CF BANKSHARES INC.

CONTROLS AND PROCEDURES

Evaluation of disclosure controls and procedures. We maintain disclosure controls and procedures that are designed to ensure that information required to be disclosed in our reports under the Securities Exchange Act of 1934, as amended (“Exchange Act”), is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to our management, including our principal executive officer and principal financial officer, as appropriate, to allow timely decisions regarding required disclosure. Management, with the participation of our principal executive officer and principal financial officer, has evaluated the effectiveness of our disclosure controls and procedures (as such term is defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) as of the end of the period covered by this report. Based on such evaluation, our principal executive officer and principal financial officer have concluded that our disclosure controls and procedures were effective as of and for the quarter ended March 31, 2026.

Changes in internal control over financial reporting. We made no changes in our internal controls over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) in the first quarter of 2026 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

PART II. Item 1 to 6