From the 2018 10-K

[admin]

The auditor vouches for the finances, but found some deficiencies in their control systems, not all that unusual for a small, fast growing company absorbing two acquisitions, still, they are working to improve their control systems, from the 10-K:

Remediation
Management has been implementing and continues to implement measures designed to ensure that control deficiencies contributing to the material weakness are remediated, such that these controls are designed, implemented and operating effectively. The remediation actions to the Company’s internal controls over financial reporting include a thorough review and documentation of all processes involved in our financial reporting to ensure that there is segregation of duties, access security  and documented review processes in place that happen at appropriate intervals throughout the year that covers all elements of the Company’s financial reporting. This includes, but is not limited to, testing samples and documenting that testing has occurred  with the results of the findings being reported to senior management and that they occur at appropriate intervals and continuously making improvements to our processes as necessary. To addres  ineffective design, implementation and monitoring of information technology general controls  pertaining to the Company’s change management process, the Company has
(i) removed all live access to all developers, internal and external, from being able to make coding changes directly in our reporting system; 
(ii) will continue to monitor and document all changes made in our reporting system and add additional layers of documented review of these changes; 
(iii) will institute sample testing of changes made in our reporting system to ensure the documented policies are being followed and report the results of these tests to senior management in regular appropriate intervals; and 
(iv) enhance our quarterly reporting on the remediation measures to the Audit Committee of the Board of Directors. We believe that these actions will remediate the material weakness. The weakness will not be considered remediated, however, until the applicable controls operate for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively. We expect that the remediation of this material weakness will be completed prior to the end of fiscal 2019.