PIPER SANDLER COMPANIES

Risk is an inherent part of our business. The principal risks we face in operating our business include: strategic risk, market risk, liquidity risk, credit risk, operational risk, human capital risk, and legal and regulatory risk. The extent to which we properly identify and effectively manage each of these risks is critical to our financial condition and profitability. We have a formal risk management process to identify, assess and monitor each risk and mitigating controls in accordance with defined policies and procedures. The risk management functions are independent of our business lines. Our management takes an active role in the risk management process, and the results are reported to senior management and the board of directors.

The audit committee of the board of directors oversees management's processes for identifying and evaluating our major risks, and the policies, procedures and practices employed by management to govern its risk assessment and risk management processes. The nominating and governance committee of the board of directors oversees the board of directors' committee structures and functions as they relate to the various committees' responsibilities with respect to oversight of our major risk exposures. With respect to these major risk exposures, the audit committee is responsible for overseeing management's monitoring and control of our major risk exposures relating to market risk, credit risk, liquidity risk, legal and regulatory risk, operational risk (including cybersecurity, as further described in Part I, Item 1C "Cybersecurity" in our Annual Report on Form 10-K for the year ended December 31, 2024), and human capital risk relating to misconduct, fraud, and legal and compliance matters. Our compensation committee is responsible for overseeing management's monitoring and control of our major risk exposures relating to compensation, organizational structure, and succession. Our board of directors is responsible for overseeing management's monitoring and control of our major risk exposures related to our corporate strategy. Our Chief Executive Officer and Chief Financial Officer meet with the audit committee on a quarterly basis to discuss our market, liquidity, and legal and regulatory risks, and provide updates to the board of directors, audit committee, and compensation committee concerning the other major risk exposures on a regular basis.

We use internal committees to assist in governing risk and ensure that our business activities are properly assessed, monitored and managed. Our executive financial risk committee manages our market, liquidity and credit risks; oversees risk management practices related to these risks, including defining acceptable risk tolerances and approving risk management policies; and responds to market changes in a dynamic manner. Membership is comprised of senior leadership, including our Chief Executive Officer, President, Chief Financial Officer, Treasurer, Head of Market and Credit Risk, and Head of Fixed Income Trading and Risk. Other committees that help evaluate and monitor risk include underwriting, leadership team and operating committees. These committees help manage risk by ensuring that business activities are properly managed and within a defined scope of activity. Our valuation committees, comprised of members of senior management and risk management, provide oversight and overall responsibility for the internal control processes and procedures related to fair value measurements. Additionally, our operational risk committees address and monitor risk related to information systems and security, legal, regulatory and compliance matters, and third parties such as vendors and service providers.

With respect to market risk and credit risk, the cornerstone of our risk management process is daily communication among traders, trading department management and senior management concerning our inventory positions and overall risk profile. Our risk management functions supplement this communication process by providing their independent perspectives on our market and credit risk profile on a daily basis. The broader objectives of our risk management functions are to understand the risk profile of each trading area, to consolidate risk monitoring company-wide, to assist in implementing effective hedging strategies, to articulate large trading or position risks to senior management, and to ensure accurate fair values of our financial instruments.

Risk management techniques, processes and strategies may not be fully effective in mitigating our risk exposure in all market environments or against all types of risk, and any risk management failures could expose us to material unanticipated losses.

Strategic Risk

Strategic risk represents the risk associated with executive management failing to develop and execute on the appropriate strategic vision which demonstrates a commitment to our culture, leverages our core competencies, appropriately responds to external factors in the marketplace, and is in the best interests of our clients, employees and shareholders.

Our leadership team is responsible for managing our strategic risks. The board of directors oversees the leadership team in setting and executing our strategic plan.

Market Risk

Market risk represents the risk of losses, or financial volatility, that may result from the change in value of a financial instrument due to fluctuations in its market price. Our exposure to market risk is directly related to our role as a financial intermediary for our clients and to our market-making activities. The scope of our market risk management policies and procedures includes all market-sensitive cash and derivative financial instruments.

Our different types of market risk include:

Interest Rate Risk

Interest rate risk represents the potential volatility from changes in market interest rates. We are exposed to interest rate risk arising from changes in the level and volatility of interest rates, changes in the slope of the yield curve, changes in credit spreads, and the rate of prepayments on our interest-earning assets (e.g., inventories) and our funding sources (e.g., short-term financing) which finance these assets. Interest rate risk is managed by selling short U.S. government securities, agency securities, corporate debt securities and derivative contracts. See Note 7 to our unaudited consolidated financial statements included in Part I, Item 1 of this Quarterly Report on Form 10-Q for additional information on our derivative contracts. Our interest rate hedging strategies may not work in all market environments and as a result may not be effective in mitigating interest rate risk. Also, we establish limits on our long fixed income securities inventory, monitor these limits on a daily basis and manage within those limits. Our limits include but are not limited to the following: position and concentration size, dollar duration (i.e., DV01), credit quality and aging.

We estimate that a parallel 50 basis point adverse change in the market would result in a decrease of approximately $0.8 million in the carrying value of our fixed income securities inventory as of September 30, 2025, including the effect of the hedging transactions.

