KINGSTONE COMPANIES, INC.

Evaluation of Disclosure Controls and Procedures

Our management is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rule 13a-15(f) under the Exchange Act. Our internal control over financial reporting is designed to provide reasonable assurances regarding the reliability of financial reporting and the preparation of our condensed consolidated financial statements in accordance with U.S. generally accepted accounting principles.

Under the supervision and with the participation of management, including our Chief Executive Officer and Chief Financial Officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on criteria established in Internal Control — Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission.

We previously disclosed that as of December 31, 2025, our internal control over financial reporting contained a material weakness due to the lack of receiving a Service Organization Control (SOC) 1 Type 2 report for our insurance premium quoting platform system and our general ledger system. Therefore, we cannot rely on the controls within these systems, including automated and manual process level controls, and remaining information technology general controls, that are dependent upon the information derived from such systems. We are working with our insurance premium quoting platform system vendor and our general ledger vendor to develop a remediation plan. Our management expects to have both material weaknesses remediated by December 31, 2026. Because of this material weakness in internal control over financial reporting, as of March 31, 2026, our disclosure controls are not considered effective. Our management concluded that all other internal controls over financial reporting were effective as of March 31, 2026.

A material weakness (within the meaning of PCAOB Auditing Standard No. 5) is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. A significant deficiency is a deficiency, or a combination of deficiencies, in internal control over financial reporting that is less severe than a material weakness, yet important enough to merit attention by those responsible for oversight of our financial reporting. Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements.

Changes in Internal Control over Financial Reporting

There have not been any changes in our internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during our most recently completed fiscal quarter that materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitation on Effectiveness of Controls

Internal control over financial reporting is a process designed by, or under the supervision of, our Chief Executive Officer and Chief Financial Officer, and effected by the board of directors, management, and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with GAAP including those policies and procedures that: (i) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of our assets, (ii) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with GAAP and that receipts and expenditures are being made only in accordance with authorizations of our management and directors, and (iii) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of our assets that could have a material effect on the financial statements.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with policies and procedures may deteriorate.