosureMember2025-12-310001990354us-gaap:USTreasuryBillSecuritiesMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel1Member2025-12-310001990354us-gaap:USTreasuryBillSecuritiesMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel2Member2025-12-310001990354us-gaap:USTreasuryBillSecuritiesMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel3Member2025-12-310001990354us-gaap:USGovernmentAgenciesDebtSecuritiesMemberus-gaap:CarryingReportedAmountFairValueDisclosureMember2025-12-310001990354us-gaap:USGovernmentAgenciesDebtSecuritiesMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel1Member2025-12-310001990354us-gaap:USGovernmentAgenciesDebtSecuritiesMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel2Member2025-12-310001990354us-gaap:USGovernmentAgenciesDebtSecuritiesMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel3Member2025-12-310001990354us-gaap:CarryingReportedAmountFairValueDisclosureMemberus-gaap:MoneyMarketFundsMember2025-12-310001990354us-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel1Member2025-12-310001990354us-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel2Member2025-12-310001990354us-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:MoneyMarketFundsMemberus-gaap:FairValueInputsLevel3Member2025-12-310001990354us-gaap:InterestRateCapMemberus-gaap:CarryingReportedAmountFairValueDisclosureMember2025-12-310001990354us-gaap:InterestRateCapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel1Member2025-12-310001990354us-gaap:InterestRateCapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel2Member2025-12-310001990354us-gaap:InterestRateCapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel3Member2025-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:CarryingReportedAmountFairValueDisclosureMember2025-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel1Member2025-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel2Member2025-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel3Member2025-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:CarryingReportedAmountFairValueDisclosureMember2024-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel1Member2024-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel2Member2024-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:FairValueInputsLevel3Member2024-12-310001990354way:FirstLienCreditFacilityMemberus-gaap:CarryingReportedAmountFairValueDisclosureMemberus-gaap:LineOfCreditMember2025-12-310001990354way:FirstLienCreditFacilityMemberus-gaap:CarryingReportedAmountFairValueDisclosureMemberus-gaap:LineOfCreditMember2024-12-310001990354way:FirstLienCreditFacilityMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:LineOfCreditMember2025-12-310001990354way:FirstLienCreditFacilityMemberus-gaap:EstimateOfFairValueFairValueDisclosureMemberus-gaap:LineOfCreditMember2024-12-310001990354way:IodineMember2025-10-012025-10-010001990354way:IodineMember2025-10-010001990354way:IodineMemberus-gaap:CustomerRelationshipsMember2025-10-010001990354way:IodineMemberus-gaap:DevelopedTechnologyRightsMember2025-10-010001990354way:IodineMemberus-gaap:TrademarksAndTradeNamesMember2025-10-010001990354way:IodineMemberus-gaap:CustomerRelationshipsMember2025-10-012025-10-010001990354way:IodineMemberus-gaap:DevelopedTechnologyRightsMember2025-10-012025-10-010001990354way:IodineMemberus-gaap:TrademarksAndTradeNamesMember2025-10-012025-10-010001990354way:HealthPay24Member2023-08-032023-08-030001990354way:HealthPay24Member2023-08-030001990354way:OliveAiInc.Member2023-10-312023-10-310001990354way:OliveAiInc.Member2023-10-310001990354us-gaap:ComputerEquipmentMember2024-12-310001990354us-gaap:SoftwareDevelopmentMember2024-12-310001990354us-gaap:SoftwareAndSoftwareDevelopmentCostsMember2025-12-310001990354us-gaap:SoftwareAndSoftwareDevelopmentCostsMember2024-12-310001990354us-gaap:FurnitureAndFixturesMember2024-12-310001990354us-gaap:OfficeEquipmentMember2024-12-310001990354us-gaap:LeaseholdImprovementsMember2025-12-310001990354us-gaap:LeaseholdImprovementsMember2024-12-310001990354way:InternalUseSoftwareInProgressMember2025-12-310001990354way:InternalUseSoftwareInProgressMember2024-12-310001990354way:FinanceLeaseAndLeaseholdImprovementsMember2024-01-012024-12-310001990354us-gaap:CustomerRelationshipsMember2025-12-310001990354us-gaap:DevelopedTechnologyRightsMember2025-12-310001990354us-gaap:TrademarksAndTradeNamesMember2025-12-310001990354us-gaap:CustomerRelationshipsMember2024-12-310001990354us-gaap:DevelopedTechnologyRightsMember2024-12-310001990354us-gaap:TrademarksAndTradeNamesMember2024-12-310001990354srt:MinimumMember2025-12-310001990354srt:MaximumMember2025-12-310001990354us-gaap:StateAndLocalJurisdictionMember2025-12-310001990354us-gaap:StateAndLocalJurisdictionMember2024-12-310001990354us-gaap:DomesticCountryMember2025-12-310001990354us-gaap:DomesticCountryMember2024-12-310001990354us-gaap:StateAndLocalTaxJurisdictionOtherMember2025-01-012025-12-310001990354us-gaap:StateAndLocalTaxJurisdictionOtherMember2024-01-012024-12-310001990354us-gaap:StateAndLocalTaxJurisdictionOtherMember2023-01-012023-12-310001990354stpr:CA2025-01-012025-12-310001990354stpr:CA2024-01-012024-12-310001990354stpr:CA2023-01-012023-12-310001990354stpr:KY2025-01-012025-12-310001990354stpr:KY2024-01-012024-12-310001990354stpr:KY2023-01-012023-12-310001990354way:ValuationAllowanceStateTaxCreditCarryforwardMember2025-12-310001990354way:ValuationAllowanceStateNetOperatingLossCarryforwardMember2025-12-310001990354way:ReceivablesFacilityMemberus-gaap:LineOfCreditMember2021-08-132021-08-130001990354way:ReceivablesFacilityMemberus-gaap:LineOfCreditMember2021-08-130001990354way:ReceivablesFacilityMemberus-gaap:LineOfCreditMember2025-12-310001990354way:ReceivablesFacilityMemberus-gaap:LineOfCreditMember2024-12-310001990354way:ReceivablesFacilityMemberus-gaap:LineOfCreditMember2025-01-012025-12-310001990354us-gaap:SecuredDebtMemberway:FirstLienCreditAgreementMemberus-gaap:LineOfCreditMember2019-10-220001990354us-gaap:RevolvingCreditFacilityMemberway:FirstLienCreditAgreementMemberus-gaap:LineOfCreditMember2019-10-220001990354us-gaap:SecuredDebtMemberway:FirstLienCreditAgreementMemberus-gaap:LineOfCreditMember2023-01-012023-12-310001990354us-gaap:SecuredDebtMemberway:FirstLienCreditAgreementMemberus-gaap:LineOfCreditMember2023-12-310001990354us-gaap:SecuredDebtMemberway:SecondLienCreditAgreementMemberus-gaap:LineOfCreditMember2019-10-222019-10-220001990354us-gaap:SecuredDebtMemberway:SecondLienCreditAgreementMemberus-gaap:LineOfCreditMember2023-12-310001990354us-gaap:SecuredDebtMemberway:February2024FirstLienRefinancingMemberus-gaap:LineOfCreditMember2024-02-092024-02-090001990354us-gaap:SecuredDebtMemberway:June2024FirstLienPaydownMemberus-gaap:LineOfCreditMember2024-06-012024-06-300001990354way:June2024FirstLienRepricingMemberus-gaap:LineOfCreditMember2024-06-272024-06-270001990354us-gaap:SecuredDebtMemberway:July2024FirstLienPaydownMemberus-gaap:LineOfCreditMember2024-07-012024-07-310001990354way:ReceivablesFacilityMemberus-gaap:LineOfCreditMember2024-09-062024-09-060001990354us-gaap:SecuredDebtMemberway:September2024FirstLienPaydownMemberus-gaap:LineOfCreditMember2024-09-062024-09-060001990354us-gaap:SecuredDebtMemberway:December2024FirstLienRepricingMemberus-gaap:LineOfCreditMember2024-12-302024-12-300001990354us-gaap:RevolvingCreditFacilityMemberway:December2024RevolvingCreditFacilityRepricingMemberus-gaap:LineOfCreditMember2024-12-300001990354us-gaap:RevolvingCreditFacilityMemberway:December2024RevolvingCreditFacilityRepricingMemberus-gaap:LineOfCreditMember2024-12-302024-12-300001990354way:August2025FirstLienRepricingMemberus-gaap:LineOfCreditMember2025-08-122025-08-120001990354us-gaap:SecuredDebtMemberway:October2025FirstLienRefinancingMemberus-gaap:LineOfCreditMember2025-10-010001990354us-gaap:RevolvingCreditFacilityMemberway:October2025RevolvingCreditFacilityRepricingMemberus-gaap:LineOfCreditMember2025-09-300001990354us-gaap:RevolvingCreditFacilityMemberway:October2025RevolvingCreditFacilityRepricingMemberus-gaap:LineOfCreditMember2025-10-010001990354us-gaap:RevolvingCreditFacilityMemberway:October2025RevolvingCreditFacilityRepricingMemberus-gaap:LineOfCreditMember2025-09-302025-09-300001990354us-gaap:RevolvingCreditFacilityMemberway:October2025RevolvingCreditFacilityRepricingMemberus-gaap:LineOfCreditMember2025-10-012025-10-010001990354us-gaap:RevolvingCreditFacilityMemberus-gaap:LineOfCreditMember2025-10-012025-10-010001990354us-gaap:RevolvingCreditFacilityMemberus-gaap:LineOfCreditMember2025-01-012025-12-310001990354way:FirstLienTermLoanFacilityMemberus-gaap:LineOfCreditMember2025-12-310001990354way:FirstLienTermLoanFacilityMemberus-gaap:LineOfCreditMember2024-12-310001990354us-gaap:RevolvingCreditFacilityMemberus-gaap:LineOfCreditMember2025-12-310001990354us-gaap:RevolvingCreditFacilityMemberus-gaap:LineOfCreditMember2024-12-310001990354us-gaap:SecuredDebtMemberus-gaap:LineOfCreditMember2025-01-012025-12-310001990354us-gaap:SecuredDebtMemberus-gaap:LineOfCreditMember2025-12-310001990354way:August2025FirstLienRepricingMemberus-gaap:LineOfCreditMember2025-08-012025-08-310001990354way:August2025FirstLienRepricingMemberus-gaap:LineOfCreditMember2025-01-012025-12-310001990354way:October2025FirstLienRefinancingMemberus-gaap:LineOfCreditMember2025-10-010001990354way:October2025FirstLienRefinancingMemberus-gaap:LineOfCreditMember2025-10-012025-10-010001990354way:October2025FirstLienRefinancingMemberus-gaap:LineOfCreditMember2025-01-012025-12-310001990354way:October2025RevolvingCreditFacilityRepricingMemberus-gaap:LineOfCreditMember2025-10-010001990354way:February2024FirstLienRefinancingCreditorFeesMemberus-gaap:LineOfCreditMember2024-02-090001990354way:February2024FirstLienRefinancingThirdPartyFeesMemberus-gaap:LineOfCreditMember2024-02-090001990354way:February2024FirstLienRefinancingMemberus-gaap:LineOfCreditMember2024-02-092024-02-090001990354way:February2024SecondLienPaydownMemberus-gaap:LineOfCreditMember2024-01-012024-12-310001990354way:February2024FirstLienRefinancingMemberus-gaap:LineOfCreditMember2024-01-012024-12-310001990354us-gaap:SecuredDebtMemberway:June2024FirstLienPaydownMemberus-gaap:LineOfCreditMember2024-01-012024-12-310001990354way:June2024FirstLienRepricingMemberus-gaap:LineOfCreditMember2024-01-012024-12-310001990354us-gaap:SecuredDebtMemberway:July2024FirstLienPaydownMemberus-gaap:LineOfCreditMember2024-01-012024-12-310001990354us-gaap:SecuredDebtMemberway:September2024FirstLienPaydownMemberus-gaap:LineOfCreditMember2024-01-012024-12-310001990354us-gaap:SecuredDebtMemberway:December2024FirstLienRepricingMemberus-gaap:LineOfCreditMember2024-01-012024-12-310001990354way:SecondLienCreditAgreementMemberus-gaap:LineOfCreditMember2023-01-012023-12-310001990354way:InterestRateSwapOneMember2025-12-310001990354way:InterestRateSwapTwoMember2025-12-310001990354way:InterestRateSwapThreeMember2025-12-310001990354way:InterestRateSwapFourMember2025-12-310001990354way:InterestRateSwapFiveMember2025-12-310001990354way:InterestRateSwapOneMember2024-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember2025-01-012025-12-310001990354us-gaap:InterestRateSwapMember2025-01-012025-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember2024-01-012024-12-310001990354us-gaap:InterestRateSwapMember2024-01-012024-12-310001990354us-gaap:InterestRateSwapMemberus-gaap:AccumulatedGainLossNetCashFlowHedgeParentMember2023-01-012023-12-310001990354us-gaap:InterestRateSwapMember2023-01-012023-12-310001990354way:FirstLienTermLoanFacilityMembersrt:AffiliatedEntityMemberus-gaap:LineOfCreditMember2025-12-310001990354way:FirstLienTermLoanFacilityMembersrt:AffiliatedEntityMemberus-gaap:LineOfCreditMember2024-12-310001990354srt:AffiliatedEntityMember2024-01-012024-12-310001990354srt:AffiliatedEntityMember2023-01-012023-12-310001990354way:BainCapitalLPMembersrt:AffiliatedEntityMember2025-01-012025-12-310001990354way:BainCapitalLPMembersrt:AffiliatedEntityMember2024-01-012024-12-310001990354way:BainCapitalLPMembersrt:AffiliatedEntityMember2023-01-012023-12-310001990354way:AdventMembersrt:AffiliatedEntityMember2025-01-012025-12-310001990354way:NoClassCommonStockMember2023-12-310001990354us-gaap:CommonClassAMember2023-12-310001990354us-gaap:CommonClassAMember2023-01-012023-12-3100019903542024-06-100001990354us-gaap:CommonClassAMember2024-06-102024-06-100001990354way:StockIncentivePlan2019Member2019-10-220001990354way:StockIncentivePlan2019Member2019-10-222019-10-220001990354way:StockIncentivePlan2019Memberus-gaap:EmployeeStockOptionMember2019-10-222019-10-220001990354way:EquityIncentivePlan2024Member2024-06-060001990354way:EquityIncentivePlan2024Member2024-06-062024-06-060001990354way:EquityIncentivePlan2024Memberus-gaap:EmployeeStockOptionMember2024-06-062024-06-060001990354us-gaap:RestrictedStockUnitsRSUMemberus-gaap:ShareBasedCompensationAwardTrancheOneMemberway:EquityIncentivePlan2024Member2024-06-062024-06-060001990354us-gaap:RestrictedStockUnitsRSUMemberus-gaap:ShareBasedCompensationAwardTrancheTwoMemberway:EquityIncentivePlan2024Member2024-06-062024-06-060001990354us-gaap:PerformanceSharesMembersrt:MinimumMemberway:EquityIncentivePlan2024Member2024-06-062024-06-060001990354us-gaap:PerformanceSharesMembersrt:MaximumMemberway:EquityIncentivePlan2024Member2024-06-062024-06-060001990354way:EquityIncentivePlan2024Memberus-gaap:PerformanceSharesMember2024-06-062024-06-060001990354way:EquityIncentivePlan2024Member2025-12-310001990354way:EmployeeStockPurchasePlan2024Member2024-06-060001990354way:EmployeeStockPurchasePlan2024Member2024-06-062024-06-060001990354srt:MaximumMemberway:EmployeeStockPurchasePlan2024Member2024-06-060001990354way:EmployeeStockPurchasePlan2024Memberus-gaap:EmployeeStockMember2024-06-062024-06-060001990354way:EmployeeStockPurchasePlan2024Member2025-01-012025-12-310001990354us-gaap:EmployeeStockMember2025-01-012025-12-310001990354us-gaap:EmployeeStockMember2024-01-012024-12-310001990354us-gaap:EmployeeStockMember2023-01-012023-12-310001990354us-gaap:EmployeeStockOptionMember2025-01-012025-12-310001990354way:ShareBasedPaymentArrangementOptionWithPerformanceConditionMember2024-01-012024-12-310001990354way:ShareBasedPaymentArrangementOptionWithPerformanceConditionMember2025-12-3100019903542022-01-012022-12-310001990354us-gaap:EmployeeStockOptionMember2024-01-012024-12-310001990354us-gaap:EmployeeStockOptionMember2023-01-012023-12-310001990354srt:MinimumMemberus-gaap:EmployeeStockOptionMember2024-01-012024-12-310001990354srt:MaximumMemberus-gaap:EmployeeStockOptionMember2024-01-012024-12-310001990354srt:MinimumMemberus-gaap:EmployeeStockOptionMember2023-01-012023-12-310001990354srt:MaximumMemberus-gaap:EmployeeStockOptionMember2023-01-012023-12-310001990354way:ShareBasedPaymentArrangementTimeBasedOptionMember2025-12-310001990354way:ShareBasedPaymentArrangementTimeBasedOptionMember2025-01-012025-12-310001990354us-gaap:RestrictedStockUnitsRSUMember2024-12-310001990354us-gaap:RestrictedStockUnitsRSUMember2025-01-012025-12-310001990354us-gaap:RestrictedStockUnitsRSUMember2025-12-310001990354us-gaap:RestrictedStockUnitsRSUMember2023-12-310001990354us-gaap:RestrictedStockUnitsRSUMember2024-01-012024-12-310001990354us-gaap:PerformanceSharesMember2025-01-012025-12-310001990354us-gaap:PerformanceSharesMember2024-12-310001990354us-gaap:PerformanceSharesMember2025-12-310001990354us-gaap:CostOfSalesMember2025-01-012025-12-310001990354us-gaap:CostOfSalesMember2024-01-012024-12-310001990354us-gaap:CostOfSalesMember2023-01-012023-12-310001990354us-gaap:GeneralAndAdministrativeExpenseMember2025-01-012025-12-310001990354us-gaap:GeneralAndAdministrativeExpenseMember2024-01-012024-12-310001990354us-gaap:GeneralAndAdministrativeExpenseMember2023-01-012023-12-310001990354us-gaap:SellingAndMarketingExpenseMember2025-01-012025-12-310001990354us-gaap:SellingAndMarketingExpenseMember2024-01-012024-12-310001990354us-gaap:SellingAndMarketingExpenseMember2023-01-012023-12-310001990354us-gaap:ResearchAndDevelopmentExpenseMember2025-01-012025-12-310001990354us-gaap:ResearchAndDevelopmentExpenseMember2024-01-012024-12-310001990354us-gaap:ResearchAndDevelopmentExpenseMember2023-01-012023-12-310001990354way:VotingSharesMember2025-01-012025-12-310001990354way:VotingSharesMember2024-01-012024-12-310001990354way:VotingSharesMember2023-01-012023-12-310001990354way:NonVotingSharesMember2025-01-012025-12-310001990354way:NonVotingSharesMember2024-01-012024-12-310001990354way:NonVotingSharesMember2023-01-012023-12-310001990354us-gaap:EmployeeStockOptionMemberway:VotingSharesMember2025-01-012025-12-310001990354us-gaap:EmployeeStockOptionMemberway:VotingSharesMember2024-01-012024-12-310001990354us-gaap:EmployeeStockOptionMemberway:VotingSharesMember2023-01-012023-12-310001990354us-gaap:RestrictedStockUnitsRSUMemberway:VotingSharesMember2025-01-012025-12-310001990354us-gaap:RestrictedStockUnitsRSUMemberway:VotingSharesMember2024-01-012024-12-310001990354us-gaap:RestrictedStockUnitsRSUMemberway:VotingSharesMember2023-01-012023-12-310001990354us-gaap:EmployeeStockMemberway:VotingSharesMember2025-01-012025-12-310001990354us-gaap:EmployeeStockMemberway:VotingSharesMember2024-01-012024-12-310001990354us-gaap:EmployeeStockMemberway:VotingSharesMember2023-01-012023-12-310001990354way:ReceivablesFacilityMemberus-gaap:LineOfCreditMemberus-gaap:SubsequentEventMember2026-02-130001990354way:ReceivablesFacilityMemberus-gaap:LineOfCreditMemberus-gaap:SubsequentEventMember2026-02-132026-02-1300019903542025-10-012025-12-310001990354way:MatthewHawkinsMember2025-10-012025-12-310001990354way:MatthewHawkinsMember2025-12-31

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

x ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2025

o TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from ______ to ______

Commission File Number 001-42125

Waystar Holding Corp.

(Exact name of registrant as specified in its charter)


Delaware			84-2886542
(State or other jurisdiction of incorporation or organization)			(I.R.S. Employer Identification No.)
1550 Digital Drive, #300 Lehi, Utah			84043
(Address of principal executive offices)			(Zip Code)

(844) 492-9782

Registrant’s telephone number, including area code

Securities registered pursuant to Section 12(b) of the Act:


Title of each class	Trading Symbol(s)	Name of each exchange on which registered
Common Stock, par value $0.01 per share	WAY	Nasdaq Global Select Market

Securities registered pursuant to Section 12(g) of the Act: None.

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes x No o

Indicated by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes o No x

Indicate by check mark whether the registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes x No o

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes x No o

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act:


Large accelerated filer	x	Accelerated filer	o
Non-accelerated filer	o	Smaller reporting company	o
		Emerging growth company	o

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. o

Indicated by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. x

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. o

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). o

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes o No x

As of June 30, 2025, the aggregate market value of the registrant’s outstanding common stock held by non-affiliates was 2,106,581,546 based on the closing price of the registrant’s common stock on June 30, 2025, the last business day of the registrant’s most recently completed second fiscal quarter. For purpose of this calculation shares of common stock held by each executive officer and directors and certain significant stockholders have been excluded since those persons may under certain circumstances be deemed affiliates. This determination of affiliate status is not necessarily a conclusive determination for other purposes.

The registrant had 191,681,592 shares of common stock outstanding as of February 11, 2026.

DOCUMENTS INCORPORATED BY REFERENCE

Part III incorporates certain information by reference from the registrant’s definitive proxy statement for the 2026 annual meeting of stockholders, which will be filed no later than 120 days after the registrant’s fiscal year ended December 31, 2025.

Table of Contents


		Page

Glossary		i
Cautionary Statement Concerning Forward-Looking Statements and Summary of Risk Factors		iii

Part I

Item 1.	Business	6
Item 1A.	Risk Factors	24
Item 1B.	Unresolved Staff Comments	54
Item 1C.	Cybersecurity	54
Item 2.	Properties	56
Item 3.	Legal Proceedings	56
Item 4.	Mine Safety Disclosures	56

Part II

Item 5.	Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities	57
Item 6.	Reserved	58
Item 7.	Management’s Discussion and Analysis of Financial Condition and Results of Operations	59
Item 7A.	Qualitative and Quantitative Disclosures About Market Risk	72
Item 8.	Financial Statements and Supplementary Data	74
Item 9.	Changes in and Disagreements With Accountants on Accounting and Financial Disclosure	113
Item 9A.	Controls and Procedures	113
Item 9B.	Other Information	113
Item 9C.	Disclosure Regarding Foreign Jurisdictions t hat Prevent Inspections	114

Part III

Item 10.	Directors, Executive Officers, and Corporate Governance	114
Item 11.	Executive Compensation	114
Item 12.	Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters	114
Item 13.	Certain Relationships and Related Transactions, and Director Independence	114
Item 14.	Principal Account ant Fees and Services	114

Part IV

Item 15.	Exhibits and Financial Statement Schedules	116
Item 16.	Form 10-K Summary	120
Signatures		121

Table of Contents

Glossary

The following definitions apply to these terms as used in this Annual Report on Form 10-K:

•"Advent" mean those certain investment funds of Advent International, L.P. and its affiliates

•“AI” means artificial intelligence;

•“Bain” means those certain investment funds of Bain Capital, LP and its affiliates;

•“CPPIB” means Canada Pension Plan Investment Board;

•“Credit Facilities” means, collectively, the First Lien Credit Facility, the Revolving Credit Facility, and the Receivables Facility;

•“Derby Topco” means Derby TopCo Partnership LP, our direct parent entity prior to the Equity Distribution, in which the Institutional Investors, other equity holders, and certain members of management previously held equity interests;

•“DGCL” means the General Corporation Law of the state of Delaware, as amended;

•“EQT” means those certain investment funds of EQT AB and its affiliates;

•“Equity Distribution” means the distribution of shares of common stock of the Company held by Derby TopCo to the limited partners of Derby TopCo in accordance with the limited partnership agreement of Derby Topco, which distribution occurred in connection with our initial public offering. Following the Equity Distribution, EQT, CPPIB, Bain, and other equity holders, including members of management, directly hold shares of common stock of the Company;

•“Exchange Act” means the U.S. Securities Exchange Act of 1934, as amended;

•“First Lien Credit Facility” means the term loan credit facility under the first lien credit agreement, dated as of October 22, 2019, by and among Waystar Technologies, Inc. and the lenders party thereto, as amended from time to time;

•“GAAP” means U.S. generally accepted accounting principles;

•“Institutional Investors” means EQT, CPPIB, and Bain, and their respective affiliates;

•"Iodine" means Iodine Software Holdings, Inc.;

•“JOBS Act” means the U.S. Jumpstart Our Business Startups Act of 2012, as amended;

•“Net Revenue Retention Rate” means the total amount invoiced to clients in a given 12-month period divided by the total amount invoiced to those same clients from the prior 12-month period. See Part II, Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Key Performance Metrics and non-GAAP Financial Measures—Net Revenue Retention Rate;”

•"NM" means not meaningful;

•“Receivables Facility” means the receivables facility under the receivables financing agreement, dated as of August 13, 2021, by and among Waystar RC LLC, PNC Bank, National Association, as administrative agent, Waystar Technologies, Inc., as initial servicer, and PNC Capital Markets LLC, as structuring agent, as amended from time to time;

•“Revolving Credit Facility” means the revolving credit facility under the first lien credit agreement, dated as of October 22, 2019, by and among Waystar Technologies, Inc. and the lenders party thereto, as amended from time to time;

Table of Contents

•“SEC” means the U.S. Securities and Exchange Commission;

•“Second Lien Credit Facility” means the term loan credit facility under the second lien credit agreement, dated as of October 22, 2019, by and among Waystar Technologies, Inc. and the lenders party thereto, as amended from time to time;

•“Securities Act” means the U.S. Securities Act of 1933, as amended;

•“SOFR” means the Secured Overnight Financing Rate;

•“Stockholders Agreement” means the stockholders agreement, dated as of June 10, 2024, by and among the Institutional Investors, certain stockholders, and certain members of management; and

•“Waystar,” the “Company,” “we,” “us,” and “our” mean the business of Waystar Holding Corp. and its subsidiaries.

Numerical figures included in this report have been subject to rounding adjustments. Accordingly, numerical figures shown as totals in various tables may not be arithmetic aggregations of the figures that precede them.

Table of Contents

Cautionary Statement Concerning Forward-Looking Statements and Summary of Risk Factors

This report contains forward-looking statements, within the meaning of the Private Securities Litigation Reform Act of 1995, that reflect our current views with respect to, among other things, our operations and financial performance. Forward-looking statements include all statements that are not historical facts. These forward-looking statements are included throughout this report and relate to matters such as our industry, business strategy, goals, and expectations concerning our market position, future operations, margins, profitability, capital expenditures, liquidity, and capital resources and other financial and operating information. We have used the words “anticipate,” “assume,” “believe,” “continue,” “could,” “estimate,” “expect,” “intend,” “may,” “plan,” “potential,” “predict,” “project,” “future,” “will,” “seek,” “foreseeable,” the negative version of these words or similar terms and phrases to identify forward-looking statements in this report.

The forward-looking statements contained in this report are based on management’s current expectations and are not guarantees of future performance. The forward-looking statements are subject to various risks, uncertainties, assumptions, or changes in circumstances that are difficult to predict or quantify. Our expectations, beliefs, and projections are expressed in good faith, and we believe there is a reasonable basis for them. However, there can be no assurance that management’s expectations, beliefs, and projections will result or be achieved. Actual results may differ materially from these expectations due to changes in global, regional, or local economic, business, competitive, market, regulatory, and other factors, many of which are beyond our control. We believe that these factors include but are not limited to the following:

•our operation in a highly competitive industry;

•our ability to retain our existing clients and attract new clients;

•our ability to successfully execute on our business strategies in order to grow;

•our ability to accurately assess the risks related to acquisitions and successfully integrate acquired businesses, including the acquisition of Iodine;

•our ability to establish and maintain strategic relationships;

•the growth and success of our clients and overall healthcare transaction volumes;

•consolidation in the healthcare industry;

•our selling cycle of variable length to secure new client agreements;

•our implementation cycle that is dependent on our clients’ timing and resources;

•our dependence on our senior management team and certain key employees, and our ability to attract and retain highly skilled employees;

•the accuracy of the estimates and assumptions we use to determine the size of our total addressable market;

•our ability to develop and market new solutions, or enhance our existing solutions, to respond to technological changes or evolving industry standards;

•the interoperability, connectivity, and integration of our solutions with our clients’ and their vendors’ networks and infrastructures;

•the performance and reliability of internet, mobile, and other infrastructure;

•the consequences if we cannot obtain, process, use, disclose, or distribute the highly regulated data we require to provide our solutions;

•our reliance on certain third-party vendors and providers;

•any errors or malfunctions in our products and solutions;

•failure by our clients to obtain proper permissions or provide us with accurate and appropriate information;

•the potential for embezzlement, identity theft, or other similar illegal behavior by our employees or vendors, and a failure of our employees or vendors to observe quality standards or adhere to environmental, social, and governance standards;

•our compliance with the applicable rules of the National Automated Clearing House Association and the applicable requirements of card networks;

iii

Table of Contents

•increases in card network fees and other changes to fee arrangements;

•the effect of payer and provider conduct which we cannot control;

•privacy concerns and security breaches or incidents relating to our platform or data (including personal information and other regulated data);

•the complex and evolving laws and regulations regarding privacy, data protection, and cybersecurity;

•our ability to adequately protect and enforce our intellectual property rights;

•our ability to use or license data and integrate third-party technologies;

•the development, deployment, and use of AI;

•our use of “open source” software;

•legal proceedings initiated by third parties alleging that we are infringing or otherwise violating their intellectual property rights;

•claims that our employees, consultants, or independent contractors have wrongfully used or disclosed confidential information of third parties;

•the heavily regulated industry in which we conduct business;

•the uncertain and evolving healthcare regulatory and political framework;

•health care laws and data privacy and security laws and regulations governing our Processing of personal information (which may also be referred to as “personal data” or “personally identifiable information”);

•reduced revenues in response to changes to the healthcare regulatory landscape;

•legal, regulatory, and other proceedings that could result in adverse outcomes;

•contractual obligations requiring compliance with certain provisions of the Bank Secrecy Act/anti-money laundering laws and regulations;

•existing laws that regulate our ability to engage in certain marketing activities;

•our full compliance with website accessibility standards;

•any changes in our tax rates, the adoption of new tax legislation, or exposure to additional tax liabilities;

•limitations on our ability to use our net operating losses to offset future taxable income;

•losses due to asset impairment charges;

•our substantial debt and restrictive covenants in the agreements governing our Credit Facilities;

•interest rate fluctuations;

•unavailability of additional capital on acceptable terms or at all;

•the impact of general macroeconomic conditions;

•our history of net losses and our ability to achieve or maintain profitability;

•the interests of the certain investors may be different than the interests of other holders of our securities; and

•the other factors described elsewhere in this report, including under the headings “Management’s Discussion and Analysis of Financial Condition and Results of Operations,” “Quantitative and Qualitative Disclosures About Market Risk” and “Risk Factors,” or as described in the other documents and reports we file with the SEC.

These factors should not be construed as exhaustive and should be read in conjunction with the other cautionary statements that are included in this report. Should one or more of these risks or uncertainties materialize, or should any of our assumptions prove incorrect, our actual results may vary in material respects from those projected in these forward-looking statements.

Any forward-looking statements made by us in this report speak only as of the date of this report and are expressly qualified in their entirety by the cautionary statements included in this report. Factors or events that could cause our actual results to differ may emerge from time to time, and it is not possible for us to predict all of them. You should not place

Table of Contents

undue reliance on our forward-looking statements. We undertake no obligation to publicly update or review any forward-looking statement, whether as a result of new information, future developments, or otherwise, except as may be required by any applicable securities laws.

Table of Contents

Part I

Item 1. Business

Our mission is to simplify healthcare payments through our modern cloud-based software, enabling our healthcare clients to prioritize patient care and optimize their financial performance.

Overview

Waystar provides healthcare organizations with mission-critical AI-powered software that simplifies healthcare payments for providers across the continuum of care. Our enterprise-grade platform streamlines the complex and disparate processes providers must manage to ensure accurate reimbursement and improves the payments experience for providers, patients, and payers. We leverage internally developed AI as well as proprietary, advanced algorithms to automate payment-related workflow tasks and drive continuous improvement, which enhances claim and billing accuracy, strengthens data integrity, and reduces labor costs for providers.

Put simply, our software helps providers get paid faster, accurately, and more efficiently, while ensuring patients receive a modern, transparent, and consumer-friendly financial experience.

The healthcare payment ecosystem is highly complex, spanning the full patient journey from pre-service patient onboarding and extending through post-service revenue collection, with dozens of interdependent steps in between. Within this multi-step workflow, the process for determining how much a provider should be reimbursed involves millions of permutations of variables, such as unique payer contracts, each with individual rules, processes, and reimbursement requirements. The burden borne by providers of tracking and managing all of these variables, coupled with a constantly evolving regulatory framework, often results in incorrect payments or denials that require time-consuming appeals procedures to resolve. Historically, healthcare providers have relied upon a patchwork of manual processes and systems to navigate these complexities and support their payment functions. However, this legacy approach has resulted in workflow delays, lost revenue, and slower time to payment.

Our purpose-built software platform is designed to addresses these challenges and help optimize healthcare payments across all stages of the patient journey. Our clients utilize our software to manage pre-encounter workflows such as eligibility checks and prior authorization approvals, as well as mid-encounter workflows such as utilization management, coding and documentation accuracy, and back-end activities including co-pay collection, payer claims submission and monitoring, and denied claims appeals. Our software helps to avoid or reduce billing errors throughout the healthcare payment workflow, from pre-encounter eligibility verification to determine patient insurance benefits and benefits prior to rendering services, to mid- and post-encounter solutions such as our clinical integrity and revenue capture suite which identifies and resolves missing documentation, codes and charges and errors in claims submissions by providers, our claims management suite which helps ensure submissions are in accordance with payer contracts, and our denial recovery solution, which offers a root-cause reporting tool for denied claims to help reduce preventable denials in the future.

Our software is used daily by providers of all types and sizes across the continuum of care, including physician practices, clinics, surgical centers, and laboratories, as well as large hospitals and health systems. We currently serve over 30,000 clients of various sizes, representing over one million distinct providers practicing across a variety of care sites, including 16 of 20 U.S. News Best Hospitals list. Our client base is highly diversified, and for the year ended December 31, 2025, our top 10 clients accounted for only 10.8% of our total revenue for such period. Our business model aligns with our clients' growth; as they serve more patients, claims and transactional volumes increase, driving corresponding growth in our business. In addition, our clients frequently adopt a greater number of our solutions over time and introduce our solutions across new sites of care. In 2025, we facilitated over 7.5 billion healthcare payments transactions spanning approximately 60% of patients and one-in-three hospital discharges in the United States.

Our platform benefits from powerful network effects. Our cloud-based software is driven by a sophisticated, automated, and curated AI-powered engine to generate and incorporate real-time feedback from millions of network transactions processed through our platform each day. Every transaction we process provides additional data insights across providers, patients, and payers, which are embedded in updates that are deployed efficiently across our platform. This results in cumulative benefits to us over time. As we capture more data from each transaction we process, we leverage those insights to continuously improve the platform through Waystar AltitudeAI, our proprietary AI engine. Waystar AltitudeAI utilizes a multi-model approach that incorporates machine learning, large language models, and generative and

Table of Contents

agentic AI to automate complex workflows and deliver added value to our clients. In turn, the more value we create for our clients, the more likely it is that they will continue to use our products, allowing us to continue to capture additional data that results in tangible improvements to our platform. As a result, our clients benefit from faster and more efficient performance from software that is evolving to meet ever-changing regulatory and payer requirements, enabling accurate and timely reimbursement.

Industry Background

Healthcare is one of the largest and most complex vertical end-markets within the U.S. economy, accounting for 18.0% of the U.S. gross domestic product as of 2024. According to the Council for Affordable Quality Healthcare (CAQH), total U.S. healthcare spending was $4.9 trillion in 2024. National health expenditures are expected to grow 5.8% annually reaching 20.3% of GDP in 2033. According to the CAQH, the U.S. spends $440 billion on healthcare administrative costs per year.

The Waystar platform is purpose-built to address the administrative headwinds faced by healthcare providers, including:

•Antiquated legacy technology systems and data silos. The historically slow pace of digital adoption by healthcare organizations has led to a patchwork of disparate point-solutions. These software tools, most of which are hosted or installed on-premises, lack the interoperability and scalability of a modern cloud-based technology architecture, which enables the safe and efficient dissemination of critical information. This patchwork approach has also led to data silos, inhibiting transparency and data sharing and often resulting in denials or the inability to process claims efficiently.

•Reliance on inefficient, manual processes. Poorly integrated legacy systems have led many healthcare organizations to employ labor-dependent solutions to address the critical demands of their businesses, often resulting in suboptimal financial performance for providers and a substandard experience for patients.

•Increasing labor and administrative costs. According to an American Hospital Association report, labor constituted 56% of hospital expenses in 2024. Hospital labor costs increased by $51.0 billion from 2023 to 2024, reaching a total of $890 billion. Over the last four years, compensation for hospital employees has grown 26.6% faster than the rate of inflation. In addition to high labor costs, according to a Safe report, 63% of revenue cycle leaders say their teams are understaffed.

•Reimbursement complexity and collection challenges. Determining reimbursement to a provider from a payer or a patient depends on a myriad of factors that are both highly complex and constantly evolving. According to the Healthcare Financial Management Association (HFMA), approximately 25% of overall revenue cycle management spend is dedicated to error correction, compliance, and rework. Furthermore, according to a Premier national survey, healthcare providers spend approximately $20 billion annually just to contest denied claims, highlighting a significant unmet need for solutions that reduce denials and increase first-pass acceptance. Providers bear the burden of navigating reimbursement obstacles, and missteps can ultimately result in lost revenue or delayed cash flow. In addition, healthcare providers often struggle to convert patient bills (i.e., patient responsibility) to cash payments as patients are also tasked with navigating ever-changing benefits policies and interacting with outdated technology.

•Accelerating consumer demand for digital tools. Patients are bearing a greater burden of healthcare costs than ever before, with more than 50% of American private industry workers enrolling in high deductible health plans according to 2024 U.S. Bureau of Labor Statistics data. Out-of-pocket costs constituted 11% of total U.S. personal healthcare expenditures in 2024 according to CMS, and the estimated average patient lifetime spending is $1.4 million, based on a 2021 Health Management Academy Research report. Despite these trends, patients lack access to digital tools and accurate information for healthcare payments, such as transparency in insurance coverage and out-of-pocket cost estimates pre-service, as well as flexible payment arrangements to pay for care.

Our Market Opportunity

Over time, administrative workflows (e.g., human resources, information technology, accounting and finance, and customer service) that were traditionally insourced by healthcare providers have undergone a meaningful transformation.

Table of Contents

Seeking more effective solutions to address industry challenges, providers initially outsourced these functions to third-party specialized services vendors. However, with advances in technology infrastructure and cloud-based software, as well as increased interoperability between systems, providers are increasingly utilizing automated software solutions to further enhance efficiency. We believe the healthcare payments workflow is currently undergoing such an evolution, and that Waystar is well- positioned to benefit from providers gravitating towards more modern, software-oriented solutions.

