FIBROGEN INC

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Principal Executive Officer and our Principal Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures as of March 31, 2024, the end of the period covered by this Quarterly Report on Form 10-Q. Disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) are designed to provide reasonable assurance that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms and that such information is accumulated and communicated to the company’s management, including its Principal Executive Officer and Principal Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

Based on our evaluation, the Principal Executive Officer and Principal Financial Officer have concluded that our disclosure controls and procedures were effective at the reasonable assurance level as of March 31, 2024.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting identified in connection with the evaluation required by Rule 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the three months ended March 31, 2024 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Limitations on the Effectiveness of Controls

In designing and evaluating the disclosure controls and procedures, management recognizes that because of the inherent limitations in all control systems, any controls and procedures, no matter how well designed and operated, can provide only reasonable not absolute, assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures must reflect the fact that there are resource constraints and the benefits of controls and procedures must be considered relative to their costs.