FINANCIAL INSTITUTIONS INC

Evaluation of Disclosure Controls and Procedures

As of March 31, 2025, the Company carried out an evaluation, under the supervision and with the participation of the Company’s management, including the Company’s Chief Executive Officer and Chief Financial Officer, of the effectiveness of the design and operation of the Company’s disclosure controls and procedures pursuant to Rule 13a-15(b), as adopted by the SEC under the Securities Exchange Act of 1934, as amended (“Exchange Act”). Based upon that evaluation, the Company’s Chief Executive Officer and Chief Financial Officer concluded that the Company’s disclosure controls and procedures were effective as of the end of the period covered by this report.

Disclosure controls and procedures are the controls and other procedures that are designed to ensure that information required to be disclosed in the reports that the Company files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed in the reports that the Company files or submits under the Exchange Act is accumulated and communicated to management, including the Company’s Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure.

Changes in Internal Control over Financial Reporting

There were no changes in the Company’s internal control over financial reporting that occurred during the quarter ended March 31, 2025 that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.