Bank First Corp (BFC) Business

ITEM 1. BUSINESS

General Overview

Bank First Corporation is a Wisconsin corporation that was organized in April 1982 to serve as the holding company for Bank First, N.A., a national banking association founded in 1894. The Bank is a wholly-owned subsidiary of the Company. The Company and the Bank are headquartered in Manitowoc, Wisconsin, and the Bank is a member of the Board of Governors of the Federal Reserve System (the “Federal Reserve”) and regulated by the Office of the Comptroller of the Currency (the “OCC”). The Bank has thirty-eight (38) offices, including its headquarters, in Brown, Columbia, Dane, Door, Fond du Lac, Green, Jefferson, Manitowoc, Monroe, Outagamie, Ozaukee, Rock, Shawano, Sheboygan, Walworth, Waupaca, Waushara, and Winnebago counties in the State of Wisconsin and Winnebago county in the State of Illinois. We serve businesses, professionals and consumers with a wide variety of financial services, including retail and commercial banking. Some of the products that we offer include checking accounts, savings accounts, money market accounts, cash management accounts, certificates of deposit, commercial and industrial loans, commercial real estate loans, construction and development loans, residential mortgages, consumer loans, credit cards, online banking, telephone banking and mobile banking.

The Bank has three subsidiaries: Bank First Investments, Inc., TVG Holdings, Inc. (“TVG”) and BFC Title, LLC. Bank First Investments, Inc. is a Wisconsin corporation organized in 2011, and is wholly-owned by the Bank. Bank First Investments, Inc.’s purpose is to provide investment and safekeeping services to the Bank. TVG is a Wisconsin corporation organized in 2009. It is a wholly-owned subsidiary of the Bank, and its purpose is to hold the Bank’s 40% ownership interest in Ansay & Associates, LLC (“Ansay”). Ansay is one of the nation’s largest independent insurance providers, and the Bank’s minority ownership of Ansay allows the Bank to provide diversified services to our customers without the risk and expense of an in-house insurance department. BFC Title, LLC is a Wisconsin limited liability company organized in 2020. It is a wholly-owned subsidiary of the Bank, and its purpose is to hold the Bank’s 5.88% ownership interest in Generations Title, LLC, a Wisconsin title company.

As of December 31, 2025, we had total consolidated assets of $4.51 billion, total loans of $3.60 billion, total deposits of $3.70 billion and total stockholders’ equity of $643.8 million. The Bank employed approximately 380 full-time equivalent employees (“FTE”), and had an average assets-to-FTE ratio of approximately $11.9 million for the year ended December 31, 2025. For more information, see the Bank’s website at www.bankfirst.com.

Strategic Plan

The Bank is a relationship-based community bank focused on providing innovative solutions that are value driven to the communities we serve. The Bank’s culture celebrates curiosity, creativity, and responsiveness, while embracing individual differences and upholding the highest ethical standards. Employees are supported and encouraged to develop their careers. They are empowered with the tools to be successful and are held accountable for the results they deliver to our customers and shareholders. We maintain a strong credit culture as a foundation of sound asset quality. The Bank’s vision is to sustain its independence by remaining a top-performing provider of financial services. The Bank focuses on creating value for its customers and shareholders by forging strong relationships and offering personalized solutions.

7

Table of Contents

Our strategic plan is organized around the CAMELS ratings, including Capital, Asset Quality, Management, Earnings, Liquidity, and Sensitivity to Market Risk. We have also added a sixth category to prioritize our strategic goals surrounding Information Technology. Our strategic priorities related to Capital focus on deploying capital in the best interest of our shareholders. Our Asset Quality priorities include maintaining strong credit administration, managing concentration exposure in our loan portfolio, and continuing to automate manual processes across the Bank. Our strategic goals related to Management are focused on improving processes and procedures to make it easier for frontline employees to serve our customers. To continue growing Earnings, we will emphasize strengthening existing customer relationships and building new ones, as well as continuing to selectively seek acquisition opportunities. The completion of the Centre 1 Bancorp, Inc. (“Centre”) acquisition on January 1, 2026, reflects our continued execution of this strategy and further strengthens our market presence and relationship-based banking model. Closely related to Earnings, we will maintain our strong Liquidity ratios by focusing on growing our customer base, one relationship at a time. Our priorities related to Sensitivity to Market Risk continue to be minimizing optionality and maintaining interest rate neutrality. Finally, our Information Technology strategic initiatives include continually enhancing our cybersecurity environment and enhancing training for customers and employees, transforming our data into more accessible, actionable formats, and providing a world-class digital banking experience for our customers.

