10-Q

UNITED STATES
SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-Q

xQUARTERLY REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

FOR THE QUARTERLY PERIOD ENDED March 31, 2017

OR

oTRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from                            to

Commission File Number 001-33197

GUIDANCE SOFTWARE, INC.

(Exact name of registrant as specified in its charter)

Delaware	95-4661210
(State or other jurisdiction of	(I.R.S. Employer
incorporation or organization)	Identification No.)

1055 E. Colorado Blvd.
Pasadena, California 91106	(626) 229-9191
(Address of principal executive offices)	Registrant’s telephone number, including area code

Securities registered pursuant to Section 12(b) of the Act:

Common Stock, $0.001 par value per share.

Securities registered pursuant to Section 12(g) of the Act:

None.

Indicate by check mark whether the registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.  Yes x  No o

Indicate by check mark whether the registrant has submitted electronically and posted on its corporate Web site, if any, every Interactive Data File required to be submitted and posted pursuant to Rule 405 of Regulation S-T (232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit and post such files).  Yes x  No o

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer a smaller reporting company or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer o	Accelerated filer x
Non- accelerated filer o	Smaller reporting company o
	Emerging growth company o

If emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. o

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act).  Yes o  No x

As of May 5, 2017, there were approximately 33,405,000 shares of the registrant’s Common Stock outstanding.

GUIDANCE SOFTWARE, INC.

FORM 10-Q

FOR THE QUARTERLY PERIOD ENDED March 31, 2017

Table of Contents

		Page
PART I - FINANCIAL INFORMATION
Item 1.	Financial Statements (Unaudited)	3
	Condensed Consolidated Balance Sheets at March 31, 2017 and December 31, 2016	3
	Condensed Consolidated Statements of Operations for the three months ended March 31, 2017 and 2016	4
	Condensed Consolidated Statements of Cash Flows for the three months ended March 31, 2017 and 2016	5
	Notes to the Condensed Consolidated Financial Statements	6
Item 2.	Management’s Discussion and Analysis of Financial Condition and Results of Operations	21
Item 3.	Quantitative and Qualitative Disclosures About Market Risk	29
Item 4.	Controls and Procedures	29
PART II - OTHER INFORMATION
Item 1.	Legal Proceedings	30
Item 1A.	Risk Factors	30
Item 2.	Unregistered Sales of Equity Securities and Use of Proceeds	30
Item 3.	Defaults upon Senior Securities	30
Item 4.	Removed and Reserved	30
Item 5.	Other Information	30
Item 6.	Exhibits	30
Signatures		31

2

PART I. FINANCIAL INFORMATION

Item 1.Financial Statements

GUIDANCE SOFTWARE, INC.

CONDENSED CONSOLIDATED BALANCE SHEETS

(in thousands, except per share data)

(Unaudited)

	March 31, 2017			December 31, 2016
ASSETS
Current assets:
Cash and cash equivalents	$	17,759		$	12,619
Trade receivables, net of allowance for doubtful accounts of $629 and $554, respectively	16,553			22,236
Inventory	2,460			2,206
Prepaid expenses and other current assets	4,780			4,850
Total current assets	41,552			41,911
Long-term assets:
Property and equipment, net	9,115			11,044
Intangible assets, net	4,291			4,649
Goodwill	14,632			14,632
Other assets	2,271			2,180
Total long-term assets	30,309			32,505
Total assets	$	71,861		$	74,416
LIABILITIES AND STOCKHOLDERS’ EQUITY (DEFICIT)
Current liabilities:
Accounts payable	$	3,649		$	4,722
Accrued liabilities	11,404			12,641
Bank line of credit	—			3,500
Deferred revenues	43,676			40,209
Total current liabilities	58,729			61,072
Long-term liabilities:
Deferred rent and other long-term liabilities	6,088			6,872
Deferred revenues	5,986			5,923
Deferred tax liabilities	626			604
Total long-term liabilities	12,700			13,399
Commitments and contingencies (Note 12)
Stockholders’ equity (deficit):
Preferred stock, $0.001 par value: 10,000,000 shares authorized; no shares issued or outstanding	—			—
Common stock, $0.001 par value; 100,000,000 shares authorized; 34,435,000 and 33,855,000 shares issued, respectively; and 32,655,000 and 32,079,000 shares outstanding, respectively	26			26
Additional paid-in capital	130,387			128,169
Treasury stock, at cost, 1,779,000 and 1,779,000 shares, respectively	(11,479		)	(11,479		)
Accumulated deficit	(118,502		)	(116,771		)
Total stockholders’ equity (deficit)	432			(55		)
Total liabilities and stockholders’ equity (deficit)	$	71,861		$	74,416

The accompanying notes are an integral part of these condensed consolidated financial statements

3

GUIDANCE SOFTWARE, INC.

CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS

(in thousands, except per share data)

(Unaudited)

	Three Months Ended March 31,
	2017			2016
Revenues:
Product revenue	$	8,867		$	7,458
Services revenue	7,840			8,509
Maintenance revenue	10,079			9,832
Total revenues	26,786			25,799
Cost of revenues (excluding amortization and depreciation, shown below):
Cost of product revenue	1,763			1,956
Cost of services revenue	4,829			5,635
Cost of maintenance revenue	743			606
Total cost of revenues (excluding amortization and depreciation, shown below)	7,335			8,197
Operating expenses:
Selling and marketing	9,950			10,501
Research and development	5,481			6,242
General and administrative	4,532			6,190
Depreciation and amortization	1,158			1,415
Total operating expenses	21,121			24,348
Operating loss	(1,670		)	(6,746		)
Other income and expense:
Interest income	—			4
Interest expense	(4		)	(2		)
Other income, net	12			5
Total other income and expense	8			7
Loss before income taxes	(1,662		)	(6,739		)
Income tax provision	69			53
Net loss	$	(1,731	)	$	(6,792	)
Net loss per share:
Basic	$	(0.06	)	$	(0.24	)
Diluted	$	(0.06	)	$	(0.24	)
Weighted average number of shares used in per share calculation:
Basic	29,685			28,580
Diluted	29,685			28,580

The accompanying notes are an integral part of these condensed consolidated financial statements.

4

GUIDANCE SOFTWARE, INC.

CONDENSED CONSOLIDATED STATEMENTS OF CASH FLOWS

(in thousands)

(Unaudited)

	Three Months Ended March 31,
	2017			2016
Operating Activities:
Net loss	$	(1,731	)	$	(6,792	)
Adjustments to reconcile net loss to net cash provided by operating activities:
Depreciation and amortization	1,158			1,415
Provision for doubtful accounts	123			—
Share-based compensation	2,133			1,322
Deferred taxes	22			22
Loss on disposal of assets	1,199			14
Changes in operating assets and liabilities:
Trade receivables	5,560			6,838
Inventory	(255		)	(14		)
Prepaid expenses and other assets	(20		)	(2,651		)
Accounts payable	(1,059		)	170
Accrued liabilities	(2,000		)	(25		)
Deferred revenues	3,530			1,979
Net cash provided by operating activities	8,660			2,278
Investing Activities:
Purchase of property and equipment	(84		)	(806		)
Net cash used in investing activities	(84		)	(806		)
Financing Activities:
Repayment of borrowing on line of credit	(3,500		)	—
Proceeds from the exercise of stock options	85			—
Principal payments on capital lease obligations and other obligations	(21		)	(19		)
Net cash used in financing activities	(3,436		)	(19		)
Net decrease in cash and cash equivalents	5,140			1,453
Cash and cash equivalents, beginning of period	12,619			18,967
Cash and cash equivalents, end of period	$	17,759		$	20,420
Non-cash investing and financing activities:
Purchase of equipment included in accounts payable and accrued expenses	$	—		$	293
Capital lease obligations incurred to acquire assets	$	—		$	28

The accompanying notes are an integral part of these condensed consolidated financial statements

5

GUIDANCE SOFTWARE, INC.

NOTES TO CONDENSED CONSOLIDATED FINANCIAL STATEMENTS

(Unaudited)

Note 1. Description of the Business

General

Guidance Software, Inc. was incorporated in the state of California in 1997 and reincorporated in Delaware on December 11, 2006.  Guidance and its subsidiaries are collectively referred to herein as “Guidance,” “we,” “our,” or the “Company.”  Headquartered in Pasadena, California, Guidance is the leading global provider of digital investigative solutions.  Our EnCase® platform provides an investigative infrastructure that enables our customers to search, collect and analyze electronically stored information in order to address human resources matters, litigation matters, allegations of fraud, suspicious network endpoint activity and to defend and secure their organization’s data assets.

Our main products and services are:

Our Forensic Security Suite of products:

·EnCase Endpoint Security provides crucial IT cybersecurity functionality to enterprises and government agencies through its incident response and sensitive data discovery capabilities. Integrated with security alerting tools from Hewlett Packard Enterprises (“HP”), Cisco, Blue Coat Systems, and FireEye, EnCase Endpoint Security helps automate the critical first steps in cybersecurity incident response from the moment of a first alert. It rapidly delivers forensic-level visibility of the relevant endpoint data, capturing a snapshot of valuable information from active memory that might otherwise expire which may serve as evidence for potential criminal prosecution.

·EnCase Endpoint Investigator provides an investigative platform that enables an organization to search, collect, preserve, and analyze data on the servers, desktops, and laptops across its network. EnCase Endpoint Investigator enables organizations to respond to electronic discovery requests and conduct internal investigations, including those related to human resources or those focused on compliance or fraud. Companies can also collect and preserve data in response to regulator requests or for civil litigation matters.

·EnForce Risk Manager is a new data risk and privacy solution.  It allows organizations to implement a proactive approach to information governance, ensuring that sensitive data is identified, classified and remediated allowing organizations to reduce their cyber attack surface area, significantly mitigating potential damage from breaches and improving their ability to comply with global data protection mandates.

EnCase Forensic is a forensic investigation solution that enables forensic practitioners to conduct efficient, forensically sound digital data collection and investigations. The EnCase Forensic solution lets examiners acquire data from a wide variety of devices, unearth potential evidence with disk-level forensic analysis, and craft comprehensive reports on their findings, all while maintaining the integrity of the evidence in a forensically sound and court-proven manner.

EnCase eDiscovery is our enterprise-wide e-discovery solution addressing the end-to-end e-discovery needs of corporations and government agencies. The e-discovery product portfolio includes capabilities such as: legal hold, identification, collection, preservation, processing, first-pass review, and early case assessment (“ECA”) review.

EnCase eDiscovery Review is a highly secure, private cloud-hosted, multi-matter review platform with advanced analysis and technology assisted review (“TAR”) functionality, comprehensive production capabilities, and extensive project management and workflow features to enable efficient, effective, and defensible distributed review.

Forensic appliances include write blockers, forensic duplicators and storage devices. Write blockers and forensic duplicators are used to acquire forensically sound copies of digital storage devices such as hard disks and solid state drives.

In addition, we complement these offerings with a comprehensive array of professional, subscription and training services, including technical support and maintenance services to help our customers implement our solutions, conduct investigations and train their IT and legal professionals to effectively and efficiently use our products.

6

Note 2. Summary of Significant Accounting Policies

Basis of Presentation

The accompanying condensed consolidated balance sheet as of March 31, 2017 and the condensed consolidated statements of operations for the three months ended March 31, 2017 and 2016 and cash flows for the three months ended March 31, 2017 and 2016 are unaudited.  These statements should be read in conjunction with the audited consolidated financial statements and related notes, together with management’s discussion and analysis of financial position and results of operations, contained in our Annual Report on Form 10-K for the year ended December 31, 2016, filed with the U.S. Securities and Exchange Commission (the “SEC”) on March 1, 2017.

The accompanying condensed consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States, or (“GAAP”), and pursuant to the rules and regulations of the SEC for interim financial reporting.  In the opinion of our management, the unaudited condensed consolidated financial statements have been prepared on the same basis as the audited consolidated financial statements in our Annual Report on Form 10-K for the year ended December 31, 2016 and include all normal and recurring adjustments necessary for the fair presentation of our financial position as of March 31, 2017 and our results of operations for the three months ended March 31, 2017 and 2016 and our cash flows for the three months ended March 31, 2017 and 2016.  The condensed consolidated balance sheet as of December 31, 2016 has been derived from the December 31, 2016 audited financial statements.  The operating results for the three month period ended March 31, 2017 are not necessarily indicative of the results that will be achieved for the full fiscal year or for future periods.

The condensed consolidated financial statements include the accounts of Guidance and its wholly owned subsidiaries.  All intercompany accounts and transactions have been eliminated.

Use of Estimates and Assumptions

The preparation of financial statements in conformity with GAAP requires management to make estimates and judgments that affect the reported amounts of assets, liabilities, revenues and expenses, and related disclosures.  On an ongoing basis, we evaluate these estimates, including those related to revenue recognition, share-based compensation, bad debts, income taxes, commitments, impairment considerations, contingencies and litigation.  We base our estimates on historical experience and on various other assumptions that are believed to be reasonable under the circumstances.  Actual results may differ from these estimates.

Cash and Cash Equivalents

We invest excess cash in money market funds and highly liquid debt instruments of the US government and its agencies.  Highly liquid investments with stated maturities of three months or less from the date of purchase are classified as cash and cash equivalents.

Fair Value of Financial Instruments

The carrying amounts of cash equivalents, accounts receivable and accounts payable approximate fair value because of the short-term maturities of these instruments.  Based on borrowing rates currently available to us for borrowings with similar terms, the carrying values of our capital lease obligations also approximate fair value.

Trade Receivables

Trade receivables are carried at original invoice amount less an allowance for doubtful accounts.  The allowance is established through a provision for bad debt expense, which is included in general and administrative expenses.  We determine the adequacy of this allowance by evaluating individual customer accounts receivable, through consideration of the customer’s financial condition and credit history, and taking into account current economic conditions.  In addition, we analyze our historical credit loss history and apply these loss rates to our current accounts receivable balances to verify the reasonableness of our allowance.  Trade receivables are written off when deemed uncollectible.  A trade receivable is generally considered past due if any portion of the receivable balance is outstanding for more than 30 days unless alternate terms are provided.

Inventory

Inventory is comprised of hardware components, packaged software components and finished goods and is valued at the lower of cost or market, using the weighted average cost method.  We conduct quarterly inventory reviews for obsolescence, and inventory considered unlikely to be sold is adjusted to net realizable value.

7

Amortization of Intangible Assets with Finite Lives

Intangible assets with finite lives are recorded at their fair value at the time of acquisition.  With the exception of our customer relationships intangible asset, which is amortized on a double-declining basis, the acquisition date fair values of such assets are amortized on a straight-line basis over the estimated useful lives.

Goodwill and Indefinite-Lived Intangibles

We account for our goodwill and indefinite-lived intangible assets in accordance with Intangibles — Goodwill and Other (ASC 350).  Goodwill represents the excess of purchase price over fair value of net assets acquired and is assigned to a reporting unit at the date the goodwill is initially recorded.  Goodwill and indefinite-lived intangible assets are not amortized but evaluated for impairment annually, or whenever events or changes in circumstances indicate that the value may not be recoverable.  The Company has the option to choose whether it will apply the qualitative assessment first before the quantitative assessment.  We performed a quantitative assessment for our goodwill and indefinite-lived assets as of October 1, 2016, and determined they were not impaired.

Concentrations of Credit Risk

Financial instruments that potentially subject us to significant concentrations of credit risk consist primarily of cash and cash equivalents and accounts receivable.  We restrict our investments in cash and cash equivalents to financial institutions, US government or federal agency instruments and obligations of corporations with high credit ratings.  At March 31, 2017, the majority of our cash balances were held at financial institutions located in California in accounts that are insured by the Federal Deposit Insurance Corporation for up to $250,000. Uninsured balances aggregate approximately $17.3 million as of March 31, 2017.  At March 31, 2017 all of our cash equivalents consisted of financial institution obligations.  We periodically perform credit evaluations of our customers and maintain reserves for potential losses on our accounts receivable.  We do not believe we are subject to concentrations of credit risk with respect to such receivables.

Revenue Recognition

We generate revenues principally from the sale of our EnCase software products. Our software products include perpetual licenses and are related to our Forensic Security Suite (EnCase Endpoint Security, EnCase Endpoint Investigator and EnForce Risk Manager), EnCase eDiscovery, EnCase Forensic, and forensic appliance sales. Revenue associated with the sale of software licenses and revenue associated with forensic appliance sales are referred to as product revenue. Revenues are also generated from training courses and consulting services in which we assist customers with the performance of digital investigations and train their IT and legal professionals in the use of our software products, as well as subscription revenues associated with cloud-based document review and production SaaS, which we collectively refer to as services revenue. Our proprietary products are generally sold with one to three years of maintenance, which can be renewed at a stated renewal rate and is referred to as maintenance revenues.

We recognize revenue in accordance with ASU 2009-13 , Multiple-Deliverable Revenue Arrangements , (amendment to ASC Topic 605, Revenue Recognition ), Revenue Recognition - Software topic (ASC 985-605) and Revenue Recognition (ASC 605). While the standards govern the basis for revenue recognition, significant judgment and the use of estimates are required in connection with the allocation of revenue between product, services and maintenance revenues, as well as the amount of deferred revenue to be recognized in each accounting period.

Revenue Recognition Criteria: We recognize revenue when the following criteria have been met:

·Persuasive evidence of an arrangement: When we either enter into contracts or receive written purchase orders issued by a customer that legally bind us and the customer.

·Delivery: We deem delivery of products to have occurred when the title and risk of ownership have passed to the buyer. Services revenues are considered delivered as they are performed.

·Fixed or determinable fee: We consider the fee to be fixed or determinable if the fee is not subject to refund or adjustment and the payment terms are within normal established practices. If the fee is not fixed or determinable, we recognize revenues as amounts become due and payable with respect to transactions with extended payment terms, or as refund rights lapse with respect to transactions containing such provisions, provided all other revenue recognition criteria have been met.

·Collection is deemed probable: We conduct a credit review for all significant transactions at the time of the arrangement to determine the credit-worthiness of the customer. Collection is deemed probable if we have a reasonable basis to expect that the customer will pay amounts under the arrangement as payments become due.

8

We report our revenues in three categories: product revenue, services revenue, and maintenance revenue. Product revenue includes revenues from software products and hardware products. Services revenue includes revenue from professional services, training, and subscriptions. Maintenance revenue includes maintenance revenue associated with our hardware and software products. Accounting treatment for each category of revenue and our most significant contract structures is further described below.

Revenue Recognition for Software Products and Software-Related Services (Software Elements)

Software product revenue. The timing of software product revenue recognition is dependent on the nature of the product sold or the structure of the license.

EnCase Software Products: Revenue associated with these arrangements, exclusive of amounts allocated to maintenance and other undelivered elements, for which we have vendor-specific objective evidence of fair value (“VSOE”), is recognized upon delivery, provided that all other criteria for revenue recognition have been met. Revenue associated with term licenses are recognized ratably over the term of the license because we have not established VSOE for post-contract customer support in term license arrangements.

Services revenue. The majority of our consulting and implementation services are performed under per hour or fixed fee arrangements. Revenue from such services is recognized as the services are provided or upon expiration of the contractual service period.

Training revenue is either recognized on a per-class basis upon a participant’s attendance or, for those customers who have subscribed to our Annual Training Passport program, revenue is recognized ratably over the annual period.

Maintenance revenue. Maintenance revenue includes technical support and software updates on a when-and-if-available basis. We recognize maintenance revenue ratably over the applicable maintenance period. We determine the amount of maintenance revenue to be allocated through reference to substantive maintenance renewal provisions contained in multiple element arrangements. We consider substantive maintenance provisions to be provisions where the cost of the maintenance renewal is stated in the contract with our customer as a percentage of the net license fee, provided the rate is substantive.

Revenue Recognition for Multiple-Element Arrangements — Software Products and Software-Related Services (Software Arrangements)

We often enter into arrangements with customers that purchase both software products and software-related services from us at the same time, or within close proximity of one another (referred to as software-related multiple-element arrangements). Such software-related multiple-element arrangements may include the sale of our software products, software maintenance services, which include license updates and product support, consulting/implementation services and training whereby the software license delivery is followed by the subsequent delivery of the other elements. For those software-related multiple-element arrangements, we have applied the residual method to determine the amount of software license revenues to be recognized pursuant to ASC 985-605. Under the residual method, if VSOE exists for the undelivered elements, this amount is deferred with the remaining, or residual, portion of the arrangement consideration recognized upon delivery of the software license, provided all other revenue recognition criteria are met.

Revenue Recognition for Hardware and Subscription Revenues (Nonsoftware Elements)

Hardware product revenue. Revenue associated with the sale of forensic appliances is recognized upon shipment to the customers, which include certain resellers, provided that all other criteria for revenue recognition have been met.

Subscription services revenue. Customers pay subscription fees to access our cloud-based document review and production software; however, they may not take possession of the software at any time during the term of the agreement. In general, we recognize revenue for subscription fees on a straight-line basis over the contract period commencing on the date the subscription is made available to the customer. Usage-based fees, which are determined monthly, are recognized when incurred.

Revenue Recognition for Multiple-Element Arrangements — Hardware, Subscription, and Nonsoftware-Related Services (Nonsoftware Arrangements)

We enter into arrangements with customers that purchase both nonsoftware-related subscription services and nonsoftware-related services, such as consulting services, at the same time or within close proximity of one another (referred to as nonsoftware multiple-element arrangements). Each element within a nonsoftware multiple-element arrangement is accounted for as a separate unit of accounting provided the following criteria are met: the delivered products or services have value to the customer on a standalone basis; and for an arrangement that includes a general right of return relative to the delivered products or services, delivery or

9

performance of the undelivered product or service is considered probable and is substantially controlled by us. We consider a deliverable to have standalone value if the product or service is sold separately by us or another vendor, or could be resold by the customer. Further, our revenue arrangements generally do not include a general right of return relative to the delivered products. Where the aforementioned criteria for a separate unit of accounting are not met, the deliverable is combined with the undelivered element and treated as a single unit of accounting for the purposes of allocation of the arrangement consideration and revenue recognition. For those units of accounting that include more than one deliverable but are treated as a single unit of accounting, we generally recognize revenues ratably over the delivery period. For the purposes of revenue classification of the elements that are accounted for as a single unit of accounting, we allocate revenue to the respective revenue line items within our consolidated statements of operations based on a rational and consistent methodology utilizing our best estimate of relative selling prices of such elements.

For our nonsoftware multiple-element arrangements, we allocate revenue to each element based on a selling price hierarchy at the arrangement’s inception. The selling price for each element is based upon the following selling price hierarchy: VSOE, if available; third party evidence (“TPE”) if VSOE is not available; or best estimate of selling price (“BESP”) if neither VSOE nor TPE are available. A description as to how we determine VSOE, TPE and BESP is provided below:

· VSOE . VSOE is determined based on its historical pricing and discounting practices for the specific product or service when sold separately. In determining VSOE, we require that a substantial majority of the selling prices for these services fall within a reasonably narrow pricing range.

· TPE . When VSOE cannot be established for deliverables in a multiple element arrangement, judgment is applied with respect to whether we can establish a selling price based on TPE. TPE is determined based on competitor prices for similar deliverables when sold separately. Generally, our go-to-market strategy differs from that of our peers, and our offerings contain a significant level of differentiation such that comparable pricing of services with similar functionality has not been obtained. Furthermore, we have been unable to reliably determine selling prices of similar competitive services on a stand-alone basis. As a result, we have not been able to establish selling prices based on TPE.

· BESP . When VSOE or TPE cannot be established, we use BESP in our allocation of arrangement consideration. The objective of BESP is to determine the price at which we would transact a sale if the service were sold on a stand-alone basis. We determine BESP for deliverables by considering multiple factors including but not limited to prices we charge for similar offerings, market conditions, competitive landscape and pricing practices.

Revenue Recognition for Multiple-Element Arrangements — Arrangements with Software and Nonsoftware Elements

We also enter into multiple-element arrangements that may include a combination of our various software-related and nonsoftware-related products and services. In such arrangements, we first allocate the total arrangement consideration based on the relative selling prices to the software group of elements as a whole and to the nonsoftware group of elements. We then further allocate consideration allocated to the software group and nonsoftware group to the respective elements within that group following the guidance in ASC 985-605, ASC 605-25, and our policies described above. After the arrangement consideration has been allocated to the elements, we recognize revenue for each respective element in the arrangement as described above.

Recently Issued Accounting Pronouncements

In May 2014, the FASB issued ASU 2014-09, Revenue from Contracts with Customers: Topic 606 and issued subsequent amendments to the initial guidance in August 2015, March 2016, April 2016 and May 2016 within ASU 2015-04, ASU 2016-08, ASU 2016-10 and ASU 2016-12, respectively (ASU 2014-09, ASU 2015-04, ASU 2016-08, ASU 2016-10, ASU 2016-12, and ASU 2016-20 collectively, “Topic 606”). Topic 606 supersedes nearly all existing revenue recognition guidance under GAAP. The core principle of Topic 606 is to recognize revenues when promised goods or services are transferred to customers in an amount that reflects the consideration that is expected to be received for those goods or services. Topic 606 defines a five-step process to achieve this core principle and, in doing so, it is possible more judgment and estimates may be required within the revenue recognition process than are required under existing GAAP, including identifying performance obligations in the contract, estimating the amount of variable consideration to include in the transaction price and allocating the transaction price to each separate performance obligation, among others.

Topic 606 is effective for us at the beginning of our first quarter of fiscal 2018 and permits adoption either by using (i) a full retrospective approach for all periods presented in the period of adoption or (ii) a modified retrospective approach with the cumulative effect of initially applying Topic 606 recognized at the date of initial application and providing certain additional disclosures as defined per Topic 606.

We plan to adopt Topic 606 using the modified retrospective approach described above in the first quarter of fiscal 2018. However, a decision regarding the adoption method has not been finalized at this time. Our final determination will depend on a number of factors, such as the significance of the impact of the new standard on our financial results, system readiness, including that

10

of software systems procured from third-party providers, and our ability to accumulate and analyze the information necessary to assess the impact on prior period financial statements, as necessary.

We continue to evaluate the impact of the new standard on our accounting policies, processes, and system requirements. We have assigned internal resources, in addition to the engagement of a third-party service provider, to assist in the evaluation of the impact of the standard and the implementation of software systems from third-party providers.  We have made investments in systems to enable timely and accurate reporting under the new standard.

As part of our evaluation, we have also considered the impact of the guidance in ASC 340-40, Other Assets and Deferred Costs: Contracts with Customers, and the interpretations of the FASB Transition Resource Group for Revenue Recognition (“TRG”) from their November 7, 2016 meeting with respect to capitalization and amortization of incremental costs of obtaining a contract.  As a result of this new guidance, we preliminarily believe that we will capitalize additional costs of obtaining the contract, including sales commissions.  The new cost guidance, as interpreted by the TRG, requires the capitalization of all incremental costs that are incurred to obtain a contract with a customer that would not have been incurred if the contract had not been obtained, provided the costs are expected to be recovered.  Under our current accounting policy, we expense costs in the period we invoice the customer.  Additionally, we preliminarily believe that the amortization period for our deferred commission costs will be longer than the contract term, as the new cost guidance requires entities to determine whether the costs relate to specific anticipated contracts.  Therefore, we believe that the period of benefit, as interpreted by the TRG, for deferred commission costs will likely be longer than the initial contract period.   We are continuing to evaluate the impact of our adoption of Topic 606 and our preliminary assessments are subject to change.

While we continue to assess the potential impacts of the new standard, including the areas described above, and anticipate this standard would not have a material impact on our consolidated financial statements, we do not know or cannot reasonably estimate quantitative information related to the impact of the new standard on our financial statements at this time.

In February 2016, the FASB issued ASU No. 2016-02, Leases (“Topic 842”), which requires lessees to recognize on the balance sheet a right-of-use asset, representing their right to use the underlying asset for the lease term, and a lease liability for all leases with terms greater than 12 months. The guidance also requires qualitative and quantitative disclosures designed to assess the amount, timing and uncertainty of cash flows arising from leases. The standard requires the use of a modified retrospective transition approach, which includes a number of optional practical expedients that entities may elect to apply. ASU 2016-02 is effective for the Company beginning January 1, 2019 and we are currently evaluating the impact that ASU 2016-02 will have on our consolidated financial statements.

In March 2016, the FASB issued ASU No. 2016-09, Compensation - Stock Compensation (“Topic 718”), Improvements to the Employee Share-Based Payment Accounting.  The standard is intended to simplify several areas of accounting for share-based compensation arrangements, including the income tax impact, classification on the statement of cash flows and forfeitures. We have adopted the pronouncement on a prospective basis making it effective for the Company as of January 1, 2017. Upon adoption, excess tax benefits from share-based award activity are reflected in the consolidated statements of income as a component of the provision for income taxes, whereas previously such income tax benefits were recognized as part of additional paid-in capital and could not be recognized until they were realized through a reduction in income taxes payable. The previously unrecognized excess tax benefits do not have an impact to the Company as they increase our net operating losses and valuation allowance by the same amount. We have elected to continue to record our stock compensation expense net of estimated forfeitures and not to account for forfeitures as they occur. The cash flow presentation of employee taxes paid will not apply to our Company as we do not withhold shares to cover employee taxes incurred relating to their stock transactions.

In January 2017, the Financial Accounting Standards Board (FASB) issued ASU 2017-04, Intangibles—Goodwill and Other (“Topic 350”): Simplifying the Test for Goodwill Impairment (ASU 2017-04), which eliminates step two from the goodwill impairment test. Under the amendments in ASU 2017-04, an entity should recognize an impairment charge for the amount by which the carrying amount of a reporting unit exceeds its fair value; however, the loss recognized should not exceed the total amount of goodwill allocated to that reporting unit. ASU 2017-04 is effective for us in our first quarter of fiscal 2020 on a prospective basis, and earlier adoption is permitted for goodwill impairment tests performed on testing dates after January 1, 2017. We are currently evaluating the impact of our pending adoption of ASU 2017-04 on our consolidated financial statements.

Realignment Expense

For the three months ended March 31, 2017, we incurred $1.4 million in realignment expense related to the consolidation of leased space at our corporate headquarters and severance costs.  Realignment expense resulting from the consolidation of leased space at our corporate headquarters is included in general and administrative expense.  The severance costs are included in cost of services

11

revenue, selling and marketing expense, research and development expense and general and administrative expense, based on the employees’ cost center assignments prior to termination.

Note 3. Net Loss Per Share

Earnings Per Share (ASC 260) defines unvested share-based payment awards that contain non-forfeitable rights to dividends as participating securities that should be included in computing EPS using the two-class method.  The Company’s unvested restricted stock awards qualify as participating securities.

Basic net loss per common share is calculated by dividing net loss allocated to common stockholders by the weighted average number of common shares outstanding during the reporting period. Diluted net loss allocated to common stockholders per share is calculated based on the weighted average number of common shares and dilutive potential common shares outstanding during the period. Dilutive potential common shares consist of the shares issuable upon the exercise of stock options and upon the vesting of restricted stock awards under the treasury stock method. In net loss periods, basic net loss per share and diluted net loss per share are identical since the effect of potential common shares is anti-dilutive and therefore excluded.

The following table sets forth the computation of basic and diluted net loss allocated to common stockholders per share (in thousands, except per share amounts):

	Three Months Ended March 31,
	2017			2016
Basic loss per common share:
Numerator:
Net loss	$	(1,731	)	$	(6,792	)
Net loss allocated to common stockholders	$	(1,731	)	$	(6,792	)
Denominator:
Basic weighted average shares outstanding	29,685			28,580
Net loss per basic common share	$	(0.06	)	$	(0.24	)
Diluted loss per common share:
Numerator:
Net loss	$	(1,731	)	$	(6,792	)
Net loss allocated to common stockholders	$	(1,731	)	$	(6,792	)
Denominator:
Basic weighted average shares outstanding	29,685			28,580
Effect of dilutive share-based awards	—			—
Diluted weighted average shares outstanding	29,685			28,580
Net loss per diluted common share	$	(0.06	)	$	(0.24	)

Antidilutive securities, which consist of stock options and restricted stock awards that are not included in the diluted net loss per share calculation, consisted of an aggregate of approximately 1,289,000 and 3,133,000 shares for the three months ended March 31, 2017 and 2016, respectively.

Note 4. Inventory

Inventory is comprised of hardware components, packaged software components and finished goods and is valued at the lower of cost or market, using the weighted average cost method.  The following table sets forth, by major classes, inventory as of March 31, 2017 and December 31, 2016 (in thousands):

	March 31, 2017		December 31, 2016
Inventory:
Components	$	1,309	$	1,004
Finished goods	1,151		1,202
Total inventory	$	2,460	$	2,206

12

Note 5. Prepaid Expense and Other Current Assets

Prepaid expenses and other current assets consist of the following (in thousands):

	March 31, 2017		December 31, 2016
Software licenses	$	1,950	$	1,529
Prepaid software maintenance	1,234		1,091
Payroll and employee-related expenses	18		394
Insurance	115		460
Other prepaid expenses and other current assets	1,463		1,376
Total prepaid expenses and other current assets	$	4,780	$	4,850

Note 6. Goodwill and Other Intangibles

We evaluate goodwill and indefinite-lived intangible assets for impairment on an annual basis, or more frequently if circumstances indicate impairment may have occurred, and there have been no impairment charges related to such assets through March 31, 2017.  We expect the balance of goodwill assigned to our products segment to be deductible for tax purposes while the balance of goodwill assigned to our subscription and professional services segments will not be deductible for tax purposes.

Intangible assets are amortized on a straight-line basis over their estimated useful lives, with the exception of customer relationships, which are amortized on a double-declining basis.  Amortization expense for intangible assets with finite lives was $0.4 million for both the three months ended March 31, 2017 and 2016. The following table summarizes cumulative amortization expense related to intangible assets subject to amortization as of March 31, 2017 and December 31, 2016 (in thousands):

	March 31, 2017							December 31, 2016
	Gross Costs		Accumulated Amortization			Net		Gross Costs		Accumulated Amortization			Net
Core technology	$	5,800	$	(4,188	)	$	1,612	$	5,800	$	(3,993	)	$	1,807
Customer relationships	6,475		(4,386		)	2,089		6,475		(4,276		)	2,199
Trade names	2,100		(1,542		)	558		2,100		(1,497		)	603
Covenant not-to-compete	200		(200		)	—		200		(194		)	6
Domain name	45		(13		)	32		45		(11		)	34
Total	$	14,620	$	(10,329	)	$	4,291	$	14,620	$	(9,971	)	$	4,649

The following table summarizes the estimated remaining amortization expense through 2021 and thereafter (in thousands):

Year ending	Amortization Expense
2017	$	1,051
2018	1,401
2019	825
2020	539
2021	430
Thereafter	45
Total amortization expense	$	4,291

13

Note 7. Debt Obligations

On August 29, 2014, we entered into a three year, Senior Secured Revolving Line of Credit (“Revolver”) with a bank. We are obligated to pay a commitment fee of $0.2 million over the three-year term of the Revolver.

The maximum principal amount that may be outstanding at any given time under the Revolver, which includes up to $3.0 million of standby letters of credit, is $10.0 million. Borrowing availability is calculated as 80% of eligible accounts receivable, with a maximum of $10.0 million.  Any borrowings under the Revolver would be collateralized by substantially all of our assets, as well as pledges of capital stock.

The Revolver requires that, if we suffer an event of default or have borrowed more than 75% of the maximum principal amount permitted to be outstanding, the Company maintains an adjusted quick ratio of at least 1.15:1.  The adjusted quick ratio is calculated by dividing quick assets (cash less restricted cash plus accounts receivable) by current liabilities (current liabilities plus outstanding standby letter of credit less the current portion of deferred revenue).  Borrowings under the Revolver bear interest at a floating rate ranging from 1.25% to 3.25% above the prime rate depending on the Company’s adjusted quick ratio.

As of March 31, 2017, the Company was in compliance with all the covenants of the Revolver.  The Company had letters of credit outstanding against the Revolver in the amount of $1.2 million, resulting in the maximum available borrowing under the Revolver to be $8.7 million.  As of March 31, 2017, the balance outstanding under the Revolver was zero.  The Company’s adjusted quick ratio was 2.14:1.  During periods when the adjusted quick ratio is below 1.5:1, any collections received by the Company in its collateral account would be applied to outstanding loan balances before being remitted to the Company’s operating account.    Amounts in the collateral account would be transferred to the Company’s operating account after any loan balance has been paid in full.

Note 8. Employee Benefit Plans

At March 31, 2017, approximately 1.1 million shares were available for grant as options or nonvested share awards under the Guidance Software, Inc. Second Amended and Restated 2004 Equity Incentive Plan (the “Plan”).

Stock Options

The terms of the options granted under the Plan are determined at the time of grant, and generally vest 25% annually over a four-year service period and typically must be exercised within 10 years from the date of grant.  A summary of stock option activity follows:

	Number of Options		Weighted Average Exercise Price		Weighted Average Remaining Contractual Term (in years)	Aggregate Intrinsic Value
Outstanding, December 31, 2016	1,765,000		$	6.17	7.3	$	2,909,000
Granted	—		$
Exercised	(21,000	)	$	3.99
Forfeited or expired	(30,000	)	$	9.35
Outstanding, March 31, 2017	1,714,000		$	6.14	7.1	$	1,128,000
Exercisable, March 31, 2017	674,000		$	7.60	4.9	$	329,000

We define in-the-money options at March 31, 2017 as options that had exercise prices that were lower than the $5.90 fair market value of our common stock at that date.  The aggregate intrinsic value of options outstanding at March 31, 2017 is calculated

14

as the difference between the exercise price of the underlying options and the fair market value of our common stock for the 981,000 shares that were in-the-money at that date, 288,000 of which were exercisable.

Restricted Stock Awards

We issue restricted stock awards to certain directors, officers and employees.  Compensation expense for such awards, based on the fair market value of the awards on the grant date, is recorded during the vesting period.  Restricted stock awards generally vest 25% annually over a four-year service period.  A summary of restricted stock awards activity follows:

	Number of Shares		Weighted Average Fair Value
Outstanding, December 31, 2016	2,888,000		$	5.25
Granted	12,000		6.77
Granted adjustment (performance shares)	586,000		4.37
Vested	(1,032,000	)	4.78
Forfeited	(43,000	)	6.37
Outstanding, March 31, 2017	2,411,000		5.22

The total grant date fair value of shares vested under such grants during the three months ended March 31, 2017 was 4,929,000.

On March 18, 2016, we granted approximately 586,000 performance-based restricted stock awards to certain members of our executive team, with a fair market value of $4.37 per share. The performance criteria were based on the achievement of certain revenue levels for the year ending December 31, 2016.  Depending on the revenue level achieved, the number of shares that would vest ranged from 10% to 200% of the approximately 586,000 shares granted. As of December 31, 2016, the Company achieved 200% of the revenue target level and as a result approximately 586,000 shares vested and another approximately 586,000 shares were granted in February, 2017. The February grant is included in our restricted stock awards outstanding as of March 31, 2017 and will vest on December 31, 2017, subject to continued employment of the executive.  These performance-based restricted stock awards were considered for calculating the diluted shares outstanding balance at March 31, 2017.  However, as the Company is in a net loss position for the three months ended March 31, 2017, the performance-based restricted stock awards were considered anti-dilutive and therefore excluded from the calculation.

Share-Based Compensation

We account for share-based compensation in accordance with Compensation-Stock Compensation (ASC 718).  Compensation expense for stock options is recognized using the Black-Scholes option pricing model to determine the grant date fair value of share-based payments and recognize that cost, net of an estimated forfeiture rate, as compensation expense on a straight-line basis over the vesting period. Stock awards generally vest 25% annually over a four-year service period.  The determination of the grant date fair value of share-based awards using that model is affected by our stock price as well as assumptions regarding a number of complex and subjective variables. These variables include the estimated number of years that we expect employees to hold their stock options (the option “expected term”) and our expected stock price volatility, risk-free interest rates and dividends to be paid on our stock over that term.

The fair values of stock options granted under the Second Amended and Restated Plan were estimated at the date of grant using the Black-Scholes option pricing model and the following weighted average assumptions (note, no options were granted during the three months ended March 31, 2017):

	Three Months Ended March 31, 2016
Risk-free interest rate	1.3		%
Dividend yield	—		%
Expected life (years)	5.68
Volatility	46.56		%
Weighted average grant date fair value	$	1.68

15

When historical data is available and relevant, the expected term of options granted is determined by calculating the average term from historical stock option exercise experience.  The volatility of our common stock is estimated at the date of grant based on the volatility of our publicly traded common stock over the expected term of the options granted.  The volatility is calculated based on the adjusted close price each day from a composite index. The risk-free interest rate used in option valuation is based on the implied yield in effect at the time of each option grant, based on US Treasury zero-coupon issues with equivalent expected terms. We use a dividend yield of zero in the Black-Scholes model, as we have no expectation we will pay any cash dividends on our common stock in the foreseeable future. Compensation-Stock Compensation (ASC 718) also requires that we estimate forfeitures at the time of grant and revise those estimates in subsequent periods if actual forfeitures differ from those estimates. We use historical data to estimate pre-vesting option forfeitures and record share-based compensation expense only for those awards that are expected to vest. Quarterly changes in the estimated forfeiture rate can potentially have a significant effect on reported share-based compensation, as the cumulative effect of adjusting the forfeiture rate for all expense amortization after the grant date is recognized in the period the forfeiture estimate is changed.

The following table summarizes the share-based compensation expense we recorded (in thousands):

	Three Months Ended March 31,
	2017		2016
Stock option awards	$	198	$	160
Restricted stock awards	1,935		1,162
Total share-based compensation expense	$	2,133	$	1,322

The following table summarizes where the share-based compensation expense was recorded by income statement line item (in thousands):

	Three Months Ended March 31,
	2017		2016
Cost of product revenue	$	10	$	15
Cost of services revenue	73		171
Cost of maintenance revenue	20		38
Selling and marketing expense	858		110
Research and development expense	566		427
General and administrative expense	606		561
Total share-based compensation expense	$	2,133	$	1,322

There is $0.8 million of share-based compensation expense related to the performance-based restricted stock awards in our total restricted stock awards share-based compensation expense for the three months ended March 31, 2017.

As of March 31, 2017, there was approximately $2.0 million of total unrecognized share-based compensation cost related to stock options that we expect to be recognized over a weighted-average period of 2.6 years and approximately $9.0 million of total unrecognized share-based compensation cost related to restricted stock awards that is expected to be recognized over a weighted-average period of 2.3 years.  For awards outstanding at March 31, 2017, we expect to record approximately $0.6 million and $3.9 million in share-based compensation for the remainder of fiscal year 2017 related to stock options and restricted stock awards, respectively.

Note 9. Income Taxes

We account for income taxes in accordance with Income Taxes (ASC 740).  Deferred income taxes are recorded for the expected tax consequences of temporary differences between the tax bases of assets and liabilities for financial reporting purposes and amounts recognized for income tax purposes.  We record a valuation allowance to reduce our deferred tax assets to the amount of future tax benefit that is more likely than not to be realized.  As of March 31, 2017, we have recorded a valuation allowance against our net U.S. deferred tax assets resulting in a carrying value of zero.

We have recorded an income tax provision for the three months ended March 31, 2017 of $69,000 as compared to $53,000 for the same period in 2016.  Our income tax provision for the three months ended March 31, 2017 differs from the U.S. statutory rate of 34% primarily due to state taxes, foreign taxes, federal alternative minimum tax, the tax impact of certain share-based compensation charges, and the impact of providing a valuation allowance against research and development credits and the net United States deferred tax assets.  For the three months ended March 31, 2016, our income tax provision differs from the U.S. statutory rate of 34% primarily due to state taxes, foreign taxes, the tax impact of certain share-based compensation charges, and the impact of providing a valuation allowance against research and development credits and the net U.S. deferred tax assets.

16

Note 10. Accrued Liabilities

Accrued liabilities consist of the following (in thousands):

	March 31, 2017		December 31, 2016
Payroll and related benefits	$	5,974	$	7,138
Sales tax audit accrual	1,256		1,243
Software licenses	992		1,111
Deferred rent and rent incentives	661		808
Lease obligations	1,197		562
Professional fees	221		522
Insurance	229		345
Other accrued liabilities	874		912
Total accrued liabilities	$	11,404	$	12,641

Note 11. Fair Value Measurements

In accordance with Fair Value Measurements and Disclosures (ASC 820), we measure our financial assets and liabilities at fair value on a recurring basis.  ASC 820 requires disclosure that establishes a framework for measuring fair value and expands disclosure about fair value measurements.  Under this standard, fair value is defined as the price that would be received in exchange for selling an asset or paid to transfer a liability (i.e., the “exit price”) in an orderly transaction between market participants at the measurement date.  ASC 820 establishes a hierarchy for inputs used in measuring fair value that minimizes the use of unobservable inputs by requiring the use of observable market data when available.  Observable inputs are inputs that market participants would use in pricing the asset or liability based on active market data.  Unobservable inputs would be inputs that reflect our assumptions about the assumptions market participants would use in pricing the asset or liability based on the best information available in the circumstances.  The statement requires fair value measurements be classified and disclosed in one of the following three categories:

Level 1:Unadjusted quoted prices in active markets that are accessible at the measurement date for identical, unrestricted assets and liabilities.

Level 2:Quoted prices in markets that are not active or financial instruments for which all significant inputs are observable, either directly or indirectly, and corroborated by market data.

Level 3:Prices or valuations that require inputs that are both significant to the fair value measurement and unobservable.

The following table sets forth, by level within the fair value hierarchy, financial assets and liabilities that are accounted for at fair value on a recurring basis as of March 31, 2017 and December 31, 2016 (in thousands):

	Fair Value Measurements at March 31, 2017
	Total		Level 1		Level 2		Level 3
Assets:
Money market accounts	205		205		—		—
Total assets	$	205	$	205	$	—	$	—

	Fair Value Measurements at December 31, 2016
	Total		Level 1		Level 2		Level 3
Assets:
Money market accounts	205		205		—		—
Total assets	$	205	$	205	$	—	$	—

Note 12. Commitments and Contingencies

Third-party Software Licenses

In February 2016, the Company entered into a $1.7 million third-party software license agreement authorizing the Company to integrate software as a component of its products through February 2020.  The agreement also provides for payment by the Company of $0.3 million for two years of maintenance and support.  The $2.0 million is payable in five installments, of which $1.5 million was payable during the year ending December 31, 2016 and $0.5 million is payable during the first six months of 2017.  As of March 31, 2017, the outstanding balance was $0.3 million.

17

Letter of Credit

As of March 31, 2017 we had a $1.2 million letter of credit outstanding against our Senior Secured Revolving Line of Credit related to the lease of our corporate headquarters.

Legal Matters

On May 20, 2011, MyKey Technology Inc. (“MyKey”) filed a complaint against the Company for patent infringement in the United States District Court for the District of Delaware  (the “District Court Case”).  The complaint alleged that certain of our data acquisition forensic hardware products that we acquired as a result of our acquisition of certain assets of Tableau, LLC (“Tableau”) infringe three of MyKey’s patents relating to write blocking, duplication and data removal technologies, respectively.

On July 22, 2011, MyKey also filed a complaint with the United States International Trade Commission (the “ITC Case”), alleging infringement by the Company and certain other parties of the three patents discussed in the preceding paragraph and requesting that the ITC commence an investigation pursuant to Section 337 of the Tariff Act of 1930.  On December 28, 2012, the ITC released a final determination and Order holding that no violation of Section 337 of the Tariff Act of 1930 occurred.  This Order effectively ended the ITC Case in the Company’s favor.

On June 16, 2016, MyKey and the Company agreed to a settlement agreement for $2.3 million, whereby in exchange for a payment by the Company, which the Company has paid, the Company received a full release of all claims for patent infringement against the Company.  The settlement payment was recorded to general and administrative expenses.

On July 29, 2016, the Company entered into a settlement agreement with TEFKAT LLC (formerly known as Tableau LLC) and its sole shareholder, Robert Botchek, related to a breach of contract stemming from the MyKey matter.  The agreement requires TEFKAT LLC to pay the Company a settlement amount of $1.2 million, which has been received by the Company.  The settlement received was recorded as an offset to the $2.3 million MyKey settlement payment, resulting in a net effect of $1.1 million recorded in general and administrative expenses.

From time to time, we may become involved in various other lawsuits and legal proceedings that arise in the ordinary course of business.  Litigation is subject to inherent uncertainties, and an adverse result in these or other matters may arise from time to time that may harm our business.  We are not currently aware of any such other legal proceedings or claims that are likely to have a material impact on our business.

Indemnifications

We have agreed to indemnify our directors and executive officers for costs associated with any fees, expenses, judgments, fines and settlement amounts incurred by them in any action or proceeding to which any of them is, or is threatened to be, made a party by reason of their services in their role as a director or officer.

Note 13. Segment Information

We have adopted Segment Reporting (ASC 280) requiring segmentation based on our internal organization and reporting of revenue and other performance measures. Our segments are designed to allocate resources internally and provide a framework to determine management responsibility.  Operating segments are defined as components of an enterprise about which discrete financial information is available that is evaluated regularly by the chief operating decision maker, or decision making group, in deciding how to allocate resources and in assessing performance.  Our chief operating decision maker is our Chief Executive Officer.  We have five operating segments, as summarized below:

·Products segment—Includes EnCase® Endpoint Investigator, EnCase® Endpoint Security, EnCase® eDiscovery, EnCase® Risk Manager, EnCase® Forensic and appliance sales.

·Subscription segment—Includes subscription services for cloud-based document review and production software.

·Professional services segment—Performs consulting services and implementations.

·Training segment—Provides training classes by which we train our customers to effectively and efficiently use our software products.

18

·   Maintenance segment—Includes maintenance related services. We do not separately allocate operating expenses to these segments, nor do we allocate specific assets, with the exception of goodwill, to these segments. Therefore, the segment information reported includes only revenues, cost of revenues and segment profit.  The following tables present the results of operations for each operating segment (in thousands):

	Three Months Ended March 31, 2017
	Products		Subscription		Professional services		Training		Maintenance		Total
Revenues	$	8,867	$	1,588	$	4,383	$	1,869	$	10,079	26,786
Cost of revenues	1,763		569		2,903		1,357		743		7,335
Segment profit	$	7,104	$	1,019	$	1,480	$	512	$	9,336	19,451
Total operating expenses											21,121
Operating loss											$	(1,670	)

	Three Months Ended March 31, 2016
	Products		Subscription		Professional services		Training		Maintenance		Total
Revenues	$	7,458	$	1,578	$	4,828	$	2,103	$	9,832	$	25,799
Cost of revenues	1,956		655		3,495		1,485		606		8,197
Segment profit	$	5,502	$	923	$	1,333	$	618	$	9,226	17,602
Total operating expenses											24,348
Operating loss											$	(6,746	)

19

Revenues, classified by the major geographic areas in which we operate, are as follows (in thousands):

	Three Months Ended March 31,
	2017		2016
Revenues
United States	$	20,980	$	19,815
Europe	3,838		3,455
Asia	832		1,363
Other	1,136		1,166
	$	26,786	$	25,799

Note 14. Subsequent Event

Third-party Software License

In April 2017, the Company entered into a $3.3 million third-party software license agreement for a cloud-based solution to host data for customers of its EnCase eDiscovery Review product. The first year installment is $0.5 million and is due in equal quarterly payments starting in April 2017.  The second year installment is $1.0 million, due in full in April 2018, and the third year installment is $1.8 million, due in full in April 2019, provided certain conditions are met.

20

Item 2.  Management’s Discussion and Analysis of Financial Condition and Results of Operations

The following discussion of our financial condition and results of operations should be read together with the financial statements and related notes that are included elsewhere in this Quarterly Report. This discussion may contain forward-looking statements based upon current expectations that involve risks and uncertainties. Our actual results may differ materially from those anticipated in these forward-looking statements as a result of various factors, including those set forth in this Quarterly Report under “Risk Factors,” in our Annual Report on Form 10-K for the year ended December 31, 2016 under “Risk Factors” and in other parts of this Quarterly Report.

Overview

We develop and provide leading software and hardware solutions for digital investigations, including EnCase Endpoint Security, EnCase eDiscovery, and EnCase Endpoint Investigator, which are network-enabled products primarily for corporations and government agencies, and EnCase Forensic, a desktop-based product primarily for law enforcement agencies and digital investigators.

Factors Affecting Our Results of Operations

There are a number of trends that may affect our business and our industry. Some of these trends or other factors include:

·Legislative and regulatory developments. Our digital investigation solutions allow law enforcement agencies, government organizations and corporations to conduct investigations within the legal and regulatory framework.  Historically, the implementation of new laws and regulations surrounding digital investigations has helped create demand for our products. Future changes in applicable laws or regulations could enhance or detract from the desirability of our products.

·Information technology budgets. Deployment of our solutions may require substantial capital expenditures by our customers. Budgets for information technology-related capital expenditures at corporations and all levels of government organizations are typically cyclical in nature, with generally higher budgets in times of improving economic conditions and lower budgets in times of economic slowdowns.

·Law enforcement agency budgets. We sell our EnCase® Forensic products and training services primarily to law enforcement agencies.  Because of the limited nature of law enforcement budgets, funds are typically initially allocated toward solving issues perceived to be the most pressing.  Sales of our products could be impacted by changes in the budgets of law enforcement agencies or in the relative priority assigned to digital law enforcement investigations.

·Prevalence and impact of hacking incidents and spread of malicious software. The increasing sophistication of hacking attacks on government and private networks and the global spread of malicious software, such as viruses, worms and rootkits, have increased the focus of corporations and large government organizations on digital investigations and other aspects of network security, which has, in turn, increased demand for our products.  Future changes in the number and severity of such attacks or the spread of malicious software could have an effect on the demand for our products.

·Unpredictability of revenues. We experience unpredictability in our revenues, primarily from our customers’ budgeting cycles. The federal government’s budget year ends in the third calendar quarter of the year and a majority of corporate budget years end in the fourth calendar quarter of the year.  In addition, our customers also tend to make software purchases near the end of a particular quarter, which tends to make our revenues for a particular quarter unpredictable for a significant portion of that quarter.  We expect that this unpredictability in our revenues within particular quarterly periods will continue for the foreseeable future.

·Amount of commercial litigation. Because commercial litigation often involves eDiscovery, an increase in commercial litigation could increase demand for our products and services, while a decrease in commercial litigation could decrease demand.

Critical Accounting Policies and Estimates

In preparing our financial statements, we make estimates, assumptions and judgments that can have a significant impact on our net revenue, operating income or loss and net income or loss, as well as on the value of certain assets and liabilities on our balance sheet.  We believe that the estimates, assumptions and judgments involved in the accounting policies described in “Management’s Discussion and Analysis of Financial Condition and Results of Operations” in Item 7 of our Annual Report on Form 10-K for the year

21

ended December 31, 2016 have the greatest potential impact on our financial statements, so we consider them to be our critical accounting policies and estimates.

