Xponential Fitness, Inc.

Evaluation of Disclosure Controls and Procedures

Our management carried out an evaluation, under the supervision and with the participation of our Chief Executive Officer and Chief Financial Officer (our principal executive officer and principal financial officer, respectively), of the effectiveness of our disclosure controls and procedures as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act of 1934, as amended, as of September 30, 2026.

An effective internal control system, no matter how well designed, has inherent limitations, including the possibility of human error or overriding of controls, and therefore can provide only reasonable assurance with respect to reliable financial reporting. Because of its inherent limitations, our internal control over financial reporting may not prevent or detect all misstatements, including the possibility of human error, the circumvention or overriding of controls, or fraud.

Based upon this evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that as of September 30, 2026, as a result of the material weakness in our internal control over financial reporting discussed in the Company’s Annual Report on Form 10-K for the year ended December 31, 2025, our disclosure controls and procedures were not effective.

Management has concluded that, notwithstanding the material weaknesses described below, the Company’s condensed consolidated financial statements included in this Quarterly Report on Form 10-Q fairly present, in all material respects, our financial position, results of operations and cash flows as of the date, and for the periods presented, in conformity with U.S. GAAP.

Changes in Internal Control over Financial Reporting

Except as described in “Management’s Plan for Remediation Status Update” below, there have been no changes in our internal control over financial reporting during the quarter ended September 30, 2026 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Management's Plan for Remediation Status Update

As previously disclosed in Item 9 of our Annual Report on Form 10-K for the year ended December 31, 2025, management identified a material weakness associated with the sufficiency of resources. Specifically, the material weakness relates to our ability to enforce accountability and the assignment of roles and responsibilities across Company personnel. The Company did not maintain a sufficient complement of accounting, financial reporting, and technology personnel, and the lack of sufficient resources contributed to our failure to (i) consistently operate certain of our internal controls, and (ii) establish and maintain information technology general controls, including designing controls pertaining to system development lifecycle, change management, user access rights, and maintaining appropriate segregation of duties over systems that are critical to the Company’s internal control over financial reporting.

As of September 30, 2026, we have made progress against the remediation plan that we previously disclosed under Part II, Item 9A. Controls and Procedures in the Company’s Annual Report on Form 10-K for the year ended December 31, 2025. While we believe that our remediation plan, once fully implemented, is sufficient to remediate the material weaknesses, such a conclusion cannot be reached until applicable controls have been designed, implemented and have operated for a sufficient period of time and management has concluded, through testing, that these controls are operating effectively. As of September 30, 2026, this evaluation of remediation activities remains ongoing.