COASTAL FINANCIAL CORP

Previous wording

We are subject to laws regarding the privacy, information security and protection of personal information and any violation of these laws or another incident involving personal, confidential or proprietary information of individuals could damage our reputation and otherwise adversely affect our business, financial condition and earnings.

Current wording

•We are subject to laws regarding the privacy, information security and protection of personal information and any violation of these laws or another incident involving personal, confidential or proprietary information of individuals could damage our reputation and otherwise adversely affect our business, financial condition and results of operations.

Previous wording

The majority of our banking assets and liabilities are monetary in nature and subject to risk from changes in interest rates. Like most financial institutions, our earnings are significantly dependent on our net interest income, the principal component of our earnings, which is the difference between interest earned by us from our interest-earning assets, such as loans and investment securities, and interest paid by us on our interest-bearing liabilities, such as deposits and borrowings. We expect that we will periodically experience “gaps” in the interest rate sensitivities of our assets and liabilities, meaning that either our interest-bearing liabilities will be more sensitive to changes in market interest rates than our interest-earning assets, or vice versa. In either event, if market interest rates should move contrary to our position, this “gap” will negatively impact our earnings. The impact on earnings is more adverse when the slope of the yield curve flattens, that is, when short-term interest rates increase more than long-term interest rates or when long-term interest rates decrease more than short-term interest rates. Many factors impact interest rates, including governmental monetary policies, inflation, recession, changes in unemployment, the money supply and international economic weakness and disorder and instability in domestic and foreign financial markets. Our interest rate sensitivity profile was modestly liability sensitive as of December 31, 2024, meaning that we estimate our net interest income would increase more from falling interest rates than from rising interest rates. Loans and deposits in our CCBX segment are more sensitive to interest rate changes than our community bank segment. Over time we anticipate that this will increase sensitivity to both increasing and decreasing interest rates.

Current wording

The majority of our banking assets and liabilities are monetary in nature and subject to risk from changes in interest rates. Like most financial institutions, our earnings are significantly dependent on our net interest income, the principal component of our earnings, which is the difference between interest earned by us from our interest-earning assets, such as loans and investment securities, and interest paid by us on our interest-bearing liabilities, such as deposits and borrowings. We expect that we will periodically experience “gaps” in the interest rate sensitivities of our assets and liabilities, meaning that either our interest-bearing liabilities will be more sensitive to changes in market interest rates than our interest-earning assets, or vice versa. In either event, if market interest rates should move contrary to our position, this “gap” will negatively impact our earnings. The impact on earnings is more adverse when the slope of the yield curve flattens, that is, when short-term interest rates increase more than long-term interest rates or when long-term interest rates decrease more than short-term interest rates. Many factors impact interest rates, including governmental monetary policies, inflation, recession, changes in unemployment, the money supply and international economic weakness and disorder and instability in domestic and foreign financial markets. Loans and deposits in our CCBX segment are more sensitive to interest rate changes than our community bank segment. Over time we anticipate that this will increase sensitivity to both increasing and decreasing interest rates.

Previous wording

Interest rate increases often result in larger payment requirements for our borrowers, which increases the potential for default and could result in a decrease in the demand for loans. At the same time, the marketability of the property securing a loan may be adversely affected by any reduced demand resulting from higher interest rates. In a declining interest rate environment, there may be an increase in prepayments on loans as borrowers refinance their loans at lower rates. In addition, in a low interest rate environment, loan customers often pursue long-term fixed rate credits, which could adversely affect our earnings and net interest margin if rates increase. Changes in interest rates also can affect the value of loans, securities and other assets. An increase in interest rates that adversely affects the ability of borrowers to pay the principal or interest on loans may lead to an increase in nonperforming assets and a reduction of income recognized, which could have an adverse effect on our results of operations and cash flows. Further, when we place a loan on nonaccrual status, we reverse any accrued but unpaid interest receivable, which decreases interest income. At the same time, we continue to have a cost to fund the loan, which is reflected as interest expense, without any interest income to offset the associated funding expense. Thus, an increase in the amount of nonperforming assets would have an adverse impact on net interest income.

Current wording

Interest rate increases often result in larger payment requirements for our borrowers, which increases the potential for default and could result in a decrease in the demand for loans. At the same time, the marketability of the property securing a loan may be adversely affected by any reduced demand resulting from elevated interest rates. In a declining interest rate environment, there may be an increase in prepayments on loans as borrowers refinance their loans at lower rates. In addition, in a low interest rate environment, loan customers often pursue long-term fixed rate credits, which could adversely affect our earnings and net interest margin if rates increase. Changes in interest rates also can affect the value of loans, securities and other assets. An increase in interest rates that adversely affects the ability of borrowers to pay the principal or interest on loans may lead to an increase in nonperforming assets and a reduction of income recognized, which could have an adverse effect on our results of operations and cash flows. Further, when we place a loan on nonaccrual status, we reverse any accrued but unpaid interest receivable, which decreases interest income. At the same time, we continue to have a cost to fund the loan, which is reflected as interest expense, without any interest income to offset the associated funding expense. Thus, an increase in the amount of nonperforming assets would have an adverse impact on net interest income.

Previous wording

At December 31, 2024, our commercial real estate loan portfolio totaled $1.37 billion, or 39.4% of our total loan portfolio. Our current business strategy is to continue our originations of commercial real estate loans. Commercial real estate loans generally expose a lender to greater risk of non-payment or late payment and loss than one-to-four family residential mortgage loans because repayment of the loans often depends on the successful operation of the properties and the income stream of the borrowers. These loans involve larger loan balances to single borrowers or groups of related borrowers compared to one-to-four family residential mortgage loans. To the extent that borrowers have more than one commercial real estate loan outstanding, an adverse development with respect to one loan or one credit relationship could expose us to a significantly greater risk of loss compared to an adverse development with respect to a one-to-four family residential real estate loan. Moreover, if loans that are collateralized by commercial real estate become troubled and the value of the real estate has been significantly impaired, then we may not be able to recover the full contractual amount of principal and interest that we anticipated at the time we originated the loan, which could cause us to increase our provision for credit losses and would adversely affect our business, financial condition and results of operations. Furthermore, should the fundamentals of the commercial real estate market deteriorate due to macroeconomic and other factors, our business, financial condition and results of operations could be adversely affected.

