SURF AIR MOBILITY INC

Evaluation of Disclosure Controls and Procedures

We maintain disclosure controls and procedures (as defined in Rule 13a-15(e) and Rule 15d-15(e) of the Exchange Act), that are designed to provide reasonable assurance that information required to be disclosed in our Exchange Act reports is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and that such information is accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, to allow for timely decisions regarding required disclosure. It should be noted that, because of inherent limitations, our disclosure controls and procedures, however well designed and operated, can provide only reasonable, and not absolute, assurance that the objectives of the disclosure controls and procedures are met.

As required by Rule 13a-15(b) under the Exchange Act, our management, with the participation of our Chief Executive Officer and Chief Financial Officer, evaluated the effectiveness of our disclosure controls and procedures as of June 30, 2024. Based upon that evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that our disclosure controls and procedures were not effective at a reasonable assurance level as of June 30, 2024, due to presence of the material weaknesses in internal control over financial reporting described below.

Notwithstanding the pending remediation efforts described below, based on additional analysis and other post-closing procedures performed, our management believes that the financial statements included in this report present fairly, in all material respects, our financial position, results of operations and cash flows for the periods presented in conformity with U.S. GAAP.

Material Weaknesses in Internal Control Over Financial Reporting

As of June 30, 2024, material weaknesses existed in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. The material weaknesses are as follows:

•

We did not design and maintain an effective control environment commensurate with our financial reporting requirements. Specifically, we lacked a sufficient complement of resources with (i) an appropriate level of accounting knowledge, training and experience to appropriately analyze, record and disclose accounting matters timely and accurately, and (ii) an appropriate level of knowledge and experience to establish effective processes and controls. Additionally, the lack of a sufficient complement of resources resulted in an inability to consistently establish appropriate authorities and responsibilities in pursuit of our financial reporting objectives, as demonstrated by, among other things, insufficient segregation of duties in our finance and accounting functions.

•

We did not design and maintain effective controls in response to the risks of material misstatement. Specifically, changes to existing controls or the implementation of new controls have not been sufficient to respond to changes to the risks of material misstatement to financial reporting.

These material weaknesses contributed to the following additional material weaknesses:

•

We did not design and maintain effective controls related to the identification of and accounting for certain non-routine, unusual or complex transactions, including the proper application of U.S. GAAP of such transactions. Specifically, we did not design and maintain effective controls to timely identify and account for capitalizable costs, revenue, stock-based compensation, and debt and equity financing transactions.

•

We did not design and maintain effective controls related to the period-end financial reporting process, including designing and maintaining formal accounting policies, procedures and controls to achieve complete, accurate and timely financial accounting, reporting and disclosures. Additionally, we did not design and maintain effective controls over the preparation and review of account reconciliations and journal entries, including maintaining appropriate segregation of duties.

•

We did not design and maintain effective information technology (“IT”) general controls for information systems that are relevant to the preparation of our financial statements. Specifically, we did not design and maintain: (i) program change management controls to ensure that program and data changes are identified, tested, authorized, and implemented appropriately; (ii) user access controls to ensure appropriate segregation of duties andto adequately restrict user and privileged access to appropriate personnel; (iii) computer operations controls to ensure that processing and transfer of data, and data backups and recovery are monitored; and (iv)program development controls to ensure that new software development is tested, authorized and implemented appropriately.

These material weaknesses resulted in audit adjustments to substantially all of our accounts, which were recorded prior to the issuance of the consolidated financial statements as of December 31, 2021 and 2020 and for the years then-ended, and as of June 30, 2022 and 2021 and for the six-month periods then ended. Subsequently, these material weaknesses also resulted in audit adjustments to revenue, deferred revenue, accrued expenses, additional paid-in capital and stock-based compensation expense to the consolidated financial statements as of December 31, 2022 and 2023 and for the years then-ended. These material weaknesses also resulted in misstatements to prepaid expenses and other current assets and sales and marketing to the consolidated financial statements as of and for the quarter ended September 30, 2023. Additionally, these material weaknesses could result in a misstatement of substantially all of our accounts or disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected.

Additionally, with the closing of the Southern Acquisition, and the continued integration of associated operations and processes into those of the Company, the following material weakness in internal control over financial reporting has also been identified, after considering alignment with previous material weaknesses identified and outlined above:

•

We did not design and maintain effective controls to achieve complete, accurate and timely accounting for debt, deferred liabilities, leases, property and equipment, redeemable convertible preferred shares, accounts payable, and accrued liabilities. This material weakness did not result in adjustments to our consolidated financial statements. However, this material weakness could result in a misstatement of the aforementioned accounts or disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected.

Additionally, prior to our acquisition of Southern, Southern reported multiple material weaknesses related to control environment, risks of material misstatement, period-end financial reporting and IT general controls in our Form S-1 filed on September 19, 2023. Those material weaknesses resulted in audit adjustments to substantially all of Southern’s accounts, which were recorded prior to the issuance of the consolidated financial statements of Southern as of December 31, 2022, 2021 and 2020 and for the years then-ended. Subsequently, those material weaknesses also resulted in a revision to the previously issued consolidated financial statements of Southern as of December 31, 2022 and 2021 and for the years then-ended, and the interim periods ended June 30, 2022 and 2021, to correct for errors in revenues and deferred revenues. Also, in connection with the preparation of Southern’s financial statements for the interim period ended March 31, 2023, Southern identified an error related to the accounting for prepaid passenger ticket deposits. Southern’s management determined that this error was the result of the previously reported material weaknesses. This error was corrected in Southern’s financial statements as of December 31, 2022 and 2021 and for the years then-ended and the interim periods ended June 30, 2022 and 2021 as a revision to previously issued financial statements.

Remediation Plans to Address Material Weaknesses

To date, we have developed a plan to address the material weaknesses identified above. This remediation plan consists primarily of: (i) adding key personnel to strengthen the Company’s financial reporting processes, (ii) improving our internal controls around financial systems and processes, (iii) formalizing internal controls related to the identification of and accounting for certain non-routine, unusual or complex transactions, including the proper application of U.S. GAAP to such transactions, (iv) engaging a third party to assist in identifying risks of material misstatement and designing and implementing controls to address the identified risks of material misstatement, and (v) designing and operating computer operations, program and system development, and user access and change management controls. We intend to take additional steps to remediate the deficiencies identified above and further evolve our internal controls and processes.

Changes in Internal Control over Financial Reporting

There were no significant changes in our internal control over financial reporting identified in connection with the evaluation required by Rules 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the quarter ended June 30, 2024 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting. We are currently in the process of integrating Southern’s operations, control processes and information systems into our systems and control environment.

Inherent Limitation on the Effectiveness of Internal Control over Financial Reporting and Disclosure Controls and Procedures

Our management, including our Chief Executive Officer and Chief Financial Officer, does not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, have been detected. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by management override of the controls. The design of any system of controls is also based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected or preventable.