AtriCure Inc

Evaluation of Disclosure Controls and Procedures

The Company’s management, with the participation of the President and Chief Executive Officer (the Principal Executive Officer) and Chief Financial Officer (the Principal Accounting and Financial Officer), has evaluated the effectiveness of the Company’s disclosure controls and procedures, as defined in Rules 13(a) -15(e) and 15(d) -15(e) of the Securities Exchange Act of 1934 as amended (Exchange Act), as of the end of the period covered by this report. Based on this evaluation, we concluded that, as of the end of the period covered by this report, our disclosure controls and procedures were effective in providing reasonable assurance that information required to be disclosed by us in the reports we file or submit under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s forms and rules, and the material information relating to the Company is accumulated and communicated to management, including the

President and Chief Executive Officer and the Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosures.

Control systems, no matter how well designed and operated, can provide only reasonable, not absolute, assurance that control objectives are met. Because of inherent limitations in all control systems, no evaluation of controls can provide assurance that all control issues and instances of fraud, if any, within a company will be detected. Additionally, controls can be circumvented by individuals, by collusion of two or more people or by management override. Over time, controls can become inadequate because of changes in conditions or the degree of compliance may deteriorate. Further, the design of any system of controls is based in part upon assumptions about the likelihood of future events. There can be no assurance that any design will succeed in achieving its stated goals under all future conditions. Because of the inherent limitations in any cost-effective control system, misstatements due to errors or fraud may occur and not be detected.

Changes in Internal Control Over Financial Reporting

In the ordinary course of business, we routinely enhance our information systems by either upgrading current systems or implementing new ones. There were no changes in our internal control over financial reporting that occurred during the three months ended June 30, 2024 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.