CITIGROUP INC

Citi continued to make significant progress in its transformation through the third quarter of 2025 and is now at or mostly at its target state for more than two-thirds of its transformation programs, including:

•Components of the end-to-end Enterprise Risk Management lifecycle to strengthen how Citi identifies, measures, monitors and controls risk, including risk identification, risk appetite and limits management, stress testing and new activity risk management

•A standardized control assessment process to help detect and remediate control deficiencies, including payment and trade controls

In addition, Citi continued to make progress in advancing its technology priorities, including:

•Continued to optimize, modernize and simplify Citi by retiring or replacing 384 applications year-to-date through September 30, 2025

•Reduced manual intervention for priority liquidity regulatory reporting processes by deploying a workflow tool

•Expanded the adoption of Generative AI tools with the rollout of new features that enable faster and easier access and increase overall productivity

◦Adoption continues to accelerate, with approximately 7 million utilizations of Citi’s two enterprise-wide tools year-to-date (approximately three times increase versus previous quarter)

◦Approximately 1 million automated code reviews completed by Citi’s Generative AI tools year-to-date, saving approximately 100,000 hours per week across Citi’s developer population