Astrana Health, Inc.

Evaluation of Disclosure Controls and Procedures

We maintain “disclosure controls and procedures,” as defined in Rule 13a-15(e) under the Exchange Act, designed to ensure that information required to be disclosed by a company in the reports filed or submitted under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to our management, including our principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosure. Management recognizes that any controls and procedures, no matter how well-designed and well-operated, can provide only reasonable assurance of achieving their objectives.

As of September 30, 2025, we carried out an evaluation, under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial and Operating Officer, of the effectiveness of the design and operation of our disclosure controls and procedures. Based on that evaluation, our management, including our Chief Executive Officer and Chief Financial and Operating Officer, concluded that our disclosure controls and procedures were effective as of September 30, 2025.

Changes in Internal Control Over Financial Reporting

There were no changes in our internal control over financial reporting during the quarter ended September 30, 2025, that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting. We will exclude the operations of Prospect as we continue to evaluate its internal control over financial reporting. This exclusion is in accordance with the general guidance issued by the Staff of the Securities and Exchange Commission that an assessment of a recent business combination may be omitted from management's report on internal control over financial reporting in the first year of consolidation.