Joby Aviation (JOBY) Risk Analysis

While we believe we are well positioned to be first to market with an eVTOL piloted aerial ridesharing service, we expect this industry to be increasingly competitive and our competitors could get to market before or at the same time as us, either generally or in specific markets. Even if we are first to market, we may not fully realize the benefits we anticipate, and we may not receive any competitive advantage or may be overcome by other competitors. If new or existing companies launch competing solutions in the markets in which we intend to operate and obtain large scale capital investment, we may face increased competition. Additionally, our competitors may benefit from our efforts in developing consumer and community acceptance for eVTOL aircraft and aerial ridesharing, making it easier for them to obtain the permits and authorizations required to operate an aerial ridesharing service. Many of our current and potential competitors are larger and have substantially greater resources or are affiliated with larger companies that may allocate greater resources than we have and expect to have in the future, which may allow them to devote greater resources to the development, certification and marketing of their products and services or to offer lower prices. Our competitors may also establish strategic relationships amongst themselves or with third parties that may further enhance their resources and offerings. Some have more experience in the aerospace industry than we have, and foreign competitors could benefit from subsidies or other protective measures offered by their home countries. If our competitors commercialize their technology before us, or if we do not capture the first mover advantage that we anticipate, it may harm our business, financial condition, operating results and prospects.

Passengers and other stakeholders may not differentiate between us and the broader aviation industry or, more specifically, the UAM service industry. If other participants in this market have problems such as safety, technology development, engagement with certification authorities or other regulators, community engagement, security, data privacy, flight delays, or customer service, such problems could impact the public perception of the entire industry, including our business. We may fail to adequately differentiate our brand, our services and our aircraft from others in the market which could impact our ability to attract passengers or engage with other key stakeholders and have an adverse impact on our business, financial condition and results of operations.

The market price of our common stock has been and may continue to be volatile. Companies that have experienced volatility in the market price of their stock have, in the past, been subject to securities class action litigation, activist investor campaigns and short-selling. We may be the target of these types of activities in the future, any for which could result in substantial costs and divert management's attention from other business concerns, which could seriously harm our business.

Our success depends, in part, on our ability to protect our proprietary intellectual property rights, including technologies deployed in our current or future aircraft or utilized in arranging air transportation. To date, we have relied primarily on patents and trade secrets to protect our proprietary technology. Our software is also subject to certain protection under copyright law, though we have chosen not to register any of our copyrights to date. We routinely enter into non-disclosure agreements with our employees, consultants, third parties and others and take other measures to protect our intellectual property rights, such as limiting access to our trade secrets and other confidential information. We intend to continue to rely on these and other means, including patent protection, in the future. However, the steps we take to protect our intellectual property may be inadequate, and unauthorized parties may attempt to copy aspects of our intellectual property or obtain and use information that we regard as proprietary. If successful, these attempts may harm our ability to compete, accelerate the development of our competitors' programs, and/or harm our competitive position in the market. Moreover, our non-disclosure agreements do not prevent our competitors from independently developing technologies that are substantially equivalent or superior to ours. Our competitors or third parties may not comply with the terms of these agreements, and we may not be able to successfully enforce such agreements or obtain sufficient remedies if they are breached. In addition, we accept government funding for the development of some intellectual property which may result in the government obtaining some rights in our intellectual property. The intellectual property rights we own or license may not provide competitive advantages and could be challenged or circumvented by our competitors. Further, obtaining and maintaining patent, copyright, and trademark protection can be costly. We may choose not to, or may fail to, pursue or maintain such forms of protection for our technology in the United States or foreign jurisdictions, which could harm our ability to maintain our competitive advantage in such jurisdictions. It is also possible that we will fail to identify patentable aspects of our technology before it is too late to obtain patent protection, that we will be unable to devote the resources to file and prosecute all patent applications for such technology, or that we will lose protection for failing to comply with all procedural, documentary, payment, and other obligations during the patent prosecution process. The laws of some countries do not protect proprietary rights to the same extent as the laws of the United States, and mechanisms for enforcement of intellectual property rights in some foreign countries may be inadequate to prevent other parties from infringing our proprietary technology. We may also fail to detect unauthorized use of our intellectual property, or be required to expend significant resources to monitor and protect our intellectual property rights, including engaging in litigation, which may be costly, time-consuming, and divert the attention of management and resources, and may not ultimately be successful. If we fail to meaningfully establish, maintain, protect and enforce our intellectual property rights, our business, financial condition and results of operations could be adversely affected.

