PATRIOT NATIONAL BANCORP INC

Disclosure Controls and Procedures

Patriot maintains disclosure controls and procedures that are designed to provide reasonable assurance that information that is required to be disclosed in reports filed or submitted under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission’s rules and forms and accumulated and communicated to management in a timely fashion.

Patriot’s management, with the participation of its Chief Executive Officer and its Chief Financial Officer, conducted an evaluation, as of the end of the period covered by this report, of the effectiveness of its disclosure controls and procedures, as such term is defined in Exchange Act Rule 13a-15(e). Based on this evaluation, Patriot’s Chief Executive Officer and Chief Financial Officer have concluded that, as of the end of the period covered by this report, Patriot’s disclosure controls and procedures, as defined in Rule 13a-15(e), were effective at the reasonable assurance level.

Management’s Annual Report on Internal Control Over Financial Reporting

Patriot’s management is responsible for establishing and maintaining adequate internal controls over financial reporting, as defined in rules 13a-15(f) and 15d-15f under the Exchange Act. Patriot’s internal control over financial reporting is a process designed under the supervision of its Chief Executive Officer and Chief Financial Officer to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with U.S. GAAP.

Patriot’s internal control over financial reporting includes those policies and procedures that pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and deployment of its assets; provide reasonable assurance that transactions are recorded in a timely manner to enable the preparation of financial statements in accordance with U.S. GAAP; receipts and disbursements are made only in compliance with the authorizations established by management and policies instituted by its Board of Directors; and provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of assets that could have a material effect on the financial statements.

Due to its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Therefore, even those systems determined to be effective can provide only reasonable assurance with respect to financial statement preparation and presentation. In addition, projections of any evaluations of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies and/or procedures may deteriorate.

Management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2024 based on criteria established in Internal Control-Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Based on management’s assessment, management concluded that, as of December 31, 2024, the Company’s internal control over financial reporting was effective.

In accordance with the rules and regulations of the SEC, management’s report on the design and effectiveness of Patriot’s system of internal controls over financial reporting is not subject to attestation by Patriot’s independent registered public accounting firm. The SEC rules and regulations applicable to Patriot only require a report by management. Accordingly, this annual report on Form 10-K for the year ended December 31, 2024 does not include an opinion by Patriot’s independent registered public accounting firm regarding management’s system of internal controls over financial reporting.

Changes in Internal Control Over Financial Reporting

There was no change in the Company’s internal control over financial reporting during the fourth fiscal quarter of 2024 that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting.