📜 What This Document Is

This document is an Annual Report Supplement (Form ARS) that focuses heavily on Bioventus Inc.'s intellectual property (IP), trademarks, and the vast array of regulations that govern its operations. 🛡️ Because it is an ARS, it is a disclosure document designed to alert investors and the public to legal risks, IP protections, and operational complexities, rather than providing recent quarterly financial results.

👉 What readers should expect is not a revenue summary, but a detailed warning about the legal and regulatory hurdles Bioventus faces, alongside a comprehensive list of the brands and patents that protect its physical products.

🏥 What Bioventus Does

In simple terms, Bioventus is a specialized medical device company that develops and commercializes products intended for bone and connective tissue repair. 🦴 They don't typically make the materials themselves, but rather provide sophisticated solutions that doctors use in surgery.

• Core Focus: Bioventus focuses on proprietary technologies, including demineralized block and strip formats, which are used because they provide "interconnected porosity with compressible, sponge-like handling characteristics" and have "osteoinductive potential."
• Sourcing: Their donor bone materials are sourced exclusively from AATB-certified and FDA-registered tissue banks within the United States. All tissues undergo screening for a standard panel of infectious viruses.
• Key Markets: They currently market PUREBONE in the United States.
• Competition: The company operates in highly competitive spaces. Their products compete with major industry giants like Johnson & Johnson, Medtronic, Stryker Corporation, and Zimmer Biomet Holdings, Inc. This intense competition makes regulatory compliance and IP protection critical to their survival.

🔬 Intellectual Property & Patents

Protecting intellectual property is fundamental to Bioventus’s business model. 🧬 The company relies on a combination of patents, trade secrets, and trademark protection to keep its market position solid.

• IP Protection Strategy: Bioventus utilizes a layered approach, combining patents, trade secrets, and non-disclosure agreements. They own numerous patents/applications that cover their material products.
• Total IP Holdings (as of December 31, 2025):
  • U.S. Patents: They owned 99 issued U.S. patents and had six pending U.S. applications.
  • Foreign Patents: They owned 141 issued foreign patents and had 35 pending foreign applications.
• Product-Specific Patent Expiries (What this means):
  • EXOGEN system: Requires careful monitoring as patents are expected to expire between 2028 and 2029 in the U.S., and the foreign patent expires in 2026.
  • OSTEOAMP product: The issued U.S. patents are expected to expire in 2029, providing a relatively stable runway.
  • StimRouter system: The U.S. patents are expected to expire between 2026 and 2031, suggesting that the company will need to develop next-generation technology to replace the value provided by this system.
  • BoneScalpel system: Patents directed here have the longest expected life, with U.S. patents expiring between 2026 and 2044, and foreign patents expiring between 2027 and 2039.

🏭 Manufacturing and Operational Risks

Bioventus manufactures and assembles its medical device products primarily at its facility in Cordova, Tennessee. 🏭 While they are an FDA-registered manufacturer, their supply chain structure introduces significant operational risks.

• Reliance on Single-Source Suppliers: The company is dependent on a limited number of suppliers. Their top three single-source third-party manufacturers supplied 49%, 46%, and 43% of total net sales for the years ended December 31, 2025, 2024, and 2023, respectively.
• The Challenge of Allograft Tissue: The success of certain products depends on suppliers having continued access to donated human cadaveric tissue. This supply can fluctuate over time, and Bioventus has limited control over the pricing, availability, and quality of this allograft bone tissue.
• Forecasting Difficulty: They are required by contract to forecast future product demand or meet minimum purchase requirements. Inaccurate forecasting—underestimating demand or overestimating it—could severely hurt margins or prevent them from meeting customer needs.

🌎 International & Global Compliance

The company operates globally, making it subject to a complex patchwork of international laws. 🌐 This requires constant vigilance, as failure to comply in any jurisdiction could result in massive fines or business shutdowns.

• Foreign Corrupt Practices Act (FCPA): The FCPA prohibits U.S. companies from giving anything of value to foreign officials to gain or keep business. This risk is amplified because in some countries, the healthcare professionals Bioventus interacts with may legally be classified as "foreign government officials."
• International Regulatory Complexity: Beyond the U.S., the company must navigate rules in the United Kingdom and Brazil, including the UK Bribery Act and Brazil Clean Company Act, demonstrating that global compliance is one of their greatest operational hurdles.

🗽 US Healthcare & Regulatory Laws (The Depth)

The U.S. medical device and healthcare reimbursement landscape is highly regulated, necessitating several specialized sections to fully cover the legal landscape.

🦴 Medical Device Regulation (FDA)

Most Bioventus products are classified as medical devices, subjecting them to rigorous FDA oversight. 🧪 The FDA regulates everything from the design and manufacturing process to the labeling and sale of the products.

