Better Choice Co Inc

Evaluation of Disclosure Controls and Procedures

Under the supervision and with the participation of management, including our Chief Executive Officer (our Principal Executive Officer or “PEO”) and our Chief Financial Officer (our Principal Financial Officer or “PFO”), we evaluated the effectiveness of our disclosure controls and procedures as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act as of the end of the period covered by this Quarterly Report on Form 10-Q. The term “disclosure controls and procedures,” as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act, means controls and other procedures of a company that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to the company’s management, including its principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosure.

Management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives and management necessarily applies its judgment in evaluating the cost-benefit relationship of possible controls and procedures. Based on this evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that, because of the material weaknesses in our internal control over financial reporting described in our Annual Report on Form 10-K for the year ended December 31, 2023, our disclosure controls and procedures were not effective as of June 30, 2024.

Notwithstanding the material weaknesses in our internal control over financial reporting, we have concluded that the condensed consolidated financial statements included in this Form 10-Q, when read with the notes thereto, present fairly, in all material respects, our financial position, results of operations and cash flows for the periods presented in conformity with accounting principles generally accepted in the United States of America.

Material Weaknesses

We previously reported three material weaknesses in the design and operation of our internal control over financial reporting that were identified in connection with the audit of our fiscal year 2023 consolidated financial statements. A “material weakness” is defined under SEC rules as a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of the Company’s annual or interim financial statements will not be prevented or detected on a timely basis by the Company’s internal controls. The material weaknesses relate to (i) failure to maintain controls over the operating effectiveness of cybersecurity and IT general controls; (ii) insufficient policies and procedures to review, analyze, account for and disclose complex transactions; (iii) failure to design and maintain controls over the operating effectiveness of revenue recognition controls.

Remediation of Prior Year Material Weaknesses

Cybersecurity and IT General Controls

To remediate the material weakness associated with failure to maintain controls over the operating effectiveness of cybersecurity and IT general controls, we have (i) fully transitioned to a new managed IT service provider with an appropriate level of knowledge and technical experience to design and maintain cybersecurity and IT general controls; (ii) established policies and procedures for the design and operation of IT generals controls and manual controls to prevent cybersecurity breaches, such as multi-factor authentication implemented and enforced, anti-virus and anti-malware software suites installed, a cybersecurity training platform for all employees through the industry leading KnowBe4 platform, and the dual approval of vendor payments and wiring instructions; (iii) sustained operation of our controls over a period that is appropriate in order to conclude that the controls are operating effectively.

Remediation Plan

Accounting for Complex Transactions

To address the material weakness in internal controls related to the accounting for complex accounting transactions, we have (i) added resources responsible for the execution and oversight of accounting and financial reporting operations; (ii) expanded the use of specialist involvement in highly complex and technical areas of accounting and valuation; and (iii) designed and implemented enhancements to internal control over financial reporting including those related to business combinations. We will continue ongoing remediation efforts related to enhancing our internal controls to include specific activities to assess the accounting for significant complex transactions.

Revenue Recognition

To address the material weakness in internal controls related to the revenue recognition, we continue to evaluate the design and operating effectiveness controls supporting revenue recognition and are in the process of enhancing certain controls over revenue, including adding resources and training programs addressing the design, implementation, and documentary evidence requirement of control procedures over revenue recognition for appropriate personnel.

Although we implemented measures and plan to implement additional measures to remedy our internal control deficiencies, there can be no assurance that our efforts will be successful. In addition, until the remediation steps have been completed and operated for a sufficient period of time, and subsequent evaluation of their effectiveness is completed, the material weaknesses identified and described above will continue to exist.

Changes in Internal Control Over Financial Reporting

We completed one acquisition for an aggregate purchase price of $0.4 million during the six months ended June 30, 2024. The Company continues to evaluate the internal control environment of the acquired entity and have not yet concluded on the integration and effectiveness of internal controls. Our assessment is ongoing to ensure that all controls are appropriately aligned and integrated with our existing framework. The acquisition represents less than 1% of our consolidated total assets and has no revenues as of and for the six months ended June 30, 2024, respectively.

Our remediation efforts were ongoing during the quarter ended June 30, 2024. Except for our ongoing remediation efforts of the material weaknesses described above, and the successful remediation of our material weakness related to cybersecurity and IT general controls, there were no changes in our internal control over financial reporting that occurred during the quarter-ended June 30, 2024 that materially affected, or that are reasonably likely to materially affect, our internal control over financial reporting.