BRC (BRCC) Risk Analysis

Government regulation and consumer eating habits may impact our business as a result of changes in attitudes regarding diet and health or new information regarding the health effects of consuming our menu offerings. These changes have resulted in, and may continue to result in, the enactment of laws and regulations that impact the ingredients and nutritional content of our menu offerings, or laws and regulations requiring us to disclose the nutritional content of our food offerings. For example, a number of states, counties, and cities have enacted menu labeling laws requiring multi-unit restaurant operators to disclose certain nutritional information to customers, or have enacted legislation restricting the use of certain types of ingredients in food sold at restaurants. Furthermore, the Patient Protection and Affordable Care Act of 2010 ("PPACA") established a uniform federal requirement for certain restaurants to post certain nutritional information on their menus. Specifically, the PPACA amended the FFDCA to require certain chain restaurants to publish the total number of calories of standard menu items on menus and menu boards, along with a statement that puts this calorie information in the context of a total daily calorie intake. The PPACA also requires covered restaurants to provide to consumers, upon request, a written summary of detailed nutritional information for each standard menu item, and to provide a statement on menus and menu boards about the availability of this information. The PPACA further permits the FDA to require covered restaurants to make additional nutrient disclosures, such as disclosure of trans-fat content. An unfavorable report on, or reaction to, our menu ingredients, the size of our portions, or the nutritional content of our menu items could negatively influence the demand for our offerings. We cannot make any assurances regarding our ability to effectively respond to changes in consumer health perceptions or our ability to successfully implement the nutrient content disclosure requirements and to adapt our menu offerings to trends in drinking and consumption habits. The imposition of menu-labeling laws could have an adverse effect on our results of operations and financial position, as well as the beverage industry in general.

We and our franchise partners are subject to extensive government regulation at the federal, state, and local government levels, including by the FTC, FDA, and state authorities. These include, but are not limited to, regulations relating to the preparation and sale of beverages, menu and product labeling requirements, zoning and building codes, franchising, land use, and employee, health, sanitation, and safety matters. We and our franchise partners are required to obtain and maintain a wide variety of governmental licenses, permits, and approvals. Local authorities may suspend or deny renewal of our governmental licenses if they determine that our operations do not meet the standards for initial grant or renewal. Difficulty or failure in obtaining them in the future could result in delaying or canceling the opening of new Outposts and thus could harm our business. Any such failure could also subject us to liability from our franchise partners. Additionally, Congress has a legislation proposal in process that could shift more liability for franchise partner employment practices onto franchisers. The Protecting the Right to Organize Act would codify the Browning-Ferris decision that redefined joint employment to include a broader category of conduct by the franchisor, thereby increasing the possibility of us being held liable for our franchise partners' employment practices.

