Upland Software, Inc.

Evaluation of Disclosure Controls and Procedures

The term “disclosure controls and procedures,” as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act refers to controls and procedures that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that such information is accumulated and communicated to a company’s management, including its principal executive and principal financial officers, as appropriate to allow timely decisions regarding required disclosure.

Our management, including our Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of our disclosure controls and procedures as of June 30, 2025, the end of the period covered by this Quarterly Report on Form 10-Q. Based upon such evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that our disclosure controls and procedures were effective as of such date. Our management has concluded that the condensed consolidated financial statements included in this report fairly present, in all material respects, our financial condition, results of operations and cash flows for the periods presented in conformity with GAAP.

Changes in Internal Control over Financial Reporting

There were no changes to our internal control over financial reporting (as defined in Rules 13a- 15(f) and 15d- 15(f) of the Exchange Act) during the quarter ended June 30, 2025 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitations on Effectiveness of Controls

Internal control over financial reporting cannot provide absolute assurance of achieving financial reporting objectives because of its inherent limitations. Internal control over financial reporting is a process that involves human diligence and compliance and is subject to lapses in judgment and breakdowns resulting from human failures. Internal control over financial reporting can also be circumvented by collusion or improper management override. Because of such limitations, there is a risk that material misstatements may not be prevented or detected on a timely basis by internal control over financial reporting. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate. However, these inherent limitations are known features of the financial reporting process. Therefore, it is possible to design into the process safeguards to reduce, though not eliminate, the risk.