REPLIGEN CORP

Disclosure Controls and Procedures

The Company’s management is responsible for establishing and maintaining adequate DCPs (as such term is defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act). DCPs are those controls and procedures that are designed to ensure that information required to be disclosed in the Company’s reports filed or submitted under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to the Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosures.

Under the supervision and with the participation of the Company’s management, including the Company’s Chief Executive Officer and Chief Financial Officer, the Company carried out an evaluation as of June 30, 2025 of the effectiveness of the design and operation of the Company’s DCPs pursuant to Exchange Act Rules 13a-15(b) and 15d-15(b). Based on such evaluation, the principal executive officer and principal financial officer have concluded that, as of the end of such period, the Company’s disclosure controls and procedures were not effective because of the previously reported material weaknesses in our internal control over financial reporting, which are described in Part II, Item 9A, “Controls and Procedures”of our Annual Report on Form 10-K for the year ended December 31, 2024.

Material Weaknesses in Internal Control Over Financial Reporting

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the Company's annual or interim financial statements will not be prevented or detected on a timely basis. As of December 31, 2024 and as disclosed in the Company’s Form 10-K, the Company identified the following material weaknesses in internal control over financial reporting:

Management identified deficiencies related to the design and operating effectiveness of controls related to revenue recognition specific to the evaluation of accounting for contract terms.

Management did not maintain effective information technology (“IT”) general controls for information systems that are relevant to the preparation of our financial statements. Specifically, we did not maintain logical access controls and program change management controls to ensure that access to programs and data are appropriately restricted and program and data changes are identified, tested, authorized, and implemented appropriately. As a result, automated and business process controls that rely on information from the systems were also deemed ineffective because they could have been adversely affected.

Irrespective of the effects of the IT general controls deficiencies, management did not perform certain business process-level controls related to inventory valuation and the financial statement close process either in a timely manner or with an appropriate precision threshold.

As of June 30, 2025, the Company has not remediated these material weaknesses. See below for a description of our remediation plan and activities.

Remediation Plan for Material Weaknesses

As previously disclosed in the Form 10-K, management is implementing remedial actions under the oversight of the Audit Committee of the Board of Directors to address the identified deficiencies.

Our remediation activities include the following with respect to revenue recognition:

•

Designing and implementing new internal controls to validate there is a complete listing of revenue contracts that have non-standard terms, which require incremental accounting analysis under ASC 606“Revenue from contracts with Customers”;

•

Designing and implementing new internal controls evaluating the accounting for contract amendments, including amendments accounted for as contract modifications;

•

Enhancing and expanding our existing revenue recognition control procedures and attributes when evaluating the accounting impact of non-standard contract terms and contract modifications; and

•

Increasing education for internal resources on accounting for contracts within the scope of ASC 606 and deploying enablers to facilitate documentation of accounting analyses and conclusions.

Our remediation activities will include the following with respect to IT general controls:

•

Reassessing the operating effectiveness of internal controls related to the program and data change management and user access processes; and

•

Expanding the management and governance over IT system controls.

Our remediation activities will include the following with respect to certain business process-level controls:

•

Reassessing the operating effectiveness of these controls, including precision thresholds, timely execution, and documentation requirements for control owners;

•

Assessing the frequency of our control monitoring activities to ensure that they are conducted in a timely manner; and

•

Hiring additional staff, including external experts, to enhance the performance, documentation, and monitoring of such controls. This includes providing training for control owners setting out expectations as it relates to the control risk and design, execution and monitoring of such controls, including enhancements to the documentation to evidence the execution of the control.

We believe we are making progress toward achieving effectiveness of our internal control over financial reporting. The actions that we are taking are subject to ongoing management review and audit committee oversight. We will not be able to conclude whether the steps we are taking will fully remediate the material weaknesses in our internal control over financial reporting until we have completed our remediation efforts and subsequently evaluated their design and effectiveness over a sufficient period of time, and management concludes, through testing, that these controls are operating effectively. We may also conclude that additional measures are required to remediate the material weaknesses in our internal control over financial reporting.

Changes in Internal Control

Except for the material weaknesses described above, there have been no changes in our internal control over financial reporting identified in connection with the evaluation required by paragraph (d) of Exchange Act Rule 13a-15 or Rule 15d-15 that occurred in the three months ended June 30, 2025 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

PART II. OTHER INFORMATION