Current wording

At December 31, 2025, our commercial real estate loan portfolio totaled $1.29 billion, or 34.2% of our total loan portfolio. Our current business strategy is to continue our originations of commercial real estate loans. Commercial real estate loans generally expose a lender to greater risk of non-payment or late payment and loss than one-to-four family residential mortgage loans because repayment of the loans often depends on the successful operation of the properties and the income stream of the borrowers. These loans involve larger loan balances to single borrowers or groups of related borrowers compared to one-to-four family residential mortgage loans. To the extent that borrowers have more than one commercial real estate loan outstanding, an adverse development with respect to one loan or one credit relationship could expose us to a significantly greater risk of loss compared to an adverse development with respect to a one-to-four family residential real estate loan. Moreover, if loans that are collateralized by commercial real estate become troubled and the value of the real estate has been significantly impaired, then we may not be able to recover the full contractual amount of principal and interest that we anticipated at the time we originated the loan, which could cause us to increase our provision for credit losses and would adversely affect our business, financial condition and results of operations. Furthermore, should the fundamentals of the commercial real estate market deteriorate due to macroeconomic and other factors, our business, financial condition and results of operations could be adversely affected.

Previous wording

As of December 31, 2024, commercial and industrial loans totaled $293.4 million and represented 8.4% of total loans. We make commercial business loans in our market area to a variety of professionals, sole proprietorships, partnerships and corporations. As compared to commercial real estate loans, which are secured by real property, the value of which tends to be more easily ascertainable, commercial business loans are of higher risk and typically are made on the basis of the borrower’s ability to make repayment from the cash flow of the borrower’s business. As a result, the availability of funds for the repayment of commercial business loans may depend substantially on the success of the business itself and the conditions in the general economy. Further, any losses incurred on a small number of commercial loans could have an adverse impact on our financial condition and results of operations due to the larger average size of commercial loans as compared with other loans and the risk that collateral securing such loans may depreciate over time, may be difficult to appraise, may fluctuate in value and may depend on the borrower’s ability to collect receivables. We have increased our focus on commercial business lending in recent years and intend to continue to focus on this type of lending in the future.

Current wording

As of December 31, 2025, commercial and industrial loans totaled $454.1 million and represented 12.1% of total loans. We make commercial business loans in our market area to a variety of professionals, sole proprietorships, partnerships and corporations. As compared to commercial real estate loans, which are secured by real property, the value of which tends to be more easily ascertainable, commercial business loans are of higher risk and typically are made on the basis of the borrower’s ability to make repayment from the cash flow of the borrower’s business. As a result, the availability of funds for the repayment of commercial business loans may depend substantially on the success of the business itself and the conditions in the general economy. Further, any losses incurred on a small number of commercial loans could have an adverse impact on our financial condition and results of operations due to the larger average size of commercial loans as compared with other loans and the risk that collateral securing such loans may depreciate over time, may be difficult to appraise, may fluctuate in value and may depend on the borrower’s ability to collect receivables. We have increased our focus on commercial business lending in recent years and intend to continue to focus on this type of lending in the future.

Previous wording

At December 31, 2024, $469.8 million, or 13.4%, of our loan portfolio was secured by one-to-four family real estate. One-to-four family residential mortgage lending is generally sensitive to regional and local economic conditions that significantly impact the ability of borrowers to meet their loan payment obligations, making loss levels difficult to predict. Declines in real estate values could cause some of our residential mortgages to be inadequately collateralized, which would expose us to a greater risk of loss if we seek to recover on defaulted loans by selling the real estate collateral.

Current wording

At December 31, 2025, $466.4 million, or 12.4%, of our loan portfolio was secured by one-to-four family real estate. One-to-four family residential mortgage lending is generally sensitive to regional and local economic conditions that significantly impact the ability of borrowers to meet their loan payment obligations, making loss levels difficult to predict. Declines in real estate values could cause some of our residential mortgages to be inadequately collateralized, which would expose us to a greater risk of loss if we seek to recover on defaulted loans by selling the real estate collateral.

Previous wording

As of December 31, 2024, $267.7 million of our residential mortgage loans were made through CCBX partners and are located in different regions across the U.S. A decline in residential real estate values across the U.S. would reduce the value of this residential real estate collateral. These home equity lines of credit are secured by residential real estate and are accessed by using a credit card.

Current wording

As of December 31, 2025, $264.1 million of our residential mortgage loans were made through CCBX partners and are located in different regions across the U.S. A decline in residential real estate values across the U.S. would reduce the value of this residential real estate collateral. These home equity lines of credit are secured by residential real estate and are accessed by using a credit card.

Previous wording

As of December 31, 2024, $202.1 million of our residential mortgage loans were made through the community bank, and 79.0% are secured by property in Washington State, and a significant majority of that is located in the Puget Sound region. A decline in residential real estate values as a result of a downturn in the Puget Sound housing market could reduce the value of the real estate collateral securing these types of loans. As of December 31, 2024, $137.1 million of our residential mortgage loans made through the community bank were made to investors. These loans may behave more like multi-family loans than individual 1-4 family loans that are occupied by their owners.

