MYOMO INC

Evaluation of Disclosure Controls and Procedures

The term “disclosure controls and procedures,” as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), refers to controls and procedures that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that such information is accumulated and communicated to a company’s management, including its principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosure.

Our management, with the participation of our Chief Executive Officer, our principal executive officer, and our Chief Financial Officer, our principal financial officer, has evaluated the effectiveness of our disclosure controls and procedures as of December 31, 2024, the end of the period covered by this Annual Report on Form 10-K.

Management recognizes that any disclosure controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives, and management necessarily applies its judgment in evaluating the cost-benefit relationship of possible controls and procedures. Based on the evaluation of our disclosure controls and procedures as of December 31, 2024, our Chief Executive Officer and our Chief Financial Officer have concluded that our disclosure controls and procedures were not effective as of such date at the reasonable assurance level due to the material weakness in the design of effective information technology general controls over our enterprise reporting system described below.

Material Weakness

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the company’s annual or interim financial statements will not be prevented or detected on a timely basis.

We identified a material weakness related to a lack of design and maintenance of effective information technology general controls due to privileged access rights for two individuals, lack of formal processes for user provisioning, periodic user access review and change management for financial reporting system and lack of formal reviews of key third party service provider SOC reports. The deficiencies could allow for inappropriate financial transactions to be recorded that would not be detected by our other manual controls, rendering them ineffective. This material weakness did not result in any identified misstatements to our financial statements.

Notwithstanding the material weaknesses in our internal control over financial reporting, our management has concluded that our consolidated financial statements and related notes thereto included in this Annual Report on Form 10-K fairly present in all material respects the financial condition, results of operations and cash flows of the Company and have been prepared in accordance with generally accepted accounting principles. Our Chief Executive Officer and Chief Financial Officer have certified that, based on each such officer’s knowledge, the financial statements, as well as the other financial information included in this Annual Report on Form 10-K, fairly present in all material respects the financial condition, results of operations and cash flows of the Company as of, and for, the periods presented in this

Annual Report on Form 10-K. Marcum LLP has issued an unqualified opinion on our financial statements, which is included in Part IV of this Annual Report on Form 10-K.

Management’s Plan for Remediation of the Material Weakness

Management, with the oversight of the Audit Committee of the Board of Directors, is committed to maintaining a strong internal control environment. In response to the material weakness identified above, the Company intends to remediate the material weakness in internal control over financial reporting by formalizing our process and review of user provisioning to enable only the appropriate personnel to have access, including giving rights to provision access to our financial reporting system to an individual outside our finance organization, and formalizing change management processes and review of key third party service provider SOC reports.

We believe that these actions, when fully implemented, will remediate the material weakness. However, the material weakness will not be considered fully remediated until the design of these controls are determined to operate for a sufficient period of time and management has concluded, through testing, that these controls are effective. As we continue to evaluate operating effectiveness and monitor improvements to our internal control over financial reporting, we may take additional measures to address control deficiencies or modify the remediation plan described above.

Management’s Report on Internal Control over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Exchange Act Rule 13a-15(f). Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements.

Our management assessed the effectiveness of our internal control over financial reporting as of December 31, 2024. In making this assessment, we used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) in Internal Control - Integrated Framework (2013). Based on our assessment, and as a result of the material weakness described above, we believe that as of December 31, 2024, our internal control over financial reporting was not effective at the reasonable assurance level. However, after giving full consideration to this material weakness, our management has concluded that our consolidated financial statements present fairly, in all material respects, our financial position, results of operations and cash flows for the periods disclosed in conformity with generally accepted accounting principles.

Changes in Internal Control over Financial Reporting

Except for the material weakness discussed above, there was no change in our internal control over financial reporting (as defined in Rule 13a-15(f) under the Exchange Act) identified in connection with the evaluation of our internal control that occurred during the fiscal quarter ended December 31, 2024 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitations of Internal Controls

Our management, including our Chief Executive Officer and Chief Financial Officer, does not expect that our disclosure controls and procedures or our internal controls will prevent all error and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, within the company have been detected. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people, or by management override of the control. The design of any system of controls also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions. Over time, control may become inadequate because of changes in conditions, or the degree of compliance with the policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.