Results of Operations

The following table sets forth our results of operations for the three months ended March 31, 2017 and 2016, respectively, expressed as a percentage of total revenues:

	Three Months Ended March 31,
	2017		2016
Revenues:
Product revenue	33.1	%	28.9	%
Services revenue	29.3		33.0
Maintenance revenue	37.6		38.1
Total revenues	100.0		100.0
Cost of revenues:
Cost of product revenue	6.6		7.6
Cost of services revenue	18.0		21.8
Cost of maintenance revenue	2.8		2.3
Total cost of revenues	27.4		31.7
Gross profit	72.6		68.3
Operating expenses:
Selling and marketing	37.1		40.7
Research and development	20.5		24.2
General and administrative	16.9		24.0
Depreciation and amortization	4.3		5.5
Total operating expenses	78.8		94.4
Operating loss	(6.2	)%	(26.1	)%
Other income and expense:
Interest income	—		—
Interest expense	—		—
Other income, net	—		—
Total other income and expense	—		—
Loss before income taxes	(6.2	)%	(26.1	)%
Income tax provision	0.3		0.2
Net loss	(6.5	)%	(26.3	)%

22

The following table sets forth share-based compensation expense recorded in each of the respective periods (in thousands):

	Three Months Ended March 31,
	2017		2016
Non-cash Share-based Compensation Data (1):
Cost of product revenue	$	10	$	15
Cost of services revenue	73		171
Cost of maintenance revenue	20		38
Selling and marketing	858		110
Research and development	566		427
General and administrative	606		561
Total non-cash share-based compensation	$	2,133	$	1,322

(1)Non-cash share-based compensation recorded in the three month periods ended March 31, 2017 and 2016 relates to stock options and restricted share awards granted to employees measured under the fair value method.  See Note 8 to the condensed consolidated financial statements.

Comparison of Results of Operations for the Three Months Ended March 31, 2017 and 2016

Sources of Revenue

Our software product sales transactions typically include the following elements: (i) a software license fee paid for the use of our products under a perpetual license term, or for a specific term; (ii) an arrangement for first-year support and maintenance, which includes unspecified software updates, upgrades and post-contract support; and (iii) professional services for installation, implementation, consulting and training.  We also generate revenues from cloud-based document review and production software sold as subscription services.  We sell our software products and services through a combination of our direct sales force and resellers.  We sell our hardware products primarily through resellers.

	Three Months Ended March 31,
(Dollars in thousands)	2017		Change %	2016
Product revenue	$	8,867	19%	$	7,458
Services revenue	7,840		(8%)	8,509
Maintenance revenue	10,079		3%	9,832
Total revenues	$	26,786	4%	$	25,799

Product Revenue

We generate product revenue principally from two product categories: enterprise products and forensic products.  Revenue from our enterprise products includes sales related to licenses from our Forensic Security Suite of products which are comprised of EnCase Endpoint Security, EnCase Endpoint Investigator and EnForce Risk Manager, as well as sales of our EnCase eDiscovery product.  Revenue of our forensic products includes sales related to EnCase Forensic and forensic appliance sales.  During the first two quarters of each fiscal year, we typically experience lower levels of product sales due to the seasonal budgetary cycles of our customers.  The third quarter is typically the strongest quarter for sales to our federal government customers. Typically, sales to our corporate customers are highest in the fourth quarter.

Product revenue increased by $1.4 million, or 19%, from $7.5 million to $8.9 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The increase in product revenue was primarily a result of a $2.1 million increase in enterprise product revenue due to strong sales of our Forensic Security Suite of products, partially offset by a $0.7 million decrease in forensic software revenue due to an increase in the number of competing forensic solutions available in the market.

Services Revenue

We generate services revenue from professional services, training and subscriptions of our EnCase eDiscovery Review product.  Our professional services provides various consulting services to our clients, including network security incident response, e-discovery, civil/criminal digital investigation, implementation services, as well as a software advisory program. Our training services

23

educate students in computer forensics principles and the use of our EnCase software products and methodology. Subscription service customers have the right to access our cloud-based document review and production software; however, they may not take possession of the software at any time during the term of the agreement. We generate subscription revenue primarily from corporate or large enterprise customers who typically use our cloud-based software to host multiple legal cases on an ongoing basis.

Services revenue decreased $0.7 million, or 8%, from $8.5 million to $7.8 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The decrease is primarily due to a $0.4 million decrease in professional services related to a decline in ediscovery service engagements and a $0.3 million decrease in training revenue due to lower forensic software sales.

Maintenance Revenue

Maintenance revenue is generated from customers who purchase software maintenance services with new product licenses and maintenance renewals for on-premise products. Software maintenance includes software updates and upgrades, telephone and e-mail support, as well as self-service on our website.

Maintenance revenue for the three months ended March 31, 2017 increased $0.3 million, or 3%, from $9.8 million to $10.1 million as compared to the same period in 2016.  The increase was primarily due to an increase in software license revenue and higher renewal rates of maintenance contracts during the quarter as compared to the same period in 2016.

Cost of Revenues

	Three Months Ended March 31,
(Dollars in thousands)	2017			Change %	2016
Cost of product revenue	$	1,763		(10%)	$	1,956
Cost of services revenue	4,829			(14%)	5,635
Cost of maintenance revenue	743			23%	606
Total cost of revenues	$	7,335		(11%)	$	8,197
Share-based compensation included above:
Cost of product revenue	$	10			$	15
Cost of services revenue	$	73			$	171
Cost of maintenance revenue	$	20			$	38
Gross Margin Percentage
Products	80.1		%		73.8		%
Services	38.4		%		33.8		%
Maintenance	92.6		%		93.8		%
Total	72.6		%		68.2		%

Cost of Product Revenue

Cost of product revenue consists principally of the cost of producing our software products, including third party software royalties, the cost of manufacturing our hardware appliances and product distribution costs, including the cost of packaging, shipping, customs duties, and, to a lesser extent, compensation and related overhead expenses.  While these costs are primarily variable with respect to sales volumes, they remain low in relation to the revenues generated and result in higher gross margins than our services and training businesses.  Our gross margins can be affected by product mix, as our enterprise products are generally higher margin products than our forensic products, which include software and hardware.

Cost of product revenue decreased $0.2 million, or 10%, from $2.0 million to $1.8 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The decrease is primarily due to $0.2 million lower appliance costs as a result of lower appliance sales during the three months ended March 31, 2017, as compared to the same period in 2016.

24

Cost of Services Revenue

Cost of services revenue consists principally of employee compensation costs, including share-based compensation and related overhead, travel, facilities cost, software maintenance paid to third party vendors, and SaaS hosting infrastructure costs associated with professional services, training, and subscription services.

Cost of services revenue decreased $0.8 million, or 14%, from $5.6 million to $4.8 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The decrease was primarily due to a $0.7 million reduction in cost of professional services revenue due to reduced headcount and a $0.1 million decrease in cost of training revenue.

Cost of Maintenance Revenue

Cost of maintenance revenue includes third-party outsourcing fees, employee compensation costs for customer technical support and related overhead costs.

Total cost of maintenance revenue increased $0.1 million, or 23%, from $0.6 million to $0.7 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The increase was primarily due to an increase in employee-related costs and certain facilities costs related to facilities closures.

25

Operating Expenses

	Three Months Ended
	March 31,
(Dollars in thousands)	2017			Change %	2016
Selling and marketing expenses	$	9,950		(5%)	$	10,501
Research and development expenses	$	5,481		(12%)	$	6,242
General and administrative expenses	$	4,532		(27%)	$	6,190
Depreciation and amortization expenses	$	1,158		(18%)	$	1,415
Share-based compensation included above:
Selling and marketing expenses	$	858			$	110
Research and development expenses	$	566			$	427
General and administrative expenses	$	606			$	561
As a percentage of revenue:
Selling and marketing expenses	37.1		%		40.7		%
Research and development expenses	20.5		%		24.2		%
General and administrative expenses	16.9		%		24.0		%
Depreciation and amortization expenses	4.3		%		5.5		%

Selling and Marketing Expenses

Selling and marketing expenses consist primarily of personnel costs and costs related to our sales force and marketing staff. Selling and marketing expenses also include expenses relating to advertising, brand building, marketing promotions and trade show events (net of amounts received from sponsors and participants), product management, and travel and allocated overhead.

Selling and marketing expenses decreased $0.5 million, or 5%, from $10.5 million to $10.0 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The decrease was primarily due to $0.9 million of expenses related to the realignment of our sales leadership and operations in the prior year period that did not reoccur in the current period, offset by a $0.4 million increase in employee-related expenses primarily related to increased sales commissions and stock-based compensation.

Research and Development Expenses

Research and development expenses consist primarily of compensation, including share-based compensation and related overhead expenses.

Research and development expenses decreased $0.8 million, or 12%, from $6.2 million to $5.5 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The decrease was primarily due to a $0.5 million decrease in compensation and other employee-related costs due to reduced headcount, a $0.3 million decrease in realignment expense recorded during the first quarter of 2016 that did not reoccur in the current period, offset by a $0.2 million increase in facilities costs related to the consolidation of our corporate headquarters office space in the current period.

General and Administrative Expenses

General and administrative expenses consist of personnel and related costs for accounting, legal, information systems, human resources and other administrative functions.  In addition, general and administrative expenses include professional service fees, bad debt expense, and other corporate expenses and related overhead.

General and administrative expenses decreased $1.7 million, or 27%, from $6.2 million to $4.5 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The decrease was primarily due to a $1.0 million decrease in legal fees related to the proxy contest with the Company’s former CTO and former Chairman of the Board that occurred in the prior period and did not reoccur in the current period, a $0.9 million decrease in rent and facilities costs resulting from the closure of certain of our facilities, a $0.5 million decrease in employee-related expenses due to decreased headcount and a $0.2 million decrease in audit fees, offset by a $1.1 million increase in realignment expense related to the consolidation of our corporate headquarters office space in the current period.

26

Depreciation and Amortization Expenses

Depreciation and amortization expenses consist of depreciation and amortization of our leasehold improvements, furniture, computer hardware and software, and intangible assets.

Depreciation and amortization expenses decreased $0.2 million, or 18%, from $1.4 million to $1.2 million for the three months ended March 31, 2017, as compared to the same period in 2016.  The decrease was primarily due to certain software assets being fully depreciated.

Other Income (Expense)

Total other income (expense) consists of interest earned on cash balances, interest expense paid and other miscellaneous income and expense items.  Other income (expense) increased $1,000, or 20%, from $7,000 to $8,000 for the three months ended March 31, 2017, compared to the same period in 2016.  The increase was due to a $11,000 decrease in interest income and a $15,000 decrease in other income, net, offset by a $5,000 increase in interest expense.

Income Tax Provision

We have recorded an income tax provision for the three months ended March 31, 2017 of $69,000 as compared to $53,000 for the same period in 2016.  Our income tax provision for the three months ended March 31, 2017  differs from the U.S. statutory rate of 34% primarily due to state taxes, foreign taxes, federal alternative minimum tax, the impact of certain share-based compensation charges, and the impact of providing a valuation allowance against research and development credits and the net United States deferred tax assets.  For the three months ended March 31, 2016, our income tax provision differs from the U.S. statutory rate of 34% primarily due to state taxes, foreign taxes, the tax impact of certain share-based compensation charges, and the impact of providing a valuation allowance against research and development credits and the net U.S. deferred tax assets.

Liquidity and Capital Resources

Since inception, we have largely financed our operations from the cash flow generated from the sale of our products and services, as well as proceeds from our initial public offering.  As of March 31, 2017, we had $17.8 million in cash and cash equivalents.  We believe that our cash flow from operations and our cash and cash equivalents are sufficient to fund our working capital and capital expenditure requirements for at least the next twelve months.

27

Changes in Cash Flow

We generate cash from operating activities from cash collections related to the sale of our products and services.

Net cash provided by operating activities was $8.7 million for the three months ended March 31, 2017 as compared to $2.3 million for the same period in 2016.  The net cash provided by operating activities for the three months ended March 31, 2017 included a net loss of $1.7 million, $2.1 million in share-based compensation, $1.2 million in depreciation and amortization and $1.2 million in loss on disposal of fixed assets, a $5.6 million decrease in trade receivables and a $3.5 million increase in deferred revenues, offset by a $2.0 million decrease in accrued liabilities.  This compares to net cash provided by operating activities in the same period in 2016 which included a $6.8 million net loss, $1.4 million in depreciation and amortization, $1.3 million in share-based compensation, a $6.8 million decrease in trade receivables and a $2.0 million increase in deferred revenues, offset by a $2.7 million increase in prepaid expenses and other assets.

Net cash used in investing activities was $0.1 million for the three months ended March 31, 2017, as compared to $0.8 million for the same period in 2016.  The decrease in cash used in investing activities was primarily due to the purchase of property and equipment related to technology equipment during the three months ended March 31, 2016, that did not reoccur during the same period in 2017.

Net cash used in financing activities was $3.4 million for the three months ended March 31, 2017, as compared to $19,000 for the same period in 2016.  The increase in cash used in financing activities was primarily due to the repayment of $3.5 million of borrowings on the line of credit during the three months ended March 31, 2017, which did not occur in the same period in 2016.

On August 29, 2014, we entered into a three year, Senior Secured Revolving Line of Credit (“Revolver”) with a bank. We are obligated to pay a commitment fee of $0.2 million over the three year term of the Revolver.

The maximum principal amount that may be outstanding at any given time under the Revolver, which includes up to $3.0 million of standby letters of credit, is $10.0 million. Borrowing availability is calculated as 80% of eligible accounts receivable, with a maximum of $10.0 million.  Any borrowings under the Revolver would be collateralized by substantially all of our assets, as well as pledges of capital stock.

The Revolver requires that, if we suffer an event of default or have borrowed more than 75% of the maximum principal amount permitted to be outstanding, the Company maintains an adjusted quick ratio of at least 1.15:1.  The adjusted quick ratio is calculated by dividing quick assets (cash less restricted cash plus accounts receivable) by current liabilities (current liabilities plus outstanding standby letter of credit less the current portion of deferred revenue).  Borrowings under the Revolver bear interest at a floating rate ranging from 1.25% to 3.25% above the prime rate depending on the Company’s adjusted quick ratio.

As of March 31, 2017, the Company was in compliance with all the covenants of the Revolver.  The Company had letters of credit outstanding against the Revolver in the amount of $1.2 million, resulting in the maximum available borrowing under the Revolver to be $8.7 million.  As of March 31, 2017, the balance outstanding under the Revolver was zero.  The Company’s adjusted quick ratio was 2.14:1.  During periods when the adjusted quick ratio is below 1.5:1, any collections received by the Company in its collateral account would be applied to outstanding loan balances before being remitted to the Company’s operating account.    Amounts in the collateral account would be transferred to the Company’s operating account after any loan balance has been paid in full.

Contractual Obligations and Commitments

In February 2016, the Company entered into a $1.7 million third-party software license agreement authorizing the Company to integrate third-party software as a component of its products through February 2020.  The agreement also required payment of $0.3 million by the Company for two years of maintenance and support.  The $2.0 million is payable in five installments, of which the outstanding balance at March 31, 2017 is $0.3 million.

28

Off-Balance Sheet Arrangements

At March 31, 2017, we had no off-balance sheet arrangements as defined in Item 303(a)(4) of the SEC’s Regulation S-K.  We do not have material relationships or transactions with persons or entities that derive benefits from their non-independent relationship with us or our related parties except as disclosed in this report.

Item 3.Quantitative and Qualitative Disclosure about Market Risk

Market Risk. Market risk represents the risk of loss that may impact our financial position due to adverse changes in financial market prices and rates.  Our market risk exposure is primarily a result of fluctuations in foreign exchange rates, interest rates and credit risk.  We do not hold or issue financial instruments for trading purposes.

Foreign Currency Risk. To date, substantially all of our international sales have been denominated in US dollars, and therefore, the majority of our revenues are not subject to foreign currency risk.  Our operating expenses and cash flows are subject to fluctuations due to changes in foreign currency exchange rates, but such changes have historically had relatively little impact on our operating results and cash flows.  A strengthening of the dollar could make our products and services less competitive in foreign markets and therefore could reduce our revenues. In the future, an increased portion of our revenues and costs may be denominated in foreign currencies.  We do not enter into derivative instrument transactions for trading or speculative purposes.

Interest Rate Risk.  Our investment portfolio, consisting of highly liquid debt instruments of the US government at March 31, 2017, is subject to interest rate risk.  The fair value of our investment portfolio would not be significantly impacted by either a 100 basis point increase or decrease in interest rates due mainly to the short-term nature of our investment portfolio.

Item 4.Controls and Procedures

Management, with the participation of the President and Chief Executive Officer and Chief Financial Officer, has performed an evaluation of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) of the Securities Exchange Act of 1934).  This evaluation includes consideration of the controls, processes and procedures that are designed to ensure that information required to be disclosed by us in the reports we file under the Securities Exchange Act of 1934 is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and that such information is accumulated and communicated to our management, including our President and Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure. Based on such evaluation, our President and Chief Executive Officer and Chief Financial Officer concluded that, as of March 31, 2017, our disclosure controls and procedures were effective.

Changes in Internal Control Over Financial Reporting

There have been no changes in our internal control over financial reporting during the three months ended March 31, 2017 that have materially affected, or are reasonably likely to materially affect, our internal controls over financial reporting.

29

PART II. OTHER INFORMATION

Item 1.Legal Proceedings

The information contained in Note 12 to the Condensed Consolidated Financial Statements included in Part I, Item 1 of this Quarterly Report on Form 10-Q is incorporated by reference herein.

Item 1A.Risk Factors

There have been no material changes to the risk factors as presented in our Annual Report on Form 10-K for the year ended December 31, 2016, filed with the U.S. Securities and Exchange Commission on March 1, 2017.

Item 2.Unregistered Sales of Equity Securities and Use of Proceeds

There have been no material changes to the Unregistered Sales of Equity Securities and Use of Processed as presented in our Annual Report on Form 10-K for the year ended December 31, 2016, filed with the U.S. Securities and Exchange Commission on March 1, 2017.

Item 3.Defaults upon Senior Securities

No information is required in response to this item.

Item 4.[Removed and Reserved]

No information is required in response to this item.

Item 5.Other Information

No information is required in response to this item.

Item 6.Exhibits

Exhibit Number	Description of Documents
10.51	Form of 2017 Incentive Award Plan Stock Option Agreement
10.52	Form of 2017 Incentive Award Plan Restricted Stock Award Agreement
31.1	Certification of Chief Executive Officer pursuant to Section 302 of the Sarbanes-Oxley Act of 2002
31.2	Certification of Chief Financial Officer pursuant to Section 302 of the Sarbanes-Oxley Act of 2002
32.1†	Certification of Chief Executive Officer pursuant to Section 906 of the Sarbanes-Oxley Act of 2002
32.2†	Certification of Chief Financial Officer pursuant to Section 906 of the Sarbanes-Oxley Act of 2002
101.INS	XBRL Instance Document
101.SCH	XBRL Taxonomy Extension Schema Document
101.CAL	XBRL Taxonomy Extension Calculation Linkbase Document
101.DEF	XBRL Taxonomy Extension Definition Linkbase Document
101.LAB	XBRL Taxonomy Extension Label Linkbase Document
101.PRE	XBRL Taxonomy Extension Presentation Linkbase Document

†These certifications are being furnished solely to accompany this Quarterly Report pursuant to 18 U.S.C. Section 1350, and are not being filed for purposes of Section 18 of the Securities Exchange Act of 1934 and are not to be incorporated by reference into any filing of Guidance Software, Inc., whether made before or after the date hereof, regardless of any general incorporation language in such filing.

30

SIGNATURE

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned thereunto duly authorized.

Guidance Software, Inc.
By:	/s/ Barry J. Plaga
	Barry J. Plaga
	Chief Financial and Operating Officer
	(Principal Financial Officer)

Dated: May 10, 2017

31

EX-10.51

Exhibit 10.51

GUIDANCE SOFTWARE, INC.
2017 INCENTIVE AWARD PLAN

STOCK OPTION GRANT NOTICE

Guidance Software, Inc., a Delaware corporation, (the “Company”), pursuant to the Guidance Software, Inc. 2017 Incentive Award Plan, as may be amended from time to time (the “Plan”), hereby grants to the holder listed below (“Holder”) an option to purchase the number of shares of the Company’s common stock (“Shares”) set forth below (the “Option”).  This Option is subject to all of the terms and conditions set forth herein, as well as in the Plan and the Stock Option Agreement attached hereto as Exhibit A (the “Stock Option Agreement”), each of which are incorporated herein by reference.  Unless otherwise defined herein, the terms defined in the Plan shall have the same defined meanings in this Grant Notice and the Stock Option Agreement.

Holder:	«Holder»
Grant Date:	«Grant_Date»
Vesting Commencement Date:	«VCD»
Exercise Price per Share:	$[   ]
Total Exercise Price:	«Total_Price»
Total Number of Shares Subject to the Option:	«Shares» shares
Expiration Date:	«Expiration»
Vesting Schedule:	Subject to Holder’s continued employment with or service to the Company or any of its subsidiaries, the Option shall vest with respect to twenty-five percent (25%) of the Shares subject thereto on the first anniversary of the Vesting Commencement Date and with respect to an additional twenty-five percent (25%) of the Shares subject thereto on each yearly anniversary thereafter, so that the Option shall be vested with respect to all of the Shares subject thereto on the fourth anniversary of the Vesting Commencement Date; provided, however, that to the extent permitted by applicable law, the Administrator may, in its sole discretion, suspend vesting of the Option during all or any part of any leave of absence taken by Holder.

Type of Option: o  Incentive Stock Option o  Non-Qualified Stock Option

By his or her signature and the Company’s signature below, Holder agrees to be bound by the terms and conditions of the Plan, the Stock Option Agreement, and this Grant Notice.  Holder has reviewed the Stock Option Agreement, the Plan and this Grant Notice in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Grant Notice and fully understands all provisions of this Grant Notice, the Stock Option Agreement and the Plan.  Holder hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions arising under the Plan, this Grant Notice or the Stock Option Agreement.  In addition, by signing below, Holder also agrees that the Company, in its sole discretion, may satisfy any withholding obligations in accordance with Section 3.5 of the Agreement by (i) withholding Shares otherwise issuable to Holder upon exercise of the Option, (ii) instructing a broker on Holder’s behalf to sell Shares otherwise issuable to Holder upon exercise of the Option and submit the proceeds of such sale to the Company, or (iii) using any other method permitted by Section 3.5 of the Agreement or the Plan.

GUIDANCE SOFTWARE, INC.:	HOLDER:
By:	By:
Print Name:	Print Name:	«Holder»
Title:

EXHIBIT A

TO STOCK OPTION GRANT NOTICE

GUIDANCE SOFTWARE, INC. STOCK OPTION AGREEMENT

Pursuant to the Stock Option Grant Notice (the “Grant Notice”) to which this Stock Option Agreement (this “Agreement”) is attached, Guidance Software, Inc., a Delaware corporation (the “Company”), has granted to Holder an Option under the Guidance Software, Inc. 2017 Incentive Award Plan, as may be amended from time to time (the “Plan”), to purchase the number of Shares indicated in the Grant Notice.

ARTICLE 1.

GENERAL

1.1Defined Terms.  Capitalized terms not specifically defined herein shall have the meanings specified in the Plan and the Grant Notice.

1.2Incorporation of Terms of Plan.  The Option is subject to the terms and conditions of the Plan which are incorporated herein by reference.  In the event of any inconsistency between the Plan and this Agreement, the terms of the Plan shall control.

ARTICLE 2.

GRANT OF OPTION

2.1Grant of Option.  In consideration of Holder’s past and/or continued employment with or service to the Company or any Subsidiary and for other good and valuable consideration, effective as of the Grant Date set forth in the Grant Notice (the “Grant Date”), the Company irrevocably grants to Holder the Option to purchase any part or all of an aggregate of the number of Shares set forth in the Grant Notice, upon the terms and conditions set forth in the Plan and this Agreement, subject to adjustments as provided in Section 13.2 of the Plan.  Unless designated as a Non-Qualified Stock Option in the Grant Notice, the Option shall be an Incentive Stock Option to the maximum extent permitted by law.

2.2Exercise Price.  The exercise price of the Shares subject to the Option shall be as set forth in the Grant Notice, without commission or other charge; provided, however, that the price per share of the Shares subject to the Option shall not be less than 100% of the Fair Market Value of a share of Common Stock on the Grant Date.  Notwithstanding the foregoing, if this Option is designated as an Incentive Stock Option and Holder is a Greater Than 10% Stockholder as of the Grant Date, the exercise price per share of the Shares subject to the Option shall not be less than 110% of the Fair Market Value of a share of Common Stock on the Grant Date.

2.3Consideration to the Company.  In consideration of the grant of the Option by the Company, Holder agrees to render faithful and efficient services to the Company or any Subsidiary.  Nothing in the Plan or this Agreement shall confer upon Holder any right to continue in the employ or service of the Company, any Subsidiary or any affiliate or shall interfere with or restrict in any way the rights of the Company, its Subsidiaries and its affiliates, which rights are hereby expressly reserved, to discharge or terminate the services of Holder at any time for any reason whatsoever, with or without cause, except to the extent expressly provided otherwise in a written agreement between the Company or an affiliate and Holder.

A-1

ARTICLE 3.

PERIOD OF EXERCISABILITY

3.1Commencement of Exercisability.

(a)Subject to Sections 3.2, 3.3, and 5.11 hereof, the Option shall become vested and exercisable in such amounts and at such times as are set forth in the Grant Notice.

(b)No portion of the Option which has not become vested and exercisable at the date of Holder’s Termination of Service shall thereafter become vested and exercisable, except as may be otherwise provided by the Administrator or as set forth in a written agreement between the Company and Holder.

(c)Notwithstanding Section 3.1(a) hereof and the Grant Notice, but subject to Section 3.1(b) hereof, in the event Holder incurs a Termination of Service (i) without Cause or (ii) if Holder is a party to a written employment or similar agreement with the Company (or any Subsidiary) in which the term “Good Reason” is defined, then for Good Reason (as such term is defined in the applicable written employment or similar agreement), in either case, on or within twelve (12) months following a Change in Control, the Option shall become fully vested and exercisable as to all Shares subject thereto, provided that the Option has not yet expired or been terminated.

As used in this Agreement, “Cause” means (i) Holder’s unauthorized use or disclosure of confidential information or trade secrets of the Company or a Subsidiary; (ii) Holder’s conviction of, or the entry of a plea of guilty or nolo contendere by Holder to, a felony under the laws of the United States or any state thereof or a crime involving moral turpitude; (iii) Holder’s gross negligence or willful misconduct or Holder’s continued failure to perform assigned duties after receiving notification thereof from the Company or a Subsidiary, which failure is not cured within ten (10) days of receipt of such notification; or (iv) an act of fraud or dishonesty committed by Holder against the Company or a Subsidiary.  The foregoing definition shall not in any way preclude or restrict the right of the Company (or any Subsidiary) to discharge or dismiss any Holder or other person in the service of the Company (or any Subsidiary) for any other acts or omissions, but such other acts or omissions shall not be deemed, for purposes of this Agreement, to constitute grounds for termination for Cause.  Notwithstanding the foregoing, if Holder is a party to a written employment or similar agreement with the Company (or any Subsidiary) in which the term “Cause” is defined, then “Cause” shall be as such term is defined in the applicable written employment or similar agreement.

3.2Duration of Exercisability.  Each installment which becomes vested and exercisable pursuant to the vesting schedule set forth in the Grant Notice shall remain vested and exercisable until it becomes unexercisable under Section 3.3 hereof.

3.3Expiration of Option.  The Option may not be exercised to any extent by anyone after the first to occur of the following events:

(a)The Expiration Date set forth in the Grant Notice, which shall in no event be more than ten (10) years from the Grant Date;

(b)If this Option is designated as an Incentive Stock Option and Holder, at the time the Option was granted, was a Greater Than 10% Stockholder, the expiration of five (5) years from the Grant Date;

A-2

(c)The expiration of three (3) months from the date of Holder’s Termination of Service, unless such termination occurs by reason of Holder’s death or disability or Holder’s Termination of Service for Cause;

(d)The expiration of one (1) year from the date of Holder’s Termination of Service by reason of Holder’s death or disability; or

(e)Except as the Administrator may otherwise approve, upon Holder’s Termination of Service for Cause.

