Heartflow, Inc.

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and our Chief Financial Officer,

have evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules

13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended) as of the end of the

period covered by this Quarterly Report on Form 10-Q. Based on that evaluation, our Chief Executive

Officer and our Chief Financial Officer have concluded that, as of September 30, 2025, our disclosure

controls and procedures were effective at the reasonable assurance level.

Changes in Internal Control over Financial Reporting

Due to a transition period established by SEC rules applicable to newly public companies, our

management is not required to evaluate the effectiveness of our internal control over financial reporting

until the filing of our Annual Report on Form 10-K for the year ended December 31, 2026. As a result, this

Quarterly Report on Form 10-Q does not address whether there have been any changes in our internal

control over financial reporting.

Limitations on Effectiveness of Controls and Procedures

In designing and evaluating the disclosure controls and procedures, our management recognizes that any

controls and procedures, no matter how well designed and operated, can provide only reasonable

assurance of achieving the desired control objectives. In addition, the design of disclosure controls and

procedures must reflect the fact that there are resource constraints and that our management is required

to apply judgment in evaluating the benefits of possible controls and procedures relative to their costs.