Table of Contents

​

​

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

Form 10-K

X  Annual Report pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934

For the fiscal year ended December 31, 2022

☐  Transition Report pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934

For the transition period from __________ to __________

Commission file number 001-41252

T Stamp Inc.

(Exact name of registrant as specified in its charter)

​

​

3017 Bolling Way NE, Floors 1 and 2, Atlanta, GA 30305

(Address of registrant’s principal executive offices) (Zip code)

Registrant’s telephone number, including area code (404) 806-9906

Securities registered under Section 12(b) of the Act:

​

Securities registered pursuant to Section 12(g) of the Act: None.

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No X

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No X

Indicate by check mark whether the issuer (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or has for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes X No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit and post such files). Yes X No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company or an emerging growth company. See the definitions of "large accelerated filer,” "accelerated filer,” "smaller reporting company,” and "emerging growth company” in Rule 12b-2 of the Exchange Act.

​

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 USC. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐ No X

The registrant’s Class A Common Stock began trading on the NASDAQ Stock Exchange on January 31, 2022. As of June 30, 2022, the aggregate market value held by non-affiliates of the registrant, computed by reference to the price at which the registrant’s Class A Common Stock was last sold on the NASDAQ Stock Exchange on such date was $24.4 million (2,893,235 at a closing price per share of $8.45 on June 30, 2022). There were 4,854,332 shares of the registrant’s Class A Common Stock outstanding as of March 30, 2023.

Documents Incorporated by Reference

None

​

​

​

​

​

Table of Contents

Table of Contents

​

​

2

Table of Contents

Statement Regarding Forward-Looking Statements

This Form 10-K contains "forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended (the "Securities Act”) and Section 21E of the Securities and Exchange Act of 1934, as amended (the "Exchange Act”), that involve risks and uncertainties, as well as assumptions that, if they never materialize or prove incorrect, could cause our results to differ materially and adversely from those expressed or implied by such forward-looking statements. Forward-looking statements may include, but are not limited to, statements relating to our outlook or expectations for earnings, revenues, expenses, asset quality or other future financial or business performance, strategies, expectations or business prospects, or the impact of legal, regulatory or supervisory matters on our business, results of operations, or financial condition. Specifically, forward-looking statements may include statements relating to our future business prospects, revenue, income, and financial condition.

Forward-looking statements can be identified by the use of words such as "estimate,” "plan,” "project,” "forecast,” "intend,” "expect,” "anticipate,” "believe,” "seek,” "target,” or similar expressions. Forward-looking statements reflect our judgment based on currently available information and involve a number of risks and uncertainties that could cause actual results to differ materially from those described in the forward-looking statements.

In addition to those factors discussed under Item 1A—"Risk Factors,” important factors could cause actual results to differ materially from our expectations. These factors include, but are not limited to:

3

Table of Contents

All forward-looking statements included in this Form 10-K speak only as of the date of this Form 10-K and you are cautioned not to place undue reliance on any such forward-looking statements. Except as required by law, we undertake no obligation to publicly update or release any revisions to these forward-looking statements to reflect any events or circumstances that arise after the date of this Form 10-K or to reflect the occurrence of unanticipated events. The above list is not intended to be exhaustive and there may be other factors that could preclude us from realizing the predictions made in the forward-looking statements. We operate in a continually changing business environment and new factors emerge from time to time. We cannot predict such factors or assess the impact, if any, of such factors on our financial position or results of operations.

In this Annual Report on Form 10-K, unless the context indicates otherwise, the terms "Trust Stamp”, the "Company”, "we”, "us”, and "our” refer to T Stamp, Inc., a Delaware corporation.

​

​

4

Table of Contents

PART I.

Item 1. Our Business

Overview

Trust Stamp was incorporated under the laws of the State of Delaware on April 11, 2016 as "T Stamp Inc.” T Stamp Inc. and its subsidiaries ("Trust Stamp”, "we”, or the "Company”) develop and market identity authentication software for enterprise and government partners and peer-to-peer markets.

Trust Stamp develops proprietary artificial intelligence-powered identity and trust solutions at the intersection of biometrics, privacy, and cybersecurity, that enable organizations to protect themselves and their users, while empowering individuals to retain ownership of their identity data and prevent fraudulent activity using their identity.

Trust Stamp tackles industry challenges including data protection, regulatory compliance, and financial accessibility, with cutting edge technology including biometric science, cryptography, and machine learning. Our core technology irreversibly transforms identity information to create tokenized identifiers that enable accurate authentication without the need to store or share sensitive data. By retaining the usefulness of biometric-derived data while minimizing the risk, we allow businesses to adopt biometrics and other anti-fraud initiatives while protecting personal information from hacks and leaks.

Trust Stamp’s key sub-markets are identity authentication for the purpose of account opening, access and fraud detection, the creation of tokenized digital identities to facilitate financial and societal inclusion, and in-community case management software for alternatives to detention and other governmental uses.

As biometric solutions proliferate, so does the need to protect biometric data. Stored biometric images and templates represent a growing and unquantified financial, security and PR liability and are the subject of governmental, media and public scrutiny, since biometric data cannot be "changed” once they are hacked, as they are directly linked to the user’s physical features and/or behaviors. Privacy concerns around biometric technology have led to close attention from regulators, with multiple jurisdictions placing biometrics in a special or sensitive category of personal data and demanding much stronger safeguards around collection and safekeeping.

To address this unprecedented danger and increased cross-industry need to establish trust quickly and securely in virtual environments, Trust Stamp has developed its Irreversibly Transformed Identity Token, or IT^2TM, solutions, which replace biometric templates with a cryptographic hash that can never be rebuilt into the original data and cannot be used to identify the subject outside the environment for which it is designed.

Trust Stamp’s data transformation and comparison technology is vendor and modality agnostic, allowing organizations including other biometric services providers to benefit from the increased protection, efficiency, and utility of our proprietary tokenization process. With online and offline functionality, Trust Stamp technology is effective in even the most remote locations in the world.

Trust Stamp also offers end-to-end solutions for multi-factor biometric authentication for account access and recovery, KYC/AML compliance, customer onboarding, and more, which allow organizations to approve more genuine users, keep bad actors from accessing systems and services, and retain existing users with a superior user experience.

Our Markets

Trust Stamp has evaluated the market potential for its services in part by reviewing the following reports, articles, and data sources, none of which were commissioned by the Company, and none of which are to be incorporated by reference:

Data security and fraud

5

Table of Contents

Trust Stamp addresses this market with biometric identity verification and biometric authentication - which utilizes Trust Stamp’s proprietary irreversible identity token to perform biometric matching in a secure and tokenized domain, matching tokenized personally identifiable information and liveness detection.

Biometric authentication

Trust Stamp addresses this market through its biometric authentication and liveness detection - which utilizes Trust Stamp’s proprietary irreversible identity token to perform biometric matching in a secure and tokenized domain. This permits biometric authentication without the risk of storing pictures and biometric templates.

Financial and societal inclusion

Trust Stamp’s biometric authentication, liveness detection, and information tokenization enable individuals to verify and establish their identities using biometrics. While individuals in this market lack traditional means of identity verification, Trust Stamp provides a means to authenticate identity that preserves an individual’s privacy and control over that identity.

Alternatives to Detention ("ATD”)

Trust Stamp addresses the ATD market with an application built on Trust Stamp’s privacy-preserving biometrics. Trust Stamp provides hardware and software that provides for the ethical and human tracking of individuals to comply with ATD requirements.

Trust Stamp’s key sub-markets are:

6

Table of Contents

In addition to its key sub-markets, the Company is developing products and working with partners and industry organizations in other sectors that offer significant market opportunities, in particular, the travel, healthcare, Metaverse platform and cryptographic key and account credential safekeeping sectors. For example, the Company has developed a "crypto key vault” solution that leverages proven facial biometric authentication and irreversible data transformation technology to protect private keys for digital assets while ensuring long-term data protection and access credential availability.

Principal Products and Services

Trust Stamp’s most important technology is the Irreversibly Transformed Identity Token^TM (also known as the IT^2TM, Evergreen Hash^TM, EgHash^TM and MyHash^TM) combined with a data architecture that can use one or multiple sources of biometric or other identifying data. Once a "hash translation” algorithm is created, like-modality hashes are comparable regardless of their origin. The IT² protects against system and data redundancy, providing a lifelong "digital-DNA” that can store (or pivot to) any type of KYC or relationship data with fields individually hashed or (salted and) encrypted, facilitating selective data sharing. Products utilizing the IT² are Trust Stamp’s primary products, accounting for the majority of its revenues during the year ended December 31, 2022.

We adhere to the best practices outlined in the National Institute of Standards and Technology ("NIST”) and International Organization for Standardization ("ISO”) frameworks, and our policies and procedures in managing personally identifiable information ("PII”) are in compliance with General Data Protection Regulation ("GDPR”) requirements.

IT² Solutions

The IT² (for Irreversibly Transformed Identity Token) replaces biometric templates and scans with meaningless numbers, letters, and symbols in order to remove sensitive data from the reach of criminals using a proprietary process by which a deep neural network irreversibly converts biometric and other identifying data, from any source, into the secure tokenized identity. This IT² is unique to the user, is different every time it is generated from a live subject and cannot be reverse engineered and rebuilt into the user’s face or other original identity data.

Each token can be stored and compared to all other tokens from the same modality, allowing the Company’s AI-powered analytics to predict if a single subject has generated two or more tokens, even if the subject has passed conventional KYC with, e.g., falsified identity

7

Table of Contents

documents. Using this technology, an IT² can be employed for re-authentication purposes, including account recovery, password-less login, new account creation, and more, across the organization or even within a consortium of organizations, all in a low cost and low friction delivery that is fast and secure.

Our technology is being used for enhanced due diligence, KYC/AML compliance, synthetic identity fraud reduction and "second chance” approval for customer onboarding and account access, together with the delivery of humanitarian and development services. The solution allows organizations to approve more users, keep bad actors from accessing systems and services, and retain existing users with a superior user experience.

Our hashing and matching technology can maximize the effectiveness of all types of identity data, while rendering it safer to use, store, and share. Whatever the source of identity data, it can be stored and compared as an IT². See the chart below for examples.

Distribution

Through licensing we allow customers to utilize our technology in a wide variety of applications. Uses can include (e.g.):

Trust Stamp enters into licensing and SaaS agreements.