Current wording

Sound region. A decline in residential real estate values as a result of a downturn in the Puget Sound housing market could reduce the value of the real estate collateral securing these types of loans. As of December 31, 2025, $167.3 million of our residential mortgage loans made through the community bank were made to investors. These loans may behave more like multi-family loans than individual 1-4 family loans that are occupied by their owners.

Previous wording

At December 31, 2024, $148.2 million, or 4.2% of our total loans was construction, land and land development loans. We originate commercial construction loans primarily to professional builders for the construction of one-to-four family residences, apartment buildings, and commercial real estate properties. To a lesser degree, we also originate land acquisition loans for the purpose of facilitating the ultimate construction of a home or commercial building. Our construction loans present a greater level of risk than loans secured by improved, occupied real estate due to: (1) the increased difficulty at the time the loan is made of estimating the building costs and the selling price of the property to be built; (2) the increased difficulty and costs of monitoring the loan; (3) the higher degree of sensitivity to increases in market rates of interest; and (4) the increased difficulty of working out loan problems. In addition, construction costs may exceed original estimates as a result of increased materials, labor or other costs. Construction loans also often involve the disbursement of funds with repayment dependent, in part, on the success of the project and the ability of the borrower to sell or lease the property or refinance the indebtedness.

Current wording

At December 31, 2025, $222.1 million, or 5.9%, of our total loans was construction, land and land development loans. We originate commercial construction loans primarily to professional builders for the construction of one-to-four family residences, apartment buildings, and commercial real estate properties. To a lesser degree, we also originate land acquisition loans for the purpose of facilitating the ultimate construction of a home or commercial building. Our construction loans present a greater level of risk than loans secured by improved, occupied real estate due to: (1) the increased difficulty at the time the loan is made of estimating the building costs and the selling price of the property to be built; (2) the increased difficulty and costs of monitoring the loan; (3) the higher degree of sensitivity to increases in market rates of interest; and (4) the increased difficulty of working out loan problems. In addition, construction costs may exceed original estimates as a result of increased materials, labor or other costs. Construction loans also often involve the disbursement of funds with repayment dependent, in part, on the success of the project and the ability of the borrower to sell or lease the property or refinance the indebtedness.

Previous wording

We focus our business development and marketing strategy primarily on small to medium-sized businesses. Small to medium-sized businesses frequently have smaller market shares than larger firms, may be more vulnerable to economic downturns, often need substantial additional capital to expand or compete and may experience substantial volatility in operating results, any of which may impair a borrower’s ability to repay a loan. In addition, the success of a small and medium-sized business often depends on the management skills, talents and efforts of a small group of people, and the death, disability or resignation of one or more of these people could have an adverse effect on the business and its ability to repay its loan. If our borrowers are unable to repay their loans, our business, financial condition and earnings could be adversely affected.

Current wording

We focus our business development and marketing strategy primarily on small- to medium-sized businesses. Small- to medium-sized businesses frequently have smaller market shares than larger firms, may be more vulnerable to economic downturns, often need substantial additional capital to expand or compete and may experience substantial volatility in operating results, any of which may impair a borrower’s ability to repay a loan. In addition, the success of a small and medium-sized business often depends on the management skills, talents and efforts of a small group of people, and the death, disability or resignation of one or more of these people could have an adverse effect on the business and its ability to repay its loan. If our borrowers are unable to repay their loans, our business, financial condition and results of operations could be adversely affected.

Previous wording

At December 31, 2024, $1.60 billion, or 45.9% of our total loans were originated or purchased through CCBX partners. Our partners underwrite these loans in compliance with our credit standards and policies. Our CCBX partners service $1.49 billion of these loans. Our partners provide fraud and credit enhancements on many of our CCBX loans, but if they are unable to fulfill their contracted obligations then the Bank would be exposed to writing off all or a part of the credit enhancement asset and to additional credit losses as a result of this counterparty risk. We are subject to compliance and regulatory risk if partners do not follow our servicing policies, lending laws and regulations.

Current wording

At December 31, 2025, $1.81 billion, or 48.1%, of our total loans were originated or purchased through CCBX partners. Our partners underwrite these loans in compliance with our credit standards and policies. Our CCBX partners service $1.60 billion of these loans. Our partners provide fraud and credit enhancements on many of our CCBX loans, but if they are unable to fulfill their contracted obligations, the Bank could be exposed to writing off all or a portion of the related credit enhancement asset and to additional credit losses as a result of this counterparty risk. In certain partner arrangements, the partner is required to maintain reserve, escrow or similar funding mechanisms (including replenishment obligations) intended to support servicing duties, representations and warranties, fraud losses and other credit-related obligations. These reserve or funding positions may decline below required levels or become negative due to loss activity, timing differences or other factors, and partners may be required to replenish such amounts. If a partner is unable or unwilling to fund or replenish required amounts on a timely basis, we could be exposed to higher credit losses, incur additional servicing or operational costs, accelerate loss recognition or write off all or a portion of the related credit enhancement asset. We evaluate partner funding capacity and reserve adequacy on an ongoing basis as part of our risk management framework and may exercise contractual remedies, which may include adjusting reserve requirements, suspending originations or purchases, or transferring servicing responsibilities, if warranted. We are subject to compliance and regulatory risk if partners do not follow our servicing policies, lending laws and regulations.

Previous wording

Many of the agreements with our CCBX partners provide for a credit enhancement which helps protect the Bank by absorbing incurred losses. CCBX credit enhancements are free-standing and are accounted separately from the allowance for credit loss. In accordance with accounting guidance, we estimate and record a provision for probable losses for these CCBX loans, without regard to the credit enhancement. If a CCBX lending partner is unable to fulfill its contractual obligations with the Bank, then the Bank would be exposed to additional credit losses as a result of this counterparty risk and would have to absorb any credit losses associated with any CCBX partner that cannot fulfill its contractual obligations.

Current wording

Many of the agreements with our CCBX partners provide for a credit enhancement which helps protect the Bank by absorbing incurred losses. CCBX credit enhancements are free-standing and are accounted for separately from the allowance for credit losses. In accordance with accounting guidance, we estimate and record a provision for probable losses for these CCBX loans, without regard to the credit enhancement. If a CCBX lending partner is unable to fulfill its contractual obligations with the Bank, then the Bank would be exposed to additional credit losses as a result of this counterparty risk and would have to absorb any credit losses associated with any CCBX partner that cannot fulfill its contractual obligations.

Previous wording

As of December 31, 2024, the balance of owned SBA loans and SBA loans net of the sold portion was $22.8 million, which includes $2.3 million in PPP loans that are 100% guaranteed, and an additional $1.5 million in non-PPP SBA loans which are also guaranteed. As of December 31, 2024, the balance of SBA loans sold and serviced was $4.1 million, resulting in $104,000 in servicing income for the year ended December 31, 2024. Our SBA lending program is dependent upon the U.S. federal government. As an approved participant in the SBA Preferred Lender’s Program, referred to herein as an SBA Preferred Lender, we enable our clients to obtain SBA loans without being subject to the potentially lengthy SBA approval process necessary for lenders that are not SBA Preferred Lenders. The SBA periodically reviews the lending operations of participating lenders to assess, among other things, whether the lender exhibits prudent risk management. When weaknesses are identified, the SBA may request corrective actions or impose enforcement actions, including revocation of the lender’s SBA Preferred Lender status. If we lose our status as an SBA Preferred Lender, we may lose some or all of our customers to lenders who are SBA Preferred Lenders, and as a result we could experience an adverse effect to our financial results. Any changes to the SBA program, including but not limited to changes to the level of guarantee provided by the federal government on SBA loans, changes to program specific rules impacting volume eligibility under the guaranty program, as well as changes to the program amounts authorized by Congress or exhaustion of the available funding for SBA programs may also have an adverse effect on our business, financial condition and results of operation. In addition, any default by the U.S. Government on its obligations or any prolonged government shutdown could, among other things, impede our ability to originate SBA loans or sell such loans in the secondary market, which could adversely affect our business, financial condition and results of operations.

Current wording

As of December 31, 2025, the balance of owned SBA loans and SBA loans net of the sold portion was $5.2 million, which are guaranteed. As of December 31, 2025, the balance of SBA loans sold and serviced was $2.5 million, resulting in $17,000 in servicing income for the year ended December 31, 2025. Our SBA lending program is dependent upon the U.S. federal government. As an approved participant in the SBA Preferred Lender’s Program, referred to herein as an SBA Preferred Lender, we enable our clients to obtain SBA loans without being subject to the potentially lengthy SBA approval process necessary for lenders that are not SBA Preferred Lenders. The SBA periodically reviews the lending operations of participating lenders to assess, among other things, whether the lender exhibits prudent risk management. When weaknesses are identified, the SBA may request corrective actions or impose enforcement actions, including revocation of the lender’s SBA Preferred Lender status. If we lose our status as an SBA Preferred Lender, we may lose some or all of our customers to lenders who are SBA Preferred Lenders, and as a result we could experience an adverse effect to our financial results. Any changes to the SBA program, including but not limited to changes to the level of guarantee provided by the federal government on SBA loans, changes to program specific rules impacting volume eligibility under the guaranty program, as well as changes to the program amounts authorized by Congress or exhaustion of the available funding for SBA programs may also have an adverse effect on our business, financial condition and results of operation. In addition, any default by the U.S. Government on its obligations could, among other things, impede our ability to originate SBA loans or sell such loans in the secondary market, which could adversely affect our business, financial condition and results of operations.

Previous wording

Outside of the PPP, the SBA’s 7(a) Loan Program is the SBA’s primary program for helping start-up and existing small businesses, with financing guaranteed for a variety of general business purposes. Generally, we sell the guaranteed portion of our non-PPP SBA 7(a) loans in the secondary market. These sales result in premium income for us at the time of sale and create a stream of future servicing income, as we retain the servicing rights to these loans. For the reasons described above, we may not be able to continue originating these loans or sell them in the secondary market. Furthermore, even if we are able to continue to originate and sell SBA 7(a) loans in the secondary market, we might not continue to realize premiums upon the sale of the guaranteed portion of these loans or the premiums may decline due to economic and competitive factors. When we originate SBA loans, we incur credit risk on the non-guaranteed portion of the loans, and if a customer defaults on a loan, we share any loss and recovery related to the loan pro-rata with the SBA. If the SBA establishes that a loss on an SBA guaranteed loan is attributable to significant technical deficiencies in the manner in which the loan was originated, funded or serviced by us, the SBA may seek recovery of the principal loss related to the deficiency from us. Generally, we do not maintain reserves or loss allowances for such potential claims and any such claims could adversely affect our business, financial condition and results of operations.

Current wording

The SBA’s 7(a) Loan Program is the SBA’s primary program for helping start-up and existing small businesses, with financing guaranteed for a variety of general business purposes. Generally, we sell the guaranteed portion of our non-PPP SBA 7(a) loans in the secondary market. These sales result in premium income for us at the time of sale and create a stream of future servicing income, as we retain the servicing rights to these loans. For the reasons described above, we may not be able to continue originating these loans or sell them in the secondary market. Furthermore, even if we are able to continue to originate and sell SBA 7(a) loans in the secondary market, we might not continue to realize premiums upon the sale of the guaranteed portion of these loans or the premiums may decline due to economic and competitive factors. When we originate SBA loans, we incur credit risk on the non-guaranteed portion of the loans, and if a customer defaults on a loan, we share any loss and recovery related to the loan pro-rata with the SBA. If the SBA establishes that a loss on an SBA guaranteed loan is attributable to significant technical deficiencies in the manner in which the loan was originated, funded or serviced by us, the SBA may seek recovery of the principal loss related to the deficiency from us. Generally, we do not maintain reserves or loss allowances for such potential claims and any such claims could adversely affect our business, financial condition and results of operations.

