Xilio Therapeutics, Inc.

Internal control over financial reporting refers to the process designed by, or under the supervision of, our principal executive officer and our principal financial officer, and effected by our Board of Directors, management and other personnel, to provide reasonable assurance regarding the reliability of financial reporting and the preparation of consolidated financial statements for external purposes in accordance with generally accepted accounting principles, and includes those policies and procedures that:

(1)

pertain to the maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of our assets;

(2)

provide reasonable assurance that transactions are recorded as necessary to permit preparation of consolidated financial statements in accordance with generally accepted accounting principles, and that our receipts and expenditures are being made only in accordance with authorizations of our management and directors; and

(3)

provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of our assets that could have a material effect on the consolidated financial statements.

Internal control over financial reporting cannot provide absolute assurance of achieving financial reporting objectives because of its inherent limitations. Internal control over financial reporting is a process that involves human diligence and compliance and is subject to lapses in judgment and breakdowns resulting from human failures. Internal control over financial reporting also can be circumvented by collusion or improper management override. Also, projections of any evaluation of effectiveness of internal control over financial reporting to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with policies or procedures may deteriorate. Because of such limitations, there is a risk that material misstatements may not be prevented or detected on a timely basis by internal control over financial reporting. However, these inherent limitations are known features of the financial reporting process. Therefore, it is possible to design into the process safeguards to reduce, though not eliminate, this risk.

Management is responsible for establishing and maintaining adequate internal control over our financial reporting, as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. Under the supervision and with the participation of our management, including our principal executive officer and our principal financial officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting. Management has used the framework set forth in the report entitled “Internal Control—Integrated Framework (2013)” published by the Committee of Sponsoring Organizations of the Treadway Commission (COSO) to evaluate the effectiveness of our internal control over financial reporting. Based on its evaluation, management has concluded that our internal control over financial reporting was effective as of December 31, 2025.

This Annual Report on Form 10-K does not include an attestation report of our independent registered public accounting firm due to a transition period established by rules of the SEC for “emerging growth companies.”