8

Table of Contents

License agreements are typically as a hosted offering, on-premise solution, or both, with its customers, pursuant to which the customer pays for the initial product development plus a license fee for the use of Trust Stamp’s technologies on a periodic and/or volume-based basis. In addition to consuming and paying for Trust Stamp’s services for their own use, some key customers also serve as channel partners by offering Trust Stamp products to their own customer base, whether as stand-alone products, or integrated into their own services as upgraded product offerings.

SaaS agreements are typically serviced through the Company’s Orchestration Layer platform, which is being utilized in FIS’ new global identity authentication system. The platform includes our proprietary tokenization technology, and is designed to provide easy integration with, and access to, Trust Stamp’s products, chargeable on a per use basis. The Orchestration Layer facilitates no-code and low-code implementations, making adoption faster and even more cost-effective for a broader range of potential customers. It is expected to accelerate the Company’s evolution, from being exclusively a custom solutions provider, to also offering a modular and highly scalable Software-as-a-Service (SaaS) model with low-code implementation.

Competition

We can work with any identity data from any source, potentially breaking vendor and modality lock-in, but our primary market target is the biometric service industry, which is growing exponentially while being threatened by a consumer, media, and legislative backlash against storing biometric data. The IT² can potentially be overlaid on any biometric or other identity data provider.

In general, we compete for customer budget with any company in the identity authentication industry, and our business plan calls for our capturing a fraction of one percent (1%) of the projected expenditure for biometric authentication services. Major competitors in this space include companies such as NEXT Biometrics, IDEMIA, Synaptics, Cognitec, Innovatrics, Suprema, FaceTec, Rank One Computing, Acuant, Jumio, Onfido and Mitek. However, we believe that, due to the uniqueness of our technology solution, the Company does not currently have any direct competitors for the core IT² solutions upon which the growth in our business plan is focused.

The commercial advantage of our solution is our ability to work across providers and modalities and we continue to pursue a first-mover advantage including our global –scale partnership which is achieving a network effect in the global Humanitarian and Development market. We believe that this combination will make it unattractive for a potential competitor to replicate the 6-years and multi-million dollars, that we have already expended, to try and circumvent our multiple (and continuing) patent filings and/or offer a parallel product based upon a different technology.

We believe that given sufficient time and resources, we can augment any biometric modalities including face, hand, iris, voice, gait, and behavior, together with any other identifying data which places us in a unique position versus providers of biometric services.

We are unaware of any other provider being able to offer or support a proliferation of authentication modalities in this fashion, and therefore we believe there are no other companies that directly compete with us in this space. If our go-to-market strategy is successful, biometric service providers can be a channel distributer, and not necessarily a competitor.

Growth Strategy

Our business plan calls for our capturing a small fraction of one percent (1%) of the projected expenditure for biometric authentication services. Our strategy in this respect is to:

9

Table of Contents

Human Capital

Given the geographic diversity of its team, and to facilitate cost-effective administration, Trust Stamp secures the services of its permanent team members through a variety of administrative structures that include wholly owned subsidiaries, professional employer organizations and consulting contracts. As of December 31, 2022, the Company had 10 full-time and 1 part-time team member that works out of the United States, 25 full-time members that work out of Malta, 7 full-time team members in Poland and Central Europe, 2 full-time and 4 part-time team members in the United Kingdom, 1 full-time team member in the Isle of Man, 15 full-time team members working in the Philippines, 13 full-time team members working in Rwanda, 1 full-time team member working in the Netherlands, 1 full-time team member in Denmark, and 3 full-time team members working remotely in India. Our permanent team is augmented as needed by contract development and other staff on both a long and short-term basis.

Outsourcing

We design and develop our own products. We use an outsourcing company, 10Clouds, for additional development staff as needed. 10Clouds is considered a related party. In addition, we also utilize SourceFit, a company in the Philippines, for PEO services, representing approximately 2% of our operating expenses during the year ended December 31, 2022. Amazon Web Services provides cloud hosting and processing services, representing approximately 2-3% of our operating expenses during the year ended December 31, 2022.

Key Customers

Historically, the Company generated most of its income through a relationship with an S&P 500 bank, in which services were provided pursuant to a Master Software Agreement and statements of work. The scope of services provided to the S&P 500 bank has grown throughout the relationship and additional growth has been seen in 2021 and 2022. In recent years, the Company has also expanded its customer base to include relationships with Mastercard International ("Mastercard”), Fidelity Information Services, LLC ("FIS”), and other customers.

With respect to FIS, we continued to expand our work with our proprietary tokenization technology being utilized in FIS’ new global identity authentication system. In 2022, the Company implemented its "Orchestration Layer” platform – a low-code platform solution which streamlines delivery and implementation of the Company’s technologies. In the third quarter 2022, the Company acquired its first 2 customers on the Orchestration Layer platform through its partnership with FIS. In the fourth quarter, 4 additional customers onboarded, then 17 new customers since year-end, totaling to 23 total customers on the Orchestration Layer platform all related to FIS, including 23 financial institutions with over $50 billion in assets, as of February 2023. The Orchestration Layer platform is designed to be a one-stop shop for Trust Stamp services and provides for easy integration to our products; chargeable on a per-use basis and is accelerating the Company’s evolution from being exclusively a custom solutions provider to also offering a modular and highly scalable Software-as-a-Service (SaaS) model with low-code implementation. The Orchestration Layer utilizes the Company’s next-generation identity package, offering rapid deployment across devices and platforms, with custom workflows that seamlessly orchestrate trust across the identity lifecycle for a consistent user experience in processes for onboarding and KYC/AML, multi-factor authentication, account recovery, fraud prevention, compliance, and more. The Orchestration Layer that has been developed facilitates no-code and low-code implementations of the Company’s technology making adoption faster and even more cost-effective for a broader range of potential customers.

10

Table of Contents

Under a ten-year technology services agreement ("the TSA”) with Mastercard International entered into in March 2019, the Company’s IT² technology is being implemented by Mastercard for Humanitarian & Development purposes as a core element of its Community Pass and Inclusive Identity offerings. Use cases include not only financial services for individuals and businesses but also empowering people and communities to meet basic needs, such as nutritious food, clean water, housing, education, and healthcare including Ethiopia’s implementation of Mastercard’s Wellness Pass within Ethiopia’s health information system to promote efficiency in healthcare tracking and offline portability of health records. Under the TSA, the Company is paid to develop and host software solutions utilizing the IT2 and to support Mastercard’s implementations. In addition, the Company is paid on a "per use” basis for all transactions utilizing its technology. To date the Company has received guaranteed minimum annual payments on account of usage. In December of 2022, the Company entered into a modification of the agreed pricing schedule with Mastercard to move from a per-use to a per-user-year model to broaden the range of potential use cases. Under that agreement, Trust Stamp currently receives minimum annual payments on account of usage, and we anticipate use-based revenue starting in 2023 and growing year-on-year thereafter. The TSA may be terminated by either party in the event of a material breach by the other party that remains uncured within thirty days after notice is received of such a breach. Either party may terminate the TSA if the other party becomes, including but not limited to, insolvent, subject to a bankruptcy, dissolved or liquidated. Unless the TSA is terminated, the TSA will automatically renew for additional one year-periods unless either party provides written notice within ninety days of intent not to renew.

As a result of investments in new business development staff and systems, as well as the introduction and expansion of the customer relationships described above, and while we value the relationship highly, management believes that we are no longer financially dependent on our relationship with the S&P 500 bank. As an example, the S&P 500 bank and Mastercard made up 33.6 % of total revenue during the year ended December 31, 2022, compared to 46.3% of total revenue during the year ended December 31, 2021. On September 23, 2021, the Company was awarded a $3,920,764 contract (the "ICE Contract”) with U.S. Immigration and Customs Enforcement ("ICE”), a federal agency under the U.S. Department of Homeland Security. This engagement required an investment in productization, business development, and satisfying extensive due diligence processes. Effective March 27, 2022, Trust Stamp agreed to a bilateral modification of the fixed price purchase order announced in September 2021 with ICE. The modification covered software development and services related to rapid enrolment in the ICE alternative to detention program and, increased the total contract award value to $7,176,364 from the original $3,920,764. On August 17, 2022, Trust Stamp received notification from ICE that it was terminating the ICE Contract for convenience effective immediately. ICE has paid Trust Stamp for the ICE Contract services performed prior to the amendment effective April 15, 2022. Additionally, Trust Stamp received $720 thousand in cancellation expenses incurred during the period between April 15, 2022 and August 17, 2022 for mobile service expense, storage expense, and payroll expense.

On September 15, 2022, the Company entered into a Master Services Agreement ("the MSA”) with Innovative Government Solutions ("IGS”) under which the Company and IGS will jointly offer services and IGS is granted a 12-year (renewable) license ("the license”) to resell the Company’s technology subject to payment by IGS of agreed revenue advances and end user license fees. On execution of the MSA, IGS agrees to pay $1,500,000 to the Company as a non-refundable revenue advance, an additional $1,500,000 non-refundable revenue advance on the first anniversary of the MSA, and $1,000,000 on each of the next two anniversaries of the MSA as additional non-refundable revenue advances. In February 2023, IGS agreed to pre-pay $750,000 of the first anniversary payment and payment is expected in March of 2023. IGS has the right to terminate the MSA for convenience before the additional non-refundable revenue advances become due in which case the unpaid additional non-refundable revenue advances will not be payable and the license will terminate. During the year ended December 31, 2022, Trust Stamp received the initial $1.5 million payment, recorded the non-refundable revenue advance to deferred revenue, and recognized no IGS revenue.

As we grow, we intend to continue to expand the number of customers from which we generate revenues including through the development of channel partnerships, such as our relationship with FIS. In the opinion of our management, we would be able to continue operations without our current customers (including our channel partnership with FIS). However, the unanticipated loss of the Company’s current customers could have an adverse effect on the company’s financial position.

Regulation

Our business is not currently subject to any licensing requirements in any jurisdiction in which we operate, other than the requirement to hold a business license in the City of Atlanta (with which we are in compliance), and the requirement to hold a trading license in Rwanda (with which we are in compliance). This does not mean that licensing requirements may not be introduced in one or more jurisdiction in which we operate, and such requirements could be burdensome and/or expensive or even impose requirements that we are unable to meet.