3.4Special Tax Consequences.  Holder acknowledges that, to the extent that the aggregate Fair Market Value (determined as of the time the Option is granted) of all Shares with respect to which Incentive Stock Options, including the Option (if applicable), are exercisable for the first time by Holder in any calendar year exceeds $100,000, the Option and such other options shall be Non-Qualified Stock Options to the extent necessary to comply with the limitations imposed by Section 422(d) of the Code.  Holder further acknowledges that the rule set forth in the preceding sentence shall be applied by taking the Option and other “incentive stock options” into account in the order in which they were granted, as determined under Section 422(d) of the Code and the Treasury Regulations thereunder.  Holder also acknowledges that an Incentive Stock Option exercised more than three (3) months after Holder’s termination of employment, other than by reason of death or disability, will be taxed as a Non-Qualified Stock Option.

3.5Tax Liability.

(a)For purposes of this Agreement, “Tax Liability” shall mean any liability for income tax, withholding tax and any other employment related taxes or social security contributions in any jurisdiction.

(b)The Option cannot be exercised until Holder has made such arrangements as the Company may require for the satisfaction of any Tax Liability that may arise in connection with the exercise of the Option and/or the acquisition of the Shares by Holder.  The Company shall not be required to issue, allot or transfer Shares until Holder has satisfied this obligation.

(c)Holder hereby acknowledges that the Company (i) makes no representations or undertakings regarding the treatment of any Tax Liabilities in connection with any aspect of the Option and (ii) does not commit to and is under no obligation to structure the terms of the grant or any aspect of any Award, including the Option, to reduce or eliminate Holder’s liability for Tax Liabilities or achieve any particular tax result.  Furthermore, if Holder becomes subject to tax in more than one jurisdiction between the date of grant of an Award, including the Option, and the date of any relevant taxable event, Holder acknowledges that the Company may be required to withhold or account for Tax Liabilities in more than one jurisdiction.

ARTICLE 4.

EXERCISE OF OPTION

4.1Person Eligible to Exercise.  Except as provided in Section 5.3 hereof, during the lifetime of Holder, only Holder may exercise the Option or any portion thereof, unless it has been disposed of pursuant to a DRO.  After the death of Holder, any exercisable portion of the Option may, prior to the time when the Option becomes unexercisable under Section 3.3 hereof, be exercised by the

A-3

deceased Holder’s personal representative or by any person empowered to do so under the deceased Holder’s will or under the then applicable laws of descent and distribution.

4.2Partial Exercise.  Any exercisable portion of the Option or the entire Option, if then wholly exercisable, may be exercised in whole or in part at any time prior to the time when the Option or portion thereof becomes unexercisable under Section 3.3 hereof.  However, the Option shall not be exercisable with respect to fractional Shares.

4.3Manner of Exercise.  The Option, or any exercisable portion thereof, may be exercised solely by delivery to the Company (or any third party administrator or other person or entity designated by the Company; for the avoidance of doubt, delivery shall include electronic delivery), during regular business hours, of all of the following prior to the time when the Option or such portion thereof becomes unexercisable under Section 3.3 hereof:

(a)An exercise notice in a form specified by the Administrator, stating that the Option or portion thereof is thereby exercised, such notice complying with all applicable rules established by the Administrator.  The notice shall be signed by Holder or other person then entitled to exercise the Option or such portion of the Option;

(b)The receipt by the Company of full payment for the Shares with respect to which the Option or portion thereof is exercised, including payment of any applicable withholding tax, which shall be made by deduction from other compensation payable to Holder or in such other form of consideration permitted under Section 4.4 hereof that is acceptable to the Company;

(c)Any other written representations or documents as may be required in the Administrator’s sole discretion to evidence compliance with the Securities Act, the Exchange Act or any other applicable law, rule or regulation; and

(d)In the event the Option or portion thereof shall be exercised pursuant to Section 4.1 hereof by any person or persons other than Holder, appropriate proof of the right of such person or persons to exercise the Option.

Notwithstanding any of the foregoing, the Company shall have the right to specify all conditions of the manner of exercise, which conditions may vary by country and which may be subject to change from time to time.

4.4Method of Payment.  Payment of the exercise price shall be by any of the following, or a combination thereof, at the election of Holder:

(a)Cash or check;

(b)With the consent of the Administrator, surrender of Shares (including, without limitation, Shares otherwise issuable upon exercise of the Option) held for such period of time as may be required by the Administrator in order to avoid adverse accounting consequences and having a Fair Market Value on the date of delivery equal to the aggregate exercise price of the Option or exercised portion thereof; or

(c)Other legal consideration acceptable to the Administrator (including, without limitation, through the delivery of a notice that Holder has placed a market sell order with a broker with respect to Shares then issuable upon exercise of the Option, and that the broker has been directed to pay a sufficient portion of the net proceeds of the sale to the Company in satisfaction of the Option exercise

A-4

price; provided that payment of such proceeds is then made to the Company at such time as may be required by the Company, but in any event not later than the settlement of such sale).

4.5Conditions to Issuance of Common Stock.  The Shares deliverable upon the exercise of the Option, or any portion thereof, may be either previously authorized but unissued Shares, treasury stock or Shares purchased on the open market.  Such Shares shall be fully paid and nonassessable.  The Company shall not be required to issue or deliver any Shares purchased upon the exercise of the Option or portion thereof prior to fulfillment of all of the conditions in Section 11.5 of the Plan and following conditions:

(a)The admission of such Shares to listing on all stock exchanges on which such Common Stock is then listed;

(b)The completion of any registration or other qualification of such Shares under any state or federal law or under rulings or regulations of the Securities and Exchange Commission or of any other governmental regulatory body, which the Administrator shall, in its absolute discretion, deem necessary or advisable;

(c)The obtaining of any approval or other clearance from any state or federal governmental agency which the Administrator shall, in its absolute discretion, determine to be necessary or advisable;

(d)The receipt by the Company of full payment for such Shares, including payment of any applicable withholding tax, which may be in one or more of the forms of consideration permitted under Section 4.4 hereof; and

(e)The lapse of such reasonable period of time following the exercise of the Option as the Administrator may from time to time establish for reasons of administrative convenience.

Notwithstanding the foregoing, the issuance of such shares shall not be delayed if and to the extent that such delay would result in a violation of Section 409A of the Code.  In the event that the Company delays the issuance of such shares because it reasonably determines that the issuance of such shares will violate Applicable Law, such issuance shall be made at the earliest date at which the Company reasonably determines that issuing such shares will not cause such violation, as required by Treasury Regulation Section 1.409A-2(b)(7)(ii).

4.6Rights as Stockholder.  The holder of the Option shall not be, nor have any of the rights or privileges of, a stockholder of the Company, including, without limitation, voting rights and rights to dividends, in respect of any Shares purchasable upon the exercise of any part of the Option unless and until such Shares shall have been issued by the Company and held of record by such holder (as evidenced by the appropriate entry on the books of the Company or of a duly authorized transfer agent of the Company).  No adjustment will be made for a dividend or other right for which the record date is prior to the date the Shares are issued, except as provided in Section 13.2 of the Plan.

ARTICLE 5.

OTHER PROVISIONS

5.1Administration.  The Administrator shall have the power to interpret the Plan and this Agreement and to adopt such rules for the administration, interpretation and application of the Plan as are consistent therewith and to interpret, amend or revoke any such rules.  All actions taken and all

A-5

interpretations and determinations made by the Administrator in good faith shall be final and binding upon Holder, the Company and all other interested persons.  No member of the Committee or the Board shall be personally liable for any action, determination or interpretation made in good faith with respect to the Plan, this Agreement or the Option.

5.2Whole Shares.  The Option may only be exercised for whole Shares.

5.3Option Not Transferable.

(a)Subject to Section 4.1 hereof, the Option may not be sold, pledged, assigned or transferred in any manner other than by will or the laws of descent and distribution or, subject to the consent of the Administrator, pursuant to a DRO.  Neither the Option nor any interest or right therein shall be liable for the debts, contracts or engagements of Holder or his or her successors in interest or shall be subject to disposition by transfer, alienation, anticipation, pledge, hypothecation, encumbrance, assignment or any other means whether such disposition be voluntary or involuntary or by operation of law by judgment, levy, attachment, garnishment or any other legal or equitable proceedings (including bankruptcy), and any attempted disposition thereof shall be null and void and of no effect, except to the extent that such disposition is permitted by the preceding sentence.

(b)During the lifetime of Holder, only Holder may exercise the Option (or any portion thereof), unless it has been disposed of pursuant to a DRO; after the death of Holder, any exercisable portion of the Option may, prior to the time when such portion becomes unexercisable under the Plan or this Agreement, be exercised by Holder’s personal representative or by any person empowered to do so under the deceased Holder’s will or under the then-applicable laws of descent and distribution.

(c)Notwithstanding any other provision in this Agreement, Holder may, in the manner determined by the Administrator, designate a beneficiary to exercise the rights of Holder and to receive any distribution with respect to the Option upon Holder’s death.  A beneficiary, legal guardian, legal representative, or other person claiming any rights pursuant to the Plan is subject to all terms and conditions of the Plan and this Agreement, except to the extent the Plan and this Agreement otherwise provide, and to any additional restrictions deemed necessary or appropriate by the Administrator.  If Holder is married or a domestic partner in a domestic partnership qualified under Applicable Law and resides in a community property state, a designation of a person other than Holder’s spouse or domestic partner, as applicable, as his or her beneficiary with respect to more than 50% of Holder’s interest in the Option shall not be effective without the prior written consent of Holder’s spouse or domestic partner.  If no beneficiary has been designated or survives Holder, payment shall be made to the person entitled thereto pursuant to Holder’s will or the laws of descent and distribution.  Subject to the foregoing, a beneficiary designation may be changed or revoked by Holder at any time provided the change or revocation is filed with the Administrator prior to Holder’s death.

5.4Tax Consultation.  Holder understands that Holder may suffer adverse tax consequences as a result of the grant, vesting and/or exercise of the Option, and/or with the purchase or disposition of the Shares subject to the Option.  Holder represents that Holder has consulted with any tax consultants Holder deems advisable in connection with the purchase or disposition of such Shares and that Holder is not relying on the Company for any tax advice.

5.5Binding Agreement.  Subject to the limitation on the transferability of the Option  contained herein, this Agreement will be binding upon and inure to the benefit of the heirs, legatees, legal representatives, successors and assigns of the parties hereto.

A-6

5.6Adjustments Upon Specified Events.  The Administrator may accelerate the vesting of the Option in such circumstances as it, in its sole discretion, may determine.  In addition, upon the occurrence of certain events relating to the Common Stock contemplated by Section 13.2 of the Plan, the Administrator shall make such adjustments the Administrator deems appropriate in the number of Shares subject to the Option, the exercise price of the Option and the kind of securities that may be issued upon exercise of the Option.  Holder acknowledges that the Option is subject to adjustment, modification and termination in certain events as provided in this Agreement and Section 13.2 of the Plan.

5.7Notices.  Any notice to be given under the terms of this Agreement to the Company shall be addressed to the Company in care of the General Counsel of the Company at the Company’s principal office, and any notice to be given to Holder shall be addressed to Holder at Holder’s last address reflected on the Company’s records.  By a notice given pursuant to this Section 5.7, either party may hereafter designate a different address for notices to be given to that party.  Any notice which is required to be given to Holder shall, if Holder is then deceased, be given to the person entitled to exercise his or her Option pursuant to Section 4.1 hereof by written notice under this Section 5.7.  Any notice shall be deemed duly given when sent via email or when sent by certified mail (return receipt requested) and deposited (with postage prepaid) in a post office or branch post office regularly maintained by the United States Postal Service.

5.8Titles.  Titles are provided herein for convenience only and are not to serve as a basis for interpretation or construction of this Agreement.

5.9Governing Law.  The laws of the State of California shall govern the interpretation, validity, administration, enforcement and performance of the terms of this Agreement without regard to conflicts of laws thereof or of any other jurisdiction.

5.10Conformity to Securities Laws.  Holder acknowledges that the Plan and this Agreement are intended to conform to the extent necessary with all provisions of the Securities Act and the Exchange Act and any and all Applicable Law and regulations and rules promulgated by the Securities and Exchange Commission thereunder, and state securities laws and regulations.  Notwithstanding anything herein to the contrary, the Plan shall be administered, and the Option is granted and may be exercised, only in such a manner as to conform to such Applicable Law.  To the extent permitted by applicable law, the Plan and this Agreement shall be deemed amended to the extent necessary to conform to such Applicable Law.

5.11Amendment, Suspension and Termination.  This Agreement may be amended in a writing signed by Holder and a duly authorized representative of the Company.  In addition, to the extent permitted by the Plan, this Agreement may be wholly or partially amended or otherwise modified, suspended or terminated at any time or from time to time by the Administrator or the Board; provided, however, that, except as may otherwise be provided by the Plan, no amendment, modification, suspension or termination of this Agreement shall adversely affect the Option in any material way without the prior written consent of Holder.

5.12Successors and Assigns.  The Company may assign any of its rights under this Agreement to single or multiple assignees, and this Agreement shall inure to the benefit of the successors and assigns of the Company.  Subject to the restrictions on transfer herein set forth in Section 5.3 hereof, this Agreement shall be binding upon Holder and his or her heirs, executors, administrators, successors and assigns.

A-7

5.13Notification of Disposition.  If this Option is designated as an Incentive Stock Option, Holder shall give prompt notice to the Company of any disposition or other transfer of any Shares

acquired under this Agreement if such disposition or transfer is made (a) within two (2) years from the Grant Date with respect to such Shares or (b) within one (1) year after the transfer of such Shares to Holder.  Such notice shall specify the date of such disposition or other transfer and the amount realized, in cash, other property, assumption of indebtedness or other consideration, by Holder in such disposition or other transfer.

5.14Limitations Applicable to Section 16 Persons.  Notwithstanding any other provision of the Plan or this Agreement, if Holder is subject to Section 16 of the Exchange Act, the Plan, the Option and this Agreement shall be subject to any additional limitations set forth in any applicable exemptive rule under Section 16 of the Exchange Act (including any amendment to Rule 16b-3 of the Exchange Act) that are requirements for the application of such exemptive rule.  To the extent permitted by applicable law, this Agreement shall be deemed amended to the extent necessary to conform to such applicable exemptive rule.

5.15Not a Contract of Service Relationship.  Nothing in this Agreement or in the Plan shall confer upon Holder any right to continue to serve as an employee or other service provider of the Company or any of its affiliates or interfere with or restrict in any way with the right of the Company or any of its affiliates, which rights are hereby expressly reserved, to discharge or to terminate for any reason whatsoever, with or without cause, the services of Holder at any time.

5.16Entire Agreement.  The Plan, the Grant Notice and this Agreement (including all Exhibits thereto) constitute the entire agreement of the parties and supersede in their entirety all prior undertakings and agreements of the Company and Holder with respect to the subject matter hereof.

5.17Section 409A.  This Option is not intended to constitute “nonqualified deferred compensation” within the meaning of Section 409A of the Code (together with any Department of Treasury regulations and other interpretive guidance issued thereunder, including without limitation any such regulations or other guidance that may be issued after the date hereof, “Section 409A”).  However, notwithstanding any other provision of the Plan, the Grant Notice or this Agreement (or any Exhibits hereto), if at any time the Administrator determines that the Option (or any portion thereof) may be subject to Section 409A, the Administrator shall have the right in its sole discretion (without any obligation to do so or to indemnify Holder or any other person for failure to do so) to adopt such amendments to the Plan, the Grant Notice or this Agreement (or any Exhibits hereto), or adopt other policies and procedures (including amendments, policies and procedures with retroactive effect), or take any other actions, as the Administrator determines are necessary or appropriate either for the Option to be exempt from the application of Section 409A or to comply with the requirements of Section 409A.

5.18Limitation on Holder’s Rights.  Participation in the Plan confers no rights or interests other than as herein provided.  This Agreement creates only a contractual obligation on the part of the Company as to amounts payable and shall not be construed as creating a trust.  Neither the Plan nor any underlying program, in and of itself, has any assets.  Holder shall have only the rights of a general unsecured creditor of the Company with respect to amounts credited and benefits payable, if any, with respect to the Option, and rights no greater than the right to receive the Common Stock as a general unsecured creditor with respect to options, as and when exercised pursuant to the terms hereof.

5.19Consent to Personal Data Use.  Holder acknowledges and agrees that the Company is permitted to collect, hold, store, process, modify, transfer, lock or delete certain personal (and sensitive) data in any medium about Holder (i.e., name, home address, telephone number, e-mail address, date of birth, tax identification number and payroll information) as a part of its personnel and other business

A-8

records for the exclusive purpose of tracking stock option grants, processing stock option exercises and subsequent share transfers and sales, arranging for appropriate tax reporting and withholding and regulatory tracking and reporting purposes and the Company may disclose such information to third parties in the event that such disclosure is in the Company’s view required for the proper tracking of stock option grants, processing stock option exercises and subsequent share transfers and sales, arranging for appropriate tax reporting and withholding and regulatory tracking.  For these purposes, this personal data will be transferred to other locations, including locations outside of the European Union and in so-called insecure third-party countries that do not guarantee the data privacy protection level of the European Union.

A-9

EX-10.52

Exhibit 10.52

GUIDANCE SOFTWARE, INC.

2017 INCENTIVE AWARD PLAN
RESTRICTED STOCK AWARD GRANT NOTICE

Guidance Software, Inc., a Delaware corporation, (the “Company”), pursuant to the Guidance Software, Inc. 2017 Incentive Award Plan, as amended from time to time (the “Plan”), hereby grants to the individual listed below (the “Holder”), in consideration of the mutual agreements set forth herein and for other good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, the number of shares of the Company’s common stock set forth below (the “Shares”).  This Restricted Stock award is subject to all of the terms and conditions as set forth herein and in the Restricted Stock Award Agreement attached hereto as Exhibit A (the “Agreement”) (including, without limitation, the Restrictions on the Shares set forth in the Agreement) and the Plan, each of which is incorporated herein by reference.  Unless otherwise defined herein, the terms defined in the Plan shall have the same defined meanings in this Restricted Stock Award Grant Notice (the “Grant Notice”) and the Agreement.

Holder:	[                                                                        ]
Grant Date:	[                                                                        ]
Total Number of Shares of Restricted Stock:	[                                       ] Shares
Vesting Commencement Date:	[                                                                        ]
Vesting Schedule:	Subject to Holder’s continued employment with or service to the Company or any of its subsidiaries, twenty-five percent (25%) of the Shares shall vest on the first anniversary of the Grant Date and an additional twenty-five percent (25%) of the Shares shall vest on each yearly anniversary thereafter, so that all of the Shares shall be vested on the fourth anniversary of the Grant Date; provided, however, that to the extent permitted by applicable law, the Administrator may, in its sole discretion, suspend vesting of the Shares during all or any part of any leave of absence taken by Holder.
Termination:	If Holder experiences a Termination of Service prior to the applicable vesting date, any portion of the Award (and the Shares subject thereto) that has not become vested on or prior to the date of such Termination of Service (after taking into consideration any vesting that may occur in connection with such Termination of Service, if any) will thereupon be automatically forfeited by Holder, and Holder’s rights in such portion of the Award and any Shares subject thereto shall thereupon lapse and expire.

1

By his or her signature and the Company’s signature below, Holder agrees to be bound by the terms and conditions of the Plan, the Agreement and this Grant Notice.  Holder has reviewed the Agreement, the Plan and this Grant Notice in their entirety, has had an opportunity to obtain the advice of counsel prior to executing this Grant Notice and fully understands all provisions of this Grant Notice, the Agreement and the Plan.  Holder hereby agrees to accept as binding, conclusive and final all decisions or interpretations of the Administrator upon any questions arising under the Plan, this Grant Notice or the Agreement.  In addition, by signing below, Holder also agrees that the Company, in its sole discretion, may satisfy any withholding obligations in accordance with Section 2.2(d) of the Agreement by (i) withholding Shares otherwise issuable to Holder upon vesting of the shares of Restricted Stock, (ii) instructing a broker on Holder’s behalf to sell Shares otherwise issuable to Holder upon vesting of the shares of Restricted Stock and submit the proceeds of such sale to the Company, or (iii) using any other method permitted by Section 2.2(d) of the Agreement or the Plan.  If Holder is married or part of a registered domestic partnership, his or her spouse or domestic partner has signed the Consent of Spouse or Registered Domestic Partner attached to this Grant Notice as Exhibit B.

GUIDANCE SOFTWARE, INC.:	HOLDER:
By:	By:
Print Name:	Print Name:
Title:

2

EXHIBIT A
TO RESTRICTED STOCK AWARD GRANT NOTICE

RESTRICTED STOCK AWARD AGREEMENT

Pursuant to the Restricted Stock Award Grant Notice (the “Grant Notice”) to which this Restricted Stock Award Agreement (this “Agreement”) is attached, Guidance Software, Inc., a Delaware corporation (the “Company”), has granted to Holder the number of shares of Restricted Stock (the “Shares”) under the Guidance Software, Inc. 2017 Incentive Award Plan, as amended from time to time (the “Plan”), as set forth in the Grant Notice.  Capitalized terms not specifically defined herein shall have the meanings specified in the Plan and Grant Notice.

ARTICLE I.

GENERAL

1.1Incorporation of Terms of Plan.  The Award (as defined below) is subject to the terms and conditions of the Plan, which are incorporated herein by reference.  In the event of any inconsistency between the Plan and this Agreement, the terms of the Plan shall control.

ARTICLE II.

AWARD OF RESTRICTED STOCK

2.1Award of Restricted Stock.

(a)Award.  Pursuant to the Grant Notice and upon the terms and conditions set forth in the Plan and this Agreement, effective as of the Grant Date set forth in the Grant Notice, the Company has granted to Holder an award of Restricted Stock (the “Award”) under the Plan in consideration of Holder’s past and/or continued employment with or service to the Company or any affiliate, and for other good and valuable consideration.  The number of Shares subject to the Award is set forth in the Grant Notice.

(b)Book Entry Form; Certificates.  At the sole discretion of the Administrator, the Shares will be issued in either (i) uncertificated form, with the Shares recorded in the name of Holder in the books and records of the Company’s transfer agent with appropriate notations regarding the restrictions on transfer imposed pursuant to this Agreement, and upon vesting and the satisfaction of all conditions set forth in Sections 2.2(b) and (d) hereof, the Company shall remove such notations on any such vested Shares in accordance with Section 2.2(f) below; or (ii) certificated form pursuant to the terms of Sections 2.1(c), (d) and (e) below.

(c)Legend.  Certificates representing Shares issued pursuant to this Agreement shall, until all Restrictions (as defined below) imposed pursuant to this Agreement lapse or have been removed and the Shares have thereby become vested or the Shares represented thereby have been forfeited hereunder, bear the following legend (or such other legend as shall be determined by the Administrator):

“THE SECURITIES REPRESENTED BY THIS CERTIFICATE ARE SUBJECT TO CERTAIN VESTING REQUIREMENTS AND MAY BE SUBJECT TO FORFEITURE UNDER THE TERMS OF A RESTRICTED STOCK AWARD AGREEMENT, BY AND BETWEEN GUIDANCE SOFTWARE, INC. AND THE REGISTERED OWNER OF SUCH SHARES, AND SUCH SHARES MAY NOT BE, DIRECTLY OR INDIRECTLY, OFFERED, TRANSFERRED, SOLD, ASSIGNED, PLEDGED, HYPOTHECATED OR OTHERWISE DISPOSED OF UNDER ANY CIRCUMSTANCES, EXCEPT PURSUANT TO THE PROVISIONS OF SUCH AGREEMENT.”

A-1

(d)Escrow.  The Company or such other escrow holder as the Administrator may appoint may retain physical custody of any certificates representing the Shares until all of the Restrictions on transfer imposed pursuant to this Agreement lapse or shall have been removed; in such event, Holder shall not retain physical custody of any certificates representing unvested Shares issued to him or her.  Holder, by acceptance of the Award, shall be deemed to appoint, and does so appoint, the Company and each of its authorized representatives as Holder’s attorney(s)-in-fact to effect any transfer of unvested forfeited Shares (or Shares otherwise reacquired by the Company hereunder) to the Company as may be required pursuant to the Plan or this Agreement and to execute such documents as the Company or such representatives deem necessary or advisable in connection with any such transfer.

(e)Removal of Notations; Delivery of Certificates Upon Vesting.  As soon as administratively practicable after the vesting of any Shares subject to the Award pursuant to Section 2.2(b) hereof, the Company shall, as applicable, either remove the notations on any Shares subject to the Award issued in book entry form which have vested or deliver to Holder a certificate or certificates evidencing the number of Shares subject to the Award which have vested (or, in either case, such lesser number of Shares as may be permitted pursuant to Section 11.2 of the Plan).  Holder (or the beneficiary or personal representative of Holder in the event of Holder’s death or incapacity, as the case may be) shall deliver to the Company any representations or other documents or assurances required by the Company.  The Shares so delivered shall no longer be subject to the Restrictions hereunder.

2.2Restrictions.

(a)Forfeiture.  Notwithstanding any contrary provision of this Agreement, upon Holder’s Termination of Service for any or no reason, any portion of the Award (and the Shares subject thereto) which has not vested prior to or in connection with such Termination of Service (after taking into consideration any accelerated vesting and lapsing of Restrictions which may occur in connection with such Termination of Service, if any) shall thereupon be forfeited immediately and without any further action by the Company, and Holder’s rights in any Shares and such portion of the Award shall thereupon lapse and expire.  For purposes of this Agreement, “Restrictions” shall mean the restrictions on sale or other transfer set forth in Section 3.3 hereof and the exposure to forfeiture set forth in this Section 2.2(a).

(b)Vesting and Lapse of Restrictions.  Subject to Section 2.2(a) above and Section 2.2(c) below, the Award shall vest and the Restrictions shall lapse in accordance with the vesting schedule set forth in the Grant Notice (rounding down to the nearest whole Share, other than with respect to the final vesting date).

(c)Accelerated Vesting.  Subject to Section 2.2(a) above, in the event Holder incurs a Termination of Service (i) without Cause or (ii) if Holder is a party to a written employment or similar agreement with the Company (or any Subsidiary) in which the term “Good Reason” is defined, then for Good Reason (as such term is defined in the applicable written employment or similar agreement), in either case, on or within twelve (12) months following a Change in Control, the Award shall vest and the Restrictions shall lapse with respect to one-hundred percent (100%) of the Shares subject to the Award.

A-2

As used in this Agreement, “Cause” means (i) Holder’s unauthorized use or disclosure of confidential information or trade secrets of the Company or a Subsidiary; (ii) Holder’s conviction of, or the entry of a plea of guilty or nolo contendere by Holder to, a felony under the laws of the United States or any state thereof or a crime involving moral turpitude; (iii) Holder’s gross negligence or willful misconduct or Holder’s continued failure to perform assigned duties after receiving notification thereof from the Company or a Subsidiary, which failure is not cured within ten (10) days of receipt of such notification; or (iv) an act of fraud or dishonesty committed by Holder against the Company or a Subsidiary.  The foregoing definition shall not in any way preclude or restrict the right of the Company (or any Subsidiary) to discharge or dismiss any Holder or other person in the service of the Company (or any Subsidiary) for any other acts or omissions, but such other acts or omissions shall not be deemed, for purposes of this Agreement, to constitute grounds for termination for Cause.  Notwithstanding the foregoing, if Holder is a party to a written employment or similar agreement with the Company (or any Subsidiary) in which the term “Cause” is defined, then “Cause” shall be as such term is defined in the applicable written employment or similar agreement.