We estimate that our TAM with respect to our current software solution set was $20 billion in 2025. To estimate our market opportunity, we categorized the United States healthcare provider market into tiers based on care setting and practice size. We then applied our average pricing by product, accounting for pricing differences at providers of varying sizes, and multiplied the average product price by the corresponding practice count per care setting to determine our TAM. Based on a third-party study commissioned by us, we believe our TAM has the potential to increase by 5% CAGR to almost $25 billion by 2030, driven by growth within healthcare payments (notably, in prior authorizations, patient payments, and revenue cycle management analytics), increased outsourcing in revenue cycle management, as well as secular technology tailwinds such as greater utilization of AI. We expect to expand our TAM further over time as we develop new solutions and address adjacent workflows. We believe we have consistently grown in excess of the market since 2016 and expect to continue growing our market share in the future by virtue of our differentiated platform and capabilities. We believe the market share of our solutions within the hospital segment and ambulatory practice segment is approximately 4% and 8%, respectively (calculated as a percentage of our revenue as compared to our TAM estimates by setting of care), respectively, demonstrating the ample white space in which we can continue to drive our growth.

The Waystar Platform

Our innovative cloud-based software platform is purpose-built to simplify our clients’ payment-related challenges. We believe our platform significantly outperforms those of our competitors, who lack either modern functionality or the ability to address the full end-to-end payments workflow.

The key components of our platform include:

•Modern, differentiated software. We provide modern, scalable healthcare payments software solutions. Our platform is aligned with best-in-class offerings in other industry verticals that include multi-tenancy, micro-services architecture, and robust data security. Our technology is cloud- native, allowing us to deploy it across any type and size of provider, from single-physician practices to the most sophisticated multi-site health systems. This single-instance, multi-tenant infrastructure is underpinned by an event-driven microservices architecture, all of which we have built in-house.

•A comprehensive solution set. Our software addresses the entire healthcare payments workflow, from pre-service patient onboarding and prior authorization through post-service payment collection. By providing a unified platform rather than disparate solutions for a client user, our solutions can meet the full demands of an entire organization, eliminating the need for point solutions, boosting productivity through a seamless end-user experience, and reducing the risk of data or information loss.

•Seamless integrations. Our solutions are integrated with a broad range of systems provided by over 500 channel partners, including ERP applications, as well as preventative maintenance ("PM") and electronic health record ("EHR") systems. This deep connectivity is an important point of differentiation and makes our solutions faster to implement, easier to use, and harder to replace.

•An expansive network. Our extensive network of clients and counterparties underpins our platform. Over more than two decades, we have built direct connectivity with healthcare payers from large health insurers to small third-party administrators to the benefit of our clients and partners. This network has allowed us to build a large database of information to generate insights and drive continuous improvements.

•Advanced AI capabilities driven by proprietary data asset. Waystar has been deploying AI for more than a decade, and today, approximately 50% of our solutions leverage AI. Our platform benefits from the industry's deepest data supply, processing 7.5 billion healthcare payments transactions annually representing over $2.4 trillion in gross claims. By combining this with clinical data from one in three U.S. hospital discharges, we have created a unique unified clinical and financial dataset that turns general AI into precise, reimbursement-driving recommendations. Our Waystar AltitudeAI capabilities utilizes a multi-modal approach - incorporating machine learning, large language models such as Google Cloud's Gemini, generative AI, and

Table of Contents

agentic AI - to ensure our technology is built to act rather than just analyze. This "closed-loop" architecture allows our models to continuously learn from every transaction, creating a compounding advantage that extends our competitive lead. For example, we leverage AI in our denial prevention and recovery platform, where it helps us predict the success of a claim appeal based on factors such as patient benefits, procedures performed, and specific payer behaviors. This enables providers to prioritize their workflow efforts and drive maximum recovery value. In addition, we use AI to discover missing charges and capture otherwise lost revenue by aligning claim status and escalation efforts with claim-specific expected remittance timeframes. Our agentic AI workflows further reduce administrative burden by analyzing full medical records to automatically pre-populate requests for correction with supporting clinical context, significantly reducing manual chart review and physician query time.

Our platform provides the following benefits to our clients:

•Increased revenue. Our software solutions simplify the payment process, allowing our clients to increase the share of revenue they collect.

•Quicker payments. Our software helps expedite payments by streamlining and automating cumbersome workflows that create excessive delays.

•Greater productivity. Our ability to automate portions of the payment cycle allows our clients to reduce operating costs and focus on their core mission of caring for their patients.

•Financial visibility. We deploy analytics, reporting, and forecasting tools that provide our clients with unprecedented visibility into areas where they can further improve their payment process and collections.

•Rapid time-to-value. Our architecture seamlessly integrates with our clients’ existing systems and technology. This ease of integration enables our clients to quickly realize value from our solutions while avoiding costly and distracting implementation processes associated with other types of software and support services.

Our platform enables us to provide industry-leading technology at scale to over 30,000 clients and processes over 7.5 billion healthcare payment transactions, representing more than $2.4 trillion in annual gross claims. The quality and innovation of our platform are validated by third-party recognition, including multiple Best in KLAS awards based on direct provider feedback, an Inc. Best in Business Award for AI implementation, and numerous MedTech Breakthrough Awards including Best Overall Healthcare Payments Solutions Provider.

Why Waystar Wins

Through decades of experience, we have honed our deep domain expertise, fostered long-standing client relationships, and built our library of rules and algorithms. We believe our modern, cloud-based platform combined with our subject matter expertise is extremely difficult to replicate and provides us with a meaningful competitive advantage. We believe these factors, together with the following additional strengths, position us well for continued success:

•Strong brand with attractive client ROI. The Waystar brand is synonymous with quality, reliability, robust analytics, exceptional customer service, and a deep and interconnected network. This strength is evidenced by our high NPS of 74 and #1 ranking among competitors for the percentage of clients indicating the highest level of satisfaction with our services, based on a third-party survey commissioned by us in 2023. Our brand, as well as the tangible ROI we deliver, drives strong client loyalty, as evidenced by our 112.0% Net Revenue Retention Rate for the year ended December 31, 2025. Many of our clients view us as a trusted vendor and support our success by recommending Waystar to other providers, further driving growth and adoption of our solutions. As a testament to this trust, Forbes named Waystar to its 2025 Most Trusted Companies in America list. Our award-winning brand attracts exceptional talent to help us further our mission.

•Differentiated client experience. We have a relentless focus on operational execution and deliver an outstanding client experience. According to a third-party survey commissioned by us in 2025, Waystar ranks #1 in client satisfaction with implementation time, 95% of clients are satisfied with our integrations with other systems, and 98% of clients say we deliver on trust very well or extremely well. We frequently receive client recognition and industry awards, including being named a top client- rated healthcare payments platform by

Table of Contents

BlackBook across 17 categories. For our larger clients, we deploy a client success team, which serves as both a dedicated resource and trusted strategic partner to help drive value. Our client success team provides day-to-day operational support, has regular update calls and account reviews, quarterly in-person reviews, and ongoing on-site training. From our consistently on-time implementations to our highly responsive client service, we seek to support our clients so they can maximize the benefits of our software.

•Mission-driven innovation culture. We have cultivated a company culture that is focused on helping our clients by developing and delivering industry-leading software solutions. This innovation-focused culture has been foundational in creating a modern technology platform that delivers a comprehensive end-to-end suite of solutions with an intuitive user interface. According to a third-party survey commissioned by us in 2025, Waystar ranks #1 in satisfaction for rate of product innovation and vision and 95% of clients are satisfied with our capabilities in automation.

•Experienced leadership and technology teams with a track record of execution. Our values-driven and award-winning leadership team brings together deep experience in the software and healthcare industries and strong relationships with our clients and key stakeholders. Several of our executives and team leaders have been with our predecessor companies since their founding, in multiple cases for more than 20 years. Our current management team has driven strategic and transformational initiatives across operations, product, engineering, and sales leading to best-in-class products, exceptional client service, and consistently profitable growth. We believe our team has the strategic vision, leadership qualities, technological expertise, and operational capabilities to continue to successfully drive our growth.

We believe our platform strengths and differentiation are most evident in our ability to win clients. We had an average 85% win rate against our competitors for fiscal years 2023 through 2025 in situations where the client ultimately elected to switch vendors or purchase a new solution.

We believe that the strengths of our platform and solutions provide us with a significant competitive advantage. In 2024 following a cybersecurity incident involving one of our competitors, more than 30,000 providers, including a significant number of large health systems and ambulatory providers, began adopting our solutions, and we were able to implement our solutions for many of these new clients in as little as 48 hours. This rapid adoption also enabled us to establish direct connectivity with large, national health plans, that had previously maintained exclusive portal connections with the competitor. We expect to build enduring relationships with these new clients, the vast majority of whom have signed contracts with initial terms of two to three years, with one-year automatic renewals.

Our Growth Strategy

We plan to capitalize on our market opportunity by executing on the following growth strategies:

•Expand our relationships with existing clients. We believe we have a meaningful opportunity to continue driving growth within our current client base. We grow with existing clients in three ways- first, as they expand their businesses, provide more healthcare services, and see more patients; second, through cross-selling as they adopt additional Waystar offerings; and third, through up-selling as they leverage our solutions across additional providers and sites of care. We have a track record of building long-standing relationships with our clients, often growing from an initial solution to multi- solution adoption. Based on the estimated whitespace within our existing clients for the solutions we currently provide, we believe we have the opportunity to approximately double our revenue through cross-sell and up-sell of our solutions to existing clients.

•Grow our client base. We address a large and growing market that has a meaningful need for the solutions we provide. While we serve over one million providers today, there are over 7.5 million providers that we believe can benefit from our solutions. We pursue this opportunity through our high- performing sales team, which is organized by client segment to address the specific needs and sales cycles of that market.

•Deepen and expand our relationships with strategic channel partners. We are highly focused on furthering our strategic channel partnerships. Our channel partners accelerate our growth by providing us access to a larger client base and actively promoting Waystar. We have established strong relationships with the nation’s leading EHR and PM providers, which drives a significant competitive advantage. We will continue to invest in deepening our current relationships and building new ones to drive our growth.

Table of Contents

•Innovate and develop adjacent solutions. We will continue to invest heavily in the Waystar platform to expand our product breadth and depth, increase automation, strengthen system performance, and improve the user experience. Our product roadmap is informed by both continuous client feedback as well as our own assessments of opportunities to further streamline and simplify healthcare payments. Our innovation strategy is centered on accelerating the path to the autonomous revenue cycle, leverage agentic AI to move beyond task-specific automation toward a system that can independently navigate complex payment workflows, leveraging clinical, financial and administrative data. Unlike traditional software that requires constant human intervention, our agentic-led roadmap focuses on creating self-correcting cycles that proactively identify, reason through, and resolve bottlenecks across the payment continuum. By integrating generative and agentic AI with our proprietary datasets, we are building a "closed-loop" platform where every transaction allows the system to learn and improve its autonomous decision-making. Our product and engineering team, comprised of more than 340 full-time team members, delivers daily code updates that continuously refine these capabilities. Because of our modern architecture and purposeful lack of technical debt, we are uniquely positioned to transition providers from manual oversight to truly autonomous environment. This evaluation is designed to deliver compounding ROI for our clients, allowing healthcare organizations to refocus their human capital on patient care while our platform autonomously manages the complexities of the revenue cycle.

•Selectively pursue strategic acquisitions. Since 2018, we have completed and successfully integrated ten acquisitions, one of which closed in the fourth quarter of 2025. These acquisitions complement our organic product roadmap and have helped us enhance our platform, add new solutions, and expand our market reach. For example, we acquired Iodine in 2025, a trusted leader in AI-powered clinical intelligence, enhancing clinical documentation and accuracy, streamlining utilization management and preventing leakage before billing. This strategic move strengthens our AI leadership, automates manual work, and improves financial performance for providers. Our acquisitions are fully integrated with and consolidated into the Waystar platform, enabling a seamless user experience for our clients, and driving innovation on the combined platform. We will continue to evaluate acquisition opportunities that improve our offering and accelerate our growth.

Our Solutions

Our comprehensive solution set streamlines the complex and disparate processes relating to payments received by healthcare providers and addresses related pain points for providers, patients, and payers. Our solutions include:

•Financial clearance. Our platform automates insurance verification processes and validates that patients are eligible for care through the prior authorization process, helping eliminate downstream rejections and denials that lead to revenue delays and leakage. Based on a Company survey, 81% of patients would more actively pursue care if they knew the cost upfront. Our financial clearance solutions provide patients with price transparency tools and cost estimation data points that offer them better clarity around their expected costs.

•Patient financial care. Our platform enables digital interactions between the patient and provider, including delivery of electronic statements and processing of patient payments through our patient portal. We offer an omni-channel payment experience, with multiple ways for patients to pay, as well as flexible payment arrangements. These solutions deliver a better financial experience for patients, as well as faster collection times and higher collection rates for providers.

•Claims and payer payment management. Our platform streamlines the cumbersome reimbursement process that providers follow to submit claims and receive remittance information. Our solutions ensure submission of appropriate documentation and claim submission in accordance with payer contracts and automate workstreams that help our clients avoid denials and rejections, monitor in- process claims, and process payer remittances. In addition, we offer claim scrubbing capabilities to check for errors and verify accuracy to limit billing mistakes. Built upon over two decades of industry experience, we believe that our AI-powered rules engine drives an industry-leading first pass clean claims rate across both commercial and government (Medicare and Medicaid) claims.

•Denials prevention and recovery. Our platform leverages AI to prioritize denied claims based on the likelihood of claims appeal success. We utilize generative AI to autonomously draft tailored appeal letters by integrating specific claim data with a proprietary library of over 1,100 payer-specific appeal templates. This

Table of Contents

approach allows providers to resolve multiple denials with greater precision and consistency, reducing the heavy administrative burden of manual drafting. We also conduct root cause analysis to help providers reduce the chance of denials in future claims.

•Clinical integrity and revenue capture. Our platform integrates AI-powerd automation with clinical insight to transform mid-cycle performance, enabling providers to capture revenue accurately and prevent losses early. By unifying clinical and financial data, we help healthcare organizations protect revenue and reduce downstream rework while reflecting the true quality of care delivered. Our solutions identify coding mistakes, DRG underpayments, and missing charges, and leverage agentic AI to strengthen documentation integrity. This "closed-loop" approach validates that documentation meets clinical, regulatory, and financial standards before claim submission, accelerating reimbursement and increasing cash flow for our clients.

•Analytics and reporting. Our platform collects and collates vast amounts of healthcare data, and we organize and present this data in dashboards that can be customized to meet the needs of individual clients. We provide data visualization and business intelligence analytics to enable providers to manage payment and denial trends across their business. We drive increased workflow efficiency by eliminating manual spreadsheets and enabling performance optimization through real-time evaluation of key performance indicators.

Our Technology

The Waystar platform is built upon a modern, scalable, multi-tenant cloud-based architecture that delivers an exceptional client experience and allows us to process billions of transactions every year. Our solutions are deeply integrated into our clients’ workflows, providing an elegant and intuitive user experience. The architecture, design, deployment, and management of our platform are centered on the following areas:

•Modern, cloud-based architecture. We leverage a modern multi-tenant, event-driven micro-services architecture that enables a high degree of scalability and interoperability across the platform. We utilize resilient and fully-virtualized hosting architecture, with multiple layers of redundancy. Employing these and many other strategies, we have achieved greater than 99.9% uptime for the Waystar platform. Our solutions are designed to meet the needs of the largest hospitals and health systems but can also be scaled to cost-effectively serve the needs of smaller providers. Our modern web user applications utilize best practice software designs, allowing for high-velocity development and continual deployments.

•Ongoing innovation. Waystar has long-fostered an innovation-focused culture, with daily code update deployments and quarterly seasonal release campaigns delivering ongoing software enhancements to clients. Our tenured Product and Engineering teams consist of more than 340 full-time team members, all relentlessly focused on driving improvements in our platform. Our product roadmap balances new feature enrichment with continued backend integration of acquired solutions and methodical technology modernization.

•Enterprise-grade security. Our solutions provide clients with enterprise-grade security, data protection, and control that meet the healthcare industry’s strict security standards. Our highly secure application and infrastructure are validated by PCI, HITRUST, and SSAE-18 SOC 2 Type II audits and certifications.

•Seamless user experience. We have built a unified user experience across our solutions. Users access our platform through a single login experience, providing convenience, saving time, and increasing productivity.

Search functionality, high-level vertical tabs for our solutions, and dropdown menus within each solution type deliver intuitive navigation for our clients. Comprehensive and customizable dashboards illustrate data using a variety of methods, enabling more efficient identification of outliers, trends, and other useful information.

We have built a comprehensive future-ready suite of enterprise-scale core system software, and we will continue to invest in our technology to further improve our platform infrastructure and capabilities. We are able to responsibly manage technical debt, allowing us to focus our investment on continuously innovating and advancing our platform for the benefit of our clients.

Table of Contents

Our Go-to-Market Strategy

We have built a go-to-market engine comprised of sales, marketing, and client success teams, focused on acquiring new clients, expanding use of our platform among existing clients, and strengthening and growing our relationships with channel partners.

We sell our platform through our sales team, which is comprised of over 100 representatives. Our sales teams are dedicated to either ambulatory providers or hospital and health system clients, reflecting the distinct needs, decision-makers, and sales cycles of these client types. Our approach to ambulatory provider clients generally employs a higher-velocity, direct enterprise go-to-market strategy with a shorter sales cycle, while our direct enterprise go-to-market strategy for hospital and health system clients typically involves a longer sales cycle. Our sales organization is further specialized, with certain individuals focused on acquiring new clients and others focused on expanding adoption within existing clients. We leverage data and analytics to monitor sales effectiveness and identify opportunities for improvement.

Our client success organization supports retention and expansion through ongoing engagement and value realization, including dedicated client success managers for clients that have generated almost half of our revenue. Client success teams help drive adoption of our capabilities, support onboarding and change management, and identify opportunities to expand the use of our platform over time.

In addition to our direct sales force, we have a team focused on strengthening and expanding our channel partner and alliance relationships. We have established partnerships with leading electronic health record (“EHR”) and practice management (“PM”) providers for integrations and joint go-to-market efforts. We also work with strategic partners that extend our reach and accelerate adoption of our solutions by referring and promoting our platform to their client bases, while our sales team remains responsible for selling to the end client. In addition, we partner with and sell to outsourced revenue cycle management and billing service providers, who leverage our technology to help providers manage administrative workflows and payments.

Our commercial organization is supported by commercial operations resources that drive planning and execution, including sales process and cadence, pipeline and forecasting discipline, performance analytics, and operational support designed to improve consistency and scalability across our go-to-market efforts.

Our marketing organization supports our growth strategy by strengthening brand awareness and trust, generating demand that drives new customer acquisition, and improving the effectiveness of our go-to-market execution. Marketing defines and communicates our value proposition and differentiated outcomes, advances segmentation and targeting to align our messaging and outreach to distinct customer needs, and gathers market and customer insights that inform product-market fit and go-to-market priorities. Our go-to-market teams are further supported by product and solution subject-matter experts, including individuals with prior experience in roles similar to those of our buyers, who help translate client needs into solution design and value realization.

Our Business Model

Over 99% of our revenue is either recurring subscription or based on highly predictable volumes. Our contracts with clients generally include a subscription fee component as well as a volume-based component, although some contracts include only one of these components. The subscription fee provides us with a fixed, recurring revenue stream while the volume-based component allows us to benefit from our clients’ growth. We generate greater revenue as our clients see more patients and greater utilization of their healthcare services. In addition, based on our contract structures, our proprietary data asset, our AI-powered capabilities, and our deep understanding of the healthcare market, we believe we have visibility into, and the ability to predict both subscription-based and volume-based revenue. For instance, 98% of revenue in 2025 was generated from clients already under contract as of the beginning of the year. Our client contracts are typically two or three years in length with automatic renewals for successive one-year terms that include standard price escalators. Client billing generally occurs monthly.

Our Clients

Our clients represent healthcare providers across all types of care settings, including physician practices, clinics, surgical centers, and laboratories, as well as large hospitals and health systems. Generally, one-third of our revenue comes from hospitals and health systems, while two-thirds comes from ambulatory and alternate sites of care. The over 30,000 clients we currently serve also vary significantly in size and represent over one million distinct providers in total, including

Table of Contents

16 of the top 20 U.S. News Best Hospitals. As a result of our broadly applicable model, our client base is highly diversified, and for the year ended December 31, 2025, our top 10 clients accounted for only 10.8% of our total revenue. The number of clients from whom we generate over $100,000 of revenue has grown from 1,203 in the year ended December 31, 2024 to 1,391 in the year ended December 31, 2025, primarily driven by large, new client wins and successful cross-selling and up-selling efforts.

Our People, Values, and Culture

As of December 31, 2025, we employed over 1,700 full-time team members, all of whom are located in the United States. As of December 31, 2025, none of our team members were covered by a collective bargaining agreement or represented by a labor organization, and we have not experienced a labor-related work stoppage. We believe we have good relationships with our team members, as evidenced by our 2025 Great Place to Work Trust Index Survey results, in which 85% of participating team members indicated that they would recommend working at Waystar to friends and family.

Our Values and Culture

Our values, which are foundational to the Waystar culture, include the following:

•Honesty—This is where we start. With integrity as our core, we are transparent, do the right thing, and build trust by staying true to our commitments.

•Kindness—We are friendly and respectful of everyone. We recognize the power of inclusion and belonging.

•Passion—We are excited about what we do in our roles, as a company, and for our clients.

•Curiosity—We know that the best decisions are not always obvious or easy. We invest the time to understand and develop solutions.

•Fanatical Focus—We have obsessive zeal about people, promises, and innovative solutions.

•Best Work, Always—We bring our A-game. We work with facts, always communicating clearly and respectfully.

•Making It Happen—As individuals and as a team, we are agile with a bias toward speed, action, and automation. We are accountable for our results.

•Joyful, Optimistic, & Fun—We love and support our clients, team, and communities. We strive to create positive energy in everything we do.

We have received numerous workplace awards recognitions, including being named a Best Company to Work for by U.S. News & World Report, achieving a Great Place to Work recertification and being recognized as a Fast Company Best Workplace for Innovators. We are proud of our strong company culture and investment in long-term career growth for our people, which is evidenced by the long tenure of many of our team members with our organization. We believe it is important to put our team members first, and we provide all of our team members competitive health benefits, 401(k) investment options, employee stock purchase plan, and paid family leave. We also provide our team members with paid leave for volunteer time, as we believe it is important for Waystar and its team members to give back to the community. We regularly celebrate individuals and team members who exemplify Waystar’s values. We believe this helps us reinforce our values and creates a performance-focused culture that enables us to continue to attract, retain, and develop talent, which is critical to our long-term success.

Table of Contents

Training, Development, Leadership, and Engagement

To attract, develop, and retain a high-performing workforce, we invest in a comprehensive learning and development ecosystem designed to build leadership capability, strengthen core skills, and ensure organizational readiness for the future of work. Our training and development offerings span the full employee lifecycle and include Front Line Leadership training for people leaders, Emerging Leader programs for high-potential team members, and an annual Leadership Summit for senior leaders focused on enterprise leadership and strategic execution.

All team members participate in required annual training that reinforces our values, certifies proficiency in key business processes, and promotes a workplace culture grounded in respect, safety, and engagement. In addition, we continuously evolve our learning curriculum to align with business priorities and emerging capabilities critical to long-term success.

In 2025, we introduced a company-wide AI skills development initiative designed to responsibly and effectively equip team members with the knowledge and practical skills needed to leverage AI tools in their roles. This program focuses on responsible use, data security, and ethical considerations, while also building applied capability to enhance productivity, operational efficiency, decision-making, and innovation across the organization. Our approach to AI enablement supports organizational readiness by ensuring consistent baseline knowledge across the workforce, while enabling leaders to apply AI strategically within their teams and functions.

Employee engagement remains a critical driver of our performance and culture. We assess engagement and satisfaction annually through a third-party employee engagement survey. This process provides insight into team members' experiences related to training and development opportunities, benefits, well-being, and our ethical culture. We also gather feedback on people leader effectiveness, including their ability to foster inclusive, and high-performing teams. Survey insights are used to inform ongoing improvements to our leadership development, learning strategies, and employee experience initiatives.

Inclusion and Belonging

At Waystar, we aspire to create an environment where every team member, with their unique background, feels a sense of belonging. We believe that we rise by lifting others up and provide a safe, inclusive work environment where every team member can be their whole, authentic self-no matter their background. We also have a “Waystar Day” every quarter that focuses on different initiatives such as best work always, day of curiosity, practicing kindness, and volunteering. We provide education assistance opportunities in furtherance of self-advancement and development. In addition, we have five Affinity Groups (BIPOC, Families, LGBTQIA+, Military, and Women) which seek to foster a sense of shared community and empowerment for employees. These groups are open to all team members, including those who wish to participate as allies, and provide opportunities to network, discuss and exchange ideas, and enhance their professional development.

Research and Development

We believe that our research and development function and our AI-powered product portfolio provides us with a competitive advantage that enables us to innovate faster and more efficiently, while simultaneously delivering better solutions for our clients. Our research and development team is responsible for the design, development, testing, and enhancement of our products and software. As of December 31, 2025, we had more than 340 team members dedicated to product and research and development. For the years ended December 31, 2025, 2024, and 2023, our research and development expense was $54.6 million, $48.8 million, and $35.3 million, respectively.

Competition

We operate in a highly fragmented and competitive market that is characterized by rapidly evolving technology standards, evolving regulatory requirements, and frequent changes in client needs and introduction of new products and solutions. However, we believe we have a competitive advantage based on the breadth, depth, and quality of our solutions, our innovative AI-powered software platform, our deep domain expertise developed over two decades of industry experience, the differentiated client service we provide, and the ROI we deliver.

Table of Contents

Our current principal competitors include, but are not limited to:

•Revenue cycle technology vendors: vendors varying in scale that specialize in revenue cycle management. These vendors frequently utilize legacy technology, have a limited breadth of solutions or typically focus on providers in specific settings of care, such as hospitals or specific physician specialties.

•Point solution vendors: established and startup vendors that specialize or focus on point solutions for a specific healthcare payment workflow without addressing the entire healthcare payments workflow from pre-encounter to post-encounter.

•EHR and PM systems providers: certain electronic health record (EHR) and practice management (PM) systems, including certain of our strategic partners and those with which we integrate, offer, or may begin to offer, solutions such as claim management and patient management solutions, payment processing tools, and direct patient communication solutions.

•Internally developed software or manual processes: large healthcare providers may have sufficient IT resources to develop and maintain proprietary internal systems, or to consider developing new custom systems. Some may partner with established technology vendors to build custom solutions. Many healthcare providers may also rely on manual tasks and labor, without the use of technology enabled systems.

We believe the principal competitive factors in our market include the following:

•leading-edge technology and innovation, particularly the ability to leverage advanced AI and generative models driven by proprietary datasets to automate complex workflows and create an autonomous revenue cycle;

•breadth, depth, and quality of products and solutions, including the integration of clinical, financial and administrative data to provide a holistic view of the patient journey;

•ability to deliver financial and operational performance improvement through the use of AI-powered automation;

•quality and reliability of solutions, including the accuracy of AI-powered predictions and recommendations;

•ease of use and convenience, enhanced by agentic AI capabilities that automate manual tasks;

•brand recognition and reputation for technological leadership;

•price and total cost of ownership; and

•the ability to integrate our platform solutions with various EHR and PM systems and other healthcare technology.

We believe that we compete favorably with respect to each of these factors. However, we believe that our ability to remain competitive will depend on the continued success of our disciplined investments in research and development and sales and marketing programs. See Part I, Item 1A, “Risk Factors—Risks Related to our Business and our Industry—We operate in a highly competitive industry.”

Intellectual Property

We rely on a combination of trademark, patent, trade secret, copyright, and other intellectual property laws, as well as contractual provisions, including in employment, confidentiality, and inventions assignment agreements to protect our intellectual property, intangible assets, and associated proprietary rights. Our intellectual property, particularly our know-how is material to the conduct of our business. The success of our business depends in part on our ability to use our trademarks, service marks, and other intellectual property in the operation of our business and platform. In the United States, we have 34 trademark registrations, 35 issued patents, and 24 copyright registrations. In addition, we have registered the www.waystar.com domain name, which we use in connection with our platform.

Table of Contents

We have procedures in place to monitor for potential infringement of our intellectual property, and it is our policy to take appropriate action to enforce our intellectual property, taking into account the strength of our claim, likelihood of success, cost, and overall business priorities. See Part I, Item 1A, “Risk Factors—Risks Related to Information Technology Systems, Cybersecurity, Data Privacy, and Intellectual Property.”

Security and Compliance

Security and compliance are our top priorities. We maintain a comprehensive security program designed to safeguard the confidentiality, integrity, and availability of our clients’ data. In particular, we deploy physical, administrative, and technical controls to protect the security and privacy of patient information.

We operate a cloud-based platform that is designed to offer reliability, performance, security, and privacy for our clients. We have infrastructure in place with co-located data centers, and within Microsoft Azure, Amazon Web Services, and Google Cloud Platform environments, to securely manage and maintain our clients’ patient information.

We use external security auditors and industry-leading vendors to access the controls and procedures we have in place to protect our clients’ sensitive information. We have industry certifications, including HITRUST R2, PCI-DSS Level 1 Service Provider, SSAE 18 SOC 2, and validated PCI Point-to-Point Encryption. As a PCI-DSS Level 1 Service Provider, we are committed to upholding industry security standards to cardholder data. We received our HITRUST CSF certification in 2021.

We are committed to protecting the information and privacy of our clients and their patients. We are both a “covered entity” when we provide our clearinghouse services and a “business associate” as defined under HIPAA or subcontractor to a business associate to healthcare providers or revenue cycle management companies. We sign business associate agreements (“BAA”) that govern our uses and disclosures of protected health information (“PHI”) to our own business associates and on behalf of our covered entity clients that engage us to provide our software solutions. Such BAAs must, among other things, provide adequate written assurances as to how we will use and disclose PHI; that we will implement reasonable administrative, physical, and technical safeguards to protect such PHI from misuse; that we will enter into similar agreements with our agents and subcontractors that have access to the information; that we will report security incidents and other inappropriate uses or disclosures of PHI; and that we will assist the client with certain of its duties under HIPAA.

Regulation

Our business is subject to extensive, complex, and rapidly changing federal and state laws, regulations, and industry standards. These laws and regulations can vary significantly from jurisdiction to jurisdiction, and interpretation and enforcement of existing laws and regulations by governmental and regulatory authorities may change periodically. We cannot be assured that a review of our business by courts or governmental or regulatory authorities will not result in determinations that could adversely affect our operations or that the healthcare regulatory environment will not change in a way that restricts our operations. Federal and state legislatures also may enact various legislative proposals that could materially impact certain aspects of our business.

Federal and State Health Information Privacy and Security Laws

There are numerous U.S. federal and state laws and regulations related to the privacy and security of personal information, including individually identifiable health information. In particular, HIPAA established privacy and security standards that limit the use and disclosure of PHI, and required the implementation of administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and availability of individually identifiable health information in both paper and electronic form. HIPAA also required the U.S. Department of Health and Human Services (“HHS”) to adopt national standards establishing electronic transaction standards that all healthcare providers must use when submitting or receiving certain healthcare transactions electronically. For example, claims for reimbursement that are transmitted electronically to payors must comply with specific formatting standards, and these standards apply whether the payor is a government or a private entity. We are contractually required to structure and provide our solutions in a way that supports our clients’ HIPAA compliance obligations to use prescribed electronic formats.

HIPAA requires us to enter into written agreements with covered entities, business associates, and subcontractors with respect to uses and disclosures of PHI. Covered entities, such as us and our clients, may be subject to penalties for, among other activities, failing to enter into a BAA where required by law or as a result of a business associate violating

Table of Contents

HIPAA, if the business associate is found to be an agent of the covered entity and acting within the scope of the agency. Business associates are also directly subject to liability under HIPAA. In instances where we act as a business associate to a covered entity, there is the potential for additional liability beyond our status as a covered entity. Violations of HIPAA may result in significant civil and criminal penalties, as well as monitoring or resolution agreements. A single breach incident can result in violations of multiple standards.

We must also comply with HIPAA’s breach notification rule and equivalent state breach notification laws. Under the breach notification rule, covered entities must notify affected individuals without unreasonable delay in the case of a breach of unsecured PHI, which compromises the privacy or security of the PHI, but no later than 60 days after discovery of the breach by a covered entity or its agents. Many state laws and regulations require affected individuals to be notified in the event of a data breach involving PHI within a shorter timeframe. Under HIPAA, all impermissible uses or disclosures of unsecured PHI are presumed to be breaches unless an exception to the definition of breach applies or the covered entity or business associate establishes that there is a low probability the PHI has been compromised based on a risk assessment of at least four regulatory factors. In addition, notification must be provided to HHS and the local media in cases where a breach affects 500 or more individuals. Breaches affecting fewer than 500 individuals must be reported to HHS on an annual basis. There can be no assurance that we will not be the subject of an investigation (arising out of a reportable breach incident, audit, or otherwise) alleging non-compliance with HIPAA in our maintenance of PHI. Violations of HIPAA by providers like us, including, but not limited to, failing to implement appropriate administrative, physical, and technical safeguards, have resulted in enforcement actions and in some cases triggered settlement payments or civil monetary penalties.

State attorneys general also have the right to prosecute HIPAA violations committed against residents of their states. While HIPAA does not create a private right of action that would allow individuals to sue in civil court for a HIPAA violation, its standards have been used as the basis for the duty of care in state civil suits, such as those for negligence or recklessness in misusing personal information. In addition, the HITECH Act mandated that HHS conduct periodic compliance audits of HIPAA covered entities and their business associates for compliance. It also tasks HHS with establishing a methodology whereby harmed individuals who were the victims of breaches of unsecured PHI may receive a percentage of the civil monetary penalty fine paid by the violator.

HHS has also issued new final and proposed regulations and guidance on cybersecurity of electronic PHI (“ePHI”) uses and disclosures of substance use information, reproductive health information, and online tracking technologies that access individually identifiable health information. For example, in April 2024, a new HHS final rule amending substance use confidentiality regulations (42 C.F.R. Part 2 or Part 2) took effect. The final rule included changes to better facilitate care coordination, updates to the fine structure for Part 2 violations to align with the civil and criminal enforcement authorities that apply to HIPAA violations, and increases in penalties for Part 2 violations to a $50,000 maximum penalty for failure to comply with the Part 2 requirements and a $250,000 maximum penalty for the wrongful disclosure of individually identifiable health information.

In December 2024, HHS Office for Civil Rights (“OCR”) issued a notice of proposed rulemaking to better protect the confidentiality, integrity, and availability of ePHI. The proposed rule would, among other requirements, remove the distinction between “required” and “addressable” implementation specifications and make all implementation specifications required with specific, limited exceptions; require written documentation of all HIPAA Security Rule policies, procedures, plans, and analyses; require regulated entities to conduct compliance audits at least once every 12 months to ensure their compliance with the HIPAA Security Rule requirements; require encryption of ePHI at rest and in transit; require the use of multi-factor authentication, with limited exceptions; and require network segmentation and separate technical controls.

In April 2024, HHS OCR issued a final rule that amended HIPAA privacy regulations to prohibit the disclosure of PHI related to lawful reproductive health care in certain circumstances. The final rule prohibits the use or disclosure of PHI when PHI is sought for certain investigations or to impose liability on individuals, health care providers, or others who seek, obtain, provide, or facilitate reproductive health care that is lawful under the circumstances in which such health care is provided. It also requires a health care provider, health plan, clearinghouse, or their business associates, to obtain a signed attestation that certain requests for PHI potentially related to reproductive health care are not made for these prohibited purposes. The final rule took effect on June 25, 2024.

Additionally, in a 2023 guidance document, HHS OCR took the position that entities regulated under HIPAA are not permitted to use tracking technologies in a manner that would result in an impermissible disclosure of PHI. Such tracking technologies have been used to collect and analyze information about user behavior and enhance the user

Table of Contents

experience. In March 2024, HHS OCR updated its 2023 guidance on the use of online tracking technologies on webpages and applications by HIPAA covered entities and business associates to address the disclosure of individually identifiable health information through unauthenticated, public-facing webpages. There have been several class action lawsuits asserting that HIPAA covered entities and business associates improperly used or disclosed PHI through tracking technologies.

Other Data Privacy Laws, Regulations, and Industry Standards

In addition, because our business and platform involve the Processing of personal information and other confidential and regulated information, we are also subject to numerous additional laws, regulations, and industry standards. For example, the California Consumer Privacy Act of 2018 (“CCPA”), which was subsequently amended by the California Privacy Rights and Enforcement Act of 2020 (“CPRA”), originally took effect in 2020, and provides California residents expanded privacy rights and protections, and provides for civil penalties for certain violations. Many additional jurisdictions around the world, including many additional U.S. states, have adopted or are proposing to adopt laws and regulations relating to privacy, data protection, and data security, and we may become subject to additional requirements and obligations as we expand the scope of our business and operations. Further, we are also subject to industry standards such as PCI-DSS as a result of the credit card payments initiated by patients and provider staff members. For a discussion of the risks and uncertainties affecting our business related to compliance with data privacy laws and regulations, please see Part I, Item 1A, “Risk Factors—Risks Related to Information Technology Systems, Cybersecurity, Data Privacy, and Intellectual Property.”

Healthcare Fraud and Abuse Provisions

A number of federal and state laws, generally referred to as fraud and abuse laws, apply to healthcare providers, physicians and others that make, offer, seek or receive referrals or payments for products or services that may be paid for through any federal or state healthcare program and in some instances any private program. Given the breadth of these laws and regulations, they may affect our business, either directly or because they apply to our clients.

The federal Anti-Kickback Statute (the “AKS”) is broadly worded and prohibits, among other things, knowingly and willfully offering, paying, soliciting, or receiving remuneration, directly or indirectly, in cash or in kind, in return for or to induce (1) the referral of an individual covered by federal healthcare programs, such as Medicare and Medicaid, to a person for the furnishing or arranging for the furnishing of any item or service for which payment may be made in whole or in part under a federal healthcare program, or (2) the purchasing, leasing, or ordering, or arranging for or recommending the purchasing, leasing, or ordering of any good, facility, service, or item for which payment may be made in whole or in part under a federal healthcare program. Court decisions have held that the AKS can be violated even if only “one purpose” of remuneration is to induce or reward referrals or other business generated between the parties. Further, a person or entity does not need to have actual knowledge of this statute or specific intent to violate it in order to have committed a violation. Violations of the AKS include imprisonment for up to ten years, exclusion from participation in federal healthcare programs, including Medicare and Medicaid, potential liability under the federal civil False Claims Act, 31 U.S.C. § 3729 et seq. (the “FCA”) (as discussed below), and significant civil and criminal fines and monetary penalties, plus a civil assessment of up to three times the total payments between the parties to the arrangement. Larger fines can be imposed upon corporations under the provisions of the U.S. Sentencing Guidelines and the Alternate Fines Statute. Individuals and entities convicted of violating the AKS are subject to mandatory exclusion from participation in Medicare, Medicaid, and other federal healthcare programs for a minimum of five years in the case of criminal conviction.

In addition to a few statutory exceptions, the HHS, Office of Inspector General has promulgated safe harbor regulations that outline categories of activities that are deemed not to be in violation of the AKS, provided all applicable criteria are met. The failure of a financial relationship to meet all of the applicable safe harbor criteria does not necessarily mean that particular arrangement violates the AKS, but instead will be reviewed on a case-by-case basis in light of the parties’ intent and the arrangement’s potential for abuse. Arrangements that do not satisfy a safe harbor may be subject to greater scrutiny by enforcement agencies.