11

Table of Contents

We are subject to substantial governmental regulation relating to our technology and will continue to be for the lifetime of our Company. By virtue of handling sensitive PII and biometric data, we are subject to numerous statutes related to data privacy, and additional legislation and regulation should be anticipated in every jurisdiction in which we operate. Example federal (US) and European statutes we could be subject to are:

HIPAA and HITECH

Under the administrative simplification provisions of the Health Insurance Portability and Accountability Act of 1996 ("HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act "HITECH”), the U.S. Department of Health and Human Services ("HHS”) issued regulations that establish uniform standards governing the conduct of certain electronic healthcare transactions and requirements for protecting the privacy and security of protected health information ("PHI”), used or disclosed by covered entities and business associates. Covered entities and business associates are subject to HIPAA and HITECH. Our subcontractors that create, receive, maintain, transmit, or otherwise process PHI on behalf of us are HIPAA "business associates” and must also comply with HIPAA as a business associate.

HIPAA and HITECH include privacy and security rules, breach notification requirements, and electronic transaction standards.

The privacy rules cover the use and disclosure of PHI by covered entities and business associates. The privacy rules generally prohibit the use or disclosure of PHI, except as permitted under certain limited circumstances. The privacy rules also set forth individual patient rights, such as the right to access or amend certain records containing his or her PHI, or to request restrictions on the use or disclosure of his or her PHI.

The security rules require covered entities and business associates to safeguard the confidentiality, integrity, and availability of electronically transmitted or stored PHI by implementing administrative, physical, and technical safeguards. Under HITECH’s Breach Notification Rule, a covered entity must notify individuals, the Secretary of the HHS, and in some circumstances, the media of breaches of unsecured PHI.

In addition, we may be subject to state health information privacy and data breach notification laws, which may govern the collection, use, disclosure, and protection of health-related and other personal information. State laws may be more stringent, broader in scope, or offer greater individual rights with respect to PHI than HIPAA, and state laws may differ from each other, which may complicate compliance efforts.

Entities that are found to be in violation of HIPAA as the result of a failure to secure PHI, a complaint about our privacy practices or an audit by HHS, may be subject to significant civil and criminal fines and penalties and additional reporting and oversight obligations if such entities are required to enter into a resolution agreement and corrective action plan with HHS to settle allegations of HIPAA non-compliance.

GDPR

The EU-wide General Data Protection Regulation imposes onerous accountability obligations requiring data controllers and processors to maintain a record of their data processing and policies. It requires data controllers to implement more stringent operational

12

Table of Contents

requirements for processors and controllers of personal data, including, for example, transparent and expanded disclosure to data subjects (in a concise, intelligible and easily accessible form) about how their personal information is to be used, imposes limitations on retention of information, increases requirements pertaining to health data and pseudonymized (i.e., key-coded) data, introduces mandatory data breach notification requirements, and sets higher standards for data controllers to demonstrate that they have obtained valid consent for certain data processing activities. Fines for non-compliance with the GDPR will be significant—the greater of €20 million or 4% of global turnover. The GDPR provides that EU member states may introduce further conditions, including limitations, to make their own further laws and regulations limiting the processing of genetic, biometric or health data.

ePrivacy Directive

The ePrivacy directive sets out the rules relating to the processing of personal data across public communications networks. This directive requires business to ensure consent requests are made and that consent is received from the user before the use of cookies is made. Businesses must communicate the privacy rules with accurate and specific information regarding the data contained in the cookie. Information must be communicated before the consent requests are made, in plain language. Organizations must ensure that users are able to withdraw consent in the same simple manner as the initial consent request.

CRPA and CCPA

The CRPA and CCPA define and establish various rights that consumers residing in California have over the privacy of their data along with the responsibilities of businesses when collecting personal information. It requires businesses that control the collection of consumers’ personal information to inform them of the category, purpose and duration the business intends to retain such information. It lists the consumers’ right to correct their data and have their data deleted. Customers may also exercise their right to limit the sale or sharing of their personal or sensitive personal information. Fines for non-compliance can range from $100 to $750 per consumer per incident. Additionally, in certain cases the California Privacy Protection Agency may impose administrative fines ranging from $2,500 to $7,500 for each violation.

BIPA

BIPA, which was enacted in 2008, addresses the collection, use and retention of biometric information by private entities. Under the law, a private entity must inform an individual, or their legally authorized individual, that the biometric information is being collected and stored, and the specific purpose and the length of time for the collection, storage and use of the biometric information, before obtaining or possessing their biometric information for the purposes of capturing, storing or sharing it. In addition, prior to collecting any biometric information, the regulation required businesses to obtain a written release for the collection of the biometric information from the individual, or the individual’s legally authorized representative after notice has been given. BIPA provides statutory damages of up to $1,000 for each negligent violation, and up to $5,000 for each intentional or reckless violation.

13

Table of Contents

Intellectual Property

Patents

A summary of the Company’s issued patents and pending patent applications on March 15, 2023 is provided in the table below.

​

​

14

Table of Contents

​

​

15

Table of Contents

​

​

16

Table of Contents

Trademarks

The following is a summary of Trust Stamp’s issued and pending Trademarks as of March 15, 2023.

​

​

17

Table of Contents

Subsidiaries and Affiliates

Given the geographic diversity of our team and to facilitate cost-effective administration, Trust Stamp conducts various aspects of its operations through subsidiaries. All subsidiaries share resources across the entire Trust Stamp organization. The officers and directors of Trust Stamp have influence over the operations of all subsidiaries and employees across jurisdictions. Only one of our subsidiaries, Biometric Innovations Limited, has its own management team.

T Stamp Inc. Corporate Structure Chart

​

TStamp Incentive Holdings. On April 9, 2019, management created a new entity, TStamp Incentive Holdings ("TSIH”) to which the Company issued 320,513 shares of Class A Common Stock that the Board of Directors of TSIH could use for employee stock awards in the future. The purpose of the entity was to provide an analogous structure to a traditional stock incentive plan. As of the date of this report, 262,546 shares of Class A Common Stock are still held by TSIH – however, all of these shares of Class A Common Stock have been allocated for issuance pursuant to the RSUs that vested on January 2, 2023 and all RSUs vested during the year ended December 31, 2022. The Company has no plans to issue additional equity securities to TSIH. As such, once these remaining shares are issued, it is expected this entity will become dormant going forward.

Biometric Innovations Limited (formerly "Trust Stamp Fintech Limited”). Biometric Innovations is our Company’s United Kingdom operating subsidiary. It was established to act as the contracting entity for development contractors in the UK, and it has its own board and management team. The purpose of this entity was to establish beachhead operations in the country to service a contract entered by the Company with the National Association of Realtors and Property Mark. This entity serves as a sales and marketing function for the product "NAEA” which was developed for the contract between the listed parties. On June 11, 2020, the Company entered into a stock exchange transaction with Biometric Innovations Limited, becoming a 100% owner of the entity. The stock exchange transaction was not pursuant to any formal written agreement.

Trust Stamp Malta Limited. Trust Stamp Malta Limited is a wholly owned subsidiary of T Stamp Inc. It operates an R&D Campus in the Republic of Malta, for which it has entered into a lease with a local commercial landlord in Malta, Vassallo Group Realty Ltd. The goal of Trust Stamp Malta Limited is to advance our biometric authentication technology. As part of the creation of this entity, we entered into an agreement with the government of Malta for a repayable advance of up to €800,000 to cover 75% of the first 24 months of payroll costs for any employee who begins 36 months from the execution of the agreement on July 8, 2020.

Trust Stamp Rwanda Limited. The Company opened an office in Rwanda, Africa in April 2021 and signed a one-year lease for office space commencing May 1, 2021 and renewing annually unless otherwise terminated. The Company has established an R&D center in Rwanda together with a back-office facility for the purpose of our expansion into Africa.

18

Table of Contents

Metapresence Limited. Trust Stamp established Metapresence Limited on November 23, 2021 as a wholly owned crypto-asset subsidiary in the Isle of Man. Metapresence Limited participates in The Digital Isle of Man Accelerator Program, which provides access to a range of government services including regulatory acceleration support and guided access into the regulatory sandbox, where flexible licensing conditions enable digital asset businesses to explore opportunities and adapt as the technology evolves. Metapresence Limited is intended to market the group’s Metaverse related products for use cases outside the European Union. As of the date of this report, the entity has no operations.

Trust Stamp Denmark ApS. Trust Stamp established Trust Stamp Denmark ApS on June 6, 2021 as a wholly owned subsidiary in Copenhagen, Denmark. Trust Stamp Denmark focuses on developing and marketing GDPR compliant products in Denmark and within the EU from a Danish base that can passport authorized products throughout the EU. In furtherance of that goal, Trust Stamp Denmark has obtained D-Seal Certification and is working with a prominent Danish law firm to publish opinions on the status of Trust Stamp’s products under GDPR.

Non-Operational Subsidiaries

AIID Payments Limited. Established by the Company to provide payments services to NGO’s and other non-profit and social-welfare entities and activities. As of the date of this report, the entity has no operations, and is essentially dormant.

T Avatar LLC. Established by the Company to provide anonymized age-verification tools for minors participating in online activities. As of the date of this report, the entity has no operations, and is essentially dormant. The Company has completed the process of administratively dissolving T Avatar LLC and the dissolution will be effective February 28, 2023. See Note 15 to the financial statements for more details.

Finnovation LLC. Established by the Company to provide an innovative FinTech, Blockchain and Digital Identity innovation incubator. As of the date of this report, this entity has no operations, and is essentially dormant.

Trust Stamp Cayman. Trust Stamp Cayman was established with the intention of taking advantage of enterprise grants which were offered by the Cayman National Government’s Enterprise Zone. No operations were established. On October 5, 2022, the Company received the Certificate of Strike Off from the Cayman Registrar of Companies, which represents the completion of administratively dissolving Trust Stamp Cayman. The dissolution was effective December 30, 2022.

T Stamp LLC. As described above, the Company was originally founded as "T Stamp LLC”, formed on November 9, 2015 as a Georgia limited liability company. In 2016, the Company effected a "hive down” business reorganization whereby the business of the Company was transferred into to a newly formed, wholly owned subsidiary, which was T Stamp Inc. (i.e. the Company). As of the date of this report, the Company is no longer a subsidiary of T Stamp LLC, and T Stamp LLC is no longer a majority owner of the Company. On January 6, 2022 all shares held by T Stamp LLC were distributed to its members on a pro rata basis according to their respective membership interests. As such, as of the date of this report, the entity has no operations, and is essentially dormant.

Sunflower Artificial Intelligence Technologies. Based out of Poland, this entity acted as the contracting entity for development contractors in Poland and Central Europe but is now being dissolved as the contractors have entered into direct contracts with T Stamp Inc.