• Classification System: Devices are classified into three risk levels (Class I, Class II, or Class III), depending on the risk they pose. Higher risk requires more approval.
• Market Pathway:
  • 510(k) Clearance: For most Class II devices, manufacturers must prove that their device is "substantially equivalent" to a legally marketed device (the predicate device).
  • PMA Approval: Class III devices, those posing the highest risks (like life-sustaining implants), require the most rigorous PMA approval.
• Human Cell/Tissue Products (HCT/Ps): Certain products are regulated differently. They can be classified as "Section 361 HCT/Ps" if they are "minimally manipulated" and intended for "homologous use." These products do not require the typical 510(k) or PMA premarket authorization.

🛑 Anti-Fraud & Kickback Laws

Bioventus operates under stringent federal laws designed to prevent healthcare fraud and waste. ⚖️ These rules dictate how they interact with doctors and payers.

• Anti-Kickback Statute (AKS): This law prohibits giving money or anything of value to influence a doctor’s referral or recommendation of a service paid by federal programs (like Medicare/Medicaid).
• Stark Law (Physician Self-Referral): This law is a strict liability rule, meaning it is violated even if there was no intent to commit fraud. It prohibits physicians with a financial relationship from referring Medicare/Medicaid patients to specific entities unless an exception applies.
• False Claims Act (FCA): This prohibits knowingly submitting false or fraudulent requests for payment to the U.S. government. Violations can result in treble damages (three times the damages caused).

🛡️ Corporate and Data Security Risks

The company handles highly sensitive Protected Health Information (PHI) and electronic data, making cybersecurity a continuous, massive risk. 💻

• Information Flow: Bioventus receives, processes, and stores a large amount of PHI from patients, through both their own systems and those of third-party vendors.
• Cyber Threats: They are vulnerable to sophisticated attacks, including ransomware, hacking, and phishing. The risk is that a breach could lead to data loss, operational disruption, and significant legal liability.
• Operational Impact: The reliance on IT systems for managing components, coordinating sales, and processing claims means that any failure—whether from a natural disaster, power outage, or cyberattack—could stop core business functions.
• Example of Disruption: The company noted that a cybersecurity incident targeting a key claim processing intermediary (Change Healthcare) caused delays in processing claims for the EXOGEN device, temporarily delaying cash remittances.

⚖️ Legal, Privacy, and Reimbursement Risks

Bioventus must comply with an ever-changing web of laws regarding data, payments, and product coverage. 📃

• HIPAA and Global Privacy: They must comply with U.S. laws like HIPAA, but also stricter state and foreign regulations like GDPR (Europe) and CCPA/CPRA (California). These laws govern the collection and use of personal health data.
• Reimbursement Dependency: The demand for Bioventus’s products is tied directly to how payers (like Medicare and Medicaid) cover them. Any policy change, budgetary pressure, or reduction in coverage could significantly impact the company's revenue.
• Payment Monitoring: Due to government payment programs, Bioventus must comply with complex reporting standards, such as providing Average Selling Price (ASP) data for Medicare Part B products like SUPARTZ FX and GELSYN-3, to the Centers for Medicare and Medicaid Services (CMS).

🏢 Company and Organizational Structure

Bioventus Inc. is a Delaware corporation, formed on December 22, 2015, and functions as a holding company whose main asset is its equity interest in BV LLC. 🏢

• Leadership: Katrina Church serves as the Chief Compliance Officer since August 2020. Her extensive background in compliance, including previous roles at Merz Pharma and Connetics Corporation, underscores the high legal risk environment in which the company operates.
• Size and Scale: As of December 31, 2025, the company had approximately 930 employees, with the majority located in the United States.
• Commitment to Culture: The company emphasizes its culture by having established a Diversity, Equity and Inclusion (“DE&I”) Council and several Employee Resource Groups (“ERGs”).

📞 Available Contacts and Resources

The company provided its main channels for investors and partners to stay informed. ☎️

• Website: www.bioventus.com
• SEC Filings: www.sec.gov
• General Reports: The company's Annual Report on Form 10-K, 10-Q, and 8-K reports are available free of charge on their website and the SEC website.

🧠 The Analogy

Operating Bioventus is like running a high-tech bakery that sells irreplaceable, custom-made medicinal bread. 🥖 The bread itself (the medical device) must meet stringent quality standards (FDA regulations). Every ingredient (the donor tissue) is fragile and must be sourced from highly limited, certified suppliers. Furthermore, the store must operate in dozens of countries (global regulations), ensuring that the price of the bread is paid for correctly under constantly changing government reimbursement rules (Medicare/Medicaid), all while protecting the recipes and branding (patents/trademarks) from thieves, and guarding the store's cash registers (cybersecurity). A single regulatory lapse, a supply disruption, or a legal misstep could shut down the entire bakery.

🧩 Final Takeaway

Bioventus is primarily a highly regulated, IP-intensive medical solutions provider. While its patent portfolio is strong, its continued success is entirely dependent on managing extreme risks—specifically, complex global compliance (FDA, EU, anti-fraud laws), volatile supply chains for donor tissue, and constantly evolving cyber threats and payment reimbursement rules.