Under HIPAA, there are additional provisions regarding healthcare fraud and false statements relating to healthcare matters, which if not complied with, could have an impact on our business. The healthcare fraud provision prohibits knowingly and willfully executing, or attempting to execute, a scheme to defraud any healthcare benefit program, including private payors. Similar to the AKS, a person or entity no longer needs to have actual knowledge of the healthcare fraud provision or specific intent to violate it in order to have committed a violation. The false statements provision prohibits knowingly and willfully falsifying, concealing, or covering up a material fact or making any materially false,

Table of Contents

fictitious, or fraudulent statement in connection with the delivery of or payment for healthcare benefits, items, or services. Violations of these provisions are felonies and may result in fines or imprisonment, or, in the case of the healthcare fraud provision, exclusion from government programs.

Additionally, the Civil Monetary Penalties Law, 42 U.S.C. § 1320a-7a, authorizes the imposition of civil monetary penalties, assessments, and exclusion against an individual or entity based on a variety of prohibited conduct, including, but not limited to:

•presenting, or causing to be presented, claims, reports, or records relating to payment by Medicare, Medicaid or other government payors that the individual or entity knows or should know are for an item or service that was not provided as claimed, is false or fraudulent, or was presented for a physician’s service by a person who knows or should know that the individual providing the service is not a licensed physician, obtained licensure through misrepresentation or represented certification in a medical specialty without in fact possessing such certification;

•offering remuneration to a federal healthcare program beneficiary that the individual or entity knows or should know is likely to influence the beneficiary to order or receive healthcare items or services from a particular provider;

•arranging contracts with or making payments to an entity or individual excluded from participation in the federal healthcare programs or included on CMS’ preclusion list;

•violating the AKS;

•making, using, or causing to be made or used a false record or statement material to a false or fraudulent claim for payment for items and services furnished under a federal healthcare program;

•making, using, or causing to be made any false statement, omission, or misrepresentation of a material fact in any application, bid, or contract to participate or enroll as a provider of services or a supplier under a federal healthcare program; and

•failing to report and return an overpayment owed to the federal government.

Violations of applicable fraud and abuse laws could result in substantial civil monetary penalties that may be imposed under the federal Civil Monetary Penalties Law and may vary depending on the underlying violation. In addition, an assessment of not more than three times the total amount claimed for each item or service may also apply and a violator may be subject to exclusion from federal and state healthcare programs. In addition, should an individual providing services under our client contracts become excluded, we may be in violation of our agreements with clients and required to refund amounts attributable to services performed or sufficiently linked to an excluded individual.

False and Fraudulent Claims Laws

There are numerous federal and state laws that forbid (i) submitting a false claim, (ii) causing the submission of a false claim, (iii) retaining a known overpayment, or (iv) engaging in similar types of conduct. The FCA, among other things, prohibits an individual or entity from knowingly presenting or causing to be presented a false or fraudulent claim for payment to the government, including but not limited to the Medicare and Medicaid programs and related managed care programs. Many states have their own false claims laws prohibiting similar conduct to the extent the claim seeks payment from state funds, including Medicaid, and states are becoming increasingly active in using such laws to police false bills, false requests for payment, and other activities. The standard for “knowledge” under the FCA includes “reckless disregard” or “deliberate ignorance” of the truth or falsity of the information. There are a number of other potential bases for liability under the FCA, including knowingly and improperly avoiding an obligation to repay money to the government (often called the “reverse false claims” provision). The government has used the FCA to bring civil claims for Medicare and other government program fraud based on allegations including but not limited to those involving coding issues (including up-coding), the submission of false cost or other reports, and billing for services at a higher payment rate than appropriate. Violations of other laws, such as the AKS and the Stark Law, can serve as a basis for liability under the FCA.

The Patient Protection and Affordable Care Act, as amended, provides that claims for payment that are tainted by a violation of the AKS (which could include, for example, illegal incentives, or remuneration) are false for purposes of the

Table of Contents

FCA. In addition, amendments to the FCA and Social Security Act impose severe penalties for the knowing and improper retention of overpayments from government payors. The FCA may be enforced by the federal government directly or by a private qui tam plaintiff (a “relator”) on the government’s behalf. In the latter circumstance, the government is required to investigate the allegations brought by the relator, and then must decide whether or not to intervene. Even if the government declines to intervene, the relator may continue to proceed with the lawsuit on the government’s behalf. When a relator brings a qui tam action under the FCA, the defendant often will not be made aware of the lawsuit until the government commences its own investigation or makes a determination whether or not it will intervene.

If a defendant is found liable under the FCA, the defendant is subject to penalties for each separate false claim, plus up to three times the amount of damages caused by each false claim, which can be as much as the amounts received directly or indirectly from the government for each such false claim. These penalties are adjusted annually. A successful qui tam relator is entitled to receive a share of any settlement of judgment. In addition to civil enforcement under the FCA, the federal government can use several criminal statutes to prosecute persons who are alleged to have submitted false or fraudulent claims for payment to the federal government. It is difficult to predict how future enforcement initiatives may impact our business.

Stark Law and Similar State Laws

The Ethics in Patient Referrals Act, known as the Stark Law, prohibits certain types of referral arrangements between physicians and healthcare entities and thus potentially applies to our clients. The law prohibits a physician who has (or whose immediate family member has) a financial relationship with a provider from making referrals to that entity for “designated health services” if payment for the services may be made under Medicare or Medicaid. If such a financial relationship exists, referrals are prohibited unless a statutory or regulatory exception is available. Further, an entity that furnishes designated health services pursuant to a prohibited referral may not present or cause to be presented a claim or bill for such services to the Medicare program or to any other individual or entity. Violations of the Stark Law can result in civil monetary penalties and exclusion from federal healthcare programs and form the basis for liability under the FCA. Laws in many states similarly forbid billing based on referrals between individuals and entities that have various financial, ownership, or other business relationships. Any such violations by, and penalties and exclusions imposed upon, our clients could adversely affect their financial condition and, in turn, could adversely affect our own financial condition.

State Fraud and Abuse Laws

Many states, including certain states in which we conduct our business, have adopted fraud and abuse laws similar to the federal laws described above. These laws are enforced by state courts and regulatory authorities, each with broad discretion, and the scope of these laws and the interpretations of them vary by jurisdiction. Some state fraud and abuse laws apply to items and services reimbursed by any third-party payor, including commercial insurers. For example, several states have anti-kickback and self-referral prohibitions, which may apply regardless of whether the payor for such claims is Medicare or Medicaid and which may affect our ability to enter into financial relationships with certain entities or individuals. A determination of liability under state fraud and abuse laws could result in fines, penalties, and restrictions on our ability to operate in these jurisdictions, administrative sanctions, exclusions from governmental healthcare programs, refund requirements, and disciplinary action by the applicable governmental authority, and could have a material adverse effect on our business, financial condition, results of operations, cash flows, and reputation.

Corporate Practice of Medicine; Fee Splitting

We enter into contracts with healthcare providers pursuant to which we provide them with software solutions, and may be subject to regulatory oversight, including corporate practice of medicine and fee- splitting prohibitions. Some states have enacted laws and regulations prohibiting business corporations from practicing medicine and limiting the extent to which physicians and certain other healthcare professionals may be employed by non-physicians or business corporations. These laws are intended to prevent interference in the medical decision-making process by anyone who is not a licensed physician. In addition, various state laws also generally prohibit the sharing or splitting professional services income or fees with lay entities or persons. Activities other than those directly related to the delivery of healthcare may be considered an element of the practice of medicine in many states. The scope and enforcement of such corporate practice of medicine and fee-splitting laws varies from state to state. Violations of these laws could require us to restructure our operations and arrangements and may result in penalties or other adverse action.

Some of these requirements may apply to us even if we do not have a physical presence in the state, based solely on our agreements with healthcare providers licensed in the state. Governmental or regulatory authorities or other parties

Table of Contents

may assert that we are engaged in the corporate practice of medicine or that our contractual arrangements with healthcare providers constitute unlawful fee splitting. In this event, failure to comply could lead to adverse judicial or administrative action against us and/or our healthcare provider clients, civil or criminal penalties, receipt of cease and desist orders from state regulators, the need to make changes to our contracts, and other materially adverse consequences.

Government Regulation of Reimbursement

Our clients are subject to regulation by a number of governmental agencies, including those that administer the Medicare and Medicaid programs. Accordingly, our clients are sensitive to legislative and regulatory changes in, and limitations on, the government healthcare programs and changes in reimbursement policies, processes, and payment rates. Our clients may also be impacted by recent or future federal government cost-cutting and efficiency measures and any actual or potential reduction in the federal workforce that administers federal healthcare programs. During recent years, there have been numerous federal legislative and administrative actions that have affected government programs, including adjustments that have reduced or increased payments to physicians and other healthcare providers. It is possible that the federal or state governments will implement additional reductions, increases or changes in reimbursement or that there will be substantial changes to federal healthcare programs or other government programs or spending that adversely affect our clients, or our cost of providing our solutions. Any such changes could adversely affect our own financial condition by reducing the reimbursement rates of our clients or otherwise materially impacting our clients.

Consumer Protection Laws

We may also be subject to both federal and state regulatory agencies who have the authority to investigate consumer complaints relating to a variety of consumer protection laws, including but not limited to the Fair Debt Collections Practices Act (the “FDCPA”), the Telephone Consumer Protection Act (the “TCPA”), the Controlling the Assault of Non- Solicited Pornography and Marketing Act of 2003 (the “CAN-SPAM Act”), and any state equivalent(s) of the foregoing. Our business practices involve assisting clients in collecting non-defaulted amounts owed by patients for current and prior services activities, which may subject us to the FDCPA. The FDCPA restricts the methods we may use to contact and seek payment from patients regarding past due accounts. Many states impose additional requirements on debt collection practices, and some of those requirements may be more stringent than the federal requirements. Moreover, regulations governing debt collection are subject to changing interpretations that may be inconsistent among different jurisdictions. Such laws and regulations, if deemed to apply to us, are continually evolving and any enforcement actions under such laws could result in fines, penalties, litigation, and increased expenses associated with compliance.

Indemnification and Insurance

Our business exposes us to potential liability including, but not limited to, potential liability for breach of contract or negligence claims by our clients, non-compliance with applicable laws and regulations, and employment-related claims. In certain circumstances, we may also be liable for the acts or omissions of others, such as our vendors or suppliers. On occasion, we enter into standard indemnification arrangements in the ordinary course of business. Pursuant to these arrangements, we indemnify, hold harmless, and agree to reimburse the indemnified parties for losses suffered or incurred by the indemnified party, in connection with any trade secret, copyright, patent, or other intellectual property infringement claim by any third party with respect to its technology. The terms of these indemnification agreements are generally perpetual. Maximum potential future payments we could be required to make under these agreements is not determinable because it involves claims that may be made against us in the future but have not yet been made. We have not incurred costs to defend lawsuits or settle claims related to these indemnification agreements.

We attempt to manage our potential liability to third parties through contractual protection (such as indemnification and limitation of liability provisions) in our contracts with clients and others, and through insurance. The contractual indemnification provisions vary in scope and may not protect us against all potential liabilities, such as liability arising out of our gross negligence or willful misconduct. In addition, in the event that we seek to enforce such an indemnification provision, the indemnifying party may not have sufficient resources to fully satisfy its indemnification obligations or may otherwise not comply with its contractual obligations.

We may require our clients and other counterparties to maintain adequate insurance, and we currently maintain errors, omissions, and professional liability insurance coverage with limits we believe to be appropriate. The coverage provided by such insurance may not be adequate for all claims made and such claims may be contested by applicable insurance carriers.

Table of Contents

Corporate and Available Information

We were originally incorporated in Delaware on August 13, 2019 and subsequently changed our name to Waystar Holding Corp. on August 11, 2023. Our principal basecamps are located at 1550 Digital Drive, #300, Lehi, Utah 84043 and 9901 Linn Station Road Suite 550, Louisville, Kentucky 40223. Our telephone number is (844) 492-9782. We maintain a website at waystar.com. We completed our initial public offering (“IPO”) in June 2024, and our common stock is listed on the Nasdaq Global Select Market (“Nasdaq”) under the symbol “WAY”.

Waystar’s Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and all amendments to those reports filed with or furnished to the SEC pursuant to Section 13(a) or 15(d) of the Exchange Act, are publicly available free of charge on the Investor Relations section of our website at investors.waystar.com or at www.sec.gov as soon as reasonably practicable after these materials are filed with or furnished to the SEC. We also make available through the Investor Relations section of our website other reports filed with or furnished to the SEC under the Exchange Act, including our proxy statements and reports filed by officers and directors under Section 16(a) of the Exchange Act, as well as our Code of Conduct, Corporate Governance Guidelines and Board committee charters.

Investors and others should note that we routinely announce financial and other material information using our Investor Relations website, SEC filings, press releases, public conference calls and webcasts. We use these channels of distribution to communicate with our investors and members of the public about our Company, our services and other items of interest. Information contained on our website is not part of this report or our other filings with the SEC. The information on our website (or any webpages referenced in this Annual Report on Form 10-K) is not part of this or any other report Waystar files with, or furnishes to, the SEC.

Table of Contents

Item 1A. Risk Factors

You should carefully consider the following risk factors as well as the other information set forth in this Annual Report on Form 10-K (this “Annual Report”), including “Management’s Discussion and Analysis of Financial Condition and Results of Operations” and our consolidated financial statements and related notes thereto. If any of the following risks actually occurs, our business, results of operations, prospects, and financial condition may be materially adversely affected. In such case, the trading price of our common stock could decline and you may lose all or part of your investment. The risks and uncertainties described below are those that we have identified as material but are not the only risks and uncertainties we face. Our business is also subject to general risks and uncertainties that affect many other companies, including but not limited to overall economic and industry conditions and additional risks not currently known to us or that we presently deem immaterial may arise or become material and may negatively impact our business, reputation, financial condition, results of operations, or the trading price of our common stock. Some statements in this Annual Report, including statements in the following risk factors, constitute forward-looking statements. See “Cautionary Statement Concerning Forward-Looking Statements.”

Risks Related to our Business and our Industry

We operate in a highly competitive industry.

We operate in a highly fragmented and competitive market that is characterized by rapidly evolving technology standards, evolving regulatory requirements, and frequent changes in client needs and introduction of new products and solutions. Our competitors range from smaller niche companies to large, well-financed, and technologically-sophisticated entities, including EHR and PM, with which we integrate. The increasing standardization of certain healthcare IT products and solutions has made it easier for companies to enter our industry with, or expand their product offerings to include, competitive products and solutions. Many software, hardware, information systems, and business process outsourcing companies, both with and without healthcare companies as their partners, offer or have announced their intention to offer products or solutions that are competitive with products and solutions that we offer. In particular, well- funded large technology companies are increasingly entering the revenue cycle technology market. In addition, EHR and PM providers (including those with which we integrate) could expand their product offerings to include solutions that compete directly with the solutions we provide. Some of these EHR and PM systems already offer, or may begin to offer, solutions that compete with our platform, including claim management and patient management solutions, payment processing tools, and direct patient communication solutions. Further, we expect that competition will continue to increase as a result of consolidation in both the technology and healthcare industries.

We compete on the basis of several factors, including breadth, depth, and quality of products and solutions, ability to deliver financial and operational performance improvement through the use of products and solutions, quality and reliability of solutions, ease of use and convenience, brand recognition, price, and the ability to integrate our platform solutions with various EHR and PM systems and other new and existing technology, including AI. Some of our competitors have greater name recognition, longer operating histories, lower cost products and solutions, and significantly greater resources than we do. As a result, our competitors may be able to respond more quickly and effectively than we can to new or changing opportunities, technologies, standards, or client requirements. In addition, current and potential competitors have established, and may in the future establish, strategic relationships with vendors of complementary products, solutions, technologies, or services to increase the availability of their products to the marketplace. Our competitors may have greater market share, larger client bases, more widely adopted proprietary technologies, greater marketing expertise, greater financial resources, and larger sales forces than we have, which could put us at a competitive disadvantage.

Additionally, the pace of change in the revenue cycle technology market is rapid and there are frequent new solution introductions, solution enhancements, and evolving industry standards and requirements. We cannot guarantee that we will be able to upgrade our existing products and solutions, or introduce new products and solutions at the same rate as our competitors, or at all, nor can we guarantee that upgrades or new products and solutions will achieve market acceptance over or among competitive offerings, or at all.

We also may be subject to pricing pressures as a result of competition within the industry, among other factors. If we reduce our pricing in response to competitive pressure, our margins and results of operations will be adversely affected. Conversely, if we do not reduce our pricing, we could lose clients and be unable to attract new clients to our platform, which would adversely affect our business and our results of operations.

Table of Contents

These competitive pressures could have a material adverse impact on our business, financial condition, and results of operations.

We must retain our existing clients and attract new clients.

Our business substantially depends on our ability to retain our existing clients and attract new clients. We expect to derive a significant portion of our revenue from renewal of existing clients’ contracts and sales of additional products and solutions to existing clients. As a result, achieving a high client retention rate, expanding within existing clients, and selling additional products and solutions are critical to our revenue. In addition, our ability to increase our client base will be critical to our future growth. In order to retain existing clients and attract new clients, we must provide solutions that enable our existing and prospective clients to simplify and improve the payment process, increase speed and efficiencies, and deliver exceptional client service.

Factors that may affect our client satisfaction, our ability to sell additional products and solutions to existing clients, and expand our client base include, but are not limited to, the following:

•the performance and functionality of our platform;

•our ability to deliver a high-quality client experience;

•our ability to develop and sell complementary products and solutions;

•the stability, performance, and security of our hosting infrastructure;

•our ability to attract, retain, and effectively train sales and marketing personnel;

•the delivery of products that are easy to use and deliver tangible value to clients;

•changes in healthcare laws, regulations, or trends, and our ability to quickly adapt;

•the business environment of our clients, including healthcare staffing shortages and headcount reductions by our clients;

•the price of our products and solutions relative to our competitors;

•our ability to integrate with EHR or PM systems; and

•our ability to maintain and enhance our reputation and brand recognition.

Our clients have no obligation to renew their subscriptions for our platform solutions after the initial term expires, which is typically a two to three-year term. Our contracts generally provide for the automatic renewal for one-year subsequent terms, with the ability for our clients to terminate the contract with limited notice to us. Our clients’ renewal rates may fluctuate or decline because of several factors, including their satisfaction or dissatisfaction with our solutions and support, the prices of our solutions as compared to our competitors’ pricing, or reductions in our clients’ spending levels due to the macroeconomic environment or other factors. In addition, our clients may negotiate terms less advantageous to us upon renewal, which may reduce our revenue from these clients and may decrease our annual revenue. If our clients notify us of intent not to renew, renew their contracts upon less favorable terms, or at lower fee levels or fail to purchase new products and solutions from us, our revenue may decline, or our future revenue growth may be constrained.

We must be able to successfully execute on our business strategies in order to grow.

Our growth strategies include expanding our relationships with existing clients, growing our client base, deepening and expanding our relationships with strategic channel partners, innovating and developing adjacent solutions, and selectively pursuing strategic acquisitions. We are actively identifying growth and expansion opportunities in new markets, technology, or offerings, as well as exploring opportunities to increase our existing client base and cross-sell and upsell to our existing clients. To successfully execute on our growth initiatives, we will need to, among other things, successfully identify and execute on those opportunities and successfully identify, acquire, and integrate complementary

Table of Contents

businesses. We must also manage changing business conditions, anticipate and react to changes in the regulatory environment, and develop expertise in areas outside of our business’s historical core competencies. In addition, our future financial results will depend in part on our ability to profitably manage our business in new markets that we may enter. Failure to successfully address any of the foregoing risks could have a significant negative impact on our business, financial condition, and results of operations.

We must accurately assess the risks related to acquisitions and successfully integrate acquired businesses.

We have historically acquired, and in the future may acquire, businesses, technologies, product lines, and other assets. The successful integration of any businesses and assets we have acquired or may acquire may be critical to our business and growth strategy.

The amount and timing of the expected benefits of any acquisition, including potential synergies, are subject to risks and uncertainties. These risks and uncertainties include, but are not limited to, those relating to:

•our ability to maintain relationships with the clients and suppliers of the acquired business;

•our ability to retain or replace key personnel of the acquired business;

•potential conflicts in payer, client, partner, vendor, or marketing relationships;

•our ability to coordinate organizations that are geographically diverse and may have different business cultures;

•the acceptance of acquired company clients of product upgrades and platform changes;

•the diversion of management’s attention to the integration of the operations of businesses or other assets we have acquired;

•difficulties in the integration or migration of IT systems, including securely sharing data across networks, and maintaining the security of the IT systems;

•incurrence of debt or assumption of known and unknown liabilities;

•write-off of goodwill, client lists, and amortization of expenses related to intangible assets; and

•compliance with regulatory, contracting, and other requirements, including internal control over financial reporting.

We cannot guarantee that any acquired businesses, technologies, services, product lines, or other assets will be successfully integrated with our operations in a timely or cost-effective manner, or at all. Failure to successfully integrate acquired businesses or to achieve anticipated operating synergies, revenue enhancements, or cost savings could have a material adverse impact on our business, results of operations, or financial condition. Although we attempt to evaluate the risks inherent in each transaction and evaluate acquisition candidates appropriately, we may not properly ascertain all risks and the acquired businesses or other assets may not perform as expected or enhance our value as a whole. Acquired businesses also may have larger than expected liabilities that are not covered by the indemnification, if any, that we are able to obtain from the sellers. If we are unable to successfully complete and integrate strategic acquisitions in a timely manner, our business and growth strategies could be negatively affected.

Our business depends on our ability to establish and maintain strategic relationships.

We depend on strategic relationships, and if we lose any of these strategic relationships or fail to establish additional relationships, or if our relationships fail to benefit us as expected, this could materially and adversely impact our business, financial condition, and operating results. For example, our solutions are integrated with many EHR and PM solutions offered by providers with whom we have a strategic relationship. Our ability to form and maintain these relationships in order to facilitate the integration of our platform into the EHR and PM systems used by our clients and their patients is important to the success of our business. If providers of EHR or PM solutions amend, terminate, or fail to perform their obligations under their agreements with us, we may need to seek other ways of integrating our platform with

Table of Contents

the EHR and PM systems of our clients, which could be costly and time consuming, and could adversely affect our business results.

In addition, we have entered into contracts with channel partners to market and sell certain of our solutions, which are generally on a non-exclusive basis. However, under contracts with some channel partners, we may be bound by provisions that restrict our ability to market and sell solutions to potential clients. Our arrangements with some of these channel partners involve negotiated payments to them based on percentages of revenue our common clients generate. These arrangements subject us to federal and state healthcare laws and regulations. For more information regarding risks related to such laws and regulations, see Part I, Item 1A, “Risk Factors—Risks Related to Legal and Governmental Regulation—We conduct business in a heavily regulated industry.” Additionally, if the payments prove to be too high, we may be unable to realize acceptable margins, but if the payments prove to be too low, channel partners may not be motivated to work with us at the levels initially contemplated. The success of these partnerships will depend in part upon the channel partners’ own competitive, marketing, and strategic considerations, including the relative advantages of using alternative solutions being developed and marketed by them or by competitors. If channel partners are unsuccessful in marketing our solutions or seek to amend the terms of their contracts, we may need to broaden our marketing efforts and alter our strategy, which may divert planned efforts and resources from other projects and may increase our costs. In addition, as part of the packages these channel partners sell, they may offer a choice to end-users between our solutions and similar solutions offered by competitors or by the channel partners directly. If our solutions are not chosen or renewed by existing channel partner end-users, revenue we earn via our channel partner relationships will decrease. Significant changes in the terms of our agreements with channel partners may also have an adverse effect on our ability to successfully market our solutions.

Our revenues rely, in part, on the growth and success of our clients and overall healthcare transaction volumes, which are subject to factors outside of our control.

We enter into agreements with our clients, under which a significant portion of our fees may be variable, including fees which are dependent upon the number of add-on features that our clients choose to subscribe to and the utilization of our solutions. These fees, above contractual minimums, are generally not required to be paid in the absence of healthcare transactions. Therefore, if there is a general reduction in patient visits, it may result in a reduction in fees generated from our clients or a reduction in the number of add-on features subscribed for by our clients. Our revenue can also be adversely affected by the impact of lower than normal healthcare utilization trends and other negative economic factors such as higher unemployment. For example, weakened economic conditions or a recession could reduce the amounts patients are willing or able to spend on healthcare services. Further, the number of patients utilizing our patient payment solutions, and the amounts those patients pay directly to our clients for services, is often impacted by factors outside of our control, such as the number of patients with high deductible health plans. The growth and success of our clients could also be impacted by changes in governmental policies and regulations, such as reductions or changes in reimbursement under government programs that adversely affect our clients, or our cost of providing our solutions, recent or future federal government cost-cutting and efficiency measures, actual or potential reductions in the federal workforce that administers government programs, other substantial changes to federal healthcare programs or government spending that adversely affect our clients, and the creation of any future government single-payer system, which would have a significant adverse impact on our business.

For these reasons, revenue under these agreements can be uncertain and unpredictable, and if the associated transaction volumes were reduced by a material amount, such decrease would lead to a decrease in our revenue, which could harm our business, financial condition, and results of operations.

Consolidation in the healthcare industry could adversely impact our business, financial condition, and operating results.

Many healthcare provider organizations are consolidating to create integrated healthcare delivery systems with greater market power. As provider networks and managed care organizations consolidate, thus decreasing the number of market participants, competition to provide products and solutions like ours will become more intense, and the importance of establishing and maintaining relationships with key industry participants will increase. These industry participants may try to use their market power to negotiate price reductions for our products and solutions or otherwise exert downward pressure on prices of our products and solutions. Further, consolidation of management and billing services through integrated delivery systems may decrease demand for our products. Such consolidation may also lead integrated delivery systems to require newly acquired physician practices to replace our product with that already in use in the larger enterprise. In addition, vertical integration whereby healthcare provider organizations acquire EHR, PM, revenue

Table of Contents

management cycle, or similar systems may make it more challenging to establish new relationships with such providers or may lead to such provider organizations replacing our solutions with those offered by systems that they acquire. Any of these factors could materially and adversely impact our business, financial condition, and operating results.

We face a selling cycle of variable length to secure new client agreements.

We face a selling cycle of variable length, which can span from weeks to 18 months or longer, to secure a new agreement with a client. We invest a substantial amount of time and resources on our sales efforts without any assurance that our efforts will produce sales. Even if we succeed at completing a sale, we may be unable to predict the size of the initial arrangement until very late in the sales cycle. We expend time and resources as part of our sales effort, and we may not recognize any revenue to offset such expenditures in the same period, particularly for longer sales cycles. We cannot accurately predict the timing of entering into agreements with new clients due to the complex procurement decision processes of many healthcare providers, which often involves high-level management or board committee approvals that can be delayed due to factors beyond our and their control. Due to our variable selling cycle length, we have only a limited ability to predict the timing of specific new client relationships, which affects our ability to predict future revenues and cash flows.

We face an implementation cycle that is dependent on our clients’ timing and resources.

We face an implementation cycle that is dependent on our clients’ timing, which may pose scheduling challenges, and our clients’ resources, which may be constrained or significantly diverted to larger projects, each of which can impact timing of implementation of our solutions. Providers are faced with labor-intensive, manual tasks as well as disconnected systems and tools, compounded by broad workforce shortages and high staff turnover rates, which can further limit their resources and ability to implement our solutions. Implementation of our solutions may also require other technology implementation or process changes by the client. If implementation periods are delayed or extended, our ability to generate revenue from these solutions would also be delayed even though we have expended time and resources in the implementation of such solutions. Even if implementation has begun, there can be no assurance that we will recognize revenue on a timely basis or at all from our efforts, and any revenue may not be recognized during the same period in which we incur implementation expenses.

We depend on our senior management team and certain key employees and must continue to attract and retain highly skilled employees.

Our success depends, in part, on the skills, working relationships, and continued services of Matthew Hawkins (our Chief Executive Officer), the senior management team, and other key personnel. From time to time, there may be changes in our senior management team resulting from the hiring or departure of executives, which could disrupt our business. In addition, our hybrid work environment could make it difficult to manage our business and adequately oversee our employees and business functions, potentially resulting in harm to our Company culture, increased employee attrition, and the loss of key personnel.

We must attract, train, and retain a significant number of highly skilled employees, including sales and marketing personnel, client support personnel, professional services personnel, software engineers, technical personnel, and management personnel, and the availability of such personnel, in particular software engineers, may be constrained. We also believe that our future growth will depend on the continued development of our direct sales force and its ability to obtain new clients and to manage our existing client base. If we are unable to hire and develop sufficient numbers of productive direct sales personnel or if new direct sales personnel are unable to achieve desired productivity levels in a reasonable period of time, sales of our products and solutions will suffer and our growth will be impeded.

Competition for qualified management and employees in our industry is intense, especially for employees with expertise in AI and software, and identifying and recruiting qualified personnel and training them requires significant time, expense, and attention. Many of the companies with which we compete for personnel have greater financial and other resources than we do. While we have entered into offer letters or employment agreements with certain of our executive officers, all of our employees are “at-will” employees, and their employment can be terminated by us or them at any time, for any reason, and without notice, subject, in certain cases, to severance payment rights. The departure and replacement of one or more of our executive officers or other key employees would likely involve significant time and costs, may significantly delay or prevent the achievement of our business objectives, and could materially harm our business. In addition, volatility or lack of performance in our stock price may affect our ability to attract replacements should key personnel depart.

Table of Contents

The estimates and assumptions we use to determine the size of our total addressable market may prove to be inaccurate.

Market estimates and growth forecasts that we disclose are subject to significant uncertainty and are based on assumptions and estimates that may not prove to be accurate. The estimates and forecasts relating to the size and expected growth of the market for our products and solutions may prove to be inaccurate. These estimates and forecasts may be impacted by economic uncertainty that is outside our control, including macroeconomic trends such as domestic supply chain risks, tariffs, inflationary pressure, interest rate increases, and declines in consumer confidence that impact our clients. While we believe the information on which we base our total addressable market and the underlying estimates and assumptions is generally reliable, such information is inherently imprecise. We cannot assure you that these assumptions will prove to be accurate.

Risks Related to our Products and Solutions

We may not be able to develop and market new solutions, or enhance our existing solutions, to respond to technological changes or evolving industry standards.

The markets in which we operate are characterized by rapid technological and regulatory change, evolving industry standards, and increasingly sophisticated client needs. For example, from time to time, government agencies may alter format and data code requirements applicable to electronic transactions. In addition, clients may request that solutions be customized to satisfy particular security protocols, modifications, and other contractual terms in excess of industry norms and standard configurations. In order to compete successfully, we must keep pace with our competitors in anticipating and responding to these rapid changes and evolving client demands. Our future success will depend, in part, upon our ability to enhance and improve the functionality of our existing solutions (including the successful continued deployment of the use of AI in our products and solutions) and develop and introduce in a timely manner or acquire new solutions that keep pace with technological and regulatory developments and industry requirements, satisfy increasingly sophisticated client requirements, and achieve market acceptance. Because some of our solutions are complex and require rigorous testing, development cycles can be lengthy, depending upon the solution and other factors. Our estimates of research and development expenses may be too low, our revenue may not be sufficient to support the future product development that is required for us to remain competitive, and development cycles may be longer than anticipated. Further, there is no assurance that research and development expenditures will lead to successful solutions or enhancements to our existing solutions. In addition, technological advances also may result in the downward pricing pressures, which could result in us losing sales unless we lower the prices we charge or provide additional efficiencies or capabilities to the client.

In addition, because some of the software and systems that we use to provide solutions to clients are inherently complex, changing, updating, enhancing, or creating new versions of our solutions or the software or systems we use to provide our solutions introduces a risk of errors or performance problems. These updates and enhancements also require training and support to effectively implement, and our clients may have difficulties doing so. If significant problems occur as a result of these changes, we may fail to meet our contractual obligations to clients, which could result in claims being made against us or in the loss of client relationships.

If we are unable, for technological or other reasons, to develop or acquire on a timely and cost-effective basis new software solutions or enhancements to existing solutions or if such new solutions or enhancements do not achieve market acceptance or are not properly implemented, or if new technologies emerge that are able to deliver competitive offerings at lower prices, more efficiently, more conveniently, or more securely than our offerings, our business, financial condition, and results of operations could be adversely affected.

Our business depends on the interoperability, connectivity, and integration of our solutions with our clients’ and their vendors’ networks and infrastructures.

Our solutions must interoperate, connect, and integrate with our clients’ and their vendors’ existing infrastructures, which often have different specifications, utilize multiple protocol standards, deploy products and solutions from multiple vendors, and contain multiple generations of products that have been added to that infrastructure over time. Some of the technologies supporting our clients and their vendors are constantly evolving, and we must continue to adapt to these changes in a timely and effective manner at an acceptable cost. In addition, our clients and their vendors may implement new technologies into their existing networks and systems infrastructures that may not immediately interoperate with our solutions. Our continued success will depend on our ability to adapt to changing technologies, manage, and process ever- increasing amounts of data and information and improve the performance, features, and reliability of our solutions in response to changing client and industry demands. If we encounter complications related to network

Table of Contents

configurations or settings, we may have to modify our solutions to enable them to interoperate with our clients’ and their vendors’ networks and manage clients’ transactions in the manner intended. For example, if clients or their vendors implement new encryption protocols, it may be necessary for us to obtain a license to implement or interoperate with such protocols, and there can be no assurance that we will be able to obtain such a license on acceptable terms, if at all. On the other hand, any new or enhanced technologies that we employ must be accepted by our clients’ and their vendors’ existing infrastructures and be able to be integrated with their platforms and solutions. For example, we use automated software applications or “bot” technology and Application Interface (“API”) technology in a number of our solutions. Certain of our clients’ platforms may not support those technologies or functionalities for various reasons, which would adversely impact connectivity of our solutions. Any of these difficulties could delay or prevent the successful design, development, testing, introduction, or marketing of our solutions.

Further, because our solutions are interoperated and integrated, any disruption to our clients’ and their vendors’ networks and infrastructures, such as those of the EHR and PM vendors of our clients, could cause our solutions to become unavailable.

As a consequence of any of the foregoing, our ability to sell our solutions may be impaired, which could have a material adverse impact on our business, results of operations, or financial condition.

The successful operation of our business depends upon the performance and reliability of internet, mobile, and other infrastructure, none of which are under our control.

Our business and ability to provide our products and solutions is highly dependent upon the reliable performance of our platform and the underlying network and server infrastructure, including the performance and reliability of internet, mobile, and other infrastructures that are not under our control. This includes maintenance of a reliable network backbone with the necessary speed, data capacity, and security for providing reliable internet access and services and reliable mobile device, and telephone all at a predictable and reasonable cost. We have experienced and expect that we will experience interruptions and delays in services and availability from time to time.

We serve our clients primarily from third-party data-hosting facilities. These facilities are vulnerable to damage or interruption from climate change or extraordinary events, including adverse weather, earthquakes, floods, fires, power loss, telecommunications failures, and similar events. They are also subject to break-ins, sabotage, intentional acts of vandalism, terrorism, and similar misconduct. Their systems and servers could also be subject to software and hardware errors, hacking, ransomware, viruses, and other disruptive problems or vulnerabilities. Despite precautions taken at these facilities, the occurrence of a natural disaster or an act of terrorism, a decision to close the facilities without adequate notice, or other unanticipated problems at the facilities could result in lengthy interruptions in our solutions. Although we have instituted disaster recovery arrangements, in certain cases, we do not maintain redundant systems or facilities. In the event of a catastrophic event, we may experience an extended period of system unavailability, which could negatively impact our relationship with users or clients.

Any disruption in network access or telecommunications could significantly harm our business. Almost all access to the internet is maintained through telecommunication operators who have significant market power that could take actions that degrade, disrupt, or increase the cost of users’ ability to access our platform. Disruptions in internet infrastructure, cloud-based hosting, or the failure of telecommunications network operators to provide us with the bandwidth we need to provide our products and solutions could temporarily disrupt or shut down our business. The insurance coverage under our policies may not be adequate to compensate us for all losses that may occur. In addition, we cannot provide assurance that we will continue to be able to obtain adequate insurance coverage at an acceptable cost.

Further, the reliability and performance of the internet may be harmed by increased usage or by denial- of-service attacks. The internet has experienced a variety of outages and other delays as a result of damages to portions of its infrastructure, and it could face outages and delays in the future. These outages and delays could reduce the level of internet usage as well as the availability of the internet to us for delivery of our products and solutions. Finally, recent changes in law could impact the cost and availability of necessary internet infrastructure. Increased costs and/or decreased availability would negatively affect our results of operations.

Table of Contents

Our business would be adversely affected if we cannot obtain, process, use, disclose, or distribute the highly regulated data we require to provide our solutions.

Our business relies in part on our ability to obtain, process, monetize, use, disclose, and distribute highly regulated data in the healthcare and technology industries in a manner that complies with applicable laws, regulations, and contractual and technological restrictions. The failure by us or our data suppliers, processors, partners, and vendors to obtain, provide, maintain, use, and disclose data in a compliant manner could have a harmful effect on our ability to use and disclose data which in turn could impair our functions and operations, including our ability to share data with third parties or incorporate it into our product offerings. In addition, the processing, use, disclosure, and distribution of data may require us or our data suppliers, processors, partners, and vendors to obtain consent from third parties or follow additional laws, regulations, or contractual and technological restrictions that apply to the healthcare industry. These requirements could interfere with or prevent creation or use of rules and analyses or limit other data-driven activities that benefit us. Moreover, due to lack of valid notice, permission, authorization, consent, or waiver, we may be subject to claims or liability for use or disclosure of information. We have policies and procedures in place designed to address the proper handling, use, and disclosure of data, but could face claims that our practices occur in a manner not permitted under applicable laws or our agreements with or obligations to data providers, individuals, or other third parties. These claims or liabilities and other failures to comply with applicable requirements could damage our reputation, subject us to unexpected costs, and could have a material adverse impact on our business, results of operations, or financial condition. See Part I, Item 1A, “Risk Factors—Risks Related to Information Technology Systems, Cybersecurity, Data Privacy, and Intellectual Property—Our business is subject to complex and evolving laws and regulations regarding privacy, data protection, and cybersecurity and Part I, Item 1A, “Risk Factors—Risks Related to Legal and Governmental Regulation—We are subject to health care laws and data privacy and security laws and regulations governing our Processing of personal information, including PHI, personal health records, and payment card data.”

Additionally, to the extent we are permitted to de-identify personal information, including PHI, and use and disclose such de-identified information for our purposes, we must determine whether such PHI has been sufficiently de-identified to comply with our contractual obligations and the privacy standards under HIPAA. Such determinations may require complex factual and statistical analyses and may be subject to interpretation. Accordingly, we may be subject to claims or liability for failure to sufficiently de-identify data to comply with the HIPAA privacy standards and our contractual obligations. These claims or liabilities could damage our reputation, subject us to unexpected costs and could have a material adverse impact on our business, results of operations, or financial condition. If we are unable to properly protect the privacy and security of PHI entrusted to us, we could be found to have breached our contracts with our clients and be subject to investigation by the OCR, or other governmental or regulatory authorities. In the event OCR or other governmental or regulatory authorities find that we have failed to comply with applicable privacy and security standards, we could face civil and criminal penalties. Additionally, in recent years, consumer advocates, media, and elected officials increasingly and publicly have criticized companies in data-focused industries regarding the Processing of personal information, including the licensing of de-identified information, by such companies. Concerns about our practices with regard to the Processing or security of PHI, personal information, the licensing of de-identified information, or other privacy related matters, even if unfounded, could damage our reputation and adversely affect our business, results of operations, or financial condition.

We rely on certain third-party vendors and providers.

