TSS, Inc.

(a) Management’s Annual Report on Internal Control over Financial Reporting

We maintain disclosure controls and procedures designed to provide reasonable assurance that information required to be disclosed in reports filed or submitted under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the Securities and Exchange Commission’s rules and forms and accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosures.

Due to its inherent limitations, any system of internal control over financial reporting, no matter how well defined, may not prevent or detect misstatements. In addition, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Our management, with the participation of our Chief Executive Officer and our Chief Financial Officer, conducted an evaluation, as of the end of the year covered by this report, of the effectiveness of our disclosure controls and procedures, as such term is defined in Exchange Act Rule 13a-15(e). Based on this evaluation, our Chief Executive Officer and our Chief Financial Officer have concluded that, as of December 31, 2024, our disclosure controls and procedures, as defined in Rule 13a-15(e), were ineffective at the reasonable assurance level.

Material Weakness

During the audit of the Annual Report on Form 10-K for the year ended December 31, 2024, we identified a material weakness in our controls relating to the ineffective design of certain management review controls across a portion of the Company’s financial statements, leading to adjustments that were and could have been material to our 2024 consolidated financial statements. Due to the fact that our internal controls over financial reporting did not identify, prevent or detect these risks of material misstatements, we determined this indicates a material weakness in our internal controls over financial reporting. We believe the root causes of the control deficiencies are primarily a number of manual processes in our closing process, combined with challenges in properly segregating duties due to the relatively small size of our accounting department and additional controls needed.

To formally remediate controls, companies must not only update or put into place controls such that they are designed and operate effectively, but such effective operation must be evaluated and verified over a period of time before we determine the control deficiencies that led to the material weakness have formally been remediated. In order to remediate the control deficiencies leading to the material weakness, we have already made certain improvements to our internal controls beginning in the first fiscal quarter of 2025, plan to make further enhancements, have enhanced management review of certain areas, and have determined to engage external experts to assist the company in more formally designing and documenting our controls. We have also committed to more fully documenting the performance of the controls themselves so that they not only operate effectively but so that there is sufficient audit evidence that may be reviewed, so that others may verify the effective operation of the controls.

We are committed to maintaining a strong internal control environment and implementing measures designed to help ensure that control deficiencies contributing to the material weaknesses are remediated as soon as possible.

Notwithstanding the material weakness described above, management has concluded that the consolidated financial statements included in this Annual Report on Form 10-K for the year ended December 31 2024 present fairly, in all material respects, our financial position, results of operations and cash flows in conformity with GAAP.

This Annual Report does not include an attestation report of our independent registered public accounting firm regarding internal control over financial reporting because TSS, Inc. is not an accelerated filer or a large accelerated filer, and it is not subject to the attestation requirement covering internal controls over financial reporting.

(b) Changes in Internal Control over Financial Reporting

There was no change in our internal control over financial reporting (as defined in Rule 13a-15(f) under the Exchange Act) that occurred during the quarter ended December 31, 2024, that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting. As described above, we have made certain improvements and plan further improvements to our internal controls over financial reporting in periods after the period covered by this annual report on Form 10-K, but those controls have not yet been fully implemented or evaluated to determine that they have effectively remediated the material weakness identified above.