Previous wording

Prolonged deteriorating economic conditions could significantly affect the markets in which we do business, the value of our loans and investment securities, and our ongoing operations, costs and profitability. Further, declines in real estate values and sales volumes and elevated unemployment levels may result in higher loan delinquencies, increases in our nonperforming and classified assets and a decline in demand for our products and services. These events may cause us to incur losses and may adversely affect our financial condition and earnings. Reduction in problem assets can be slow, and the process can be exacerbated by the condition of the properties securing nonperforming loans and the lengthy foreclosure process in Washington. To the extent that we must work through the resolution of assets, economic problems may cause us to incur losses and adversely affect our capital, business, financial condition, results of operations or cash flows and our access to liquidity.

Current wording

Prolonged deteriorating economic conditions could significantly affect the markets in which we do business, the value of our loans and investment securities, and our ongoing operations, costs and profitability. Further, declines in real estate values and sales volumes and elevated unemployment levels may result in higher loan delinquencies, increases in our nonperforming and classified assets and a decline in demand for our products and services. These events may cause us to incur losses and may adversely affect our financial condition and results of operations. Reduction in problem assets can be slow, and the process can be exacerbated by the condition of the properties securing nonperforming loans and the lengthy foreclosure process in Washington. To the extent that we must work through the resolution of assets, economic problems may cause us to incur losses and adversely affect our capital, business, financial condition, results of operations or cash flows and our access to liquidity.

Previous wording

In 2006, the federal banking regulators issued joint guidance entitled “Concentrations in Commercial Real Estate Lending, Sound Risk Management Practices” (“CRE Guidance”). Although the CRE Guidance did not establish specific lending limits, it provides that a bank’s commercial real estate lending exposure could receive increased supervisory scrutiny where total non-owner-occupied commercial real estate loans, including loans secured by apartment buildings, investor commercial real estate, and construction and land loans, represent 300% or more of an institution’s total risk-based capital, and the outstanding balance of the commercial real estate loan portfolio has increased by 50% or more during the preceding 36 months. Our total non-owner-occupied commercial real estate loans, including loans secured by apartment buildings, investor commercial real estate, and construction and land loans, totaled $1.1 billion and represented 184.2% and 269.2% of its capital, at December 31, 2024 and 2023, respectively. The outstanding balance of the Bank’s regulatory CRE portfolio has increased by 5.1%, 16.8%, and 30.9%, for the years ended December 31, 2024, 2023, and 2022 respectively.

Current wording

In 2006, the federal banking regulators issued joint guidance entitled “Concentrations in Commercial Real Estate Lending, Sound Risk Management Practices” (“CRE Guidance”). Although the CRE Guidance did not establish specific lending limits, it provides that a bank’s commercial real estate lending exposure could receive increased supervisory scrutiny where total non-owner-occupied commercial real estate loans, including loans secured by apartment buildings, investor commercial real estate, and construction and land loans, represent 300% or more of an institution’s total risk-based capital, and the outstanding balance of the commercial real estate loan portfolio has increased by 50% or more during the preceding 36 months. Our total non-owner-occupied commercial real estate loans, including loans secured by apartment buildings, investor commercial real estate, and construction and land loans, totaled $1.13 billion and represented 170.9% and 184.2% of its capital, at December 31, 2025 and 2024, respectively. The outstanding balance of the Bank’s regulatory CRE portfolio has decreased by 0.4%, and increased by 5.1%, and 16.8%, for the years ended December 31, 2025, 2024, and 2023 respectively.

Previous wording

In December 2015, the federal banking regulators released a new statement on prudent risk management for commercial real estate lending, referred to herein as the 2015 Statement. In the 2015 Statement, the federal banking regulators, among other things, indicate their intent to “continue to pay special attention” to commercial real estate lending activities and concentrations going forward. If the Federal Reserve, our primary federal regulator, were to impose restrictions on the amount of commercial real estate loans we can hold in our portfolio, for reasons noted above or otherwise, our earnings would be adversely affected.

Current wording

In December 2015, the federal banking regulators released a statement on prudent risk management for commercial real estate lending, referred to herein as the 2015 Statement. In the 2015 Statement, the federal banking regulators, among other things, indicate their intent to “continue to pay special attention” to commercial real estate lending activities and concentrations going forward. If the Federal Reserve, our primary federal regulator, were to impose restrictions on the amount of commercial real estate loans we can hold in our portfolio, for reasons noted above or otherwise, our earnings would be adversely affected.

Previous wording

A major catastrophe, such as an epidemic illness, earthquake, tsunami, flood, fire or other natural disaster or effects of climate change could result in a prolonged interruption of our business. For example, our headquarters are located in Everett, Washington and we serve the broader Puget Sound region, a geographical region that has been and may continue to be affected by earthquake, tsunami, wildfires and flooding activity. These activities may increase as the effects of climate change increase. Because we serve individuals and businesses in the Northwest, a natural disaster, epidemic illness, significant effect of climate change or other major catastrophe in the Northwest likely would have a greater impact on our business, financial condition and results of operation than if our business were more geographically diverse. The occurrence of any of these natural disasters. epidemic illnesses, effects of climate change or other major catastrophes could negatively impact our performance by disrupting our operations or the operations of our customers, which could adversely affect our business, financial condition, results of operations.

