Kyverna Therapeutics Inc

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer, or the CEO, and Chief Financial Officer, or the CFO (our principal executive officer and principal financial officer, respectively), evaluated the effectiveness of our disclosure controls and procedures as of September 30, 2024. The term “disclosure controls and procedures,” as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act, means controls and other procedures of an issuer that are designed to ensure that information required to be disclosed by an issuer in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by an issuer in the reports that it files or submits under the Exchange Act is accumulated and communicated to the issuer’s management, including its principal executive and principal financial officers, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.

Based on their evaluation, the CEO and the CFO have concluded that our disclosure controls and procedures were not effective as of September 30, 2024, because of the material weaknesses in our internal control over financial reporting described below.

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of annual or interim financial statements will not be prevented or detected on a timely basis.

In connection with our audit of the financial statements for the year ended December 31, 2023 and as of September 30, 2024, we identified material weaknesses in the design and operating effectiveness of our internal control over financial reporting related to the fact that we did not appropriately design and maintain entity-level controls impacting the control environment, risk assessment, control activities, information and communication and monitoring activities to prevent or detect material misstatements to the financial statements. These material weaknesses related to (i) an insufficient number of qualified resources to ensure adequate oversight and accountability over the performance of controls, including retention of control evidence, (ii) ineffective identification and assessment of risks impacting internal control over financial reporting, and (iii) insufficient evaluation and determination as to whether the components of internal controls were present and functioning based upon evidence maintained for management review controls and activity level controls across substantially all financial statement areas.

These material weaknesses contributed to the following additional material weakness: we did not design and maintain effective (i) general controls over information systems that support the financial reporting process, (ii) controls over the completeness and accuracy of information used in the operation of control activities across substantially all financial statement areas, and (iii)

management review controls at a sufficient level of precision to detect a material misstatement across substantially all financial statement areas that involve complex and judgmental areas of accounting and disclosure.

There were no adjustments that resulted from the above material weaknesses. However, these material weaknesses could result in a misstatement of substantially all of our accounts or disclosures that would result in a material misstatement of our annual or interim financial statements that would not be prevented or detected.

Remediation Plans

We have begun taking measures, and plan to continue to take measures, to remediate these material weaknesses. These measures include hiring a Vice President of Finance/Corporate Controller and a Head of Information Technology and engaging a third party to assist in documenting the design and implementation of internal controls over the financial reporting process, including general controls over information systems. The material weaknesses will not be considered remediated until management completes the design and implementation of the measures described above and the controls operate for a sufficient period of time and management has concluded, through testing, that these controls are effective. We expect to implement new procedures and controls and take efforts to address each of the identified weaknesses during fiscal years 2024 and 2025. These remediation measures will be time-consuming and require financial and operational resources. See Part II, Item 1A. “Risk Factors”.

Changes in Internal Control Over Financial Reporting

Except as discussed above under “Remediation Plans”, there were no other changes in our internal control over financial reporting during the quarter ended September 30, 2024, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Limitations on the Effectiveness of Controls

In designing and evaluating the disclosure controls and procedures, management recognizes that because of the inherent limitations in all control systems, any controls and procedures, no matter how well designed and operated, can provide only reasonable not absolute, assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures reflect the fact that there are resource constraints and the benefits of controls and procedures will be considered relative to their costs.