CITIZENS & NORTHERN CORP

The Corporation’s management, under the supervision of and with the participation of the Corporation’s Chief Executive Officer and Chief Financial Officer, has carried out an evaluation of the design and effectiveness of the Corporation’s disclosure controls and procedures as defined in Rule 13a-15(e) and Rule 15d-15(e) of the Securities Exchange Act of 1934 as of the end of the period covered by this report. This evaluation did not include an assessment of those disclosure controls and procedures that are involved in, and did not include an assessment of, internal control over financial reporting as it relates to Susquehanna Community Financial Inc. (“Susquehanna”). Based upon that evaluation, the Chief Executive Officer and Chief Financial Officer have concluded that, as of the end of such period, the Corporation’s disclosure controls and procedures are effective to ensure that all material information required to be disclosed in reports the Corporation files or submits under the Securities Exchange Act of 1934 is recorded, processed, summarized and reported, within the time periods specified in the Securities and Exchange Commission’s rules and forms.

The Susquehanna acquisition was completed October 1, 2025, and during the fourth quarter of 2025 and the first quarter of 2026 the Corporation began the process of integrating processes and internal control over financial reporting for the former Susquehanna locations into those of the Corporation. Though significant progress has been made, at March 31, 2026, the Corporation’s management has not yet completed changes to processes, information technology systems and other components of internal control over financial reporting as part of the integration activities.

There were no significant changes made to the Corporation’s internal control over financial reporting that occurred during the period covered by this report that have materially affected, or that are reasonably likely to materially affect, our internal control over financial reporting.