Braze, Inc.

Evaluation of Disclosure Controls and Procedures

We maintain “disclosure controls and procedures” (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended, or the Exchange Act), that are designed to provide reasonable assurance that information required to be disclosed by us in the reports that we file or submit under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms.

Disclosure controls and procedures include, without limitation, controls and procedures designed to provide reasonable assurance that information required to be disclosed by us in the reports that we file or submit under the Exchange Act is accumulated and communicated to our management, including our Chief Executive Officer and Chief Financial Officer, as appropriate, to allow for timely decisions regarding required disclosure.

Our management, with the participation of our Chief Executive Officer and our Chief Financial Officer, evaluated the effectiveness of our disclosure controls and procedures as of July 31, 2025, the end of the period covered by this Quarterly Report on Form 10-Q. Our Chief Executive Officer and Chief Financial Officer concluded that our disclosure controls and procedures were not effective as of July 31, 2025.

Material Weakness

We identified a material weakness in internal control related to ineffective information technology general controls, or ITGCs, in the areas of user access and program change management over the information technology systems that support our financial reporting processes. Automated and manual controls that rely on system-generated data or reports from the affected information technology environment or process level automated controls in the affected information technology environment were ineffective because they could have been adversely impacted.

Remediation Plan

We have developed a detailed plan for remediation of the material weakness, as well as compliance with Section 404 of the Sarbanes-Oxley Act, including:

•Enhancing controls and procedures over user access and program change management;

•Strengthening our systems and IT compliance functions through targeted hiring, staff training and implementation of new IT policies; and

•Engaging an external advisor to assist with control documentation, gap analysis and remediation monitoring.

While we have performed certain remediation activities to strengthen our controls to address the identified material weakness, control weaknesses are not considered remediated until new internal controls have been operational for a period of time, are tested, and management concludes that these controls are operating effectively.

We will continue to monitor the effectiveness of our remediation measures in connection with our future assessments of the effectiveness of internal control over financial reporting and disclosure controls and procedures, and we will make any changes to the design of our plan and take such other actions that we deem appropriate given the circumstances. We expect to complete the remediation process by the end of the fourth quarter of our fiscal year ending January 31, 2026.

Changes in Internal Control Over Financial Reporting

Other than the remediation efforts noted above, there was no change in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) that occurred during the period covered by this Quarterly Report on Form 10-Q that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitations on Effectiveness of Controls

Our management, including our Chief Executive Officer and Chief Financial Officer, does not expect that our disclosure controls and procedures or our internal controls will prevent all error and all fraud. A control system, no matter how well conceived and operated, can provide only reasonable, and not absolute, assurance that the objectives of the control system are met. Further, the design of a control system must reflect the fact that there are resource constraints, and the benefits of controls must be considered relative to their costs. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that all control issues and instances of fraud, if any, within our company have been detected.