We Process personal information, confidential information, and other information necessary to provide our products and service and ensure that they are delivered effectively, to operate our business, for legal and marketing purposes, and for other business-related purposes. Data privacy and regulation of privacy, information security, and Processing has become a significant issue in the United States. The legal and regulatory framework for privacy and security issues is rapidly evolving and is expected to increase our compliance costs and exposure to liability. There are numerous federal, state, and local laws, orders, codes, regulations, and regulatory guidance regarding privacy, information security, and Processing, the number and scope of which is changing, subject to differing applications and interpretations, and which may be inconsistent among jurisdictions, or in conflict with other rules, laws, or Data Protection Obligations (defined below). We expect that there will continue to be new Data Protection Laws and Data Protection Obligations, and we cannot yet determine the impact such future Data Protection Laws may have on our business. Any significant change to Data Protection Laws and Data Protection Obligations, including without limitation, how the express or implied consent of customers for Processing is obtained, could increase our costs and require us to modify our operations, possibly in a material manner, which we may be unable to complete and may limit our ability to store and Process customer data and operate our business. Changes in Data Protection Laws are, and are likely to remain, uncertain for the foreseeable future, and our actual or perceived failure to address or comply with these laws could: increase our compliance and operational costs; limit our ability to market our products or services and attract new and retain current customers; limit or eliminate our ability to Process; expose us to regulatory scrutiny, actions, investigations, fines, and penalties; result in reputational harm; lead to a loss of customers; reduce the use of our products or services; result in litigation and liability, including class action litigation; cause us to incur significant costs, expenses, and fees (including attorney fees); cause a material adverse impact to business operations or financial results; and otherwise result in other material harm to our business ("Adverse Data Protection Impact"). We are or may also be subject to the terms of our external and internal privacy and security policies, codes, representations, certifications, industry standards, publications, and frameworks ("Privacy Policies") and contractual obligations to third parties related to privacy, information security, and Processing, including contractual obligations to indemnify and hold harmless third parties from the costs or consequences of non-compliance with Data Protection Laws or other obligations ("Data Protection Obligations"). We strive to comply with applicable Data Protection Laws, Privacy Policies, and Data Protection Obligations to the extent possible, but at times our efforts may be inadequate, or perceived to be so. Moreover, despite our efforts, we may not be successful in achieving compliance if our employees, partners, or vendors do not comply with applicable Data Protection Laws, Privacy Policies, and Data Protection Obligations. We may be subject to and suffer an Adverse Data Protection Impact if we fail (or are perceived to have failed) to comply with applicable Data Protection Laws, Privacy Policies, and Data Protection Obligations, or if our Privacy Policies are, in whole or part, found to be inaccurate, incomplete, deceptive, unfair, or misrepresentative of our actual practices. In addition, any such failure or perceived failure could result in public statements against us by consumer advocacy groups, the media, or others, which may cause us material reputational harm. Our actual or perceived failure to comply with Data Protection Laws, Privacy Policies, and Data Protection Obligations could also subject us to litigation, claims, proceedings, actions, or investigations by governmental entities, authorities, or regulators, which could result in an Adverse Data Protection Impact, including required changes to our business practices, the diversion of resources and the attention of management from our business, regulatory oversights and audits, discontinuance of strategic Processing, or other remedies that adversely affect our business. In the United States, these include rules and regulations promulgated under the authority of the FTC, the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the California Consumer Privacy Act (the "CCPA") and other state and federal laws relating to privacy and data security. The CCPA, among other things, establishes a privacy framework for covered businesses, including an expansive definition of personal data and data privacy rights. The CCPA provides individual privacy rights for California residents and places increased privacy and security obligations on covered businesses Processing personal data. The CCPA requires covered businesses to provide new disclosures to California residents and provide such individuals with ways to opt-out of certain sales of personal data. The CCPA also provides a private right of action and statutory damages for violations, including for data breaches. Compliance with the CCPA may impact our business activities by increasing our compliance costs and potential liability with respect to personal information that we or third parties with whom we contract to provide services maintain about California residents. The CCPA was expanded on January 1, 2023, when the California Privacy Rights Act of 2020 ("CPRA") became operative. The CPRA, among other things, gives California residents the ability to limit use of certain sensitive personal data, further restrict the use of cross-contextual advertising, establishes restrictions on the retention of personal data, expands the types of data breaches subject to the CCPA's private right of action, provide for increased penalties for CPRA violations concerning California residents under the age of 16, and establishes a new California Privacy Protection Agency to implement and enforce the law. Compliance risks introduced by Data Protection Laws such as the CCPA and CPRA exemplify the vulnerability of our business to the evolving regulatory environment related to personal data. Moreover, across the United States, laws and regulations governing data privacy and security continue to develop and evolve. For example, Virginia enacted the Consumer Data Protection Act (the "CDPA") that may impose obligations similar to or more stringent than those we may face under other Data Protection Laws. Compliance with the CPRA, the CCPA, the CDPA, similar state laws in other states, and any newly enacted privacy and data security laws or regulations may be challenging and cost- and time-intensive, and may require us to modify our data Processing practices and policies and to incur substantial costs and potential liability in an effort to comply with such legislation. The Data Protection Laws, Privacy Policies, and Data Protection Obligations to which we are subject may significantly affect our business activities and many of these obligations may contain ambiguous provisions creating uncertainty. Compliance with the requirements imposed by such Data Protection Laws and Data Protection Obligations may require us to revise our business practices, allocate more resources to privacy and security, and implement new technologies. Such efforts may result in significant costs to our business. Noncompliance could result in Adverse Data Protection Impact, including proceedings against us by governmental and regulatory entities, collaborators, individuals, or others. We rely on a variety of marketing techniques and practices, including email and social media marketing, online targeted advertising, and cookie-based processing, to sell our products and services and to attract new customers, and we, and our vendors, are subject to various current and future Data Protection Laws and Data Protection Obligations that govern marketing and advertising practices, including recent developments for the regulation of "opt-in" and "opt-out" options regarding direct marketing to consumers through the use of emails and text messaging. Governmental authorities continue to evaluate the privacy implications inherent in the use of third party "cookies" and other methods of online tracking for behavioral advertising and other purposes, such as by regulating the level of consumer notice and consent required before a company can employ cookies or other electronic tracking tools or the use of data gathered with such tools. Additionally, some providers of consumer devices, web browsers, and application shops have implemented, or announced plans to implement, means to make it easier for Internet users to prevent the placement of cookies or to block other tracking technologies, require additional consents, or limit the ability to track user activity, which could, if widely adopted, result in the use of third party cookies and other methods of online tracking becoming significantly less effective. Laws and regulations regarding the use of these cookies and other current online tracking and advertising practices or a loss in our ability to make effective use of services that employ such technologies could increase our costs of operations and limit our ability to acquire new customers on cost-effective terms, which, in turn, could have an adverse effect on our business, financial condition, results of operations, and prospects.

