FB Financial Corp

Evaluation of Disclosure Controls and Procedures

An evaluation of the Company’s disclosure controls and procedures (as defined in Rule 13a-15(e) under the Exchange Act as of December 31, 2025 was carried out under the supervision and with the participation of the Company’s Chief Executive Officer, Chief Financial Officer and other members of the Company’s senior management. The Company’s Chief Executive Officer and Chief Financial Officer concluded that, as of December 31, 2025, the Company’s disclosure controls and procedures were effective for ensuring that information the Company is required to disclose in reports that it files or submits under the Act, as amended, is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms and that such information is accumulated and communicated to the Company’s senior management, including its Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure.

Annual Reports on Internal Control over Financial Reporting

The report of the Company’s management on the Company’s internal control over financial reporting is included under subheading“Report on Management’s Assessment of Internal Control over Financial Reporting” within Item 8, “Financial Statements and Supplementary Data.” The report of the Company’s independent registered public accounting firm on the Company’s internal control over financial reporting is included under subheading“Report of Independent Registered Public Accounting Firm” within Item 8, “Financial Statements and Supplementary Data,” within this Annual Report.

Changes in Internal Controls

There were no changes in our internal control over financial reporting that occurred during the year ended December 31, 2025 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Limitations on the Effectiveness of Controls

The Company’s management recognizes that a control system, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues, errors and instances of fraud, if any, within the Company have been detected.