X4 Pharmaceuticals, Inc

Evaluation of Disclosure Controls and Procedures

We maintain disclosure controls and procedures that are designed to ensure that information required to be disclosed in the reports that we file or submit under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms and accumulated and communicated to our management, including our principal executive officer and principal financial officer, to allow timely decisions regarding required disclosure.

Our management, with the participation of our principal executive officer and principal financial officer, evaluated the effectiveness of our disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)) as of December 31, 2025, and have concluded that, based on such evaluation, our disclosure controls and procedures were effective as of December 31, 2025 at the reasonable assurance level. Our management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives, and management necessarily applies its judgment in evaluating the cost-benefit relationship of possible controls and procedures.

Management’s Annual Report on Internal Control over Financial Reporting.

Our management is responsible for establishing and maintaining adequate internal control over financial reporting, as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. Our management, including our Chief Executive Officer and Chief Financial Officer, conducted an evaluation of the effectiveness of our internal control over financial reporting based on the criteria set forth in Internal Control-Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on its evaluation under the criteria set forth in Internal Control-Integrated Framework, our management concluded that our internal control over financial reporting was effective as of December 31, 2025.

Changes in Internal Control Over Financial Reporting

There were no changes in our internal control over financial reporting that occurred during the three months ended December 31, 2025 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.