EPLUS INC

CONTROLS AND PROCEDURES

As of the end of the period covered by this report, we carried out an evaluation, under the supervision and with the participation of our management, including our Chief Executive Officer (“CEO”) and our Chief Financial Officer (“CFO”), of the effectiveness of the design and operation of our disclosure controls and procedures, or “disclosure controls,” as defined in the Exchange Act Rule 13a-15(e). Disclosure controls are controls and procedures designed to reasonably ensure that information required to be disclosed in our reports filed under the Exchange Act, such as this Quarterly Report, is recorded, processed, summarized, and reported within the periods specified in the SEC’s rules and forms. Disclosure controls include, without limitation, controls and procedures designed to ensure that information required to be disclosed in our reports filed under the Exchange Act is accumulated and communicated to our management, including our CEO and CFO, or persons performing similar functions, as appropriate, to allow timely decisions regarding required disclosure. Our disclosure controls include some, but not all, components of our internal control over financial reporting. Based upon that evaluation, our CEO and CFO concluded that our disclosure controls and procedures were effective as of September 30, 2026.

Changes in Internal Control Over Financial Reporting

There have not been any changes in our internal control over financial reporting during the quarter ended September 30, 2026, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Limitations and Effectiveness of Controls

Our management, including our CEO and CFO, do not expect that our disclosure controls or our internal control over financial reporting will prevent or detect all errors and all fraud. A control system cannot provide absolute assurance due to its inherent limitations; it is a process that involves human diligence and compliance and is subject to lapses in judgment and breakdowns resulting from human failures. A control system also can be circumvented by collusion or improper management override. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of such limitations, disclosure controls and internal control over financial reporting cannot prevent or detect all misstatements, whether unintentional errors or fraud. However, these inherent limitations are known features of the financial reporting process; therefore, it is possible to design into the process safeguards to reduce, though not eliminate, this risk.