We have entered contracts with third-party providers to provide critical services relating to our business, including clearinghouse systems and payment processing services. We primarily use clearinghouse systems for our claims and payer payment management solutions to facilitate data exchanges between providers and payors in connection with the reimbursement process, and use payment processing services in our patient financial care solutions to facilitate patient payments to their providers. We also rely on third-party data providers to enable us to deliver automated eligibility and benefits verification as part of our financial clearance solutions, as well as third parties who print and deliver paper statements to patients as part of our patient financial care solution. We also use various third-party vendors, such as software as a service and infrastructure as a service, cybersecurity solutions, and cloud based hosting of our proprietary solutions. We rely on hosted software as a service applications from third parties to operate critical functions of our business, including enterprise resource planning, order management, contract management billing, accounting, human resources, and other operational activities. We also rely third parties with respect to internet, mobile, and other infrastructure as described under “—The successful operation of our business depends upon the performance and reliability of internet, mobile, and other infrastructure, none of which are under our control” below.

Table of Contents

Our dependence on these third parties to support key functions of our business creates numerous risks, in particular, the risk that we may not maintain service quality, control, or effective management with respect to these operations, which, among other things, could result in our inability to meet certain obligations to our clients. For example, if our clearinghouse partners experience a disruption to their system, this could significantly adversely impact the availability and functionality of our claims management suite and, among other things, could cause us to be in breach of certain client contracts. In the event that these service providers fail to maintain adequate levels of support, do not provide high quality service, increase the fees they charge us, discontinue their lines of business, terminate our contractual arrangements, or cease or reduce operations, we may suffer additional costs and be required to pursue new third-party relationships, which could materially disrupt our operations and our ability to provide our products and solutions, divert management’s time and resources, and cause us to fail to meet required service levels stipulated in our client contracts.

Our reputation and our clients’ willingness to purchase our products and partners’ willingness to use our products depend, in part, on our third-party providers’ compliance with ethical employment practices, such as with respect to child labor, wages and benefits, forced labor, discrimination, safe and healthy working conditions, and with all legal and regulatory requirements relating to the conduct of their businesses. If our third-party providers fail to comply with applicable laws, regulations, safety codes, employment practices, human rights standards, quality standards, environmental standards, production practices, or other obligations, norms, or ethical standards, our reputation and brand image could be harmed, and we could be exposed to litigation and additional costs that would harm our business, reputation, and results of operations. The ability of our third-party providers to effectively satisfy our business requirements could also be impacted by financial difficulty of our third-party providers or damage to their operations caused by fire, terrorist attack, natural disaster, or other events.

Any termination of our agreements with, or disruption in the performance of, one or more of these service providers could result in disruption or unavailability of our platform, and harm our ability to continue to develop, maintain, and improve our products, as well as harm our brand and reputation. While we have entered into agreements with these third-party service providers, they have no obligation to renew their agreements on similar terms or on terms that we find commercially reasonable, or at all. Identifying replacement third-party service providers, and negotiating agreements with them, requires significant time and resources. If any one of our material third-party service provider’s ability to perform their obligations was impaired, we may not be able to find an alternative supplier in a timely manner or on acceptable financial terms, and we may not be able to meet the full demands of our clients within the time periods expected, or at all.

Any errors or malfunctions in our products and solutions could result in liability to our clients.

Our products and solutions are used to help simplify the payment process for healthcare providers. If our products and solutions fail to provide accurate and timely information or are associated with errors or malfunctions, then our clients could assert claims against us that could result in substantial costs to us, harm our reputation in the industry, and cause demand for our products and solutions to decline. Although we attempt to limit by contract our liability for damages, the allocations of responsibility and limitations of liability set forth in our contracts may not be enforceable or may not otherwise sufficiently protect us from liability for damages. In certain circumstances, we may also be liable for the acts or omissions of others, such as our vendors or suppliers. On occasion, we enter into standard indemnification arrangements in the ordinary course of business. Pursuant to these arrangements, we indemnify, hold harmless, and agree to reimburse the indemnified parties for losses suffered or incurred by the indemnified party, in connection with any trade secret, copyright, patent, or other intellectual property infringement claim by any third party with respect to its technology. The terms of these indemnification agreements are generally perpetual. See Part I, Item 1, “Business—Indemnification and Insurance.”

Moreover, our products and solutions may contain defects, errors, bugs, vulnerabilities, or failures that are not detected until after the software is introduced or updates and new versions are released. From time to time we have discovered defects, errors, bugs, vulnerabilities, or failures in our software, and such defects, errors, bugs, vulnerabilities, or failures can be expected to occur in the future. Defects, errors, bugs, vulnerabilities, or failures that are not timely detected and remedied could expose us to risk of liability to our clients and cause delays in introduction of new solutions, result in increased costs and diversion of development resources, require design modifications, decrease market acceptance or client satisfaction with our solutions, and harm our brand and reputation.

In addition, we create rules within our products and solutions based on payers’ authorization policy documents, and which may be used for financial recovery by our clients. These policies and related legal requirements can be complex and are subject to frequent changes. If such rules are inaccurate or contain errors, or if we fail to timely update our rules to reflect any changes in policies or requirements, then we may be subject to liability. If any of these risks occur, they could materially adversely affect our business, financial condition, or results of operations.

Table of Contents

Failure by our clients to obtain proper permissions or provide us with accurate and appropriate information may result in claims against us or may limit or prevent our use of information.

To the extent we are not otherwise permitted to use and/or disclose client information, we require our clients to provide necessary notices and obtain necessary permissions, consents, and authorizations for the use and disclosure of the information that we receive from our solutions. We then provide patient information to third parties, pursuant to patient permissions, consents, and authorizations that permit the third parties to collect such information, and such patient information may be aggregated or combined with other data sources to gain additional insights from such patient information. Such patient information may also be anonymized/de-identified and sold to or collected by a data aggregator.

If our clients do not provide necessary notices or obtain necessary permissions, consents, or authorizations, then our use and disclosure of information that we receive from them or on their behalf may be limited or prohibited by federal or state privacy or other laws. Such failures by our clients could impair our functions, processes, and databases that reflect, contain, or are based upon such information. In addition, such failures by our clients could interfere with or prevent creation or use of rules, analyses, or other data-driven activities that benefit us or make our solutions less useful. Accordingly, we may be subject to claims or liability for inaccurate claims data submitted to payers, inaccurate or incomplete billing and coding claims or for use or disclosure of information by reason of lack of valid notice, permission, consent, or authorization. These claims or liabilities could damage our reputation, subject us to unexpected costs, and could have a material adverse impact on our business, results of operations, or financial condition.

Certain of our solutions present the potential for embezzlement, identity theft, or other similar illegal behavior by our employees or vendors and a failure of our employees or vendors to observe quality standards or adhere to environmental, social, and governance standards could damage our reputation.

As a payments facilitator, we handle payments from payers and from patients for many of our provider clients and are in possession of payment card information and banking account information. Even when we do not facilitate payments, our solutions also involve the use and disclosure of personal and business information that could be used to impersonate third parties or otherwise gain access to their data or funds. If any of our employees or vendors or other bad actors does not comply with the law or engages in unethical conduct, such as taking, converting, or misusing funds, documents, or information, or if we experience a data breach creating a risk of identity theft, we could be liable for damages, and our reputation could be damaged or destroyed.

In addition, we could be perceived to have facilitated or participated in illegal misappropriation of funds, documents, or data and, therefore, be subject to civil or criminal liability. Federal and state regulators may take the position that a data breach or misdirection of data constitutes an unfair or deceptive act or trade practice. We also may be required to notify individuals affected by any data breaches. Further, a data breach or similar incident could impact the ability of our clients that are creditors to comply with the federal “red flags” rules, which require the implementation of identity theft prevention programs to detect, prevent, and mitigate identity theft in connection with client accounts. Any such data breach could have an adverse impact on our business, results of operations, and reputation.

We must comply with the applicable rules of the National Automated Clearing House Association (“NACHA”), and we, our clients, and our sales partners must comply with the applicable requirements of card networks.

We provide payments solutions for the secure processing of patient payments. Our payment processing tools can connect to multiple financial services providers and acquiring banks and can also connect directly with patients. We have developed partnerships with ACH operators and primary credit card processors to facilitate payment processing as a third-party sender for patient payments as well as funds disbursements to healthcare providers, and we are registered with numerous card networks as a service provider (payment facilitator or the equivalent) for acquiring banks. The NACHA and these card networks set the operating rules and standards with which we must comply. The termination of our status as a third-party sender or a decision by NACHA to bar us from serving as such, the termination of our status as a certified service provider or a decision by the card networks to disallow payment facilitators or bar us from serving as such, or any changes in NACHA or card network rules or standards, including interpretation and implementation of the operating rules or standards, that increase the cost of doing business or limit our ability to provide payment processing solutions to our clients, could adversely affect our business, financial condition, or results of operations.

In addition, we and our clients are subject to card network rules that could subject us or our clients to a variety of fines or penalties that may be levied by card networks for certain acts or omissions by us or our clients. If a client or sales partner fails to comply with the applicable requirements of card networks, we could be subject to a variety of fines or

Table of Contents

penalties that may be levied by card networks. We may have to bear the cost of such fines or penalties if we cannot collect them from the applicable client or sales partner, resulting in lower earnings or losses for us. Our violation of the network rules may result in the termination or suspension of our registration with the affected network. The termination of our registration, including a card network barring us from acting as a payment facilitator, or any changes in card network rules that would impair our registration, could require us to stop providing payment solutions relating to the affected card network, which would adversely affect our ability to conduct our business.

In addition, the rules of card networks are set by their boards, which may be influenced by card issuers. Many banks directly or indirectly sell payment processing services to clients in competition with us. These banks could attempt, by virtue of their influence on the networks, to alter the networks’ rules or policies to the detriment of non-members, including us.

We are subject to increases in card network fees and other changes to fee arrangements.

From time to time, card networks, including Visa, MasterCard, American Express, and Discover, increase the fees that they charge, which are indirectly passed down to payment facilitators like us. Although we may attempt to pass these increases along to our clients, this may result in the loss of clients to our competitors that do not pass along the increases. If competitive practices prevent us from passing along the higher fees to our clients in the future, we may have to absorb all or a portion of such increases, which may increase our operating costs and adversely impact our results of operations.

Further, any future regulations on processing rates being capped when applied to transaction refunds could have a negative impact on our business. A provision of the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”) known as the Durbin Amendment empowered the Federal Reserve Board to establish and regulate a cap on the interchange fees that merchants pay banks for electronic clearing of debit card transactions. The final rule implementing the Durbin Amendment established standards for assessing whether debit card interchange fees received by debit card issuers were reasonable and proportional to the costs incurred by issuers for electronic debit transactions, and it established a maximum permissible interchange fee that an issuer may receive for an electronic debit transaction, limiting the fee revenue to debit card issuers and payment processors. To the extent that HSA-linked payment cards and other exempt payment cards used on our platform (or their issuing banks) lose their exempt status under the current rules or if the current interchange rate caps applicable to other payment cards used on our platform are increased, any such amendment, rule-making, or legislation could increase the interchange fees applicable to payment card transactions processed through our platform. As a result, this could decrease our revenue and profit and could have a material adverse effect on our financial condition and results of operations.

We are subject to the effect of payer and provider conduct which we cannot control.

We offer certain electronic claims submission products as part of our platform. While we have implemented certain product features designed to maximize the accuracy and completeness of claims submissions, these features may not be sufficient to prevent inaccurate claims data from being submitted to payers. Should inaccurate claims data be submitted to payers due to errors and omissions by Waystar, we may be subject to liability claims. Electronic data transmission services are offered by certain payers to healthcare providers that establish a direct link between the provider and payer. This process could reduce revenue to vendors such as us. A significant increase in the utilization of direct links between providers and payers would reduce the number of transactions that we process and for which we are paid, resulting in a decrease in revenue and an adverse effect on our financial condition and results of operations.

Risks Related to Information Technology Systems, Cybersecurity, Data Privacy, and Intellectual Property

We and our vendors are subject to attacks of such information technology systems, including cyber-attacks, security breaches, or other incidents impacting the information Processed through our platform.

We collect, create, receive, maintain, process, use, transmit, disclose, transfer, alter, and store (collectively, “Process”) significant amounts of patients' personal information (including PHI) received in connection with the utilization of our platform and otherwise in connection with the operation of our business, as well as other sensitive, confidential, and proprietary information such as payment data. Attacks on information technology systems are increasing in their frequency, levels of persistence, sophistication, and intensity, and they are being conducted by increasingly sophisticated and organized groups and individuals, including state- sponsored organizations, with a wide range of motives and expertise. In addition to extracting personal information and other sensitive or confidential information, such attacks could include the deployment of harmful malware, ransomware, denial-of-service attacks, social engineering, and other means to affect

Table of Contents

service reliability and threaten the confidentiality, integrity, security, and availability of our information or information technology systems. The prevalent use of mobile devices also increases the risk of data security incidents. Further, like all internet-based solutions, our solutions are vulnerable to software bugs, computer viruses, malware, internet worms, break-ins, phishing attacks, attempts to overload servers with denial-of- service, or other attacks or similar disruptions from unauthorized use of our and third-party computer systems, any of which could lead to system interruptions, delays or shutdowns, loss of critical data, unauthorized acquisition of or access to data, or the compromise of our information technology systems. Techniques used to gain unauthorized access to or acquisitions of data and systems, disable or degrade service, or sabotage systems, are constantly evolving (including through the use of AI), and we may be unable to anticipate such techniques or implement adequate preventative measures to avoid unauthorized access, acquisitions of, or other adverse impacts to such data or our systems. The risk of state-supported and geopolitical-related cyber-attacks may increase in connection with political or economic conflicts. In addition, competitors in our industry have suffered successful cyberattacks in the past, which may lead to us facing additional scrutiny, and we may face similar attacks ourselves. We may not discover all such incidents or activity or be able to respond or otherwise address them promptly, in sufficient respects or at all. Any specific interruption or attack, any failure to maintain performance, reliability, security, and availability of our products, or failure to prevent software bugs and other corruptants such as those listed above, to the satisfaction of our clients or their patients, may harm our reputation and our ability to retain existing clients, negatively affect our clients and their patients, and adversely impact our business, results of operations, and financial condition.

In addition, some of our third-party service providers and vendors also Process our personal information and other sensitive information such as our clients’ data on our behalf. These service providers and vendors are subject to similar threats of cyber-attacks, security incidents, and other malicious internet-based activities, which could also expose us to risk of loss, litigation, potential liability, and/or other costs. We may have limited insight into the data privacy or security practices of third-party vendors and providers, including as it relates to our AI algorithms. We have also acquired and may continue to acquire companies that are vulnerable to cyber-attacks and security incidents and breaches, and we may be responsible for any such attacks, incidents, and breaches of these newly acquired companies.

Further, the security systems in place at our employees’, vendors’, and service providers’ offices and homes may be less secure than those used in our offices, and while we have implemented technical, physical, and administrative safeguards to help protect our systems when our employees, vendors, and service providers work from their offices, homes, and other remote locations, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss, and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will ultimately be effective or that we will not encounter risks associated with employees, vendors, and service providers accessing company data and systems remotely.

Any adverse impact to the availability, integrity, or confidentiality of our information technology systems or data, or the information technology systems or data of third parties upon which we rely, could require us to expend significant resources to mitigate the breach of security, pay any applicable fines, and address matters related to any such breach, including notifying impacted individuals, the media, or regulators, making public disclosures, and addressing reputational harm.

Additionally, any such event could result in fines, legal claims, or proceedings, including regulatory investigations and class actions, or liability for failure to comply with privacy and information security laws, which could disrupt our operations, damage our reputation, and expose us to claims from clients, individuals, and others, any of which could have a material adverse effect on our business, financial condition, and results of operations.

The costs of mitigating data security risks are significant and are likely to increase in the future. Although we carry cybersecurity insurance, we cannot ensure our limits are sufficient to cover us against all potential losses for damages or fines in an amount exceeding our policy, or that applicable insurance will be available to us in the future on economically reasonable terms or at all.

Our business is subject to complex and evolving laws and regulations regarding privacy, data protection, and cybersecurity.

There are numerous U.S. federal, state, local, and international laws and regulations regarding privacy, data protection, and cybersecurity that govern the Processing of personal information and other information. The scope of these laws and regulations is expanding and evolving, subject to differing interpretations, may be inconsistent among jurisdictions, or conflict with other rules. We are also subject to the terms of our privacy policies and obligations to third parties related to privacy, data protection, and cybersecurity.

Table of Contents

For example, the CCPA took effect on January 1, 2020 and was amended in 2022. The law broadly defines personal information, gives California residents expanded privacy rights and protections, and provides for civil penalties for certain violations. Many other states have since enacted comprehensive state privacy laws that may impose additional obligations and requirements on our business. Additionally, we may be subject to new laws governing the privacy of certain specific types of data, including, most notably, consumer health data. For example, Washington’s My Health My Data Act broadly defines consumer health data, creates a private right of action to allow individuals to sue for violations of the law, imposes stringent consent requirements, and grants consumers certain rights with respect to their health data, including to request deletion of their information.

In addition, varying jurisdictional requirements could increase the costs and complexity of our compliance efforts and violations of applicable data privacy laws can result in significant penalties. Any failure, or perceived failure, by us to comply with applicable data protection or other laws could result in proceedings or actions against us by governmental entities or others, subject us to significant fines, penalties, judgments, and negative publicity, require us to change our business practices, increase the costs and complexity of compliance, and adversely affect our business. Many of these new laws, if applicable, may require us to allow individuals to opt-out of the use of their personal information for targeted advertising, which may impact our marketing strategy. Additionally, businesses are legally required to notify affected individuals, governmental entities, and/or credit reporting agencies of certain security incidents affecting personal information. Such laws are not all consistent, and compliance in the event of a widespread security incident is complex and costly and may be difficult to implement. We may also be contractually required to indemnify and hold harmless clients from the costs or consequences of non-compliance with any laws, regulations, or other legal obligations relating to data privacy or health care laws or any inadvertent or unauthorized Processing of personal information or PHI that we store or handle as part of operating our business. Our existing general liability and cyber liability insurance policies may not cover, or may cover only a portion of, any potential claims related to security breaches to which we are exposed or may not be adequate to indemnify us for all or any portion of liabilities that may be imposed. See Part I, Item 1A, “Risk Factors—Risks Related to Legal and Governmental Regulation—We are subject to health care laws and data privacy and security laws and regulations governing our Processing of personal information, including PHI, personal health records, and payment card data” below for further discussion.

If our intellectual property rights are not adequately protected and enforced, we may not be able to build name recognition or protect our technology and products.

Our business depends on proprietary technology and content, including software, databases, confidential information and know-how, the protection of which is crucial to the success of our business. We rely on a combination of trademark, trade-secret, copyright, and other intellectual property laws, confidentiality procedures, and contractual provisions to protect our intellectual property rights in our proprietary technology, content, and brand. We may, over time, increase our investment in protecting our intellectual property through additional trademark, patent, and other intellectual property filings that could be expensive and time- consuming. Effective trademark, trade-secret, and copyright protection is expensive to develop and maintain, both in terms of initial and ongoing registration requirements and the costs of asserting our rights against third parties. Further, these measures may not be sufficient to offer us meaningful protection. If we are unable to protect our intellectual property and assert our rights in such intellectual property against third parties, our brand, competitive position, and business could be harmed, as third parties may be able to dilute our brand or commercialize and use technologies and software products that are substantially the same as ours without incurring the development and licensing costs that we have incurred. Any of our owned or licensed intellectual property rights could be challenged, invalidated, circumvented, infringed, or misappropriated, our trade secrets and other confidential information could be disclosed in an unauthorized manner to third parties, or our intellectual property rights may not be sufficient to permit us to take advantage of current market trends or otherwise provide us with competitive advantages, which could result in costly redesign efforts, discontinuance of certain products and solutions, or other competitive harm.

Monitoring unauthorized use of our intellectual property is difficult and costly. From time to time, we seek to analyze our competitors’ products and solutions, and may in the future seek to enforce our rights against potential infringement. However, the steps we have taken to protect our proprietary rights may not be adequate to prevent infringement or misappropriation of our intellectual property. We may not be able to detect unauthorized use of, or take appropriate steps to enforce, our intellectual property rights. Additionally, the intellectual property ownership and license rights surrounding AI technologies, which we are increasingly incorporating into our product offerings, have not been fully addressed by U.S. courts or other federal or state laws or regulations, and the use or adoption of AI technologies in our products and services may expose us to intellectual infringement or other intellectual property misappropriation claims related to AI training or output. Any inability to meaningfully protect or enforce our intellectual property rights could result in harm to our brand or our ability to compete and reduce demand for our technology and products. Moreover, our failure to develop and properly manage new intellectual property could adversely affect our market positions and business opportunities. Also, some of our

Table of Contents

products and solutions rely on technologies and software developed by or licensed from third parties. Any disruption or disturbance in such third-party products or services, which we have experienced in the past and may experience again in the future, could interrupt the operation of our platform, and could cause us to be in breach of contracts with our clients. We may not be able to maintain our relationships with such third parties or enter into similar relationships in the future on reasonable terms or at all.

Additional uncertainty may result from changes to intellectual property legislation enacted in the United States and elsewhere, and from interpretations of intellectual property laws by applicable courts and agencies. Accordingly, despite our efforts, we may be unable to obtain and maintain the intellectual property rights necessary to provide us with a competitive advantage. Our failure to obtain, maintain, and enforce our intellectual property rights could therefore have a material adverse effect on our business, financial condition, and results of operations.

Our business depends on our ability to use or license data and integrate third-party technologies.

We depend upon licenses from third parties for some of the technology and data used in our products and solutions, and for some of the technology platforms upon which these products and solutions are built and operate. We expect that we may need to obtain additional licenses from third parties in the future in connection with the development of our products and solutions. In addition, we obtain a portion of the data that we use from government entities and public records for specific client engagements. We believe that we have all rights necessary to use the data that is incorporated into, or used to develop and improve, our products and solutions. However, we cannot assure you that our licenses for information will allow us to use that information for all potential or contemplated products and solutions. In addition, our ability to use data to support and improve existing products and solutions and to develop new products and solutions is largely dependent upon the contractual rights we secure. For example, certain of our products depend on maintaining our data and analytics platform, which is populated with data disclosed to us by healthcare providers and payers with their consent. If these providers and/or payers revoke their consent for us to maintain, use, de-identify, and share this data, consistent with applicable law, our data assets could be degraded.

In the future, data providers could withdraw their data from us or restrict our usage for any reason, including if there is a competitive reason to do so, if legislation is passed restricting the use of the data, or if judicial interpretations are issued restricting use of the data that we currently use in or for development and maintenance of our products and solutions. In addition, data providers could fail to adhere to our quality control standards in the future, causing us to incur additional expense to appropriately utilize the data. If a substantial number of data providers were to withdraw or restrict their data, or if they fail to adhere to our quality control standards, and if we are unable to identify and contract with suitable alternative data suppliers and integrate these data sources into our offerings, our ability to provide products and solutions to our partners would be materially adversely impacted, which could have a material adverse effect on our business, financial condition, and results of operations.

We also integrate into our proprietary products and solutions and use third-party software to maintain and enhance, among other things, content generation and delivery, and to support our technology infrastructure.

Some of this software is proprietary and some is open source software. Our use of third-party technologies and open source software exposes us to increased risks, including, but not limited to, risks associated with the integration of new technology into our platform, the diversion of our resources from development of our own proprietary technology and our inability to generate revenue from licensed technology sufficient to offset associated acquisition and maintenance costs. These technologies may not be available to us in the future on commercially reasonable terms or at all and could be difficult to replace once integrated into our own proprietary products and solutions. Most of these licenses can be renewed only by mutual consent and may be terminated if we breach the terms of the license and fail to cure the breach within a specified period of time. Our inability to obtain, maintain, or comply with any of these licenses could delay development until equivalent technology can be identified, licensed, and integrated, which would harm our business, financial condition, and results of operations.

Most of our third-party licenses are non-exclusive and our competitors may obtain the right to use any of the technology covered by these licenses to compete directly with us. If our data suppliers choose to discontinue support of the licensed technology in the future, we might not be able to modify or adapt our own solutions.

The development, deployment, and use of AI in our products and solutions subjects us to risks that could adversely affect our business.

We have integrated AI and machine learning technologies into our products and solutions, and our future success will depend, in part, on our ability to leverage these technologies responsibly and effectively. The development and use of

Table of Contents

AI subjects us to risks that could adversely affect our business, financial condition and results of operations, and use of such technologies may not enhance our products or solutions, allow us to keep pace with competitors or benefit our business as intended. As these technologies are rapidly developing, it is not possible to predict all of the legal, operational, competitive, security, technological and other risks that may arise relating to the use of such technologies.

Our AI-enabled solutions depend on the quality and completeness of training data, and deficiencies could result in inaccurate, misleading, unreliable, or biased outputs that could harm our clients or expose us to liability. AI technologies are inherently complex, and our AI systems may not perform as intended, or may degrade in performance over time due to changes in underlying data, payer requirements, market conditions or for other reasons. Validating AI outputs requires substantial resources and consistent, reliable performance across diverse client environments and use cases is difficult. Any actual or perceived failures of our AI-enabled solutions could result in client dissatisfaction, claims against us, regulatory scrutiny, or reputational harm.

Our clients may impose contractual restrictions on our use of AI, or seek indemnification for AI-related errors, any of which could limit the value of our AI-enabled solutions or expose us to liability. Client reluctance to adopt AI features due to accuracy, liability, or regulatory concerns could also slow our ability to realize returns on our AI investments.

Moreover, AI is subject to a dynamic and rapidly evolving legal and regulatory environment, and our efforts, including the introduction of new products or changes to existing products, may result in new or enhanced governmental or regulatory scrutiny, litigation, ethical concerns, or other complications and liabilities. We may not be able to successfully respond to these rapidly evolving frameworks, laws, regulations and other requirements, and we may need to expend significant resources to adjust our operations or offerings in response.

The rapid advancement of generative and agentic AI also poses competitive risks. Large technology companies with significantly greater resources are deploying AI tools that could commoditize revenue cycle management functions core to our platform, and competitors may also adopt or deploy AI more quickly or effectively than we do. Agentic AI systems could automate workflows our clients currently rely on us to perform, and EHR and PM vendors may integrate AI capabilities directly into their platforms, reducing demand for our solutions. Generative AI may also lower barriers to entry, enabling new competitors to emerge more quickly. If we fail to keep pace with AI advancements or our AI-enabled solutions do not achieve market acceptance, our competitive position could be materially harmed.

Our use of “open source” software could adversely affect our ability to offer our products and solutions and subject us to possible litigation.

We have in the past incorporated and may in the future incorporate certain open source software into our products and solutions. Open source software is licensed by its authors or owners under open source licenses, which in some instances may subject us to certain unfavorable conditions, including requirements that we offer our products and solutions that incorporate such open source software for no cost, that we make publicly available the source code for any modifications or derivative works we create based upon, incorporating or using the open source software, or that we license such modifications or derivative works under the terms of the particular open source license. In addition, the use of third-party open source software could expose us to greater risks than the use of third-party commercial software to the extent open-source licensors do not provide warranties or controls on the functionality or origin of the software equivalent to those provided by third-party commercial software providers. Further, the public availability of open source software may make it easier for attackers to target and compromise our platform through cyber-attacks. Open sourcing such software requires us to make the source code publicly available, and therefore can limit our ability to protect our intellectual property rights with respect to that software. From time to time, companies that use open source software have faced claims challenging the use of open source software or compliance with open source license terms. Furthermore, there is an increasing number of open source software license types, many of which have not been tested in a court of law. We could be subject to suits by parties claiming copyright infringement or noncompliance with open source licensing terms. While we monitor the use of open source software and try to ensure that none is used in a manner that would require us to disclose our proprietary source code or that would otherwise breach the terms of an open source license, such use could inadvertently occur, in part because open source license terms are often ambiguous. Any requirement to disclose our proprietary source code or pay damages for breach of contract could have a material adverse effect on our business, financial condition, and results of operations and could help our competitors develop products and solutions that are similar to or better than ours.

Table of Contents

Third parties may initiate legal proceedings alleging that we are infringing or otherwise violating their intellectual property rights.

Our commercial success depends on our ability to develop and commercialize our products and solutions and use our proprietary technology without infringing the intellectual property or proprietary rights of third parties. However, from time to time, we may be subject to legal proceedings and claims in the ordinary course of business with respect to intellectual property. Intellectual property disputes can be costly to defend and may cause our business, operating results, and financial condition to suffer. As the market for healthcare technology solutions in the United States expands and more patents are issued, the risk increases that there may be patents issued to third parties that relate to our products and technology of which we are not aware or that we must challenge to continue our operations as currently contemplated. Whether merited or not, we may face allegations that we, our licensees, or parties indemnified by us have infringed or otherwise violated the patents, trademarks, copyrights, or other intellectual property rights of third parties. Such claims may be made by competitors seeking to obtain a competitive advantage or by other parties. Additionally, so-called non-practicing entities collect patents and make claims of infringement in an attempt to extract settlements from companies like ours. We have faced such claims, although we do not believe they are material, and may attract such claims in the future. We may also face allegations that our employees have misappropriated the intellectual property or proprietary rights of their former employers or other third parties.

It may be necessary for us to initiate litigation to defend ourselves in order to determine the scope, enforceability, and validity of third-party intellectual property or proprietary rights, or to establish our respective rights. Regardless of whether claims that we are infringing patents or other intellectual property rights have merit, such claims can be time-consuming, divert management’s attention and financial resources, and can be costly to evaluate and defend. Results of any such litigation are difficult to predict and may require us to stop commercializing or using our products or technology, obtain licenses, modify our solutions and technology while we develop non-infringing substitutes, or incur substantial damages, settlement costs, or face a temporary or permanent injunction prohibiting us from marketing or providing the affected products and solutions. If we require a third-party license, it may not be available on reasonable terms or at all, and we may have to pay substantial royalties, upfront fees, or grant cross-licenses to intellectual property rights for our products and solutions. We may also have to redesign our products or solutions so they do not infringe third-party intellectual property rights, which may not be possible or may require substantial monetary expenditures and time, during which our technology and products may not be available for commercialization or use. Even if we have an agreement to indemnify us against such costs, the indemnifying party may be unable to uphold its contractual obligations. If we cannot or do not obtain a third-party license to the infringed technology, license the technology on reasonable terms, or obtain similar technology from another source, our revenue and earnings could be adversely impacted.

Further, some third parties may be able to sustain the costs of complex litigation more effectively than we can because they have substantially greater resources. And even if resolved in our favor, litigation or other legal proceedings relating to intellectual property claims may cause us to incur significant expenses and could distract our technical and management personnel from their normal responsibilities. In addition, there could be public announcements of the results of hearings, motions, or other interim proceedings or developments, and if securities analysts or investors perceive these results to be negative, it could have a material adverse effect on the price of our common stock. Moreover, any uncertainties resulting from the initiation and continuation of any legal proceedings could have a material adverse effect on our ability to raise the funds necessary to continue our operations. Assertions by third parties that we violate their intellectual property rights could therefore have a material adverse effect on our business, financial condition, and results of operations.

We may be subject to claims that our employees, consultants, or independent contractors have wrongfully used or disclosed confidential information of third parties.

We receive confidential and proprietary information from third parties in connection with the operation of our business. In addition, we may employ individuals who were previously employed at other technology companies, including our competitors. We may be subject to claims that we or our employees, consultants, or independent contractors have inadvertently or otherwise improperly used or disclosed confidential information of these third parties or our employees’ or contractors’ former employers. Further, we may be subject to ownership disputes in the future arising, for example, from conflicting obligations of employees, consultants, or others who are involved in developing our solutions. We may also be subject to claims that former employees, consultants, independent contractors or other third parties have an ownership interest in our patents or other intellectual property. Litigation may be necessary to defend against these and other claims challenging our right to and use of confidential and proprietary information. In addition to paying monetary damages, if we fail in defending against any such claims we may lose our rights therein, which could have a material adverse effect on our

Table of Contents

business. Even if we are successful in defending against these claims, litigation could result in substantial cost and be a distraction to our management and employees.

Risks Related to Legal and Governmental Regulation

We conduct business in a heavily regulated industry.

Our current and future arrangements with our channel partners, healthcare professionals, consultants, clients, and third-party payors subject us to various federal and state fraud and abuse laws and other healthcare laws, including, without limitation, the AKS and state kickback laws, the federal civil and criminal false claims laws, civil monetary penalties laws, the Stark Law, HIPAA, and the regulations promulgated under such laws. These laws impact, among other things, proposed sales, marketing, and educational programs, and other interactions with healthcare professionals and provider clients. For more information regarding the risks related to these laws and regulations please see Part I, Item 1, “Business—Regulation—Healthcare fraud and abuse provisions.”

These laws are complex, may change rapidly, and the scope and enforcement and application of each of these laws to our specific services and relationships may not be clear and may be applied to our business in ways we do not anticipate. Federal and state regulatory and law enforcement authorities continue to focus on enforcement activities with respect to Medicare, Medicaid, other government and third-party payor programs, and other healthcare reimbursement laws and rules in an effort to reduce overall healthcare spending. Federal and state enforcement bodies have recently increased their scrutiny of interactions between healthcare companies and healthcare providers, which has led to a number of investigations, prosecutions, convictions, and settlements in the healthcare industry. Because of the breadth of these laws and the narrowness of their statutory or regulatory exceptions and safe harbors, some of our business activities may be subject to challenge under one or more of them. Federal government healthcare reforms, cost-cutting, efficiency, and fraud and abuse initiatives, and other proposed or future changes may also result in reductions in healthcare reimbursement, healthcare spending, and the federal workforce that oversees healthcare programs, which may have a significant adverse impact on our business. In addition, new and evolving payment structures, for example, such as accountable care organizations and other arrangements involving combinations of healthcare providers who share savings, potentially implicate anti-kickback and other fraud and abuse laws. The government has prosecuted revenue cycle management service providers for causing the submission of false or fraudulent claims in violation of the FCA, and vendors of EHR software for, among other things, misrepresenting the capabilities of their software and payment of kickbacks to certain customers in exchange for promoting their products in violation of the AKS and the FCA. Errors created by our platform and our proprietary products and solutions that relate to entry, formatting, preparation, or transmission of claims, reporting of quality or other data pursuant to value-based purchasing initiatives, or cost report information may be alleged or determined to cause the submission of false claims or otherwise be in violation of these laws. As we continue to build new and evolving technologies, such as AI, machine learning, analytics, and biometrics, into our products and solutions, our business may become subject to additional complex and evolving regulatory requirements pertaining to the sale or use of these technologies. The sale of these technologies, or their use by us or by our clients or partners, may also subject us to additional risks, including reputational harm, competitive harm, or legal liabilities.

Ensuring that our internal operations and future business arrangements with third parties comply with applicable healthcare laws and regulations will involve substantial costs. Achieving and sustaining compliance requires us to implement controls across our entire organization which may prove costly and challenging to monitor and enforce. The risk of our being found in violation of healthcare laws and regulations is increased by the fact that their provisions are sometimes open to a variety of interpretations. We cannot assure you that our arrangements and activities will be deemed outside the scope of these laws or that increased enforcement activities will not directly or indirectly have a material adverse effect on our business, financial condition, or results of operations.

It is possible that governmental authorities will conclude that our business practices do not comply with current or future statutes, regulations, agency guidance, or case law involving applicable fraud and abuse or other healthcare laws and regulations. If our operations are found to be in violation of any of the laws described above or any other governmental laws and regulations that may apply to us, we may be subject to significant penalties, including administrative, civil, and criminal penalties, damages, fines, disgorgement, the exclusion from participation in federal and state healthcare programs, disqualification from providing services to healthcare providers doing business with government programs, individual imprisonment, reputational harm, and the curtailment or restructuring of our operations, requirements to change or terminate some portions of our operations or business, as well as additional reporting obligations and oversight if we become subject to a corporate integrity agreement or other agreement to resolve allegations of non-compliance with these laws. If we are determined to have violated any of these laws, we may be required to give our clients the right to terminate

Table of Contents

our services agreements with them and/or required to refund portions of our base fee revenues and incentive payment revenues, any of which could have a material adverse effect on our business and results of operations. Likewise, if any of the physicians or other providers or entities with whom we expect to do business are found to not be in compliance with applicable laws, they may be subject to criminal, civil, or administrative sanctions, including exclusions from government funded healthcare programs and imprisonment as well. Any violations by, and resulting penalties or exclusions imposed upon, our clients could adversely affect their financial condition and, in turn, have a material adverse effect on our business and results of operations. Even absent an alleged violation of law by us, participants in the healthcare industry receive inquiries or subpoenas to produce documents and provide testimony in connection with government investigations. We could be required to expend significant time and resources to comply with these requests, and the attention of our management team could be diverted by these efforts. Further, defending against any such actions can be costly and time consuming, and may require significant financial and personnel resources. Therefore, even if we are successful in defending against any such actions that may be brought against us, our business may be impaired. If any of the above occur, our ability to operate our business and our results of operations could be adversely affected.

The healthcare regulatory and political framework is uncertain and evolving.

Almost all of our revenue is derived from the healthcare industry, which is subject to changing political, legislative, regulatory, and other influences. Healthcare laws and regulations are rapidly evolving, including as a result of changes in the U.S. administration resulting in changes in federal law and enforcement, and may change significantly in the future, which could adversely affect our financial condition and results of operations. For example, in March 2010, the Patient Protection and Affordable Care Act (the “ACA”) was adopted, which is a healthcare reform measure that provides healthcare insurance for millions of Americans. The ACA includes a variety of healthcare reform provisions and requirements that substantially changed the way healthcare is financed by both governmental and private insurers, which significantly impact our industry and our business. We are unable to predict the full impact of any health reform initiatives or legislative updates to current healthcare laws on our operations in light of the uncertainty regarding whether, when, and how alternative reforms, if any, may be enacted, the timing of enactment and implementation of alternative provisions and the impact of alternative provisions on various healthcare industry participants.

We are also unable to predict how recent regulatory reforms regarding information blocking, algorithm transparency, interoperability, and health data will impact our business and whether the new presidential administration will continue to enforce or implement past reforms. For example, President Trump’s Administration revoked President Biden’s executive order on AI and it is unclear how the new Administration will implement final rules on Health Data, Technology and Interoperability (HTI-1, HTI-2, and HTI-3) that took effect in 2024. Future legislative, executive, and regulatory proposals may constitute a significant departure from previous regulations regarding patient data. While certain of these rules benefit us in that certain EHR vendors will no longer be permitted to interfere with our attempts at integration, they may also make it easier for other similar companies to enter the market, creating increased competition and reducing our market share.Changes to the legal, regulatory or political environment may require management’s attention, divert resources from other areas, and expose us to potential liability.

In addition, we are subject to various other laws and regulations, including, among others, anti- kickback laws, antitrust laws, and the privacy and data protection laws described below. See Part I, Item 1, “Business— Regulation—Healthcare fraud and abuse provisions.”

We are subject to health care laws and data privacy and security laws and regulations governing our Processing of personal information, including PHI, personal health records, and payment card data.

Numerous complex federal and state laws and regulations govern the Processing of personal information, including PHI, personal health records, and payment card data. State laws may be even more restrictive and not preempted by HIPAA and may be subject to varying interpretations by the courts and government agencies. These laws and regulations, including their interpretation by governmental agencies, are subject to frequent change and could have a negative impact on our business. Further, these varying interpretations could create complex compliance issues for us and our partners and potentially expose us to additional expense, liability, penalties, negatively impact our client relationships, and lead to adverse publicity, and these risks could adversely affect our business in the short and long term. See Part I, Item 1, “Business— Regulation—Federal and state health information privacy and security laws.”

