DigitalOcean Holdings Inc

Evaluation of Disclosure Controls and Procedures

We maintain “disclosure controls and procedures,” as defined in Rule 13a-15(e) and Rule 15d-15(e) under the Exchange Act that are designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to our management, including our Chief Executive Officer and our Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

Our management, with the participation of our Chief Executive Officer and our Chief Financial Officer, evaluated the effectiveness of our disclosure controls and procedures as of December 31, 2024. Based on this evaluation of our disclosure controls and procedures, our Chief Executive Officer and Chief Financial Officer have concluded that, as of December 31, 2024, our disclosure controls and procedures were effective at the reasonable assurance level.

Management’s Report on Internal Control over Financial Reporting

Our management is responsible for establishing and maintaining adequate “internal control over financial reporting,” as defined in Rule 13a-15(f) and Rule 15d-15(f) under the Exchange Act. Our management conducted an evaluation of the effectiveness of our internal control over financial reporting as of December 31, 2024 based on the criteria established in Internal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission.

Based on the results of its evaluation, management concluded that our internal control over financial reporting was effective as of December 31, 2024. The effectiveness of our internal control over financial reporting as of December 31, 2024 has been audited by PricewaterhouseCoopers LLP, an independent registered public accounting firm, as stated in their report which is included in Part II, Item 8. “Financial Statements and Supplementary Data” of this Annual Report on Form 10-K.

Remediation of Previously Reported Material Weakness

As previously disclosed, we had identified a material weakness in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis. We did not design and maintain effective controls over the accounting for income taxes. Specifically, we did not have the appropriate skills and level of experience to assess complicated tax matters. Additionally, we did not properly identify, risk assess, design and maintain effective controls related to the income tax provision, including controls related to the evaluation of tax deductions and the impact on our tax provision.

Management designed and implemented controls to remediate the material weakness, which included the following remediation measures:

a. In March 2023, we hired a VP of Tax with over 25 years of tax leadership experience.

b. In the second quarter of 2023, we supplemented our tax resources through the use of a third-party tax advisor and we continue utilizing the third-party tax advisor.

c. In the first and second quarters of 2024, we augmented our team with additional tax personnel who have the appropriate knowledge, training and experience to analyze, record and disclose tax accounting matters timely and accurately, and to design and maintain appropriate accounting policies, procedures and controls over income taxes, commensurate with our financial reporting requirements.

d. Since the beginning of 2024, we have trained process owners on and evaluated our newly implemented controls to address the identification, accounting, reporting and review of complex tax transactions.

As of December 31, 2024, we have completed implementation and testing of the design and operating effectiveness of the controls described above, and they have now operated effectively over a sustained period of financial reporting cycles. Accordingly, management has concluded that the actions taken to strengthen our internal control over financial reporting have fully remediated the previously identified material weaknesses as of December 31, 2024.

Changes in Internal Control Over Financial Reporting

There was no change in our internal control over financial reporting identified in connection with the evaluation required by Rule 13a-15(d) and 15d-15(d) of the Exchange Act that occurred during the quarter ended December 31, 2024 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitations on Effectiveness of Controls

Our management does not expect that our disclosure controls and procedures or our internal control over financial reporting will prevent all errors and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, have been detected. These inherent limitations include the realities that judgments in decision making can be faulty, and that breakdowns can occur because of a simple error or mistake. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people or by management override of the controls. The design of any system of controls also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions; over time, controls may become inadequate because of changes in conditions, or the degree of compliance with policies or procedures may deteriorate. Because of the inherent limitations in a cost-effective control system, misstatements due to error or fraud may occur and not be detected.