BIO KEY INTERNATIONAL INC

Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer (“CEO”) and Chief Financial Officer (“CFO”), evaluated the effectiveness of our disclosure controls and procedures as of December 31, 2023. The term “disclosure controls and procedures,” as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended (the “Exchange Act”), means controls and other procedures of a company that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to the Company’s management, including its principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosure. Based on the evaluation of our disclosure controls and procedures as of December 31, 2023, our CEO and CFO concluded that, as of such date, our disclosure controls and procedures were ineffective.

Management’s Annual Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Exchange Act Rule 13a-15(f) and 15d-15(f). Internal control over financial reporting cannot provide absolute assurance of achieving financial reporting objectives because of its inherent limitations. Internal control over financial reporting is a process that involves human diligence and compliance and is subject to lapses in judgment and breakdowns resulting from human failures. Internal control over financial reporting can also be circumvented by collusion or improper management override. Because of such limitations, there is a risk that material misstatements may not be prevented or detected on a timely basis. However, these inherent limitations are known features of the financial reporting process. Therefore, it is possible to design into the process safeguards to reduce, though not eliminate, the risk. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Under the supervision and with the participation of our management, including our CEO and CFO, we have conducted an evaluation of the effectiveness of our internal control over financial reporting as of December 31, 2023, based upon the framework inInternal Control-Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on this evaluation, management has concluded that our internal control over financial reporting was not effective as of December 31, 2023 as a result of certain material weaknesses discovered during the course of their review.

In particular, in connection with the audit of our financial statements as of and for the year ended December 31, 2023, our management identified a lack of control over properly assessing revenue, allowances for accounts receivable and certain reserves for inventory. This resulted in certain errors in the manner in which we recognized revenue generated by our European subsidiary, Swivel Secure Europe, SA, in the first quarter of 2023. In addition, certain allowances for accounts receivable and certain reserves for inventory were understated.

We are currently working to implement appropriate corrective actions to remediate the material weakness to strengthen our internal controls over the recording of revenues.

Each of the material weaknesses noted will only be deemed to have been remediated after the new controls and procedures have been in place for a sufficient period and management has concluded through appropriate testing that the controls are operating effectively. However, we cannot assure you that these or other measures will fully remediate the material weaknesses in a timely manner.

As we are a smaller reporting company, this annual report does not include an attestation report of our registered public accounting firm regarding internal control over financial reporting. Management’s report was not subject to attestation by our registered public accounting firm pursuant to rules of the SEC that permit the Company to provide only management’s report in this Annual Report on Form 10-K.

Changes in Internal Control Over Financial Reporting

Going forward, we will change our internal control over financial reporting for the year ended December 31, 2023 to thoroughly access all accounts for potential adjustments required for proper presentation of the value of the accounts.