SUN COMMUNITIES INC

Evaluation of Disclosure Controls and Procedures

We maintain disclosure controls and procedures designed to provide reasonable assurance that information required to be disclosed in reports filed under the Exchange Act is recorded, processed, summarized and reported within the specified time periods and accumulated and communicated to our management, including our principal executive officer and principal financial officer, as appropriate to allow timely decisions regarding required disclosure. Our management, with the participation of our principal executive officer and principal financial officer, has evaluated the effectiveness of the design and operation of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) as of the end of the period covered by this Annual Report on Form 10-K.

Based upon this evaluation, our principal executive officer and principal financial officer have concluded that our disclosure controls and procedures were effective at the reasonable assurance level as of December 31, 2025.

Management's Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining effective internal control over financial reporting as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. This system is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of consolidated financial statements for external purposes in accordance with GAAP. Because of the inherent limitations of internal control over financial reporting, including the possibility of collusion or improper management override of controls, misstatements due to error or fraud may not be prevented or detected on a timely basis.

Our management performed an assessment of the effectiveness of our internal control over financial reporting as of December 31, 2025, utilizing the criteria discussed in the Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on management's assessment, we have concluded that our internal control over financial reporting was effective as of December 31, 2025.

The effectiveness of our internal control over financial reporting has been audited by Grant Thornton LLP, an independent registered public accounting firm, as stated in its report, which appears in Part II, Item 8 of this Annual Report on Form 10-K.

Remediation of Previously Disclosed Material Weakness

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. As disclosed in Part II, Item 9A, "Controls and Procedures," of our Annual Report on Form 10-K for the fiscal year ended December 31, 2024, we identified a material weakness because we did not have an effective risk assessment and response process ("risk assessment") that defined clear financial reporting objectives, that identified and evaluated risks of misstatement due to errors over certain financial reporting processes, or that developed internal controls to mitigate those risks. As part of management's evaluation of this material weakness, it had been identified that certain other deficiencies in control activities had materialized as a result of the deficiency in the Company's risk assessment. Specifically, as of December 31, 2024, there were deficiencies in the design and implementation of the Company's internal controls due to ineffective risk assessment resulting in the following:

•Inadequate identification and timely consideration of accounting for certain transactions.

•Existence of inappropriate access and insufficient segregation of duties ("SOD") upon implementation of a new integrated enterprise resource planning and general ledger ("ERP") system during 2025.

•Reliance on information and reports from our new ERP used in internal controls over financial reporting without adequately validating their completeness and accuracy.

•Inadequate assessment of the impact our new ERP had on certain processes and related control activities, including investment property, inventory of manufactured homes, and the review and approval of manual journal entries.

These deficiencies related to both information technology general controls, manual controls, and manual controls dependent upon information technology that could impact the consistency, timeliness and accuracy of financial reporting in accordance with GAAP. These matters did not result in material misstatements to the Consolidated Financial Statements in the current period, but did allow for the reasonable possibility that material misstatements would not be prevented or detected on a timely basis.

Pursuant to our remediation plan, and with oversight from our Audit Committee, we have invested considerable time and resources to undertake a number of actions to address the material weakness relating to our risk assessment process. The actions that we have undertaken are as follows:

•Implemented more frequent communication between those charged with governance and management regarding progression on material weakness remediation. Additionally, an internal control project plan was developed and implemented under the monitoring and supervision of the Audit Committee.

•Engaged a third-party accounting and advisory firm to assist us with completing a comprehensive risk assessment and a gap analysis of certain aspects of our risk control matrix, including identification of risks of material misstatement, to assess the potential need for any new controls or controls that need to be redesigned to adequately address the corresponding financial reporting risk.

•Completed a risk-based review of user access to our ERP and when necessary modified roles or user access to eliminate SOD conflicts. We engaged a third-party accounting and advisory firm to confirm the scope and execution of this access review.

•Implemented a third-party software solution to assist management with monitoring user access to our ERP system to identify and prevent user access that violates our established SOD ruleset.

•Identified a complete population of information and reports used in internal controls over financial reporting and validated the completeness and accuracy of this information and reports generated from our new ERP.

Additionally, management has i) redesigned the review controls related to certain manual journal entries, ii) designed internal control processes to include policies and procedures to ensure that all information used in the performance of internal controls is validated for completeness and accuracy, iii) redesigned and developed new internal controls to address risks, determined to not be adequately mitigated following the completion of the risk assessment, and gap analysis, and iv) refined and developed additional SOD rules based on the results of the review of our SOD ruleset by the third-party accounting and advisory firm.

Management has completed its documentation, testing, and evaluation of the newly designed and enhanced control activities and determined that, as of December 31, 2025, these control activities have been appropriately designed and implemented, and have operated effectively for a sufficient period of time to conclude that the previously identified material weakness has been remediated.

Changes in Internal Control over Financial Reporting

Other than the material weakness remediation activities discussed above, there were no changes in internal control over financial reporting during the quarter ended December 31, 2025, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.