T Stamp Inc

Evaluation of Disclosure Controls and Procedures

We are required to maintain disclosure controls and procedures that are designed to ensure that information required to be disclosed in our Exchange Act reports is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to management, including the Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure. Management necessarily applied judgment in assessing the costs and benefits of such controls and procedures, which, by their nature, can provide only reasonable assurance regarding our control objectives.

As of September 30, 2025, we carried out an evaluation, under the supervision and with the participation of management, including the Chief Executive Officer along with the Chief Financial Officer, of the effectiveness, design and operation of our disclosure controls and procedures (as defined in Exchange Act Rules 13a-15(e) and 15d-15(e)). Based on that evaluation, our Chief Executive Officer and Chief Financial Officer concluded that, as of that date, the Company’s disclosure controls and procedures were not effective due to the material weaknesses described below. This determination is based on the previously reported material weakness management previously identified in our internal control over financial reporting, as described below. We are in the process of remediating the material weakness in our internal control, as described below. We believe the completion of these processes should remedy our disclosure controls and procedures. We will continue to monitor this issue.

Notwithstanding the identified material weaknesses, management has concluded that the unaudited condensed consolidated financial statements present fairly, in all material respects, the Company’s financial position, results of operations, and cash flows as of the dates, and for the periods presented, in accordance with generally accepted accounting principles in the United States of America (“GAAP”).

Previously Reported Material Weakness in Internal Control Over Financial Reporting

In our Annual Report for the year ended December 31, 2024, filed with the SEC on March 31, 2025, we identified a material weakness in our internal control over financial reporting. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. We have determined that we did not design and maintain effective internal controls, including proper design and implementation of controls over management’s review of the Company’s accounting for and recording of complex equity transactions. Therefore, management has concluded that: (1) the above control deficiency constitutes a material weakness; and (2) in turn, the Company did not maintain effective internal control over financial reporting as of December 31, 2024.

Management’s Plan to Remediate the Previously Reported Material Weakness

Management has evaluated the material weakness described above and has updated its design and implementation of internal control over financial reporting to remediate the aforementioned material weakness and enhance the Company’s internal control environment. It is management's belief that these added controls will effectively remediate the previous existing material weakness. However, the implemented and enhanced controls have not operated for a sufficient period of time and additional testing will be required during 2025 to ensure that the internal control environment is operating as designed before we can conclude the material weakness has been remediated. We are committed to continuing to improve our internal control processes and will continue to diligently and vigorously review our financial reporting controls and procedures.

Management’s Report on Internal Controls Over Financial Reporting

As a publicly traded company, we are required to comply with the SEC’s rules implementing Section 302 and 404 of the Sarbanes-Oxley Act, which require management to certify financial and other information in our quarterly and annual reports and provide an annual management report on the effectiveness of controls over financial reporting.

Our management is responsible for establishing and maintaining an adequate system of internal control over financial reporting, as defined in the Exchange Act Rule 13a-15(f). Management conducted an assessment of our internal control over financial reporting based on the framework established in 2013 by the Committee of Sponsoring Organizations of the Treadway Commission in Internal Control-Integrated Framework.

Management identified a material weaknesses in internal control related to proper design and implementation of controls over management’s review of the Company’s accounting for and recording of complex equity transactions in our Quarterly Report for the nine months ended September 30, 2024, filed with the SEC on November 15, 2024. The implemented and enhanced controls for remediation have not operated for a sufficient period of time to demonstrate that the material weakness was remediated as of the date of this report. As a result, management concluded that the Company has not maintained effective internal controls over financial reporting as of September 30, 2025.

Change in Internal Control over Financial Reporting

While we continue to implement design enhancements to our internal control procedures, we believe that, other than the changes described above regarding the ongoing remediation efforts, there was no change in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) that occurred during the nine months ended September 30, 2025 that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.