Marqeta Inc

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and our Chief Financial Officer, have evaluated the effectiveness of our disclosure controls and procedures as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act as of the end of the period covered by this Quarterly Report on Form 10-Q. Disclosure controls and procedures are designed to provide reasonable assurance that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by a company in the reports that it files or submits under the Exchange Act is accumulated and communicated to the company’s management, including its principal executive and principal financial officers, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.

Based on such evaluation, our management has concluded our disclosure controls and procedures were not effective at a reasonable assurance level as of March 31, 2024, due to the material weaknesses in internal control over financial reporting described below.

Material Weaknesses

A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the Company’s annual or interim financial statements will not be prevented or detected on a timely basis.

In the period ended March 31, 2023, management identified a material weakness related to the accounting for our acquisition of Power Finance (the “Business Combination Material Weakness”), including a lack of sufficient precision in the performance of reviews supporting the purchase price allocation accounting, and a lack of timely oversight over third-party specialists and the reports they produced to support the accounting for the Power Finance acquisition. The material weakness resulted in an error related to the allocation of merger consideration between purchase consideration and post-combination expense that was not detected on a timely basis. The error was corrected by management in the Condensed Consolidated Financial Statements as of and for the three months ended March 31, 2023.

For the period ended December 31, 2023, management identified a material weakness related to information technology general controls (“ITGCs”) (the “ITGC Material Weakness” and together with the Business Combination Material Weakness, the “2023 Material Weaknesses”) in user access over certain information technology (“IT”) systems that support the Company’s revenue and related financial reporting processes. As a result, the related process-level IT dependent manual controls, certain change management controls, and automated application controls for certain key IT systems were also deemed ineffective for the period ended March 31, 2024.

The 2023 Material Weaknesses did not result in any material misstatements in our previously issued financial statements, nor in the financial statements included in this Quarterly Report on Form 10-Q.

Management’s Plan to Remediate the Material Weaknesses

Our management is committed to maintaining a strong internal control environment. As it relates to the Business Combination Material Weakness, we have and will continue to take actions to enhance the design of our business combination controls with the level of precision required to operate them in an effective manner. We will continue to enhance our management review control activities, including the review of inputs, assumptions and reports produced by third-party specialists supporting the purchase price allocation accounting and the application of technical accounting principles.

To remediate the ITGC Material Weakness, we are enhancing the design of our ITGCs over the IT systems that support the Company’s revenue and related financial reporting processes, including, (i) developing and implementing additional training and awareness addressing ITGCs and policies, including educating control owners concerning the principles and requirements of each control, with a focus on user access; (ii) increasing the extent of oversight and verification checks included in operation of user access controls and processes; (iii) deploying additional tools to support administration of user access; and (iv) enhancing quarterly management reporting on the remediation measures to the audit committee of the board of directors. Although we intend to complete the remediation process as promptly as possible, we will not be able to fully remediate the ITGC Material Weakness until these steps have been completed and the controls are operating effectively.

Changes in Internal Control Over Financial Reporting

There have been no changes in the Company’s internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during the first quarter of fiscal 2024 that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting. We are continuing the remediation efforts described above.

Limitations on Effectiveness of Controls and Procedures

The effectiveness of any internal control over financial reporting is subject to inherent limitations, including the exercise of judgment in designing, implementing, operating, and evaluating the controls and procedures, and the inability to eliminate misconduct completely. Accordingly, any system of internal control over financial reporting, no matter how well designed and operated, can only provide reasonable, not absolute assurance that its objectives will be met. In addition, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate. We intend to continue to monitor and upgrade our internal controls as necessary or appropriate for our business, but cannot assure you that such improvements will be sufficient to provide us with effective internal control over financial reporting.