Onespan Inc. — Filing summary
Issuer identification: The supplied filing identifies the registrant as VASCO Data Security International, Inc. (NASDAQ: VDSI), not Onespan Inc. The filing covers the fiscal year ended December 31, 2017, and was signed March 8, 2018. It is an annual report, not a standalone fourth-quarter filing; quarterly data are included.
Business context and reporting period
VASCO developed and sold identity, authentication, anti-fraud, application security, and electronic-signature products and services. Its customers included financial institutions, businesses, and government organizations. The company reported one operating segment and derived about 48% of 2017 revenue from EMEA. Services and other revenue included SaaS, maintenance, support, and professional services.
Financial performance and liquidity
| Metric | FY2017 | FY2016 | Change |
|---|---|---|---|
| Revenue | $193.3 million | $192.3 million | Up 1% |
| Gross profit / gross margin | $134.5 million / 70% | $130.7 million / 68% | Profit up 3%; margin up 2 percentage points |
| Operating income | $6.2 million | $9.6 million | Down 35% |
| Net income (loss) | $(22.4) million | $10.5 million | Turned to a loss |
| Diluted earnings (loss) per share | $(0.56) | $0.27 | Turned negative |
| Cash from operating activities | $17.6 million | $28.4 million | Down $10.8 million |
| Cash and equivalents at year-end | $78.7 million | $49.3 million | Up $29.3 million |
| Short-term investments at year-end | $79.7 million | $94.9 million | Down $15.1 million |
| Working capital | $161.8 million | $139.2 million | Up $22.6 million |
VASCO reported no outstanding debt at December 31, 2017. Cash plus short-term investments totaled approximately $158.4 million. Operating cash flow remained positive but declined year over year. Investing activities provided $12.8 million in 2017, principally reflecting net short-term investment maturities; financing activities used $0.6 million. No dividends were declared.
Material changes versus the prior comparable period
- Product and license revenue declined 6% to $147.3 million, primarily from lower hardware sales, partly offset by higher software licenses. Services and other revenue rose 27% to $46.0 million, driven by SaaS and maintenance growth.
- Revenue mix shifted geographically: Americas revenue rose 60% to $53.0 million, while EMEA fell 3% to $92.9 million and Asia Pacific fell 25% to $47.5 million. Management attributed the Americas increase largely to eSignLive and software; hardware declines affected EMEA and Asia Pacific.
- Gross margin improved from 68% to 70%, primarily due to software representing a greater share of revenue. Operating expenses rose 6% to $128.3 million; general and administrative costs increased 18%, including higher headcount, professional fees, and facilities costs.
- Income tax expense increased to $30.8 million from $0.9 million. The 2017 net loss primarily reflected U.S. tax reform charges, including a provisional deemed-repatriation tax, taxes on planned distributions of previously reinvested foreign earnings, and remeasurement of deferred tax assets. Management recorded $28.1 million of discrete tax expense related to the reform; the overall tax provision was $30.8 million.
- Top-ten customers accounted for 27% of revenue, down from 36% in 2016 and 50% in 2015. No single 2017 customer concentration percentage is stated in the supplied text.
Outlook, risks, contingencies, and unusual items
- Outlook: The filing gives no numerical revenue or earnings guidance. Management expected to continue investing in sales resources, research and development, and infrastructure. It cited potential market growth from cybersecurity awareness, regulation, and electronic commerce, while noting economic uncertainty, especially in European banking.
- Revenue accounting: VASCO planned to adopt the new revenue standard on January 1, 2018 using the modified-retrospective method. It expected a material change in revenue timing and a material retained-earnings impact, chiefly because distinct term-license revenue would generally be recognized when delivered rather than over the license term. Term-license arrangements represented about 6% of 2017 revenue; the actual adoption impact remained under evaluation.
- Tax uncertainty: The tax-reform accounting was provisional and expected to be finalized during 2018; additional adjustments could materially affect tax expense and the effective tax rate. The company expected GILTI taxation to apply beginning in 2018. It planned to pay approximately $14.4 million of transition tax in eight annual installments starting in 2018.
- Business risks: Key exposures included competition and pricing pressure, reliance on authentication products and a limited supplier base, long sales cycles and large order timing, foreign exchange movements, customer concentration, cybersecurity incidents, cloud-service availability (including AWS), and international regulatory and data-protection requirements, including GDPR.
- Legal and regulatory matters: OFAC had not concluded its review of voluntary disclosures concerning a distributor’s possible resale of products to Iran; BIS issued a “no action” letter. The company had accrued $0.9 million for a possible OFAC penalty and said it did not expect a material adverse impact, but the outcome remained uncertain. Securities and derivative litigation and patent disputes were also disclosed; management stated it intended to defend the matters. A Japanese patent office and trial court found a plaintiff’s patent invalid, subject to appeal.
- Controls and unusual items: Management and the auditor concluded internal control over financial reporting was effective at year-end, and the auditor issued unqualified opinions on the financial statements and controls. A material weakness tied to the eSignLive acquisition was reported remediated. Separately, the company disclosed immaterial prior-period errors related to defined-benefit pension obligations and related tax effects. The company sold subsidiary Able to an employee for a nominal amount and provided it an unused €1.5 million credit line.
Most important facts for investors to verify
- Confirm the issuer identity: the filing is for VASCO Data Security International, Inc. (VDSI), despite the Onespan metadata.
- Review the tax-reform reconciliation and subsequent finalization of the provisional 2017 tax charges, including transition-tax installments and GILTI treatment.
- Check the actual 2018 adoption effects of the revenue standard on retained earnings, revenue timing, and sales-commission capitalization.
- Track whether service and software growth can offset continued hardware declines, particularly in Asia Pacific and EMEA, and whether customer concentration remains reduced.
- Monitor operating cash flow, receivables, the ongoing OFAC review, and the status of disclosed securities and patent litigation.