Our business is subject to the risk of litigation by employees, customers, competitors, landlords, or neighboring businesses, suppliers, franchise partners, stockholders, or others through private actions, class actions, administrative proceedings, regulatory actions, or other litigation. The outcome of litigation, particularly class action and regulatory actions, is difficult to assess or quantify. In recent years, beverage and restaurant companies have been subject to lawsuits, including class action lawsuits, alleging violations of federal and state laws regarding workplace and employment matters misleading food and beverage labeling and advertising, discrimination, and similar matters. A number of these lawsuits have resulted in the payment of substantial damages by the defendants. Similar lawsuits have been instituted from time to time alleging violations of various federal and state wage and hour laws regarding, among other things, employee meal deductions, overtime eligibility of assistant managers, and failure to pay for all hours worked. While we have not been a party to any of these types of lawsuits in the past, there can be no assurance that we will not be named in any such lawsuit in the future or that we would not be required to pay substantial expenses or damages. Our customers may file complaints or lawsuits against us alleging that we are responsible for some illness or injury they suffered at or after a visit to one of our Outposts, including actions seeking damages resulting from food-borne illness or accidents in our Outposts. We also could be subject to a variety of other claims from third parties arising in the ordinary course of our business, including contract claims. The food and beverage and restaurant industries have also been subject to a growing number of claims, including regarding restaurant menus and obesity, misleading advertising or labeling claims, claims regarding the presence of contaminants, and more. Occasionally, we and our franchise partners may become involved in disputes with neighbors, government officials, and landlords over the lines of cars attempting to visit our Outposts. These disputes could lead to the loss or changing of locations, changes to hours and operations, and costly litigation. If we are unable to reach agreement in future disputes or to alleviate pressure on certain Outposts by building additional Outposts or making operational changes, we may be required to close locations or alter operations at some locations. Lost sales and royalty payments caused by such closures or alterations, plus increased expenses from litigation, would harm our business. Our business also carries a unique risk of liability in our industry regarding personal injury to employees and contractors. Our content creation team often produces videos and other media depicting risky or dangerous activities, showcasing stunts and activities with firearms, military vehicles, "extreme" sports, marksmanships, and other themes pursuing the lifestyle associated with our brand. While we take precautions to ensure the safety of all involved in creating this content, the activities carry an inherent risk that cannot be eliminated. If any individual were to suffer serious harm while involved with one of our productions, this could lead to litigation against us. Regardless of whether any claims against us are valid or whether we are liable, claims may be expensive to defend and may divert time and money away from our operations. In addition, they may generate negative publicity, which could reduce customer traffic and sales. Although we maintain what we believe to be adequate levels of insurance, insurance may not be available at all or in sufficient amounts to cover any liabilities with respect to these or other matters. A judgment or other liability in excess of our insurance coverage for any claims or any adverse publicity resulting from claims could harm our business.

