Supporting Materials · Appendix Z

Key Risks & Mitigations

A candid assessment of the 12 key risks across Market, Product & Technology, Team, Regulatory, and Financing dimensions — with impact, likelihood, specific mitigation steps, and monitoring signals for each. Prepared as of March 24, 2026.

Market
3 risks
2 high-impact
Product & Technology
3 risks
1 high-impact
Team
2 risks
1 high-impact
Regulatory
2 risks
no high-impact
Financing
2 risks
2 high-impact
Impact / Likelihood:
Low
Medium
High
Market
M-01
Slower-than-projected user adoption

Beta testing or public GTM converts users at a rate below the model's 35% QoQ growth assumption, compressing revenue timelines and runway.

Impact
High
Likelihood
Medium
Mitigation Steps
40K+ organic subscribers and 1,000+ signed LOI partners de-risk cold-start — supply and demand are pre-validated.
Ambassador creator network activates high-intent audiences before a dollar of paid acquisition.
Rolling beta (Q1 dozens → April hundreds → May thousands) provides iteration cycles before public launch.
Three growth scenarios modeled in Appendix C; conservative case (25% QoQ) still reaches FCF positive in 2026.
Monitoring Signal

Weekly active user count vs. model target. Beta cohort conversion rate. LOI-to-paid conversion rate post-launch.

M-02
Big Tech enters the wellness identity space

Meta, Apple, or Google launches a competing wellness social layer, leveraging existing user bases and distribution advantages.

Impact
High
Likelihood
Low
Mitigation Steps
Category definition and trust moat must be established before incumbents move — timing advantage is real and shrinking.
Values-aligned, responsible AI positioning is structurally difficult for ad-driven platforms to replicate authentically.
Community depth, identity lock-in, and creator relationships compound faster than feature parity.
VIBEUP's supply side (1,000+ LOI partners) provides a distribution moat Big Tech cannot instantly replicate.
Monitoring Signal

Big Tech wellness product announcements. Competitive feature launches. Platform trust sentiment tracking (Edelman, Pew).

M-03
Wellness market growth decelerates

Macroeconomic contraction, consumer spending pullback, or wellness trend saturation reduces overall market growth below projections.

Impact
Medium
Likelihood
Low
Mitigation Steps
Wellness spending has demonstrated structural elevation post-pandemic — it is now a core identity expenditure, not discretionary.
Freemium model keeps barrier to entry low during economic downturns.
B2B enterprise wellness vertical (Appendix K) provides recession-resistant revenue from corporate health budgets.
Monitoring Signal

GWI quarterly wellness spending index. Consumer confidence surveys. Premium-to-free tier conversion rates.

Product & Technology
PT-01
Android launch delayed beyond Q2 2026

Android development or Google Play approval takes longer than planned, limiting addressable market in the critical GTM window.

Impact
Medium
Likelihood
Low
Mitigation Steps
iOS is live and fully operational — revenue launch is not dependent on Android.
Android development underway as of Q1 2026 with Q2 target; development is an extension of existing codebase.
LOI partner audiences span both iOS and web — web-first activation is viable if Android delays occur.
Monitoring Signal

Android build milestone tracking. Google Play submission status. Beta testing participation split by platform.

PT-02
Mira AI cost or quality underperforms

AI inference costs exceed model assumptions ($0.80/user/mo), or Mira's quality does not drive the engagement and retention lifts projected.

Impact
Medium
Likelihood
Low
Mitigation Steps
Mira built as an enhancement layer — platform functions fully without AI activated, so AI cost overrun does not kill the business.
AI inference cost has fallen 99.7% since 2020 (Stanford HAI, 2024); cost trajectory is favorable.
Model-agnostic architecture allows switching between AI providers as cost/quality curves evolve.
A/B testing Mira-on vs. Mira-off cohorts will quantify retention lift and justify per-user cost.
Monitoring Signal

Monthly AI COGS as % of revenue vs. model (target <8%). Mira engagement rate. Cohort retention delta (Mira vs. no-Mira).

PT-03
Platform security or data breach

A security incident compromises user data, damaging trust — the core asset of the platform — and triggering regulatory or legal liability.

Impact
High
Likelihood
Low
Mitigation Steps
Security-first architecture from Day 1: JWT auth, AES-256 encryption, RBAC, TLS in transit.
No sensitive health or medical data stored on platform (wellness community, not clinical).
Stripe handles all payment processing — zero card data on VIBEUP servers.
SOC 2 Type II roadmap initiated; penetration testing scheduled pre-public launch.
General Counsel (ex-Shopify) oversees privacy compliance: GDPR, CCPA, PIPEDA from inception.
Monitoring Signal

Security audit completion. Penetration test results. Incident response plan tested quarterly.