Market Area

Bank First is a full-service community bank, offering business and retail products and services in communities throughout Wisconsin and Illinois. Our branches are located in Brown, Columbia, Dane, Door, Fond du Lac, Green, Jefferson, Manitowoc, Monroe, Outagamie, Ozaukee, Rock, Shawano, Sheboygan, Walworth, Waupaca, Waushara, and Winnebago counties in Wisconsin and Winnebago county in Illinois. Our main office is located at 402 N. 8th Street, Manitowoc, Wisconsin. Based on the deposit market share reports published by the FDIC on June 30, 2025, Bank First ranked in the top 3 of market share in 7 of the nineteen counties in which its branches are located.

The nineteen counties in which the Bank has offices have an estimated aggregate population of 2,560,274, based on current U.S. Census data, and total deposits of approximately $81 billion as of June 30, 2025, according to the most recent data published by the FDIC.

Competition

The banking business is highly competitive, and we face competition in our market areas from many other local, regional, and national financial institutions. Competition among financial institutions is based on interest rates offered on deposit accounts, interest rates charged on loans, other credit and service charges relating to loans, the quality and scope of the services rendered, the convenience of banking facilities, and, in the case of loans to commercial borrowers, relative lending limits. We compete with commercial banks, credit unions, savings institutions, mortgage banking firms, consumer finance companies, securities brokerage firms, insurance companies, money market funds and other mutual funds, fintech companies, as well as regional and national financial institutions that operate offices in our market areas and elsewhere. The competing major commercial banks have greater resources that may provide them a competitive advantage by enabling them to maintain numerous branch offices, mount extensive advertising campaigns and invest in new technologies. In addition, competition from nontraditional banking institutions, often known as fintech and non-bank lenders, continues to increase and accelerate, with consumers and businesses having the opportunity to select from a growing variety of traditional and nontraditional alternatives. The ability of such non-banking financial institutions to provide services previously limited to commercial banks has intensified competition. Because non-banking financial institutions are not subject to many of the same regulatory restrictions as banks and bank holding companies, they can often operate with greater flexibility and lower cost structures. These competitors have been successful in developing products that are in direct competition with or are alternatives to the banking services offered by traditional banking institutions. In addition, fintech and other non-bank competitors may offer financial services through embedded or platform-based models that integrate payments, lending or financial management tools directly into non-financial applications, which may further intensify competition for certain customers. The increasingly competitive environment is the result of changes in regulation, changes in technology and product delivery systems, additional financial service providers, and the accelerating pace of consolidation among financial services providers.

8

Table of Contents

The financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. Banks, securities firms and insurance companies can merge under the umbrella of a financial holding company, which can offer virtually any type of financial service, including banking, securities underwriting, insurance (both agency and underwriting) and merchant banking. Also, technology has lowered barriers to entry and made it possible for non-banks to offer products and services traditionally provided by banks, such as automatic transfer and automatic payment systems.

Some of our non-banking competitors have fewer regulatory constraints and may have lower cost structures. In addition, some of our competitors have assets, capital and lending limits greater than that of the Bank, have greater access to capital markets and offer a broader range of products and services than the Bank. These institutions may have the ability to finance wide-ranging advertising campaigns and may also be able to offer lower rates on loans and higher rates on deposits than we can offer. Some of these institutions offer services, such as international banking, which we do not directly offer, except for a limited suite of services such as international wires and currency exchange.

We compete with these institutions by focusing on our position as an independent, community bank and rely upon local promotional activities, personal relationships established by our officers, directors, and employees with our customers, and specialized services tailored to meet the needs of the communities served.  We provide innovative products to our customers that are value-driven. We actively cultivate relationships with our customers that extend beyond a single loan to a full suite of products that serve the needs of our retail and commercial customers. Our goal is to develop long-standing connections with our customers and the communities that we serve. While our position varies by market, our management believes that it can compete effectively as a result of local market knowledge, local decision making, and awareness of customer needs.

Our Business

General

We emphasize a range of lending services, including commercial and residential real estate loans, construction and development loans, commercial and industrial loans, and consumer loans. Our customers are generally individuals, small to medium-sized businesses and professional firms that are located in or conduct a substantial portion of their business in our market areas. At December 31, 2025, we had total loans receivable of $3.60 billion, representing approximately 80.1% of our total assets. As of December 31, 2025, we had 55 nonaccrual loans totaling approximately $5.8 million, or 0.2% of total loans. For additional discussion related to nonperforming loans, see the “Management’s Discussion and Analysis of Financial Condition and Results of Operations” section as well as the notes to the consolidated financial statements.

