NetApp Inc

Disclosure Controls and Procedures

The phrase “disclosure controls and procedures” refers to controls and procedures designed to ensure that information required to be disclosed in our reports filed or submitted under the Securities Exchange Act of 1934, as amended (the Exchange Act), such as this Quarterly Report on Form 10-Q, is recorded, processed, summarized, and reported within the time periods specified in the rules and forms of the U.S. Securities and Exchange Commission (SEC). Disclosure controls and procedures are also designed to ensure that such information is accumulated and communicated to our management, including our CEO and CFO, as appropriate to allow timely decisions regarding required disclosure.

Under the supervision and with the participation of our management, including our CEO and CFO, we conducted an evaluation of the effectiveness of the design and operation of our disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act, as of January 24, 2025, the end of the fiscal period covered by this Quarterly Report on Form 10-Q (the Evaluation Date). Based on this evaluation, our CEO and CFO concluded as of the Evaluation Date that our disclosure controls and procedures were effective such that the information required to be disclosed in our SEC reports (i) is recorded, processed, summarized, and reported within the time periods specified in SEC rules and forms, and (ii) is accumulated and communicated to our management, including our CEO and CFO, as appropriate to allow timely decisions regarding required disclosure.

Changes in Internal Control Over Financial Reporting

During the third quarter of 2025, we completed the first phase of our new global enterprise resource planning (ERP) system implementation which impacted certain processes and procedures, resulting in changes to our internal control over financial reporting. As we continue our ERP implementation, which we expect to substantially complete in fiscal 2026, additional changes are anticipated. We expect this implementation to strengthen our internal control over financial reporting by automating certain manual processes and standardizing business processes and reporting across our organization, and we will continue to evaluate and monitor our internal control over financial reporting as processes and procedures in the affected areas evolve.

With the exception of the implementation described above, there have been no other changes in our internal control over financial reporting (as defined in Rule 13a-15(f) under the Exchange Act) identified in connection with our evaluation that occurred during the third quarter of fiscal 2025 that has materially affected or is reasonably likely to materially affect our internal control over financial reporting.