OneSpan Inc.

Management’s Evaluation of Disclosure Controls and Procedures

Our management, with the participation of the Company’s Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures (as such term is defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)) as of March 31, 2026. Based on this evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that, as of March 31, 2026, our disclosure controls and procedures were effective in recording, processing, summarizing and reporting, on a timely basis, information required to be disclosed by us in the reports we file or submit under the Exchange Act, and such information is accumulated and communicated to management as appropriate to allow timely decisions regarding required disclosure.

Changes in Internal Controls

There have been no changes in the Company’s internal control over financial reporting that materially affected, or are reasonably likely to materially affect, our internal control over financial reporting during the three months ended March 31, 2026.