BuzzFeed, Inc.

Evaluation of Disclosure Controls and Procedures

Disclosure controls and procedures are designed to ensure that information required to be disclosed by us in our reports under the Securities Exchange Act of 1934, as amended ( the “Exchange Act”), is recorded, processed, summarized, and reported within the time periods specified in the rules and forms of the U.S. Securities and Exchange Commission, and that such information is accumulated and communicated to our management, including our principal executive officer and principal financial officer or persons performing similar functions, as appropriate, to allow timely decisions regarding required disclosure.

In connection with the audit of our consolidated financial statements as of, and for the years ended, December 31, 2024, 2023, and 2022, we identified material weaknesses in our internal control over financial reporting, which remain unremediated. A material weakness is a deficiency, or a combination of deficiencies, in internal control over financial reporting such that there is a reasonable possibility that a material misstatement of our annual or interim financial statements will not be prevented or detected on a timely basis. The material weaknesses identified in our internal control over financial reporting related to: (i) a lack of formalized internal controls and segregation of duties surrounding our financial statement close process, and (ii) a lack of formalized information technology (“IT”) general controls in the area of change management and logical security controls over financial IT systems. The remediation of these deficiencies has required, and will continue to require, a significant amount of time and resources from management and other personnel.

(i) A Lack of Formalized Internal Controls and Segregation of Duties Surrounding our Financial Statement Close Process:

During 2023 and 2024, and continuing into 2025, with the oversight of the audit committee of our board of directors, we continued to execute remediation plans and enhanced controls within the financial statement close process, including documentation improvements for certain higher risk and material balance sheet reconciliation schedules and supporting financial calculations and analyses.

Our management will continue to implement remediation plans to define control procedures, enhance documentation, and enforce segregation of duties to ensure controls are adequately designed and operate sufficiently including, but not limited to: enhancing certain higher risk balance sheet reconciliation schedules, including the completeness and accuracy of information used in controls and the related review procedures; enhancing review procedures with respect to financial results and supporting financial calculations; designing processes and controls to adequately segregate job responsibilities; redesigning workflow approval routing and security permissions; and reducing reliance on manual controls.

(ii) A Lack of Formalized Information Technology General Controls in the Area of Change Management and Logical Security Controls Over Financial Information Technology Systems:

During 2023 and 2024, and continuing into 2025, our management began implementing remediation plans to address certain control deficiencies around system development and change management and IT security, including formalizing the processes and controls around security administration and implementing user access reviews for certain key financial systems. Management hired resources with technical expertise and will continue to centralize security administration for several financial applications and further enhance logical access controls for the remaining applications.

Our management will continue to implement processes and controls to further support and provide appropriate oversight over key financial systems, and intends to continue to implement remediation plans, including, but not limited to: centralizing the change management function; implementing policies and procedures with respect to change management and system development; documenting test procedures and approvals relating to changes made to production; maintaining separate development, test, and production environments; and formalizing controls around security administration.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting (as such term is defined in Rules 13a-15(f) and 15d-15(f) of the Exchange Act) during the quarter ended June 30, 2025 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.