XML 21 R8.htm IDEA: XBRL DOCUMENT
v3.25.4

Cybersecurity Risk Management, Strategy, and Governance | 12 Months Ended
--- | ---
Dec. 31, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items] |
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block] | Item 1C. Cybers ecurity. Cybersecurity risk is addressed as part of our Enterprise Risk Management (“ERM”) program. Through this process, we identify key enterprise risks, including cybersecurity, and assign responsibility for managing those risks to appropriate levels of management. Cybersecurity is integrated into our overall risk assessment, governance, and oversight structure. Management has implemented a comprehensive cybersecurity risk management program designed to identify, assess, manage, and mitigate cybersecurity risks to our information systems, data, and operations. This program is informed by recognized industry standards and regulatory requirements and includes, among other things: • conducting independent cybersecurity maturity and risk assessments to evaluate the effectiveness of our cybersecurity program and to inform a multi-year roadmap for continuous improvement; • performing regular cybersecurity risk assessments to identify potential threats and vulnerabilities and to evaluate their potential impact and likelihood; • implementing layered technical and administrative security controls, including email and web security, audit logging and monitoring, malware protection, encryption, network segmentation, controlled use of administrative privileges, and multi-factor authentication; and • maintaining an enterprise-wide cybersecurity awareness and training program, including simulated phishing exercises, designed to reduce the risk of human error and improve the timely recognition and reporting of potential security incidents. We continuously monitor our information systems and networks and leverage internal and external threat intelligence sources to identify and evaluate evolving cybersecurity threats. We also conduct periodic testing and simulation activities, including vulnerability assessments and penetration testing performed by third-party service providers, to identify and remediate weaknesses in our security controls. Our cybersecurity risk assessments and testing activities are informed by the National Institute of Standards and Technology (“NIST”) cybersecurity framework. Cybersecurity risks associated with third-party relationships are evaluated as part of our risk management processes, particularly for vendors deemed critical to our operations or those with access to sensitive or confidential information, including PHI. These assessments also consider risks associated with cloud-based services and emerging technologies, including generative artificial intelligence and other machine learning technologies. The Audit and Risk Committee of our Board of Directors provides oversight of our ERM program, including cybersecurity risk. Our Chief Information Security Officer (“CISO”), in coordination with the Chief Information Officer (“CIO”) and other members of management, is responsible for the day-to-day management of our cybersecurity program and for assessing and managing material cybersecurity risks. The CISO has significant experience leading enterprise cybersecurity programs within regulated environments. We have established a cross-functional cybersecurity governance structure, including regular management-level forums, to support coordination across information technology, legal, compliance, risk management, and business operations. As part of our overall risk management approach, we maintain an incident response program designed to detect, respond to, and recover from cybersecurity incidents. This program includes defined roles and responsibilities, escalation and communication protocols, and procedures to mitigate the potential impact of a cybersecurity incident. We also maintain cybersecurity insurance coverage, including access to incident response services, and review the scope and adequacy of this coverage on an annual basis. While we have experienced cybersecurity incidents and other adverse information technology events in the past, none have had a material impact on our business, financial condition, or results of operations. We continue to evolve our cybersecurity program to address emerging threats and risks, recognizing that cybersecurity risks cannot be entirely eliminated. Material cybersecurity risks and significant developments are reported by management to the Audit and Risk Committee as part of our ongoing risk oversight processes.
Cybersecurity Risk Management Processes Integrated [Flag] | true
Cybersecurity Risk Management Processes Integrated [Text Block] | Cybersecurity risk is addressed as part of our Enterprise Risk Management (“ERM”) program. Through this process, we identify key enterprise risks, including cybersecurity, and assign responsibility for managing those risks to appropriate levels of management. Cybersecurity is integrated into our overall risk assessment, governance, and oversight structure.
Cybersecurity Risk Management Third Party Engaged [Flag] | true
Cybersecurity Risk Third Party Oversight and Identification Processes [Flag] | true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] | false
Cybersecurity Risk Board of Directors Oversight [Text Block] | The Audit and Risk Committee of our Board of Directors provides oversight of our ERM program, including cybersecurity risk. Our Chief Information Security Officer (“CISO”), in coordination with the Chief Information Officer (“CIO”) and other members of management, is responsible for the day-to-day management of our cybersecurity program and for assessing and managing material cybersecurity risks. The CISO has significant experience leading enterprise cybersecurity programs within regulated environments. We have established a cross-functional cybersecurity governance structure, including regular management-level forums, to support coordination across information technology, legal, compliance, risk management, and business operations. As part of our overall risk management approach, we maintain an incident response program designed to detect, respond to, and recover from cybersecurity incidents. This program includes defined roles and responsibilities, escalation and communication protocols, and procedures to mitigate the potential impact of a cybersecurity incident. We also maintain cybersecurity insurance coverage, including access to incident response services, and review the scope and adequacy of this coverage on an annual basis. While we have experienced cybersecurity incidents and other adverse information technology events in the past, none have had a material impact on our business, financial condition, or results of operations. We continue to evolve our cybersecurity program to address emerging threats and risks, recognizing that cybersecurity risks cannot be entirely eliminated. Material cybersecurity risks and significant developments are reported by management to the Audit and Risk Committee as part of our ongoing risk oversight processes.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] | The Audit and Risk Committee of our Board of Directors provides oversight of our ERM program, including cybersecurity risk.
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] | We have established a cross-functional cybersecurity governance structure, including regular management-level forums, to support coordination across information technology, legal, compliance, risk management, and business operations.
Cybersecurity Risk Role of Management [Text Block] | Our Chief Information Security Officer (“CISO”), in coordination with the Chief Information Officer (“CIO”) and other members of management, is responsible for the day-to-day management of our cybersecurity program and for assessing and managing material cybersecurity risks. The CISO has significant experience leading enterprise cybersecurity programs within regulated environments.
Cybersecurity Risk Management Positions or Committees Responsible [Flag] | true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] | The CISO has significant experience leading enterprise cybersecurity programs within regulated environments.
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] | We also maintain cybersecurity insurance coverage, including access to incident response services, and review the scope and adequacy of this coverage on an annual basis.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] | We have established a cross-functional cybersecurity governance structure, including regular management-level forums, to support coordination across information technology, legal, compliance, risk management, and business operations. As part of our overall risk management approach, we maintain an incident response program designed to detect, respond to, and recover from cybersecurity incidents.

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardOfDirectorsOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementExpertiseOfManagementResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskManagementProcessesForAssessingIdentifyingAndManagingThreatsTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementProcessesIntegratedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementProcessesIntegratedTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K + Details
Name: | cyd_CybersecurityRiskManagementStrategyAndGovernanceLineItems
Namespace Prefix: | cyd_
Data Type: | i:stringItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskManagementThirdPartyEngagedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskMateriallyAffectedOrReasonablyLikelyToMateriallyAffectRegistrantFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskProcessForInformingBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskProcessForInformingManagementOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskRoleOfManagementTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph iii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph iii + Details
Name: | cyd_CybersecurityRiskThirdPartyOversightAndIdentificationProcessesFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration