Anonymize risk-factors section drafts for pre-filing review – CCPA/HIPAA-compliant de-identification per 17 CFR §229.105
A risk factor is the Reg S-K §229.105 (redesignated from Item 503(c) to Item 105 by the SEC's 2019 FAST Act Modernization, effective May 2, 2019) disclosure of material risks that make an investment speculative, and issuers whose risk-factor section exceeds 15 pages must add a two-page summary — a content requirement the SEC's 2020 amendments (effective November 9, 2020) introduced, estimating it would affect roughly 40% of registrants. These risk factors often reference named customers, suppliers, joint-venture partners, and key personnel whose departure or default is a risk driver. anonym.legal pseudonymizes those named references so draft risk-factor sections can circulate broadly for review without distributing sensitive counterparty or individual names.
When this applies
Apply this workflow when draft risk-factor sections for 10-K, 10-Q, S-1, or other SEC filings need to be reviewed by investor-relations teams, underwriters, or outside counsel where the specific named counterparties or individuals referenced are not required by the reviewer.
How anonym.legal handles it
- Upload the draft risk-factors section in PDF or DOCX format to anonym.legal.
- The engine scans the text for named counterparties, customers, suppliers, joint-venture partners, government agencies, and named key personnel referenced as risk drivers.
- Each named entity or individual is pseudonymized consistently throughout the risk-factors section.
- Risk-factor headings, generic business descriptions, and statistical data are retained as non-personal structural content.
- Where the same counterparty appears in multiple risk factors, consistent pseudonymization preserves the analytical connection between related risk disclosures.
- The reversible mapping is stored encrypted for re-identification when the final filing document is prepared.
- The pseudonymized risk-factors section is exported for team review.
What you provide
- Draft risk-factors section in PDF or DOCX format
- Scope instruction identifying categories of named parties to pseudonymize (e.g., customers, key personnel, government agencies)
- Any prior-period risk-factors text for consistency of pseudonym assignments across filing periods
Limitations & cautions
- anonym.legal does not assess whether disclosed risk factors satisfy the specificity or materiality requirements of Reg S-K §229.105; that determination requires securities counsel. The related cybersecurity risk-management disclosure at Item 106, adopted alongside Form 8-K Item 1.05 in 2023, has applied to 10-K and 20-F filings since fiscal years ending on or after December 15, 2023.
- Risk factors describing unique business arrangements may retain indirect identifiability of a counterparty even after direct-name pseudonymization.
- Generic industry risk factors that do not name specific parties are not modified, as they contain no personal or counterparty data.
- The tool does not assess whether the risk-factors section adequately discloses ESG, cybersecurity, or climate-related risks under evolving SEC guidance.
FAQ
Can key-person risk factors referencing named executives be pseudonymized?
Yes. Risk factors disclosing dependence on specific named executives or founders are pseudonymized at the individual level, allowing investor-relations teams to review the business-risk framing without distributing those individuals' names to all reviewers. This category sits alongside the board-oversight disclosures Item 106 has required since December 2023.
Will percentage figures and statistical data in risk factors be preserved?
Yes. Revenue concentration percentages, market-share data, and industry statistics are non-personal structural content and are preserved in plain text after pseudonymization of named counterparties.
Is this workflow available for S-1 registration statement risk-factors sections?
Yes. The same workflow applies to risk-factors sections in registration statements including S-1, S-3, S-11, and other SEC registration forms filed under the Securities Act of 1933. Use the registration-statement-anonymization task for a workflow covering the full registration statement.