NSTS Bancorp Inc

Evaluation of Disclosure Controls & Procedures

Under the supervision and with the participation of our management, including our principal executive officer and principal financial officer, we evaluated the effectiveness of the design and operation of our disclosure controls and procedures (as defined in Rule 13a-15(e) and 15d-15(e) under the Exchange Act) as of the end of the period covered by this report. Based upon that evaluation, the principal executive officer and principal financial officer concluded that, as of December 31, 2023, our disclosure controls and procedures were effective to provide reasonable assurance that the information required to be disclosed by NSTS Bancorp, Inc. in the reports it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the rules and forms of the SEC and is accumulated and communicated to NSTS Bancorp, Inc.'s management, including our principal executive officer and our principal financial officer, as appropriate, to allow timely decisions regarding required disclosure.

Management's Annual Report on Internal Control Over Financial Reporting

Management of NSTS Bancorp, Inc. is responsible for establishing and maintaining effective internal control over financial reporting. Internal control is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of published financial statements. Internal control over financial reporting includes self-monitoring mechanisms, and actions are taken to correct deficiencies as they are identified.

Management assessed the effectiveness of NSTS Bancorp, Inc.’s internal control over financial reporting as of December 31, 2023. This assessment was based on criteria for effective internal control over financial reporting established inInternal Control–* Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO)*. Based on this assessment, our Chief Executive Officer and our Chief Financial Officer have determined that NSTS Bancorp, Inc. maintained effective internal control over financial reporting as of December 31, 2023, based on the specified criteria.

All internal control systems, no matter how well designed, have inherent limitations. Therefore, even those systems determined to be effective can provide only reasonable assurance with respect to financial statement preparation and presentation. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Changes in Internal Control Over Financial Reporting

There were no changes made in our internal control over financial reporting during the quarter ended December 31, 2023 that have materially affected, or are reasonably likely to materially affect, NSTS Bancorp, Inc.’s internal control over financial reporting.