Trusted Mail Inc. The developer of an encrypted e-mail product (Trusted Mail ®) using our Company’s facial recognition technology. The Trusted Mail technology is held by Trusted Mail, Inc., which is our majority-owned subsidiary. The remainder of Trust Mail Inc. is owned by FSH Capital, LLC and Second Century Ventures, which are related parties of the Company.

Available Information

Our website is www.truststamp.ai. Available on this website, free of charge, are our annual reports, quarterly reports, and current reports on form 8-K and all amendments to those reports as soon as reasonably practicable after such material is electronically filed or furnished to the SEC.

Alternatively, you may access these reports at the SEC’s website at www.sec.gov.

19

Table of Contents

Item 1A. Risk Factors

The SEC requires the Company to identify risks that are specific to its business and its financial condition. The Company is still subject to all the same risks that all companies in its business, and all companies in the economy, are exposed to. These include risks relating to economic downturns, political and economic events, and technological developments (such as cyber-attacks and the ability to prevent such attacks). Additionally, early-stage companies are inherently riskier than more developed companies, and the risk of business failure and complete loss of your investment capital is present. You should consider general risks as well as specific risks when deciding whether to invest.

Below is a summary of material risks, uncertainties and other factors that could have a material effect on the Company and its operations:

Risks Related to Our Company

We have a limited operating history upon which you can evaluate our performance and have not yet generated profits. Accordingly, our prospects must be considered in light of the risks that any new company encounters. Our Company was incorporated under the laws of the State of Delaware on April 11, 2016, and we have not yet generated profits. The likelihood of our creation of a viable business must be considered in light of the problems, expenses, difficulties, complications, and delays frequently encountered in connection with the growth of a business, operation in a competitive industry, and the continued development of our technology and products. We anticipate that our operating expenses will increase for the near future, and there is no assurance that we will be profitable in the near future. You should consider our business, operations, and prospects in light of the risks, expenses and challenges faced as an emerging growth company.

We have historically operated at a loss, which has resulted in an accumulated deficit. For the fiscal year ended December 31, 2022, we incurred a net loss of $12.09 million, compared to a net loss of $9.06 million for the fiscal year ended December 31, 2021. There can be no assurance that we will ever achieve profitability. Even if we do, there can be no assurance that we will be able to maintain or increase profitability on a quarterly or annual basis. Failure to do so would continue to have a material adverse effect on our accumulated deficit, would affect our cash flows, would affect our efforts to raise capital and is likely to result in a decline in our Class A Common Stock price.

20

Table of Contents

Our consolidated financial statements for the fiscal years ended December 31, 2022 and 2021 have been prepared on a going concern basis. We have not yet generated profits and have an accumulated deficit of $39.30 million as of December 31, 2022. We may not have enough funds to sustain the business until it becomes profitable. Even if we raise additional funding through future financing efforts, we may not accurately anticipate how quickly we may use such funds and whether such funds would be sufficient to bring the business to profitability. The Company’s ability to continue as a going concern in the next twelve months following the date of the consolidated financial statements is dependent upon its ability to produce revenues and/or obtain financing sufficient to meet current and future obligations and deploy such to produce profitable operating results.

Our cash could be adversely affected if the financial institutions in which we hold our cash fail. The Company maintains domestic cash deposits in Federal Deposit Insurance Corporation ("FDIC”) insured banks. The domestic bank deposit balances may exceed the FDIC insurance limits. In addition, given the foreign markets we serve, we maintain cash deposits in foreign banks, some of which are not insured or partially insured by the FDIC or other similar agency. These balances could be impacted if one or more of the financial institutions in which we deposit monies fails or is subject to other adverse conditions in the financial or credit markets. For example, on March 10, 2023, Silicon Valley Bank failed and was taken into receivership by the FDIC. The Company held $85,668 in excess of federally insured limits with Silicon Valley Bank as of March 10, 2023. As of March 14, 2023, the Company had access to all of its money held at Silicon Valley Bank.

Our technology continues to be developed, and it is unlikely that we will ever develop our technology to a point at which no further development is required. Trust Stamp is developing complex technology that requires significant technical and regulatory expertise to develop, commercialize and update to meet evolving market and regulatory requirements. While we constantly monitor and adapt our products and technology as criminal methods of breaching cybersecurity advance, there is no guarantee we will consistently be able to develop technology that can effectively counteract such criminal efforts. If we are unable to successfully develop and commercialize our technology and products, it will significantly affect our viability as a company.

If our security measures are breached or unauthorized access to individually identifiable biometric or other personally identifiable information is otherwise obtained, our reputation may be harmed, and we may incur significant liabilities. In the ordinary course of our business, we may collect and store sensitive data, including protected health information ("PHI”), personally identifiable information ("PII”), owned or controlled by ourselves or our customers, and other parties. We communicate sensitive data, including patient data, electronically, and through relationships with multiple third-party vendors and their subcontractors. These applications and data encompass a wide variety of business-critical information, including research and development information, patient data, commercial information, and business and financial information. We face a number of risks relative to protecting this critical information, including loss of access risk, inappropriate use or disclosure, inappropriate modification, and the risk of our being unable to adequately monitor, audit, and modify our controls over our critical information. This risk extends to the third-party vendors and subcontractors we use to manage this sensitive data. As a custodian of this data, Trust Stamp therefore inherits responsibilities related to this data, exposing itself to potential threats. Data breaches occur at all levels of corporate sophistication (including at companies with significantly greater resources and security measures than our own) and the resulting fallout stemming from these breaches can be costly, time-consuming, and damaging to a company’s reputation. Further, data breaches need not occur from malicious attack or phishing only. Often, employee carelessness can result in sharing PII with a much wider audience than intended. Consequences of such data breaches could result in fines, litigation expenses, costs of implementing better systems, and the damage of negative publicity, all of which could have a material adverse effect on our business operations and financial condition.

We are subject to substantial governmental regulation relating to our technology and will continue to be for the lifetime of our Company. By virtue of handling sensitive PII and biometric data, we are subject to numerous statutes related to data privacy and additional legislation and regulation should be anticipated in every jurisdiction in which we operate. Examples of federal (US) and European statutes we could be subject to are:

21

Table of Contents

Any such access, breach, or other loss of information could result in legal claims or proceedings, liability under federal or state laws that protect the privacy of personal information under HIPAA and/or "HITECH”. Notice of breaches must be made to affected individuals, the Secretary of the Department of Health and Human Services ("HHS”), and for extensive breaches, notice may need to be made to the media or state attorneys general. Penalties for violations of these laws vary. For instance, penalties for failure to comply with a requirement of HIPAA and HITECH vary significantly, and include significant civil monetary penalties and, in certain circumstances, criminal penalties with fines up to $250,000 per violation and/or imprisonment. A person who knowingly obtains or discloses individually identifiable health information in violation of HIPAA may face a criminal penalty of up to $50,000 and up to one-year imprisonment. The criminal penalties increase if the wrongful conduct involves false pretenses or the intent to sell, transfer or use identifiable health information for commercial advantage, personal gain, or malicious harm.

Further, various states, such as California, have implemented similar privacy laws and regulations, such as the California Confidentiality of Medical Information Act, that impose restrictive requirements regulating the use and disclosure of health information and other personally identifiable information. Where state laws are more protective, we have to comply with the stricter provisions. In addition to fines and penalties imposed upon violators, some of these state laws also afford private rights of action to individuals who believe their personal information has been misused. California’s patient privacy laws, for example, provide for penalties of up to $250,000 and permit injured parties to sue for damages. The interplay of federal and state laws may be subject to varying interpretations by courts and government agencies, creating complex compliance issues for us and data we receive, use and share, potentially exposing us to additional expense, adverse publicity, and liability. Further, as regulatory focus on privacy issues continues to increase and laws and regulations concerning the protection of personal information expand and become more complex, these potential risks to our business could intensify. Changes in laws or regulations associated with the enhanced protection of certain types of sensitive data, such as PII or PHI, along with increased customer demands for enhanced data security infrastructure, could greatly increase our cost of providing our services, decrease demand for our services, reduce our revenues and/or subject us to additional liabilities.

Compliance with U.S. and international data protection laws and regulations could cause us to incur substantial costs or require us to change our business practices and compliance procedures in a manner adverse to our business. Moreover, complying with these various laws could require us to take on more onerous obligations in our contracts, restrict our ability to collect, use and disclose data, or in some cases, impact our ability to operate in certain jurisdictions. We rely on our customers to obtain valid and appropriate consents from data subjects whose biometric samples and data we process on such customers’ behalf. Given that we do not obtain direct consent from such data subjects and we do not audit our customers to ensure that they have obtained the necessary consents required by law, the failure of our customers to obtain consents that are in compliance with applicable law could result in our own non-compliance with privacy laws. Such failure to comply with U.S. and international data protection laws and regulations could result in government enforcement actions (which could include civil or criminal penalties), private litigation and/or adverse publicity and could negatively affect our operating results and business. Claims that we have violated individuals’ privacy rights, failed to comply with data protection laws, or breached our contractual obligations, even if we are not found liable, could be expensive and time consuming to defend, could result in adverse publicity and could have a material adverse effect on our business, financial condition and results of operations.

We anticipate sustaining operating losses for the foreseeable future. It is anticipated that we will sustain operating losses into 2023 as we continue with research and development, and strive to gain new customers for our technology and market share in our industry. Our ability to become profitable depends on our ability to expand our customer base, consisting of companies willing to license our technology. There can be no assurance that this will occur. Unanticipated problems and expenses are often encountered in offering new products which may impact whether the Company is successful. Furthermore, we may encounter substantial delays and unexpected expenses related to development, technological changes, marketing, regulatory requirements and changes to such requirements or other unforeseen difficulties. There can be no assurance that we will ever become profitable. If the Company sustains losses over an extended period of time, it may be unable to continue in business.

If our products do not achieve broad acceptance both domestically and internationally, we will not be able to achieve our anticipated level of growth. Our revenues are derived from licensing our identity authentication solutions. We cannot accurately predict the future growth rate or the size of the market for our technology. The expansion of the market for our solutions depends on a number of factors, such as

22

Table of Contents

Even if our technology gains wide market acceptance, our solutions may not adequately address market requirements and may not continue to gain market acceptance. If authentication solutions generally or our solutions specifically do not gain wide market acceptance, we may not be able to achieve our anticipated level of growth and our revenues and results of operations would suffer.

