UFP TECHNOLOGIES INC

Disclosure Controls and Procedures

The Company carried out an evaluation, under the supervision and with the participation of its management, including the Chief Executive Officer and Chief Financial Officer, of the effectiveness of the design and operation of the Company’s “disclosure controls and procedures” (as defined in Exchange Act Rule 13a-15(e) and 15d-15(e)) as of the end of the period covered by this Report (the “Evaluation Date”). Based upon that evaluation, the Chief Executive Officer and Chief Financial Officer concluded that, as of the Evaluation Date, the Company’s disclosure controls and procedures are effective to ensure that information required to be disclosed in the reports that the Company files or submits under the Exchange Act is (i) recorded, processed, summarized and reported, within the time periods specified in the Securities and Exchange Commission’s rules and forms and (ii) accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

The Company closed the acquisition of Marble in June 2024 and closed on the acquisitions of AJR, Welch and AQF all in the third quarter of 2024. The new acquisitions’ total assets and net sales constituted approximately 34.8% and 13.9%, respectively, of the Company’s consolidated total assets and year-to-date net sales as shown on our condensed consolidated financial statements as of and for the period ended December 31, 2024. As the acquisitions occurred in the second and third quarters of fiscal 2024, the Company excluded all of the acquired businesses internal control over financial reporting from the scope of the assessment of the effectiveness of the Company’s disclosure controls and procedures. This exclusion is in accordance with the general guidance issued by the Staff of the Securities and Exchange Commission that an assessment of a recently acquired business may be omitted from the scope within the first year of acquisition if specified conditions are satisfied.

Management’s Report on Internal Control Over Financial Reporting

The Company’s management is responsible for establishing and maintaining an adequate system of internal control over financial reporting, as defined in Exchange Act Rule 13a-15(f) and 15d-15(f). The Company’s internal control over financial reporting is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with Generally Accepted Accounting Principles (“GAAP”).

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Therefore, even those systems determined to be effective can provide only reasonable assurance, as opposed to absolute assurance, of achieving their internal control objectives.

Management conducted an assessment of the Company’s internal control over financial reporting as of December 31, 2024, based on criteria established in the 2013 Internal Control – Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”). Except as described above relating to the 2024 acquisitions, based on the assessment, management concluded that, as of December 31, 2024, the Company’s internal control over financial reporting is effective.

Except as described above, there was no change in the Company’s internal control over financial reporting that occurred during the Company’s most recently completed fiscal quarter that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting.

The effectiveness of our internal control over financial reporting as of December 31, 2024 has been audited by Grant Thornton LLP, an independent registered public accounting firm, as stated in its report which is included under Part IV, Item 15, in this Report.