Penumbra Inc

Evaluation of Disclosure Controls and Procedures

An evaluation as of September 30, 2024 was carried out under the supervision and with the participation of our management, including our principal executive officer and principal financial officer, of the effectiveness of our “disclosure controls and procedures,” which are defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), as controls and other procedures of a company that are designed to ensure that the information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to the company’s management, including its principal executive officer and principal financial officer, as appropriate, to allow timely decisions regarding required disclosure. Based upon that evaluation, our principal executive officer and principal financial officer concluded that our disclosure controls and procedures were effective as of September 30, 2024.

Changes in Internal Control Over Financial Reporting

There was no change in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) that occurred during the quarterly period ended September 30, 2024 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Limitations on the Effectiveness of Controls

A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Because of inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues, if any, within a company have been detected. Accordingly, our disclosure controls and procedures are designed to provide reasonable, not absolute, assurance that the objectives of our disclosure control system are met.