Current wording

A major catastrophe, such as an epidemic illness, earthquake, tsunami, flood, fire or other natural disaster or effects of climate change could result in a prolonged interruption of our business. For example, our headquarters are located in Everett, Washington and we serve the broader Puget Sound region, a geographical region that has been and may continue to be affected by earthquake, tsunami, wildfires and flooding activity. These activities may increase as the effects of climate change increase. Because we serve individuals and businesses in the Northwest, a natural disaster, epidemic illness, significant effect of climate change or other major catastrophe in the Northwest likely would have a greater impact on our business, financial condition and results of operation than if our business were more geographically diverse. The occurrence of any of these natural disasters, epidemic illnesses, effects of climate change or other major catastrophes could negatively impact our performance by disrupting our operations or the operations of our customers, which could adversely affect our business, financial condition and results of operations.

Previous wording

Deposit accounts acquired through these relationships totaled $2.06 billion, or 57.6% of total deposits at December 31, 2024. We provide oversight over these relationships, which must meet all internal and regulatory requirements. We may exit relationships where such requirements are not met or be required by our regulators to exit such relationships. Also, our CCBX partner(s) could terminate a relationship with us for many reasons, including being able to obtain better terms from another provider or dissatisfaction with the level or quality of our services. If a relationship were to be terminated, it could materially reduce our deposits, assets and income. We cannot assure you that we could replace such relationship. If we cannot replace such relationship, we may be required to seek higher rate funding sources as compared to the existing relationship and interest expense might increase. We may also be required to sell securities or other assets to meet funding needs which would reduce revenues or potentially generate losses.

Current wording

Deposit accounts acquired through these relationships totaled $2.56 billion, or 61.7% of total deposits at December 31, 2025. We provide oversight over these relationships, which must meet all internal and regulatory requirements. We may exit relationships where such requirements are not met or be required by our regulators to exit such relationships. Also, our CCBX partner(s) could terminate a relationship with us for many reasons, including being able to obtain better terms from another provider or dissatisfaction with the level or quality of our services. If a relationship were to be terminated, it could materially reduce our deposits, assets and income. We cannot assure you that we could replace such relationship. If we cannot replace such relationship, we may be required to seek higher rate funding sources as compared to the existing relationship and interest expense might increase. We may also be required to sell securities or other assets to meet funding needs which would reduce revenues or potentially generate losses.

Previous wording

Our strategy of partnering with broker dealers and digital financial service providers to offer BaaS has been adopted by other institutions with which we compete.

Current wording

Our strategy of partnering with digital financial service providers to offer BaaS has been adopted by a growing number of financial institutions with which we compete. Several technology-enabled banking platforms, as well as conventional banks with digital banking programs, have implemented BaaS strategies similar to ours. As a result, we face increased competition in attracting and retaining BaaS partners, and we expect competitive pressures in this area to continue.

Previous wording

We have entered into agreements with BaaS partners, which includes broker dealers and digital financial service providers, pursuant to which we will provide certain banking services for the BaaS partner customers, including serving as the issuing bank for debit cards issued to their customers and establishing one or more settlement accounts for the purpose of settling customer transactions in the cash management account program. The agreements have varying terms and may be terminated by the parties under certain circumstances. If our BaaS partners are not successful in achieving customer acceptance of their programs or terminate the agreement before the end of its term, our revenue under the agreement may be limited or may cease altogether. In addition, because we will provide banking services with respect to the cash features of our BaaS partner account programs, our bank regulators may hold us responsible for their activities with respect to the marketing or administration of their programs, which may result in increased compliance costs for us or potentially compliance violations as a result of BaaS partner activities. In recent years, a significant number of banks that provide BaaS have become subject to enforcement actions relating to their partners’ activities, indicating that banking regulators have made banks’ oversight over their BaaS partners a supervisory priority and that there is an increased risk that we could similarly become subject to additional regulatory scrutiny or enforcement. Additionally, financial weaknesses at our BaaS partners could cause us to record greater expenses or losses or suffer reputational harm.

Current wording

We have entered into agreements with BaaS partners, which includes digital financial service providers, pursuant to which we will provide certain banking services for the BaaS partner customers, including serving as the issuing bank for debit cards issued to their customers and establishing one or more settlement accounts for the purpose of settling customer transactions in the cash management account program. The agreements have varying terms and may be terminated by the parties under certain circumstances. If our BaaS partners are not successful in achieving customer acceptance of their programs or terminate the agreement before the end of its term, our revenue under the agreement may be limited or may cease altogether. In addition, because we will provide banking services with respect to the cash features of our BaaS partner account programs, our bank regulators may hold us responsible for their activities with respect to the marketing or administration of their programs, which may result in increased compliance costs for us or potentially compliance violations as a result of BaaS partner activities. In recent years, a significant number of banks that provide BaaS have become subject to enforcement actions relating to their partners’ activities, indicating that banking regulators have made banks’ oversight over their BaaS partners a supervisory priority and that there is an increased risk that we could similarly become subject to additional regulatory scrutiny or enforcement. Additionally, financial weaknesses at our BaaS partners could cause us to record greater expenses or losses or suffer reputational harm.

Previous wording

While we attempt to invest a significant majority of our total assets in loans (our loan-to-asset ratio was 85.1% as of December 31, 2024), we invest a percentage of our total assets (1.1% as of December 31, 2024) in investment securities with the primary objectives of providing a source of liquidity and meeting pledging requirements. As of December 31, 2024, the fair value of our available for sale investment securities portfolio was $35,000, which included a net unrealized loss of $2,000, and the fair value of our held to maturity investment securities was $46.7 million, which included a net unrealized loss of $581,000. Factors beyond our control can significantly and adversely influence the fair value of securities in our portfolio. For example, fixed-rate securities are generally subject to decreases in market value when interest rates rise. Additional factors include, but are not limited to, rating agency downgrades of the securities, defaults by the issuer or individual borrowers with respect to the underlying securities, and instability in the credit markets. Any of the foregoing factors could cause impairment in future periods and result in realized losses. The process for determining whether impairment exists usually requires difficult, subjective judgments about the future financial performance of the issuer and any collateral underlying the security in order to assess the probability of receiving all contractual principal and interest payments on the security. Although we have not recognized an impairment related to our investment portfolio as of December 31, 2024, changing economic and market conditions affecting interest rates, the financial condition of issuers of the securities and the performance of the underlying collateral, among other factors, may cause us to recognize losses in future periods, which could have an adverse effect on our business, financial condition and results of operations.