We operate in a highly competitive industry that is dominated by multiple very large, well-capitalized market leaders and is constantly evolving. New entrants to the market, existing competitor actions, or other changes in market dynamics could adversely impact us. The level of competition in the identity authentication industry is high, with multiple exceptionally large, well-capitalized competitors holding a majority share of the market. Currently, we are not aware of any direct competitors of the Company able to offer our main technological offering. Nonetheless, many of the companies in the identity authentication market have longer operating histories, larger customer bases, significantly greater financial, technological, sales, marketing, and other resources than we do. At any point, these companies may decide to devote their resources to creating a competing technology solution which will impact our ability to maintain or gain market share in this industry. Further, such companies will be able to respond more quickly than we can to new or changing opportunities, technologies, standards, or client requirements, more quickly develop new products or devote greater resources to the promotion and sale of their products and services than we can. Likewise, their greater capabilities in these areas may enable them to better withstand periodic downturns in the identity management solutions industry and compete more effectively on the basis of price and production. In addition, new companies may enter the markets in which we compete, further increasing competition in the identity management solutions industry.

We believe that our ability to compete successfully depends on a number of factors, including the type and quality of our products and the strength of our brand names, as well as many factors beyond our control. We may not be able to compete successfully against current or future competitors, and increased competition may result in price reductions, reduced profit margins, loss of market share and an inability to generate cash flows that are sufficient to maintain or expand the development and marketing of new products, any of which would adversely impact our results of operations and financial condition.

We face competition from companies with greater financial, technical, sales, marketing, and other resources, and, if we are unable to compete effectively with these competitors, our market share may decline, and our business could be harmed. We face competition from well established companies. Many of our competitors have longer operating histories, larger customer bases, significantly greater financial, technological, sales, marketing, and other resources than we do. As a result, our competitors may be able to respond more quickly than we can to new or changing opportunities, technologies, standards, or client requirements, more quickly develop new products or devote greater resources to the promotion and sale of their products and services than we can. Likewise, their greater capabilities in these areas may enable them to better withstand periodic downturns in the identity management solutions industry and compete more effectively on the basis of price and production. In addition, new companies may enter the markets in which we compete, further increasing competition in the identity management solutions industry.

We believe that our ability to compete successfully depends on a number of factors, including the type and quality of our products and the strength of our brand names, as well as many factors beyond our control. We may not be able to compete successfully against current or future competitors, and increased competition may result in price reductions, reduced profit margins, loss of market share and an inability to generate cash flows that are sufficient to maintain or expand the development and marketing of new products, any of which would adversely impact our results of operations and financial condition.

23

Table of Contents

The Company may be unable to effectively protect its intellectual property. To date, the Company has been issued thirteen patents related to its products and technology in the current year. The Company has many more pending patent applications as of December, 31, 2022. There is no guarantee that the Company will ever be issued patents on the applications it has submitted. In addition, in order to control costs, we have filed patent applications only in the United States. This may result in our having limited or no protection in other jurisdictions. Our success depends to a significant degree upon the protection of our products and technology. If we are unable to secure patents for our products and technology, or are otherwise are unsuccessful at protecting our technology, other companies with greater resources may copy our technology and/or products, or improve upon them, putting us at a disadvantage to our competitors.

Successful infringement claims against us could result in significant monetary liability or prevent us from selling some of our products. We believe our products and technology may be highly disruptive to a very large and growing market. Our competitors are well capitalized with significant intellectual property protection and resources and they (and/or patent trolls) may initiate infringement lawsuits against our Company. Such litigation could be expensive and could also prevent us from selling our products, which would significantly harm our ability to grow our business as planned.

Our failure to attract and retain highly qualified personnel in the future could harm our business. As the Company grows, it will be required to hire and attract additional qualified professionals, additional staff for research and development, regulatory professionals, sales and marketing professionals, accounting, legal, and finance experts. The Company may not be able to locate or attract qualified individuals for such positions, which will affect the Company’s ability to grow and expand its business.

We rely on third party service providers. Our third-party partners provide a variety of essential business functions, including hosting, contract labor, and others. It is possible that some of these third parties will fail to perform their services or will perform them in an unacceptable manner. If we encounter problems with one or more of these parties and they fail to perform to expectations, it could have a material adverse impact on the Company.

We currently have three customers that account for substantially all of our current revenues. During the Company’s development, we have focused on developing strong relationships with a few significant partners and customers. As such, our historical financial results identify that for a number of years we generated substantially all of our revenue from two customers – which increased to three customers in 2021 with the addition of the ICE Contract, which ended in August of 2022. In September of 2022, we entered into a long-term technology contract with a new customer restoring the number of significant revenue-generating customers to three as December 31, 2022.

In the opinion of our management, we would be able to continue operations without our current customers. However, the unanticipated loss of the Company’s current customers could have an adverse effect on the company’s financial position.

We face risks related to distributing our products and services through channel partnerships, such as our partnership with FIS. When selling our products and services through indirect sales channels, such as through FIS, we are reliant on the efforts of those channel partners to successfully market and sell our products to end-customers. To the extent that FIS is unsuccessful at selling our products and services, our results of operations may suffer. Further, as of the date of this report, our only channel partnership is with FIS, which may increase the risk of harm to our Company if FIS is unsuccessful in selling our products and services. While we may seek to attract and retain additional indirect channel partners that will be able to market our products effectively and provide timely and cost-effective customer support and services, we may not succeed in doing so, and this could limit our ability to grow revenues and achieve profitability. Selling through channel partnerships is also a relatively new endeavor for us. Historically, we have generated a majority of sales through direct sales. Managing indirect sales channels may require more management attention than managing our direct sales force. If the indirect sales channels grow, management attention may be diverted, impairing our ability to execute other parts of our strategy.

We face risks related to our target customers. The majority of the customers that we are targeting are large organizations with complex and expansive operations. These kinds of companies often have long and often unpredictable enterprise sales cycles, which can result in significant time and effort to close a deal with those companies (which there is no guarantee that a deal will occur). This can make sales forecasting difficult for our Company, which can lead to operational challenges. For example, we often need to hire staff ahead of closing on a new client contract to be ready to perform if and when the contract closes. If we are unable to effectively forecast sales, we may incur unnecessary or avoidable expenses, or exhaust our cash reserves, which could have a material negative impact on our Company’s financial condition and results of operations.

24

Table of Contents

Our future success is dependent on the continued service of our small management team. Seven directors and four executive officers provide leadership to Trust Stamp. Four of the directors are also executive officers. Our success is dependent on their ability to manage all aspects of our business effectively. Because we are relying on our small management team, we lack certain business development resources that may hurt our ability to grow our business. Any loss of key members of our executive team could have a negative impact on our ability to manage and grow our business effectively. We do not maintain a key person life insurance policy on any of the members of our senior management team. As a result, we would have no way to cover the financial loss if we were to lose the services of our directors or officers.

We expect to raise additional capital through equity and/or debt offerings to support our working capital requirements and operating losses. In order to fund future growth and development, the Company will likely need to raise additional funds in the future by offering shares of its Common or Preferred Stock and/or other classes of equity, or debt that convert into shares of common or Preferred Stock, any of which offerings would dilute the ownership percentage of investors in this offering. In order to issue sufficient shares in this regard, we may be required to amend our certificate of incorporation to increase our authorized capital stock, which would be require us to obtain consent of a majority of our shareholders. Furthermore, if the Company raises capital through debt, the holders of our debt would have priority over holders of common and Preferred Stock and the Company may be required to accept terms that restrict its ability to incur more debt. We cannot assure you that the necessary funds will be available on a timely basis, on favorable terms, or at all, or that such funds if raised, would be sufficient. The level and timing of future expenditure will depend on a number of factors, many of which are outside our control. If we are not able to obtain additional capital on acceptable terms, or at all, we may be forced to curtail or abandon our growth plans, which could adversely impact the Company, its business, development, financial condition, operating results, or prospects.

We are and may continue to be significantly impacted by the worldwide economic downturn due to the COVID-19 pandemic. In December 2019, a novel strain of coronavirus, or COVID-19, was reported to have surfaced in Wuhan, China. COVID-19 has spread to many countries, including the United States, and was declared to be a pandemic by the World Health Organization. Efforts to contain the spread of COVID-19 have intensified and the U.S., Europe and Asia have implemented severe travel restrictions and social distancing. The impacts of the outbreak are unknown and rapidly evolving. A widespread health crisis has adversely affected and could continue to affect the global economy, resulting in an economic downturn that could negatively impact the operations of the Company, which could negatively impact your investment in our securities.

The continued spread of COVID-19 has also led to severe disruption and volatility in the global capital markets, which could increase our cost of capital and adversely affect our ability to access the capital markets in the future. It is possible that the continued spread of COVID-19 could cause a further economic slowdown or recession or cause other unpredictable events, each of which could adversely affect our business, results of operations or financial condition.

The extent to which COVID-19 affects our financial results will depend on future developments, which are highly uncertain and cannot be predicted, including new information which may emerge concerning the severity of the COVID-19 outbreak and the actions to contain the outbreak or treat its impact, among others. Moreover, the COVID-19 outbreak has had and may continue to have indeterminable adverse effects on general commercial activity and the world economy, and our business and results of operations could be adversely affected to the extent that COVID-19 or any other pandemic harms the global economy generally.

We are subject to risks related to foreign currency exchange rates. We operate on a global basis. We have operations (through our subsidiaries and/or directly) in many foreign countries and territories, including, but not limited to, United Kingdom, Poland, Rwanda, Denmark and the Republic of Malta. The translation from any currencies to United States Dollars for financial statement presentation resulted in a foreign currency loss of $105 thousand for the year ended December 31, 2022, and $183 thousand loss for the year ended December 31, 2021. Such foreign currency translation losses, coupled with varying inflation rates across the countries we operate in, could have a material adverse effect on our business.

25

Table of Contents

We are an emerging growth company, and the reduced reporting requirements applicable to emerging growth companies could make our Class A Common Stock less attractive to investors. We are an emerging growth company, as defined in the Jumpstart Our Business Startups (JOBS) Act. For as long as we continue to be an emerging growth company, we may take advantage of exemptions from various reporting requirements that are applicable to other public companies that are not emerging growth companies, including not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act of 2002 reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements, exemptions from the requirements of holding nonbinding advisory votes on executive compensation and stockholder approval of any golden parachute payments not previously approved, and an exemption from compliance with the requirement of the PCAOB regarding the communication of critical audit matters in the auditor’s report on the financial statements. We could be an emerging growth company for up to five years following the year in which we completed our IPO, although circumstances could cause us to lose that status earlier. We will remain an emerging growth company until the earlier of (1) the last day of the fiscal year (a) following the fifth anniversary of the date of the closing of our IPO, (b) in which we have total annual gross revenue of at least $1.07 billion or (c) in which we are deemed to be a large accelerated filer, which requires the market value of our common stock that are held by non-affiliates to exceed $700.0 million as of the prior June 30th, and (2) the date on which we have issued more than $1.0 billion in non-convertible debt during the prior three-year period.

