Filing summary
Period and entity: This is VASCO Data Security International, Inc.’s Form 10-K for the fiscal year ended December 31, 2011, filed March 9, 2012. The request identifies Onespan Inc., but the filing is for VASCO; investors should verify the issuer and filing match. Amounts below are in U.S. dollars; financial statement amounts are generally in millions unless stated otherwise.
Business context and reporting period
VASCO designed and sold hardware and software for strong user authentication and secure transactions, primarily to banking customers and enterprise/application-security markets. It reported one business segment. Revenue was highly international, with 66% from EMEA in 2011, and concentrated in banking (81% of revenue).
Financial performance and liquidity
| Metric | FY 2011 | FY 2010 | Change / context |
|---|---|---|---|
| Revenue | $168.1 million | $108.0 million | Up 56% |
| Gross profit / margin | $108.1 million / 64.3% | $76.0 million / 70.4% | Profit up 42%; margin fell about 6 percentage points |
| Operating income / margin | $24.8 million / 14.7% | $12.4 million / 11.5% | Income nearly doubled |
| Net income from continuing operations | $24.3 million | $10.8 million | 2011 includes tax benefits from U.S. NOLs |
| Discontinued operations | $(6.1) million | — | Loss associated with DigiNotar |
| Net income | $18.1 million | $10.8 million | Diluted EPS: $0.47 vs. $0.28 |
| Cash from operating activities | $17.9 million | $21.1 million | Lower despite higher earnings |
| Cash and equivalents | $84.5 million | $85.5 million | Down $1.0 million |
| Working capital | $108.6 million | $96.9 million | Current ratio 4.5:1 at year-end |
| Debt | No debt outstanding | — | Long-term obligations were $2.0 million, largely not described as debt |
2011 quarterly revenue was $48.5 million in Q4, versus $33.0 million in Q4 2010. Q4 operating income was $9.1 million versus $7.6 million; net income was $10.8 million versus $6.7 million. Q4 2011 included a $0.6 million loss from discontinued operations. The filing does not provide a clear cash-flow figure for Q4 alone.
Material changes versus the prior comparable period
- Banking revenue rose 72% to $137.0 million, while enterprise and application-security revenue increased 10% to $31.1 million. Banking’s larger share of sales contributed to weaker gross margin because this market generally has lower margins.
- Gross margin also faced lower hardware margins, a higher share of card readers, expedited shipping costs, and a $1.4 million inventory write-down. Currency movements partly offset these pressures.
- Top 10 customers accounted for 47% of revenue, up from 37%; HSBC alone represented approximately 17%, up from 11%.
- Cash from operations declined, with increased accounts receivable and inventory among the working-capital movements. Investing cash use rose to $9.8 million, including acquisition-related spending.
Outlook, risks, contingencies, and unusual items
- DigiNotar: Following a 2011 intrusion and fraudulent certificate issuance, Dutch authorities terminated DigiNotar B.V.’s certification-provider registration; it entered bankruptcy. VASCO discontinued the certificate-authority business and recorded a $6.1 million after-tax discontinued-operations loss, including impairment charges. The company retained DigiNotar intellectual property and planned to use it in authentication and PKI applications. Further costs, claims, impairment, escrow recovery, and intercompany offsets remained uncertain.
- Outlook: Management expected DPS revenue to remain limited in 2012, while describing it as a potential longer-term growth opportunity. It expected normalized long-term banking revenue growth of 10% or more annually and planned to hire 25–35 employees, primarily in sales and product development. These are management expectations, not guaranteed results.
- Margins and taxes: Management expected higher effective taxes in 2012 as U.S. NOL benefits diminished. Banking mix, product pricing, card-reader competition, and inventory estimates could continue to affect margins.
- Key exposures: European economic and sovereign-debt uncertainty, currency fluctuations, customer and product concentration, long sales cycles, strong competitors, reliance on a small supplier base, cybersecurity incidents, intellectual-property claims, and international regulatory and compliance risks.
- Legal and controls: The FTC issued a civil investigative demand concerning DigiNotar; the filing said the FTC had not alleged wrongdoing by VASCO. Management and KPMG concluded internal control over financial reporting was effective; KPMG gave an unqualified opinion on the financial statements and controls.
Most important facts for investors to verify
- Confirm that the VASCO 2011 filing—not a filing for Onespan—is the intended document and issuer.
- Review subsequent developments in DigiNotar bankruptcy, potential claims, escrow recovery, and the value and use of retained intellectual property.
- Assess whether the 2011 revenue surge and 10%+ normalized banking growth expectation were sustainable, given order timing, backlog decline from $56 million to $33 million, and customer concentration.
- Reconcile strong earnings growth with lower operating cash flow and rising receivables and inventory; check collections and inventory realization.
- Evaluate the durability of gross margins and the expected 2012 tax-rate increase, including reliance on NOL-related tax benefits in 2011.
- Check the concentration of cash outside the U.S. and potential tax consequences of repatriation; the filing states that $68.9 million was held abroad and foreign earnings were considered permanently invested.