We rely on information technology networks and systems to operate and manage our business and store our confidential and proprietary information. Our services will also involve the storage, processing and transmission of our customers' data, including personal and financial information. We also engage and plan to engage third-party service providers to store and process this data. While we believe we and our service providers take reasonable steps to secure these networks and systems, our information technology infrastructure may be vulnerable to computer viruses or physical or electronic intrusions that our security measures may not detect. Any such security incident, including those resulting from cybersecurity attacks, phishing attacks, unauthorized access or usage, virus or similar breach or disruption could result in the loss, destruction, alteration or disclosure of this data, which could damage our reputation and lead to litigation, regulatory investigations, or other liabilities. These attacks may come from individual hackers, corporations, criminal groups, and state-sponsored organizations. Even the perception of inadequate security may damage our reputation and negatively impact our ability to win new customers and retain existing customers. Further, we could be required to expend significant capital and other resources to address any data security incident or breach, which may not be fully covered by our insurance or at all, and which may involve payments for investigations, forensic analyses, legal advice, public relations advice, system repair or replacement, or other services. Any actual or alleged security breaches or alleged violations of federal, state, or foreign laws or regulations relating to privacy and data security could result in mandated user notifications, litigation, government investigations, significant fines, and expenditures; divert management's attention from operations; deter customers from using our services; damage our brand and reputation; force us to cease operations for some length of time; and materially adversely affect our business, results of operations, and financial condition. Techniques used to sabotage or obtain unauthorized access to systems or networks are constantly evolving and, in some instances, are not identified until after they have been launched against a target. We and our service providers may be unable to anticipate these techniques, react in a timely manner, or implement adequate preventative and mitigating measures. If we are unable to efficiently and effectively maintain and upgrade our system safeguards, we may incur unexpected costs and certain of our systems may become more vulnerable to unauthorized access or disruption.

Our systems, or those of third-parties upon which we rely, may experience service interruptions, outages, or degradation because of hardware and software defects or malfunctions, human error or intentional bad acts by third parties or our employees, contractors, or service providers, natural disasters, power losses, disruptions in telecommunications services, fraud, military or political conflicts, terrorist attacks, cyberattacks or other events. Our insurance may not be sufficient, and we may not have sufficient remedies available to us from our third-party service providers, to cover all of our losses that may result from such issues which may have an adverse impact on our business, financial condition and results of operations.

While our primary operations are in the United States, we have established relationships with subsidiaries, suppliers and potential partners in select international markets. In addition, we currently have subsidiaries engaged in limited test manufacturing, R&D and other activities in foreign countries. We have also begun working with regulators in other countries, including the United Kingdom, Japan, South Korea and the UAE to pursue commercialization opportunities in those markets and have signed contracts with potential partners in each of these markets under which we make various commitments related to early operations. While foreign certification in many countries leverages our work with the FAA and in some cases, such as the UAE, it may also provide a path to commercial operations prior to receiving certification in the United States, applicable regulations outside the U.S. may differ from or be more stringent than analogous U.S. regulations. International operations are subject to a number of additional risks, including local political or economic instability, cross-border political tensions, challenges in effectively managing employees in foreign jurisdictions, including local labor laws that may be stricter or more costly to comply with than in the U.S., and exposure to potential liabilities under anti-corruption or anti-bribery laws, including the U.S. Foreign Corrupt Practices Act, the UK Bribery Act and similar laws and regulations. If any of these risks materialize it could adversely impact our business, financial condition and results of operations.