Onespan Inc. annual report, FY2013

Business context and reporting period

This Form 10-K is for VASCO Data Security International, Inc. (NASDAQ: VDSI), for the fiscal year ended December 31, 2013. The request metadata names OneSpan Inc.; the supplied filing identifies the registrant as VASCO. The company develops hardware and software for authentication and transaction security, primarily serving banking and financial-services customers. Figures below are in U.S. dollars; financial-statement amounts are in millions unless otherwise stated.

VASCO acquired online-banking security provider Cronto in May 2013 for approximately $20.2 million, funded from cash. Banking generated 82% of 2013 revenue; EMEA generated 62%. Cloud-based DPS and MYDIGIPASS.COM revenue remained minimal.

Financial performance and condition

Fourth-quarter 2013 revenue was $43.3 million, versus $38.8 million in Q4 2012. Q4 operating income was $4.0 million versus $3.5 million, and net income was $3.2 million versus $2.0 million; diluted EPS was $0.08 versus $0.05.

At year-end, the current ratio was 4.3:1. Operating cash flow was lower year over year, while investing used $20.5 million, principally for the Cronto acquisition. Total assets were $211.9 million and stockholders’ equity was $174.3 million. Contractual obligations totaled $27.4 million, including $14.2 million of purchase obligations, primarily for inventory.

Material changes versus prior comparable period

• Revenue edged up 1% from 2012, but operating income declined 35% and net income declined 29%.
• Operating costs rose 10%, including higher sales and marketing and R&D spending, Cronto-related amortization, and $0.6 million in redundancy costs associated with closing the Brisbane R&D facility.
• Gross margin was nearly flat. Higher non-hardware revenue and lower inventory write-downs and freight costs partly offset weaker banking hardware margins and product-mix effects.
• Banking revenue increased 2% to $126.8 million; Enterprise and Application Security revenue declined 4% to $28.3 million. Asia-Pacific revenue fell 17%, while revenue from other countries rose 33%.
• Cash declined $7.9 million, principally reflecting the Cronto purchase. Inventory rose to $25.7 million from $18.7 million.

Outlook, risks and unusual items

• Management expected DPS/MDP to begin contributing in 2014, while noting that revenue to date was minimal. This is an expectation, not quantified financial guidance.
• Management expected difficult European economic conditions in 2014, but did not expect them to significantly affect the Banking market; it saw potential limits to Enterprise and Application Security growth.
• Key exposures include reliance on a few customers (top 10 produced 40% of 2013 revenue; HSBC alone 18%), order timing and seasonality, competition and pricing pressure, foreign-exchange movements, and reliance on a limited supplier base.
• DigiNotar’s 2011 security breach and bankruptcy remain a source of potential claims and costs. The filing reports $1.9 million of remaining discontinued-operation assets, including escrow consideration, and $0.03 million of related liabilities at year-end; recoverability and ultimate costs remain uncertain.
• Cronto added $9.2 million of goodwill and $13.3 million of identifiable intangibles; 2014 estimated amortization is $4.5 million. Goodwill and intangible-asset impairment is a continuing risk.
• Management reported adequate resources for the next 12 months, no off-balance-sheet arrangements, and no material litigation expected apart from DigiNotar-related matters. The auditor gave an unqualified opinion on the financial statements and internal controls.

Important facts for investors to verify

• Confirm issuer identity and reporting scope: the supplied 10-K is for VASCO Data Security International, Inc., not an entity named OneSpan Inc.
• Track whether DPS/MDP gains meaningful paid adoption and whether Cronto is integrated and commercially successful.
• Assess whether lower operating profitability and cash generation persist, and monitor inventory growth and customer order timing.
• Review HSBC and top-customer revenue concentration, geographic mix, currency exposure, and supplier dependence.
• Follow DigiNotar claims, escrow recovery, and any further discontinued-operation charges; assess the assumptions supporting goodwill and acquired-intangible values.
• Monitor management’s 2014 outlook against actual results; the filing provides no numerical revenue or earnings guidance.