(d)Tax Withholding.  As set forth in Section 11.2 of the Plan, the Company shall have the authority and the right to deduct or withhold, or to require Holder to remit to the Company, an amount sufficient to satisfy all applicable federal, state and local taxes required by law to be withheld with respect to any taxable event arising in connection with the Award.  The Company shall not be obligated to deliver any new certificate representing Shares to Holder or Holder’s legal representative or enter such Shares in book entry form unless and until Holder or Holder’s legal representative shall have paid or otherwise satisfied in full the amount of all federal, state and local taxes applicable to the taxable income of Holder resulting from the grant or vesting of the Award or the issuance of Shares.

(e)Conditions to Delivery of Shares.  Subject to Section 2.1 above, the Shares deliverable under this Award may be either previously authorized but unissued Shares, treasury Shares or Shares purchased on the open market.  Such Shares shall be fully paid and nonassessable.  The Company shall not be required to issue or deliver any Shares under this Award prior to fulfillment of the conditions set forth in Section 11.5 of the Plan.

Notwithstanding the foregoing, the issuance of such Shares shall not be delayed if and to the extent that such delay would result in a violation of Section 409A of the Code.  In the event that the Company delays the issuance of such Shares because it reasonably determines that the issuance of such Shares will violate Applicable Law, such issuance shall be made at the earliest date at which the Company reasonably determines that issuing such Shares will not cause such violation, as required by Treasury Regulation Section 1.409A-2(b)(7)(ii).

(f)To ensure compliance with the Restrictions, the provisions of the charter documents of the Company, and/or Applicable Law and for other proper purposes, the Company may issue appropriate “stop transfer” and other instructions to its transfer agent with respect to the Restricted Stock.  The Company shall notify the transfer agent as and when the Restrictions lapse.

2.3Consideration to the Company.  In consideration of the grant of the Award pursuant hereto, Holder agrees to render faithful and efficient services to the Company or any affiliate.

ARTICLE III.

OTHER PROVISIONS

3.1Section 83(b) Election.  If Holder makes an election under Section 83(b) of the Code to be taxed with respect to the Restricted Stock as of the date of transfer of the Restricted Stock rather than as of the date or dates upon which Holder would otherwise be taxable under Section 83(a) of the Code, Holder hereby agrees to deliver a copy of such election to the Company promptly after filing such election with the Internal Revenue Service.

A-3

3.2Administration.  The Administrator shall have the power to interpret the Plan and this Agreement and to adopt such rules for the administration, interpretation and application of the Plan as are consistent therewith and to interpret, amend or revoke any such rules.  All actions taken and all interpretations and determinations made by the Administrator in good faith shall be final and binding upon Holder, the Company and all other interested persons.  No member of the Administrator or the Board shall be personally liable for any action, determination or interpretation made in good faith with respect to the Plan, this Agreement or the Award.

3.3Restricted Stock Not Transferable.  Until the Restrictions hereunder lapse or expire pursuant to this Agreement and the Shares vest, the Restricted Stock (including any Shares received by holders thereof with respect to Restricted Stock as a result of stock dividends, stock splits or any other form of recapitalization) shall be subject to the restrictions on transferability set forth in Section 11.3 of the Plan; provided, however, that notwithstanding this Section 3.3, with the consent of the Administrator, the Shares may be transferred to one or more Permitted Transferees, subject to and in accordance with Section 11.3 of the Plan.

3.4Rights as Stockholder.  Except as otherwise provided herein or in the Plan, upon the Grant Date, Holder shall have all the rights of a stockholder of the Company with respect to the Shares, subject to the Restrictions, including, without limitation, voting rights in respect of the Shares subject to the Award and deliverable hereunder.

3.5Tax Consultation.  Holder understands that Holder may suffer adverse tax consequences in connection with the Restricted Stock granted pursuant to this Agreement (and the Shares issuable with respect thereto).  Holder represents that Holder has consulted with any tax consultants Holder deems advisable in connection with the Restricted Stock and that Holder is not relying on the Company for any tax advice.

3.6Adjustments Upon Specified Events.  The Administrator may accelerate the vesting of the Restricted Stock in such circumstances as it, in its sole discretion, may determine.  Holder acknowledges that the Restricted Stock is subject to adjustment, modification and termination in certain events as provided in this Agreement and Section 13.2 of the Plan.

3.7Notices.  Any notice to be given under the terms of this Agreement to the Company shall be addressed to the Company in care of the General Counsel of the Company at the Company’s principal office, and any notice to be given to Holder shall be addressed to Holder at Holder’s last address reflected on the Company’s records.  By a notice given pursuant to this Section 3.7, either party may hereafter designate a different address for notices to be given to that party.  Any notice shall be deemed duly given when sent via email or when sent by certified mail (return receipt requested) and deposited (with postage prepaid) in a post office or branch post office regularly maintained by the United States Postal Service.

3.8Holder’s Representations.  If the Shares issuable hereunder have not been registered under the Securities Act or any applicable state laws on an effective registration statement at the time of such issuance, Holder shall, if required by the Company, concurrently with such issuance, make such written representations as are deemed necessary or appropriate by the Company and/or its counsel.

3.9Titles.  Titles are provided herein for convenience only and are not to serve as a basis for interpretation or construction of this Agreement.

A-4

3.10Governing Law.  The laws of the State of California shall govern the interpretation, validity, administration, enforcement and performance of the terms of this Agreement without regard to conflicts of laws thereof or of any other jurisdiction.

3.11Conformity to Securities Laws.  Holder acknowledges that the Plan and this Agreement are intended to conform to the extent necessary with all provisions of the Securities Act and the Exchange Act, and any and all Applicable Law.  Notwithstanding anything herein to the contrary, the Plan shall be administered, and the Award is granted, only in such a manner as to conform to such Applicable Law.  To the extent permitted by Applicable Law, the Plan and this Agreement shall be deemed amended to the extent necessary to conform to such Applicable Law.

3.12Amendment, Suspension and Termination.  This Agreement may be amended in a writing signed by Holder and a duly authorized representative of the Company.  In addition, to the extent permitted by the Plan, this Agreement may be wholly or partially amended or otherwise modified, suspended or terminated at any time or from time to time by the Administrator or the Board; provided, however, that, except as may otherwise be provided by the Plan, no amendment, modification, suspension or termination of this Agreement shall adversely affect the Award in any material way without the prior written consent of Holder.

3.13Successors and Assigns.  The Company or any affiliate may assign any of its rights under this Agreement to single or multiple assignees, and this Agreement shall inure to the benefit of the successors and assigns of the Company and its affiliates.  Subject to the restrictions on transfer set forth in Section 3.3 hereof, this Agreement shall be binding upon Holder and his or her heirs, executors, administrators, successors and assigns.

3.14Limitations Applicable to Section 16 Persons.  Notwithstanding any other provision of the Plan or this Agreement, if Holder is subject to Section 16 of the Exchange Act, then the Plan, the Award and this Agreement shall be subject to any additional limitations set forth in any applicable exemptive rule under Section 16 of the Exchange Act (including any amendment to Rule 16b-3 of the Exchange Act) that are requirements for the application of such exemptive rule.  To the extent permitted by applicable law, this Agreement shall be deemed amended to the extent necessary to conform to such applicable exemptive rule.

3.15Not a Contract of Service Relationship.  Nothing in this Agreement or in the Plan shall confer upon Holder any right to continue to serve as an Employee or other service provider of the Company or any of its affiliates or shall interfere with or restrict in any way the rights of the Company and its affiliates, which rights are hereby expressly reserved, to discharge or terminate the services of Holder at any time for any reason whatsoever, with or without cause, except to the extent expressly provided otherwise in a written agreement between the Company or an affiliate and Holder.

3.16Entire Agreement.  The Plan, the Grant Notice and this Agreement (including all Exhibits thereto, if any) constitute the entire agreement of the parties and supersede in their entirety all prior undertakings and agreements of the Company and its affiliates and Holder with respect to the subject matter hereof.

3.17Limitation on Holder’s Rights.  Participation in the Plan confers no rights or interests other than as herein provided.  This Agreement creates only a contractual obligation on the part of the Company as to amounts payable and shall not be construed as creating a trust.  Neither the Plan nor any underlying program, in and of itself, has any assets.  Holder shall have only the rights of a general unsecured creditor of the Company and its affiliates with respect to amounts credited and benefits payable, if any, with respect to the Shares issuable hereunder.

A-5

EXHIBIT B

TO RESTRICTED STOCK AWARD GRANT NOTICE

CONSENT OF SPOUSE OR REGISTERED DOMESTIC PARTNER

I,                          , spouse or domestic partner of                          , have read and approve the Restricted Stock Award Grant Notice (the “Grant Notice”) to which this Consent of Spouse or Registered Domestic Partner is attached and the Restricted Stock Award Agreement (the “Agreement”) attached to the Grant Notice.  In consideration of issuing to my spouse or domestic partner the shares of the common stock of Guidance Software, Inc. set forth in the Grant Notice, I hereby appoint my spouse or domestic partner as my attorney-in-fact in respect of the exercise of any rights under the Agreement and agree to be bound by the provisions of the Agreement insofar as I may have any rights in said Agreement or any shares of the common stock of Guidance Software, Inc. issued pursuant thereto under the community property laws or similar laws relating to marital property in effect in the state of our residence as of the date of the signing of the foregoing Agreement.

Dated:
	Signature of Spouse or Domestic Partner

B-1

EX-31.1

Exhibit 31.1

CERTIFICATION OF CHIEF EXECUTIVE OFFICER

PURSUANT TO SECTION 302 OF THE SARBANES-OXLEY ACT OF 2002

I, Patrick Dennis, certify that:

1.I have reviewed this quarterly report on Form 10-Q of Guidance Software, Inc.;

2.Based on my knowledge, this report does not contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements made, in light of the circumstances under which such statements were made, not misleading with respect to the period covered by this report;

3.Based on my knowledge, the financial statements, and other financial information included in this report, fairly present in all material respects the financial condition, results of operations and cash flows of the registrant as of, and for, the periods presented in this report;

4.The registrant’s other certifying officer and I are responsible for establishing and maintaining disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) and internal control over financial reporting (as defined in Exchange Act Rules 13a-15(f) and 15d-15(f)) for the registrant and have:

(a)Designed such disclosure controls and procedures, or caused such disclosure controls and procedures to be designed under our supervision, to ensure that material information relating to the registrant, including its consolidated subsidiaries, is made known to us by others within those entities, particularly during the period in which this report is being prepared;

(b)Designed such internal control over financial reporting, or caused such internal control over financial reporting to be designed under our supervision, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles;

(c)Evaluated the effectiveness of the registrant’s disclosure controls and procedures and presented in this report our conclusions about the effectiveness of the disclosure controls and procedures, as of the end of the period covered by this report based on such evaluation; and

(d)Disclosed in this report any change in the registrant’s internal control over financial reporting that occurred during the registrant’s most recent fiscal quarter that has materially affected, or is reasonably likely to materially affect, the registrant’s internal control over financial reporting; and

5.The registrant’s other certifying officer and I have disclosed, based on our most recent evaluation of internal control over financial reporting, to the registrant’s auditors and the audit committee of the registrant’s board of directors (or persons performing the equivalent functions):

(a)All significant deficiencies and material weaknesses in the design or operation of internal control over financial reporting which are reasonably likely to adversely affect the registrant’s ability to record, process, summarize and report financial information; and

(b)Any fraud, whether or not material, that involves management or other employees who have a significant role in the registrant’s internal control over financial reporting.

Date: May 10, 2017	/s/ Patrick Dennis
	Patrick Dennis
	President and Chief Executive Officer

EX-31.2

Exhibit 31.2

CERTIFICATION OF CHIEF FINANCIAL OFFICER

PURSUANT TO SECTION 302 OF THE SARBANES-OXLEY ACT OF 2002

I, Barry J. Plaga, certify that:

1.I have reviewed this quarterly report on Form 10-Q of Guidance Software, Inc.;

2.Based on my knowledge, this report does not contain any untrue statement of a material fact or omit to state a material fact necessary to make the statements made, in light of the circumstances under which such statements were made, not misleading with respect to the period covered by this report;

3.Based on my knowledge, the financial statements, and other financial information included in this quarterly report, fairly present in all material respects the financial condition, results of operations and cash flows of the registrant as of, and for, the periods presented in this report;

4.The registrant’s other certifying officer and I are responsible for establishing and maintaining disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) and internal control over financial reporting (as defined in Exchange Act Rules 13a-15(f) and 15d-15(f)) for the registrant and have:

(a)Designed such disclosure controls and procedures, or caused such disclosure controls and procedures to be designed under our supervision, to ensure that material information relating to the registrant, including its consolidated subsidiaries, is made known to us by others within those entities, particularly during the period in which this report is being prepared;

(b)Designed such internal control over financial reporting, or caused such internal control over financial reporting to be designed under our supervision, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles;

(c)Evaluated the effectiveness of the registrant’s disclosure controls and procedures and presented in this report our conclusions about the effectiveness of the disclosure controls and procedures, as of the end of the period covered by this report based on such evaluation; and

(d)Disclosed in this report any change in the registrant’s internal control over financial reporting that occurred during the registrant’s most recent fiscal quarter that has materially affected, or is reasonably likely to materially affect, the registrant’s internal control over financial reporting; and

5.The registrant’s other certifying officer and I have disclosed, based on our most recent evaluation of internal control over financial reporting, to the registrant’s auditors and the audit committee of the registrant’s board of directors (or persons performing the equivalent functions):

(a)All significant deficiencies and material weaknesses in the design or operation of internal control over financial reporting which are reasonably likely to adversely affect the registrant’s ability to record, process, summarize and report financial information; and

(b)Any fraud, whether or not material, that involves management or other employees who have a significant role in the registrant’s internal control over financial reporting.

Date: May 10, 2017	/s/ Barry J. Plaga
	Barry J. Plaga
	Chief Financial and Operating Officer

EX-32.1

Exhibit 32.1

CERTIFICATION OF CHIEF EXECUTIVE OFFICER

PURSUANT TO SECTION 906 OF THE SARBANES-OXLEY ACT OF 2002

Pursuant to 18 U.S.C. § 1350, as created by Section 906 of the Sarbanes-Oxley Act of 2002, the undersigned officer of Guidance Software, Inc. (the “Company”) hereby certifies that:

(i)the accompanying Quarterly Report on Form 10-Q of the Company for the quarter ended March 31, 2017 (the “Report”) fully complies with the requirements of Section 13(a) or Section 15(d), as applicable, of the Securities Exchange Act of 1934, as amended; and

(ii)the information contained in the Report fairly presents, in all material respects, the financial condition and results of operations of the Company.

Date: May 10, 2017	/s/ Patrick Dennis
	Patrick Dennis
	President and Chief Executive Officer

A signed original of this written statement required by Section 906 of the Sarbanes-Oxley Act of 2002 (“Section 906”), or other document authenticating, acknowledging, or otherwise adopting the signature that appears in typed form within the electronic version of this written statement required by Section 906, has been provided to Guidance Software, Inc. and will be retained by Guidance Software, Inc. and furnished to the Securities and Exchange Commission or its staff upon request.

EX-32.2

Exhibit 32.2

CERTIFICATION OF CHIEF FINANCIAL OFFICER

PURSUANT TO SECTION 906 OF THE SARBANES-OXLEY ACT OF 2002

Pursuant to 18 U.S.C. § 1350, as created by Section 906 of the Sarbanes-Oxley Act of 2002, the undersigned officer of Guidance Software, Inc. (the “Company”) hereby certifies that:

(i)the accompanying Quarterly Report on Form 10-Q of the Company for the quarter ended March 31, 2017 (the “Report”) fully complies with the requirements of Section 13(a) or Section 15(d), as applicable, of the Securities Exchange Act of 1934, as amended; and

(ii)the information contained in the Report fairly presents, in all material respects, the financial condition and results of operations of the Company.

Date: May 10, 2017	/s/ Barry J. Plaga
	Barry J. Plaga
	Chief Financial and Operating Officer

A signed original of this written statement required by Section 906 of the Sarbanes-Oxley Act of 2002 (“Section 906”), or other document authenticating, acknowledging, or otherwise adopting the signature that appears in typed form within the electronic version of this written statement required by Section 906, has been provided to Guidance Software, Inc. and will be retained by Guidance Software, Inc. and furnished to the Securities and Exchange Commission or its staff upon request.

XML

Document and Entity Information - shares	3 Months Ended
	Mar. 31, 2017	May 05, 2017
Document and Entity Information
Entity Registrant Name	Guidance Software, Inc.
Entity Central Index Key	0001375557
Document Type	10-Q
Document Period End Date	Mar. 31, 2017
Amendment Flag	false
Current Fiscal Year End Date	--12-31
Entity Current Reporting Status	Yes
Entity Filer Category	Accelerated Filer
Entity Common Stock, Shares Outstanding		33,405,000
Document Fiscal Year Focus	2017
Document Fiscal Period Focus	Q1

XML

CONDENSED CONSOLIDATED BALANCE SHEETS - USD ($) $ in Thousands	Mar. 31, 2017	Dec. 31, 2016
Current assets:
Cash and cash equivalents	$ 17,759	$ 12,619
Trade receivables, net of allowance for doubtful accounts of $629 and $554, respectively	16,553	22,236
Inventory	2,460	2,206
Prepaid expenses and other current assets	4,780	4,850
Total current assets	41,552	41,911
Long-term assets:
Property and equipment, net	9,115	11,044
Intangible assets, net	4,291	4,649
Goodwill	14,632	14,632
Other assets	2,271	2,180
Total long-term assets	30,309	32,505
Total assets	71,861	74,416
Current liabilities:
Accounts payable	3,649	4,722
Accrued liabilities	11,404	12,641
Bank line of credit		3,500
Deferred revenues	43,676	40,209
Total current liabilities	58,729	61,072
Long-term liabilities:
Deferred rent and other long-term liabilities	6,088	6,872
Deferred revenues	5,986	5,923
Deferred tax liabilities	626	604
Total long-term liabilities	12,700	13,399
Commitments and contingencies (Note 12)
Stockholders' equity (deficit):
Preferred stock, $0.001 par value: 10,000,000 shares authorized; no shares issued or outstanding
Common stock, $0.001 par value; 100,000,000 shares authorized; 34,435,000 and 33,855,000 shares issued, respectively; and 32,655,000 and 32,079,000 shares outstanding, respectively	26	26
Additional paid-in capital	130,387	128,169
Treasury stock, at cost, 1,779,000 and 1,779,000 shares, respectively	(11,479)	(11,479)
Accumulated deficit	(118,502)	(116,771)
Total stockholders' equity (deficit)	432	(55)
Total liabilities and stockholders' equity (deficit)	$ 71,861	$ 74,416

XML

CONDENSED CONSOLIDATED BALANCE SHEETS (Parenthetical) - USD ($) $ in Thousands	Mar. 31, 2017	Dec. 31, 2016
CONDENSED CONSOLIDATED BALANCE SHEETS
Trade receivables, allowance for doubtful accounts (in dollars)	$ 629	$ 554
Preferred stock, par value (in dollars per share)	$ 0.001	$ 0.001
Preferred stock, shares authorized	10,000,000	10,000,000
Preferred stock, shares issued	0	0
Preferred stock, shares outstanding	0	0
Common stock, par value (in dollars per share)	$ 0.001	$ 0.001
Common stock, shares authorized	100,000,000	100,000,000
Common stock, shares issued	34,435,000	33,855,000
Common stock, shares outstanding	32,655,000	32,079,000
Treasury stock, shares	1,779,000	1,779,000

XML

CONDENSED CONSOLIDATED STATEMENTS OF OPERATIONS - USD ($) shares in Thousands, $ in Thousands	3 Months Ended
	Mar. 31, 2017	Mar. 31, 2016
Revenues:
Product revenue	$ 8,867	$ 7,458
Services revenue	7,840	8,509
Maintenance revenue	10,079	9,832
Total revenues	26,786	25,799
Cost of revenues (excluding amortization and depreciation, shown below):
Cost of product revenue	1,763	1,956
Cost of services revenue	4,829	5,635
Cost of maintenance revenue	743	606
Total cost of revenues (excluding amortization and depreciation, shown below)	7,335	8,197
Operating expenses:
Selling and marketing	9,950	10,501
Research and development	5,481	6,242
General and administrative	4,532	6,190
Depreciation and amortization	1,158	1,415
Total operating expenses	21,121	24,348
Operating loss	(1,670)	(6,746)
Other income and expense:
Interest income		4
Interest expense	(4)	(2)
Other income, net	12	5
Total other income and expense	8	7
Loss before income taxes	(1,662)	(6,739)
Income tax provision	69	53
Net loss	$ (1,731)	$ (6,792)
Net loss per share:
Basic (in dollars per share)	$ (0.06)	$ (0.24)
Diluted (in dollars per share)	$ (0.06)	$ (0.24)
Weighted average number of shares used in per share calculation:
Basic (in shares)	29,685	28,580
Diluted (in shares)	29,685	28,580

XML

CONDENSED CONSOLIDATED STATEMENTS OF CASH FLOWS - USD ($) $ in Thousands	3 Months Ended
	Mar. 31, 2017	Mar. 31, 2016
Operating Activities:
Net loss	$ (1,731)	$ (6,792)
Adjustments to reconcile net loss to net cash provided by operating activities:
Depreciation and amortization	1,158	1,415
Provision for doubtful accounts	123
Share-based compensation	2,133	1,322
Deferred taxes	22	22
Loss on disposal of assets	1,199	14
Changes in operating assets and liabilities:
Trade receivables	5,560	6,838
Inventory	(255)	(14)
Prepaid expenses and other assets	(20)	(2,651)
Accounts payable	(1,059)	170
Accrued liabilities	(2,000)	(25)
Deferred revenues	3,530	1,979
Net cash provided by operating activities	8,660	2,278
Investing Activities:
Purchase of property and equipment	(84)	(806)
Net cash used in investing activities	(84)	(806)
Financing Activities:
Repayments of borrowings on line of credit	(3,500)
Proceeds from the exercise of stock options	85
Principal payments on capital lease obligations and other obligations	(21)	(19)
Net cash used in financing activities	(3,436)	(19)
Net decrease in cash and cash equivalents	5,140	1,453
Cash and cash equivalents, beginning of period	12,619	18,967
Cash and cash equivalents, end of period	$ 17,759	20,420
Non-cash investing and financing activities:
Purchase of equipment included in accounts payable and accrued expenses		293
Capital lease obligations incurred to acquire assets		$ 28

XML

Description of the Business

3 Months Ended

Mar. 31, 2017

Description of the Business

Description of the Business

Note 1. Description of the Business

General

Guidance Software, Inc. was incorporated in the state of California in 1997 and reincorporated in Delaware on December 11, 2006.  Guidance and its subsidiaries are collectively referred to herein as “Guidance,” “we,” “our,” or the “Company.”  Headquartered in Pasadena, California, Guidance is the leading global provider of digital investigative solutions.  Our EnCase® platform provides an investigative infrastructure that enables our customers to search, collect and analyze electronically stored information in order to address human resources matters, litigation matters, allegations of fraud, suspicious network endpoint activity and to defend and secure their organization’s data assets.

Our main products and services are:

Our Forensic Security Suite of products:

· EnCase Endpoint Security provides crucial IT cybersecurity functionality to enterprises and government agencies through its incident response and sensitive data discovery capabilities. Integrated with security alerting tools from Hewlett Packard Enterprises (“HP”), Cisco, Blue Coat Systems, and FireEye, EnCase Endpoint Security helps automate the critical first steps in cybersecurity incident response from the moment of a first alert. It rapidly delivers forensic-level visibility of the relevant endpoint data, capturing a snapshot of valuable information from active memory that might otherwise expire which may serve as evidence for potential criminal prosecution.

· EnCase Endpoint Investigator provides an investigative platform that enables an organization to search, collect, preserve, and analyze data on the servers, desktops, and laptops across its network. EnCase Endpoint Investigator enables organizations to respond to electronic discovery requests and conduct internal investigations, including those related to human resources or those focused on compliance or fraud. Companies can also collect and preserve data in response to regulator requests or for civil litigation matters.

· EnForce Risk Manager is a new data risk and privacy solution.  It allows organizations to implement a proactive approach to information governance, ensuring that sensitive data is identified, classified and remediated allowing organizations to reduce their cyber attack surface area, significantly mitigating potential damage from breaches and improving their ability to comply with global data protection mandates.

EnCase Forensic is a forensic investigation solution that enables forensic practitioners to conduct efficient, forensically sound digital data collection and investigations. The EnCase Forensic solution lets examiners acquire data from a wide variety of devices, unearth potential evidence with disk-level forensic analysis, and craft comprehensive reports on their findings, all while maintaining the integrity of the evidence in a forensically sound and court-proven manner.

EnCase eDiscovery is our enterprise-wide e-discovery solution addressing the end-to-end e-discovery needs of corporations and government agencies. The e-discovery product portfolio includes capabilities such as: legal hold, identification, collection, preservation, processing, first-pass review, and early case assessment (“ECA”) review.

EnCase eDiscovery Review is a highly secure, private cloud-hosted, multi-matter review platform with advanced analysis and technology assisted review (“TAR”) functionality, comprehensive production capabilities, and extensive project management and workflow features to enable efficient, effective, and defensible distributed review.

Forensic appliances include write blockers, forensic duplicators and storage devices. Write blockers and forensic duplicators are used to acquire forensically sound copies of digital storage devices such as hard disks and solid state drives.

In addition, we complement these offerings with a comprehensive array of professional, subscription and training services, including technical support and maintenance services to help our customers implement our solutions, conduct investigations and train their IT and legal professionals to effectively and efficiently use our products.

XML

Summary of Significant Accounting Policies

3 Months Ended

Mar. 31, 2017

Summary of Significant Accounting Policies

Summary of Significant Accounting Policies

Note 2. Summary of Significant Accounting Policies

Basis of Presentation

The accompanying condensed consolidated balance sheet as of March 31, 2017 and the condensed consolidated statements of operations for the three months ended March 31, 2017 and 2016 and cash flows for the three months ended March 31, 2017 and 2016 are unaudited.  These statements should be read in conjunction with the audited consolidated financial statements and related notes, together with management’s discussion and analysis of financial position and results of operations, contained in our Annual Report on Form 10-K for the year ended December 31, 2016, filed with the U.S. Securities and Exchange Commission (the “SEC”) on March 1, 2017.

The accompanying condensed consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States, or (“GAAP”), and pursuant to the rules and regulations of the SEC for interim financial reporting.  In the opinion of our management, the unaudited condensed consolidated financial statements have been prepared on the same basis as the audited consolidated financial statements in our Annual Report on Form 10-K for the year ended December 31, 2016 and include all normal and recurring adjustments necessary for the fair presentation of our financial position as of March 31, 2017 and our results of operations for the three months ended March 31, 2017 and 2016 and our cash flows for the three months ended March 31, 2017 and 2016.  The condensed consolidated balance sheet as of December 31, 2016 has been derived from the December 31, 2016 audited financial statements.  The operating results for the three month period ended March 31, 2017 are not necessarily indicative of the results that will be achieved for the full fiscal year or for future periods.

The condensed consolidated financial statements include the accounts of Guidance and its wholly owned subsidiaries.  All intercompany accounts and transactions have been eliminated.

Use of Estimates and Assumptions

The preparation of financial statements in conformity with GAAP requires management to make estimates and judgments that affect the reported amounts of assets, liabilities, revenues and expenses, and related disclosures.  On an ongoing basis, we evaluate these estimates, including those related to revenue recognition, share-based compensation, bad debts, income taxes, commitments, impairment considerations, contingencies and litigation.  We base our estimates on historical experience and on various other assumptions that are believed to be reasonable under the circumstances.  Actual results may differ from these estimates.

Cash and Cash Equivalents

We invest excess cash in money market funds and highly liquid debt instruments of the US government and its agencies.  Highly liquid investments with stated maturities of three months or less from the date of purchase are classified as cash and cash equivalents.