We are a “covered entity” as defined under HIPAA when we provide our clearinghouse services, and we also are a “business associate” as defined under HIPAA for other covered entities when we provide revenue cycle management and other solutions. HHS OCR may impose civil penalties on both covered entities and business associates for their failure to

Table of Contents

comply with HIPAA requirements. These requirements are subject to change. In December 2024, HHS OCR issued a notice of proposed rulemaking on the HIPAA Security Rule, which is specifically aimed at strengthening cybersecurity of electronic PHI, and we are monitoring this proposed rulemaking. The U.S. Department of Justice is responsible for criminal prosecutions under HIPAA. Penalties can vary significantly depending on a number of factors, such as whether the covered entity’s or business associate’s failure to comply was due to willful neglect. Violations of HIPAA could result in substantial criminal and civil penalties, including up to 10 years in prison for each violation. HIPAA also authorizes state attorneys general to file suit on behalf of the residents of their states. While HIPAA does not create a private right of action that would allow individuals to sue in civil court for HIPAA violations, its standards have been used as the basis for the duty of care in state civil suits, such as those for recklessness in misusing individuals’ health information. If we are subject to investigation or litigation related to an alleged violation of HIPAA, then we may elect to resolve the matter through additional reporting and oversight obligations through a resolution agreement and corrective action plan with HHS to settle allegations of HIPAA non-compliance. Such settlement could require payment of a civil penalty or damages, corrective action, and/or monitoring of our business by a third party.

The security measures that we and our third-party vendors and subcontractors have in place designed to comply with privacy and data protection laws may not protect our facilities and systems from security breaches or incidents, including acts of vandalism or theft, computer viruses, misplaced or lost data, malfeasance, programming, and human errors or other similar events. We may also be liable for privacy and security breaches and failures of our business associates and subcontractors. Even though we provide for certain protections through our agreements with our subcontractors, we still have limited control over their actions and practices. A breach of privacy or security of individually identifiable health information by a subcontractor may result in an enforcement action, including criminal and civil liability, against us. We are not able to predict the extent of the impact such incidents may have on our business. Our failure to comply with HIPAA and other health privacy laws may also result in criminal and civil liability. Enforcement actions against us could be costly and could interrupt regular operations, which may adversely affect our business. While we have not received any notices of violation of the applicable privacy and data protection laws and believe we are in compliance with such laws, there can be no assurance that we will not receive such notices in the future.

Our AI platform and the data it uses may also subject us to additional risks. We use de-identified claims data to train our revenue cycle management AI. In order to de-identify PHI for our AI, we must have explicit rights and permissions to do so from our clients. If we do not de-identify PHI in accordance with HIPAA’s safe harbor method or if we do not have rights or permissions to de-identify PHI, but de-identify PHI for such purposes, a regulator or client may consider such actions to be a breach of HIPAA’s requirements or of contractual requirements, and we may be subject to criminal and civil liability or other actions and our clients may not renew or terminate their contracts with us.

Many states are also enacting legislation on the use, creation, and deployment of AI. For example, in March 2024, Utah enacted the Artificial Intelligence Policy Act, which requires disclosures to consumers about the use of AI in certain circumstances, including advance AI use disclosures by physicians and individuals in other regulated occupations. In Colorado, the Colorado AI Act will regulate the development, deployment, and use of certain AI systems, including with respect to algorithmic discrimination and decisions with respect to healthcare services. Developers of generative AI systems would be required to complete impact assessments and disclose measures the developer has taken to mitigate any known or reasonably foreseeable risks of algorithmic discrimination that may arise from deployment of certain “high-risk” AI systems that are developed and marketed to make consequential decisions, such as decisions that have a material legal or similarly significant effect on consumer access to certain services, including healthcare and financial services. Other states have introduced similar bills.

Even when HIPAA does not apply, according to the Federal Trade Commission (the “FTC”), failing to take appropriate steps to keep consumers’ personal information secure constitutes unfair acts or practices in or affecting commerce in violation of Section 5(a) of the Federal Trade Commission Act (the “FTCA”) 15 U.S.C. § 45(a). The FTC expects a company’s data security measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities. Individually identifiable health information is considered sensitive data that merits stronger safeguards. The FTC’s current guidance for appropriately securing consumers’ personal information is similar to what is required by the HIPAA security regulations, but this guidance may change in the future, resulting in increased complexity and the need to expend additional resources to ensure we are complying with the FTCA. For information that is not subject to HIPAA and deemed to be “personal health records,” the FTC may also impose penalties for violations of the Health Breach Notification Rule (“HBNR”) to the extent we are considered a “personal health record- related entity” or “third party service provider.” The FTC has taken several enforcement actions under HBNR this year and indicated that the FTC will continue to protect consumer privacy through greater use of the agency’s enforcement authorities. As a result, we

Table of Contents

expect even greater scrutiny by federal and state regulators, partners, and consumers of our Processing of health information, particularly with our AI-enabled solutions. Additionally, federal and state consumer protection laws are increasingly being applied by the FTC and states’ attorneys general to regulate the Processing of personal information, through websites or otherwise, and to regulate the presentation of website content.

Other federal and state laws that restrict the use and protect the privacy and security of personally identifiable information are, in many cases, not preempted by HIPAA and may be subject to varying interpretations by the courts and government agencies. These varying interpretations can create complex compliance issues for us and our partners and potentially expose us to additional expense, adverse publicity, and liability, any of which could adversely affect our business. Recently, several states have enacted consumer health data laws, which generally require consent for the collection, use, or sharing of any “consumer health data,” which is typically defined as personal information that is linked or reasonably linkable to a consumer and that identifies a consumer’s past, present, or future physical or mental health.

Future laws, regulations, standards, obligations, amendments, and changes in the interpretation of existing laws, regulations, standards, and obligations could impair our or our clients’ ability to Process information relating to consumers, which could decrease demand for our platform, increase our costs, and impair our ability to maintain and grow our client base, and increase our revenue. New laws, amendments to or re-interpretations of existing laws and regulations, industry standards, and contractual obligations could impair our or our clients’ ability to collect, use, or disclose information relating to patients or consumers, which could decrease demand for our platform offerings, increase our costs, and impair our ability to maintain and grow our client base, and increase our revenue. Accordingly, we may find it necessary or desirable to fundamentally change our business activities and practices or to expend significant resources to modify our software or platform and otherwise adapt to these changes.

We are also subject to self-regulatory standards and industry certifications that may legally or contractually apply to us. These include the Payment Card Industry Data Security Standards (“PCI-DSS”) and AICPA Systems and Organization Controls 2 (“SOC 2”), with which we are currently compliant, and HITRUST certification, which we currently maintain. In the event we fail to comply with the PCI-DSS or fail to maintain our SOC 2 or HITRUST certification, we could be in breach of our obligations under client and other contracts, fines, and other penalties could result, and we may suffer reputational harm and damage to our business. Further, our clients may expect us to comply with more stringent privacy, data storage, and data security requirements than those imposed by laws, regulations or self-regulatory requirements, and we may be obligated contractually to comply with additional or different standards relating to our handling or protection of data.

Any failure or perceived failure by us to comply with domestic laws or regulations, industry standards, or other legal obligations, or any actual or suspected breach or privacy or security incident, whether or not resulting in unauthorized access to, or acquisition, release or transfer of personally identifiable information or other data, may result in governmental enforcement actions and prosecutions, private litigation (including class actions), fines, and penalties or adverse publicity and could cause our clients to lose trust in us, which could have an adverse effect on our reputation and business. We may be unable to make such changes and modifications in a commercially reasonable manner or at all, and our ability to develop new products and features could be limited. Any of these developments could harm our business, financial condition, and results of operations. Privacy and data security concerns, whether valid or not valid, may inhibit retention of our platform or services by existing clients or adoption of our platform or services by new clients.

The healthcare industry is rapidly evolving, and we may experience reduced revenues and/or be forced to reduce our prices in response to changes to the healthcare regulatory landscape. Value-based care, surprise medical billing, and other laws and regulations that reduce or otherwise affect physician payments and reimbursement could adversely affect the number of transactions we process and our ability to recover charges for our clients’ services.

We may be subject to revenue reductions or pricing pressures arising from various sources, including government actions and the trend of payors shifting to new reimbursement models and value-based care arrangements that incentivize healthcare providers to improve the health of their patients while managing medical expenses of a particular population. Value-based care reimbursement models implemented by government healthcare programs or private third-party payors could materially change the manner in which our clients are reimbursed. Our clients and other entities with which we have business relationships are also affected by other changes in statutes, regulations, and limitations on government spending for Medicare, Medicaid, and other programs. Recent and future government actions, including federal government cost-cutting, efficiency, and fraud and abuse initiatives may also result have a significant adverse impact on our business, and legislation or executive actions could limit or attempt to limit government spending for Medicare and Medicaid programs, limit payments to healthcare providers, initiate new and expanded value-based care reimbursement programs, impose price

Table of Contents

controls, and create other programs that potentially could have an adverse effect on our clients and the other entities with which we have a business relationship. If such actions or programs reduce the number of transactions, our revenues may decline along with our ability to absorb overhead costs, which may leave our business less profitable. Any failure to adequately implement strategic initiatives to adjust to these developments could have a material adverse impact on our business.

For example, the federal No Surprises Act, enacted in 2020, has impacted our clients, and may impact our business, product offerings, and procedures surrounding claims processing. The No Surprises Act may impact transaction volume and the manner in which our clients use our platform and may necessitate changes to our client contracting model to better align with the ways that our clients are being reimbursed. The No Surprises Act prohibits, among other things, “balance billing” or “surprise billing” by limiting patient costs for services to cost-sharing amounts and by banning providers from billing patients above these cost-sharing amounts. The No Surprises Act also created additional price transparency requirements, including the requirement that providers send patients and health plans a good faith estimate of the expected charges for furnishing certain items or services. If the actual charges are substantially higher than the estimate, the patient can invoke a dispute resolution process to challenge the higher amount. Further, subject to limited exceptions, the No Surprises Act also prohibited out-of-network providers from charging patients more than the relevant in-network cost sharing amount.

A number of state governments have also enacted or may enact legislation on surprise medical bills, which may adversely affect our revenue in those states. These measures could limit the amount our clients can recover for certain services they furnish where they have not contracted with the insurer, and therefore could have a material adverse effect on our business, financial condition, results of operations, and cash flows. For example, state surprise billing laws have established payment standards based on the median in-network rate or a multiplier of what Medicare would pay. These payment standards are often less than the average out-of-network payment and could therefore have an adverse effect on reimbursement rates, and we may experience additional impacts if more states adopt such laws. Moreover, these measures could affect our client’s ability to contract with certain payors or under historically similar terms, and may cause, and the prospect of these changes may cause, payors to seek to terminate or modify their contracts with our clients, further affecting our business, financial condition, results of operations, and cash flows. There is also risk that additional legislation at the federal and state level will give rise to major third-party payors leveraging this legislation or related changes as an opportunity to terminate and renegotiate existing reimbursement rates, which may also adversely affect our business, financial condition, results of operations, and cash flows.

Additionally, there have been numerous federal legislative and administrative actions that have affected government programs, including adjustments that have reduced or increased payments to physicians and other healthcare providers and adjustments that have affected the complexity of our work. For example, the Medicare Access and CHIP Reauthorization Act of 2015 established a Quality Payment Program that requires physician groups to track and report a multitude of data relating to quality, clinical practice improvement activities, use of an EHR, and cost. Success or failure with respect to these measures may impact reimbursement in future years. Similarly, hospitals participating in the Medicare Value-Based Purchasing Program, which requires the reporting of quality and cost measures, may receive a net decrease in payments. It is possible that the federal or state governments will implement additional reductions, increases, or changes in reimbursement under government programs that will adversely affect our client base or increase the cost of providing our services. Any such changes could adversely affect our own financial condition by reducing the reimbursement rates of our clients.

We may be a party to legal, regulatory, and other proceedings that could result in adverse outcomes.

We have been, and may in the future be, a party to legal and regulatory proceedings and investigations, and other proceedings and investigations arising in the ordinary course of business, such as claims brought by our clients in connection with commercial disputes and employment claims made by our current or former employees. Claims may also be asserted by or on behalf of a variety of other parties, including government agencies, patients or vendors of our clients, or stockholders. In addition, there are an increasing number of, and we may be subject to, investigations and proceedings in the healthcare industry generally that seek recovery under HIPAA, anti-kickback laws, false claims laws, civil monetary penalties laws, the Stark Law, state laws, and other statutes and regulations applicable to our business as described in more detail above. These and other similar statutory requirements impose statutory penalties for proven violations, which could be significant. We also may be subject to legal proceedings under non-healthcare federal and state laws affecting our business, such as the TCPA, the FDCPA, the Fair Credit Reporting Act, CAN-SPAM Act, Junk Fax Act, the CCPA, employment, banking and financial services, and USPS laws and regulations, as further detailed above and below. Such proceedings are inherently unpredictable, and the outcome can result in verdicts and/or injunctive relief that may affect

Table of Contents

how we operate our business or we may enter into settlements of claims for monetary payments. In some cases, substantial non-economic remedies or punitive damages may be sought. Governmental investigations, audits, and other reviews could also result in criminal penalties or other sanctions, including restrictions, changes in the way we conduct business, or exclusion from participation in government programs. We evaluate our exposure to these legal and regulatory proceedings and establish reserves for the estimated liabilities in accordance with GAAP. Assessing and predicting the outcome of these matters involves substantial uncertainties. Unexpected outcomes in these legal proceedings, or changes in management’s evaluations or predictions and accompanying changes in established reserves, could have a material adverse impact on our business, results of operations, or financial condition.

Litigation is costly, time-consuming, and disruptive to normal business operations. The defense of these matters could also result in continued diversion of our management’s time and attention away from business operations, which could also harm our business. Insurance may not cover existing or future claims, be sufficient to fully compensate us for one or more of such claims, or continue to be available on terms acceptable to us. A claim brought against us that is uninsured or underinsured could result in unanticipated costs, thereby reducing our results of operations and resulting in a reduction in the trading price of our common stock. Even if these matters are resolved in our favor, the uncertainty and expense associated with unresolved legal proceedings could harm our business and reputation.

We are contractually required to comply with the Bank Secrecy Act and Anti-Money Laundering (“BSA/AML”) laws and regulations as a payment facilitator in certain instances.

We are contractually required to comply with certain anti-money laundering laws and regulations. For instance, we comply with certain provisions of the Bank Secrecy Act, as amended by the USA PATRIOT Act of 2001, and its implementing regulations (collectively, the “BSA”), which are enforced by the Financial Crimes Enforcement Network (“FinCEN”), a bureau of the U.S. Department of the Treasury and the U.S. Department of Justice. We have policies, procedures, systems, and controls designed to identify and address potentially impermissible transactions under these laws and regulations. In addition, we provide BSA/AML training to certain employees to help ensure compliance with such contractual requirements. However, any failure to comply with such contractual requirements could subject us to potential liability for breach of contract, which could adversely affect our business or financial condition.

Existing laws regulate our ability to engage in certain marketing activities.

We rely on a variety of marketing techniques, including email and telephone marketing. These activities are regulated by legislation such as the CAN-SPAM Act and the TCPA. The CAN-SPAM Act imposes penalties for the transmission of commercial emails that do not comply with certain requirements, such as providing an opt-out mechanism for stopping future emails from the sender. The TCPA places certain restrictions on making outbound calls, faxes, and text messages to consumers. Any failure by us to comply fully with any such applicable laws or regulations may subject us to substantial fines and penalties. In addition, any future restrictions in laws such as the CAN-SPAM Act, the TCPA, and various other laws and regulations regarding marketing and solicitation activities could adversely affect the continuing effectiveness of our marketing efforts and could force changes in our marketing strategies. If this occurs, we may not be able to develop adequate alternative marketing strategies, which could have a material adverse impact on our results of operations.

We must comply fully with website accessibility standards.

We conduct business through various internet websites and web-based applications that are subject to accessibility requirements. Courts have ruled that the Americans with Disabilities Act (“ADA”) applies to internet websites and other digital experiences and litigation related to ADA website accessibility has soared in recent years. Failing to comply with those requirements could leave us subject to claims, litigation, lawsuits, and, ultimately, substantial fines and penalties.

We could be subject to changes in our tax rates, the adoption of new tax legislation or exposure to additional tax liabilities.

Current economic and political conditions make tax rates in any jurisdiction subject to significant change. Our future effective tax rates could also be affected by changes in the valuation of our deferred tax assets and liabilities, or changes in tax laws or their interpretation, including changes in tax laws affecting our products and solutions and the healthcare industry more generally. We are also subject to the examination of our tax returns and other documentation by the Internal Revenue Service and state tax authorities. We regularly assess the likelihood of an adverse outcome resulting from these examinations to determine the adequacy of our provision for taxes. There can be no assurance as to the outcome

Table of Contents

of these examinations or that our assessments of the likelihood of an adverse outcome will be correct. If our effective tax rates were to increase or if the ultimate determination of our taxes owed is for an amount in excess of amounts previously accrued, then this could materially and adversely impact our financial condition and results of operations.

The Tax Cuts and Jobs Act of 2017 (the “TCJA”) eliminated the option to deduct research and development expenses for tax purposes in the year incurred and requires taxpayers to capitalize and subsequently amortize such expenses over five years for research activities conducted in the United States and over 15 years for research activities conducted outside the United States. This change was effective January 1, 2022. Unless the United States Treasury Department issues regulations that narrow the application of this provision or the provision is deferred, modified, or repealed by Congress, it could harm our future operating results by effectively increasing our future tax obligations. The actual impact of this provision will depend on multiple factors, including the amount of research and development expenses we will incur, whether we achieve sufficient income to fully utilize such deductions, and whether we conduct our research and development activities inside or outside the United States.

Our ability to use our net operating losses (“NOLs”) to offset future taxable income may be subject to certain limitations.

Future changes in our stock ownership, some of which are outside of our control, could result in an ownership change under Section 382 of the Internal Revenue Code of 1986, as amended (the “Code”). In addition, under the TCJA, as amended by The Coronavirus Aid, Relief, and Economic Security Act of 2020, the amount of post 2017 NOLs that we are permitted to utilize in any taxable year is limited to 80% of our taxable income in such year, where taxable income is determined without regard to the NOL deduction itself. For these reasons, we may not be able to realize a tax benefit from the use of our NOLs. We have a valuation allowance related to our NOLs to recognize only the portion of the NOL that is more likely than not to be realized.

Goodwill and other intangible assets, net represent approximately 92% of our total assets as of December 31, 2025, and we could suffer losses due to asset impairment charges.

In accordance with GAAP, goodwill and intangible assets with an indefinite life are not amortized but are subject to a periodic impairment evaluation. We assess our goodwill and other intangible assets for impairment periodically in accordance with applicable authoritative accounting guidance. Our ability to realize the value of the goodwill and intangible assets will depend on the future cash flows of the businesses we have acquired, which in turn depend in part on how well we have integrated these businesses into our own business. Judgments made by management relate to the expected useful lives of long-lived assets and our ability to realize undiscounted cash flows of the carrying amounts of such assets. The accuracy of these judgments may be adversely affected by several factors, including significant:

•underperformance relative to historical or projected future operating results;

•changes in the manner of our use of acquired assets or the strategy for our overall business;

•negative industry or economic trends; or

•decline in our market capitalization relative to net book value for a sustained period.

These types of events or indicators and the resulting impairment analysis could result in impairment charges in the future. If we are not able to realize the value of the goodwill and intangible assets, we may be required to incur material charges relating to the impairment of those assets. Such impairment charges could materially and negatively affect our results of operations and financial condition.

Risks Related to our Indebtedness

We have a substantial amount of debt, which could adversely affect our financial position and our ability to raise additional capital and prevent us from fulfilling our obligations under our obligations.

As of December 31, 2025, we had outstanding indebtedness of approximately $1.5 billion, consisting of $1.4 billion outstanding under our First Lien Credit Facility and $80 million outstanding under our Receivables Facility. Additionally, we had $500 million of availability under our Revolving Credit Facility as of December 31, 2025. As of December 31, 2025, there is no outstanding balance on our Revolving Credit Facility.

Table of Contents

Our substantial indebtedness may:

•make it difficult for us to satisfy our financial obligations, including with respect to our indebtedness;

•limit our ability to borrow additional funds for working capital, capital expenditures, acquisitions, or other general business purposes;

•require us to use a substantial portion of our cash flow from operations to make debt service payments instead of other purposes, thereby reducing the amount of cash flow available for future working capital, capital expenditures, acquisitions, or other general business purposes;

•expose us to the risk of increased interest rates as certain of our borrowings, including under our Credit Facilities, are at variable rates of interest;

•limit our ability to pay dividends;

•limit our flexibility to plan for, or react to, changes in our business and industry;

•place us at a competitive disadvantage compared with our less-leveraged competitors;

•increase our vulnerability to the impact of adverse economic, competitive, and industry conditions; and

•increase our cost of borrowing.

Restrictive covenants in the agreements governing our Credit Facilities may restrict our ability to pursue our business strategies.

The credit agreements governing our Credit Facilities contain, and any future credit agreements we may enter into may contain, a number of covenants that, among other things, restrict our ability to, subject to certain exceptions:

•incur additional indebtedness and guarantee indebtedness;

•create or incur liens;

•enter into sale and lease-back transactions;

•engage in fundamental changes;

•sell, transfer, or otherwise dispose of assets;

•pay dividends and distributions or repurchase capital stock;

•make investments or acquisitions;

•prepay, redeem, repurchase, or amend the terms of certain subordinated indebtedness;

•create negative pledge clauses; and

•enter into transactions with affiliates.

As a result of these covenants and restrictions, we are and will be limited in how we conduct our business, and we may be unable to raise additional debt or equity financing to compete effectively or to take advantage of new business opportunities.

In addition, the Revolving Credit Facility requires us to maintain a first lien leverage ratio, to be tested on the last day of each fiscal quarter for which financial statements have been delivered, but only if, on the last day of such fiscal quarter, the aggregate amount of loans under the Revolving Credit Facility and certain letters of credit (in each case subject

Table of Contents

to certain exceptions specified therein) which are outstanding and/or issued, as applicable, exceeds 35% of the total amount of the commitments in respect of the Revolving Credit Facility.

Our ability to comply with these covenants may be affected by events beyond our control, and we may not be able to meet those covenants. The terms of any future indebtedness we may incur could include more restrictive covenants. A breach of any such covenants could result in a default under the applicable credit agreement, which could cause all of the outstanding indebtedness under such debt agreement to become immediately due and payable and terminate all commitments to extend further credit. If we are unable to meet our obligations, we may be required to repay any outstanding amounts with sources of capital we may otherwise use to fund our business, operations, and strategy. In addition, if we are forced to refinance these borrowings on less favorable terms, our results of operations and financial condition could be adversely affected.

Interest rate fluctuations may affect our results of operations and financial condition.

Because a substantial portion of our debt is variable-rate debt, fluctuations in interest rates could have a material effect on our business. We currently utilize, and may in the future utilize, derivative financial instruments such as interest rate swaps to hedge some of our exposure to interest rate fluctuations, but such instruments may not be effective in reducing our exposure to interest fluctuations, and we may discontinue utilizing them at any time. As a result, we may incur higher interest costs if interest rates increase. These higher interest costs could have a material adverse impact on our financial condition and the levels of cash we maintain for working capital.

In order to support the growth of our business, we may need to incur additional indebtedness under our current Credit Facilities or seek capital through new equity or debt financings, which sources of additional capital may not be available to us on acceptable terms or at all.

We intend to continue to make significant investments to support our business growth, respond to business challenges or opportunities, develop new products and solutions, enhance our existing products and solutions, enhance our operating infrastructure, and potentially acquire complementary businesses and technologies.

Our future capital requirements may be significantly different from our current estimates and will depend on many factors, including the need to:

•finance unanticipated working capital requirements;

•develop or enhance our technological infrastructure and our existing products and solutions;

•fund strategic relationships, including channel partners, joint ventures, and co-investments;

•respond to competitive pressures; and

•acquire complementary businesses, technologies, products, or solutions.

Accordingly, we may need to engage in equity or debt financings or collaborative arrangements to secure additional funds. Additional financing may not be available on terms favorable to us, or at all. If we raise additional funds through further issuances of equity or equity-linked securities, our existing stockholders could suffer significant dilution, and any new equity securities we issue could have rights, preferences, and privileges superior to those of holders of our common stock. Any debt financing secured by us in the future could involve additional restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to obtain additional capital and to pursue business opportunities, including potential acquisitions. In addition, during times of economic instability, it has been difficult for many companies to obtain financing in the public markets or to obtain debt financing, and we may not be able to obtain additional financing on commercially reasonable terms, if at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us, it could have a material adverse effect on our business, financial condition, and results of operations.

Table of Contents

Risks Related to Ownership of our Common Stock

Certain investors hold a significant percentage of our outstanding common stock and their interests may be different than the interests of other holders of our securities.

Certain investors own a significant percentage of our outstanding common stock. As a result, these investors are able to control or influence actions to be taken by us, including future issuances of our common stock or other securities, the payment of dividends, if any, on our common stock, amendments to our organizational documents, and the approval of significant corporate transactions, including mergers, sales of substantially all of our assets, distributions of our assets, the incurrence of indebtedness, and any incurrence of liens on our assets.

The interests of these investors may be materially different than the interests of our other stakeholders. In addition, these investors may have an interest in pursuing acquisitions, divestitures, and other transactions that, in their judgment, could enhance their investment, even though such transactions might involve risks to other stockholders. For example, these investors may cause us to take actions or pursue strategies that could impact our ability to make payments under our Credit Facilities or cause a change of control. In addition, to the extent permitted by agreements governing our Credit Facilities, these investors may cause us to pay dividends rather than make capital expenditures or repay debt. These investors are in the business of making investments in companies and may from time to time acquire and hold interests in businesses that compete directly or indirectly with us. Our amended and restated certificate of incorporation provides that none of these investors, any of their respective affiliates, or any director who is not employed by us (including any non-employee director who serves as one of our officers in both his director and officer capacities) or his or her affiliates will have any duty to refrain from engaging, directly or indirectly, in the same business activities or similar business activities or lines of business in which we operate. These investors also may pursue acquisition opportunities that may be complementary to our business, and, as a result, those acquisition opportunities may not be available to us.

So long as these investors continue to own a significant amount of our outstanding common stock, even if such amount is less than 50%, they will continue to be able to strongly influence or effectively control our decisions and, so long as each of these investors continues to own shares of our outstanding common stock, they will have the ability to nominate individuals to our board of directors. In addition, these investors, acting together, will be able to determine the outcome of all matters requiring stockholder approval and will be able to cause or prevent a change of control of our Company or a change in the composition of our board of directors and could preclude any unsolicited acquisition of our Company. The concentration of ownership could deprive other stockholders of an opportunity to receive a premium for their shares of common stock as part of a sale of our Company and ultimately might affect the market price of our common stock.

We have incurred significant increased costs and become subject to additional regulations and requirements as a result of becoming a public company, and our management is required to devote substantial time to compliance matters.

As a public company, we have incurred and will continue to incur significant legal, regulatory, finance, accounting, investor relations, and other expenses that we did not incur as a private company, including costs associated with public company reporting requirements and costs of recruiting and retaining non- executive directors. We also have incurred and will continue to incur costs associated with the Sarbanes- Oxley Act and the Dodd-Frank Act, and related rules implemented by the SEC, and Nasdaq. The expenses incurred by public companies for reporting and corporate governance purposes have been increasing. These rules and regulations have increased our legal and financial compliance costs and have made some activities more time-consuming and costly. Our management devotes a substantial amount of time to ensure that we comply with all of these requirements, diverting the attention of management away from revenue- producing activities. These laws and regulations also could make it more difficult or costly for us to obtain certain types of insurance, including director and officer liability insurance, and we may be forced to accept reduced policy limits and coverage or incur substantially higher costs to obtain the same or similar coverage. These laws and regulations could also make it more difficult for us to attract and retain qualified persons to serve on our board of directors, our board committees, or as our executive officers. Furthermore, if we are unable to satisfy our obligations as a public company, we could be subject to delisting of our common stock, fines, sanctions, and other regulatory action and potentially civil litigation.

Failure to comply with requirements to design, implement, and maintain effective internal controls could have a material adverse effect on our business and stock price.

As a public company, we are subject to significant requirements for enhanced financial reporting and internal controls. The process of designing and maintaining effective internal controls is a time consuming, costly, and continuous effort that requires us to anticipate and react to changes in our business and the economic and regulatory environments. If

Table of Contents

we are unable maintain appropriate internal financial reporting controls and procedures, it could cause us to fail to meet our reporting obligations on a timely basis, result in material misstatements in our consolidated financial statements, expose us to increased risk of fraud or reputational harm, or harm our results of operations.

In addition, we are required, pursuant to Section 404(a) of the Sarbanes-Oxley Act (“Section 404”), to furnish a report by management on, among other things, the effectiveness of our internal control over financial reporting. This assessment must include disclosure of any material weaknesses identified by our management in our internal control over financial reporting. If during the evaluation and testing process, we identify one or more material weaknesses in our internal control over financial reporting or determine that existing material weaknesses have not been remediated, our management will be unable to assert that our internal control over financial reporting is effective, or our independent registered public accounting firm may not issue an unqualified opinion. If either we are unable to conclude that we have effective internal control over financial reporting or our independent registered public accounting firm is unable to provide us with an unqualified report (to the extent it is required to issue a report), investors could lose confidence in our reported financial information, which could have a material adverse effect on the trading price of our common stock.

The market price of our common stock has been volatile and may continue to fluctuate substantially, which could result in substantial losses for purchasers of our common stock.

The stock market has experienced extreme volatility in the past. This volatility often has been unrelated or disproportionate to the operating performance of particular companies. Since shares of our common stock were sold in our IPO in June 2024 at a price of $21.50 per share, our stock price has ranged from $20.26 to $48.11 through February 11, 2026. The market price of our common stock has fluctuated in the past and may continue to fluctuate substantially due to a number of factors such as those listed in Part I, Item 1A, “Risk Factors—Risks Related to our Business and our Industry” and the following:

•results of operations that vary from the expectations of securities analysts and investors;

•results of operations that vary from those of our competitors;

•changes in expectations as to our future financial performance, including financial estimates and investment recommendations by securities analysts and investors, or failure of securities analysts to initiate or maintain coverage of our common stock;

•changes in economic conditions for companies in our industry;

•changes in market valuations of, or earnings and other announcements by, companies in our industry;

•declines in the market prices of stocks generally, particularly those of healthcare technology companies or SaaS companies regardless of industry;

•additions or departures of key management personnel;

•strategic actions by us or our competitors;

•announcements by us, our competitors, dispositions, joint ventures, other strategic relationships, or capital commitments;

•future sales of our common stock by our officers, directors, and significant stockholders;

•expiration of market standoff or lock-up agreements;

•changes in preference of our clients and our market share;

•changes in general economic or market conditions or trends in our industry or the economy as a whole;

•changes in business or regulatory conditions;

•future sales of our common stock or other securities;

•investor perceptions of or the investment opportunity associated with our common stock relative to other investment alternatives;

•the public’s response to press releases or other public announcements by us or third parties, including our filings with the SEC;

•changes or proposed changes in laws or regulations or differing interpretations or enforcement thereof affecting our business;

Table of Contents

•announcements, claims and/or allegations relating to litigation, governmental investigations, or compliance with applicable laws and regulations;

•guidance, if any, that we provide to the public, any changes in this guidance, or our failure to meet this guidance;

•the development and sustainability of an active trading market for our stock;

•changes in accounting principles; and

•other events or factors, including those resulting from informational technology system failures and disruptions, data security incidents or breaches, natural disasters, war, including the ongoing conflict in Ukraine, acts of terrorism, or responses to these events.

Furthermore, the stock markets in general have experienced extreme volatility that, in some cases, may be unrelated or disproportionate to the operating performance of particular companies. These broad market and industry fluctuations may adversely affect the market price of our common stock, regardless of our actual operating performance. In addition, price volatility may be greater if the public float and trading volume of our common stock are low.

In the past, following periods of market volatility, stockholders have instituted securities class action litigation. If we were to become involved in securities litigation, it could have a substantial cost and divert resources and the attention of executive management from our business regardless of the outcome of such litigation.

Future issuances of our common stock may dilute the percentage ownership of existing owners, which could reduce their influence over matters on which stockholders vote.

As of February 11, 2026, we have approximately 2,308,318,408 shares of common stock authorized but unissued. Our amended and restated certificate of incorporation authorizes us to issue these shares of common stock, other equity or equity-linked securities, options, and other equity awards relating to our common stock for the consideration and on the terms and conditions established by our board of directors in its sole discretion, whether in connection with acquisitions or otherwise. Issuances of common stock or voting preferred stock would reduce the influence of existing stockholders over matters on which our stockholders vote, and, in the case of issuances of preferred stock, would likely result in such existing owners’ interest in us being subject to the prior rights of holders of that preferred stock, if any.

We have reserved, or will reserve in the future, shares for issuance (i) for outstanding awards under our 2019 Stock Incentive Plan and for grants under our 2024 Equity Incentive Plan and (ii) under our 2024 Employee Stock Purchase Plan. See Part III, Item 11, “Executive Compensation—Equity Awards.” Any common stock that we issue, including under our 2019 Stock Incentive Plan, 2024 Equity Incentive Plan, 2024 Employee Stock Purchase Plan, or other equity incentive plans that we may adopt in the future, would dilute the percentage ownership of existing investors. In the future, we may also issue our securities in connection with investments or acquisitions. The amount of shares of our common stock issued in connection with an investment or acquisition could constitute a material portion of our then- outstanding shares of our common stock. Any issuance of additional securities in connection with investments or acquisitions may result in additional dilution to existing stockholders.

Because we have no current plans to pay cash dividends on our common stock, stockholders may not receive any return on investment unless they sell their shares of common stock for a price greater than that which they paid for it.

We have no current plans to pay cash dividends on our common stock. The declaration, amount, and payment of any future dividends will be at the sole discretion of our board of directors, and will depend on, among other things, general and economic conditions, our results of operations and financial condition, our available cash and current and anticipated cash needs, capital requirements, contractual, legal, tax, and regulatory restrictions and implications on the payment of dividends by us to our stockholders or by our subsidiaries to us, including restrictions under our credit agreements and other indebtedness we may incur, and such other factors as our board of directors may deem relevant. See Part II, Item 5, “Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities—Dividend Policy.”

As a result, stockholders may not receive any return on an investment in our common stock unless they sell our common stock for a price greater than their purchase price.

Table of Contents

Future sales, or the perception of future sales, by us or our existing stockholders in the public market could cause the market price for our common stock to decline.

The sale of substantial amounts of shares of our common stock in the public market, or the perception that such sales could occur, could harm the prevailing market price of shares of our common stock. These sales, or the possibility that these sales may occur, also might make it more difficult for us to sell equity securities in the future at a time and at a price that we deem appropriate.

Pursuant to the Amended and Restated Registration Rights Agreement, dated as of June 10, 2024, by and among Waystar Holding Corp. and the other parties named therein, certain of our existing stockholders have the right, subject to certain conditions, to require us to register the sale of their shares of our common stock under the Securities Act. By exercising their demand registration rights and selling a large number of shares, such existing stockholders could cause the prevailing market price of our common stock to decline. Registration of any of these outstanding shares of our common stock would result in such shares becoming freely tradable without compliance with Rule 144 upon effectiveness of the registration statement.

If the existing stockholders exercise their registration rights, the market price of our shares of common stock could drop significantly if the holders of these restricted shares sell them or are perceived by the market as intending to sell them. These factors could also make it more difficult for us to raise additional funds through future offerings of our shares of common stock or other securities.

If securities analysts do not publish research or reports about our business or if they downgrade our stock or our sector, our stock price and trading volume could decline.

The trading market for our common stock depends in part on the research and reports that industry or financial analysts publish about us or our business. We do not control these analysts. Furthermore, if one or more of the analysts who do cover us downgrade our stock or our industry, or the stock of any of our competitors, or publish inaccurate or unfavorable research about our business, the price of our stock could decline. If one or more of these analysts ceases coverage of us or fails to publish reports on us regularly, we could lose visibility in the market, which in turn could cause our stock price or trading volume to decline.

Anti-takeover provisions in our organizational documents could delay or prevent a change of control.

Certain provisions of our amended and restated certificate of incorporation and amended and restated bylaws may have an anti-takeover effect and may delay, deter, or prevent a merger, acquisition, tender offer, takeover attempt, or other change of control transaction that a stockholder might consider in its best interest, including those attempts that might result in a premium over the market price for the shares held by our stockholders. These provisions provide for, among other things:

•a classified board of directors until the second annual meeting of stockholders after the date on which the Institutional Investors collectively own less than 15% in voting power of the then- outstanding power of the then-outstanding shares of stock of our Company entitled to vote generally in the election of directors, as a result of which our board of directors will be divided into three classes until such time, with each class serving for staggered three-year terms;

•the ability of our board of directors to issue one or more series of preferred stock;

•advance notice requirements for nominations of directors by stockholders and for stockholders to include matters to be considered at our annual meetings;

•certain limitations on convening special stockholder meetings and taking stockholder action by written consent;

•during a protective period commencing on the day on which the Institutional Investors collectively beneficially own less than 40% in voting power of the then-outstanding shares of our common stock and ending at the second annual meeting of stockholders after the date on which the Institutional Investors collectively own less than 15% in voting power of the then-outstanding power of our common stock (such period, the “Protective Period”), the removal of directors only for cause and only upon the affirmative vote of

Table of Contents

the holders of at least 662∕3% of the shares of common stock entitled to vote generally in the election of directors; and

•during the Protective Period, the required approval of at least 662∕3% of the voting power of the outstanding shares of capital stock entitled to vote generally in the election of directors, voting together as a single class, to adopt, amend, or repeal certain provisions of our amended and restated certificate of incorporation.

Further, EQT has the right to nominate to our board of directors (i) two nominees for so long as EQT beneficially owns 25% or greater of our then-outstanding common stock and (ii) one nominee for so long as EQT beneficially owns 5% or greater, but less than 25%, of our then outstanding common stock. CPPIB has the right to nominate to our board of directors one nominee for so long as CPPIB beneficially owns 5% or greater of our then-outstanding common stock. Bain has the right to nominate to our board of directors one nominee for so long as Bain beneficially owns 5% or greater of our then-outstanding common stock.Advent has the right to nominate to our board of directors one nominee for so long as Advent beneficially owns 5% or greater of our then-outstanding common stock.

These anti-takeover provisions could make it more difficult for a third party to acquire us, even if the third party’s offer may be considered beneficial by many of our stockholders. These provisions also may have the effect of preventing changes in our board of directors and may make it more difficult to accomplish transactions that stockholders may otherwise deem to be in their best interests. As a result, our stockholders may be limited in their ability to obtain a premium for their shares.

Our board of directors is authorized to issue and designate shares of our preferred stock in additional series without stockholder approval.

Our amended and restated certificate of incorporation authorizes our board of directors, without the approval of our stockholders, to issue 100,000,000 shares of our preferred stock, subject to limitations prescribed by applicable law, rules and regulations and the provisions of our amended and restated certificate of incorporation, as shares of preferred stock in series, to establish from time to time the number of shares to be included in each such series and to fix the designation, powers, preferences, and rights of the shares of each such series, and the qualifications, limitations, or restrictions thereof. The powers, preferences, and rights of these additional series of preferred stock may be senior to or on parity with our common stock, which may reduce its value.

Our amended and restated certificate of incorporation provides that the Court of Chancery of the State of Delaware (or if such court does not have jurisdiction, another state or the federal courts (as appropriate) located within the State of Delaware) will be the sole and exclusive forum for certain stockholder litigation matters, which could limit our stockholders’ ability to obtain a favorable judicial forum for disputes with us or our directors, officers, employees, or stockholders.

