BYLINE BANCORP, INC.

Evaluation of disclosure controls and procedures. The Company’s management, including our Chief Executive Officer and our Chief Financial Officer, have evaluated the effectiveness of our "disclosure controls and procedures" (as defined in Rule 13a-15(e) under the Exchange Act), as of the end of the period covered by this report. Based on such evaluation, our Chief Executive Officer and our Chief Financial Officer have concluded that, as of December 31, 2025, the Company’s disclosure controls and procedures were effective to provide reasonable assurance that the information required to be disclosed by the Company in the reports it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the rules and forms of the SEC and is accumulated and communicated to the Company’s management, including our Chief Executive Officer and our Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure.

Management’s annual report on effectiveness of internal control over financial reporting. Management of the Company is responsible for establishing and maintaining effective internal control over financial reporting. Internal control is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of published financial statements. Internal control over financial reporting includes self-monitoring mechanisms, and actions are taken to correct deficiencies as they are identified.

Management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2025. This assessment was based on criteria for effective internal control over financial reporting established in Internal Control-Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Based on this assessment, our Chief Executive Officer and our Chief Financial Officer have determined that the Company maintained effective internal control over financial reporting as of December 31, 2025, based on the specified criteria.

All internal control systems, no matter how well designed, have inherent limitations. Therefore, even those systems determined to be effective can provide only reasonable assurance with respect to financial statement preparation and presentation. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Baker Tilly US, LLP, an independent registered public accounting firm that audited the Consolidated Financial Statements of the Company included in this Annual Report, has issued an audit opinion on the effectiveness of the Company's internal control over financial reporting as of December 31, 2025. The report, which expresses an unqualified opinion on the effectiveness of the Company's internal control over financial reporting as of December 31, 2025, is included in Part II, Item 8 - Financial Statements and Supplementary Data under the heading "Report of Independent Registered Public Accounting Firm".

Changes in internal control over financial reporting. There was no change in the Company’s internal control over financial reporting during the quarter ended December 31, 2025, that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting.