COLONY BANKCORP INC

The Company’s Chief Executive Officer and Chief Financial Officer have evaluated the Company’s disclosure controls and procedures (as such term is defined in Rules 13a-15(e) or 15d-15(e) promulgated under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)), as of the end of the period covered by this report, as required by paragraph (b) of Rules 13a-15 or 15d-15 of the Exchange Act. Based on such evaluation, such officers have concluded that, as of the end of the period covered by this report, the Company’s disclosure controls and procedures were effective for ensuring that information the Company is required to disclose in reports that it files or submits under the Exchange Act, as amended, is recorded, processed, summarized and reported within the time periods specified in the SEC's rules and forms and that such information is accumulated and communicated to the Company's senior management, including its Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by the Company is accumulated and communicated to management, including the Chief Executive Officer and the Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

During the year ended December 31, 2025, there were no changes in the Company’s internal control over financial reporting identified in connection with the evaluation required by paragraph (d) of Rules 13a-15 or 15d-15 of the Exchange Act that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting.

Management’s Report on Internal Control Over Financial Reporting

Management is responsible for establishing and maintaining adequate internal control over financial reporting. Management’s assessment of the effectiveness of our internal control over financial reporting as of December 31, 2025 is included in Part II, Item 8 of this Report under the heading “Management’s Report on Internal Control Over Financial Reporting.”

Our independent auditors have issued an audit report on management’s assessment of internal controls over financial reporting. This report is included in Part II, Item 8 of this Report under the heading “Report of Independent Registered Public Accounting Firm.”

As mentioned in the above-referenced reports, on December 1, 2025, the Company acquired TC Bancshares, Inc. (“TCBC”), and as of December 31, 2025, full integration of TCBC’s systems and processes into those of the Company was not complete. Management's assessment of and conclusion on the effectiveness of internal control over financial reporting as of December 31, 2025, excludes the internal controls of TCBC. This exclusion is in accordance with the SEC Staff's general guidance that an assessment of a recently acquired business may be omitted from the scope of management’s assessment for one year following the acquisition.

Changes in Internal Controls

There were no changes made in our internal controls during the period covered by this report or, to our knowledge, in other factors that have materially affected, or are reasonably likely to materially affect these controls.