Our amended and restated certificate of incorporation provides that unless we consent to the selection of an alternative forum, the Court of Chancery of the State of Delaware (or if such court does not have jurisdiction, another state or the federal courts (as appropriate) located within the State of Delaware) shall, to the fullest extent permitted by law, be the sole and exclusive forum for any (i) derivative action or proceeding brought on behalf of us, (ii) action asserting a claim of breach of a fiduciary duty owed by any current or former director, officer, or other employee or stockholder of ours to us or our stockholders, (iii) action asserting a claim against us or any director or officer of ours arising pursuant to any provision of the DGCL, or our amended and restated certificate of incorporation or our amended and restated bylaws or as to which the DGCL confers jurisdiction on the Court of Chancery of the State of Delaware, or (iv) action asserting a claim governed by the internal affairs doctrine of the State of Delaware. Our amended and restated certificate of incorporation further provides that, unless we consent in writing to the selection of an alternative forum, to the fullest extent permitted by law, the federal district courts of the United States of America will be the exclusive forum for the resolution of any complaint asserting a cause of action arising under the federal securities laws of the United States, including any claims under the Securities Act and the Exchange Act. However, Section 22 of the Securities Act creates concurrent jurisdiction for federal and state courts over all suits brought to enforce a duty or liability created by the Securities Act or the rules and regulations thereunder and accordingly, we cannot be certain that a court would enforce such provision.

Any person or entity purchasing or otherwise acquiring any interest in shares of our capital stock shall be deemed to have notice of and consented to the forum provisions in our amended and restated certificate of incorporation, except our stockholders will not be deemed to have waived (and cannot waive) compliance with the federal securities laws and the rules and regulations thereunder. This choice of forum provision may limit a stockholder’s ability to bring a claim in a judicial forum that it finds favorable for disputes with us or any of our directors, officers, other employees, or stockholders

Table of Contents

which may discourage lawsuits with respect to such claims. Alternatively, if a court were to find the choice of forum provision contained in our amended and restated certificate of incorporation to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our business, results of operations, and financial condition.

General Risk Factors

Our business is significantly impacted by general macroeconomic conditions.

Geopolitical instability, including the conflict between Russia and Ukraine, actual and potential shifts in U.S. and foreign, trade, economic, and other policies, and rising trade tensions between the United States and other countries as well as other global events, have significantly increased macroeconomic uncertainty at a global level. The current U.S. macroeconomic environment is characterized by recent record-high inflation, supply chain challenges, tariffs, labor shortages, high interest rates, foreign currency exchange volatility, volatility in global capital markets, and growing recession risk. Such economic volatility could adversely affect our business, financial condition, results of operations and cash flows, and future market disruptions could negatively impact us. Further, adverse macroeconomic conditions affect our clients’ and prospective clients’ operations and financial condition and make it difficult for our clients and prospective clients to accurately forecast and plan future business activities, which may in turn cause our clients to elect not to renew their contracts or affect their ability to pay amounts owed to us in a timely manner or at all, or adversely affect prospective clients’ ability or willingness to enter into contracts with us. We have also observed the effect of inflation or tariffs on our labor and cost structure. If these trends continue, our business, results of operations, financial condition, and cash flows may be materially adversely affected.

An economic downturn or increased uncertainty may also lead to increased credit and collectability risks, higher borrowing costs or reduced availability of capital and credit markets, reduced liquidity, adverse impacts on our suppliers, failures of counterparties including financial institutions and insurers, asset impairments, and declines in the value of our financial instruments.

We have a history of losses and we may not achieve or maintain profitability in the future.

We incurred net losses of $19.1 million, $51.3 million, and $51.5 million for the years ended December 31, 2024, 2023, and 2022, respectively. Our operating expenses may increase substantially in the foreseeable future, as we increase investments in our business. Furthermore, as a public company, we have incurred and will continue to incur additional legal, accounting, and other expenses that we did not incur as a private company. As a result, our net losses may continue for the foreseeable future.

These efforts and additional expenses may prove more expensive than we expect, and we cannot guarantee that we will be able to increase our revenue to offset such expenses. Our revenue growth may slow or our revenue may decline for a number of other reasons, including increased competition, or if we cannot capitalize on growth opportunities. If our revenue does not grow at a greater rate than our operating expenses, we will not be able to achieve profitability.

Item 1B. Unresolved Staff Comments

None.

Item 1C. Cybersecurity

Cybersecurity Risk Management and Strategy

We have developed a cybersecurity risk management program intended to assess risks from cybersecurity threats and manage those risks. Our cybersecurity risk management program is an important component of, and integrated with, our overall enterprise risk management framework, which addresses legal, compliance, operational, and financial risks, alongside cybersecurity risks. Through this integration, we aim to optimize resource allocation, improve risk identification, and strengthen our cybersecurity governance.

Our cybersecurity risk management program is based on the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF 2.0) and is aimed to assess, identify, and manage risks from cybersecurity threats. This does not imply that we meet any particular technical standards, specifications, or requirements, only that we use the NIST CSF 2.0

Table of Contents

framework as a guide to help us identify, assess, and manage cybersecurity risks relevant to our business. The processes comprising our cybersecurity risk management program include risk assessments, vulnerability scanning and penetration testing, threat intelligence monitoring, and employee training and awareness programs. We have also implemented and maintain an incident response process designed to respond to and manage cybersecurity incidents.

To protect our information systems from cybersecurity threats, we employ technical processes as a crucial component of our multi-layered cybersecurity risk management program. These processes include firewalls, intrusion detection and prevention systems, access controls, endpoint protection, data encryption, vulnerability management, security information event management, data loss prevention, security assessments, and penetration testing.

As part of our cybersecurity risk management program, we undergo assessments and audits by external and independent auditors. These include evaluations against the HITRUST Common Security Framework (CSF), where we have achieved the HITRUST Risk-based, 2-year (R2) Certification—the highest level of HITRUST assurance. Additionally, we undergo audits in accordance with the SSAE 18 framework, specifically the System and Organization Controls 2 (SOC 2) Type 2 audit, which is designed for service organizations to demonstrate effective controls over security, availability, and confidentiality. Our program also includes independent assessments to validate compliance with the Payment Card Industry Data Security Standard (PCI DSS), for which we maintain PCI certification. The results of these audits and assessments are reported to our Board of Directors where deemed appropriate.

Our cybersecurity team, which is led by our Digital Information & Cybersecurity Officer (DISO), implements and maintains our cybersecurity risk management program and is dedicated to mitigating risks and protecting the confidentiality, integrity, and availability of our systems and data. Our cybersecurity team’s functions include security operations, vulnerability management, security engineering and architecture, risk management, compliance and audit support, threat intelligence, security awareness training, and policy development. Our cybersecurity team is also responsible for developing and executing the incident response plan.

Because we rely on third-party vendors, including for information technology services, we have processes to oversee and identify risks from cybersecurity threats associated with key third-party vendors, based on our assessment of their criticality to our operations and respective risk profile. These processes may include vendor screening and due diligence, contractual requirements, security assessments and audits, incident response planning requirements, and ongoing monitoring.

We are not aware of any risks from cybersecurity threats, including as a result of previously identified cybersecurity incidents, that have materially affected or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. As discussed more fully under Item 1A “Risk Factors,” there is a risk that we could experience a security incident and a compromise of our information technology systems and data. There is no assurance that our cybersecurity program will in all cases prevent such security incidents. We also maintain cybersecurity insurance that we regularly review to assess for appropriate coverage.

Cybersecurity Governance

Role of the Board

Our Board of Directors plays an active role in overseeing our cybersecurity risk management program. The Board of Directors or the Audit, Compliance, and Risk Committee receives a quarterly update on cybersecurity-related topics. The Board of Directors receives materials every quarter and presentations on alternating quarters from our Chief Technology Officer (CTO) on topics including significant cyberattacks and emerging threats, cybersecurity program performance, results of risk assessments, incident response updates, cybersecurity strategy, and cybersecurity program maturity. We have also established procedures for informing the Board of Directors of certain cybersecurity incidents outside of these scheduled briefings.

Role of Management

Our DISO is responsible for developing and implementing our cybersecurity program and holds certifications including ISO/IEC 27001:2002 Certified Information Security Executive, Cyber Security Executive Certification from Cornell University, Risk & Compliance Executive Certification from William & Mary University, and Healthcare Risk & Compliance Certification from American College of Medical Practice Executives (ACMPE). Our DISO’s responsibilities include managing cybersecurity risk, leading the cybersecurity team, staying informed about threats, reporting on cybersecurity performance, promoting a culture of security, and compliance and audit support. Our DISO regularly updates senior management and the Board of Directors on the performance of the cybersecurity program and the state of

Table of Contents

cybersecurity risk. Our DISO reports directly to our CTO who provides executive leadership and support for the overall technology and cybersecurity strategy.

Our management team takes steps to stay informed about and monitor efforts to prevent, detect, mitigate, and remediate cybersecurity risks and incidents through various means, which may include briefings from internal security personnel; threat intelligence and other information obtained from governmental, public or private sources, including external consultants engaged by us; and alerts and reports produced by security tools deployed in our IT environment.

To promote strong governance and oversight in managing cybersecurity risk, we have established a Cyber Risk Council, which is composed of our CTO, DISO, Chief Privacy Officer, Chief Financial Officer, Chief Legal Officer, and representatives of our technology and cybersecurity teams. The Cyber Risk Council is responsible for overseeing cybersecurity risk, monitoring performance of the cybersecurity risk management program, providing strategic guidance, and direction of the cybersecurity risk management program, among other oversight and monitoring functions.

Item 2. Properties

Our corporate headquarters are co-located in Lehi, Utah and Louisville, Kentucky. In addition to our headquarters, we have offices in Atlanta, Georgia, Duluth, Georgia and Austin, Texas. All of our facilities are leased, and none of our facilities are used for any purpose other than general office use. We believe that our current facilities meet our needs, and we are confident that we will be able to obtain, if needed, additional or different space on commercially reasonable terms to accommodate future growth.

Item 3. Legal Proceedings

We are subject to various claims and legal actions that arise in the ordinary course of our business, including claims resulting from employment related matters. We believe that we are not party to any material pending legal proceedings, and we are not aware of any claims that could have a material effect on our business, financial condition, results of operations, or cash flows. However, a significant increase in the number of these claims or an increase in amounts owing under successful claims could materially and adversely affect our business, financial condition, results of operations, or cash flows.

Item 4. Mine Safety Disclosures

Not applicable.

Table of Contents

Part II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Our common stock trades on the Nasdaq Global Select Market under the symbol “WAY.” As of February 11, 2026, there were approximately 114 stockholders of record. This does not include persons whose stock is held in nominee or “street name” accounts through brokers.

Unregistered Sales of Equity Securities

None.

Purchases of Equity Securities by Issuer

During the three months ended December 31, 2025, we did not repurchase any of our equity securities that are registered pursuant to Section 12(b) of the Securities Exchange Act of 1934.

Dividend Policy

We currently expect to retain all future earnings for use in the operation and expansion of our business and have no current plans to pay dividends on our common stock. The declaration, amount, and payment of any future dividends will be at the sole discretion of our board of directors, and will depend on, among other things, general and economic conditions, our results of operations and financial condition, our available cash and current and anticipated cash needs, capital requirements, contractual, legal, tax and regulatory restrictions and implications on the payment of dividends by us to our stockholders or by our subsidiaries to us, including restrictions under our credit agreements and other indebtedness we may incur, and such other factors as our board of directors may deem relevant. If we elect to pay such dividends in the future, we may reduce or discontinue entirely the payment of such dividends at any time.

Stock Performance Graph

The graph below compares the cumulative total stockholder return on our common stock with the cumulative total return on the Nasdaq Global Composite Index and the S&P 600 Information Technology Index, assuming an initial investment of $100 at the market close of June 7, 2024, the date our stock commenced trading on the Nasdaq. Data for the Nasdaq Global Composite Index and the S&P 600 Information Technology Index assumes reinvestment of dividends. We did not declare cash dividends on our common stock in 2025. The comparisons in the graph below are based on historical data and are not indicative of, nor intended to forecast, future performance of our common stock.

Table of Contents


	June 7, 2024		June 30, 2024		September 30, 2024		December 31, 2024		March 31, 2025		June 30, 2025		September 30, 2025		December 31, 2025
WAY	$	100.00	$	103.86	$	134.73	$	177.29	$	180.48	$	197.44	$	183.19	$	158.21
Nasdaq Composite Index	100.00		103.55		106.40		113.16		101.54		119.78		133.45		137.08
S&P 600 Information Technology Index	100.00		101.72		104.18		103.76		87.24		100.74		115.81		123.55

__________________________________________

*$100 invested on June 7, 2024, including reinvestment of dividends.

Source Data: FactSet

The performance graph and related information shall not be deemed “soliciting material”, is not deemed “filed” with the SEC, and is not to be incorporated by reference into any future filing under the Securities Act or Exchange Act.

Item 6. Reserved

Table of Contents

Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of the financial condition and results of operations of Waystar Holding Corp. (“Waystar”, the “Company”, “we”, “us”, and “our”) should be read in conjunction with our consolidated financial statements and the related notes included elsewhere in this Form 10-K. In addition to historical information, this discussion and analysis contains forward-looking statements based on current expectations that involve risks, uncertainties, and other factors outside our control, as well as assumptions, such as our plans, objectives, expectations, and intentions. Our actual results may differ materially from those expressed or implied in the forward-looking statements as a result of various factors, including those described under the section entitled “Cautionary Statement Concerning Forward-Looking Statements” above and Part I, Item 1A, “Risk Factors” in this Form 10-K and our other filings with the SEC.

Overview

Waystar provides healthcare organizations with mission-critical AI-powered software that simplifies healthcare payments for providers across the continuum of care. Our enterprise-grade platform streamlines the complex and disparate processes our healthcare providers must manage to ensure accurate reimbursement and improves the payments experience for providers, patients, and payers. We leverage AI as well as proprietary, advanced algorithms to automate payment-related workflow tasks and drive continuous improvement, which enhances claim and billing accuracy, strengthens data integrity, and reduces labor costs for providers.

Our software is used daily by providers of all types and sizes across the continuum of care, including physician practices, clinics, surgical centers, and laboratories, as well as large hospitals and health systems. We currently serve over 30,000 clients of various sizes, representing over one million distinct providers practicing across a variety of care sites, including 16 of 20 U.S. News Best Hospitals list. Our business model aligns with our clients growth; as they to serve more patients, claims and transactional volumes increase, driving corresponding growth in our business. In addition, our clients frequently adopt a greater number of our solutions over time and introduce our solutions across new sites of care. In 2025, we facilitated over 7.5 billion healthcare payments transactions, including over $2.4 trillion in gross claims volume spanning approximately 60% of patients and one-in-three hospital discharges in the United States.

Our platform benefits from powerful network effects. Our cloud-based software is driven by a sophisticated, automated, and AI-powered engine to generate and incorporate real-time feedback from millions of network transactions processed through our platform each day. Every transaction we process provides additional data insights across providers, patients, and payers, which are embedded in updates that are deployed efficiently across our platform. This results in cumulative benefits to us over time. As we capture more data from each transaction we process, we leverage those insights to continuously improve the platform through Waystar AltitudeAI, our proprietary AI engine. Waystar AltitudeAI utilizes a multi-model approach that incorporates machine learning, large language models, and generative and agentic AI to automate complex workflows and deliver added value to our clients. In turn, the more value we create for our clients, the more likely it is that they will continue to use our products, allowing us to continue to capture more data that results in tangible improvements to our platform. As a result, our clients benefit from faster and more efficient performance from software that is evolving to meet ever-changing regulatory and payer requirements, enabling accurate and timely reimbursement.

We have demonstrated an ability to drive recurring, predictable, and profitable growth. Over 99% of our revenue is either recurring subscription or based on highly predictable volumes. For the 12 months ended December 31, 2025, our Net Revenue Retention Rate was 112.0% and we have 1,391 clients as of December 31, 2025 generating over $100,000 over the same 12-month period. For the year ended December 31, 2025, we generated revenue of $1,099.3 million (reflecting a 16.5% increase compared to revenue of $943.5 million for the prior year), net income of $$112.1 million (compared to net loss of $19.1 million for the prior year), and Adjusted EBITDA of $462.1 million (reflecting a 20.5% increase compared to Adjusted EBITDA of $383.5 million for the prior year).

Initial Public Offering

In June 2024, we completed an IPO of 45,000,000 shares of common stock at a price of $21.50 per share. After underwriting discounts and commissions of $53.2 million, we received total proceeds from the offering of $914.3 million. On July 5, 2024, pursuant to the option granted to the underwriters for a period of 30 days from the date of the prospectus to purchase up to 6,750,000 additional shares of common stock from us at the IPO price less the underwriting discount, the underwriters exercised the right to purchase 5,059,010 additional shares of common stock, resulting in additional net

Table of Contents

proceeds of $102.8 million, after deducting underwriting discounts and commissions of $6.0 million. The remaining option to purchase additional shares expired unexercised at the end of the 30-day period. See Part II, Item 8, “Financial Statements—Note 1 (Business)”, for more information.

Secondary Offerings

On February 24, 2025, the Institutional Investors closed an underwritten public offering of 23,000,000 shares of our common stock (inclusive of the underwriters’ option to purchase additional shares) (the “First Secondary Offering”). On May 15, 2025, the Institutional Investors closed another underwritten public offering of 14,375,000 shares of our common stock (inclusive of the underwriters' option to purchase additional shares) (the "Second Secondary Offering"). Additionally, on September 10, 2025, the Institutional Investors closed another underwritten public offering of 18,000,000 shares of our common stock (the "Third Secondary Offering"). We did not sell any shares in these offerings or receive any proceeds from these offerings. Pursuant to the terms of the Amended and Restated Registration Rights Agreement, dated as of June 10, 2024, by and among Waystar, the Institutional Investors, and certain other parties thereto, we paid $4.6 million in certain expenses on behalf of the selling stockholders related to these offerings for the year ended December 31, 2025, while the selling stockholders paid all applicable underwriting discounts and commissions.

Iodine Acquisition

On July 23, 2025, we entered into an Agreement and Plan of Merger (the "Merger Agreement") to acquire Iodine through a series of mergers. Iodine is a trusted leader in AI-powered clinical intelligence, enhancing clinical documentation and accuracy, streamlining utilization management, and preventing revenue leakage before billing. This strategic move is expected to bolster our AI leadership, automate manual work, and improve financial performance for providers. The acquisition was completed on October 1, 2025 for a total purchase price of $1.26 billion. The consideration paid was approximately $638.9 million in cash consideration and 16,639,920 shares of common stock having a value of $37.31 per share, and certain adjustments as outlined in the Merger Agreement.

Significant Items Affecting Comparability

We believe that the future growth and profitability of our business, and the comparability of our results from period to period, depend on numerous factors, including the following:

Our Ability to Expand our Relationship with Existing Clients

As our clients grow their businesses and provide more services and see more patients, our volume-based revenues also increase. In addition, our growth in revenues also depends on our ability to sell more products and solutions to existing clients, including through cross-selling as our clients adopt additional Waystar offerings as well as up-selling as our clients leverage our solutions across additional providers and sites of care.

Our Ability to Grow our Client Base

We are focused on continuing to grow our client base, which will depend in part on our ability to continue to maintain our product leadership, invest in our research and development team, and maintain our reputation and brand.

Timing and Number of Acquisitions

Since 2018, we have completed and successfully integrated ten acquisitions, one of which was Iodine that closed in the fourth quarter of 2025. The historical results of operations of our acquisitions are only included starting from the date of closing of such acquisition. As a result, our consolidated statements of operations for any given period during which an acquisition closed may not be comparable to future periods, which would include the results of operations of such acquisition for the entirety of such future period.

Impacts of Our Competitor’s Cybersecurity Attack

Following the February 2024 cybersecurity incident involving one of our competitors, more than 30,000 providers, including a significant number of large health systems and ambulatory providers, began adopting our solutions, and we were able to implement our solutions for many of these new clients in as little as 48 hours. This incident and our response to it generated approximately $11 million in additional revenue in the year ended December 31, 2025 and $34

Table of Contents

million in additional revenue in the year ended December 31, 2024 due to increased win rates above our historically competitive rates and associated accelerated implementation timeline.

Impacts of the IPO

•Debt Repayment. In connection with the closing of the IPO, we repaid $909.1 million outstanding principal amount and $2.8 million accrued interest on our First Lien Credit Facility and incurred debt extinguishment costs of $9.8 million related to the write-off of unamortized debt issuance costs. On July 12, 2024, we utilized the additional proceeds from the underwriters’ exercise of the overallotment option, as well as cash on hand, to repay $110.9 million outstanding principal and $0.4 million accrued interest on our First Lien Credit Facility. The debt repayments will result in lower interest expense moving forward, partially offset by losses on extinguishment of debt in the period the debt repayment is made.

•Stock-Based Compensation Expenses. We expect to recognize stock-based compensation expense of $17.9 million per year over the applicable vesting periods in connection with equity awards granted in connection with the IPO. Such stock-based compensation expense will be reflected in our results of operations from the closing date of the IPO through the applicable vesting periods of such awards. Additionally, we recognized $33.1 million of stock-based compensation expense during the year ended December 31, 2024 as the vesting of our performance condition options became probable upon the closing of the IPO as the implicit service period for the awards established at the grant date had elapsed.

•Incremental Public Company Expenses. Following the IPO, we have begun to incur significant expenses on an ongoing basis that we did not incur as a private company. Those costs include additional director and officer liability insurance expenses, as well as third-party and internal resources related to accounting, auditing, Sarbanes-Oxley Act compliance, legal, and investor and public relation expenses. These costs will generally be expensed under general and administrative expenses.

Components of Results of Operations

Revenue

We primarily generate two types of revenue: (i) subscription revenue and (ii) volume-based revenue, which account for 99% of total revenue for all periods presented. We believe we have high visibility into our volume-based and subscription revenue from existing clients. We refer to the solutions our clients use to better process and understand their payment workflows from payers as provider solutions, and we refer to the products that assist healthcare providers in collecting payments from patients as patient payment solutions. We expect provider solutions will continue to generate the substantial majority of our total revenue, although the revenue mix attributable to patient payment solutions is expected to increase slightly over time.

•Subscription revenue. Reflects recurring monthly provider count fees and minimum amounts owed. The vast majority of subscription revenue is generated by provider solutions, which constitute approximately 70% of total revenue for the periods presented.

•Volume-based revenue. Represents recurring fees associated with transaction count or dollar volumes in excess of minimums. Generally, approximately half of our volume-based revenue is generated from provider solutions that are based on transaction count, with the other half from patient payments solutions that are based on either dollar volumes or transaction count.

We also derive revenue from implementation fees for our software, as well as hardware sales to facilitate patient payments. Our implementation fees are billed upfront, and the revenue is recognized ratably over the contract term.

Cost of Revenue (Exclusive of Depreciation and Amortization)

Cost of revenue includes salaries, stock-based compensation, and benefits (“personnel costs”) for our team members who are focused on implementation, support, and other client-focused operations, as well as team members focused on enhancing and developing our platform. Cost of revenue also includes costs for third-party technology such as

Table of Contents

interchange fees and infrastructure related to the operations of our platform, including communicating and processing patient payments, and services to support the delivery of our solutions. Third-party costs for patient payments solutions are approximately 60% of the revenue generated from these solutions, while third-party costs for provider solutions are approximately 6% to 8% of the associated revenue, in each case, for the years ended December 31, 2025 and 2024.

Sales and Marketing

Sales and marketing costs consist primarily of personnel costs, internal sales commissions, channel partner fees, travel, and advertising costs.

General and Administrative

General and administrative expenses consist of personnel costs incurred in our corporate service functions such as finance expenses, legal, human resources, and information technology, as well as other professional service costs.

Research and Development

Research and development (“R&D”) costs consist primarily of personnel costs for team members engaged in research and development activities as well as third-party fees. All such costs are expensed as incurred, except for capitalized software development costs.

Depreciation and Amortization

Depreciation and amortization consists of the depreciation of property and equipment and amortization of certain intangible assets, including capitalized software.

Other Expense

Other expense consists primarily of interest expense and related-party interest expense, inclusive of the impact of interest rate swaps.

Income Tax Expense/(Benefit)

Income tax expense/(benefit) includes current income tax and income tax credits from deferred taxes. Income tax expense/(benefit) is recognized in profit and loss except to the extent that it relates to items recognized in equity or other comprehensive income, in which case the income tax expense is also recognized in equity or other comprehensive income.

Results of Operations for the Years Ended December 31, 2025 and 2024

The following discussion and analysis is for the year ended December 31, 2025, compared to the same period in 2024, unless otherwise stated. For a discussion and analysis of the year ended December 31, 2024, compared to the same period in 2023, please refer to the Management's Discussion and Analysis of Financial Condition and Results of Operations

Table of Contents

included in Part II, Item 7 of our Annual Report on Form 10-K for the year ended December 31, 2024, filed with the SEC on February 18, 2025.

The following table provides consolidated operating results for the periods indicated and percentage of revenue for each line item:


	Years ended December 31,
	2025					2024				2025 vs 2024 Change
($ in thousands)	($)		(%)			($)		(%)			($)		(%)
Revenue	$	1,099,278	100.0	%		$	943,549	100.0	%		$	155,729	16.5	%
Operating expenses
Cost of revenue (exclusive of depreciation and amortization)	348,162		31.7			315,730		33.5			32,432		10.3
Sales and marketing	178,017		16.2			156,935		16.6			21,082		13.4
General and administrative	128,623		11.7			111,753		11.8			16,870		15.1
Research and development	54,623		5.0			48,775		5.2			5,848		12.0
Depreciation and amortization	140,548		12.8			186,631		19.8			(46,083)		(24.7)
Total operating expenses	849,973		77.3		`	819,824		86.9			30,149		3.7
Income from operations	249,305		22.7			123,725		13.1			125,580		101.5
Other expense
Interest expense	(74,063)		(6.7)			(141,762)		(15.0)			67,699		(47.8)
Related party interest expense	(3,479)		(0.3)			(4,508)		(0.5)			1,029		(22.8)
Income/(loss) before income taxes	171,763		15.6			(22,545)		(2.4)			194,308		NM
Income tax expense/(benefit)	59,674		5.4			(3,420)		(0.4)			63,094		NM
Net income/(loss)	$	112,089	10.2	%		$	(19,125)	(2.0)	%		$	131,214	NM

Revenue


	Years ended December 31,
	2025				2024				2025 vs 2024 Change
($ in thousands)	($)		(%)		($)		(%)			($)		(%)
Revenue
Subscription revenue	$	558,408	50.8	%	$	457,975	48.5	%		$	100,433	21.9	%
Volume-based revenue	534,755		48.6		479,913		50.9			54,842		11.4
Services and other revenue	6,115		0.6		5,661		0.6			454		8.0
Total Revenue	$	1,099,278	100.0	%	$	943,549	100.0	%		$	155,729	16.5	%

Revenue was $1,099.3 million for the year ended December 31, 2025 as compared to $943.5 million for the year ended December 31, 2024, an increase of $155.7 million, or 16.5%, of which $100.4 million was attributed to subscription revenue from new and existing clients, almost all of which is generated by provider solutions. Included within this $100.4 million increase in subscription revenue was approximately $30 million of post-acquisition Iodine revenue. Another $54.8 million of the increase in revenues was attributed to volume-based revenue, primarily related to expansion of existing client usage and acquired clients, of which $21.2 million of the volume-based increase was generated by provider solutions and $33.6 million by patient payments solutions.

Cost of Revenue (Exclusive of Depreciation and Amortization)

Cost of revenue was $348.2 million for the year ended December 31, 2025 as compared to $315.7 million for the year ended December 31, 2024, an increase of $32.4 million, or 10.3%. The increase was primarily driven by revenue growth. The increase consists of $19.7 million in increased costs stemming from higher transaction volume and associated third-party costs, including higher platform usage, of which approximately $23.0 million was third-party costs with payment solutions. In addition, there was an $11.0 million increase in personnel costs, net of capitalized expenses.

Table of Contents

Sales and Marketing

Sales and marketing expense was $178.0 million for the year ended December 31, 2025 as compared to $156.9 million for the year ended December 31, 2024, an increase of $21.1 million, or 13.4%. The increase was driven by an increase in channel partner fees and amortization of the internal sales commission deferred contract costs assets of $15.1 million associated with revenue growth.

General and Administrative

General and administrative expense was $128.6 million for the year ended December 31, 2025 as compared to $111.8 million for the year ended December 31, 2024, an increase of $16.9 million, or 15.1%. The increase was driven by an increase in third party professional fees, including $14.7 million in costs related to the acquisition of Iodine.

Research and Development

Research and development expense was $54.6 million for the year ended December 31, 2025 as compared to $48.8 million for the year ended December 31, 2024, an increase of $5.8 million, or 12.0%. The increase was driven by higher personnel costs, net of capitalized expenses, of $5.0 million.

Depreciation and Amortization

Depreciation and amortization expense was $140.5 million for the year ended December 31, 2025, as compared to $186.6 million for the year ended December 31, 2024, a decrease of $46.1 million, or 24.7%. Due to the relocation of one of our offices, we reduced the useful life of the related finance lease and leasehold improvement assets, which represented $17.9 million of accelerated depreciation for the year ended December 31, 2024. Additionally, due to several intangible assets fully maturing in 2024, amortization decreased by $37.3 million, which was offset by $8.5 million of amortization of the new Iodine intangible assets acquired on October 1, 2025.

Interest Expense

Total interest expense was $77.5 million for the year ended December 31, 2025 as compared to $146.3 million for the year ended December 31, 2024, a decrease of $68.7 million, or 47.0%. The decrease was driven by the First Lien Credit Facility paydown during 2024 totaling $1.0 billion and the full paydown of the Second Lien Credit Facility.

Income Tax Expense/ (Benefit)

Income tax expense was $59.7 million for the year ended December 31, 2025, as compared to an income tax benefit of $3.4 million for the year ended December 31, 2024, an increase of $63.1 million. The increase was primarily driven by our net income/(loss) increase year over year, which was driven by an increase in operating net income and a decrease in interest expense for the year ended December 31, 2025. See explanations above for details.

Non-GAAP Financial Measures

We present adjusted EBITDA, adjusted EBITDA margin, non-GAAP net income, and non-GAAP net income per share as supplemental measures of financial performance that are not required by, or presented in accordance with, GAAP. We believe they assist investors and analysts in comparing our operating performance across reporting periods on a consistent basis by excluding items that we do not believe are indicative of our core operating performance. Management believes these non-GAAP financial measures are useful to investors in highlighting trends in our operating performance, while other measures can differ significantly depending on long-term strategic decisions regarding capital structure, the tax jurisdictions in which we operate, and capital investments. Management uses these non-GAAP financial measures to make budgeting decisions, to establish discretionary annual incentive compensation, and to compare our performance against that of other peer companies using similar measures. Management supplements GAAP results with non-GAAP financial measures to provide a more complete understanding of the factors and trends affecting the business than GAAP results alone provide.

Adjusted EBITDA, adjusted EBITDA margin, non-GAAP net income, and non-GAAP net income per share are not recognized terms under GAAP and should not be considered as an alternative to net income/(loss), net income/(loss) per share or net income/(loss) margin as measures of financial performance or cash provided by operating activities as a

Table of Contents

measure of liquidity, or any other performance measure derived in accordance with GAAP. Additionally, these measures are not intended to be a measure of free cash flow available for management’s discretionary use, as they do not consider certain cash requirements such as interest payments, tax payments, and debt service requirements. The presentations of these measures have limitations as analytical tools and should not be considered in isolation, or as a substitute for analysis of our results as reported under GAAP. Because not all companies use identical calculations, the presentations of these measures may not be comparable to other similarly titled measures of other companies and can differ significantly from company to company. A reconciliation is provided below for our non-GAAP financial measures to the most directly comparable financial measure stated in accordance with GAAP. Investors are encouraged to review the related GAAP financial measures and the reconciliation of non-GAAP financial measures to their most directly comparable GAAP financial measures, and not to rely on any single financial measure to evaluate our business.

Adjusted EBITDA and Adjusted EBITDA Margin

We define adjusted EBITDA as net income/(loss) before interest expense, net, income tax expense/(benefit), depreciation and amortization, and as further adjusted for stock-based compensation expense, acquisition and integration costs, asset and lease impairments, costs related to amended debt agreements, and costs related to our IPO and the Secondary Offerings. Adjusted EBITDA margin represents adjusted EBITDA as a percentage of revenue.

The following table presents a reconciliation of net income / (loss) to adjusted EBITDA and net income / (loss) margin to adjusted EBITDA margin for the years ended December 31, 2025 and 2024:


	Years ended December 31,
($in thousands)	2025			2024
Net income/(loss)	$	112,089		$	(19,125)
Interest expense	77,542			146,270
Income tax expense/(benefit)	59,674			(3,420)
Depreciation and amortization	140,548			186,631
Stock-based compensation expense	42,069			54,437
Acquisition and integration costs	21,074			859
Costs related to amended debt agreements	2,580			14,138
IPO and Secondary Offering related expenses	4,657			2,140
Other (a)	1,913			1,566
Adjusted EBITDA	$	462,146		$	383,496
Revenue	$	1,099,278		$	943,549
Net income/(loss) margin	10.2		%	(2.0)		%
Adjusted EBITDA margin	42.0		%	40.6		%

____________________________________

(a)For the year ended December 31, 2025, adjustments relate to additional lease costs due to the relocation of our Louisville office totaling $1.3 million and executive severance totaling $0.6 million. For the year ended December 31, 2024, adjustments relate to additional lease costs due to the relocation of our Louisville office.

Non-GAAP Net Income / (Loss) and Non-GAAP Net Income / (Loss) Per Share

We define non-GAAP net income as GAAP net income excluding the impact of stock-based compensation, acquisition and integration costs, asset and lease impairments, costs related to our IPO and Secondary Offerings, costs related to amended debt agreements and amortization of intangibles. The tax effects of the adjustments are calculated using a management estimated annual effective non-GAAP tax rate of 21%, which is based on our statutory federal tax rate and provides consistency across reporting periods by eliminating the effects of non-recurring and period specific items. Due to the differences in the tax treatment of items excluded from non-GAAP net income/(loss), our estimated tax rate on non-GAAP net income/(loss) may differ from GAAP tax rate.

Non-GAAP net income / (loss) per share is shown on both a basic and diluted basis and is defined as non-GAAP net income / (loss) divided by the basic or diluted weighted-average shares, respectively.

Table of Contents

The following table presents a reconciliation of net income / (loss) to non-GAAP net income / (loss) and non-GAAP net income / (loss) per share for the years ended December 31, 2025 and 2024:


	Years ended December 31,
($in thousands)	2025		2024
Net income/(loss)	$	112,089	$	(19,125)
Stock-based compensation expense	42,069		54,437
Acquisition and integration costs	21,074		859
Costs related to amended debt agreements	2,580		14,138
IPO and Secondary Offering related expenses	4,657		2,140
Other (a)	1,913		19,445
Intangible amortization	118,609		147,887
Tax effect of adjustments	(40,089)		(50,170)
Non-GAAP net income/(loss)	$	262,902	$	169,611

Non-GAAP net income/(loss) per share:
Basic	$	1.48	$	1.13
Diluted	$	1.42	$	1.09
Weighted-average shares outstanding:
Basic	177,926,745		149,915,839
Diluted	184,783,285		155,677,094

____________________________________

Key Performance Metrics

Net Revenue Retention Rate

We also regularly monitor and review our Net Revenue Retention Rate.

The following table presents our Net Revenue Retention Rate for December 31, 2025 and 2024, respectively:


	Twelve months ended December 31,
($in thousands)	2025		2024
Net Revenue Retention Rate	112.0	%	110.1	%

Our Net Revenue Retention Rate compares 12 months of client invoices for our solutions at two period end dates. To calculate our Net Revenue Retention Rate, we first accumulate the total amount invoiced during the 12 months ending with the prior period-end, or Prior Period Invoices. We then calculate the total amount invoiced to those same clients for the 12 months ending with the current period-end, or Current Period Invoices. Current Period Invoices are inclusive of upsell, downsell, pricing changes, clients that cancel or chose not to renew, and discontinued solutions with continuing clients. The Net Revenue Retention Rate is then calculated by dividing the Current Period Invoices by the Prior Period Invoices. Our total invoices included in the analysis are greater than 98% of reported revenue. We use Net Revenue Retention Rate to evaluate our ongoing operations and for internal planning and forecasting purposes. Acquired businesses are included in the last-12 month Net Revenue Retention Rate in the ninth quarter after acquisition, which is the earliest point that comparable post-acquisition invoices are available for both the current and prior 12-month period. Included within our 2025 net revenue retention rate is the impact from the heightened win rates above our historically high rates and accelerated implementation timelines related to the cybersecurity incident of one of our competitors in February 2024.

Table of Contents

Customer Count with >$100,000 Revenue

We also regularly monitor and review our count of clients who generate more than $100,000 of revenue.

The following table sets forth our count of clients who generate more than $100,000 of revenue for the periods presented:


	Year ended December 31,
(For the 12 month period ended)	2025	2024
Customer Count with > $100,000 Revenue	1,391	1,203

Our count of clients who generate more than $100,000 of revenue is based on an accumulation of the amounts invoiced to clients over the preceding 12 months. The invoices for acquired clients are included starting in the first full calendar quarter after the date of acquisition. Our customer count as of December 31, 2025 includes 44 clients from the Iodine acquisition.

Liquidity and Capital Resources

Overview

We assess our liquidity in terms of our ability to generate adequate amounts of cash to meet current and future needs. Our expected primary uses on a short-term and long-term basis are for working capital, capital expenditures, debt service requirements, and investments in future growth, including acquisitions. We have historically funded our operations and acquisitions through our cash and cash equivalents, cash flows from operations, and debt financings. We believe that our existing unrestricted cash on hand, expected future cash flows from operations, and additional borrowings will provide sufficient resources to fund our operating requirements, as well as future capital expenditures, debt service requirements, and investments in future growth for at least the next 12 months. To the extent additional funds are necessary to meet our long-term liquidity needs as we continue to execute our business strategy, we anticipate that they will be obtained through the incurrence of additional indebtedness, additional equity financings, or a combination of these potential sources of funds. In the event that we need access to additional cash, we may not be able to access the credit markets on commercially acceptable terms or at all. Our ability to fund future operating expenses and capital expenditures and our ability to meet future debt service obligations or refinance our indebtedness will depend on our future operating performance, which will be affected by general economic, financial, and other factors beyond our control, including those described under Part I, Item 1A, “Risk Factors” in this report.

On December 31, 2025 and 2024, we had restricted cash of $15.5 million and $22.4 million, respectively, which consists of cash deposited in lockbox accounts owned by us which are contractually required to be disbursed to participating clients on the following day, as well as cash collected on behalf of healthcare providers from patients that have not yet been remitted to providers. These funds payable are not available for our use and liquidity, and are offset on our balance sheet by an aggregated funds payable liability.

Our liquidity is influenced by many factors, including timing of revenue and corresponding cash collections, the amount and timing of investments in strategic initiatives, our investments in property, equipment, and software, as well as other factors described under Part I, Item 1A, “Risk Factors” in this report. Depending on the severity and direct impact of these factors on us, we may not be able to secure additional financing on acceptable terms, or at all.

Table of Contents

Cash Flows

Cash flows from operating, investing, and financing activities for the years ended December 31, 2025 and 2024, are summarized in the following table:


	Years ended December 31,				2025 vs 2024 Change
($in thousands)	2025		2024			Amount		Change
Net cash provided by operating activities	$	309,673	$	169,768		$	139,905	82	%
Net cash used by investing activities	(680,896)		(27,268)			(653,628)		2397	%
Net cash provided by financing activities	243,450		16,654			226,796		1362	%
Net increase in cash and restricted cash	$	(127,773)	$	159,154		$	(286,927)	NM

Net Cash Provided by Operating Activities

Cash flows provided by operating activities were $309.7 million for the year ended December 31, 2025 as compared to $169.8 million for the year ended December 31, 2024. This increase was largely driven by increases in revenue and profits, decreases in cash paid for interest due to the multiple paydowns on our First Lien Credit Facility in 2024, and changes in working capital.