Our financial performance is highly dependent on our DTC and Wholesale channels, with the DTC channel providing approximately 32% and 36% of our revenue in 2024 and 2023, respectively, and our Wholesale channel providing approximately 63% and 57% of our revenue in 2024 and 2023, respectively. If the DTC revenue trends continue to decline or if the Wholesale channel revenue trends slow or decline, our other sources of revenues may be unable to make up any significant shortfall and our business and financial results could be adversely affected. We experienced a decrease in revenue from our DTC channel in 2024 compared to 2023 as customer acquisition costs significantly increased and we shifted marketing investments into other channels with greater returns. Revenue from our DTC channel may continue to decline as customer acquisition costs remain high and locations to purchase our products increase from the expansion in other channels. Any significant slowdown or decline in our DTC business could result in reduced cash flows. Our DTC business and revenue growth are dependent on our ability to continuously attract and retain subscribers, and we cannot be sure that we will be successful in these efforts, or that subscriber retention levels will not materially decline. Furthermore, in the future, we may offer new subscription products, implement promotions, or replace or modify current subscription models, any of which could result in additional costs. It is unknown how our subscribers will react to price increases or new models and whether the costs or logistics of implementing these models will adversely impact our business. If the adoption of new revenue models adversely impacts our subscriber relationships, then subscriber growth, subscriber engagement, and our business, financial condition, and operating results could be harmed. Our DTC and Wholesale business' success depends on third party logistics and a network of brokers and distributors. We currently work with parties in the United States to store, ship, and otherwise support our distribution of products to our customers and retail partners. Our ability to meet customer and retail partner expectations, manage inventory, complete sales, and achieve objectives for operating efficiencies and growth depends on the proper operation of these third parties' distribution facilities, the development or expansion of additional distribution capabilities, and the timely performance of services by third parties. If we continue to add third party logistics providers, require them to expand their fulfillment, distribution, or warehouse capabilities, expand to new locations, add products categories with different fulfillment requirements, or change the mix of products we sell, our logistics and distribution network will become increasingly complex and its operation will become more challenging for us and our third party logistics providers. Additionally, as part of our Wholesale channel model, we rely on a network of brokers and distributors to grow and manage our sales. These networks assist in expanding our brand's reach and ensuring the efficient distribution of our products to our retail partners. If these networks, for any reason, cannot properly or efficiently support our products distribution, our operating results and business may suffer. The third party logistics providers and distribution networks that we rely upon could be interrupted by issues beyond our control, including, but not limited to, information technology problems, natural disasters, pandemics, government regulation, or supply chain issues. Any significant failure in our third party logistics providers to operate effectively could adversely affect our business. In addition, we may be required to expand our capacity sooner than we anticipate. If we are unable to expand existing or secure new third party logistics providers to meet our future needs, our order fulfillment and shipping times may be delayed and our business, financial condition, and operating results may suffer.

We have devoted, and will continue to devote in the future, significant resources to launch and promote new products to serve broader customer demand, adapt to changes in markets trends, and account for shifts in customer preferences. However, certain of our product launches have not been adopted by our customers as readily as anticipated, and we may not be successful in implementing our distribution strategy, developing innovative new products, or creating products that are successful with consumer preferences. To the extent that we are not able to effectively gauge the direction of our key markets and successfully identify, develop, and promote new or improved products in the changing market, our operating results could suffer. These risks extend to the implementation of new lines of business or product categories. Failure to properly expand into new channels or introduce different product types could result in significant expenditures without increased revenue. Developing new products and introducing them into Wholesale retailers, convenience stores, and our DTC platforms is an expensive and time-consuming process. Not only are research and development expensive investments, there is also no guarantee that our co-manufacturing partners or distribution networks will fully cooperate in producing or promoting our new products. Launching new products at commercial convenience stores, for example, requires lead time. Long lead times may make it more difficult for us to respond rapidly to new or changing product trends or consumer preferences. Launching a new product, or an existing product to new stores, may also require initial "free fills" of shelves, which increases the costs of introducing new products and could adversely impact our operating results if the new product is not successful.

Attracting and retaining end users is essential to the success of our business. We invest significant resources in marketing efforts, including new product launches, merchandise promotions, and advertising campaigns aimed at increasing brand awareness and customer engagement. Our marketing approach is often unconventional, with some campaigns proving significantly more successful than others. If any of our initiatives fail to generate the expected return, we may incur substantial expenses without realizing corresponding revenue growth. Additionally, many of our competitors have greater financial resources, allowing them to allocate significantly more capital toward marketing, advertising, and promotional initiatives. If our competitors increase their marketing spend while our available funds decrease, or if our advertising, promotions, or new product offerings are less effective than those of our competitors, our results of operations and financial performance could be adversely affected. Failure to attract new customers or retain existing ones, particularly in a cost-effective manner, could limit our ability to increase sales and materially harm our business and financial condition.

