SONIDA SENIOR LIVING INC

Effectiveness of Controls and Procedures

The Company’s management, with the participation of the Company’s Chief Executive Officer (“CEO”) and Chief Financial Officer (“CFO”), has evaluated the effectiveness of the Company’s disclosure controls and procedures (as such term is defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)) as of the end of the period covered by this Quarterly Report on Form 10-Q. The Company’s disclosure controls and procedures are designed to ensure that information required to be disclosed by the Company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms. The Company’s disclosure controls and procedures are also designed to ensure that such information is accumulated and communicated to the Company’s management, including the CEO and CFO as appropriate, to allow timely decisions regarding required disclosure.

Based upon the controls evaluation, procedures evaluation and the material weakness described below and in our Annual Report on Form 10-K, which was filed with the SEC on March 17, 2025, the Company’s CEO and CFO have concluded that, as of the end of the period covered by this Quarterly Report on Form 10-Q, the Company’s disclosure controls and procedures are ineffective.

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis. The Company’s system user access controls for certain financial systems, including provisioning and user access review, were not operating effectively. Moreover, the lack of effective user access controls caused insufficient restriction of user and privileged access to our payroll system and data, resulting in a lack of segregation of duties for certain user roles. These control deficiencies could result in a material misstatement of our accounts or disclosures that would not be prevented or detected on a timely basis, and accordingly, we determined that these control deficiencies in aggregate constitute a material weakness.

Other than the changes outlined below, there have not been any changes in the Company’s internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during the Company’s fiscal quarter ended March 31, 2025 that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.

Remediation Plan

As disclosed in our 2024 Annual Report on Form 10-K for the year ended December 31, 2024, which was filed with the SEC on March 17, 2025, we identified a material weakness in our internal control over financial reporting, which has not been remediated as of March 31, 2025. We have developed the following plan for remediation of the material weakness. Control weaknesses are not considered remediated until enhanced internal controls have been operational for a period of time, are tested and management concludes that these controls are operating effectively. We will continue to monitor the effectiveness of our remediation measures in connection with our future assessments of the effectiveness of internal control over financial reporting and disclosure controls and procedures. We will make any changes to the design of our plan and take such other actions that we deem appropriate given the circumstances. We expect to complete the remediation process in 2025.

•Established a project team to review, evaluate and remediate the material weakness.

•Restrict user and privileged access to our payroll system to ensure appropriate segregation of duties.

•Further implement single sign-on user access for key financial systems.

•Enhance key financial system user access reviews to ensure the completeness and accuracy of users.

•Further review our system user access controls and implement additional review controls as deemed necessary.