Net Cash Used in Investing Activities

Cash flows used in investing activities were $680.9 million for the year ended December 31, 2025 as compared to $27.3 million for the year ended December 31, 2024. This increase was primarily due to the $629.5 million of cash used in the Iodine acquisition during the year ended December 31, 2025 (see Part II, Item 8, “Financial Statements—Note 7”). Additionally, they also increased due to the net impact of purchases and sales of investment securities during the year ended December 31, 2025.

Net Cash Provided By Financing Activities

Cash flows provided by financing activities were $243.5 million for the year ended December 31, 2025 as compared to $16.7 million for the year ended December 31, 2024. The increase was due to the decrease in number of payments on our debt compared to the prior period (see Part II, Item 8, “Financial Statements—Note 13”), as well as an increase in proceeds from issuance of common stock from employee equity plans. These increases were partially offset by a decrease due to the proceeds from our IPO net of third-party IPO issuance costs (see Part II, Item 8, “Financial Statements—Note 1”) during the year ended December 31, 2024, as well as the issuance of debt, net of creditor fees (see Part II, Item 8, “Financial Statements—Note 13) in the prior period. Also driving a decrease is the settlement on our Louisville office lease during the year ended December 31, 2025 (see Part II, Item 8, “Financial Statements—Note 10).

Indebtedness

First Lien Credit Facilities

Our indirect wholly-owned subsidiary, Waystar Technologies, Inc., a Delaware corporation (the “Borrower”), is the Borrower under a first lien credit agreement, originally dated as of October 22, 2019 (as amended from time to time, the “First Lien Credit Agreement”). As of December 31, 2025, the agreement includes a term loans totaling $1,401.2 million outstanding, as well as a Revolving Credit Facility with a borrowing capacity of $500.0 million.

On February 9, 2024, the Borrower and certain lenders amended the First Lien Credit Agreement to, among others, (i) increase the total First Lien Credit Facility term loan balance to $2.2 billion, $449.6 million of which was utilized to pay off the remaining principal and interest on the Second Lien Credit Facility, and (ii) extend the maturity date of the First Lien Credit Facility to October 22, 2029. As of February 9, 2024, the effective interest rate under the First Lien Credit Facility was 4.00% per annum above the SOFR rate.

On June 27, 2024, the Borrower and certain lenders amended the First Lien Credit Agreement to, among other things, reprice the outstanding balance to an interest rate of 2.75% per annum above the SOFR rate with a minimum base of 0.00%.

Table of Contents

On December 30, 2024, the Borrower and certain lenders amended the First Lien Credit Agreement to, among other things, (i) fully refinance the Borrower’s $1,17 billion aggregate outstanding principal amount of term loans under the Existing Credit Agreement with replacement term loans bearing reduced interest at a rate per annum equal to, at the election of the Borrower, either (a) Adjusted Term SOFR (as defined in the First Lien Credit Agreement) subject to a floor of 0.00%, plus an applicable rate of 2.25% (compared to the previous applicable rate of 2.75%) or (b) the Alternate Base Rate (as defined in the First Lien Credit Agreement) subject to a floor of 1.00%, plus an applicable rate of 1.25% (compared to the previous applicable rate of 1.75%), (ii) increase the maximum borrowing capacity under the Revolving Credit Facility from $342.5 million to $400.0 million and (iii) reduce the interest rates under the Revolving Credit Facility to (a) Adjusted Term SOFR, plus an initial applicable rate of 1.75% (compared to the previous applicable rate of 2.25%) with adjustments to an applicable rate between 1.75% and 2.50% and (b) the Alternate Base Rate, plus an initial applicable rate of 0.75% (compared to the previous applicable rate of 1.25%) with adjustments to an applicable rate between 0.75% and 1.50%. Such adjustments will depend on the achievement of certain leverage ratios specified in the First Lien Credit Agreement.

On August 12, 2025, we executed the Eleventh Amendment on the First Lien Credit Agreement whereby the outstanding balance was repriced bearing an interest rate of 2.00% per annum above the SOFR rate with a minimum base of 0.00%.

On October 1, 2025, we entered into the Twelfth Amendment to the First Lien Credit Agreement to increase our First Lien Credit Facility by $250.0 million. Additionally, the amendment increased the maximum borrowing capacity under the revolving credit facility from $400.0 million to $500.0 million and decreased the interest rate under the Revolving Credit Facility from 1.75% per annum above SOFR to 1.50% per annum above SOFR.

All obligations under the First Lien Credit Agreement are unconditionally guaranteed on a senior first lien priority basis by, subject to certain exceptions, the Borrower and each of the Borrower’s existing and subsequently acquired or organized direct or indirect wholly owned restricted subsidiaries organized in the United States. Additionally, the obligations under First Lien Credit Agreement and such guarantees are secured on a first lien priority basis, subject to certain exceptions and excluded assets, by (i) the equity securities of the Borrower and of each subsidiary guarantor and (ii) security interests in, and mortgages on, substantially all personal property and material owned real property by the Borrower and each subsidiary guarantor.

Borrowings under the First Lien Credit Agreement currently bear interest at a 1.00% for alternate base rate ("ABR") loans and 2.00% for Adjusted Term SOFR loans under the first lien term loans. Borrowings under the First Lien Credit Agreement currently bear an interest rate per annum between 1.50% and 2.25% plus SOFR under the Revolving Credit Facility, depending on the applicable first lien leverage ratio.

In addition to paying interest on outstanding principal under the first lien term loans and the Revolving Credit Facility, the Borrower is required to pay a commitment fee, payable quarterly in arrears, of 0.375% per annum on the average daily unused portion of the Revolving Credit Facility, with step-down to 0.25% per annum, in each case, on such portion upon achievement of certain first lien leverage ratios. The Borrower must also pay customary letter of credit issuance and participation fees and other customary fees and expenses of the letter of credit issuers.

The Borrower is required to repay installments on the first lien term loans in quarterly principal amounts equal to approximately $3.5 million on the last business day of each March, June, September, and December of each year, with the balance payable on October 22, 2029. Additionally, the entire principal amount of revolving loans outstanding (if any) under the Revolving Credit Facility are due and payable in full at maturity on October 6, 2028, subject to the Springing Maturity Condition, on which day the revolving credit commitments thereunder will terminate.

The Borrower is required, subject to certain exceptions, to pay outstanding amounts of the first lien term loan, (i) with 50% of excess cash flow, with step-downs upon achievement of certain first lien net leverage ratios, (ii) with 100% of the net cash proceeds of all non-ordinary course asset sales by the Borrower and its restricted subsidiaries, subject to customary reinvestment right, and (iii) with 100% of the net cash proceeds of issuances of debt obligations of the Borrower and its restricted subsidiaries, other than permitted debt. Additionally, the Borrower may voluntarily repay outstanding loans under the first lien term loan and the Revolving Credit Facility at any time without premium or penalty. In addition, the Borrower may elect to permanently terminate or reduce all or a portion of the revolving credit commitments and the letter of credit sub-limit under the Revolving Credit Facility at any time without premium or penalty.

Table of Contents

The First Lien Credit Agreement also includes customary representations, warranties, covenants, and events of default (with customary grace periods, as applicable).

As of December 31, 2025, we had $1,401.2 million of outstanding borrowings on the first lien term loan and $500 million of availability under the Revolving Credit Facility under the First Lien Credit Agreement, and outstanding letters of credit of $0 million under the First Lien Credit Agreement. As of December 31, 2025 and 2024, we were in compliance with the covenants under the First Lien Credit Agreement.

Second Lien Credit Facilities

Our indirect wholly-owned subsidiary, Waystar Technologies, Inc., a Delaware corporation (the “Borrower”), is the Borrower under a second lien credit agreement, dated as of October 22, 2019 (as amended from time to time, the “Second Lien Credit Agreement”), that initially provided for a second lien term loan of $255.0 million. On February 9, 2024, we utilized proceeds from the amended First Lien Credit Facility to paydown the remaining principal and interest on the Second Lien Credit Facility.

Receivables Facility

On August 13, 2021, the Borrower, as servicer, and Waystar RC LLC, a wholly-owned “bankruptcy remote” special purpose vehicle, as “Receivables Borrower”, entered into a receivables financing agreement (the “Receivables Financing Agreement”). As of December 31, 2025, Receivables Financing agreement has an interest rate of 1.61% per annum above SOFR. All amounts outstanding under the Receivables Financing Agreement are collateralized by substantially all of the accounts receivables and unbilled revenue of the Receivables Borrower. The current maturity date is October 31, 2026.

In connection with the Receivables Financing Agreement, eligible accounts receivable of certain of our subsidiaries are sold to the Receivables Borrower. The Receivables Borrower pledges the receivables as security for loans. The accounts receivable owned by the Receivables Borrower are separate and distinct from our other assets and are not available to our other creditors should we become insolvent.

The Receivables Financing Agreement also contains customary representations, warranties, covenants, and default provisions.

As of December 31, 2025, the Receivables Borrower had $80 million in outstanding borrowings under the Receivables Financing Agreement. As of December 31, 2025 and 2024, we were in compliance with the covenants under the Receivables Financing Agreement.

Critical Accounting Policies and Estimates

The above discussion and analysis of our financial condition and results of operations is based upon our consolidated financial statements. The preparation of financial statements in conformity with GAAP requires management to make estimates and judgments that affect the reported amounts of assets, liabilities, revenue, and expenses, and disclosures of contingent assets and liabilities. Our significant accounting policies are described in Note 2, “Significant Accounting Policies,” of the accompanying consolidated financial statements included elsewhere in this report. Critical accounting policies are those that we consider to be the most important in portraying our financial condition and results of operations and also require the greatest amount of judgments by management. Judgments or uncertainties regarding the application of these policies may result in materially different amounts being reported under different conditions or using different assumptions. We consider the following policies to be the most critical in understanding the judgments that are involved in preparing the consolidated financial statements.

Revenue Recognition

Revenue is recognized for each performance obligation upon transfer of control of the software solutions to the client in an amount that reflects the consideration we expect to receive. Revenues are recognized net of any taxes collected from clients and subsequently remitted to governmental authorities.

Table of Contents

revenue for all periods presented. We also derive revenue from implementation fees for our software, as well as hardware sales to facilitate patient payments.

Revenue from our subscription services as well as from our volume-based services represents a single promise to provide continuous access (i.e., a stand-ready obligation) to our software solutions in the form of a service. Our software products are made available to our clients via a cloud-based, hosted platform where our clients do not have the right or practical ability to take possession of the software. As each day of providing access to the software solutions is substantially the same and the client simultaneously receives and consumes the benefits as services are provided, these services are viewed as a single performance obligation comprised of a series of distinct daily services.

Revenue from our subscription services is recognized over time on a ratable basis over the contract term beginning on the date that the service is made available to the client. Volume-based services are priced based on transaction, dollar volume or provider count in a given period. Given the nature of the promise is based on unknown quantities or outcomes of services to be performed over the contract term, the volume-based fee is determined to be variable consideration. The volume-based transaction fees are recognized each day using a time-elapsed output method based on the volume or transaction count at the time the clients’ transactions are processed.

Our other services are generally related to implementation activities across all solutions and hardware sales to facilitate patient payments. Implementation services are not considered performance obligations as they do not provide a distinct service to clients without the use of our software solutions. As such, implementation fees related to our solutions are billed upfront and recognized ratably over the contract term. Implementation fees and hardware sales represent less than 1% of total revenue for all periods presented.

Revenue recorded where we act in the capacity of a principal is reported on a gross basis equal to the full amount of consideration to which we expect in exchange for the good or service transferred. Revenue recorded where we act in the capacity of an agent is reported on a net basis, exclusive of any consideration provided to the principal party in the transaction.

The principal versus agent evaluation is a matter of judgment that depends on the facts and circumstances of the arrangement and is dependent on whether we control the good or service before it is transferred to the client or whether we are acting as an agent of a third party. This evaluation is performed separately for each performance obligation identified. For the majority of our contracts, we are considered the principal in the transaction with the client and recognize revenue gross of any related channel partner fees or costs. We have certain agency arrangements where third parties control the goods or services provided to a client, and we recognize revenue net of any fees owed to these third parties.

Goodwill and Long-Lived Assets

Goodwill and long-lived assets comprise 91.7% of our total assets as of December 31, 2025. Goodwill represents the excess of consideration paid over the estimated fair value of the net intangible and identifiable intangible assets acquired in business combinations. We evaluate goodwill for impairment annually on October 1st or whenever there is an impairment indicator. Potential impairment indicators may include, but are not limited to, the results of our most recent annual or interim impairment testing, downward revisions to internal forecasts, macroeconomic conditions, industry and market considerations, cost factors, overall financial performance, changes in management and key personnel, changes in composition or carrying amount of net assets, and changes in share price.

ASC Topic 350, Intangibles — Goodwill and Other (“ASC 350”), allows entities to first use a qualitative approach to test goodwill for impairment by determining whether it is more likely than not (a likelihood of greater than 50%) that the fair value of a reporting unit is less than its carrying value. If the qualitative assessment supports that it is more likely than not that the fair value of the asset exceeds its carrying value, a quantitative impairment test is not required. If the qualitative assessment indicates that it is more likely than not that the fair value of the asset does not exceed its carrying value, we will perform the quantitative goodwill impairment test, in which we compare the fair value of the reporting unit to the respective carrying value, which includes goodwill. If the fair value of the reporting unit exceeds its carrying value, then goodwill is not considered impaired. If the carrying value is higher than the fair value, the difference would be recognized as an impairment loss.

Goodwill is tested for impairment at the reporting unit level, which is defined as an operating segment or one level below an operating segment (referred to as a component). Our single operating segment is also our single reporting unit as

Table of Contents

we do not have segment managers and there is no discrete information reviewed at a level lower than the consolidated entity level. All of our assets and liabilities are assigned to this single reporting unit.

For our annual goodwill impairment test during the year ended December 31, 2025, we elected to perform a qualitative assessment. Our assessment of relevant events and circumstances was designed to indicate whether it is more likely than not that the fair value of a reporting unit is less than its carrying amount. The assessment considered whether or not we observed changes in market conditions within the industry and macroeconomy, changes in cost factors which could result in a negative effect on earnings or financial performance of the reporting unit, such as negative or declining cash flows compared to prior period results, and other entity-specific events or conditions impacting the reporting unit. There were no indicators that it was more likely than not that the fair value of the asset did not exceed its carrying value. In connection with our goodwill impairment testing performed as of December 31, 2025, 2024, and 2023, we concluded that there was no impairment to goodwill.

Prior assessments have indicated that the fair value exceeds the carrying value for the reporting unit with reasonable headroom and no indication of impairment. However, we elect to perform a goodwill impairment test utilizing a quantitative approach every fourth year in order to calculate a new fair value “base” to which future qualitative tests can be compared. Our most recent quantitative assessment was performed as of October 1, 2024. We utilized both an income approach and market approach to calculate a fair value of our single reporting unit, Waystar, and compared that value to our carrying value as of October 1, 2024. As a result of this analysis, our fair value under each method exceeded our carrying value and therefore, no impairment was recorded.

Long-lived assets are amortized over their useful lives. We evaluate the remaining useful life of long-lived assets periodically to determine if events or changes in circumstances warrant a revision to the remaining period of amortization. The carrying amounts of these assets are reviewed for impairment whenever events or changes in circumstances indicate that the carrying value of these assets may not be recoverable. We measure the recoverability of these assets by comparing the carrying amount of the asset group to the future undiscounted cash flows the assets are expected to generate. If the undiscounted cash flows used in the test for recoverability are less than the carrying amount of the asset group, then the carrying amount of such assets is reduced to fair value.

Business Combinations

The results of businesses acquired in business combinations are included in our consolidated financial statements from the date of the acquisition. Purchase accounting results in assets and liabilities of an acquired business being recorded at their estimated fair values on the acquisition date. Any excess consideration over the fair value of assets acquired and liabilities assumed is recognized as goodwill. The purchase price allocation process requires management to make significant judgment and estimates, including the selection of valuation methodologies, estimates of future expected cash flows, future revenue growth, margins, customer attrition rates, technology life, royalty rates, expected use of acquired assets, and discount rates. These factors are also considered in determining the useful life of the acquired intangible assets. These estimates are based in part on historical experience, market conditions and information obtained from management of the acquired companies and are inherently uncertain. We engage the assistance of valuation specialists in concluding on fair value measurements in connection with determining fair values of assets acquired and liabilities assumed in business combinations.

Recent Accounting Pronouncements

Refer to Part II, Item 8, “Financial Statements—Note 2 (Summary of Significant Accounting Policies)”.

Item 7A. Qualitative and Quantitative Disclosures About Market Risk

We are exposed to certain market risks arising from transactions in the normal course of our business. Such risks are principally associated with credit risk and interest rate risk.

Table of Contents

Credit Risk

Credit risk involves the possibility that a counterparty will not meet its obligations under a financial instrument or client contract, leading to a financial loss. Concentrations of credit risk with respect to our clients are limited due to our diversified client base.

We routinely assess the financial strength of our clients through a combination of third-party financial reports, credit monitoring, publicly available information, and direct communication with those clients. We establish payment terms with clients to mitigate credit risk and monitor its accounts receivable credit risk exposure. However, while we actively seek to ensure credit risk, there can be no assurance that in the future it will be able to obtain credit risk insurance at commercially attractive terms or at all.

Interest Rate Risk

Our exposure to interest rate risk is related to our First Lien Credit Facility, which bears interest at SOFR plus 2.00% as of December 31, 2025. A hypothetical 100 basis point increase or decrease in the current effective rate would have had an impact on our interest expense of approximately $13.2 million for the year ended December 31, 2025.

In order to limit exposure to risk, we maintain derivative instruments with creditworthy institutions to hedge against changing interest rate fluctuations. We utilize interest rate swap contracts and other non- derivative hedging instruments to manage such risk.

Table of Contents

Item 8. Financial Statements and Supplementary Data

INDEX TO FINANCIAL STATEMENTS


			Page
Audited Financial Statements
Report of Independent Registered Public Accounting Firm (KPMG LLP, Indianapolis, Indiana, Auditor Firm ID: 185)			75
Consolidated balance sheets as of December 31, 2025 and December 31, 2024			79
Consolidated statements of operations for the years ended December 31, 2025, December 31, 2024 and December 31, 2023			80
Consolidated statements of comprehensive income/(loss) for the years ended December 31, 2025, December 31, 2024 and December 31, 2023			81
Consolidated statements of changes in stockholders’ equity for the years ended December 31, 2025, December 31, 2024 and December 31, 2023			82
Consolidated statements of cash flows for the years ended December 31, 2025, December 31, 2024 and December 31, 2023			83
Notes to consolidated financial statements			84

Table of Contents

Report of Independent Registered Public Accounting Firm

To the Stockholders and Board of Directors

Waystar Holding Corp.:

Opinion on the Consolidated Financial Statements

We have audited the accompanying consolidated balance sheets of Waystar Holding Corp. and subsidiaries (the Company) as of December 31, 2025 and 2024, the related consolidated statements of operations, comprehensive income/(loss), changes in stockholders’ equity, and cash flows for each of the years in the three-year period ended December 31, 2025, and the related notes (collectively, the consolidated financial statements). In our opinion, the consolidated financial statements present fairly, in all material respects, the financial position of the Company as of December 31, 2025 and 2024, and the results of its operations and its cash flows for each of the years in the three-year period ended December 31, 2025, in conformity with U.S. generally accepted accounting principles.

We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the Company's internal control over financial reporting as of December 31, 2025, based on criteria established in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission, and our report dated February 16, 2026 expressed an unqualified opinion on the effectiveness of the Company's internal control over financial reporting.

Basis for Opinion

These consolidated financial statements are the responsibility of the Company’s management. Our responsibility is to express an opinion on these consolidated financial statements based on our audits. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.

We conducted our audits in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether the consolidated financial statements are free of material misstatement, whether due to error or fraud. Our audits included performing procedures to assess the risks of material misstatement of the consolidated financial statements, whether due to error or fraud, and performing procedures that respond to those risks. Such procedures included examining, on a test basis, evidence regarding the amounts and disclosures in the consolidated financial statements. Our audits also included evaluating the accounting principles used and significant estimates made by management, as well as evaluating the overall presentation of the consolidated financial statements. We believe that our audits provide a reasonable basis for our opinion.

Critical Audit Matters

The critical audit matters communicated below are matters arising from the current period audit of the consolidated financial statements that were communicated or required to be communicated to the audit committee and that: (1) relate to accounts or disclosures that are material to the consolidated financial statements and (2) involved our especially challenging, subjective, or complex judgments. The communication of critical audit matters does not alter in any way our opinion on the consolidated financial statements, taken as a whole, and we are not, by communicating the critical audit matters below, providing separate opinions on the critical audit matters or on the accounts or disclosures to which they relate.

Acquisition date fair value of customer relationship intangible asset

As discussed in Note 7 to the consolidated financial statements, on October 1, 2025, the Company completed the acquisition of Iodine Software Holdings, Inc. for an aggregate purchase price of approximately $1,259.8 million. The Company applied the acquisition method of accounting and recognized assets acquired and liabilities assumed at their fair value as of the date of acquisition, with the excess purchase consideration recorded to goodwill. As a result of the

Table of Contents

transaction, the Company recorded a customer relationship intangible asset at a preliminary fair value of $290.6 million valued using the multi-period excess earnings method.

We identified the evaluation of the acquisition-date fair value of the customer relationship intangible asset as a critical audit matter. Subjective auditor judgment was required to evaluate the revenue forecast used to estimate the acquisition-date fair value of the customer relationship intangible asset. Changes in the revenue forecast could have had a significant impact on the acquisition-date fair value of the intangible asset.

The following are the primary procedures we performed to address this critical audit matter. We evaluated the design and tested the operating effectiveness of an internal control related to the Company's process to estimate the acquisition-date fair value of the customer relationship intangible asset. This included a control related to the determination of the revenue forecast. We evaluated the revenue forecast by comparing it to the historical financial results of the acquired company and relevant market data.

/s/ KPMG LLP

We have served as the Company’s auditor since 2021.

Indianapolis, Indiana

February 16, 2026

Table of Contents

Report of Independent Registered Public Accounting Firm

To the Stockholders and Board of Directors

Waystar Holding Corp.:

Opinion on the Consolidated Financial Statements

We have audited Waystar Holding Corp. and subsidiaries' (the Company) internal control over financial reporting as of December 31, 2025, based on criteria established in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. In our opinion, the Company maintained, in all material respects, effective internal control over financial reporting as of December 31, 2025, based on criteria established in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission.

We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the consolidated balance sheets of the Company as of December 31, 2025 and 2024, the related consolidated statements of operations, comprehensive income/(loss), changes in stockholders' equity, and cash flows for each of the years in the three year period ended December 31, 2025, and the related notes (collectively, the consolidated financial statements), and our report dated February 16, 2026 expressed an unqualified opinion on those consolidated financial statements.

The Company acquired Iodine Software Holdings, Inc. (Iodine) during 2025, and management excluded the entity from its assessment of the effectiveness of the Company's internal control over financial reporting as of December 31, 2025. The total assets and revenue of Iodine represented $1,397.7 million and $31.0 million of the consolidated total assets and the consolidated total revenue of the Company, respectively, as of and for the fiscal year ended December 31, 2025. Our audit of internal control over financial reporting of the Company also excluded an evaluation of the internal control over financial reporting of Iodine Software Holdings, Inc..

Basis for Opinion

The Company's management is responsible for maintaining effective internal control over financial reporting and for its assessment of the effectiveness of internal control over financial reporting, included in the accompanying Management's Report on Internal Control over Financial Reporting. Our responsibility is to express an opinion on the Company's internal control over financial reporting based on our audit. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.

We conducted our audit in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether effective internal control over financial reporting was maintained in all material respects. Our audit of internal control over financial reporting included obtaining an understanding of internal control over financial reporting, assessing the risk that a material weakness exists, and testing and evaluating the design and operating effectiveness of internal control based on the assessed risk. Our audit also included performing such other procedures as we considered necessary in the circumstances. We believe that our audit provides a reasonable basis for our opinion.

Definition and Limitations of Internal Control Over Financial Reporting

A company's internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. A company's internal control over financial reporting includes those policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the company; and (3) provide reasonable assurance regarding prevention or timely detection

Table of Contents

of unauthorized acquisition, use, or disposition of the company's assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

/s/ KPMG LLP

Indianapolis, Indiana

February 16, 2026

Table of Contents

Waystar Holding Corp.

Consolidated Balance Sheets (in Thousands, Except for Share and Per Share Data)

As of December 31, 2025 and 2024


	2025		2024
Assets
Current assets
Cash and cash equivalents	$	61,355	$	182,133
Restricted cash	15,454		22,449
Investment securities	24,877		—
Accounts receivable, net of allowance of $6,170 as of December 31, 2025 and $5,885 as of December 31, 2024	177,037		145,235
Income tax receivable	6,437		2,838
Prepaid expenses	20,078		14,414
Other current assets	3,174		3,972
Total current assets	308,412		371,041
Property, plant and equipment, net	51,649		46,731
Operating lease right-of-use assets, net	12,972		10,820
Intangible assets, net	1,292,839		1,039,049
Goodwill	4,016,818		3,019,999
Deferred costs	93,951		82,815
Other long-term assets	8,459		6,549
Total assets	$	5,785,100	$	4,577,004
Liabilities and stockholders’ equity
Current liabilities
Accounts payable	$	50,949	$	47,365
Accrued compensation	40,942		31,589
Aggregated funds payable	15,104		22,059
Other accrued expenses	22,990		15,930
Deferred revenue	67,855		10,527
Current portion of long-term debt	13,537		11,311
Related party current portion of long-term debt	657		357
Current portion of operating lease liabilities	6,029		5,591
Current portion of finance lease liabilities	—		904
Total current liabilities	218,063		145,633
Long-term liabilities
Deferred tax liability	211,320		100,523
Long-term debt, net, less current portion	1,394,523		1,185,411
Related party long-term debt, net, less current portion	64,186		35,211
Operating lease liabilities, net of current portion	11,994		13,133
Finance lease liabilities, net of current portion	—		11,290
Deferred revenue - long-term	5,496		5,739
Other long-term liabilities	692		278
Total liabilities	1,906,274		1,497,218
Commitments and contingencies (Note 21)
Stockholders’ equity
Preferred stock 0.01 par value - 100,000,000 shares authorized as of December 31, 2025 and December 31, 2024, respectively; zero shares issued and outstanding as of December 31, 2025 and December 31, 2024, respectively	—		—
Common stock 0.01 par value - 2,500,000,000 shares authorized as of December 31, 2025 and December 31, 2024, respectively; 191,587,193 and 172,108,240 shares issued and outstanding as of December 31, 2025 and December 31, 2024, respectively	1,916		1,722
Additional paid-in capital	3,986,353		3,298,083
Accumulated other comprehensive income (loss)	(632)		881
Accumulated deficit	(108,811)		(220,900)
Total stockholders’ equity	3,878,826		3,079,786
Total liabilities and stockholders’ equity	$	5,785,100	$	4,577,004

The accompanying notes are an integral part of these audited consolidated financial statements.

Table of Contents

Waystar Holding Corp.

Consolidated Statements of Operations (in Thousands, Except for Share and Per Share Data)


	Years ended December 31,
	2025		2024		2023
Revenue	$	1,099,278	$	943,549	$	791,010
Operating expenses
Cost of revenue (exclusive of depreciation and amortization expenses)	348,162		315,730		249,767
Sales and marketing	178,017		156,935		124,437
General and administrative	128,623		111,753		62,924
Research and development	54,623		48,775		35,332
Depreciation and amortization	140,548		186,631		176,467
Total operating expenses	849,973		819,824		648,928
Income from operations	249,305		123,725		142,083
Other expense
Interest expense, net	(74,063)		(141,762)		(198,309)
Related party interest expense	(3,479)		(4,508)		(7,608)
Income/(loss) before income taxes	171,763		(22,545)		(63,834)
Income tax expense / (benefit)	59,674		(3,420)		(12,500)
Net income/(loss)	$	112,089	$	(19,125)	$	(51,334)
Net income/(loss) per share:
Basic	$	0.63	$	(0.13)	$	(0.42)
Diluted	$	0.61	$	(0.13)	$	(0.42)
Weighted-average shares outstanding:
Basic	177,926,745		149,915,839		121,675,430
Diluted	184,783,285		149,915,839		121,675,430

The accompanying notes are an integral part of these audited consolidated financial statements.

Table of Contents

Waystar Holding Corp.

Consolidated Statements of Comprehensive Income/(Loss) (in Thousands)


	Years ended December 31,
	2025		2024		2023
Net income/(loss)	$	112,089	$	(19,125)	$	(51,334)
Other comprehensive income/(loss), before tax:
Interest rate swaps and cap	(1,996)		(19,728)		(18,651)
Available-for-sale securities	(3)		$	—	$	—
Income tax effect:
Interest rate swaps and cap	485		4,807		4,615
Available-for-sale securities	1		—		—
Other comprehensive income/(loss), net of tax	(1,513)		(14,921)		(14,036)
Comprehensive income/(loss), net of tax	$	110,576	$	(34,046)	$	(65,370)

___________________________________________________

(1)Amounts reclassified out of accumulated other comprehensive income/(loss) into net interest expense included $4,446, $29,175 and $31,386 for the years ended December 31, 2025, 2024, and 2023, respectively.

(2)The income tax effects of amounts reclassified out of accumulated other comprehensive income/(loss) were $(1,094), $(7,084) and $(7,620) for the years ended December 31, 2025, 2024, and 2023, respectively.

The accompanying notes are an integral part of these audited consolidated financial statements.

Table of Contents

Waystar Holding Corp.

Consolidated Statements of Changes in Stockholders’ Equity (in Thousands, Except Share Data)


	Twelve months ended December 31, 2025
	Common Stock			Additional Paid-In Capital		Accumulated Other Comprehensive Income (Loss)		Accumulated Deficit		Total
	Shares	Amount
Balances at December 31, 2024	172,108,240	$	1,722	$	3,298,083	$	881	$	(220,900)	$	3,079,786
Share-based compensation	—	—		41,850		—		—		41,850
Issuance of common stock under employee equity plans	2,839,033	27		25,752		—		—		25,779
Common stock issued related to acquisition (see Note 7)	16,639,920	167		620,668		—		—		620,835


Net income	—	—		—		—		112,089		112,089
Other comprehensive income (loss)	—	—		—		(1,513)		—		(1,513)
Balances at December 31, 2025	191,587,193	$	1,916	$	3,986,353	$	(632)	$	(108,811)	$	3,878,826


	Twelve months ended December 31, 2024
	Common Stock			Additional Paid-In Capital		Accumulated Other Comprehensive Income (Loss)		Accumulated Deficit		Total
	Shares	Amount
Balances at December 31, 2023	121,679,902	$	1,217	$	2,234,688	$	15,802	$	(201,775)	$	2,049,932
Stock-based compensation	—	—		54,943		—		—		54,943
Issuance of common stock under employee equity plans	392,016	6		1,677		—		—		1,683
Repurchase of shares	(22,688)	(1)		(843)		—		—		(844)
Capital distributions	—	—		(99)		—		—		(99)
Issuance of common stock in initial public offering (inclusive of underwriters’ exercise of the overallotment option on July 5, 2024), net of issuance costs	50,059,010	500		1,007,717		—		—		1,008,217
Net loss	—	—		—		—		(19,125)		(19,125)
Other comprehensive income (loss)	—	—		—		(14,921)		—		(14,921)
Balances at December 31, 2024	172,108,240	$	1,722	$	3,298,083	$	881	$	(220,900)	$	3,079,786


	Twelve months ended December 31, 2023
	Common Stock			Additional Paid-In Capital		Accumulated Other Comprehensive Income (Loss)		Accumulated Deficit		Total
	Shares	Amount
Balances at December 31, 2022	121,670,948	$	1,217	$	2,225,618	$	29,838	$	(150,441)	$	2,106,232
Stock-based compensation	—	—		8,848		—		—		8,848
Issuance of common stock under employee equity plans	26,268	1		424		—		—		425
Repurchase of shares	(17,314)	(1)		(687)		—		—		(688)
Capital distributions	—	—		485		—		—		485
Net loss	—	—		—		—		(51,334)		(51,334)
Other comprehensive income (loss)	—	—		—		(14,036)		—		(14,036)
Balances at December 31, 2023	121,679,902	$	1,217	$	2,234,688	$	15,802	$	(201,775)	$	2,049,932

The accompanying notes are an integral part of these audited consolidated financial statements.

Table of Contents

Waystar Holding Corp.

Consolidated Statements of Cash Flows (in Thousands)


	Year ended December 31,
	2025		2024		2023
Cash flows from operating activities
Net income/(loss)	$	112,089	$	(19,125)	$	(51,334)
Adjustments to reconcile net income/(loss) to net cash provided by operating activities
Depreciation and amortization	140,548		186,631		176,467
Stock-based compensation	42,069		54,437		8,848
Provision for bad debt expense	3,320		2,669		2,419
Loss on extinguishment of debt	821		20,611		393
Loss on lease termination	838		—		—
Deferred income taxes	45,222		(59,135)		(61,665)
Amortization of debt discount and issuance costs	2,697		3,946		10,471
Other	154		(99)		485
Changes in:
Accounts receivable	(7,324)		(21,816)		(16,714)
Income tax refundable	(16,993)		3,973		(2,459)
Prepaid expenses and other current assets	(1,947)		(2,322)		(9,705)
Deferred costs	(10,866)		(16,497)		(14,189)
Other long-term assets	(2,376)		(472)		(1,664)
Accounts payable and accrued expenses	8,932		18,228		11,920
Deferred revenue	(4,658)		(842)		(167)
Operating lease right-of-use assets and lease liabilities	(2,853)		(419)		(1,691)
Other long-term liabilities	—		—		45
Net cash provided by operating activities	309,673		169,768		51,460
Cash flows from investing activities
Purchase of property and equipment and capitalization of internally developed software costs	(26,481)		(27,268)		(21,517)
Acquisitions, net of cash and cash equivalents acquired	(629,535)		—		(40,000)
Purchase of investment securities	(231,324)		—		—
Proceeds from sale of investment securities	206,444		—		—
Net cash used in investing activities	(680,896)		(27,268)		(61,517)
Cash flows from financing activities
Change in aggregated funds liability	(6,955)		12,399		2,105
Proceeds from equity offering, net of underwriting discounts	—		1,017,074		—
Payments of third-party IPO issuance costs	—		(3,407)		—
Repurchase of shares	—		(844)		(688)
Proceeds from issuance of common stock from employee equity plans	25,779		1,683		425
Proceeds from issuances of debt, net of creditor fees	390,140		576,060		20,000
Payments on debt	(152,440)		(1,584,080)		(37,983)
Third-party fees paid in connection with issuance of new debt	(42)		(1,410)		(219)
Finance lease liabilities paid	(13,032)		(821)		(791)
Net cash provided by (used in) financing activities	243,450		16,654		(17,151)
Increase/(decrease) in cash and cash equivalents during the period	(127,773)		159,154		(27,208)
Cash and cash equivalents and restricted cash–beginning of period	204,582		45,428		72,636
Cash and cash equivalents and restricted cash–end of period	$	76,809	$	204,582	$	45,428
Supplemental disclosures of cash flow information
Interest paid	$	81,666	$	122,771	$	193,003
Cash taxes paid (refunds received), net	32,418		51,100		51,449
Non-cash investing and financing activities
Fixed asset purchases in accounts payable	280		283		1,091
Unpaid third-party IPO issuance costs	—		15		—
Common stock issued in connection to acquisitions (see Note 7)	620,835		—		—
Reconciliation of Balance Sheet Cash Accounts to Cash Flow Statement
Balance sheet
Cash and cash equivalents	61,355		182,133		35,580
Restricted cash	15,454		22,449		9,848
Total	76,809		204,582		45,428

The accompanying notes are an integral part of these audited consolidated financial statements.

Table of Contents

1. Business

Waystar Holding Corp. (“Waystar”, “we” or “our”) is a provider of mission-critical cloud technology to healthcare organizations. Our enterprise-grade platform transforms the complex and disparate processes comprising healthcare payments received by healthcare providers from payers and patients, from pre-service engagement through post-service remittance and reconciliation. Our platform enhances data integrity, eliminates manual tasks, and improves claim and billing accuracy, which results in better transparency, reduced labor costs, and faster, more accurate reimbursement and cash flow. The market for our solutions extends throughout the United States and includes Puerto Rico and other U.S. Territories.

Risks and Uncertainties — We are subject to risks common to companies in similar industries, including, but not limited to, our operation in a highly competitive industry; our ability to retain our existing clients and attract new clients; our ability to successfully execute on our business strategies in order to grow; our ability to accurately assess the risks related to acquisitions and successfully integrate acquired businesses, including the acquisition of Iodine; our ability to establish and maintain strategic relationships; the growth and success of our clients and overall healthcare transaction volumes; consolidation in the healthcare industry; our selling cycle of variable length to secure new client agreements; our implementation cycle that is dependent on our clients’ timing and resources; our dependence on our senior management team and certain key employees, and our ability to attract and retain highly skilled employees; the accuracy of the estimates and assumptions we use to determine the size of our total addressable market; our ability to develop and market new solutions, or enhance our existing solutions, to respond to technological changes or evolving industry standards; the interoperability, connectivity, and integration of our solutions with our clients’ and their vendors’ networks and infrastructures; the performance and reliability of internet, mobile, and other infrastructure; the consequences if we cannot obtain, process, use, disclose, or distribute the highly regulated data we require to provide our solutions; our reliance on certain third-party vendors and providers.

On occasion, we enter into standard indemnification arrangements in the ordinary course of business. Pursuant to these arrangements, we indemnify, hold harmless, and agree to reimburse the indemnified parties for losses suffered or incurred by the indemnified party, in connection with any trade secret, copyright, patent, or other intellectual property infringement claim by any third party with respect to its technology. The terms of these indemnification agreements are generally perpetual any time after the execution of the agreement. The maximum potential future payments we could be required to make under these agreements is not determinable because it involves claims that may be made against us in the future but have not yet been made. Historically, we have not incurred costs to defend lawsuits or settle claims related to these indemnification agreements.

We have entered into agreements with our directors or officers that may require us to indemnify them against liabilities that may arise by reason of their status or service as directors or officers, other than liabilities arising from their willful misconduct.

No liability associated with such indemnifications was recorded as of December 31, 2025 and December 31, 2024.

Reverse Stock Split

On May 15, 2024, we effected a 0.605-for-1 reverse stock split of our common stock and a 0.605-for-1 reverse stock split of our Class A common stock. The reverse stock split did not result in an adjustment to the par value of common stock or Class A common stock. The reverse stock split was originally made effective on May 15, 2024 with a 0.62-for-1 ratio and this was retroactively amended on May 22, 2024 which updated the ratio to 0.605-for-1. All references in the accompanying consolidated financial statements and related Note 15, Note 17, and Note 19 have been updated to reflect the effects of the reverse stock split at the amended 0.605-for-1 ratio. The number of shares of common stock, Class A common stock, additional paid-in-capital, options to purchase common stock, and loss per share amounts, which are presented and disclosed in the financial statements and aforementioned footnotes, have been restated on a retroactive basis for all periods presented to reflect the effects of this action.

Initial Public Offering

In June 2024, we completed our initial public offering (“IPO”) in which we issued and sold 45,000,000 shares of our common stock at $21.50 per share. We received total proceeds of $914.3 million after deducting the underwriters’

Table of Contents

discounts and commissions of $53.2 million. Deferred offering costs, which consist of direct incremental legal, accounting and other third-party fees that are directly related to the IPO, were capitalized and offset against proceeds upon the consummation of the IPO. Through the date of the IPO, we had capitalized $8.8 million of deferred offering costs. These costs were offset against proceeds upon the consummation of the IPO.

As part of the IPO we granted the underwriters an overallotment option, for a period of 30 days from the date of the prospectus, to purchase up to 6,750,000 additional shares of common stock from us at the initial public offering price less the underwriting discount. On July 5, 2024, the underwriters exercised the overallotment option to purchase 5,059,010 additional shares of common stock, resulting in additional net proceeds of $102.8 million after deducting underwriting discounts and commissions of $6.0 million. The remaining option to purchase additional shares expired unexercised at the end of the 30-day period.

