SailPoint, Inc.

Evaluation of Disclosure Controls and Procedures

Our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) are designed to ensure that information required to be disclosed in the reports that we file or submit under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the rules and forms of the SEC and to ensure that information required to be disclosed is accumulated and communicated to management, including our principal executive officer (“PEO”) and principal financial officer (“PFO”), to allow timely decisions regarding disclosure. Our management, with the participation of our PEO and PFO, has evaluated the effectiveness of our disclosure controls and procedures as of January 31, 2026 and, based on such evaluation, our PEO and PFO have concluded that our disclosure controls and procedures were effective as of such date.

Management’s Report on Internal Control over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting (as defined in Rule 13a-15(f) under the Exchange Act). Management conducted an assessment of the effectiveness of our internal control over financial reporting based on the criteria set forth in Internal Control-Integrated Framework issued by the Committee of Sponsoring Organizations of the Treadway Commission (2013 framework). Based on the assessment, management has concluded that its internal control over financial reporting was effective as of January 31, 2026 to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements in accordance with U.S. GAAP. Our independent registered public accounting firm, Ernst & Young LLP, has issued an audit report with respect to our internal control over financial reporting, which appears in Part II, Item 8 of this Annual Report on Form 10-K.

Changes in Internal Control over Financial Reporting

There were no changes in the Company’s internal control over financial reporting as defined in Exchange Act Rule 13a-15(d) and 15d-15(d) during the quarter ended January 31, 2026 that materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.