SURF AIR MOBILITY INC.

Evaluation of Disclosure Controls and Procedures

We maintain disclosure controls and procedures (as defined in Rule 13a-15(e) and Rule 15d-15(e) of the Exchange Act of 1934, as amended (the “Exchange Act”)), that are designed to provide reasonable assurance that information required to be disclosed in our Exchange Act reports is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and that such information is accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, to allow for timely decisions regarding required disclosure. It should be noted that, because of inherent limitations, our disclosure controls and procedures, however well designed and operated, can provide only reasonable, and not absolute, assurance that the objectives of the disclosure controls and procedures are met.

As required by Rule 13a-15(b) under the Exchange Act, our management, with the participation of our Chief Executive Officer and Chief Financial Officer, evaluated the effectiveness of our disclosure controls and procedures as of the end of the period covered by this Annual Report. Based upon that evaluation, our Chief Executive Officer and Chief Financial Officer concluded that our disclosure controls and procedures were not effective as of December 31, 2024 due to material weaknesses in our internal control over financial reporting described below.

Management’s Report on Internal Control over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rule 13a-15(f) under the Exchange Act. Internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with GAAP and includes those policies and procedures that: (1) pertain to the maintenance of records that in reasonable detail accurately and fairly reflect transactions and the dispositions of assets; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with GAAP and that receipts and expenditures are being made only in accordance with appropriate authorizations of management and directors; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of assets that could have a material effect on its financial statements.

Our management assessed the effectiveness of our internal control over financial reporting as of December 31, 2024 based on the criteria described in Internal Control—Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Based on this assessment, our management, including our Chief Executive Officer and Chief Financial Officer, concluded that our internal control over financial reporting was not effective as of December 31, 2024 due to the material weaknesses described below.

As of December 31, 2024, material weaknesses existed in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. The material weaknesses are as follows:

•

We did not design and maintain an effective control environment commensurate with our financial reporting requirements. Specifically, we lacked a sufficient complement of resources with (i) an appropriate level of accounting knowledge, training and experience to appropriately analyze, record and disclose accounting matters timely and accurately, and (ii) an appropriate level of knowledge and experience to establish effective processes and controls. Additionally, the lack of a sufficient complement of resources resulted in an inability to consistently establish appropriate authorities and responsibilities in pursuit of our financial reporting objectives, as demonstrated by, among other things, insufficient segregation of duties in our finance and accounting functions.

•

We did not design and maintain effective controls in response to the risks of material misstatement. Specifically, changes to existing controls or the implementation of new controls have not been sufficient to respond to changes to the risks of material misstatement to financial reporting.

These material weaknesses contributed to the following additional material weaknesses:

•

We did not design and maintain effective controls related to the identification of and accounting for certain non-routine, unusual or complex transactions, including the proper application of U.S. GAAP of such transactions. Specifically, we did not design and maintain effective controls to timely identify and account for capitalizable costs, revenue, stock-based compensation, and debt and equity financing transactions.

•

We did not design and maintain effective controls related to the period-end financial reporting process, including designing and maintaining formal accounting policies, procedures and controls to achieve complete, accurate and timely financial accounting, reporting and disclosures. Additionally, we did not design and maintain effective controls over the preparation and review of account reconciliations and journal entries, including maintaining appropriate segregation of duties.

•

We did not design and maintain effective information technology (“IT”) general controls for information systems that are relevant to the preparation of our financial statements. Specifically, we did not design and maintain: (i) program change management controls to ensure that program and data changes are identified, tested, authorized, and implemented appropriately; (ii) user access controls to ensure appropriate segregation of duties and to adequately restrict user and privileged access to appropriate personnel; (iii) computer operations controls to ensure that processing and transfer of data, and data backups and recovery are monitored; and (iv) program development controls to ensure that new software development is tested, authorized and implemented appropriately.

•

We did not design and maintain effective controls to achieve complete, accurate and timely accounting for debt, deferred liabilities, leases, property and equipment, redeemable convertible preferred shares, accounts payable, and accrued liabilities.

These material weaknesses resulted in audit adjustments to substantially all of our accounts, which were recorded prior to the issuance of the consolidated financial statements as of December 31, 2021 and 2020 and for the years then ended, and as of June 30, 2022 and 2021 and for the six-month periods then ended. Subsequently, these material weaknesses also resulted in misstatements to revenue, deferred revenue, accrued expenses, additional paid-in capital and stock-based compensation expense to the consolidated financial statements as of December 31, 2022 and 2023 and for the years then ended. These material weaknesses also resulted in misstatements to prepaid expenses and other current assets and sales and marketing to the consolidated financial statements as of and for the quarter ended September 30, 2023. Additionally, these material weaknesses could result in a misstatement of substantially all of our accounts or disclosures that would result in a material misstatement to the annual or interim consolidated financial statements that would not be prevented or detected.

This Annual Report on Form 10-K does not include an attestation report of our independent registered public accounting firm regarding internal control over financial reporting as we are an “emerging growth company” as defined in the JOBS Act. For as long as we remain an “emerging growth company,” we are exempt from the auditor attestation requirement in the assessment of the effectiveness of our internal control over financial reporting.

Remediation Plans to Address Material Weaknesses

As of the date of this Annual Report, we have executed on the following remediation actions:

•

Adding key personnel with sufficient technical knowledge for the proper application of U.S. GAAP and the assessment of complex transactions;

•

Integration and alignment of enterprise wide accounting operations under uniform financial systems and processes; and

•

Engagement of a third party in the identification of risks of material misstatement and the designing and implementing of key controls to address the identified risks of material misstatement.

Our remediation plan includes the following actions that are ongoing:

•

further segregate key duties, and actively monitor such duties, to reduce risks that could present a reasonable possibility of material misstatements;

•

developing and executing action plans to address control deficiencies identified within certain key financial processes, prioritized by potential financial impact and risk;

•

develop procedures promoting the consistent operation and evidencing of IT general controls specific to all key systems supporting financial reporting, including program change management, computer operations, program development, and user access reviews; and

•

formalize our risk assessment process and accounting policies and provide training to relevant personnel on the importance of internal controls and compliance with policies.

We are prioritizing the above actions to complete our remediation plan. We believe that these actions, when fully implemented, will remediate the deficiencies described above. The deficiencies will not be considered remediated until the applicable controls operate for a sufficient period of time and management has concluded, through testing, that these controls are designed and operating effectively. As we continue to evaluate and improve the applicable controls, management may take additional remedial measures or modify the remediation plan described above.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting identified in connection with the evaluation required by Rules 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the quarter ended December 31, 2024 that have materially affected, or are reasonably likely to materially affect, our internal controls over financial reporting.

Inherent Limitation on the Effectiveness of Internal Control over Financial Reporting and Disclosure Controls and Procedures

Our management, including our Chief Executive Officer and Chief Financial Officer, does not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, have been detected. These inherent limitations include the realities that judgments in decision-making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by management override of the controls. The design of any system of controls is also based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected or preventable.