Where Food Comes From, Inc.

Evaluation of Disclosure Controls and Procedures

Our Chief Executive Officer and Chief Financial Officer, evaluated the effectiveness of the Company’s “disclosure controls and procedures” pursuant to Rule 13a-15 under the Securities Exchange Act of 1934, as amended (the “Exchange Act”). In designing and evaluating the disclosure controls and procedures, our management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures must reflect the fact that there are resource constraints and that our management is required to apply its judgment in evaluating the benefits of possible controls and procedures relative to their costs. Based on this evaluation, our Chief Executive Officer and our Chief Financial Officer concluded that, as of December 31, 2025, our disclosure controls and procedures were effective.

Attestation Report of the Registered Public Accounting Firm

This annual report does not include an attestation report of the Company’s independent registered public accounting firm regarding internal control over financial reporting. Management’s report was not subject to attestation by the Company’s independent registered public accounting firm pursuant to rules of the SEC that permit the Company to provide only management’s report in this annual report.

Internal Control over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rule 13a-15(f) of the Exchange Act. Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements and can only provide reasonable assurance with respect to financial statement preparation. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

There have not been any changes in the Company’s internal control over financial reporting (as such term is defined in Rule 13a-15(f) under the Exchange Act) during the most recent fiscal quarter that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.

Management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2025. In making this assessment, management used the criteria set forth by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”) in Internal Control-Integrated Framework (2013). Based on this assessment, management has concluded that the Company’s internal control over financial reporting was effective as of December 31, 2025.