In addition, the JOBS Act provides that an emerging growth company can take advantage of an extended transition period for complying with new or revised accounting standards. This allows an emerging growth company to delay the adoption of certain accounting standards until those standards would otherwise apply to private companies. We have elected to use this extended transition period for complying with new or revised accounting standards that have different effective dates for public and private companies until the earlier of the date we (i) are no longer an emerging growth company or (ii) affirmatively and irrevocably opt out of the extended transition period provided in the JOBS Act. As a result, our financial statements may not be comparable to companies that comply with new or revised accounting pronouncements as of public company effective dates.

We cannot predict if investors will find our Class A Common Stock less attractive because we may rely on the reporting exemptions and the extended transition period for complying with new or revised accounting standards. If some investors find our Class A Common Stock less attractive as a result, there may be a less active trading market for our Class A Common Stock and our share price may be more volatile.

We have failed to maintain effective internal controls over financial reporting as is required for a public company. We may be unable to prevent error or fraud, which may materially misstate the financials. As provided in our Annual Report on Form 10-K for the fiscal year ended December 31, 2021, we previously did not establish effective internal controls over financial accounting and reporting. The resulting material weaknesses related to certain corporate finance and accounting oversight functions over the detection of errors that were present within the Company’s calculation of stock-based awards as well as the financial reporting close process. The failure to establish effective internal controls left us without the ability to properly account for important transactions accurately, to reliably compile our financial information, and significantly impaired our ability to prevent error and detect fraud. In response to these identified material weaknesses, the Company has established additional operational processes to prevent the incorrect recording of stock-based awards. Such additional operational processes that have been established include, but are not limited to:

Calculation of Stock-Based Awards

During the fiscal year ended December 31, 2022 the Company’s management tested the effectiveness of the recently implemented internal control processes adopted in response to the identified material weaknesses specifically related to stock-based compensation

26

Table of Contents

during the fiscal year ended December 31, 2021 and believes that such measures were effective at remediating the material weaknesses specifically related to stock-based compensation described above

​

Management identified certain material weaknesses relating to corporate finance and accounting, resulting in the Company not maintaining effective internal controls over financial reporting as of the year ended December 31, 2022. Management identified certain material weaknesses relating to corporate finance and accounting, resulting in the Company not maintaining effective internal controls over financial reporting as of the year ended December 31, 2022. As a result, the Company has not maintained effective internal controls over financial reporting as required for a public company. The resulting material weaknesses relate to insufficient management review and approval of each journal entry prior to its posting for preparation of the financial statements and disclosures. Additionally, it was concluded that we had inadequate controls over the management information systems related to program changes, segregation of duties, and access controls. As a result, it would be possible that the Company’s business process controls that depend on the accuracy and completeness of data or financial reports generated by these information technology systems could be adversely affected due to the lack of operating effectiveness of information technology controls. The failure to establish effective internal controls could result in improperly accounting for transactions accurately, reliability in compiling financial information, and could significantly impair our ability to prevent error and detect fraud.

​

Item 1B. Unresolved Staff Comments

None.

​

Item 2. Properties

The Company contracts for use of office space at 3017 Bolling Way NE, Floors 1 and 2, Atlanta, Georgia, 30305, United States of America, which serves as its corporate headquarters and primary operational hub. The Company also leases office space (through a subsidiary) in Malta, which primarily serves as a research and development space. The Company contracts for coworking arrangements in other office spaces (either directly or through its subsidiaries) in New York, North Carolina, Denmark, Poland, and Rwanda to support its dispersed workforce. Minimum lease commitments related to these agreements are described in Note 14 to the consolidated financial statements provided under Item 8 of this report. We believe our existing properties are in good condition and are sufficient and suitable for the conduct of our business.

Item 3. Legal Proceedings

From time to time, the Company may be involved in a variety of legal matters that arise in the normal course of business. The Company is not currently involved in any litigation, and its management is not aware of any pending or threatened legal actions relating to its intellectual property, conduct of its business activities, or otherwise. See "Risk Factors” for a summary of risks our Company may face in relation to litigation against our Company.

Item 4. Mine Safety Disclosures

Not applicable.

​

27

Table of Contents

PART II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Common Stock

Currently, our Class A Common Stock is traded on the Nasdaq Capital Market under the symbol "IDAI”. During the years ended December 31, 2022 and December 30, 2021, our Class A Common Stock was traded on the OTC Markets Group Inc.’s OTCQX quotation platform under the trading symbol "IDAI” and on the Euronext Growth market in Dublin under "AIID”. However, Trust Stamp received approval from Nasdaq to have our Class A Common Stock listed on the Nasdaq Capital Market under the symbol "IDAI” with trading commencing on January 31, 2022. As a result of our Nasdaq approval, our Class A Common Stock is no longer listed on the OTCQX market as of January 31, 2022.

Holders

As of March 29, 2023, there were approximately 2,834 registered holders of record of our Class A Common Stock and the last reported sale price of our Class A Common Stock on the Nasdaq was $2.45 per share on March 29, 2023.

The number of shares of our Class A Common Stock that are freely tradeable as of March 29, 2023 was 2,291,567.

Performance Graph

We are a smaller reporting company, as defined by Rule 12b-2 of the Exchange Act and are not required to provide the information required under this item.

Dividend Policy

To date, we have not paid any dividends on our Class A Common Stock and do not anticipate paying any dividends in the foreseeable future. The declaration and payment of dividends on the Class A Common Stock is at the discretion of our Board of Directors and will depend on, among other things, our operating results, financial condition, capital requirements, contractual restrictions, or such other factors as our Board of Directors may deem relevant. We currently expect to use all available funds to finance the future development and expansion of our business.

Securities Authorized for Issuance Under Equity Compensation Plans

On April 9, 2019, management created a new entity, TStamp Incentive Holdings ("TSIH”) to which the Company issued 320,513 shares of Class A Common Stock (after giving effect to the Reverse Split) that the Board of Directors of TSIH could use for employee stock awards in the future. As of December 31, 2022, 56,513 (after giving effect to the Reverse Split) of these shares were outstanding and remained available for issuance. The purpose of the entity was to provide an analogous structure to a traditional stock incentive plan. Any equity compensation approved by the Company would be issued by TSIH. All of these shares of Class A Common Stock have been allocated for issuance pursuant to RSUs that vested on January 2, 2023.

The Company expects to adopt another equity compensation plan in the near future but has not yet done so as of December 31, 2022.

28

Table of Contents

Executive Compensation Philosophy

Our Board of Directors determines the compensation given to our executive officers in their sole discretion. Our Board of Directors reserves the right to pay our executives or any future executives a salary, and/or issue them shares of Class A Common Stock issued in consideration for services rendered and/or to award incentive bonuses which are linked to our performance, as well as to the individual executive officer’s performance. This package may also include long-term stock-based compensation to certain executives, which is intended to align the performance of our executives with our long-term business strategies. Additionally, the Board of Directors has granted and reserves the right to grant performance-based equity awards in the future, if the Board of Directors in its sole determination believes such grants would be in our best interests.

Incentive Bonus

The Board of Directors may grant incentive bonuses to our executive officers and/or future executive officers in its sole discretion, if the Board of Directors believes such bonuses are in our best interest, after analyzing our current business objectives and growth, if any, and the amount of revenue we are able to generate each month, which revenue is a direct result of the actions and ability of such executives.

Long-Term, Stock Based Compensation

In order to attract, retain and motivate executive talent necessary to support our long-term business strategy we may award our executives and any future executives with long-term, stock-based compensation in the future, at the sole discretion of our Board of Directors.

29

Table of Contents

Recent Sales of Unregistered Securities:

​

​

*The share numbers in the table above reflect the Company’s capital stock after giving effect to the Reverse Split, described under "Management’s Discussion and Analysis of Financial Condition and Results of Operations – Recent Developments”

​

30

Table of Contents

Item 6. Selected Consolidated Financial Data

We are a smaller reporting company, as defined by Rule 12b-2 of the Securities Exchange Act of 1934, as amended, and are not required to provide the information required under this item.

​

Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and the accompanying notes thereto included elsewhere in this Annual Report on Form 10-K. This discussion contains forward-looking statements based upon current plans, expectations, and beliefs, involving risks and uncertainties. Our actual results may differ materially from those anticipated in these forward-looking statements. You should review the section titled "Statement Regarding Forward-Looking Statements” for a discussion of forward-looking statements and the section titled "Risk Factors” for a discussion of factors that could cause actual results to differ materially from the results described in or implied by the forward-looking statements contained in the following discussion and analysis and elsewhere in this Annual Report on Form 10-K. Our historical results are not necessarily indicative of the results that may be expected for any period in the future.

Overview

T Stamp Inc. was incorporated on April 11, 2016 in the State of Delaware. T Stamp Inc. and its subsidiaries ("Trust Stamp”, "we”, or the "Company”) develops and markets identity authentication software for enterprise and government partners and peer-to-peer markets.

Trust Stamp develops proprietary artificial intelligence-powered identity and trust solutions at the intersection of biometrics, privacy, and cybersecurity, that enable organizations to protect themselves and their users, while empowering individuals to retain ownership of their identity data and prevent fraudulent activity using their identity.

