DigitalOcean Holdings Inc

Evaluation of Disclosure Controls and Procedures

We maintain “disclosure controls and procedures,” as defined in Rule 13a-15(e) and Rule 15d-15(e) under the Exchange Act that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to our management, including our Chief Executive Officer and our Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

Our management, with the participation of our Chief Executive Officer and our Chief Financial Officer, evaluated the effectiveness of our disclosure controls and procedures as of September 30, 2024. Based on that evaluation, our Chief Executive Officer and our Chief Financial Officer, concluded that, as of September 30, 2024, our disclosure controls and procedures were not effective due to the material weakness in our internal control over financial reporting described below.

Material Weakness in Internal Control over Financial Reporting

As previously disclosed, we identified a material weakness in our internal control over financial reporting that continued to exist as of September 30, 2024. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis. We did not design and maintain effective controls over the accounting for income taxes. Specifically, we did not have the appropriate skills and level of experience to assess complicated tax matters. Additionally, we did not properly identify, risk assess, design and maintain effective controls related to the income tax provision, including controls related to the evaluation of tax deductions and the impact on our tax provision. This material weakness resulted in immaterial errors to the income tax expense, deferred taxes, accrued tax liabilities and income tax disclosures which were adjusted in the Company's revised consolidated financial statements for the year ended December 31, 2022. The material weakness also resulted in material errors to the income tax expense, deferred taxes and accrued tax liabilities which were adjusted in the Company's restated condensed consolidated financial statements for the three months ended March 31, 2023. This material weakness could result in a misstatement of the aforementioned account balances or disclosures that would result in a material misstatement to the annual or interim financial statements that would not be prevented or detected.

Remediation Plan with Respect to Material Weakness

As of September 30, 2024, all remediation efforts planned to address the material weakness have been designed and implemented by management. The controls and procedures we have implemented are subject to ongoing testing to measure their effectiveness over a sustained period of financial reporting cycles. The remediation measures we have taken include:

a. In March 2023, we hired a VP of Tax with over 25 years of tax leadership experience.

b. In the second quarter of 2023, we supplemented our tax resources through the use of a third-party tax advisor and we continue utilizing the third-party tax advisor.

c. In the first and second quarters of 2024, we augmented our team with additional tax personnel who have the appropriate knowledge, training and experience to analyze, record and disclose tax accounting matters timely and accurately, and to design and maintain appropriate accounting policies, procedures and controls over income taxes, commensurate with our financial reporting requirements.

d. Since the beginning of 2024, we have trained process owners on and evaluated our newly implemented controls to address the identification, accounting, reporting and review of complex tax transactions and concluded the controls were designed effectively.

We have executed our remediation plan for the material weakness and continue to report the status of the remediation plan to the Audit Committee on a regular basis.

We have made substantial progress remediating the material weakness, and we believe our remediation plan will be sufficient to remediate the identified material weakness. However, the completion of these remediation measures requires evaluation of effectiveness of internal control over a sustained period of financial reporting prior to reaching a determination that the material weakness has been fully remediated. As we continue to validate and test our internal control over financial reporting, we may determine that additional actions to be taken for the implementation of the remediation plan are necessary or appropriate.

Changes in Internal Control Over Financial Reporting

There was no change in our internal control over financial reporting identified in connection with the evaluation required by Rule 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the quarter ended September 30, 2024 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitations on Effectiveness of Controls

Our management does not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, have been detected. These inherent limitations include the realities that judgments in decision making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by management override of the controls. The design of any system of controls also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.

PART II - OTHER INFORMATION