Star Equity Holdings, Inc.

Disclosure Controls and Procedures

The Company’s management, with the participation of the Company’s Chief Executive Officer and Chief Financial Officer, has conducted an evaluation of the design and operation of the Company’s disclosure controls and procedures, as such term is defined under Rule 13a-15(e) of the Securities Exchange Act of 1934, as amended. Based on this evaluation, the Company’s Chief Executive Officer and Principal Financial Officer have concluded that the Company’s disclosure controls and procedures were effective as of December 31, 2025. Such controls and procedures are designed only to provide reasonable assurance. There is no complete assurance that these controls and procedures will operate effectively under all circumstances.

Management’s Annual Report on Internal Control Over Financial Reporting

The management of the Company is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Rules 13a-15(f) and 15(d)-15(f) of the Securities Exchange Act of 1934. The Company’s internal control over financial reporting is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with GAAP.

Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

The Company’s management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2025 using the criteria set forth in Internal Control-Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on this assessment, the Company’s management believes that, as of December 31, 2025, the Company’s internal control over financial reporting was effective based on those criteria.

Management’s assessment of and conclusion on the effectiveness of internal control over financial reporting did not include the internal controls of ADT, which was acquired as part of the merger with Star Operating Companies (“SOC”) on August 22, 2025. ADT’s operations are currently being integrated into the Company’s internal control framework, and management expects to include ADT in its assessment of internal control over financial reporting in a future period. Management’s assessment did not include ADT, which represented approximately 11% of total assets and 3% of revenues as of and for the year ended December 31, 2025.

This Form 10-K does not include an attestation report of the Company’s registered public accounting firm regarding internal control over financial reporting. Management’s report was not subject to attestation by the Company’s registered public accounting firm pursuant to the SEC’s rules for non-accelerated filers that permit the Company to provide only management’s assessment report for the year ended December 31, 2025.

Changes in Internal Control Over Financial Reporting

On August 22, 2025 we completed the merger with Star Operating Companies ("SOC"). As a result of this transaction, we have begun integrating the operations, systems, and internal controls of SOC into our existing processes. This integration is ongoing and includes aligning accounting policies, consolidating financial reporting systems, and implementing our internal control framework across the combined entity. These activities represent a change to our internal control over financial reporting. While we do not believe these changes have materially affected our internal control over financial reporting at this time, the integration process may result in additional changes in future periods.