Recent Developments

Development of Orchestration Layer and Channel Partnership with FIS

During the year ended December 31, 2022, we continued to expand our work with Fidelity Information Services, LLC ("FIS”) with our proprietary tokenization technology being utilized in FIS’ new global identity authentication system. In 2022, the Company implemented its "Orchestration Layer” platform – a low-code platform solution which streamlines delivery and implementation of the Company’s technologies. In the third quarter 2022, the Company acquired its first 2 customers on the Orchestration Layer platform through its partnership with FIS. In the fourth quarter, 4 additional customers onboarded, then 17 new customers since year-end, totaling to 23 total customers on the Orchestration Layer platform all related to FIS, including 23 financial institutions with over $50 billion in assets, as of February 2023. The Orchestration Layer platform is designed to be a one-stop shop for Trust Stamp services and provides for easy integration to our products; chargeable on a per-use basis and is accelerating the Company’s evolution from being exclusively a custom solutions provider to also offering a modular and highly scalable Software-as-a-Service (SaaS) model with low-code implementation. Additionally, the Orchestration Layer reduces customer acquisition costs through channel partnership and its easy-to-integrate delivery model. Channel partnerships, such as the one mentioned with FIS, enables the Company to leverage the sales and marketing resources of larger, more established organizations, who are selling this Orchestration Layer platform to their existing customer base, which can number in the tens of thousands. The cost to acquire an additional customer through channel partnerships are relatively much lower than the costs through traditional direct selling and other sales models and can accelerate the delivery of the platform. Finally, the easy-to-integrate delivery model enables customers to progress through the customer lifecycle at a much more rapid pace, from introduction, to demonstration, and finally, integration of the platform in a matter of weeks versus typically many months for fully customized solutions which often require several development cycles and additional resources to produce and integrate the final product with the client’s systems.

Armistice Capital Master Fund Ltd. Financing

On September 11, 2022, the Company entered into a Securities Purchase Agreement (the "SPA”) with Armistice Capital Fund Ltd. ("Armistice”). Pursuant to the terms of the SPA, the Company sold to Armistice in a private placement (the "Private Placement”) 195,000 shares of Class A Common Stock of the Company and warrants to purchase 390,000 shares of Class A Common Stock of the Company (the "Warrants”) for a total purchase price of $1,511,250.

31

Table of Contents

The Warrants have an exercise price of $8.85 per share, with such exercise price being subject to adjustment for reverse and forward stock splits, stock dividends, stock combinations and other similar transactions of the Class A Common Stock that occur while the Warrants are outstanding.

The Warrants also allow for a "cashless exercise” if, at any time after the six (6) month anniversary of the issue date of the Warrants there is no effective registration statement registering the resale of the Class A Common Stock issuable pursuant to the Warrants. In such a case, then Warrants may also be exercised, in whole or in part, by means of a cashless exercise in which the Selling Stockholder will be entitled to receive a number of shares of Class A Common Stock as described in the Warrants.

The Warrants may be exercised at any time by the Selling Stockholder starting on the issuance date (i.e. September 14, 2022) until the five (5) year and six (6) month anniversary thereafter.

Additionally, pursuant to the SPA, the Company agreed to provide the Selling Stockholder a right of participation in any subsequent financings of the Company from the date of the Closing until the date that is 18 months thereafter in which the Company issues shares of its common stock (or common stock equivalents). In such an event, the Selling Stockholder will have the right to participate that financing in up to an amount equal to 30% of the amount raised in that financing on the same terms, conditions and price provided to other investors in the financing.

The Closing of the SPA was subject to a number of customary closing conditions, including, but not limited to, the Company’s entry into a Registration Rights Agreement and the Company’s officers and directors entering into Lock-Up Agreements, the execution of which were conditions to the Closing of the SPA.

On September 14, 2022 (the "Closing Date”), the Closing of the SPA occurred. The Private Placement also closed on the Closing Date, whereby the Selling Stockholder purchased 195,000 shares of Class A Common Stock from the Company at a purchase price of $7.75 per share, and the Company issued the Selling Stockholder the Warrants to purchase 390,000 shares of Class A Common Stock on the Closing Date.

The Company received gross proceeds from the Private Placement of $1,511,250 before deducting offering expenses payable by the Company. The Company intends to use the net proceeds of the Private Placement for working capital and other general corporate purposes.

The Company engaged Maxim Group LLC ("Maxim”) as the Company’s placement agent for the Private Placement pursuant to a Placement Agent Agreement dated as of September 11, 2022. Pursuant to the Placement Agent Agreement, the Company agreed to pay Maxim a cash placement fee equal to 6.0% of the gross proceeds of the Private Placement, plus reimbursement of certain expenses and legal fees.

Registration Rights Agreement

Pursuant to the SPA, the Company agreed to enter into a registration rights agreement (the "Registration Rights Agreement”) with the Selling Stockholder, pursuant to which the Company must file a registration statement on Form S-3 (or, if the Company is ineligible to use a Form S-3, another appropriate form) with the SEC to register for resale the 195,000 shares of Class A Common Stock to be purchased pursuant to the SPA, as well as the 390,000 shares of Class A Common Stock issuable upon exercise of the Warrants within 15 days of the Closing of the SPA, with such registration statement becoming effective within 45 days after the Closing, subject to adjustment in the event of a review by the SEC. The Company is subject to customary penalties and liquidated damages in the event it does not meet certain filing requirements and deadlines set forth in the Registration Rights Agreement.

The Company entered into the Registration Rights Agreement on September 11, 2022. The Company filed such a registration statement on Form S-1, which was declared effective by the SEC on January 26, 2023. No sales have been made to date under the registration statement by Armistice Capital Master Fund Ltd. We note that, as of March 29, 2023, our Class A Common Stock is trading at $2.45 per share. As such, unless the trading price of our Class A Common Stock significantly increases, it is unlikely the Warrants will be exercised.

32

Table of Contents

Lock-Up Agreements

Pursuant to the SPA, the Company agreed to enter into lock-up agreements (collectively the "Lock-Up Agreements”) with our executive officers and directors at the Closing. Under the Lock-Up Agreements, our executive officers and directors may not offer, sell, contract to sell, lend, hypothecate, pledge or otherwise dispose of all shares of the Company’s Common Stock beneficially owned by them for a period of sixty (60) after the effective date of the registration statement contemplated in the Registration Rights Agreement.

On the Closing Date, each of the Company’s executive officers and directors entered into Lock-Up Agreements.

The descriptions of each of the SPA, Warrants, Registration Rights Agreement, Placement Agent Agreement, and Form of Lock-Up Agreement are qualified by reference to the copies of these agreements included as Exhibits to this report.

Reverse Split

Pursuant to the Reverse Split, as of March 23, 2023, every five (5) outstanding shares of Class A Common Stock was combined and became one (1) share of Class A Common Stock, rounding up to the nearest whole number of shares.

Prior to the Reverse Split, the Company had 25,584,242 shares of Class A Common Stock issued and 24,271,512 shares of Class A Common Stock outstanding. Immediately following the Reverse Split the Company has approximately 5,116,878 shares of Class A Common Stock issued and 4,854,332 shares of Class A Common Stock outstanding (giving effect to rounding for fractional shares).

The par value of the Class A Common Stock was not changed nor were the number of authorized shares reduced in connection with the Reverse Split. The Board determined that the availability of additional shares was necessary to consummate future financing transactions. The availability of additional shares will also permit the Board to issue shares, or instruments convertible into or exercisable for such shares, for general corporate purposes.

The Reverse Split was in the same ratio for all shares of Class A Common Stock. All holders of Class A Common Stock were affected uniformly by the Reverse Split, resulting in no effect on the proportionate holdings of any of our stockholders, except for possible changes due to the treatment of fractional shares resulting from the Reverse Split. In lieu of issuing fractional shares, the Company rounded up in the event a stockholder was entitled to receive less than one share of Class A Common Stock as a result of the Reverse Split. In addition, the split did not affect any holder of Class A Common Stock’s proportionate voting power (subject to the treatment of fractional shares), and all shares of Class A Common Stock remained fully paid and non-assessable.

The Reverse Split was made effective upon the filing of the Certificate of Amendment with the Secretary of State of the State of Delaware with an effective date of March 23, 2023.

The following chart reflects the changes in our capital structure following the Reverse Split, the top row reflecting the pre-split capital structure and the bottom row reflecting the post-split capital structure:

​

* The Company rounded up in the event a stockholder was entitled to receive less than one share of Class A Common Stock as a result of the Reverse Split.

Key Business Measures

In addition to the measures presented in our consolidated financial statements, we use the following key non-GAAP business measure to help us evaluate our business, identify trends affecting our business, formulate business plans and financial projections, and make strategic decisions.

33

Table of Contents

Adjusted EBITDA

This discussion includes information about Adjusted EBITDA that is not prepared in accordance with U.S. GAAP. Adjusted EBITDA is not based on any standardized methodology prescribed by U.S. GAAP and is not necessarily comparable to similar measures presented by other companies. A reconciliation of this non-GAAP measure is included below.

Adjusted EBITDA is a non-GAAP financial measure that represents U.S. GAAP net income (loss) adjusted to exclude (1) interest expense, (2) interest income, (3) provision for income taxes, (4) depreciation and amortization, (5) impairment in assets and liabilities, and (6) certain other items management believes affect the comparability of operating results.

Management believes that Adjusted EBITDA, when viewed with our results under U.S. GAAP and the accompanying reconciliations, provides useful information about our period-over-period results. Adjusted EBITDA is presented because management believes it provides additional information with respect to the performance of our fundamental business activities and is also frequently used by securities analysts, investors and other interested parties in the evaluation of comparable companies. We also rely on Adjusted EBITDA as a primary measure to review and assess the operating performance of our Company and our management, and it will be a focus as we invest in and grow the business.

Adjusted EBITDA has limitations as an analytical tool and should not be considered in isolation from, or as a substitute for, analysis of our results as reported under GAAP. Some of these limitations are:

Due to these limitations, adjusted EBITDA should not be considered as a measure of discretionary cash available to us to invest in the growth of our business. We compensate for these limitations by relying primarily on our U.S. GAAP results and using Adjusted EBITDA only as a supplement to our U.S. GAAP results.

Reconciliation of Net Loss to Adjusted EBITDA

​

​

Adjusted EBITDA (non-GAAP) loss for the year ended December 31, 2022, increased by 62.2%, to $8.69 million from $5.36 million for the year ended December 31, 2021. The overall increase in adjusted EBITDA loss is due to the $3.01 million increase in Net loss before taxes during the year ended December 31, 2022, as well as a decrease in Stock-based compensation of $382 thousand during the year ended December 31, 2022. See "Results of Operations” below for further discussion on the drivers behind the increase in Net loss and selling, general and administrative expenses during the year ended December 31, 2022.

