BayFirst Financial Corp.

Evaluation of Disclosure Controls and Procedures

An evaluation of the Company’s disclosure controls and procedures (as defined in Rules 13(a)-15(e) and 15(d)-15(e) of the Exchange Act), was carried out under the supervision and with the participation of the Company’s Chief Executive Officer and Chief Financial Officer as of December 31, 2025, the last day of the period covered by this Annual Report. The Company’s Chief Executive Officer and Chief Financial Officer concluded that the disclosure controls and procedures were effective as of December 31, 2025, in ensuring that the information required to be disclosed in the reports the Company files or submits under the Exchange Act is (i) accumulated and communicated to management (including the Company’s Chief Executive Officer and Chief Financial Officer) as appropriate to allow timely decisions regarding required disclosures, and (ii) recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms.

Management’s Report on Internal Control Over Financial Reporting

Management is responsible for establishing and maintaining adequate internal control over financial reporting, as defined in Rules 13a‑15(f) and 15d‑15(f) under the Exchange Act. The Company’s internal control system is designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with GAAP. No matter how well designed, internal control over financial reporting has inherent limitations, including the possibility that a control can be circumvented or overridden, and misstatements due to error or fraud may occur and not be detected. Therefore, even those systems determined to be effective can provide only reasonable assurance with respect to financial statement preparation and presentation.

Management (with the participation of the Company’s CEO and CFO) conducted an evaluation of the effectiveness of the Company’s internal control over financial reporting based on the framework in Internal Control — Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Based on this evaluation, management concluded that the Company’s internal control over financial reporting was effective as of December 31, 2025.

Changes in Internal Control Over Financial Reporting

There have not been any changes in the Company’s internal control over financial reporting (as such term is defined in Rule 13a-15(f) under the Exchange Act) during the fiscal period to which this report relates that have materially affected, or are reasonably likely to materially affect, the Company’s internal control over financial reporting.