Sanara MedTech Inc.

We recognize the critical importance of cybersecurity in safeguarding sensitive information and maintaining operational resilience. We have processes for assessing, identifying and managing cybersecurity risks, which are built into our information technology function and are designed to help protect our information assets and operations from internal and external cyber threats, protect employee and customer information from unauthorized access or attack, as well as secure our networks and systems.

The audit committee of the Board of Directors (the “Audit Committee”) is responsible for overseeing cybersecurity risk and periodically updates our Board of Directors on such matters. The Audit Committee receives quarterly updates from management regarding cybersecurity matters and is notified between such updates regarding any significant new cybersecurity threats or incidents.

As a company, we leverage the National Institute of Standards and Technology Cybersecurity Framework to align with industry best practices and to inform our policies and procedures, which include a Cybersecurity Response Plan focusing on detection, validation, mitigation, recovery and refinement. In addition to the Cybersecurity Response Plan, we provide cybersecurity awareness training to our employees, including training on social engineering, phishing, password protection, confidential data protection, mobile security and incident reporting, to help prevent and reduce the impact of potential cybersecurity events.

We have strategically invested resources and tools to combat the evolving cyber threat landscape. These investments include growing our internal technology team headcount and bolstering our partnerships with entities with external expertise, resulting in increased protection, monitoring and response capabilities. We have also made investments to carry cybersecurity insurance that provides additional protection and resources to reduce a cybersecurity event’s impact and potential losses.

Our technology and management teams meet regularly with key internal and external stakeholders to review cybersecurity concerns and areas for continued focus and improvement.

We face risks from cybersecurity threats that could have a material adverse effect on our business, financial condition, results of operations, cash flows or reputation. To date, we havenot experienced any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect our business strategy, financial condition, results of operations or cash flows. See “Item 1A. Risk Factors – Risks Related to Our Business – Security breaches and other disruptions could compromise our information and expose us to liability, which would cause our business and reputation to suffer.”