Fair Value of Financial Instruments

The carrying amounts of cash equivalents, accounts receivable and accounts payable approximate fair value because of the short-term maturities of these instruments.  Based on borrowing rates currently available to us for borrowings with similar terms, the carrying values of our capital lease obligations also approximate fair value.

Trade Receivables

Trade receivables are carried at original invoice amount less an allowance for doubtful accounts.  The allowance is established through a provision for bad debt expense, which is included in general and administrative expenses.  We determine the adequacy of this allowance by evaluating individual customer accounts receivable, through consideration of the customer’s financial condition and credit history, and taking into account current economic conditions.  In addition, we analyze our historical credit loss history and apply these loss rates to our current accounts receivable balances to verify the reasonableness of our allowance.  Trade receivables are written off when deemed uncollectible.  A trade receivable is generally considered past due if any portion of the receivable balance is outstanding for more than 30 days unless alternate terms are provided.

Inventory

Inventory is comprised of hardware components, packaged software components and finished goods and is valued at the lower of cost or market, using the weighted average cost method.  We conduct quarterly inventory reviews for obsolescence, and inventory considered unlikely to be sold is adjusted to net realizable value.

Amortization of Intangible Assets with Finite Lives

Intangible assets with finite lives are recorded at their fair value at the time of acquisition.  With the exception of our customer relationships intangible asset, which is amortized on a double-declining basis, the acquisition date fair values of such assets are amortized on a straight-line basis over the estimated useful lives.

Goodwill and Indefinite-Lived Intangibles

We account for our goodwill and indefinite-lived intangible assets in accordance with Intangibles — Goodwill and Other (ASC 350).  Goodwill represents the excess of purchase price over fair value of net assets acquired and is assigned to a reporting unit at the date the goodwill is initially recorded.  Goodwill and indefinite-lived intangible assets are not amortized but evaluated for impairment annually, or whenever events or changes in circumstances indicate that the value may not be recoverable.  The Company has the option to choose whether it will apply the qualitative assessment first before the quantitative assessment.  We performed a quantitative assessment for our goodwill and indefinite-lived assets as of October 1, 2016, and determined they were not impaired.

Concentrations of Credit Risk

Financial instruments that potentially subject us to significant concentrations of credit risk consist primarily of cash and cash equivalents and accounts receivable.  We restrict our investments in cash and cash equivalents to financial institutions, US government or federal agency instruments and obligations of corporations with high credit ratings.  At March 31, 2017, the majority of our cash balances were held at financial institutions located in California in accounts that are insured by the Federal Deposit Insurance Corporation for up to $250,000. Uninsured balances aggregate approximately $17.3 million as of March 31, 2017.  At March 31, 2017 all of our cash equivalents consisted of financial institution obligations.  We periodically perform credit evaluations of our customers and maintain reserves for potential losses on our accounts receivable.  We do not believe we are subject to concentrations of credit risk with respect to such receivables.

Revenue Recognition

We generate revenues principally from the sale of our EnCase software products. Our software products include perpetual licenses and are related to our Forensic Security Suite (EnCase Endpoint Security, EnCase Endpoint Investigator and EnForce Risk Manager), EnCase eDiscovery, EnCase Forensic, and forensic appliance sales. Revenue associated with the sale of software licenses and revenue associated with forensic appliance sales are referred to as product revenue. Revenues are also generated from training courses and consulting services in which we assist customers with the performance of digital investigations and train their IT and legal professionals in the use of our software products, as well as subscription revenues associated with cloud-based document review and production SaaS, which we collectively refer to as services revenue. Our proprietary products are generally sold with one to three years of maintenance, which can be renewed at a stated renewal rate and is referred to as maintenance revenues.

We recognize revenue in accordance with ASU 2009-13 , Multiple-Deliverable Revenue Arrangements , (amendment to ASC Topic 605, Revenue Recognition ), Revenue Recognition - Software topic (ASC 985-605) and Revenue Recognition (ASC 605). While the standards govern the basis for revenue recognition, significant judgment and the use of estimates are required in connection with the allocation of revenue between product, services and maintenance revenues, as well as the amount of deferred revenue to be recognized in each accounting period.

Revenue Recognition Criteria: We recognize revenue when the following criteria have been met:

· Persuasive evidence of an arrangement: When we either enter into contracts or receive written purchase orders issued by a customer that legally bind us and the customer.

· Delivery: We deem delivery of products to have occurred when the title and risk of ownership have passed to the buyer. Services revenues are considered delivered as they are performed.

· Fixed or determinable fee: We consider the fee to be fixed or determinable if the fee is not subject to refund or adjustment and the payment terms are within normal established practices. If the fee is not fixed or determinable, we recognize revenues as amounts become due and payable with respect to transactions with extended payment terms, or as refund rights lapse with respect to transactions containing such provisions, provided all other revenue recognition criteria have been met.

· Collection is deemed probable: We conduct a credit review for all significant transactions at the time of the arrangement to determine the credit-worthiness of the customer. Collection is deemed probable if we have a reasonable basis to expect that the customer will pay amounts under the arrangement as payments become due.

We report our revenues in three categories: product revenue, services revenue, and maintenance revenue. Product revenue includes revenues from software products and hardware products. Services revenue includes revenue from professional services, training, and subscriptions. Maintenance revenue includes maintenance revenue associated with our hardware and software products. Accounting treatment for each category of revenue and our most significant contract structures is further described below.

Revenue Recognition for Software Products and Software-Related Services (Software Elements)

Software product revenue. The timing of software product revenue recognition is dependent on the nature of the product sold or the structure of the license.

EnCase Software Products: Revenue associated with these arrangements, exclusive of amounts allocated to maintenance and other undelivered elements, for which we have vendor-specific objective evidence of fair value (“VSOE”), is recognized upon delivery, provided that all other criteria for revenue recognition have been met. Revenue associated with term licenses are recognized ratably over the term of the license because we have not established VSOE for post-contract customer support in term license arrangements.

Services revenue. The majority of our consulting and implementation services are performed under per hour or fixed fee arrangements. Revenue from such services is recognized as the services are provided or upon expiration of the contractual service period.

Training revenue is either recognized on a per-class basis upon a participant’s attendance or, for those customers who have subscribed to our Annual Training Passport program, revenue is recognized ratably over the annual period.

Maintenance revenue. Maintenance revenue includes technical support and software updates on a when-and-if-available basis. We recognize maintenance revenue ratably over the applicable maintenance period. We determine the amount of maintenance revenue to be allocated through reference to substantive maintenance renewal provisions contained in multiple element arrangements. We consider substantive maintenance provisions to be provisions where the cost of the maintenance renewal is stated in the contract with our customer as a percentage of the net license fee, provided the rate is substantive.

Revenue Recognition for Multiple-Element Arrangements — Software Products and Software-Related Services (Software Arrangements)

We often enter into arrangements with customers that purchase both software products and software-related services from us at the same time, or within close proximity of one another (referred to as software-related multiple-element arrangements). Such software-related multiple-element arrangements may include the sale of our software products, software maintenance services, which include license updates and product support, consulting/implementation services and training whereby the software license delivery is followed by the subsequent delivery of the other elements. For those software-related multiple-element arrangements, we have applied the residual method to determine the amount of software license revenues to be recognized pursuant to ASC 985-605. Under the residual method, if VSOE exists for the undelivered elements, this amount is deferred with the remaining, or residual, portion of the arrangement consideration recognized upon delivery of the software license, provided all other revenue recognition criteria are met.

Revenue Recognition for Hardware and Subscription Revenues (Nonsoftware Elements)

Hardware product revenue. Revenue associated with the sale of forensic appliances is recognized upon shipment to the customers, which include certain resellers, provided that all other criteria for revenue recognition have been met.

Subscription services revenue. Customers pay subscription fees to access our cloud-based document review and production software; however, they may not take possession of the software at any time during the term of the agreement. In general, we recognize revenue for subscription fees on a straight-line basis over the contract period commencing on the date the subscription is made available to the customer. Usage-based fees, which are determined monthly, are recognized when incurred.

Revenue Recognition for Multiple-Element Arrangements — Hardware, Subscription, and Nonsoftware-Related Services (Nonsoftware Arrangements)

We enter into arrangements with customers that purchase both nonsoftware-related subscription services and nonsoftware-related services, such as consulting services, at the same time or within close proximity of one another (referred to as nonsoftware multiple-element arrangements). Each element within a nonsoftware multiple-element arrangement is accounted for as a separate unit of accounting provided the following criteria are met: the delivered products or services have value to the customer on a standalone basis; and for an arrangement that includes a general right of return relative to the delivered products or services, delivery or performance of the undelivered product or service is considered probable and is substantially controlled by us. We consider a deliverable to have standalone value if the product or service is sold separately by us or another vendor, or could be resold by the customer. Further, our revenue arrangements generally do not include a general right of return relative to the delivered products. Where the aforementioned criteria for a separate unit of accounting are not met, the deliverable is combined with the undelivered element and treated as a single unit of accounting for the purposes of allocation of the arrangement consideration and revenue recognition. For those units of accounting that include more than one deliverable but are treated as a single unit of accounting, we generally recognize revenues ratably over the delivery period. For the purposes of revenue classification of the elements that are accounted for as a single unit of accounting, we allocate revenue to the respective revenue line items within our consolidated statements of operations based on a rational and consistent methodology utilizing our best estimate of relative selling prices of such elements.

For our nonsoftware multiple-element arrangements, we allocate revenue to each element based on a selling price hierarchy at the arrangement’s inception. The selling price for each element is based upon the following selling price hierarchy: VSOE, if available; third party evidence (“TPE”) if VSOE is not available; or best estimate of selling price (“BESP”) if neither VSOE nor TPE are available. A description as to how we determine VSOE, TPE and BESP is provided below:

· VSOE . VSOE is determined based on its historical pricing and discounting practices for the specific product or service when sold separately. In determining VSOE, we require that a substantial majority of the selling prices for these services fall within a reasonably narrow pricing range.

· TPE . When VSOE cannot be established for deliverables in a multiple element arrangement, judgment is applied with respect to whether we can establish a selling price based on TPE. TPE is determined based on competitor prices for similar deliverables when sold separately. Generally, our go-to-market strategy differs from that of our peers, and our offerings contain a significant level of differentiation such that comparable pricing of services with similar functionality has not been obtained. Furthermore, we have been unable to reliably determine selling prices of similar competitive services on a stand-alone basis. As a result, we have not been able to establish selling prices based on TPE.

· BESP . When VSOE or TPE cannot be established, we use BESP in our allocation of arrangement consideration. The objective of BESP is to determine the price at which we would transact a sale if the service were sold on a stand-alone basis. We determine BESP for deliverables by considering multiple factors including but not limited to prices we charge for similar offerings, market conditions, competitive landscape and pricing practices.

Revenue Recognition for Multiple-Element Arrangements — Arrangements with Software and Nonsoftware Elements

We also enter into multiple-element arrangements that may include a combination of our various software-related and nonsoftware-related products and services. In such arrangements, we first allocate the total arrangement consideration based on the relative selling prices to the software group of elements as a whole and to the nonsoftware group of elements. We then further allocate consideration allocated to the software group and nonsoftware group to the respective elements within that group following the guidance in ASC 985-605, ASC 605-25, and our policies described above. After the arrangement consideration has been allocated to the elements, we recognize revenue for each respective element in the arrangement as described above.

Recently Issued Accounting Pronouncements

In May 2014, the FASB issued ASU 2014-09, Revenue from Contracts with Customers: Topic 606 and issued subsequent amendments to the initial guidance in August 2015, March 2016, April 2016 and May 2016 within ASU 2015-04, ASU 2016-08, ASU 2016-10 and ASU 2016-12, respectively (ASU 2014-09, ASU 2015-04, ASU 2016-08, ASU 2016-10, ASU 2016-12, and ASU 2016-20 collectively, “Topic 606”). Topic 606 supersedes nearly all existing revenue recognition guidance under GAAP. The core principle of Topic 606 is to recognize revenues when promised goods or services are transferred to customers in an amount that reflects the consideration that is expected to be received for those goods or services. Topic 606 defines a five-step process to achieve this core principle and, in doing so, it is possible more judgment and estimates may be required within the revenue recognition process than are required under existing GAAP, including identifying performance obligations in the contract, estimating the amount of variable consideration to include in the transaction price and allocating the transaction price to each separate performance obligation, among others.

Topic 606 is effective for us at the beginning of our first quarter of fiscal 2018 and permits adoption either by using (i) a full retrospective approach for all periods presented in the period of adoption or (ii) a modified retrospective approach with the cumulative effect of initially applying Topic 606 recognized at the date of initial application and providing certain additional disclosures as defined per Topic 606.

We plan to adopt Topic 606 using the modified retrospective approach described above in the first quarter of fiscal 2018. However, a decision regarding the adoption method has not been finalized at this time. Our final determination will depend on a number of factors, such as the significance of the impact of the new standard on our financial results, system readiness, including that of software systems procured from third-party providers, and our ability to accumulate and analyze the information necessary to assess the impact on prior period financial statements, as necessary.

We continue to evaluate the impact of the new standard on our accounting policies, processes, and system requirements. We have assigned internal resources, in addition to the engagement of a third-party service provider, to assist in the evaluation of the impact of the standard and the implementation of software systems from third-party providers.  We have made investments in systems to enable timely and accurate reporting under the new standard.

As part of our evaluation, we have also considered the impact of the guidance in ASC 340-40, Other Assets and Deferred Costs: Contracts with Customers, and the interpretations of the FASB Transition Resource Group for Revenue Recognition (“TRG”) from their November 7, 2016 meeting with respect to capitalization and amortization of incremental costs of obtaining a contract.  As a result of this new guidance, we preliminarily believe that we will capitalize additional costs of obtaining the contract, including sales commissions.  The new cost guidance, as interpreted by the TRG, requires the capitalization of all incremental costs that are incurred to obtain a contract with a customer that would not have been incurred if the contract had not been obtained, provided the costs are expected to be recovered.  Under our current accounting policy, we expense costs in the period we invoice the customer.  Additionally, we preliminarily believe that the amortization period for our deferred commission costs will be longer than the contract term, as the new cost guidance requires entities to determine whether the costs relate to specific anticipated contracts.  Therefore, we believe that the period of benefit, as interpreted by the TRG, for deferred commission costs will likely be longer than the initial contract period.   We are continuing to evaluate the impact of our adoption of Topic 606 and our preliminary assessments are subject to change.

While we continue to assess the potential impacts of the new standard, including the areas described above, and anticipate this standard would not have a material impact on our consolidated financial statements, we do not know or cannot reasonably estimate quantitative information related to the impact of the new standard on our financial statements at this time.

In February 2016, the FASB issued ASU No. 2016-02, Leases (“Topic 842”), which requires lessees to recognize on the balance sheet a right-of-use asset, representing their right to use the underlying asset for the lease term, and a lease liability for all leases with terms greater than 12 months. The guidance also requires qualitative and quantitative disclosures designed to assess the amount, timing and uncertainty of cash flows arising from leases. The standard requires the use of a modified retrospective transition approach, which includes a number of optional practical expedients that entities may elect to apply. ASU 2016-02 is effective for the Company beginning January 1, 2019 and we are currently evaluating the impact that ASU 2016-02 will have on our consolidated financial statements.

In March 2016, the FASB issued ASU No. 2016-09, Compensation - Stock Compensation (“Topic 718”), Improvements to the Employee Share-Based Payment Accounting.  The standard is intended to simplify several areas of accounting for share-based compensation arrangements, including the income tax impact, classification on the statement of cash flows and forfeitures. We have adopted the pronouncement on a prospective basis making it effective for the Company as of January 1, 2017. Upon adoption, excess tax benefits from share-based award activity are reflected in the consolidated statements of income as a component of the provision for income taxes, whereas previously such income tax benefits were recognized as part of additional paid-in capital and could not be recognized until they were realized through a reduction in income taxes payable. The previously unrecognized excess tax benefits do not have an impact to the Company as they increase our net operating losses and valuation allowance by the same amount. We have elected to continue to record our stock compensation expense net of estimated forfeitures and not to account for forfeitures as they occur. The cash flow presentation of employee taxes paid will not apply to our Company as we do not withhold shares to cover employee taxes incurred relating to their stock transactions.

In January 2017, the Financial Accounting Standards Board (FASB) issued ASU 2017-04, Intangibles—Goodwill and Other (“Topic 350”): SimplifyingtheTestforGoodwillImpairment (ASU 2017-04), which eliminates step two from the goodwill impairment test. Under the amendments in ASU 2017-04, an entity should recognize an impairment charge for the amount by which the carrying amount of a reporting unit exceeds its fair value; however, the loss recognized should not exceed the total amount of goodwill allocated to that reporting unit. ASU 2017-04 is effective for us in our first quarter of fiscal 2020 on a prospective basis, and earlier adoption is permitted for goodwill impairment tests performed on testing dates after January 1, 2017. We are currently evaluating the impact of our pending adoption of ASU 2017-04 on our consolidated financial statements.

Realignment Expense

For the three months ended March 31, 2017, we incurred $1.4 million in realignment expense related to the consolidation of leased space at our corporate headquarters and severance costs.  Realignment expense resulting from the consolidation of leased space at our corporate headquarters is included in general and administrative expense.  The severance costs are included in cost of services revenue, selling and marketing expense, research and development expense and general and administrative expense, based on the employees’ cost center assignments prior to termination.

XML

Net Loss Per Share

3 Months Ended

Mar. 31, 2017

Net Loss Per Share

Net Loss Per Share

Note 3. Net Loss Per Share

Earnings Per Share (ASC 260) defines unvested share-based payment awards that contain non-forfeitable rights to dividends as participating securities that should be included in computing EPS using the two-class method.  The Company’s unvested restricted stock awards qualify as participating securities.

Basic net loss per common share is calculated by dividing net loss allocated to common stockholders by the weighted average number of common shares outstanding during the reporting period. Diluted net loss allocated to common stockholders per share is calculated based on the weighted average number of common shares and dilutive potential common shares outstanding during the period. Dilutive potential common shares consist of the shares issuable upon the exercise of stock options and upon the vesting of restricted stock awards under the treasury stock method. In net loss periods, basic net loss per share and diluted net loss per share are identical since the effect of potential common shares is anti-dilutive and therefore excluded.

The following table sets forth the computation of basic and diluted net loss allocated to common stockholders per share (in thousands, except per share amounts):

	Three Months Ended March 31,
	2017			2016
Basic loss per common share:
Numerator:
Net loss	$	(1,731	)	$	(6,792	)
Net loss allocated to common stockholders	$	(1,731	)	$	(6,792	)
Denominator:
Basic weighted average shares outstanding	29,685			28,580
Net loss per basic common share	$	(0.06	)	$	(0.24	)
Diluted loss per common share:
Numerator:
Net loss	$	(1,731	)	$	(6,792	)
Net loss allocated to common stockholders	$	(1,731	)	$	(6,792	)
Denominator:
Basic weighted average shares outstanding	29,685			28,580
Effect of dilutive share-based awards	—			—
Diluted weighted average shares outstanding	29,685			28,580
Net loss per diluted common share	$	(0.06	)	$	(0.24	)

Antidilutive securities, which consist of stock options and restricted stock awards that are not included in the diluted net loss per share calculation, consisted of an aggregate of approximately 1,289,000 and 3,133,000 shares for the three months ended March 31, 2017 and 2016, respectively.

XML

Inventory

3 Months Ended

Mar. 31, 2017

Inventory

Inventory

Note 4. Inventory

Inventory is comprised of hardware components, packaged software components and finished goods and is valued at the lower of cost or market, using the weighted average cost method.  The following table sets forth, by major classes, inventory as of March 31, 2017 and December 31, 2016 (in thousands):

	March 31, 2017		December 31, 2016
Inventory:
Components	$	1,309	$	1,004
Finished goods	1,151		1,202
Total inventory	$	2,460	$	2,206

XML

Prepaid Expense and Other Current Assets

3 Months Ended

Mar. 31, 2017

Prepaid Expense and Other Current Assets

Prepaid Expense and Other Current Assets

Note 5. Prepaid Expense and Other Current Assets

Prepaid expenses and other current assets consist of the following (in thousands):

	March 31, 2017		December 31, 2016
Software licenses	$	1,950	$	1,529
Prepaid software maintenance	1,234		1,091
Payroll and employee-related expenses	18		394
Insurance	115		460
Other prepaid expenses and other current assets	1,463		1,376
Total prepaid expenses and other current assets	$	4,780	$	4,850

XML

Goodwill and Other Intangibles

3 Months Ended

Mar. 31, 2017

Goodwill and Other Intangibles

Goodwill and Other Intangibles

Note 6. Goodwill and Other Intangibles

We evaluate goodwill and indefinite-lived intangible assets for impairment on an annual basis, or more frequently if circumstances indicate impairment may have occurred, and there have been no impairment charges related to such assets through March 31, 2017.  We expect the balance of goodwill assigned to our products segment to be deductible for tax purposes while the balance of goodwill assigned to our subscription and professional services segments will not be deductible for tax purposes.

Intangible assets are amortized on a straight-line basis over their estimated useful lives, with the exception of customer relationships, which are amortized on a double-declining basis.  Amortization expense for intangible assets with finite lives was $0.4 million for both the three months ended March 31, 2017 and 2016. The following table summarizes cumulative amortization expense related to intangible assets subject to amortization as of March 31, 2017 and December 31, 2016 (in thousands):

	March 31, 2017							December 31, 2016
	Gross Costs		Accumulated Amortization			Net		Gross Costs		Accumulated Amortization			Net
Core technology	$	5,800	$	(4,188	)	$	1,612	$	5,800	$	(3,993	)	$	1,807
Customer relationships	6,475		(4,386		)	2,089		6,475		(4,276		)	2,199
Trade names	2,100		(1,542		)	558		2,100		(1,497		)	603
Covenant not-to-compete	200		(200		)	—		200		(194		)	6
Domain name	45		(13		)	32		45		(11		)	34
Total	$	14,620	$	(10,329	)	$	4,291	$	14,620	$	(9,971	)	$	4,649

The following table summarizes the estimated remaining amortization expense through 2021 and thereafter (in thousands):

Year ending	Amortization Expense
2017	$	1,051
2018	1,401
2019	825
2020	539
2021	430
Thereafter	45
Total amortization expense	$	4,291

XML

Debt Obligations

3 Months Ended

Mar. 31, 2017

Debt Obligations

Debt Obligations

Note 7. Debt Obligations

On August 29, 2014, we entered into a three year, Senior Secured Revolving Line of Credit (“Revolver”) with a bank. We are obligated to pay a commitment fee of $0.2 million over the three-year term of the Revolver.

The maximum principal amount that may be outstanding at any given time under the Revolver, which includes up to $3.0 million of standby letters of credit, is $10.0 million. Borrowing availability is calculated as 80% of eligible accounts receivable, with a maximum of $10.0 million.  Any borrowings under the Revolver would be collateralized by substantially all of our assets, as well as pledges of capital stock.

The Revolver requires that, if we suffer an event of default or have borrowed more than 75% of the maximum principal amount permitted to be outstanding, the Company maintains an adjusted quick ratio of at least 1.15:1.  The adjusted quick ratio is calculated by dividing quick assets (cash less restricted cash plus accounts receivable) by current liabilities (current liabilities plus outstanding standby letter of credit less the current portion of deferred revenue).  Borrowings under the Revolver bear interest at a floating rate ranging from 1.25% to 3.25% above the prime rate depending on the Company’s adjusted quick ratio.

As of March 31, 2017, the Company was in compliance with all the covenants of the Revolver.  The Company had letters of credit outstanding against the Revolver in the amount of $1.2 million, resulting in the maximum available borrowing under the Revolver to be $8.7 million.  As of March 31, 2017, the balance outstanding under the Revolver was zero.  The Company’s adjusted quick ratio was 2.14:1.  During periods when the adjusted quick ratio is below 1.5:1, any collections received by the Company in its collateral account would be applied to outstanding loan balances before being remitted to the Company’s operating account.   Amounts in the collateral account would be transferred to the Company’s operating account after any loan balance has been paid in full.

XML

Employee Benefit Plans

3 Months Ended

Mar. 31, 2017

Employee Benefit Plans

Employee Benefit Plans

Note 8. Employee Benefit Plans

At March 31, 2017, approximately 1.1 million shares were available for grant as options or nonvested share awards under the Guidance Software, Inc. Second Amended and Restated 2004 Equity Incentive Plan (the “Plan”).

Stock Options

The terms of the options granted under the Plan are determined at the time of grant, and generally vest 25% annually over a four-year service period and typically must be exercised within 10 years from the date of grant.  A summary of stock option activity follows:

	Number of Options		Weighted Average Exercise Price		Weighted Average Remaining Contractual Term (in years)	Aggregate Intrinsic Value
Outstanding, December 31, 2016	1,765,000		$	6.17	7.3	$	2,909,000
Granted	—		$
Exercised	(21,000	)	$	3.99
Forfeited or expired	(30,000	)	$	9.35
Outstanding, March 31, 2017	1,714,000		$	6.14	7.1	$	1,128,000
Exercisable, March 31, 2017	674,000		$	7.60	4.9	$	329,000

We define in-the-money options at March 31, 2017 as options that had exercise prices that were lower than the $5.90 fair market value of our common stock at that date.  The aggregate intrinsic value of options outstanding at March 31, 2017 is calculated as the difference between the exercise price of the underlying options and the fair market value of our common stock for the 981,000 shares that were in-the-money at that date, 288,000 of which were exercisable.

Restricted Stock Awards

We issue restricted stock awards to certain directors, officers and employees.  Compensation expense for such awards, based on the fair market value of the awards on the grant date, is recorded during the vesting period.  Restricted stock awards generally vest 25% annually over a four-year service period.  A summary of restricted stock awards activity follows:

	Number of Shares		Weighted Average Fair Value
Outstanding, December 31, 2016	2,888,000		$	5.25
Granted	12,000		6.77
Granted adjustment (performance shares)	586,000		4.37
Vested	(1,032,000	)	4.78
Forfeited	(43,000	)	6.37
Outstanding, March 31, 2017	2,411,000		5.22

The total grant date fair value of shares vested under such grants during the three months ended March 31, 2017 was 4,929,000.

On March 18, 2016, we granted approximately 586,000 performance-based restricted stock awards to certain members of our executive team, with a fair market value of $4.37 per share. The performance criteria were based on the achievement of certain revenue levels for the year ending December 31, 2016.  Depending on the revenue level achieved, the number of shares that would vest ranged from 10% to 200% of the approximately 586,000 shares granted. As of December 31, 2016, the Company achieved 200% of the revenue target level and as a result approximately 586,000 shares vested and another approximately 586,000 shares were granted in February, 2017. The February grant is included in our restricted stock awards outstanding as of March 31, 2017 and will vest on December 31, 2017, subject to continued employment of the executive.  These performance-based restricted stock awards were considered for calculating the diluted shares outstanding balance at March 31, 2017.  However, as the Company is in a net loss position for the three months ended March 31, 2017, the performance-based restricted stock awards were considered anti-dilutive and therefore excluded from the calculation.

Share-Based Compensation

We account for share-based compensation in accordance with Compensation-Stock Compensation (ASC 718).  Compensation expense for stock options is recognized using the Black-Scholes option pricing model to determine the grant date fair value of share-based payments and recognize that cost, net of an estimated forfeiture rate, as compensation expense on a straight-line basis over the vesting period. Stock awards generally vest 25% annually over a four-year service period.  The determination of the grant date fair value of share-based awards using that model is affected by our stock price as well as assumptions regarding a number of complex and subjective variables. These variables include the estimated number of years that we expect employees to hold their stock options (the option “expected term”) and our expected stock price volatility, risk-free interest rates and dividends to be paid on our stock over that term.

