PATRIOT NATIONAL BANCORP INC

Evaluation of Disclosure Controls and Procedures

As of March 31, 2026, the Company carried out an evaluation, under the supervision and with the participation of its Chief Executive Officer and Chief Financial Officer, of the effectiveness of the Company’s disclosure controls and procedures, as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934. Based on that evaluation, the Company’s Chief Executive Officer and Chief Financial Officer concluded that the Company’s disclosure controls and procedures were not effective as of March 31, 2026 because of the material weakness in internal control over financial reporting previously disclosed in the Company’s Annual Report on Form 10-K for the year ended December 31, 2025.

Internal Control Remediation Activities

As previously disclosed in the Company’s Annual Report on Form 10-K for the year ended December 31, 2025, management concluded that a material weakness existed in the Company’s internal control over financial reporting related to deficiencies in documentation, evidential support, and consistent execution of controls, including information technology general controls, financial close and reconciliation controls, and controls over certain third party and digital payments activities.

During the quarter ended March 31, 2026, management continued to implement remediation measures designed to address the material weakness, including formalizing additional documentation protocols, enhancing evidence retention and monitoring, refining financial close and reconciliation review procedures, continuing implementation of information technology general control enhancements, and further clarifying control responsibilities and oversight. Many of these remediation measures remain in process, and the Company will not consider the material weakness remediated until the applicable remediated controls have operated effectively for a sufficient period of time and management has completed testing sufficient to conclude that the material weakness has been remediated.

Changes in Internal Control Over Financial Reporting

During the quarter ended March 31, 2026, the Company continued to implement remediation measures related to the previously disclosed material weakness, including enhancements to documentation, evidencing, monitoring, financial close and reconciliation procedures, information technology general controls, and controls over certain third party and digital payments activities. Other than such remediation measures, there were no changes in the Company’s internal control over financial reporting during the quarter ended March 31, 2026 that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.