HCI Group, Inc.

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures (as defined in Rule 13a-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”)) as of the end of the period covered by this Annual Report. Based on such evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that as of December 31, 2025, our disclosure controls and procedures were effective to provide reasonable assurance that information required to be disclosed in the reports we file or submit under the Exchange Act is (i) recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission’s rules and forms and (ii) accumulated and communicated to our Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosures.

Management’s Report on Internal Control Over Financial Reporting

Management is responsible for establishing and maintaining adequate internal control over our financial reporting (as defined in Rule 13a-15(f) and 15d-15(f) of the Exchange Act). Internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles.

Our management performed an assessment of the effectiveness of our internal control over financial reporting as of December 31, 2025 based on the framework in Internal Control – Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”). Based on our assessment, we determined that our internal control over financial reporting was effective as of December 31, 2025.

The effectiveness of our internal control over financial reporting as of December 31, 2025 has been audited by Forvis Mazars, LLP, an independent registered public accounting firm, as stated in their report which appears in Part II of this Annual Report.

Changes in Internal Control Over Financial Reporting

During the three months ended December 31, 2025, there were no changes in our internal control over financial reporting that materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.