The fair values of stock options granted under the Second Amended and Restated Plan were estimated at the date of grant using the Black-Scholes option pricing model and the following weighted average assumptions (note, no options were granted during the three months ended March 31, 2017):

	Three Months Ended March 31, 2016
Risk-free interest rate	1.3		%
Dividend yield	—		%
Expected life (years)	5.68
Volatility	46.56		%
Weighted average grant date fair value	$	1.68

When historical data is available and relevant, the expected term of options granted is determined by calculating the average term from historical stock option exercise experience.  The volatility of our common stock is estimated at the date of grant based on the volatility of our publicly traded common stock over the expected term of the options granted.  The volatility is calculated based on the adjusted close price each day from a composite index. The risk-free interest rate used in option valuation is based on the implied yield in effect at the time of each option grant, based on US Treasury zero-coupon issues with equivalent expected terms. We use a dividend yield of zero in the Black-Scholes model, as we have no expectation we will pay any cash dividends on our common stock in the foreseeable future. Compensation-Stock Compensation (ASC 718) also requires that we estimate forfeitures at the time of grant and revise those estimates in subsequent periods if actual forfeitures differ from those estimates. We use historical data to estimate pre-vesting option forfeitures and record share-based compensation expense only for those awards that are expected to vest. Quarterly changes in the estimated forfeiture rate can potentially have a significant effect on reported share-based compensation, as the cumulative effect of adjusting the forfeiture rate for all expense amortization after the grant date is recognized in the period the forfeiture estimate is changed.

The following table summarizes the share-based compensation expense we recorded (in thousands):

	Three Months Ended March 31,
	2017		2016
Stock option awards	$	198	$	160
Restricted stock awards	1,935		1,162
Total share-based compensation expense	$	2,133	$	1,322

The following table summarizes where the share-based compensation expense was recorded by income statement line item (in thousands):

	Three Months Ended March 31,
	2017		2016
Cost of product revenue	$	10	$	15
Cost of services revenue	73		171
Cost of maintenance revenue	20		38
Selling and marketing expense	858		110
Research and development expense	566		427
General and administrative expense	606		561
Total share-based compensation expense	$	2,133	$	1,322

There is $0.8 million of share-based compensation expense related to the performance-based restricted stock awards in our total restricted stock awards share-based compensation expense for the three months ended March 31, 2017.

As of March 31, 2017, there was approximately $2.0 million of total unrecognized share-based compensation cost related to stock options that we expect to be recognized over a weighted-average period of 2.6 years and approximately $9.0 million of total unrecognized share-based compensation cost related to restricted stock awards that is expected to be recognized over a weighted-average period of 2.3 years.  For awards outstanding at March 31, 2017, we expect to record approximately $0.6 million and $3.9 million in share-based compensation for the remainder of fiscal year 2017 related to stock options and restricted stock awards, respectively.

XML

Income Taxes

3 Months Ended

Mar. 31, 2017

Income Taxes

Income Taxes

Note 9. Income Taxes

We account for income taxes in accordance with Income Taxes (ASC 740).  Deferred income taxes are recorded for the expected tax consequences of temporary differences between the tax bases of assets and liabilities for financial reporting purposes and amounts recognized for income tax purposes.  We record a valuation allowance to reduce our deferred tax assets to the amount of future tax benefit that is more likely than not to be realized.  As of March 31, 2017, we have recorded a valuation allowance against our net U.S. deferred tax assets resulting in a carrying value of zero.

We have recorded an income tax provision for the three months ended March 31, 2017 of $69,000 as compared to $53,000 for the same period in 2016.  Our income tax provision for the three months ended March 31, 2017 differs from the U.S. statutory rate of 34% primarily due to state taxes, foreign taxes, federal alternative minimum tax, the tax impact of certain share-based compensation charges, and the impact of providing a valuation allowance against research and development credits and the net United States deferred tax assets.  For the three months ended March 31, 2016, our income tax provision differs from the U.S. statutory rate of 34% primarily due to state taxes, foreign taxes, the tax impact of certain share-based compensation charges, and the impact of providing a valuation allowance against research and development credits and the net U.S. deferred tax assets.

XML

Accrued Liabilities

3 Months Ended

Jun. 30, 2017

Accrued Liabilities

Accrued Liabilities

Note 10. Accrued Liabilities

Accrued liabilities consist of the following (in thousands):

	March 31, 2017		December 31, 2016
Payroll and related benefits	$	5,974	$	7,138
Sales tax audit accrual	1,256		1,243
Software licenses	992		1,111
Deferred rent and rent incentives	661		808
Lease obligations	1,197		562
Professional fees	221		522
Insurance	229		345
Other accrued liabilities	874		912
Total accrued liabilities	$	11,404	$	12,641

XML

Fair Value Measurements

3 Months Ended

Mar. 31, 2017

Fair Value Measurements

Fair Value Measurements

Note 11. Fair Value Measurements

In accordance with Fair Value Measurements and Disclosures (ASC 820), we measure our financial assets and liabilities at fair value on a recurring basis.  ASC 820 requires disclosure that establishes a framework for measuring fair value and expands disclosure about fair value measurements.  Under this standard, fair value is defined as the price that would be received in exchange for selling an asset or paid to transfer a liability (i.e., the “exit price”) in an orderly transaction between market participants at the measurement date.  ASC 820 establishes a hierarchy for inputs used in measuring fair value that minimizes the use of unobservable inputs by requiring the use of observable market data when available.  Observable inputs are inputs that market participants would use in pricing the asset or liability based on active market data.  Unobservable inputs would be inputs that reflect our assumptions about the assumptions market participants would use in pricing the asset or liability based on the best information available in the circumstances.  The statement requires fair value measurements be classified and disclosed in one of the following three categories:

Level 1:Unadjusted quoted prices in active markets that are accessible at the measurement date for identical, unrestricted assets and liabilities.

Level 2:Quoted prices in markets that are not active or financial instruments for which all significant inputs are observable, either directly or indirectly, and corroborated by market data.

Level 3:Prices or valuations that require inputs that are both significant to the fair value measurement and unobservable.

The following table sets forth, by level within the fair value hierarchy, financial assets and liabilities that are accounted for at fair value on a recurring basis as of March 31, 2017 and December 31, 2016 (in thousands):

	Fair Value Measurements at March 31, 2017
	Total		Level 1		Level 2		Level 3
Assets:
Money market accounts	205		205		—		—
Total assets	$	205	$	205	$	—	$	—

	Fair Value Measurements at December 31, 2016
	Total		Level 1		Level 2		Level 3
Assets:
Money market accounts	205		205		—		—
Total assets	$	205	$	205	$	—	$	—

XML

Commitments and Contingencies

3 Months Ended

Mar. 31, 2017

Commitments and Contingencies

Commitments and Contingencies

Note 12. Commitments and Contingencies

Third-party Software Licenses

In February 2016, the Company entered into a $1.7 million third-party software license agreement authorizing the Company to integrate software as a component of its products through February 2020.  The agreement also provides for payment by the Company of $0.3 million for two years of maintenance and support.  The $2.0 million is payable in five installments, of which $1.5 million was payable during the year ending December 31, 2016 and $0.5 million is payable during the first six months of 2017.  As of March 31, 2017, the outstanding balance was $0.3 million.

Letter of Credit

As of March 31, 2017 we had a $1.2 million letter of credit outstanding against our Senior Secured Revolving Line of Credit related to the lease of our corporate headquarters.

Legal Matters

On May 20, 2011, MyKey Technology Inc. (“MyKey”) filed a complaint against the Company for patent infringement in the United States District Court for the District of Delaware  (the “District Court Case”).  The complaint alleged that certain of our data acquisition forensic hardware products that we acquired as a result of our acquisition of certain assets of Tableau, LLC (“Tableau”) infringe three of MyKey’s patents relating to write blocking, duplication and data removal technologies, respectively.

On July 22, 2011, MyKey also filed a complaint with the United States International Trade Commission (the “ITC Case”), alleging infringement by the Company and certain other parties of the three patents discussed in the preceding paragraph and requesting that the ITC commence an investigation pursuant to Section 337 of the Tariff Act of 1930.  On December 28, 2012, the ITC released a final determination and Order holding that no violation of Section 337 of the Tariff Act of 1930 occurred.  This Order effectively ended the ITC Case in the Company’s favor.

On June 16, 2016, MyKey and the Company agreed to a settlement agreement for $2.3 million, whereby in exchange for a payment by the Company, which the Company has paid, the Company received a full release of all claims for patent infringement against the Company.  The settlement payment was recorded to general and administrative expenses.

On July 29, 2016, the Company entered into a settlement agreement with TEFKAT LLC (formerly known as Tableau LLC) and its sole shareholder, Robert Botchek, related to a breach of contract stemming from the MyKey matter.  The agreement requires TEFKAT LLC to pay the Company a settlement amount of $1.2 million, which has been received by the Company.  The settlement received was recorded as an offset to the $2.3 million MyKey settlement payment, resulting in a net effect of $1.1 million recorded in general and administrative expenses.

From time to time, we may become involved in various other lawsuits and legal proceedings that arise in the ordinary course of business.  Litigation is subject to inherent uncertainties, and an adverse result in these or other matters may arise from time to time that may harm our business.  We are not currently aware of any such other legal proceedings or claims that are likely to have a material impact on our business.

Indemnifications

We have agreed to indemnify our directors and executive officers for costs associated with any fees, expenses, judgments, fines and settlement amounts incurred by them in any action or proceeding to which any of them is, or is threatened to be, made a party by reason of their services in their role as a director or officer.

XML

Segment Information

3 Months Ended

Mar. 31, 2017

Segment Information

Segment Information

Note 13. Segment Information

We have adopted Segment Reporting (ASC 280) requiring segmentation based on our internal organization and reporting of revenue and other performance measures. Our segments are designed to allocate resources internally and provide a framework to determine management responsibility.  Operating segments are defined as components of an enterprise about which discrete financial information is available that is evaluated regularly by the chief operating decision maker, or decision making group, in deciding how to allocate resources and in assessing performance.  Our chief operating decision maker is our Chief Executive Officer.  We have five operating segments, as summarized below:

· Products segment—Includes EnCase® Endpoint Investigator, EnCase® Endpoint Security, EnCase® eDiscovery, EnCase® Risk Manager, EnCase® Forensic and appliance sales.

· Subscription segment—Includes subscription services for cloud-based document review and production software.

· Professional services segment—Performs consulting services and implementations.

· Training segment—Provides training classes by which we train our customers to effectively and efficiently use our software products.

· Maintenance segment—Includes maintenance related services. We do not separately allocate operating expenses to these segments, nor do we allocate specific assets, with the exception of goodwill, to these segments. Therefore, the segment information reported includes only revenues, cost of revenues and segment profit.  The following tables present the results of operations for each operating segment (in thousands):

	Three Months Ended March 31, 2017
	Products		Subscription		Professional services		Training		Maintenance		Total
Revenues	$	8,867	$	1,588	$	4,383	$	1,869	$	10,079	26,786
Cost of revenues	1,763		569		2,903		1,357		743		7,335
Segment profit	$	7,104	$	1,019	$	1,480	$	512	$	9,336	19,451
Total operating expenses											21,121
Operating loss											$	(1,670	)

	Three Months Ended March 31, 2016
	Products		Subscription		Professional services		Training		Maintenance		Total
Revenues	$	7,458	$	1,578	$	4,828	$	2,103	$	9,832	$	25,799
Cost of revenues	1,956		655		3,495		1,485		606		8,197
Segment profit	$	5,502	$	923	$	1,333	$	618	$	9,226	17,602
Total operating expenses											24,348
Operating loss											$	(6,746	)

Revenues, classified by the major geographic areas in which we operate, are as follows (in thousands):

	Three Months Ended March 31,
	2017		2016
Revenues
United States	$	20,980	$	19,815
Europe	3,838		3,455
Asia	832		1,363
Other	1,136		1,166
	$	26,786	$	25,799

XML

Subsequent Event

3 Months Ended

Mar. 31, 2017

Subsequent Event

Subsequent Event

Note 14. Subsequent Event

Third-party Software License

In April 2017, the Company entered into a $3.3 million third-party software license agreement for a cloud-based solution to host data for customers of its EnCase eDiscovery Review product. The first year installment is $0.5 million and is due in equal quarterly payments starting in April 2017.  The second year installment is $1.0 million, due in full in April 2018, and the third year installment is $1.8 million, due in full in April 2019, provided certain conditions are met.

XML

Summary of Significant Accounting Policies (Policies)

3 Months Ended

Mar. 31, 2017

Summary of Significant Accounting Policies

Basis of Presentation

Basis of Presentation

The accompanying condensed consolidated balance sheet as of March 31, 2017 and the condensed consolidated statements of operations for the three months ended March 31, 2017 and 2016 and cash flows for the three months ended March 31, 2017 and 2016 are unaudited.  These statements should be read in conjunction with the audited consolidated financial statements and related notes, together with management’s discussion and analysis of financial position and results of operations, contained in our Annual Report on Form 10-K for the year ended December 31, 2016, filed with the U.S. Securities and Exchange Commission (the “SEC”) on March 1, 2017.

The accompanying condensed consolidated financial statements have been prepared in accordance with accounting principles generally accepted in the United States, or (“GAAP”), and pursuant to the rules and regulations of the SEC for interim financial reporting.  In the opinion of our management, the unaudited condensed consolidated financial statements have been prepared on the same basis as the audited consolidated financial statements in our Annual Report on Form 10-K for the year ended December 31, 2016 and include all normal and recurring adjustments necessary for the fair presentation of our financial position as of March 31, 2017 and our results of operations for the three months ended March 31, 2017 and 2016 and our cash flows for the three months ended March 31, 2017 and 2016.  The condensed consolidated balance sheet as of December 31, 2016 has been derived from the December 31, 2016 audited financial statements.  The operating results for the three month period ended March 31, 2017 are not necessarily indicative of the results that will be achieved for the full fiscal year or for future periods.

The condensed consolidated financial statements include the accounts of Guidance and its wholly owned subsidiaries.  All intercompany accounts and transactions have been eliminated.

Use of Estimates and Assumptions

Use of Estimates and Assumptions

The preparation of financial statements in conformity with GAAP requires management to make estimates and judgments that affect the reported amounts of assets, liabilities, revenues and expenses, and related disclosures.  On an ongoing basis, we evaluate these estimates, including those related to revenue recognition, share-based compensation, bad debts, income taxes, commitments, impairment considerations, contingencies and litigation.  We base our estimates on historical experience and on various other assumptions that are believed to be reasonable under the circumstances.  Actual results may differ from these estimates.

Cash and Cash Equivalents

Cash and Cash Equivalents

We invest excess cash in money market funds and highly liquid debt instruments of the US government and its agencies.  Highly liquid investments with stated maturities of three months or less from the date of purchase are classified as cash and cash equivalents.

Fair Value of Financial Instruments

Fair Value of Financial Instruments

The carrying amounts of cash equivalents, accounts receivable and accounts payable approximate fair value because of the short-term maturities of these instruments.  Based on borrowing rates currently available to us for borrowings with similar terms, the carrying values of our capital lease obligations also approximate fair value.

Trade Receivables

Trade Receivables

Trade receivables are carried at original invoice amount less an allowance for doubtful accounts.  The allowance is established through a provision for bad debt expense, which is included in general and administrative expenses.  We determine the adequacy of this allowance by evaluating individual customer accounts receivable, through consideration of the customer’s financial condition and credit history, and taking into account current economic conditions.  In addition, we analyze our historical credit loss history and apply these loss rates to our current accounts receivable balances to verify the reasonableness of our allowance.  Trade receivables are written off when deemed uncollectible.  A trade receivable is generally considered past due if any portion of the receivable balance is outstanding for more than 30 days unless alternate terms are provided.

Inventory

Inventory

Inventory is comprised of hardware components, packaged software components and finished goods and is valued at the lower of cost or market, using the weighted average cost method.  We conduct quarterly inventory reviews for obsolescence, and inventory considered unlikely to be sold is adjusted to net realizable value.

Amortization of Intangible Assets with Finite Lives

Amortization of Intangible Assets with Finite Lives

Intangible assets with finite lives are recorded at their fair value at the time of acquisition.  With the exception of our customer relationships intangible asset, which is amortized on a double-declining basis, the acquisition date fair values of such assets are amortized on a straight-line basis over the estimated useful lives.

Goodwill and Indefinite-Lived Intangibles

Goodwill and Indefinite-Lived Intangibles

We account for our goodwill and indefinite-lived intangible assets in accordance with Intangibles — Goodwill and Other (ASC 350).  Goodwill represents the excess of purchase price over fair value of net assets acquired and is assigned to a reporting unit at the date the goodwill is initially recorded.  Goodwill and indefinite-lived intangible assets are not amortized but evaluated for impairment annually, or whenever events or changes in circumstances indicate that the value may not be recoverable.  The Company has the option to choose whether it will apply the qualitative assessment first before the quantitative assessment.  We performed a quantitative assessment for our goodwill and indefinite-lived assets as of October 1, 2016, and determined they were not impaired.

Concentrations of Credit Risk

Concentrations of Credit Risk

Financial instruments that potentially subject us to significant concentrations of credit risk consist primarily of cash and cash equivalents and accounts receivable.  We restrict our investments in cash and cash equivalents to financial institutions, US government or federal agency instruments and obligations of corporations with high credit ratings.  At March 31, 2017, the majority of our cash balances were held at financial institutions located in California in accounts that are insured by the Federal Deposit Insurance Corporation for up to $250,000. Uninsured balances aggregate approximately $17.3 million as of March 31, 2017.  At March 31, 2017 all of our cash equivalents consisted of financial institution obligations.  We periodically perform credit evaluations of our customers and maintain reserves for potential losses on our accounts receivable.  We do not believe we are subject to concentrations of credit risk with respect to such receivables.

Revenue Recognition

Revenue Recognition

We generate revenues principally from the sale of our EnCase software products. Our software products include perpetual licenses and are related to our Forensic Security Suite (EnCase Endpoint Security, EnCase Endpoint Investigator and EnForce Risk Manager), EnCase eDiscovery, EnCase Forensic, and forensic appliance sales. Revenue associated with the sale of software licenses and revenue associated with forensic appliance sales are referred to as product revenue. Revenues are also generated from training courses and consulting services in which we assist customers with the performance of digital investigations and train their IT and legal professionals in the use of our software products, as well as subscription revenues associated with cloud-based document review and production SaaS, which we collectively refer to as services revenue. Our proprietary products are generally sold with one to three years of maintenance, which can be renewed at a stated renewal rate and is referred to as maintenance revenues.

We recognize revenue in accordance with ASU 2009-13 , Multiple-Deliverable Revenue Arrangements , (amendment to ASC Topic 605, Revenue Recognition ), Revenue Recognition - Software topic (ASC 985-605) and Revenue Recognition (ASC 605). While the standards govern the basis for revenue recognition, significant judgment and the use of estimates are required in connection with the allocation of revenue between product, services and maintenance revenues, as well as the amount of deferred revenue to be recognized in each accounting period.

Revenue Recognition Criteria: We recognize revenue when the following criteria have been met:

· Persuasive evidence of an arrangement: When we either enter into contracts or receive written purchase orders issued by a customer that legally bind us and the customer.

· Delivery: We deem delivery of products to have occurred when the title and risk of ownership have passed to the buyer. Services revenues are considered delivered as they are performed.

· Fixed or determinable fee: We consider the fee to be fixed or determinable if the fee is not subject to refund or adjustment and the payment terms are within normal established practices. If the fee is not fixed or determinable, we recognize revenues as amounts become due and payable with respect to transactions with extended payment terms, or as refund rights lapse with respect to transactions containing such provisions, provided all other revenue recognition criteria have been met.

· Collection is deemed probable: We conduct a credit review for all significant transactions at the time of the arrangement to determine the credit-worthiness of the customer. Collection is deemed probable if we have a reasonable basis to expect that the customer will pay amounts under the arrangement as payments become due.

We report our revenues in three categories: product revenue, services revenue, and maintenance revenue. Product revenue includes revenues from software products and hardware products. Services revenue includes revenue from professional services, training, and subscriptions. Maintenance revenue includes maintenance revenue associated with our hardware and software products. Accounting treatment for each category of revenue and our most significant contract structures is further described below.

Revenue Recognition for Software Products and Software-Related Services (Software Elements)

Software product revenue. The timing of software product revenue recognition is dependent on the nature of the product sold or the structure of the license.

EnCase Software Products: Revenue associated with these arrangements, exclusive of amounts allocated to maintenance and other undelivered elements, for which we have vendor-specific objective evidence of fair value (“VSOE”), is recognized upon delivery, provided that all other criteria for revenue recognition have been met. Revenue associated with term licenses are recognized ratably over the term of the license because we have not established VSOE for post-contract customer support in term license arrangements.

Services revenue. The majority of our consulting and implementation services are performed under per hour or fixed fee arrangements. Revenue from such services is recognized as the services are provided or upon expiration of the contractual service period.

Training revenue is either recognized on a per-class basis upon a participant’s attendance or, for those customers who have subscribed to our Annual Training Passport program, revenue is recognized ratably over the annual period.

Maintenance revenue. Maintenance revenue includes technical support and software updates on a when-and-if-available basis. We recognize maintenance revenue ratably over the applicable maintenance period. We determine the amount of maintenance revenue to be allocated through reference to substantive maintenance renewal provisions contained in multiple element arrangements. We consider substantive maintenance provisions to be provisions where the cost of the maintenance renewal is stated in the contract with our customer as a percentage of the net license fee, provided the rate is substantive.

Revenue Recognition for Multiple-Element Arrangements — Software Products and Software-Related Services (Software Arrangements)

We often enter into arrangements with customers that purchase both software products and software-related services from us at the same time, or within close proximity of one another (referred to as software-related multiple-element arrangements). Such software-related multiple-element arrangements may include the sale of our software products, software maintenance services, which include license updates and product support, consulting/implementation services and training whereby the software license delivery is followed by the subsequent delivery of the other elements. For those software-related multiple-element arrangements, we have applied the residual method to determine the amount of software license revenues to be recognized pursuant to ASC 985-605. Under the residual method, if VSOE exists for the undelivered elements, this amount is deferred with the remaining, or residual, portion of the arrangement consideration recognized upon delivery of the software license, provided all other revenue recognition criteria are met.

Revenue Recognition for Hardware and Subscription Revenues (Nonsoftware Elements)

Hardware product revenue. Revenue associated with the sale of forensic appliances is recognized upon shipment to the customers, which include certain resellers, provided that all other criteria for revenue recognition have been met.

Subscription services revenue. Customers pay subscription fees to access our cloud-based document review and production software; however, they may not take possession of the software at any time during the term of the agreement. In general, we recognize revenue for subscription fees on a straight-line basis over the contract period commencing on the date the subscription is made available to the customer. Usage-based fees, which are determined monthly, are recognized when incurred.

Revenue Recognition for Multiple-Element Arrangements — Hardware, Subscription, and Nonsoftware-Related Services (Nonsoftware Arrangements)

We enter into arrangements with customers that purchase both nonsoftware-related subscription services and nonsoftware-related services, such as consulting services, at the same time or within close proximity of one another (referred to as nonsoftware multiple-element arrangements). Each element within a nonsoftware multiple-element arrangement is accounted for as a separate unit of accounting provided the following criteria are met: the delivered products or services have value to the customer on a standalone basis; and for an arrangement that includes a general right of return relative to the delivered products or services, delivery or performance of the undelivered product or service is considered probable and is substantially controlled by us. We consider a deliverable to have standalone value if the product or service is sold separately by us or another vendor, or could be resold by the customer. Further, our revenue arrangements generally do not include a general right of return relative to the delivered products. Where the aforementioned criteria for a separate unit of accounting are not met, the deliverable is combined with the undelivered element and treated as a single unit of accounting for the purposes of allocation of the arrangement consideration and revenue recognition. For those units of accounting that include more than one deliverable but are treated as a single unit of accounting, we generally recognize revenues ratably over the delivery period. For the purposes of revenue classification of the elements that are accounted for as a single unit of accounting, we allocate revenue to the respective revenue line items within our consolidated statements of operations based on a rational and consistent methodology utilizing our best estimate of relative selling prices of such elements.

For our nonsoftware multiple-element arrangements, we allocate revenue to each element based on a selling price hierarchy at the arrangement’s inception. The selling price for each element is based upon the following selling price hierarchy: VSOE, if available; third party evidence (“TPE”) if VSOE is not available; or best estimate of selling price (“BESP”) if neither VSOE nor TPE are available. A description as to how we determine VSOE, TPE and BESP is provided below:

· VSOE . VSOE is determined based on its historical pricing and discounting practices for the specific product or service when sold separately. In determining VSOE, we require that a substantial majority of the selling prices for these services fall within a reasonably narrow pricing range.

· TPE . When VSOE cannot be established for deliverables in a multiple element arrangement, judgment is applied with respect to whether we can establish a selling price based on TPE. TPE is determined based on competitor prices for similar deliverables when sold separately. Generally, our go-to-market strategy differs from that of our peers, and our offerings contain a significant level of differentiation such that comparable pricing of services with similar functionality has not been obtained. Furthermore, we have been unable to reliably determine selling prices of similar competitive services on a stand-alone basis. As a result, we have not been able to establish selling prices based on TPE.

· BESP . When VSOE or TPE cannot be established, we use BESP in our allocation of arrangement consideration. The objective of BESP is to determine the price at which we would transact a sale if the service were sold on a stand-alone basis. We determine BESP for deliverables by considering multiple factors including but not limited to prices we charge for similar offerings, market conditions, competitive landscape and pricing practices.

Revenue Recognition for Multiple-Element Arrangements — Arrangements with Software and Nonsoftware Elements

We also enter into multiple-element arrangements that may include a combination of our various software-related and nonsoftware-related products and services. In such arrangements, we first allocate the total arrangement consideration based on the relative selling prices to the software group of elements as a whole and to the nonsoftware group of elements. We then further allocate consideration allocated to the software group and nonsoftware group to the respective elements within that group following the guidance in ASC 985-605, ASC 605-25, and our policies described above. After the arrangement consideration has been allocated to the elements, we recognize revenue for each respective element in the arrangement as described above.

Recently Issued Accounting Pronouncements

Recently Issued Accounting Pronouncements

In May 2014, the FASB issued ASU 2014-09, Revenue from Contracts with Customers: Topic 606 and issued subsequent amendments to the initial guidance in August 2015, March 2016, April 2016 and May 2016 within ASU 2015-04, ASU 2016-08, ASU 2016-10 and ASU 2016-12, respectively (ASU 2014-09, ASU 2015-04, ASU 2016-08, ASU 2016-10, ASU 2016-12, and ASU 2016-20 collectively, “Topic 606”). Topic 606 supersedes nearly all existing revenue recognition guidance under GAAP. The core principle of Topic 606 is to recognize revenues when promised goods or services are transferred to customers in an amount that reflects the consideration that is expected to be received for those goods or services. Topic 606 defines a five-step process to achieve this core principle and, in doing so, it is possible more judgment and estimates may be required within the revenue recognition process than are required under existing GAAP, including identifying performance obligations in the contract, estimating the amount of variable consideration to include in the transaction price and allocating the transaction price to each separate performance obligation, among others.

Topic 606 is effective for us at the beginning of our first quarter of fiscal 2018 and permits adoption either by using (i) a full retrospective approach for all periods presented in the period of adoption or (ii) a modified retrospective approach with the cumulative effect of initially applying Topic 606 recognized at the date of initial application and providing certain additional disclosures as defined per Topic 606.

We plan to adopt Topic 606 using the modified retrospective approach described above in the first quarter of fiscal 2018. However, a decision regarding the adoption method has not been finalized at this time. Our final determination will depend on a number of factors, such as the significance of the impact of the new standard on our financial results, system readiness, including that of software systems procured from third-party providers, and our ability to accumulate and analyze the information necessary to assess the impact on prior period financial statements, as necessary.