Current wording

While we attempt to invest a significant majority of our total assets in loans (our loan-to-asset ratio was 80.6% as of December 31, 2025), we invest a percentage of our total assets (1.0% as of December 31, 2025) in investment securities with the primary objectives of providing a source of liquidity and meeting pledging requirements. As of December 31, 2025, the fair value of our available for sale investment securities portfolio was $29,000, which included a net unrealized loss of $1,000, and the fair value of our held to maturity investment securities was $48.7 million, which included a net unrealized loss of $496,000. Factors beyond our control can significantly and adversely influence the fair value of securities in our portfolio. For example, fixed-rate securities are generally subject to decreases in market value when interest rates rise. Additional factors include, but are not limited to, rating agency downgrades of the securities, defaults by the issuer or individual borrowers with respect to the underlying securities, and instability in the credit markets. Any of the foregoing factors could cause impairment in future periods and result in realized losses. The process for determining whether impairment exists usually requires difficult, subjective judgments about the future financial performance of the issuer and any collateral underlying the security in order to assess the probability of receiving all contractual principal and interest payments on the security. Although we have not recognized an impairment related to our investment portfolio as of December 31, 2025, changing economic and market conditions affecting interest rates, the financial condition of issuers of the securities and the performance of the underlying collateral, among other factors, may cause us to recognize losses in future periods, which could have an adverse effect on our business, financial condition and results of operations.

Previous wording

•We are subject to laws regarding privacy, information security and protection of personal information and any violation of these laws or incidents involving personal, confidential or proprietary information of individuals, including, among others, system failures or cybersecurity breaches of our network security, could damage our reputation and otherwise adversely affect our business, financial condition and results of operation.

Current wording

We are subject to laws regarding the privacy, information security and protection of personal information and any violation of these laws or another incident involving personal, confidential or proprietary information of individuals could damage our reputation and otherwise adversely affect our business, financial condition and results of operations.

Previous wording

While we have implemented a vendor management program with the third-party service providers, to help ensure third party relationships are effectively managed by providing risk-focused controls and processes that are designed to monitor our vendors’ compliance with relevant laws, regulations, and industry standards, we may not be able to ensure that all of our clients, suppliers, counterparties, broker dealers and financial providers in CCBX, and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. If personal, confidential or proprietary information of customers or others were to be mishandled or misused (in situations where, for example, such information was erroneously provided to parties who are not permitted to have the information, or where such information was intercepted or otherwise compromised by third parties), we could be exposed to litigation or regulatory sanctions under personal information laws and regulations. Concerns regarding the effectiveness of our measures to safeguard personal information, or even the perception that such measures are inadequate, could cause us to lose customers or potential customers for our products and services and thereby reduce our revenues. Accordingly, any failure or perceived failure to comply with applicable privacy or data protection laws and regulations may subject us to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices or in significant liabilities, fines or penalties, and could damage our reputation and otherwise adversely affect our business, financial condition and earnings.

Current wording

While we have implemented a vendor management program with the third-party service providers, to help ensure third party relationships are effectively managed by providing risk-focused controls and processes that are designed to monitor our vendors’ compliance with relevant laws, regulations, and industry standards, we may not be able to ensure that all of our clients, suppliers, counterparties and financial providers in CCBX, and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with us, particularly where such information is transmitted by electronic means. If personal, confidential or proprietary information of customers or others were to be mishandled or misused (in situations where, for example, such information was erroneously provided to parties who are not permitted to have the information, or where such information was intercepted or otherwise compromised by third parties), we could be exposed to litigation or regulatory sanctions under personal information laws and regulations. Concerns regarding the effectiveness of our measures to safeguard personal information, or even the perception that such measures are inadequate, could cause us to lose customers or potential customers for our products and services and thereby reduce our revenues. Accordingly, any failure or perceived failure to comply with applicable privacy or data protection laws and regulations may subject us to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices or in significant liabilities, fines or penalties, and could damage our reputation and otherwise adversely affect our business, financial condition and results of operations.

Previous wording

In the ordinary course of our business, we collect and store sensitive data, including our proprietary business information and that of our customers, suppliers and business partners, as well as personally identifiable information about our customers and employees. The processing that takes place with our strategic partners could potentially have an adverse impact on us in the event of a security breach of their systems. The secure processing, maintenance and transmission of this information is critical to our operations and business strategy. We, our customers, and other financial institutions with which we interact, are subject to increasingly frequent, continuous attempts, including ransomware and malware attacks, to penetrate key systems by individual hackers, organized criminals, and in some cases, state-sponsored organizations. Our systems and our third-party service providers’ systems have been, and will likely continue to be, subject to advanced computer viruses or other malicious codes, ransomware, unauthorized access attempts, denial of service attacks, phishing, social engineering, hacking and other cyber-attacks.

Current wording

In the ordinary course of our business, we collect and store sensitive data, including our proprietary business information and that of our customers, suppliers and business partners, as well as personally identifiable information about our customers and employees. The processing that takes place with our strategic partners could potentially have an adverse impact on us in the event of a security breach of their systems. The secure processing, maintenance and transmission of this information is critical to our operations and business strategy. We, our customers, and other financial institutions with which we interact, are subject to increasingly frequent and continuous attempts, including ransomware and malware attacks, to penetrate key systems by individual hackers, organized criminals, and in some cases, state-sponsored organizations, all of which are heightened as a result of advances in AI. Our systems and our third-party service providers’ systems have been, and will likely continue to be, subject to advanced computer viruses or other malicious codes, ransomware, unauthorized access attempts, denial of service attacks, phishing, social engineering, hacking and other cyberattacks.

