Oak Valley Bancorp

The management of Oak Valley Bancorp is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. Our internal control system was designed to ensure that material information regarding our operations is made available to management and the board of directors to provide them reasonable assurance that the published financial statements are fairly presented. There are limitations inherent in any internal control, such as the possibility of human error and the circumvention or overriding of controls. As a result, even effective internal controls can provide only reasonable assurance with respect to financial statement preparation. As conditions change over time so too may the effectiveness of internal controls.

Our management has evaluated our internal control over financial reporting as of December 31, 2023 based on the framework in Internal Control — Integrated Framework issued by the Committee of Sponsoring Organizations (COSO 2013) of the Treadway Commission. Based on this assessment, our management concluded that our internal control over financial reporting was effective as of December 31, 2023.