34

Table of Contents

Components of Results of Operations

Net revenue

We derive our revenue primarily from professional services. Most of the revenue is derived from the pilot contract and renewal with ICE which amounts to $3.29 million for the year ended December 31, 2022. Additionally, during the year, the Company launched its SaaS platform called Orchestration Layer platform, which is being utilized in FIS’ new global identity authentication system, which includes the Company’s proprietary tokenization technology, and facilitates no-code and low-code implementations, making adoption faster and even more cost-effective for a broader range of potential customers. The Company expects this platform to accelerate its evolution, from being exclusively a custom solutions provider, to also offering a modular and highly scalable Software-as-a-Service (SaaS) model with low-code implementation.

Cost of services provided

Cost of services provided generally consists of the cost of hosting fees and cost of labor associated with professional services rendered. Depreciation and amortization expense is not included in cost of services provided.

Further, several projects that were originally in the research and development stage became feasible projects, shifting the allocation of cost from research and development, into cost of services provided in the current year as client specific products were implemented using the technologies. This increase of expense allocation is a result of our prior decision to invest more money in research and development in prior periods and our goal of accelerating our product roadmap coming to fruition.

We expect that cost of services provided will increase in absolute dollars as our revenue grows and will vary from period-to-period as a percentage of revenue.

Research and development

Research and development expenses ("R&D”) consist primarily of personnel costs, including salaries and benefits. Personnel costs are allocated to R&D for time spent working on the preliminary project stage and post-implementation maintenance as well as time spent on bug fixes associated with internal-use software activities, front-end application development in which technological feasibility has not been established, and services rendered to customers under funded software-development arrangements.

We plan to continue to invest in personnel to support our research and development efforts. As a result, we expect that research and development expenses will increase in absolute dollars for the foreseeable future as we continue to invest to support these activities.

Selling, general, and administrative

Selling, general, and administrative ("SG&A”) expenses were generally composed of payroll, legal, and professional fees, including an increase in sales commission expense incurred because of new statements of work.

We expect that the sales and marketing expenses within the SG&A expenses will increase in absolute dollars as we continue to invest in our potential and current customers, in growing our business and enhancing our brand awareness.

Depreciation and amortization

The increase in depreciation and amortization is primarily due to a continued investment in internally developed software which will be used for future productization.

Interest income (expense)

Interest income (expense) consists primarily of interest expense accrued on a promissory note payable. Additionally, the Company earned interest income in the form of cash back by using its corporate line of credit.

35

Table of Contents

Impairment of digital assets

Digital assets consists primarily of Metapresence Land and Cryptocurrency. Digital assets are considered indefinite-lived intangible assets under applicable accounting rules. Accordingly, any decrease in their fair values below our carrying values for such assets at any time after their acquisition requires recognition of impairment.

Grant income

The Company had grant income primarily related to Trust Stamp Malta’s agreements with Republic of Malta. During July 2020, the Company entered into an agreement with the Republic of Malta that would provide for a grant of up to €200 thousand or $215 thousand as reimbursement for operating expenses over the first 12 months following incorporation in the Republic of Malta. The Company was required to provide an initial capital amount of €50 thousand or $54 thousand, which is matched with a €50 thousand grant or $54 thousand.

Other income

Other income is mainly driven by miscellaneous income earned that is unrelated to the main focus of the Company’s business.

Other expense

Other expense is mainly driven by the fact that the Company operates in multiple countries, including the U.K., Malta, and Rwanda, and as such, has certain exchange rate gains and losses associated with converting the foreign currency activity to the Company’s reporting currency, USD.

Results of Operations

The following tables set forth selected consolidated statements of operations data and such data as a percentage of total revenue for the years ended December 31, 2022 and 2021:

​

36

Table of Contents

​

37

Table of Contents

Comparison of the Years Ended December 31, 2022 and 2021

The following table sets forth the components of our consolidated statements of operations data as a percentage of revenue:

​

Net revenue

​

Net revenue increased by $1.71 million, or 46.4%, for the year ended December 31, 2022 compared to the year ended December 31, 2021. Net revenue included $3.29 million from ICE, $766 thousand from Mastercard, $989 from a S&P 500 Bank, and $345 thousand from other customers. The increase in net revenue was driven by revenue contracts executed by new and existing customers. Total net sales from new contracts produced $1.29 million, consisting of $1.04 million from ICE, $162 thousand from FIS, and the remaining $80 thousand from various other new statements of work.

During the year ended December 31, 2022, the Company implemented its Orchestration Layer platforms. In the third quarter 2022, the Company acquired its first 2 customers on the platform through its partnership with FIS. In the fourth quarter, 4 additional customers onboarded, then 17 new customers since year-end, totaling to 23 total customers on the platform all related to FIS, including 23 financial institutions with over $50B in assets, as of February 2023. This platform is designed to be a one-stop shop for Trust Stamp services and provides for easy integration to our products; chargeable on a per-use basis and is accelerating the Company’s evolution from being exclusively a custom solutions provider to also offering a modular and highly scalable Software-as-a-Service (SaaS) model with low-code implementation.

The majority of revenue during the years ended December 31, 2022 and 2021 came from the now-terminated ICE Contract for an alternative to detention program. The amount of revenue recognized during the years ended December 31, 2022 and 2021 was $3.29 million and $1.68 million, respectively.

38

Table of Contents

Cost of services provided

​

​

Cost of services provided ("COS”) increased by $634 thousand, or 55.1%, for the year ended December 31, 2022 compared to the year ended December 31, 2021. The increase during the period was primarily driven by the $716 thousand increase in COS related to the ICE Contract, which included $509 thousand for mobile carrier costs and other direct costs required to service the contract. Additionally, the increase in COS was offset by the $139 thousand decrease in stock-based compensation compared to the prior year.

As the Company continues its evolution from being exclusively a custom solutions provider to also offering a modular and highly scalable Software-as-a-Service (SaaS) model with low-code implementation, management expects margins to improve as there are relatively lower variable cost required to implement existing technology and subsequent transaction revenue.

Research and development

​

​

Research and development (R&D) expense decreased by $55 thousand, or 2.2%, for the year ended December 31, 2022 compared to the year ended December 31, 2021. This decrease consisted primarily of the $201 thousand decrease in non-cash stock-based compensation from $493 thousand to $292 thousand for the years ended 2021 and 2022, respectively, as a result of the decrease in the Company’s stock price. Additionally, during the year ended December 31, 2022 there was an increase to R&D of $111 thousand, spent to implement a 24/7 customer service function.

Selling, general, and administrative

​

​

Selling, general and administrative ("SG&A”) expense increased by $4.13 million, or 49.7%, for the year ended December 31, 2022 compared to the year ended December 31, 2021. SG&A included $4.67 million in salaries and compensation, $2.09 million in non-cash stock-based compensation, $937 thousand in a combination of management consulting fees by the Disney Institute and various annual dues and subscriptions. Additionally, $1.81 million was spent in legal and professional services fees and other fees related to the listing of the Company’s Class A Common stock on the Nasdaq Capital Market.

Salaries & compensation costs increased by $938 thousand or 16.1% during the period. This increase included the $497 thousand paid as commissions as a result of cash received on the revenue contracts during the year ended 2022, compared to $96 thousand paid as commissions during the year ended 2021.The majority of sales commissions during both periods related to the ICE Contract, totaling $45 thousand and $397 thousand in the years ended 2021 and 2022, respectively. Additionally, the increase in salaries and compensation consisted in part of the hires specifically for the labor-intensive ICE Contract, many of which were subsequently laid off following the contract termination.

Other notable increases in SG&A included an increase of $257 thousand on corporate and commercial travelling and $257 thousand on taxes. The remainder of the increase in SG&A expenses from the twelve months ended December 31, 2021 to the twelve months ended December 31, 2022 was driven other SG&A operating expenses such as management consulting fees and various dues and subscriptions which amounted to an increase of $611 thousand.

Depreciation and amortization

​

39

Table of Contents

Depreciation and amortization ("D&A”) expense increased by $187 thousand, or 32.6%, for the year ended December 31, 2022 compared to the year ended December 31, 2021. The primary increase in D&A expense during the year was the $90 thousand for the depreciation of mobile hardware assets related to the ICE Contract. There were no mobile hardware assets or related depreciation expense during the twelve months ended December 31, 2021.

Also driving the increase in D&A expense is the total balance of capitalized internal-use software. As of December 31, 2022, the relatively smaller allocations of capitalized internal-use software, specifically from the year ended December 31, 2017, which had $277 thousand, have reached the completion of their 5 year useful lives. During the comparative periods, the capitalized from years ended 2016 and 2017, were progressively being replaced by larger allocations of capitalized internal-use software from the years ended December 31, 2018, 2019, 2020, 2021, and 2022, which had $636 thousand, $555 thousand, $360 thousand, $482 thousand, and $776 thousand, respectively, resulting in increased depreciation.

We continue to see a trend of increasing software capitalization as a result of new software development. During the year ended December 31, 2022 this increase was driving primarily by the software developed and capitalized in relation to the ICE Contract, which has resulted in additional capitalized internal-use software amortization, or microservices, that once reaching technical feasibility, the Company begins to capitalize and subsequently amortize the related costs over a period of 5 years. The Company anticipates significant ongoing growth opportunities for its software products in the Alternative to Detention Program and in the provision of other in-community case management services for federal and state agencies.

In addition, patent amortization increased during the twelve months ended December 31, 2022 as a result of new pending patent applications and issued patents with the United States Patent and Trademark Office. During the twelve months ended December 31, 2022, the Company added thirteen (13) new pending patents and nine (9) issued patents.

Operating loss

​

​

Operating loss increased by $3.19 million, or 35.9%, for the year ended December 31, 2022 compared to the year ended December 31, 2021. The increase was driven primarily by SG&A which made up 71.0% of the total operating expenses. As mentioned above, much of the increase in operating loss was due to increased R&D activity, as well as an increase in SG&A driving in part by the initial and ongoing costs related to the listing of the Company’s Class A Common stock on the Nasdaq Capital Market.

Interest income (expense)

​

​

Interest income (expense) decreased by $31 thousand, or 77.8%, for the year ended December 31, 2022 compared to the year ended December 31, 2021. During the year ended December 31, 2022, there was $8 thousand and $17 thousand of interest income and interest expense, respectively. During the year ended December 31, 2021, there was $10 thousand and $50 thousand of interest income and interest expense, respectively. All interest earned and expensed during the comparative periods were a result of normal operating activities. The majority of the interest income (expense) in 2021 was generated by the interest on the SVB venture loan. This loan was in existence in 2021 and matured in April 2021, with a total interest of $35 thousand. The decrease in interest income (expense) in 2022 compared to 2021 was due to the end of the SVB venture loan in 2021.

Change in fair value of warrant liability