We believe that brand authenticity and mission alignment are critical to customer loyalty. If we fail to preserve our brand identity, including the quality of our media content and active engagement with the Veteran community, our consumer perception, brand equity, and financial results could be negatively impacted. Business incidents, whether isolated or recurring and whether originating from us or our business partners, that erode consumer trust can significantly reduce brand value, potentially trigger boycotts of our Outposts, or result in civil or criminal liability and can have a negative impact on our financial results. Most importantly, if our customers perceive that we have abandoned or decreased the priority of our mission and our authenticity, in particular with respect to our support of the Veteran and military communities, we could lose significant portions of our customer base and experience substantial harm to our reputation and our operating results. Other such incidents that could adversely affect our business include actual or perceived breaches of privacy, contaminated products, employees or customers infected with communicable diseases, product recalls, controversial actions of persons identified with the brand, or other potential incidents discussed in this risk factors section. The impact of such incidents may be exacerbated if they receive considerable publicity, including rapidly through social or digital media (including for malicious reasons) or result in litigation. Consumer demand for our products and our brand equity could diminish significantly if we, our employees, franchise partners, or other business partners fail to preserve the quality of our products, act or are perceived to act in an unethical, illegal, racially-biased, unequal, or socially irresponsible manner, including with respect to the sourcing, content, or sale of our products, service and treatment of customers at our Outposts, or the use of customer data for general or direct marketing or other purposes. If we fail to comply with laws and regulations, publicly take controversial positions or actions, or fail to deliver a consistently positive consumer experience in each of our markets, including by failing to invest in the right balance of wages and benefits to attract and retain employees that represent the brand well, our brand value may be diminished. Public controversy or backlash related to our in-house or third-party content creation efforts could lead to customer attrition, hinder new customer acquisition, damage business relationships, and result in other negative outcomes. Our success is closely tied to maintaining a strong corporate reputation. Our brand reputation may suffer due to claims or perceptions, whether substantiated or not, related to product safety, supplier and distributor practices, franchise operations, or allegations of unethical, illegal, discriminatory, or socially irresponsible behavior. Our corporate reputation could also suffer from negative publicity or consumer sentiment regarding Company action or inaction or brand imagery, a real or perceived failure of corporate governance, or misconduct by any officer or any employee or representative of us or a franchise partner. Any such incidents (even if resulting from actions of a competitor or franchise partner) could cause a decline directly or indirectly in consumer confidence in, or the perception of, our brand and/or our products and reduce consumer demand for our products, which would likely result in lower revenue and profits. There has been an increased public focus, including from the United States federal and state governments, on environmental sustainability matters, including with respect to climate change, greenhouse gases, water resources, packaging and waste, animal health and welfare, deforestation, and land use. We strive to operate with a commitment to environmental stewardship and are actively managing sustainability-related risks and costs impacting our operations, franchise partners, and supply chain. Due to growing scrutiny of environmental sustainability, we may encounter increased demands for disclosure, expanded commitments, target-setting, and additional compliance measures. Addressing these environmental issues may subject us to market, operational, reputational, and compliance-related risks and costs.

Our business could be harmed by increases in labor costs, including those increases triggered by regulatory actions regarding wages, scheduling and benefits, increased health care, and workers' compensation insurance costs, which, in a business such as ours, are significant and expected to grow as our headcount expands. In particular, certain of our employees are paid wage rates at or based on the applicable federal or state minimum wage, and increases in the applicable minimum wage will increase labor costs. From time to time, legislative proposals are made to increase the minimum wage at the federal or state level. As federal, state, or other applicable minimum wage rates increase, we may be required to increase not only the wage rates of minimum wage employees, but also the wages paid to other hourly employees. We may not choose to increase prices in order to pass future increased labor costs on to customers, in which case our margins would be negatively affected. If we do not increase prices to cover increased labor costs, the higher prices could result in lower revenue, which may also reduce margins. The successful operation of our business depends upon our franchise partners' and our ability to attract, motivate, and retain a sufficient number of qualified employees. From time to time, there may be a shortage of qualified employees in certain of the communities in which we operate or expand to. Shortages may make it increasingly difficult and expensive to attract, train, and retain the services of a satisfactory number of qualified employees, which could delay the planned openings of new Company-operated and franchised Outposts and adversely impact the operations and profitability of existing Outposts. Furthermore, competition for qualified employees, particularly in markets where such shortages exist, could require us to pay higher wages, which could result in higher labor costs. Accordingly, if we and our franchise partners are unable to recruit and retain sufficiently qualified individuals, our business could be harmed. Additionally, the growth of our business can make it increasingly difficult to locate and hire sufficient numbers of key employees, to maintain an effective system of internal controls for a dispersed chain, and to train employees to deliver consistently high-quality products and customer experiences, which could materially harm our business and results of operations.

Although none of our employees are currently covered under collective bargaining agreements, our employees may elect to be represented by labor unions in the future. If a significant number of our employees were to become unionized and collective bargaining agreement terms were significantly different from our current compensation arrangements, it could adversely affect our business, financial condition, or results of operations. In addition, a labor dispute involving some or all of our employees may harm our reputation, disrupt our operations, and reduce our revenue, and resolution of disputes may increase our costs. Further, if we enter into a new market with unionized construction companies, or the construction companies in our current markets become unionized, construction and build out costs for new Outposts in such markets could materially increase.