We used the net proceeds from the IPO and the underwriters’ exercise of the overallotment option on July 5, 2024, to repay $909.1 million and $110.9 million, respectively, of outstanding principal indebtedness under our First Lien Credit Facility (as defined below). See Note 12 below for details.

Secondary Offerings

On February 24, 2025, the Institutional Investors closed an underwritten public offering of 23,000,000 shares of our common stock (inclusive of the underwriters’ option to purchase additional shares) (the “First Secondary Offering”). On May 15, 2025, the Institutional Investors closed another underwritten public offering of 14,375,000 shares of our common stock (inclusive of the underwriters' option to purchase additional shares) (the "Second Secondary Offering"). Additionally on September 10, 2025, the Institutional Investors closed another underwritten public offering of 18,000,000 shares of our common stock (the "Third Secondary Offering"). We did not sell any shares in these offerings or receive any proceeds from these offerings. Pursuant to the terms of the Amended and Restated Registration Rights Agreement, dated as of June 10, 2024, by and among Waystar, the Institutional Investors, and certain other parties thereto, we paid $4.6 million in certain expenses on behalf of the selling stockholders related to these offerings for the twelve months ended December 31, 2025, while the selling stockholders paid all applicable underwriting discounts and commissions.

2. Summary of Significant Accounting Policies

Basis of Financial Statement Presentation

The financial statements include the consolidated balance sheets, statements of operations, statements of comprehensive loss, statements of changes in stockholders’ equity, and statements of cash flows of Waystar and its subsidiaries and have been prepared in accordance with accounting principles generally accepted in the United States of America (“GAAP”).

Segment information

Operating segments are defined as components of an enterprise about which separate financial information is evaluated regularly by the chief operating decision maker in deciding how to allocate resources and assessing performance. We define the term “chief operating decision maker” to be our Chief Executive Officer. Our Chief Executive Officer reviews the financial information presented on an entire company basis for purposes of allocating resources and evaluating our financial performance. Accordingly, we have determined that we operate in a single reportable operating segment.

Use of Estimates

The preparation of the consolidated financial statements in conformity with GAAP requires us to make estimates and assumptions. These estimates and assumptions affect the reported amounts of assets and liabilities, the disclosures of contingent assets and liabilities as of the date of the financial statements, and the reported amounts of revenues and expenses during the reporting periods. Significant estimates and assumptions are used for, but are not limited to: (1) revenue recognition, including estimated expected customer life; (2) recoverability of accounts receivable and taxes receivable; (3) impairment assessment of goodwill and long-lived intangible assets; (4) fair value of intangibles acquired in business combinations; (5) litigation reserves; (6) depreciation and amortization; (7) fair value of stock options issued to employees and assumed as part of business combinations; (8) fair value of interest rate swaps; and (9) leases, including incremental borrowing rate. Future events and their effects cannot be predicted with certainty, and accordingly, accounting estimates require the exercise of judgment. We evaluate and update assumptions and estimates on an ongoing basis and may employ outside experts to assist in evaluations. Actual results could differ from the estimates used.

Table of Contents

Principals of Consolidation

The accompanying consolidated financial statements include the accounts of Waystar Holding Corp. and its subsidiaries. All material intercompany balances and transactions have been eliminated.

Revenue Recognition

We derive revenue primarily from providing access to our solutions for use in the healthcare industry and in doing so generate two types of revenue: (i) subscription revenue and (ii) volume-based revenue, which account for 99% of total revenue for all periods presented. We also derive revenue from implementation fees for our software, as well as hardware sales to facilitate patient payments.

We recognize revenue in accordance with Accounting Standards Codification (“ASC”) Topic 606, Revenue from Contracts with Customers (“ASC 606”), through the following five steps:

•identification of the contract, or contracts, with a client;

•identification of the performance obligations in the contract;

•determination of the transaction price;

•allocation of the transaction price to the performance obligations in the contract; and

•recognition of revenue when, or as, we satisfy a performance obligation

Our customers, referred to as clients elsewhere in this report, represent healthcare providers across all types of care settings, including physician practices, clinics, surgical centers, and laboratories, as well as large hospitals and health systems.

We account for a contract when it has approval and commitment from both parties, the rights of the parties are identified, payment terms are identified, the contract has commercial substance and collectability of consideration is probable. The length of our contracts vary but are typically two to three years and generally renew automatically for successive one-year terms. Our revenue is reported net of applicable sales and use tax and is recognized as, or when, control of these services or products are transferred to clients, in an amount that reflects the consideration we expect to be entitled to in exchange for the contract’s performance obligations.

Revenue from our subscription services is recognized over time on a ratable basis over the contract term beginning on the date that the service is made available to the client. Volume-based services are priced based on transaction, dollar volume or provider count in a given period. Given the nature of the promise is based on unknown quantities or outcomes of services to be performed over the contract term, the volume-based fee is determined to be variable consideration. The volume-based transaction fees are recognized each day using a time- elapsed output method based on the volume or transaction count at the time the clients’ transactions are processed.

Our contracts with clients typically include various combinations of our software solutions. Determining whether such software solutions are considered distinct performance obligations that should be accounted for separately versus together requires significant judgment. Specifically, judgment is required to determine whether access to our SaaS solutions is distinct from other services and solutions included in an arrangement.

Table of Contents

We follow the requirements of ASC 606-10-55-36 through -40, Revenue from Contracts with Customers, Principal Agent Considerations, in determining the gross versus net revenue presentations for our performance obligations in the contract with a client. Revenue recorded where we act in the capacity of a principal is reported on a gross basis equal to the full amount of consideration to which we expect in exchange for the good or service transferred. Revenue recorded where we act in the capacity of an agent is reported on a net basis, exclusive of any consideration provided to the principal party in the transaction.

Payment terms and conditions vary by contract type, although our standard payment terms generally require payment within 30 to 60 days. In instances where the timing of revenue recognition differs from the timing of payment, we have determined our contracts do not generally include a significant financing component. The primary purpose of our invoicing terms is to provide clients with simplified and predictable ways of purchasing our products and services, not to receive financing from our clients or to provide clients with financing.

Contract Costs

Incremental Costs of Obtaining a Contract

Incremental costs of obtaining a contract primarily include commissions paid to our internal sales personnel. We consider all such commissions to be both incremental and recoverable since they are only paid when a contract is secured. These capitalized costs are amortized on a straight-line basis over the expected period of benefit, which is determined based on the average customer life, which includes anticipated renewals of contracts. As of December 31, 2025 and 2024, the total unamortized costs reported as deferred costs on our balance sheet amounted to $32.4 million and $29.0 million, respectively, for internal sales commissions. For the years ended December 31, 2025, 2024, and 2023, amortization related to the sales commission asset was $13.0 million, $10.7 million, and $7.6 million, respectively. The aforementioned amortization amounts are included in sales and marketing in our consolidated statements of operations.

Costs to Fulfill a Contract

We capitalize costs incurred to fulfill contracts that i) relate directly to the contract, ii) are expected to generate resources that will be used to satisfy performance obligations under the contract, and iii) are expected to be recovered through revenue generated under the contract. Costs incurred to implement clients on our solutions (e.g., direct labor) are capitalized and amortized on a straight-line basis over the estimated customer life if we expect to recover those costs. As of December 31, 2025 and 2024, the total unamortized costs reported as deferred costs on our balance sheet amounted to $61.6 million and $53.8 million, respectively, for fulfillment costs. For the years ended December 31, 2025, 2024, and 2023, amortization related to the fulfillment cost asset was $16.2 million, $12.3 million, and $8.8 million, respectively. The aforementioned amortization amounts are included in the costs of revenue in our consolidated statements of operations.

There were no impairment losses relating to deferred costs for the years ended December 31, 2025, 2024 and 2023.

Channel Partners

We account for fees paid to channel partners within sales and marketing expenses in the accompanying statements of operations. For the years ended December 31, 2025, 2024, and 2023, we recorded fees to all channel partners of $77.9 million, $65.3 million and $52.3 million, respectively. As we are primarily responsible for contracting with and fulfilling contracts for the end user, we record revenue gross of related channel partner fees.

Cash and cash equivalents

We consider highly liquid investments with an original maturity of three months or less to be cash equivalents. We maintain our cash in bank deposit accounts, which, at times, may exceed federally insured limits. We have not experienced any credit losses in such accounts.

Table of Contents

Restricted cash

For a fee, we provide lockbox solutions through a banking institution to certain clients. When participating customers’ cash is received from their clients or patients, it is deposited in a lockbox account owned by us and is contractually required to be disbursed to the participating clients the following day. Any funds residing in these accounts are categorized as restricted cash.

Our restricted cash balance also consists of cash collected on behalf of healthcare providers from patients that has yet to be remitted to the providers. There is also an associated liability corresponding to cash held for others.

Accounts receivable

Accounts receivable are primarily generated from billings related to our cloud-based technology and do not bear interest. Unbilled accounts receivable arise when services have been rendered for which revenue has been recognized but the customers have not been billed. Substantially all accounts receivable are from companies in the healthcare service industry. Accounts receivable are net of an allowance for doubtful accounts and are considered past due when they are outstanding beyond agreement terms. We estimate the allowance for doubtful accounts based primarily on an analysis of historical collections experience, review of accounts receivable aging schedules, and specific identification of individual clients management believes to be at risk. If additional amounts become uncollectible, they will be charged to operations when that determination is made. Accounts receivable are written off against the allowance for doubtful accounts once all collection efforts have been exhausted, and recovery is deemed remote. If amounts previously written off are collected, they will be included as a deduction in general and administrative expense when received. Credit is extended based on historical experience with similar clients. Generally, collateral is not required.

Changes in the allowance for doubtful accounts are as follows (in thousands):


	December 31,
	2025		2024
Beginning balance	$	(5,885)	$	(5,335)
Provision for losses on receivables	(3,320)		(2,669)
Write-offs	4,001		2,792
Recoveries	(966)		(673)
Ending balance	$	(6,170)	$	(5,885)

Property and equipment

Property and equipment are stated at cost. Depreciation of property and equipment is computed using the straight-line method for financial reporting purposes at rates based on the estimated useful lives and pattern of usage of the assets. The estimated useful lives of the assets are 5 years for computer hardware and office equipment, 7 years for furniture and fixtures, and 40 years for buildings. Purchased computer software is depreciated over the estimated useful life of 3–5 years. Leasehold improvements are amortized over the life of the lease or their estimated useful lives, whichever is shorter. We evaluate the useful lives of these assets and test for impairment whenever events or changes in circumstances occur that could impact the recoverability of these assets.

Expenditures for major renewals and betterments that extend the useful lives of property and equipment are capitalized. Expenditures for maintenance and repairs are charged to expense as incurred. Refer to Note 8 for more information on property and equipment.

Software licenses and maintenance contracts

Software licenses and prepaid software maintenance contracts are accounted for as prepaid expenses and are amortized over the related service period, which is typically 12 months or less. In instances where contracts exceed 12 months, a portion of the contract is recorded as other long-term assets. As of December 31, 2025 and 2024, total unamortized costs of $9.2 million and $7.2 million, respectively, were included in prepaid expenses. As of December 31, 2025 and 2024, total unamortized costs of $0.8 million and $0.1 million, respectively, were included in other long-term assets.

Table of Contents

Long-Lived Assets

Long-lived assets are amortized over their useful lives. We evaluate the remaining useful life of long-lived assets periodically to determine if events or changes in circumstances warrant a revision to the remaining period of amortization. The carrying amounts of these assets are reviewed for impairment whenever events or changes in circumstances indicate that the carrying value of these assets may not be recoverable. We measure the recoverability of these assets by comparing the carrying amount of the asset group to the future undiscounted cash flows the assets are expected to generate. If the undiscounted cash flows used in the test for recoverability are less than the carrying amount of the asset groups, then the carrying amount of such assets is reduced to fair value. Refer to Notes 8, 9, and 10 for more information on long-lived assets.

Goodwill

We account for business combinations under the acquisition method of accounting in accordance with ASC 805, Business Combinations, where the total purchase price is allocated to the tangible and identified intangible assets acquired and liabilities assumed based on their estimated fair values. The purchase price is allocated using the information currently available, and may be adjusted, up to one year from acquisition date, after obtaining more information regarding, among other things, asset valuations, liabilities assumed and revisions to preliminary estimates. The purchase price in excess of the fair value of the tangible and identified intangible assets acquired less liabilities assumed is recognized as goodwill.

We account for goodwill under the provisions of ASC 350, Intangibles—Goodwill and Other. Goodwill is evaluated for impairment annually on October 1st or whenever there is an impairment indicator. There was no impairment to goodwill during the years ended December 31, 2025, 2024 and 2023, respectively. Refer to Note 9 for more information on goodwill.

Deferred Offering Costs

We capitalize within other assets certain legal, accounting, and other third-party fees that are directly related to our in-process equity financings, including the planned IPO, until such financings are consummated. After consummation of the equity financing, these costs are recorded as a reduction of the proceeds received as a result of the offering. Should a planned equity financing be abandoned, terminated, or significantly delayed, the deferred offering costs are immediately written off to operating expenses. Through June 6, 2024, the effective date of the Prospectus for our IPO, we had capitalized $8.8 million of deferred offering costs, which were recorded in stockholders' equity upon the completion of the IPO (see Note 1). There were no deferred offering costs capitalized as of both December 31, 2025 and 2024.

Capitalized software development costs

We capitalize internal-use software costs under the provisions of ASC 350 which includes costs incurred in connection with the development of new software solutions and enhancements to existing software solutions that are expected to result in increased functionality. The costs incurred in the preliminary stages of development are expensed as incurred. Once the software has reached the development stage, internal and external costs, if direct and incremental, are capitalized until the software is complete and available for general release. Capitalized software development costs are recorded in property and equipment and are amortized on a straight-line basis over their estimated useful life of two years. We evaluate the useful lives of these assets and test for impairment whenever events or changes in circumstances occur that could impact the recoverability of these assets. There were no impairments of capitalized software development costs for the years ended December 31, 2025, 2024 and 2023.

Research and development costs

Research and development (“R&D”) costs consist primarily of personnel and related expenses for employees engaged in research and development activities as well as third-party fees. All such costs are expensed as incurred, except for capitalized software development costs.

Debt Issuance Costs

Debt issuance costs, net of amortization, are reflected on our balance sheet as a direct reduction in the carrying amount of our long-term debt. In addition, debt issuance costs, net of amortization, related to our revolver debt are included in other assets. Debt issuance costs include fees paid to creditors and third-party fees incurred for the issuance of new debt. Debt

Table of Contents

issuance costs are amortized over the respective term of the debt instruments using the effective interest method, and amortization charges are included in interest expense.

Derivative instruments

We hold three interest rate swaps with one maturing on January 31, 2026 and two maturing on March 31, 2027, as well as an interest rate cap maturing on April 30, 2026. We held one interest rate swap that matured on October 31, 2024 and two interest rate swaps that matured on November 30, 2022 designated as cash flow hedges to a portion of our outstanding debt. At inception and on an ongoing basis, we assess whether our swaps qualify for hedge accounting. These interest rate swaps have been deemed highly effective under ASC 815 so they meet the hedge accounting treatment criteria and qualify for hedge accounting. The swaps have been recorded on the balance sheet at fair value as either assets or liabilities and any changes to the fair value are recorded through accumulated other comprehensive income and reclassified into interest expense in the same period in which the hedged transaction is recognized in earnings. Cash flows from interest rate swaps are reported in the same category as the cash flows from the items being hedged.

Fair value of financial instruments

Fair value is defined as the price that would be received to sell an asset or paid to transfer a liability in an orderly transaction between market participants at the measurement date. It also establishes a three-level hierarchy that prioritizes the inputs used to measure fair value. The three levels of the hierarchy are defined as follows:

•Level 1—Observable inputs that reflect quoted prices (unadjusted) for identical assets and liabilities in active markets.

•Level 2—Include other inputs that are directly or indirectly observable in the marketplace.

•Level 3—Unobservable inputs which are supported by little or no market activity.

As of December 31, 2025 and 2024, the carrying value of cash equivalents, accounts receivable, accounts payable, accrued liabilities, and other current assets and liabilities approximates fair value due to the short maturities of these instruments. Swaps are Level 2 instruments whose fair value is derived from discounted cash flows adjusted for nonperformance risk.

Investment securities

Our short-term investments, which consist of debt securities, are stated at fair value. These debt securities have been categorized as available-for-sale and classified as current assets given their maturity date is 12 months or less. Unrealized holding gains and losses for debt securities, net of applicable deferred taxes, are included in other comprehensive income or loss as a component of stockholders’ equity until realized from a sale or an expected credit loss is recognized. For the purpose of determining realized gross gains and losses for debt securities sold, that are included as a component of interest income/(expense) in the consolidated statements of income, the cost of investment securities sold is based upon specific identification. We recorded $2.1 million of interest income on investment securities for the year ended December 31, 2025, within “Other expense” of our statements of operations. We recorded no interest income on investment securities for the years ended December 31, 2024 and 2023.

Under the current expected credit losses model, expected losses on available for sale debt securities are recognized through an allowance for credit losses rather than as reductions in the amortized cost of securities. For debt securities whose fair value is less than their amortized cost, which we do not intend to sell or are not required to sell, we evaluate the expected cash flows to be received as compared to amortized cost and determine if an expected credit loss has occurred. In the event of any expected credit loss, only the amount of impairment associated with the expected credit loss is recognized in income with the remainder, if any, of the loss recognized in other comprehensive income. To the extent we have the intent to sell the debt security, or it is more likely than not we will be required to sell the debt security before recovery of our amortized

Table of Contents

cost basis, we recognize an impairment loss in income in an amount equal to the full difference between the amortized cost basis and the fair value.

There were no impairment losses relating to our investment securities during the periods presented.

Stock-based compensation

We measure and recognize compensation expense for all stock-based payment awards made to employees and members of the Board of Directors based on estimated fair values and when vesting criteria is assessed as probable of being achieved. We utilize the straight-line vesting method to recognize compensation expense for all service-based payment awards. The value of the portion of the award that is ultimately expected to vest is recognized as expense over the requisite service periods in the consolidated statement of operations. Such expense consists of stock-based compensation expense related to stock option grants to employees and directors. See Note 18 for additional information.

We estimate the fair value of service condition stock-based payment awards on the date of grant using the Black-Scholes option pricing model (“Black-Scholes”). We estimate the fair value of the performance condition stock-based payment awards that include a market condition on the date of grant using the Monte Carlo pricing model. We account for forfeitures as they occur. Our determination of fair value is affected by an estimate of our stock value as well as assumptions regarding several highly complex and subjective variables. These variables include, but are not limited to, our expected stock price volatility over the term of the awards and the expected term of the awards. We estimate expected stock price volatility using historical data of a peer group of public companies.

Advertising costs

We expense advertising costs as incurred. Advertising expense amounted to approximately $14.7 million, $12.5 million, and $10.5 million for the years ended December 31, 2025, 2024 and 2023, respectively.

Income taxes

Income taxes are accounted for under the asset and liability method. Deferred tax assets and liabilities are recognized for the future tax consequences attributable to differences between the financial statement carrying amounts of existing assets and liabilities and their respective tax bases. Deferred tax assets and liabilities are measured using enacted tax rates expected to apply to taxable income in the years in which those temporary differences are expected to be recovered or settled. The effect on deferred income tax assets and liabilities of a change in tax rates is recognized in income tax expense in the period that includes the enactment date. A valuation allowance is provided against deferred tax assets if it is more-likely-than-not that some portion or all of the deferred tax assets will not be realized. Any change in the valuation allowance is charged to income tax expense in the period such determination was made. Deferred tax balances are presented as noncurrent liabilities. See Note 11 for additional information.

We evaluate tax positions taken or expected to be taken in the course of preparing our tax returns to determine whether the tax positions are more-likely-than-not of being sustained upon examination by the applicable tax authority, based on the technical merits of the tax position, and then recognizing the tax benefit that is more-likely-than-not to be realized.

Interest and penalties on material uncertain tax positions are classified as interest expense and operating expense, respectively.

Loss contingencies

In accordance with ASC 450, Contingencies, estimated losses from contingencies are accrued when both of the following conditions are met: (1) it is probable a loss has been incurred; and (2) the amount of loss can be reasonably estimated. Any legal fees are recognized as incurred.

Recently Adopted Accounting Pronouncements

In December 2023, the Financial Accounting Standards Board (“FASB”) issued Accounting Standards Update (“ASU”) 2023 - 09, Income Taxes (Topic 740): “Improvements to Income Tax Disclosures,” which requires disaggregated information about a reporting entity’s effective tax rate reconciliation as well as information on income taxes paid. The standard is intended to benefit investors by providing more detailed income tax disclosures that would be useful in making capital allocation decisions. For public business entities, the ASU will be effective for annual periods beginning after

Table of Contents

December 15, 2024. We adopted ASU 2023-09 during the year ended December 31, 2025 on a full retrospective basis. Refer to Note 11 for further details.

In November 2023, the FASB issued ASU 2023 - 07, “Segment Reporting (Topic 280): Improvements to Reportable Segment Disclosures.” The standard is intended to improve reportable segment disclosure requirements, primarily through enhanced disclosures about significant segment expenses. For public business entities, the ASU was effective for annual periods beginning after December 15, 2023. We adopted ASU 2023-07 on a retrospective basis during the year ended December 31, 2024. Refer to Note 4 for further details.

Recently Issued Accounting Pronouncements Not Yet Adopted

In December 2025, the FASB issued ASU 2025-11, an update to improve the guidance in Topic 270, Interim Reporting, by improving the navigability of the required interim disclosures and clarifying when that guidance is applicable. For public companies, the update is effective for interim reporting periods within annual reporting periods beginning after December 15, 2027. We are currently evaluating the effect of the adoption of this amendment on our consolidated financial statements.

In November 2025, the FASB issued ASU 2025-09, an update to ASU 2017-12, "Derivatives and Hedging (Topic 815): Targeted Improvements to Accounting for Hedging Activities." Consistent with the original objective of ASU 2017-12, the objective of this update is to more closely align hedge accounting with the economics of an entity's risk management activity. The amendments included in the five issues addressed in this update are intended to better reflect those strategies in financial reporting by enabling entities to achieve and maintain hedge accounting for highly effective economic hedges of forecasted transactions. For public companies, the new guidance will be effective for annual reporting periods beginning after December 15, 2026, and interim periods within those annual reporting periods. We are currently evaluating the effect of the adoption of this amendment on our consolidated financial statements.

In September 2025, the FASB issued ASU 2025-06, “Intangibles—Goodwill and Other—Internal-Use Software (Subtopic 350-40): Targeted Improvements to the Accounting for Internal-Use Software” to modernize the accounting guidance for the costs to develop software for internal use. The new guidance amends the existing standard that refers to various stages of a software development project to align better with current software development methods, such as agile programming. The new guidance will be effective for all entities for annual periods beginning after December 15, 2027. Early adoption is permitted. The guidance can be applied on a fully prospective basis, a modified basis for in-process projects, or a full retrospective basis. We are currently evaluating the effect of the adoption of this amendment on our consolidated financial statements.

In November 2024, the FASB issued ASU 2024-03, “Income Statement—Reporting Comprehensive Income—

Expense Disaggregation Disclosures (Subtopic 220-40): Disaggregation of Income Statement Expenses.” The standard is intended to benefit investors by providing more detailed information about expenses that is critically important in understanding an entity’s performance, assessing an entity’s prospects for future cash flows, and comparing an entity’s performance over time and with that of other entities. For public companies, this ASU will be effective for annual reporting periods beginning after December 15, 2026, and interim reporting periods beginning after December 15, 2027. Early adoption is permitted. The amendments in this ASU should be applied either (1) prospectively to financial statements issued for reporting periods after the effective date of this ASU or (2) retrospectively to any or all prior periods presented in the financial statements. We are currently evaluating the effect of the adoption of this amendment on our consolidated financial statements.

3. Revenue Recognition

Disaggregation of Revenue

The following table presents revenues disaggregated by revenue type and the timing of revenue recognition (in thousands):


		Years ended December 31,
	Recognition		2025		2024		2023
Subscription revenue	Over time		$	558,408	$	457,975	$	401,013
Volume-based revenue	Over time		534,755		479,913		386,276
Implementation services and other revenue	Various		6,115		5,661		3,721
Total revenues			$	1,099,278	$	943,549	$	791,010

Table of Contents

Contract Liabilities

We derive our revenue from contracts with clients primarily through subscription fees and volume-based fees. Our payment terms with the client generally comprise an initial payment for implementation services, which includes client enrollment and the setup of contracted solutions on our platform. These implementation fees are due upon contract execution. Additionally, subscription fees are earned on an ongoing basis, which are invoiced monthly.

Client payments received in advance of fulfilling the corresponding performance obligations are recorded as contract liabilities. Implementation fees are recognized over the customer life, with any unrecognized amounts deferred as contract liabilities. These amounts are reported as deferred revenue on our consolidated balance sheet.

The following table presents activity impacting deferred revenue balances (in thousands):


	Years ended December 31,
	2025		2024		2023
Beginning balance	$	16,266	$	17,108	$	16,454
Revenue recognized (a)	(21,330)		(10,917)		(9,900)
Additional amounts deferred	16,672		10,075		10,554
Deferred revenue assumed as part of acquisitions (see Note 7)	61,743		—		—
Ending balance	$	73,351	$	16,266	$	17,108

(a) For the year ended December 31, 2025, $10.8 million of revenue was recognized from the acquired Iodine deferred revenue (see Note 7).

Transaction Price Allocated to Remaining Performance Obligations

As of December 31, 2025, the transaction price related to unsatisfied performance obligations that are expected to be recognized for the next 12 months and greater than 12 months was $78.6 million and $37.8 million, respectively. Included in the aforementioned amounts to be recognized is the impact from the Iodine acquisition (see Note 7), which was $26.4 million to be recognized for the next 12 months and $23.5 million to be recognized in greater than 12 months.

The transaction price allocated to performance obligations that are unsatisfied (or partially unsatisfied) for executed contracts does not include revenue related to performance obligations that are part of a contract with an original expected duration of one year or less. Additionally, the balance does not include variable consideration that is allocated entirely to wholly unsatisfied promises that form part of a single performance obligation comprised of a series of distinct daily services.

Remaining performance obligation estimates are subject to change and are affected by several factors, including terminations and changes in the timing and scope of contracts, arising from contract modifications.

4. Segments

Operating segments are defined as components of an enterprise about which separate financial information is evaluated regularly by the chief operating decision maker in deciding how to allocate resources and assessing performance. We have one business activity and there are no segment managers who are held accountable for operations, operating results and plans for products or components below the consolidated unit level. The geographical location of our customers has no impact on strategy or products offered. The “chief operating decision maker,” or CODM, assesses performance and allocates resources using a consolidated profitability metric as discussed below. Accordingly, we have determined that we operate in a single reportable operating segment.

Our CODM is our Chief Executive Officer. On a monthly basis, our CODM reviews the following financial information presented on a consolidated basis. The key profitability metric used for purposes of making key personnel staffing

Table of Contents

decisions, approving operating budgets and forecasts, and making strategy decisions is Net Income as detailed below. See Note 3 for our disaggregated revenue by type.


	Years ended December 31,
($in thousands)	2025		2024		2023
Total Revenue	$	1,099,278	$	943,549	$	791,010
Less:
Materials and connectivity	244,993		225,333		173,077
Labor and associated expenses	103,169		90,397		76,690
Research & development	54,623		48,775		35,332
Sales and marketing	178,017		156,935		124,437
General and administrative	128,623		111,753		62,924
Depreciation	21,938		38,744		17,062
Amortization	118,610		147,887		159,405
Interest and non-operating expenses, net	77,542		146,270		205,917
Income tax expense/(benefit)	59,674		(3,420)		(12,500)
Segment net income/(loss)	$	112,089	$	(19,125)	$	(51,334)
Consolidated net income/(loss)	$	112,089	$	(19,125)	$	(51,334)

See Note 8 for segment assets by major asset class.

5. Investment Securities

The following table summarizes the unrealized positions for our investment securities classified as available-for-sale fixed-maturity debt securities, disaggregated by class of instrument (in thousands) as of December 31, 2025.


	Amortized Cost		Allowances for Credit Losses		Total Unrealized Gains		Total Unrealized Losses		Fair Value
Available-for-sale fixed-maturity securities
Commercial Paper	$	12,439	$	—	$	—	$	4	$	12,435

U.S. Treasury Bills	7,459		—		1		—		7,460
U.S. Government Agencies	4,982		—		—		—		4,982
Total	$	24,880	$	—	$	1	$	4	$	24,877

We did not own any investment securities as of December 31, 2024.

6. Fair Value Measurements and Disclosures

The following table presents the fair value hierarchy for financial assets and liabilities measured at fair value on a recurring basis (in thousands):

Table of Contents


	Balance Sheet Classification	Carrying Value		Level 1		Level 2		Level 3
December 31, 2025
Available-for-sale fixed-maturity securities
Commercial paper	Investment securities	$	12,439	$	—	$	12,439	$	—

U.S. Treasury Bills	Investment securities	$	7,459	$	—	$	7,459	$	—
U.S. Government Agencies	Investment securities	$	4,982	$	—	$	4,982	$	—
Money market funds	Cash and cash equivalents	$	25,292	$	25,292	$	—	$	—
Other financial assets:
Interest rate cap	Other current assets	$	274	$	—	$	274	$	—
Other financial liabilities:
Interest rate swaps	Other accrued expenses	$	621	$	—	$	621	$	—
Interest rate swaps	Other long-term liabilities	$	414	$	—	$	414	$	—
December 31, 2024
Other financial assets:
Interest rate swaps	Other current assets	$	1,127	$	—	$	1,127	$	—
Interest rate swaps	Other long-term assets	$	22	$	—	$	22	$	—

The fair values of our interest rate swaps are based on the sum of all future net present value cash flows. The future cash flows are derived based on the terms of our interest rate swaps, as well as considering published discount factors, and projected SOFR curve. The fair value of long-term debt was determined using the present value of future cash flows based on the borrowing rates currently available for debt with similar terms and maturities. The carrying value of our First Lien Credit Facility was $1,401.2 million and $1,163.5 million compared to a fair value of $1,408.3 million and $1,169.4 million as of December 31, 2025 and 2024, respectively. As of December 31, 2025, there is no balance for our second lien term loan facility given the paydown outlined below in Note 13. There were no transfers in or out of Level 3 during the periods presented.

7. Acquisitions

Iodine Acquisition

On October 1, 2025, we completed the acquisition of Iodine pursuant to the Agreement and Plan of Merger (the "Merger Agreement"), which offers solutions across the mid-revenue cycle connecting clinical documentation integrity, utilization management and prebill workflows from admission through claim submission. We accounted for the acquisition as a business combination using the acquisition method of accounting. The total consideration paid was allocated to the net tangible and identifiable intangible assets acquired based on their fair values at the acquisition date. The excess consideration paid over the fair value of the net tangible and identifiable intangible assets acquired was recorded as goodwill. Goodwill for the acquisition primarily represents future customer relationships. The goodwill is not deductible for tax purposes. We deem the initial valuation of the assets and liabilities to be provisional and have left the measurement period open as the closing statement as outlined in the Merger Agreement is being finalized. These fair values may be adjusted in a future period, not to exceed one year after the acquisition date, to reflect new facts and circumstances, which existed as of the acquisition date.

We have included the financial results of Iodine in the consolidated financial statements subsequent to the date of acquisition. Pro forma results, including the acquired business since the beginning of fiscal 2025, would not be materially different than the reported results. Revenue and net earnings since the completion of the acquisition were immaterial.

The total consideration paid for Iodine was $1,259.8 million, which consisted of $638.9 million of cash consideration and $620.8 million of equity consideration. The equity consideration was made up of 16,639,920 shares of Waystar common stock issued to previous Iodine holders with a value of $37.31 per share as outlined within the Merger Agreement.

Table of Contents

The following table summarizes the estimated fair values of assets acquired and liabilities assumed as of the acquisitions date (in thousands):


Cash and cash equivalents	$	9,381
Accounts receivable	27,798
Income tax receivable	1,606
Prepaid expenses	3,772
Property, plant and equipment	974
Customer relationships	290,600
Developed technology	76,600
Tradenames and trademarks	5,200
Other long-term assets	2,110
Goodwill	996,819
Total acquired assets	$	1,414,860
Accounts payable	1,836
Accrued compensation	5,394
Other accrued expenses	3,677
Deferred revenue	60,988
Deferred tax liability	81,060
Other long-term liabilities	1,399
Deferred revenue - long-term	755
Total acquired liabilities	$	155,109
Total net assets acquired	$	1,259,751

The fair values of the tangible assets were determined primarily using the income approach. The fair values of the acquired identifiable intangible assets were determined using Level 3 inputs such as discounted cash flows which are not observable in the market. Intangible assets acquired from the acquisition include customer relationships, developed technologies, and trade names and trademarks which are all amortized on a straight-line basis approximating the useful life of the assets. The useful lives of the acquired identifiable intangible assets are 18 years for customer relationships, 5 years for developed technology, and 2 years for trade names and trademarks. The weighted-average remaining useful life for all acquired intangibles is 15.1 years.

Total acquisition costs of $12.7 million were expensed as incurred and recorded in general and administrative expense in the statement of operations for the year ended December 31, 2025.

HealthPay24 Acquisition

On August 3, 2023, we completed the acquisition of all issued and outstanding membership interests of HealthPay24 for total consideration of $31.4 million which entirely consisted of cash consideration. We accounted for the acquisition as a business combination using the acquisition method of accounting. As part of the acquisition, we recognized intangible assets of $29.6 million, including goodwill of $13.9 million.

Olive AI Asset Acquisition

On October 31, 2023, we acquired certain assets of Olive AI, Inc.’s Clearinghouse and Patient Access businesses for total consideration of $10 million. We accounted for the Olive AI acquisition as a business combination using the acquisition method of accounting. As part of the acquisition, we recognized total intangible assets of $10.6 million, including goodwill of $6.5 million.

Table of Contents

8. Property and Equipment, Net

The balances of the major classes of property and equipment are as follows (in thousands):


	December 31,
	2025		2024

Computer hardware	$	44,045	$	39,833
Capitalized internal-use software	53,373		40,281
Purchased computer software	23,188		22,789
Furniture and fixtures	4,184		3,642
Office equipment	271		247
Leasehold improvements	4,994		3,778


Internal-use software in progress	19,110		15,361
	149,165		125,931
Accumulated depreciation	(97,516)		(79,200)
Total	$	51,649	$	46,731

Depreciation of fixed assets, including the amortization of capitalized software, for the years ended December 31, 2025, 2024, and 2023 was $21.9 million, $38.7 million, and $17.1 million, respectively.

We capitalized $16.8 million, $16.4 million, and $15.0 million in software development costs for the years ended December 31, 2025, 2024, and 2023, respectively. Amortization of capitalized software was $10.6 million, $10.2 million, and $6.8 million for the years ended December 31, 2025, 2024, and 2023, respectively. The net book value of capitalized software development costs was $35.9 million and $29.6 million as of December 31, 2025 and 2024, respectively. We expect to recognize $35.9 million of amortization of capitalized software in future periods.

There were no impairments of property and equipment for the years ended December 31, 2025, 2024, and 2023. Due to the relocation of one of our offices, we reduced the useful life of the related finance lease and leasehold improvement assets which represented $17.9 million of incremental depreciation in the year ended December 31, 2024. The aforementioned assets have been fully depreciated and disposed of as of December 31, 2024.

9. Goodwill and Other Intangible Assets

Goodwill has a balance of $4.0 billion and $3.0 billion as of December 31, 2025 and 2024, respectively.

The following table details the cost basis changes in the carrying amount of goodwill (in thousands):


Balance as of December 31, 2022	$	3,009,558
Goodwill recorded in connection with acquisitions (Note 7)	20,455
Balance as of December 31, 2023	3,030,013
Rollover options deferred tax asset adjustment	(10,014)
Balance as of December 31, 2024	3,019,999
Goodwill recorded in connection with acquisitions (Note 7)	996,819
Total	$	4,016,818

Amortization for definite-lived intangible assets is as follows (in thousands, except useful life):

Table of Contents


	Gross Carrying Amount		Accumulated Amortization		Net Carrying Value		Weighted- Average Remaining Useful Life
As of December 31, 2025
Customer relationships	$	1,720,000	$	(539,645)	$	1,180,355	12.0
Purchased developed technology	119,800		(27,045)		92,755		4.6
Tradenames and trademarks	45,100		(25,371)		19,729		3.3
Total	$	1,884,900	$	(592,061)	$	1,292,839
As of December 31, 2024
Customer relationships	$	1,429,400	$	(440,729)	$	988,671	11.1
Purchased developed technology	81,800		(50,875)		30,925		4.2
Tradenames and trademarks	40,700		(21,247)		19,453		4.7
Total	$	1,551,900	$	(512,851)	$	1,039,049

Amortization expense was $118.6 million, $147.9 million, and $159.4 million for the years ended December 31, 2025, 2024, and 2023, respectively.

Estimated future amortization expense is as follows (in thousands):


Year ending, December 31,
2026	$	137,895
2027	137,245
2028	135,295
2029	133,379
2030	123,796
Thereafter	625,229
Total	$	1,292,839

10. Leases

We determine whether a contract is or contains a lease at inception. At the lease commencement date, we record a liability for the lease obligation and a corresponding asset representing the right to use the underlying asset over the lease term. Leases with an initial term of 12 months or less are not recorded on the consolidated balance sheet and are recognized in expense using a straight-line basis for all asset classes. Variable lease payments are expensed as incurred, which primarily include maintenance costs, services provided by the lessor, and other charges reimbursed to the lessor.

We lease office space and data center facilities with remaining lease terms ranging from one year to five years, some of which contain renewal options. The exercise of these options is at our sole discretion.

Certain of our leases contain lease and non-lease components. For leases held on or after January 1, 2022, we have elected the practical expedient under ASC 842-10-15-37 for all asset classes which allows companies to account for lease and non-lease components as a single lease component.

Our leases do not contain an implicit rate of return; therefore, an incremental borrowing rate was determined. We assessed which rate would be most reflective of a reasonable rate we would be able to borrow based on credit rating and lease term.

Finance lease right-of-use assets were zero as of both December 31, 2025 and 2024. Due to the relocation of one of our offices (see Note 8), we reduced the useful life of the related finance lease right-of-use asset, which represented $14.9 million of incremental depreciation (excluding accelerated depreciation on leasehold improvements) for the year ended December 31, 2024. We also reduced the useful life of the related operating lease right-of-use asset, which represented $1.2 million of additional operating lease cost for the year ended December 31, 2024. Subsequently during the year ended December 31, 2025, we reached a settlement agreement to terminate the prior lease of the aforementioned

Table of Contents

office that was relocated. The total settlement was $15.0 million and resulted in a loss on lease termination totaling $0.8 million, which is recorded in general and administrative expense within our consolidated statements of operations for the year ended December 31, 2025.

The following table presents components of lease expense for the years ended December 31, 2025, 2024, and 2023, respectively (in thousands):


	Years ended December 31,
	2025		2024		2023
Finance lease cost
Amortization of right-of-use assets	$	—	$	15,993	$	1,586
Interest on lease liabilities	531		751		797
Operating lease cost	4,832		5,004		3,780
Variable lease cost	46		412		360
Short-term lease	797		634		781
Total lease cost	$	6,206	$	22,794	$	7,304

Maturities of lease liabilities as of December 31, 2025 are as follows (in thousands):


	Operating Leases		Finance Leases
2026	$	6,794	$	—
2027	4,584		—
2028	4,270		—
2029	2,849		—
2030	1,283		—
Thereafter	—		—
Total future minimum lease payments	19,780		—
Less: Interest

Waystar Holding Corp. 10-K