Previous wording

We have an Information Security Program that includes internal/external penetration testing, regular vulnerability assessments, detailed vulnerability management, data loss prevention controls, file access and integrity monitoring and reporting and threat intelligence. While we have established policies and procedures to prevent or limit the impact of cyber-attacks, there can be no assurance that such events will not occur or will be adequately addressed if they do. In addition, we also outsource certain cybersecurity functions, such as penetration testing, to third-party service providers, and the failure of these service providers to adequately perform such functions could increase our exposure to security breaches and cybersecurity threats. Despite our security measures, our information technology and infrastructure may be vulnerable to attacks by hackers or breached due to employee error, malfeasance or other malicious code and cyber-attacks that could have an impact on information security. Any such breach or attacks could compromise our networks and the information stored there could be accessed, publicly disclosed, lost or stolen. Any such unauthorized access, disclosure or other loss of information could result in legal claims or proceedings, liability under laws that protect the privacy of personal information, and regulatory penalties; disrupt our operations and the services we provide to customers; damage our reputation; and cause a loss of confidence in our products and services, all of which could adversely affect our business, financial condition and results of operations. Further, to the extent that the activities of our third-party service providers or the activities of our customers involve the storage and transmission of confidential information, security breaches and viruses could expose us to claims, regulatory scrutiny, litigation costs and other possible liabilities. For further information, see the section titled “Cybersecurity” in Part I, Item 1C of this Annual Report on Form 10-K.

Current wording

We have an Information Security Program that includes internal/external penetration testing, regular vulnerability assessments, detailed vulnerability management, data loss prevention controls, file access and integrity monitoring and reporting and threat intelligence. While we have established policies and procedures to prevent or limit the impact of cyberattacks, there can be no assurance that such events will not occur or will be adequately addressed if they do. In addition, we also outsource certain cybersecurity functions, such as penetration testing, to third-party service providers, and the failure of these service providers to adequately perform such functions could increase our exposure to security breaches and cybersecurity threats. Despite our security measures, our information technology and infrastructure may be vulnerable to attacks by hackers or breached due to employee error, malfeasance or other malicious code and cyberattacks that could have an impact on information security. Any such breach or attacks could compromise our networks and the information stored there could be accessed, publicly disclosed, lost or stolen. Any such unauthorized access, disclosure or other loss of information could result in legal claims or proceedings, liability under laws that protect the privacy of personal information, and regulatory penalties; disrupt our operations and the services we provide to customers; damage our reputation; and cause a loss of confidence in our products and services, all of which could adversely affect our business, financial condition and results of operations. Further, to the extent that the activities of our third-party service providers or the activities of our customers involve the storage and transmission of confidential information, security breaches and viruses could expose us to claims, regulatory scrutiny, litigation costs and other possible liabilities. For further information, see the section titled “Cybersecurity” in Part I, Item 1C of this Annual Report on Form 10-K.

Previous wording

Regulation of the financial services industry is intense, and we may be adversely affected by changes in laws and regulations, including as a result of the new administration.

Current wording

Regulation of the financial services industry is intense, and we may be adversely affected by changes in laws and regulations, including as a result of the current administration.

Previous wording

Compliance with applicable laws and regulations can be difficult and costly, and changes to laws and regulations can impose additional compliance costs. The Dodd-Frank Act, which imposed significant regulatory and compliance changes on financial institutions, is an example of this type of federal law. Any future legislative changes, including as a result of the new administration, could have a material impact on our profitability, the value of assets held for investment or the value of collateral for loans. Future legislative changes could also require changes to business practices and potentially expose us to additional costs, liabilities, enforcement action and reputational risk.

Current wording

Compliance with applicable laws and regulations can be difficult and costly, and changes to laws and regulations can impose additional compliance costs. The Dodd-Frank Act, which imposed significant regulatory and compliance changes on financial institutions, is an example of this type of federal law. Any future legislative changes, including as a result of the current administration, could have a material impact on our profitability, the value of assets held for investment or the value of collateral for loans. Future legislative changes could also require changes to business practices and potentially expose us to additional costs, liabilities, enforcement action and reputational risk.

Previous wording

The CRA requires the Federal Reserve to assess the Bank’s performance in meeting the credit needs of the communities it serves, including low- and moderate-income neighborhoods, and if the Bank performs unsatisfactorily, various adverse regulatory consequences may ensue, including an inability to secure regulatory approval of expansionary transactions or new branches. Additionally, on October 24, 2023, the FDIC, the Federal Reserve and the OCC released a final rule revising the framework that they use to evaluate banks’ records of community reinvestment under the CRA that may make it more challenging and/or costly for insured depository institutions to achieve an “Outstanding” or “Satisfactory” CRA rating, which could negatively impact our ability to obtain regulatory approval for an acquisition.

Current wording

The CRA requires the Federal Reserve to assess the Bank’s performance in meeting the credit needs of the communities it serves, including low- and moderate-income neighborhoods, and if the Bank performs unsatisfactorily, various adverse regulatory consequences may ensue, including an inability to secure regulatory approval of expansionary transactions or new branches.

Previous wording

Our management is responsible for establishing and maintaining adequate internal control over financial reporting, evaluating the effectiveness of our internal controls and disclosing any changes or material weaknesses identified through such evaluation. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis.

Current wording

Our management is responsible for establishing and maintaining adequate internal control over financial reporting and disclosure controls and procedures, evaluating their effectiveness, and disclosing any material weaknesses identified. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements would not be prevented or detected on a timely basis.