Dave IncDE

Evaluation of Disclosure Controls and Procedures

Disclosure controls and procedures are designed to ensure that information required to be disclosed by us in our Exchange Act reports is recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to our management, including our principal executive officer and principal financial officer or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.

As required by Rules 13a-15 and 15d-15 under the Exchange Act, our Chief Executive Officer and Chief Financial Officer carried out an evaluation of the effectiveness of the design and operation of our disclosure controls and procedures as of December 31, 2023. Based on this evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that our disclosure controls and procedures were not effective, due to the material weaknesses in our internal control over financial reporting in our consolidated financial statements for the years ended December 31, 2023 and 2022 described below. As a result, we performed additional analysis as deemed necessary to ensure that our financial statements were prepared in accordance with U.S. generally accepted accounting principles. Accordingly, management believes that the financial statements included in this Annual Report on Form 10-K present fairly in all material respects our financial position, results of operations and cash flows for the period presented.

Management’s Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Exchange Act Rules 13a-15(f) and 15d-15(f). Our internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with GAAP. Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions or that the degree of compliance with the policies or procedures may deteriorate. Under the supervision of our Chief Executive Officer and Chief Financial Officer and with the participation of our management, we conducted an evaluation of the effectiveness of our internal control over financial reporting as of December 31, 2023 based on the framework in “Internal Control—Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 Framework). Based on that evaluation, our management concluded that our internal control over financial reporting was not effective as of December 31, 2023, due to the material weaknesses in our internal control over financial reporting in our consolidated financial statements for the year ended December 31, 2023, because:

•

We did not maintain sufficient evidence of the performance and/or review of certain internal controls or complete remediation testing for certain internal controls over the period-end financial reporting process addressing financial statement and footnote presentation and disclosures; and

•

We did not maintain sufficient evidence of the performance and/or review of certain IT application controls for information systems that are relevant to the preparation of our financial statements.

During 2023, we made significant progress enhancing our internal control environment by completing an enterprise-wide risk assessment, process narratives, risk and control matrices, a subsequent gap analysis and performed targeted testing of the design and operating effectiveness of our internal control over financial reporting in efforts to remediate previously disclosed material weaknesses. These efforts also include, but are not limited to: adding additional resources in accounting and finance departments, utilizing third party specialists to assist with complex accounting matters and reduce risks associated with the lack of segregation of duties; implementing a segregation of duties monitoring tool; formalizing accounting policies and procedures; implementing a new enterprise resource planning system to enhance the journal entry review and approval processes; performing bank and balance sheet account reconciliations on a monthly basis; implementing a SOX compliance and audit management platform; and designing and implementing both

IT general controls and IT application controls around our product platform and core applications, including controls over: change management, access security and IT operations.

We will continue to implement our plan to remediate the material weaknesses described above. Those remediation measures are ongoing and include (i) ensuring our enterprise-wide risk assessment, risk and control matrices, process narratives and gap analysis continue to be updated to reflect our current accounting processes and internal control environment and (ii) ensuring internal control over financial reporting is adequately performed; and (iii) ensuring sufficient testing is performed and the testing-related support and documentation are complete and accurate for the design and operating effectiveness of internal control over financial reporting.

For further details on our material weaknesses that existed during the years ended December 31, 2022 and 2021, please refer to our Form 10-K filed with the SEC on March 13, 2023.

Changes in Internal Control over Financial Reporting

Other than described above, there were no changes in our internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) of the Exchange Act) during the most recent fiscal quarter that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.