Team
T-01
Key person departure or founder burnout

Loss of a critical founder or senior team member (especially CEO, CPO, or Legal) during the critical 2026 launch window.

Impact
High
Likelihood
Low
Mitigation Steps
Equity vesting schedules with cliffs create strong retention incentives for all key team members.
Cross-functional knowledge sharing — no single individual holds all critical knowledge paths.
Board composition and investor relationships provide governance continuity if transition is needed.
Scale Round (Q3 2026) funds VP Sales and COO hires, distributing operational dependency.
Monitoring Signal

Founder and team engagement check-ins. Vesting cliff milestones. Key-person insurance (to be obtained at Proof Round close).

T-02
Failure to hire Scale Round roles

Post-Scale Round hiring plan (VP Sales, Marketing Director, COO) takes longer than Q2 2026 target, delaying revenue and operations scaling.

Impact
Medium
Likelihood
Low
Mitigation Steps
Partnerships Director (Erin) and existing team provide coverage during search period.
Remote-first structure dramatically expands talent pool across North America.
Network of ex-Shopify, ex-LinkedIn advisors provides warm referral pipeline for senior hires.
Proof Round does not require Scale Round hires — lean ops through June 2026 revenue launch is fully funded.
Monitoring Signal

Active pipeline for each open role. Time-to-offer tracking. Quarterly headcount vs. hiring plan (Appendix O).

Regulatory
R-01
Privacy regulation changes (GDPR, CCPA, AI Act)

New or evolving data privacy regulations in key markets (US, EU, Canada) require significant platform changes or restrict certain data practices.

Impact
Medium
Likelihood
Medium
Mitigation Steps
Privacy-by-design architecture: minimal data collection, user-controlled, no ad targeting.
GDPR, CCPA, PIPEDA compliance built-in from inception — not a retrofit.
General Counsel (ex-Shopify Senior Counsel) is the primary regulatory interface with deep privacy law expertise.
AI Act (EU) compliance roadmap initiated — Mira is a 'limited risk' system under current classifications.
No user health/medical data stored, eliminating the highest-risk data category.
Monitoring Signal

Regulatory bulletin monitoring (EU AI Act, FTC guidance). Quarterly legal review with General Counsel. Compliance calendar (Appendix T).

R-02
Wellness claims regulatory scrutiny

FTC or equivalent bodies scrutinize wellness platform claims, requiring disclosure changes or limiting marketing language.

Impact
Low
Likelihood
Low
Mitigation Steps
VIBEUP positioned as community, discovery, and commerce infrastructure — not medical advice or treatment.
All Mira AI outputs clearly labeled as AI-generated, not clinical guidance.
Disclaimer framework reviewed by General Counsel pre-launch.
No diagnostic, therapeutic, or clinical claims in any product or marketing copy.
Monitoring Signal

FTC wellness platform guidance updates. Legal review of all marketing copy and Mira output categories quarterly.

Financing
F-01
Proof Round closes slower than projected

The $550K Proof Round takes longer to close than planned, compressing runway before June revenue launch.

Impact
High
Likelihood
Medium
Mitigation Steps
$100K bridge loan (received January 2026) funds operations through approximately April 2026.
Rolling close structure — capital deployed as each investor commits, no minimum threshold required.
Revenue starts June 2026 regardless of full round close, creating an independent runway extension mechanism.
Conservative burn ($50K/mo in Q1–Q2) provides additional buffer vs. typical pre-revenue startups.
Existing team on equity-only or contract basis reduces cash burn dependency.
Monitoring Signal

Investor pipeline tracking. Committed vs. target weekly update. Cash balance vs. burn rate runway projection.

F-02
Scale Round ($3M–$8M) does not close

Despite hitting Proof Round milestones, the Scale Round fails to close in Q3 2026, limiting expansion hiring and marketing scale.

Impact
High
Likelihood
Low
Mitigation Steps
Revenue launch in June 2026 creates an independent path to profitability — Scale Round accelerates but does not determine survival.
Proof Round milestones (224K members, $272K MRR by Dec '26) are designed to create strong Scale Round leverage.
Bridge note terms and Proof Round investor agreements include Scale Round participation rights to seed momentum.
Conservative FCF positive by Q3 2026 means the business can operate lean without external capital if needed.
Monitoring Signal

Monthly MRR vs. Scale Round trigger metrics. Investor meeting pipeline. ARR run-rate at Q3 2026.

Risk Management Philosophy

We do not present these risks to discourage investment — we present them because honest risk disclosure is a foundation of trust. Every risk above has been mapped, mitigated, and is actively monitored. The highest-risk scenario for VIBEUP is not any single risk above — it is the risk of not moving fast enough to define the category before a well-funded competitor does. That is the risk we are most actively managing.