We continue to evaluate the impact of the new standard on our accounting policies, processes, and system requirements. We have assigned internal resources, in addition to the engagement of a third-party service provider, to assist in the evaluation of the impact of the standard and the implementation of software systems from third-party providers.  We have made investments in systems to enable timely and accurate reporting under the new standard.

As part of our evaluation, we have also considered the impact of the guidance in ASC 340-40, Other Assets and Deferred Costs: Contracts with Customers, and the interpretations of the FASB Transition Resource Group for Revenue Recognition (“TRG”) from their November 7, 2016 meeting with respect to capitalization and amortization of incremental costs of obtaining a contract.  As a result of this new guidance, we preliminarily believe that we will capitalize additional costs of obtaining the contract, including sales commissions.  The new cost guidance, as interpreted by the TRG, requires the capitalization of all incremental costs that are incurred to obtain a contract with a customer that would not have been incurred if the contract had not been obtained, provided the costs are expected to be recovered.  Under our current accounting policy, we expense costs in the period we invoice the customer.  Additionally, we preliminarily believe that the amortization period for our deferred commission costs will be longer than the contract term, as the new cost guidance requires entities to determine whether the costs relate to specific anticipated contracts.  Therefore, we believe that the period of benefit, as interpreted by the TRG, for deferred commission costs will likely be longer than the initial contract period.   We are continuing to evaluate the impact of our adoption of Topic 606 and our preliminary assessments are subject to change.

While we continue to assess the potential impacts of the new standard, including the areas described above, and anticipate this standard would not have a material impact on our consolidated financial statements, we do not know or cannot reasonably estimate quantitative information related to the impact of the new standard on our financial statements at this time.

In February 2016, the FASB issued ASU No. 2016-02, Leases (“Topic 842”), which requires lessees to recognize on the balance sheet a right-of-use asset, representing their right to use the underlying asset for the lease term, and a lease liability for all leases with terms greater than 12 months. The guidance also requires qualitative and quantitative disclosures designed to assess the amount, timing and uncertainty of cash flows arising from leases. The standard requires the use of a modified retrospective transition approach, which includes a number of optional practical expedients that entities may elect to apply. ASU 2016-02 is effective for the Company beginning January 1, 2019 and we are currently evaluating the impact that ASU 2016-02 will have on our consolidated financial statements.

In March 2016, the FASB issued ASU No. 2016-09, Compensation - Stock Compensation (“Topic 718”), Improvements to the Employee Share-Based Payment Accounting.  The standard is intended to simplify several areas of accounting for share-based compensation arrangements, including the income tax impact, classification on the statement of cash flows and forfeitures. We have adopted the pronouncement on a prospective basis making it effective for the Company as of January 1, 2017. Upon adoption, excess tax benefits from share-based award activity are reflected in the consolidated statements of income as a component of the provision for income taxes, whereas previously such income tax benefits were recognized as part of additional paid-in capital and could not be recognized until they were realized through a reduction in income taxes payable. The previously unrecognized excess tax benefits do not have an impact to the Company as they increase our net operating losses and valuation allowance by the same amount. We have elected to continue to record our stock compensation expense net of estimated forfeitures and not to account for forfeitures as they occur. The cash flow presentation of employee taxes paid will not apply to our Company as we do not withhold shares to cover employee taxes incurred relating to their stock transactions.

In January 2017, the Financial Accounting Standards Board (FASB) issued ASU 2017-04, Intangibles—Goodwill and Other (“Topic 350”): SimplifyingtheTestforGoodwillImpairment (ASU 2017-04), which eliminates step two from the goodwill impairment test. Under the amendments in ASU 2017-04, an entity should recognize an impairment charge for the amount by which the carrying amount of a reporting unit exceeds its fair value; however, the loss recognized should not exceed the total amount of goodwill allocated to that reporting unit. ASU 2017-04 is effective for us in our first quarter of fiscal 2020 on a prospective basis, and earlier adoption is permitted for goodwill impairment tests performed on testing dates after January 1, 2017. We are currently evaluating the impact of our pending adoption of ASU 2017-04 on our consolidated financial statements.

Realignment Expense

Realignment Expense

For the three months ended March 31, 2017, we incurred $1.4 million in realignment expense related to the consolidation of leased space at our corporate headquarters and severance costs.  Realignment expense resulting from the consolidation of leased space at our corporate headquarters is included in general and administrative expense.  The severance costs are included in cost of services revenue, selling and marketing expense, research and development expense and general and administrative expense, based on the employees’ cost center assignments prior to termination.

XML

Net Loss Per Share (Tables)

3 Months Ended

Mar. 31, 2017

Net Loss Per Share

Schedule of computation of basic and diluted net loss allocated to common stockholders per share

The following table sets forth the computation of basic and diluted net loss allocated to common stockholders per share (in thousands, except per share amounts):

	Three Months Ended March 31,
	2017			2016
Basic loss per common share:
Numerator:
Net loss	$	(1,731	)	$	(6,792	)
Net loss allocated to common stockholders	$	(1,731	)	$	(6,792	)
Denominator:
Basic weighted average shares outstanding	29,685			28,580
Net loss per basic common share	$	(0.06	)	$	(0.24	)
Diluted loss per common share:
Numerator:
Net loss	$	(1,731	)	$	(6,792	)
Net loss allocated to common stockholders	$	(1,731	)	$	(6,792	)
Denominator:
Basic weighted average shares outstanding	29,685			28,580
Effect of dilutive share-based awards	—			—
Diluted weighted average shares outstanding	29,685			28,580
Net loss per diluted common share	$	(0.06	)	$	(0.24	)

XML

Inventory (Tables)

3 Months Ended

Mar. 31, 2017

Inventory

Schedule of inventory by major classes

The following table sets forth, by major classes, inventory as of March 31, 2017 and December 31, 2016 (in thousands):

	March 31, 2017		December 31, 2016
Inventory:
Components	$	1,309	$	1,004
Finished goods	1,151		1,202
Total inventory	$	2,460	$	2,206

XML

Prepaid Expense and Other Current Assets (Tables)

3 Months Ended

Mar. 31, 2017

Prepaid Expense and Other Current Assets

Schedule of prepaid expenses and other current assets

Prepaid expenses and other current assets consist of the following (in thousands):

	March 31, 2017		December 31, 2016
Software licenses	$	1,950	$	1,529
Prepaid software maintenance	1,234		1,091
Payroll and employee-related expenses	18		394
Insurance	115		460
Other prepaid expenses and other current assets	1,463		1,376
Total prepaid expenses and other current assets	$	4,780	$	4,850

XML

Goodwill and Other Intangibles (Tables)

3 Months Ended

Mar. 31, 2017

Goodwill and Other Intangibles

Summary of cumulative amortization expense related to intangible assets subject to amortization

The following table summarizes cumulative amortization expense related to intangible assets subject to amortization as of March 31, 2017 and December 31, 2016 (in thousands):

	March 31, 2017							December 31, 2016
	Gross Costs		Accumulated Amortization			Net		Gross Costs		Accumulated Amortization			Net
Core technology	$	5,800	$	(4,188	)	$	1,612	$	5,800	$	(3,993	)	$	1,807
Customer relationships	6,475		(4,386		)	2,089		6,475		(4,276		)	2,199
Trade names	2,100		(1,542		)	558		2,100		(1,497		)	603
Covenant not-to-compete	200		(200		)	—		200		(194		)	6
Domain name	45		(13		)	32		45		(11		)	34
Total	$	14,620	$	(10,329	)	$	4,291	$	14,620	$	(9,971	)	$	4,649

Schedule of estimated remaining amortization expense

The following table summarizes the estimated remaining amortization expense through 2021 and thereafter (in thousands):

Year ending	Amortization Expense
2017	$	1,051
2018	1,401
2019	825
2020	539
2021	430
Thereafter	45
Total amortization expense	$	4,291

XML

Employee Benefit Plans (Tables)

3 Months Ended

Mar. 31, 2017

Employee Benefit Plans

Summary of stock option activity

	Number of Options		Weighted Average Exercise Price		Weighted Average Remaining Contractual Term (in years)	Aggregate Intrinsic Value
Outstanding, December 31, 2016	1,765,000		$	6.17	7.3	$	2,909,000
Granted	—		$
Exercised	(21,000	)	$	3.99
Forfeited or expired	(30,000	)	$	9.35
Outstanding, March 31, 2017	1,714,000		$	6.14	7.1	$	1,128,000
Exercisable, March 31, 2017	674,000		$	7.60	4.9	$	329,000

Summary of restricted stock awards activity

	Number of Shares		Weighted Average Fair Value
Outstanding, December 31, 2016	2,888,000		$	5.25
Granted	12,000		6.77
Granted adjustment (performance shares)	586,000		4.37
Vested	(1,032,000	)	4.78
Forfeited	(43,000	)	6.37
Outstanding, March 31, 2017	2,411,000		5.22

Schedule of weighted average assumptions used in valuation of awards

	Three Months Ended March 31, 2016
Risk-free interest rate	1.3		%
Dividend yield	—		%
Expected life (years)	5.68
Volatility	46.56		%
Weighted average grant date fair value	$	1.68

Summary of share-based compensation expense

The following table summarizes the share-based compensation expense we recorded (in thousands):

	Three Months Ended March 31,
	2017		2016
Stock option awards	$	198	$	160
Restricted stock awards	1,935		1,162
Total share-based compensation expense	$	2,133	$	1,322

The following table summarizes where the share-based compensation expense was recorded by income statement line item (in thousands):

	Three Months Ended March 31,
	2017		2016
Cost of product revenue	$	10	$	15
Cost of services revenue	73		171
Cost of maintenance revenue	20		38
Selling and marketing expense	858		110
Research and development expense	566		427
General and administrative expense	606		561
Total share-based compensation expense	$	2,133	$	1,322

XML

Accrued Liabilities (Tables)

3 Months Ended

Mar. 31, 2017

Accrued Liabilities

Schedule of accrued liabilities

Accrued liabilities consist of the following (in thousands):

	March 31, 2017		December 31, 2016
Payroll and related benefits	$	5,974	$	7,138
Sales tax audit accrual	1,256		1,243
Software licenses	992		1,111
Deferred rent and rent incentives	661		808
Lease obligations	1,197		562
Professional fees	221		522
Insurance	229		345
Other accrued liabilities	874		912
Total accrued liabilities	$	11,404	$	12,641

XML

Fair Value Measurements (Tables)

3 Months Ended

Mar. 31, 2017

Fair Value Measurements

Schedule of financial assets and liabilities accounted for at fair value on a recurring basis

The following table sets forth, by level within the fair value hierarchy, financial assets and liabilities that are accounted for at fair value on a recurring basis as of March 31, 2017 and December 31, 2016 (in thousands):

	Fair Value Measurements at March 31, 2017
	Total		Level 1		Level 2		Level 3
Assets:
Money market accounts	205		205		—		—
Total assets	$	205	$	205	$	—	$	—

	Fair Value Measurements at December 31, 2016
	Total		Level 1		Level 2		Level 3
Assets:
Money market accounts	205		205		—		—
Total assets	$	205	$	205	$	—	$	—

XML

Segment Information (Tables)

3 Months Ended

Mar. 31, 2017

Segment Information

Schedule of results of operations for each operating segment

The following tables present the results of operations for each operating segment (in thousands):

	Three Months Ended March 31, 2017
	Products		Subscription		Professional services		Training		Maintenance		Total
Revenues	$	8,867	$	1,588	$	4,383	$	1,869	$	10,079	26,786
Cost of revenues	1,763		569		2,903		1,357		743		7,335
Segment profit	$	7,104	$	1,019	$	1,480	$	512	$	9,336	19,451
Total operating expenses											21,121
Operating loss											$	(1,670	)

	Three Months Ended March 31, 2016
	Products		Subscription		Professional services		Training		Maintenance		Total
Revenues	$	7,458	$	1,578	$	4,828	$	2,103	$	9,832	$	25,799
Cost of revenues	1,956		655		3,495		1,485		606		8,197
Segment profit	$	5,502	$	923	$	1,333	$	618	$	9,226	17,602
Total operating expenses											24,348
Operating loss											$	(6,746	)

Schedule of revenues, classified by the major geographic areas

Revenues, classified by the major geographic areas in which we operate, are as follows (in thousands):

	Three Months Ended March 31,
	2017		2016
Revenues
United States	$	20,980	$	19,815
Europe	3,838		3,455
Asia	832		1,363
Other	1,136		1,166
	$	26,786	$	25,799

XML

Summary of Significant Accounting Policies - Trade Receivables (Details)	3 Months Ended
	Mar. 31, 2017
Trade Receivables
Minimum number of days after which receivables are considered past due	30 days

XML

Summary of Significant Accounting Policies - Concentrations of Credit Risk (Details) - Cash and cash equivalents - Concentration of credit risk	Mar. 31, 2017 USD ($)
Concentrations of Credit Risk
Uninsured cash balances	$ 17,300,000
Maximum
Concentrations of Credit Risk
Cash balances insured by the Federal Deposit Insurance Corporation	$ 250,000

XML

Summary of Significant Accounting Policies - Revenue Recognition (Details)	3 Months Ended
	Mar. 31, 2017
Minimum
Summary of Significant Accounting Policies
Period of maintenance of proprietary products	1 year
Maximum
Summary of Significant Accounting Policies
Period of maintenance of proprietary products	3 years

XML

Summary of Significant Accounting Policies - Realignment Expense (Details) $ in Millions	3 Months Ended
	Mar. 31, 2017 USD ($)
Realignment Expense
Realignment expenses	$ 1.4

XML

Net Loss Per Share (Details) - USD ($) $ / shares in Units, $ in Thousands	3 Months Ended
	Mar. 31, 2017	Mar. 31, 2016
Numerator:
Net loss	$ (1,731)	$ (6,792)
Net loss allocated to common stockholders	$ (1,731)	$ (6,792)
Denominator:
Basic weighted average shares outstanding	29,685,000	28,580,000
Net loss per common share - basic (in dollars per share)	$ (0.06)	$ (0.24)
Numerator:
Net loss	$ (1,731)	$ (6,792)
Net loss allocated to common stockholders	$ (1,731)	$ (6,792)
Denominator:
Basic weighted average shares outstanding	29,685,000	28,580,000
Diluted weighted average shares outstanding	29,685,000	28,580,000
Net loss per common share - diluted (in dollars per share)	$ (0.06)	$ (0.24)
Number of stock options and restricted stock awards excluded from calculation of diluted net loss per share (in shares)	1,289,000	3,133,000

XML

Inventory (Details) - USD ($) $ in Thousands	Mar. 31, 2017	Dec. 31, 2016
Inventory
Components	$ 1,309	$ 1,004
Finished goods	1,151	1,202
Total inventory	$ 2,460	$ 2,206

XML

Prepaid Expense and Other Current Assets (Details) - USD ($) $ in Thousands	Mar. 31, 2017	Dec. 31, 2016
Prepaid Expense and Other Current Assets
Software licenses	$ 1,950	$ 1,529
Prepaid software maintenance	1,234	1,091
Payroll and employee-related expenses	18	394
Insurance	115	460
Other prepaid expenses and other current assets	1,463	1,376
Total prepaid expenses and other current assets	$ 4,780	$ 4,850

XML

Goodwill and Other Intangibles (Details) - USD ($)	3 Months Ended
	Mar. 31, 2017	Mar. 31, 2016
Goodwill and Other Intangibles
Impairment charges related to goodwill and indefinite-lived intangible assets	$ 0
Amortization expense	$ 400,000	$ 400,000

XML

Goodwill and Other Intangibles - Cumulative amortization expense (Details) - USD ($) $ in Thousands	Mar. 31, 2017	Dec. 31, 2016
Goodwill and Other Intangibles
Gross Costs	$ 14,620	$ 14,620
Accumulated Amortization	(10,329)	(9,971)
Total amortization expense	4,291	4,649
Core technology
Goodwill and Other Intangibles
Gross Costs	5,800	5,800
Accumulated Amortization	(4,188)	(3,993)
Total amortization expense	1,612	1,807
Customer relationships
Goodwill and Other Intangibles
Gross Costs	6,475	6,475
Accumulated Amortization	(4,386)	(4,276)
Total amortization expense	2,089	2,199
Trade names
Goodwill and Other Intangibles
Gross Costs	2,100	2,100
Accumulated Amortization	(1,542)	(1,497)
Total amortization expense	558	603
Covenant not-to-compete
Goodwill and Other Intangibles
Gross Costs	200	200
Accumulated Amortization	(200)	(194)
Total amortization expense		6
Domain name
Goodwill and Other Intangibles
Gross Costs	45	45
Accumulated Amortization	(13)	(11)
Total amortization expense	$ 32	$ 34

XML

Goodwill and Other Intangibles - Remaining amortization expense (Details) - USD ($) $ in Thousands	Mar. 31, 2017	Dec. 31, 2016
Estimated remaining amortization expense
2017	$ 1,051
2018	1,401
2019	825
2020	539
2021	430
Thereafter	45
Total amortization expense	$ 4,291	$ 4,649

XML

Debt Obligations (Details) $ in Millions		3 Months Ended
	Aug. 29, 2014 USD ($)	Mar. 31, 2017 USD ($)
Revolver
Debt Obligations
Term of the debt	3 years
Line of Credit Facility, Commitment Fee Amount	$ 0.2
Maximum principal outstanding amount	$ 10.0
Percentage of eligible accounts receivable for calculation of availability of borrowings	80.00%
Maximum principal amount permitted to be outstanding that has been borrowed (as a percent)	75.00%
Required adjusted quick ratio	1.15	2.14
Current borrowing capacity		$ 8.7
Outstanding loan balance		$ 0.0
Adjusted quick ratio below which collections will be applied to outstanding loan		1.5
Revolver | Minimum
Debt Obligations
Basis spread on variable rate (as a percent)		1.25%
Revolver | Maximum
Debt Obligations
Basis spread on variable rate (as a percent)		3.25%
Letters of credit
Debt Obligations
Maximum principal outstanding amount	$ 3.0
Letter of credit outstanding		$ 1.2

XML

Employee Benefit Plans - Stock Options And Restricted Stock Awards (Details) - USD ($)		1 Months Ended	3 Months Ended	12 Months Ended
	Mar. 18, 2016	Feb. 28, 2017	Mar. 31, 2017	Dec. 31, 2016
Stock option awards
Equity Incentive Plan
Annual vesting percentage of shares granted under the Plan			25.00%
Vesting period			4 years
Maximum period for exercise of shares			10 years
Number of Options
Outstanding at the beginning of the period (in shares)			1,765,000
Granted (in shares)			0
Exercised (in shares)			(21,000)
Forfeited or expired (in shares)			(30,000)
Outstanding at the end of the period (in shares)			1,714,000	1,765,000
Exercisable at the end of the period (in shares)			674,000
Weighted Average Exercise Price
Outstanding at the beginning of the period (in dollars per share)			$ 6.17
Exercised (in dollars per share)			3.99
Forfeited or expired (in dollars per share)			9.35
Outstanding at the end of the period (in dollars per share)			6.14	$ 6.17
Exercisable at the end of the period (in dollars per share)			$ 7.60
Weighted Average Remaining Contractual Term (in years)
Outstanding in years			7 years 1 month 6 days	7 years 3 months 18 days
Exercisable at the end of the period (in years)			4 years 10 months 24 days
Aggregate Intrinsic Value
Outstanding at the beginning of the period			$ 2,909,000
Outstanding at the end of the period			1,128,000	$ 2,909,000
Exercisable at the end of the period			$ 329,000
Additional disclosures
Fair market value of common stock used to define in-the-money options (in dollars per share)			$ 5.90
Number of in-the-money options used to calculate the aggregate intrinsic value of options (in shares)			981,000
Number of in-the-money options exercisable (in shares)			288,000
Restricted stock awards
Equity Incentive Plan
Annual vesting percentage of shares granted under the Plan			25.00%
Vesting period			4 years
Number of Shares
Outstanding at the beginning of the period (in shares)			2,888,000
Granted (in shares)			12,000
Granted adjustment (performance shares) (in shares)			586,000
Vested (in shares)			(1,032,000)
Forfeited (in shares)			(43,000)
Outstanding at the end of the period (in shares)			2,411,000	2,888,000
Weighted Average Fair Value
Outstanding at the beginning of the period (in dollars per share)			$ 5.25
Granted (in dollars per share)			6.77
Granted adjustment (performance shares) (in dollars per share)			4.37
Vested and issued (in dollars per share)			4.78
Forfeited (in dollars per share)			6.37
Outstanding at the end of the period (in dollars per share)			$ 5.22	$ 5.25
Total grant date fair value of shares vested			$ 4,929,000
Fair value (in dollars per share)			$ 6.77
Performance-based restricted stock awards
Number of Shares
Granted (in shares)	586,000
Weighted Average Fair Value
Granted (in dollars per share)	$ 4.37
Fair value (in dollars per share)	$ 4.37
Performance-based restricted stock awards | Minimum
Weighted Average Fair Value
Vest percentage of the shares granted	10.00%
Performance-based restricted stock awards | Maximum
Weighted Average Fair Value
Vest percentage of the shares granted	200.00%
Performance-based restricted stock awards | Vesting On December 31, 2017
Number of Shares
Granted (in shares)		586,000
Vested (in shares)				(586,000)
Performance-based restricted stock awards | Vesting in February, 2017
Weighted Average Fair Value
Vest percentage of the shares granted				200.00%
Plan
Equity Incentive Plan
Number of shares available for grant			1,100,000

XML

Employee Benefit Plans - Share-Based Compensation (Details) - USD ($) $ / shares in Units, $ in Thousands	3 Months Ended
	Mar. 31, 2017	Mar. 31, 2016
Additional disclosures
Share-based compensation expense	$ 2,133	$ 1,322
Cost of product revenue
Additional disclosures
Share-based compensation expense	10	15
Cost of services revenue
Additional disclosures
Share-based compensation expense	73	171
Cost of maintenance revenue
Additional disclosures
Share-based compensation expense	20	38
Selling and marketing expense
Additional disclosures
Share-based compensation expense	858	110
Research and development expense
Additional disclosures
Share-based compensation expense	566	427
General and administrative expense
Additional disclosures
Share-based compensation expense	$ 606	$ 561
Stock option awards
Weighted average assumptions
Annual vesting percentage of shares granted under the Plan	25.00%
Vesting period	4 years
Granted (in shares)	0
Risk-free interest rate (as a percent)		1.30%
Dividend yield (as a percent)	0.00%
Expected life (years)		5 years 8 months 5 days
Volatility (as a percent)		46.56%
Weighted average grant date fair value (in dollars per share)		$ 1.68
Additional disclosures
Share-based compensation expense	$ 198	$ 160
Total unrecognized share-based compensation cost related to stock options	$ 2,000
Weighted-average period over which unrecognized compensation cost is expected to be recognized	2 years 7 months 6 days
Share-based compensation cost expected to be recorded for the remainder of the fiscal year	$ 600
Restricted stock awards
Weighted average assumptions
Annual vesting percentage of shares granted under the Plan	25.00%
Vesting period	4 years
Additional disclosures
Share-based compensation expense	$ 1,935	$ 1,162
Total unrecognized share-based compensation cost related to stock awards	$ 9,000
Weighted-average period over which unrecognized compensation cost is expected to be recognized	2 years 3 months 18 days
Share-based compensation cost expected to be recorded for the remainder of the fiscal year	$ 3,900
Performance-based restricted stock awards
Additional disclosures
Share-based compensation expense	$ 800

XML

Income Taxes (Details) - USD ($) $ in Thousands	3 Months Ended
	Mar. 31, 2017	Mar. 31, 2016
Income Taxes
Carrying value of net U.S. deferred tax assets	$ 0
Income tax provision	$ 69	$ 53
U.S. statutory tax rate (as a percent)	34.00%	34.00%

XML

Accrued Liabilities (Details) - USD ($) $ in Thousands	Mar. 31, 2017	Dec. 31, 2016
Accrued liabilities
Payroll and related benefits	$ 5,974	$ 7,138
Sales tax audit accrual	1,256	1,243
Software licenses	992	1,111
Deferred rent and rent incentives	661	808
Lease obligations	1,197	562
Professional fees	221	522
Insurance	229	345
Other accrued liabilities	874	912
Total accrued liabilities	$ 11,404	$ 12,641

XML

Fair Value Measurements (Details) - Recurring - USD ($) $ in Thousands	Mar. 31, 2017	Dec. 31, 2016
Total
Assets:
Total assets	$ 205	$ 205
Total | Money market accounts
Assets:
Total assets	205	205
Level 1
Assets:
Total assets	205	205
Level 1 | Money market accounts
Assets:
Total assets	$ 205	$ 205

XML

Commitments and Contingencies (Details) $ in Millions			1 Months Ended	3 Months Ended
	Jul. 29, 2016 USD ($)	Jun. 16, 2016 USD ($)	Feb. 29, 2016 USD ($) installment	Mar. 31, 2017 USD ($)	Jun. 30, 2017 USD ($)	Dec. 31, 2016 USD ($)	May 20, 2011 patent
Office Lease Agreement
Contractual Obligations, Commitments and Contingencies
Letter of credit outstanding				$ 1.2
Software license agreement and maintenance and support agreement
Contractual Obligations, Commitments and Contingencies
Amount of agreement			$ 2.0
Number of installments | installment			5
Software license agreement
Contractual Obligations, Commitments and Contingencies
Amount of agreement			$ 1.7	0.3
Installment payable during the year						$ 1.5
Installment payable during the first six months of 2017					$ 0.5
Maintenance and support agreement
Contractual Obligations, Commitments and Contingencies
Amount of agreement			$ 0.3
Agreement term			2 years
MyKey matter | General and administrative expense
Contractual Obligations, Commitments and Contingencies
Settlement awarded to (against) the Company				$ 1.1
Patent infringement complaint
Contractual Obligations, Commitments and Contingencies
Settlement awarded to (against) the Company		$ 2.3
Number of patents for which infringement is alleged | patent							3
Breach of contract
Contractual Obligations, Commitments and Contingencies
Settlement awarded to (against) the Company	$ 1.2

XML

Segment Information (Details) $ in Thousands	3 Months Ended
	Mar. 31, 2017 USD ($) segment	Mar. 31, 2016 USD ($)
Segment Information
Number of operating segments | segment	5
Revenues	$ 26,786	$ 25,799
Cost of revenues	7,335	8,197
Segment profit	19,451	17,602
Total operating expenses	21,121	24,348
Operating loss	(1,670)	(6,746)
Products
Segment Information
Revenues	8,867	7,458
Cost of revenues	1,763	1,956
Segment profit	7,104	5,502
Subscription
Segment Information
Revenues	1,588	1,578
Cost of revenues	569	655
Segment profit	1,019	923
Professional services
Segment Information
Revenues	4,383	4,828
Cost of revenues	2,903	3,495
Segment profit	1,480	1,333
Training
Segment Information
Revenues	1,869	2,103
Cost of revenues	1,357	1,485
Segment profit	512	618
Maintenance
Segment Information
Revenues	10,079	9,832
Cost of revenues	743	606
Segment profit	$ 9,336	$ 9,226

XML

Segment Information - Major geographic areas (Details) - USD ($) $ in Thousands	3 Months Ended
	Mar. 31, 2017	Mar. 31, 2016
Segment Information
Revenues	$ 26,786	$ 25,799
United States
Segment Information
Revenues	20,980	19,815
Europe
Segment Information
Revenues	3,838	3,455
Asia
Segment Information
Revenues	832	1,363
Other
Segment Information
Revenues	$ 1,136	$ 1,166

XML

Subsequent Event (Details) - Third-party Software License - Subsequent Event $ in Millions	Apr. 30, 2017 USD ($)
Subsequent Event
Amount of agreement	$ 3.3
First year installment, due in equal quarterly payments starting in April 2017	0.5
Second year installment, due in full in April 2018	1.0
Third year installment, due in full in April 2019	$ 1.8