NNN REIT INC

Process for Assessment and Evaluation of Disclosure Controls and Procedures and Internal Control over Financing Reporting

NNN carried out an assessment as of December 31, 2023, of the effectiveness of the design and operation of its disclosure controls and procedures and its internal control over financial reporting. This assessment was done under the supervision and with the participation of management, including NNN's Chief Executive Officer, Chief Financial Officer and Chief Accounting Officer ("NNN's Chief Officers"). Rules adopted by the Commission require NNN to present the conclusions of NNN's Chief Officers about the effectiveness of NNN's disclosure controls and procedures and the conclusions of NNN's management about the effectiveness of NNN's internal control over financial reporting as of the end of the period covered by this annual report.

CEO and CFO Certifications. Included as Exhibits 31.1 and 31.2 to this Annual Report on Form 10-K are forms of “Certification” of NNN's Chief Executive Officer and Chief Financial Officer. The forms of Certification are required in accordance with Section 302 of the Sarbanes-Oxley Act of 2002. This section of the Annual Report on Form 10-K that stockholders are currently reading is the information concerning the assessment referred to in the Section 302 certifications and this information should be read in conjunction with the Section 302 certifications for a more complete understanding of the topics presented.

Disclosure Controls and Procedures and Internal Control over Financial Reporting. Disclosure controls and procedures are designed with the objective of providing reasonable assurance that information required to be disclosed in NNN's reports filed or submitted under the Exchange Act, such as this Annual Report on Form 10-K, is recorded, processed, summarized and reported within the time periods specified in the Commission's rules and forms. Disclosure controls and procedures are also designed with the objective of providing reasonable assurance that such information is accumulated and communicated to NNN's management, including NNN's Chief Officers, as appropriate, to allow timely decisions regarding required disclosure.

Internal control over financial reporting is a process designed by, or under the supervision of, NNN's Chief Officers, and affected by NNN's Board of Directors, management and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles (“GAAP”) and includes those policies and procedures that:

•

pertain to the maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of NNN's assets;

•

provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that NNN's receipts and expenditures are being made in accordance with authorizations of management or the Board of Directors; and

•

provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of NNN's assets that could have a material adverse effect on NNN's financial statements.

Scope of the Assessments. The assessment by NNN's Chief Officers of NNN's disclosure controls and procedures and the assessment by NNN's management, including NNN's Chief Officers, of NNN's internal control over financial reporting included a review of procedures and discussions with NNN's management and others at NNN. In the course of the assessments, NNN sought to identify data errors, control problems or acts of fraud and to confirm that appropriate corrective action, including process improvements, were being undertaken.

NNN's internal control over financial reporting is also assessed on an ongoing basis by personnel in NNN's Accounting department and by NNN's internal auditors in connection with their internal audit activities. The overall goals of these various assessment activities are to monitor NNN's disclosure controls and procedures and NNN's internal control over financial reporting and to make modifications as necessary. NNN's intent in this regard is that the disclosure controls and procedures and the internal control over financial reporting will be maintained and updated (including with improvements and corrections) as conditions warrant. Management also sought to deal with other control matters in the assessment, and in each case if a problem was identified, management considered what revision, improvement and/or correction was necessary to be made in accordance with NNN's on-going procedures. The assessments of NNN's disclosure controls and procedures and NNN's internal control over financial reporting is done on a quarterly basis so that the conclusions concerning effectiveness of those controls can be reported in NNN's Quarterly Reports on Form 10-Q and Annual Report on Form 10-K.

Assessment of Effectiveness of Disclosure Controls and Procedures

Based upon the assessments, NNN's Chief Officers have concluded that, as of December 31, 2023, NNN's disclosure controls and procedures were effective.

Management's Report on Internal Control over Financial Reporting

Management, including NNN's Chief Officers, are responsible for establishing and maintaining adequate internal control over financial reporting for NNN. Management used the criteria issued by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control – 2013 Integrated Framework to assess the effectiveness of NNN's internal control over financial reporting. Based upon the assessments, NNN's Chief Executive Officer and Chief Financial Officer have concluded that, as of December 31, 2023, NNN's internal control over financial reporting was effective.

Attestation Report of the Registered Public Accounting Firm

Ernst & Young LLP, NNN's independent registered public accounting firm, audited the financial statements included in this Annual Report on Form 10-K and in connection therewith has issued an attestation report on NNN's effectiveness of internal control over financial reporting as of December 31, 2023, which appears in this Annual Report on Form 10-K.

Changes in Internal Control over Financial Reporting

During the three months ended December 31, 2023, there were no changes in NNN's internal control over financial reporting that materially affected, or are reasonably likely to materially affect, NNN's internal control over financial reporting.

Limitations on the Effectiveness of Controls

Management, including NNN's Chief Officers, do not expect that NNN's disclosure controls and procedures or NNN's internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, within NNN have been detected. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people, or by management's override of the control. The design of any system of controls also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with the policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.