We also measure and monitor the aging and turnover of our long fixed income securities inventory. Turnover is evaluated based on a five-day average by category of security. The vast majority of our fixed income securities inventory generally turns over within three weeks.

In addition to the measures discussed above, we monitor and manage market risk exposure through evaluation of spread DV01 and the MMD basis risk for municipal securities to movements in U.S. treasury securities. All metrics are aggregated by asset concentration and are used for monitoring limits and exception approvals. In times of market volatility, we may also perform ad hoc stress tests and scenario analysis as market conditions dictate.

Equity Price Risk

Equity price risk represents the potential loss in value due to adverse changes in the level or volatility of equity prices. We are exposed to equity price risk through our trading activities primarily in the U.S. market. We attempt to reduce the risk of loss inherent in our market-making and in our inventory of equity securities by establishing limits on our long inventory, monitoring these limits on a daily basis, and by managing net position levels within those limits.

Foreign Exchange Risk

Foreign exchange risk represents the potential volatility to earnings or capital arising from movement in foreign exchange rates. A modest portion of our business is conducted in currencies other than the U.S. dollar, and changes in foreign exchange rates relative to the U.S. dollar can therefore affect the value of non-U.S. dollar net assets, revenues and expenses.

Liquidity Risk

Liquidity risk is the risk that we are unable to timely access necessary funding sources in order to operate our business, as well as the risk that we are unable to timely divest securities that we hold in connection with our market-making and sales and trading activities. We are exposed to liquidity risk in our day-to-day funding activities, by holding potentially illiquid inventory positions and in our role as a remarketing agent for variable rate demand notes.

Our inventory positions subject us to potential financial losses from the reduction in value of illiquid positions. Market risk can be exacerbated in times of trading illiquidity when market participants refrain from transacting in normal quantities or at normal bid-offer spreads. Depending on the specific security, the structure of the financial product, or overall market conditions, we may be forced to hold a security for substantially longer than we had planned or forced to liquidate into a challenging market if funding becomes unavailable.

See the section entitled "Liquidity, Funding and Capital Resources" for information regarding our liquidity and how we manage liquidity risk.

Credit Risk

Credit risk refers to the potential for loss due to the default or deterioration in credit quality of a counterparty, customer, borrower or issuer of securities we hold in our trading inventory. The nature and amount of credit risk depends on the type of transaction, the structure and duration of that transaction and the parties involved. Credit risk also results from an obligor's failure to meet the terms of any contract with us or otherwise fail to perform as agreed. This may be reflected through issues such as settlement obligations or payment collections.

A key tenet of our risk management procedures related to credit risk is the daily monitoring of the credit quality of our long fixed income securities inventory. These rating trends and the credit quality mix are regularly reviewed with the executive financial risk committee. The following table summarizes the credit rating for our long corporate fixed income securities, taxable and tax-exempt municipal securities, and U.S. government and agency securities as a percentage of the total of these asset classes as of September 30, 2025:

Convertible and preferred securities are excluded from the table above as they are typically unrated.

Our different types of credit risk include:

Credit Spread Risk

Credit spread risk arises from the possibility that changes in credit spreads will affect the value of financial instruments. Credit spreads represent the credit risk premiums required by market participants for a given credit quality (e.g., the additional yield that a debt instrument issued by a AA-rated entity must produce over a risk-free alternative). Changes in credit spreads result from potential changes in an issuer's credit rating or the market's perception of the issuer's creditworthiness. We are exposed to credit spread risk with the debt instruments held in our trading inventory. We enter into transactions to hedge our exposure to credit spread risk with derivatives and certain other financial instruments. These hedging strategies may not work in all market environments and as a result may not be effective in mitigating credit spread risk.

Deterioration/Default Risk

Deterioration/default risk represents the risk due to an issuer, counterparty or borrower failing to fulfill its obligations. We are exposed to deterioration/default risk in our role as a trading counterparty to dealers and customers, as a holder of securities, and as a member of exchanges. The risk of default depends on the creditworthiness of the counterparty or issuer of the security. We mitigate this risk by establishing and monitoring individual and aggregate position limits for each counterparty relative to potential levels of activity, holding and marking to market collateral on certain transactions. Our risk management functions also evaluate the potential risk associated with institutional counterparties with whom we hold derivatives, TBAs and other documented institutional counterparty agreements that may give rise to credit exposure.

Collections Risk

Collections risk arises from ineffective management and monitoring of collecting outstanding debts and obligations, including those related to our customer trading activities. Our client activities involve the execution, settlement and financing of various transactions. Client activities are transacted on a delivery versus payment, cash or margin basis. Our credit exposure to institutional client business is mitigated by the use of industry-standard delivery versus payment through depositories and clearing banks. Our risk management functions have credit risk policies establishing appropriate credit limits and collateralization thresholds for our customers and counterparties.

Concentration Risk

Concentration risk is the risk due to concentrated exposure to a particular product; individual issuer, borrower or counterparty; financial instrument; or geographic area. We are subject to concentration risk if we hold large individual securities positions, execute large transactions with individual counterparties or groups of related counterparties, or make substantial underwriting commitments. Potential concentration risk is monitored through review of counterparties and borrowers and is managed using policies and limits established by senior management.

