Kyverna Therapeutics, Inc.

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer, or the CEO, and Chief Financial Officer, or the CFO (our principal executive officer and principal financial officer, respectively), evaluated the effectiveness of our disclosure controls and procedures as of March 31, 2025. The term “disclosure controls and procedures,” as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act, means controls and other procedures of an issuer that are designed to ensure that information required to be disclosed by an issuer in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by an issuer in the reports that it files or submits under the Exchange Act is accumulated and communicated to the issuer’s management, including its principal executive and principal financial officers, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.

Based on their evaluation, the CEO and the CFO have concluded that our disclosure controls and procedures were not effective as of March 31, 2025, because of the material weaknesses in our internal control over financial reporting described below.

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of annual or interim financial statements will not be prevented or detected on a timely basis.

In connection with our audit of the financial statements for the year ended December 31, 2024 and as of March 31, 2025, we identified material weaknesses in the design and operating effectiveness of our internal control over financial reporting related to the fact that we did not appropriately design and maintain entity-level controls impacting the control environment, risk assessment, control activities, information and communication and monitoring activities to prevent or detect material misstatements to the financial statements. These material weaknesses related to (i) an insufficient number of qualified resources to ensure adequate oversight and accountability over the performance of controls, including retention of control evidence, (ii) ineffective identification and assessment of risks impacting internal control over financial reporting, and (iii) insufficient evaluation and determination as to whether the components of internal controls were present and functioning based upon evidence maintained for management review controls and activity level controls across substantially all financial statement areas.

These material weaknesses contributed to the following additional material weakness: we did not design and maintain effective (i) general controls over information systems that support the financial reporting process, (ii) controls over the completeness and accuracy of information used in the operation of control activities across substantially all financial statement areas, and (iii) management review controls at a sufficient level of precision to detect a material misstatement across substantially all financial statement areas that involve complex and judgmental areas of accounting and disclosure.

There were no adjustments that resulted from the above material weaknesses. However, these material weaknesses could result in a misstatement of substantially all of our accounts or disclosures that would result in a material misstatement of our annual or interim financial statements that would not be prevented or detected.

Remediation Plans

During the year ended December 31, 2024, and the quarter ended March 31, 2025, our management, with the oversight of the Audit Committee of our board of directors, has taken substantial measures toward remediating the control deficiencies contributing to the material weaknesses identified above. These remediation efforts include the following:

•

We have hired additional accounting and IT personnel, including but not limited to the hiring of a Vice President of Accounting/Corporate Controller, a Head of Information Technology, and an Assistant Controller;

•

We have engaged a third-party consulting firm to advise and assist in documenting the design and implementation of internal controls over the financial reporting process, including general controls over information systems;

•

We have completed an initial risk assessment and continue to focus on the principles of the Committee of Sponsoring Organizations of the Treadway Commissions, or COSO, framework related to risk assessment;

•

We have designed and will continue to implement and enhance our entity level controls across each of the COSO components necessary for effective internal control;

•

We have formalized process documentation of all key processes and systems, including the mapping of controls to relevant financial reporting and IT risks;

•

We have designed and implemented general controls over information systems across the majority of our relevant financial systems;

•

We have engaged a third-party technical accounting firm to help management with accounting, presentation and disclosures of complex and judgmental transactions and created an internal cross-functional disclosure committee that includes senior members of the organization;

•

We have designed and will continue to implement the necessary management review controls across all financial statement areas; and

•

We continue to perform manual procedures to validate the completeness and accuracy of certain reports generated from various financial systems that are relevant to the preparation of the financial statements.

Our management is committed to maintaining a strong internal control environment. We are committed to continuing to implement a strong system of controls and believe that our ongoing remediation efforts, particularly in the improvement of our control environment, will result in significant improvements to our system of controls. However, material weaknesses are not considered remediated until the new controls have been operational for a sufficient period of time, and management concludes, through testing, that these controls are operating effectively. We will continue to take efforts to address each of the identified weaknesses during fiscal year 2025. This remediation process may require additional resources and will require time to implement. We will continue to monitor the effectiveness of these remediation measures, and we will make any changes to the design of our remediation plans and take such other actions that we deem appropriate given the circumstances.

Changes in Internal Control Over Financial Reporting

Except as discussed above under “Remediation Plans”, there were no other changes in our internal control over financial reporting during the quarter ended March 31, 2025, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Limitations on the Effectiveness of Controls

In designing and evaluating the disclosure controls and procedures, management recognizes that because of the inherent limitations in all control systems, any controls and procedures, no matter how well designed and operated, can provide only reasonable not absolute, assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures reflect the fact that there are resource constraints and the benefits of controls and procedures will be considered relative to their costs.