KEYCORP /NEW/

Evaluation of Disclosure Controls and Procedures

As of the end of the period covered by this report, KeyCorp carried out an evaluation, under the supervision and with the participation of KeyCorp’s management, including our Chief Executive Officer and Chief Financial Officer, of the effectiveness of the design and operation of KeyCorp’s disclosure controls and procedures (as defined in Rule 13a-15(e) under the Securities Exchange Act of 1934 (the “Exchange Act”)), to ensure that information required to be disclosed by KeyCorp in reports that it files or submits under the Exchange Act, is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to KeyCorp’s management, including its Chief Executive Officer and Chief Financial Officer, as appropriate, to allow for timely decisions regarding required disclosure. Based upon that evaluation, KeyCorp’s Chief Executive Officer and Chief Financial Officer concluded that the design and operation of these disclosure controls and procedures were effective, in all material respects, as of the end of the period covered by this report. No changes were made to KeyCorp’s internal control over financial reporting (as defined in Rule 13a-15(f) under the Exchange Act) during the quarter ended December 31, 2025, that materially affected, or are reasonably likely to materially affect, KeyCorp’s internal control over financial reporting.

Reports Regarding Internal Controls

Management’s Annual Report on Internal Control over Financial Reporting, the Report of Independent Registered Public Accounting Firm on Internal Control over Financial Reporting, and the Report of Independent Registered Public Accounting Firm are included in Item 8 on pages 98,99, and 100, respectively.