Within our customer matched-book derivative portfolio, we have concentrated counterparty credit exposure with three non-publicly rated entities totaling $5.3 million at September 30, 2025. This counterparty credit exposure relates to our public finance business and consists primarily of interest rate swaps. One derivative counterparty represented 86.5 percent, or $4.6 million, of this exposure. Credit exposure associated with our derivative counterparties is driven by uncollateralized market movements in the fair value of the interest rate swap contracts and is monitored regularly by our financial risk committee. We attempt to minimize the credit (or repayment) risk in derivative instruments by entering into transactions with high-quality counterparties that are reviewed periodically by senior management.

Operational Risk

Operational risk is the risk of loss, or damage to our reputation, resulting from inadequate or failed processes, people and systems or from external events. We rely on the ability of our employees and our systems, both internal and at computer centers operated by third parties, to process a large number of transactions. Our systems may fail to operate properly or become disabled as a result of events that are wholly or partially beyond our control. In the event of a breakdown or improper operation of our systems or improper action by our employees or third-party vendors, we could suffer financial loss, a disruption of our businesses, regulatory sanctions and damage to our reputation. We also face the risk of operational failure or termination of our relationship with any of the exchanges, fully disclosed clearing firms, or other financial intermediaries we use to facilitate our securities transactions. Any such failure or termination could adversely affect our ability to effect transactions and manage our exposure to risk.

Our operations rely on secure processing, storage and transmission of confidential and other information in our internal and outsourced computer systems and networks. Our computer systems, software and networks may be vulnerable to unauthorized access, computer viruses or other malicious code, internal misconduct or inadvertent errors and other events that could have an information security impact. The occurrence of one or more of these events could jeopardize our or our clients' or counterparties' confidential and other information processed and stored in, and transmitted through, our computer systems and networks, or otherwise cause interruptions or malfunctions in our, our clients', our counterparties' or third parties' operations. We take protective measures and endeavor to modify them as circumstances warrant. A further discussion of our procedures for cybersecurity risk management is included in Part I, Item 1C "Cybersecurity" in our Annual Report on Form 10-K for the year ended December 31, 2024.

In order to mitigate and control operational risk, we have developed and continue to enhance policies and procedures that are designed to identify and manage operational risk at appropriate levels throughout the organization. Important aspects of these policies and procedures include segregation of duties, management oversight, internal control over financial reporting and independent risk management activities within such functions as Risk Management, Compliance, Operations, Internal Audit, Treasury, Finance, Information Technology and Legal. Internal Audit oversees, monitors, evaluates, analyzes and reports on operational risk across the firm. We also have business continuity plans in place that we believe will cover critical processes on a company-wide basis, and redundancies are built into our systems as we have deemed appropriate. These control mechanisms attempt to ensure that operational policies and procedures are being followed and that our various businesses are operating within established corporate policies and limits.

We operate under a fully disclosed clearing model for all of our securities inventories with the exception of convertible securities, and for all of our client clearing activities. In a fully disclosed clearing model, we act as an introducing broker for client transactions and rely on Pershing, our clearing broker dealer, to facilitate clearance and settlement of our clients' securities transactions. The clearing services provided by Pershing are critical to our business operations, and similar to other services performed by third-party vendors, any failure by Pershing with respect to the services we rely upon Pershing to provide could cause financial loss, significantly disrupt our business, damage our reputation, and adversely affect our ability to serve our clients and manage our exposure to risk.

Human Capital Risk

Our business is a human capital business and our success is dependent upon the skills, expertise and performance of our employees. Human capital risks represent the risks posed if we fail to attract and retain qualified individuals who are motivated to serve the best interests of our clients, thereby serving the best interests of our company. Attracting and retaining employees depends, among other things, on our company's culture, management, work environment, geographic locations and compensation. There are risks associated with the proper recruitment, development and rewards of our employees to ensure quality performance and retention.

Legal and Regulatory Risk

Legal and regulatory risk includes the risk of non-compliance with applicable legal and regulatory requirements and loss to our reputation we may suffer as a result of failure to comply with laws, regulations, rules, related self-regulatory organization standards and codes of conduct applicable to our business activities. We are generally subject to extensive regulation in the various jurisdictions in which we conduct our business. We have established procedures that are reasonably designed to achieve compliance with applicable statutory and regulatory requirements, such as public company reporting obligations, regulatory net capital requirements, sales and trading practices, potential conflicts of interest, anti-money laundering, privacy, and financial and electronic recordkeeping. We have also established procedures that are reasonably designed to achieve compliance with our policies relating to ethics and business conduct. The legal and regulatory focus on the financial services industry presents a continuing business challenge for us.

Our business also subjects us to the complex income tax laws of the jurisdictions in which we have business operations, and these tax laws may be subject to different interpretations by the taxpayer and the relevant governmental taxing authorities. We must make judgments and interpretations about the application of these inherently complex tax laws when determining the provision for income taxes.