AN2 Therapeutics Inc

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer (“CEO”) and Chief Financial Officer (“CFO”), has evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)) as of the end of the period covered by this Form 10-Q.

The term “disclosure controls and procedures,” as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act, means controls and other procedures of a company that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the rules and forms of the Securities and Exchange Commission. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to the company’s management, including its CEO and CFO, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure. Management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives and management necessarily applies its judgment in evaluating the cost-benefit relationship of possible controls and procedures.

Our CEO and CFO have concluded that as of March 31, 2024, our disclosure controls and procedures were not effective due to material weaknesses in internal control over financial reporting previously disclosed in the Annual Report on Form 10-K for the year ended December 31, 2023 and included below.

Notwithstanding the identified material weaknesses, management, including our CEO and CFO, have determined, based on the procedures we have performed, that the condensed financial statements included in this Quarterly Report on Form 10-Q were prepared in accordance with U.S. GAAP.

Previously Identified Material Weaknesses in Internal Control Over Financial Reporting

During the course of preparing for our March 2022 IPO, we identified material weaknesses in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of its annual or interim financial statements will not be prevented or detected on a timely basis.

The material weaknesses identified were as follows, and continue to exist as of March 31, 2024:

•

We did not design and maintain an effective control environment commensurate with our financial reporting requirements. Specifically, we lacked a sufficient complement of resources with (i) an appropriate level of accounting knowledge, experience and training to appropriately analyze, record and disclose accounting matters timely and accurately, and (ii) an appropriate level of knowledge and experience to establish effective processes and controls. Additionally, the lack of a sufficient number of professionals resulted in an inability to consistently establish appropriate authorities and responsibilities in pursuit of our financial reporting objectives, as demonstrated by, among other things, insufficient segregation of duties in our finance and accounting functions. This material weakness contributed to the following additional material weaknesses.

•

We did not design and maintain effective controls related to the period-end financial reporting process, including designing and maintaining formal accounting policies, procedures and controls to achieve complete, accurate and timely financial accounting, reporting and disclosures. Additionally, we did not design and maintain controls over the preparation and review of account reconciliations and journal entries, including maintaining appropriate segregation of duties.

The above material weaknesses resulted in adjustments to accrued expenses balances, which were recorded prior to the issuance of the financial statements, as of and for the years ended December 31, 2019 and 2020. Additionally, these material weaknesses could result in a misstatement of substantially all of our accounts or disclosures that would result in a material misstatement to the annual or interim financial statements that would not be prevented or detected.

•

We did not design and maintain effective controls over information technology (“IT”) general controls for information systems that are relevant to the preparation of our financial statements. Specifically, we did not design and maintain (i) program change management controls to ensure that IT program and data changes affecting financial IT applications and underlying accounting records are identified, tested, authorized and implemented appropriately, (ii) user access controls to ensure appropriate segregation of duties and that adequately restrict user and privileged access to financial applications, programs, and data to appropriate Company personnel, (iii) computer operations controls to ensure that critical batch jobs are monitored and data backups are authorized and monitored, and (iv) testing and approval controls for program development to ensure that new software development is aligned with business and IT requirements.

These IT deficiencies did not result in adjustments to the financial statements. However, the IT deficiencies, when aggregated, could impact maintaining effective segregation of duties, as well as the effectiveness of IT-dependent controls (such as automated controls that address the risk of material misstatement to one or more assertions, along with the IT controls and underlying data that support the effectiveness of system-generated data and reports) that could result in misstatements potentially impacting all financial statement accounts and disclosures that would not be prevented or detected. Accordingly, management has determined the IT deficiencies in the aggregate constitute a material weakness.

Remediation Plan for Remaining Material Weaknesses

The Company is committed to remediating the material weaknesses in our internal control over financial reporting. We have implemented measures designed to improve our internal control over financial reporting to remediate these material weaknesses, and are refining the design and validating the effectiveness of these controls, including (i) ongoing hiring of additional accounting personnel; (ii) designing and implementing internal controls in our financial control environment, including establishing formal accounting policies and procedures and financial reporting controls; and (iii) implementing an accounting system upgrade with IT controls to ensure appropriate and restricted access to our accounting applications, programs and data, including upgrading of our accounting system.

The remaining material weaknesses will not be considered remediated until the design requirements described above have been finalized, and the applicable controls have operated for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively. Accordingly, the material weaknesses related to lack of sufficient resources, insufficient segregation of duties, lack of designing and maintaining formal accounting policies, procedures and controls and lack of designing and maintaining effective controls over IT, were not remediated as of March 31, 2024.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during the three months ended March 31, 2024 that materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Limitations on the Effectiveness of Controls

In designing and evaluating our disclosure controls and procedures, management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures must reflect the fact that there are resource constraints and that management is required to apply judgment in evaluating the benefits of possible controls and procedures relative to their costs.