Loan Approval

Certain credit risks are inherent in making loans. These include prepayment risks, risks resulting from uncertainties in the future value of collateral, risks resulting from changes in economic and industry conditions, and risks inherent in dealing with individual borrowers. We attempt to mitigate repayment risks by adhering to our comprehensive and robust internal credit policies and procedures. These policies and procedures include clearly defined lending limits, approval processes for all loan sizes, documentation examination, procedures for required follow-up where applicable, and pre and post-closing loan review processes. Our loan approval policies provide for various levels of officer lending authority. The Bank currently employs both an electronic signature process through the line of business as well as credit administration and a committee process which, above a certain dollar threshold, involves the Bank’s board of directors. Both approvals and reviews of the credit actions are underwritten by an independent set of credit analysts who report to credit administration. For our loan commitments, a serial sign-off process is utilized up to our in-house lending limit, requiring multiple signatures for a loan approval. This process ensures that the necessary parties at all authority levels are aware of and approve the commitment. The Bank’s board of directors is involved in credits above this level after they have been through the serial sign-off process. We do not make any loans to any director, executive officer of the Bank, or the related interests of each, unless the loan is approved by the full board of directors of the Bank and is on terms not more favorable than would be available to any non-Regulation O customer.

9

Table of Contents

Credit Administration and Loan Review

Our loan review consists of both commercial and retail review where loan files are reviewed and risk ratings are validated. Both are fully outsourced to a firm that specializes in file review and risk rating. Our policy for reviewing commercial credit files consisted of selecting a percentage of specific files on an annual basis as defined in our loan review plan, and reviewing them for risk rating and policy compliance. Our goal is to review approximately 40% of the commercial portfolio annually. Our retail review consists of selecting a percentage of specific files on an annual basis, and reviewing them for policy compliance. Results of completed loan reviews are disclosed in writing, along with management responses, to the Loan Committee.

Lending Limits

Our lending activities are subject to a variety of lending limits imposed by federal law. In general, the Bank is subject to a base legal limit on loans to a single borrower equal to 15% of the Bank’s capital and unimpaired surplus, plus an additional 10% of the Bank’s capital and surplus, if the amount that exceeds the 15% general limit is fully secured by readily marketable collateral. This legal lending limit will increase or decrease as the Bank’s level of capital increases or decreases. In addition to the legal lending, management and the board of directors have established a more conservative, internal lending limit which is currently set at 80% of our legal lending  limit. The Bank’s legal and internal lending limits are a safety and soundness measure intended to prevent one person or a relatively small and economically related group of persons from borrowing an unduly large amount of the Bank’s funds. It is also intended to safeguard the Bank’s depositors by diversifying the risk of credit losses among a relatively large number of creditworthy borrowers engaged in various types of businesses. Based upon the capitalization of the Bank at December 31, 2025, the Bank’s base legal lending limit was $69 million and the Bank’s internal lending limit was $55.2 million. Our board of directors will adjust the internal lending limit as deemed necessary to continue to mitigate risk and serve the Bank’s clients. We are also able to sell participations in our larger loans to other financial institutions, which allows us to manage the risk involved in these loans and to meet the lending needs of our clients requiring extensions of credit in excess of these limits.

Real Estate Loans

The principal component of our loan portfolio is loans secured by real estate. Real estate loans are subject to the same general risks as other loans and are particularly sensitive to fluctuations in the value of real estate. Fluctuations in the value of real estate and rising interest rates, as well as other factors arising after a loan has been made, could negatively affect a borrower’s cash flow, creditworthiness, and ability to repay the loan. We obtain a security interest in real estate whenever possible, in addition to any other available collateral, in order to increase the likelihood of the ultimate repayment of the loan.

As of December 31, 2025, loans secured by real estate made up approximately $2.67 billion, or 74.1%, of our loan portfolio. These loans generally will fall into one of two categories:

10

Table of Contents

​

Commercial and Industrial Loans

We have significant expertise in small to middle market commercial and industrial lending. Our success is the result of our product and market expertise, and our focus on delivering high-quality, customized and quick turnaround service for our clients due to our focus on maintaining an appropriate balance between prudent, disciplined underwriting, on the one hand, and flexibility in our decision making and responsiveness to our clients, on the other hand, which has allowed us to grow our commercial and industrial loan portfolio while maintaining strong asset quality. As of December 31, 2025, commercial and industrial loans made up approximately $647.1 million or 18.0% of our loan portfolio.

We provide a mix of variable and fixed rate commercial and industrial loans. The loans are typically made to small- and medium-sized businesses involved in professional services, accommodation and food services, health care, wholesale trade, financial institutions, manufacturing, distribution, retailing and non-profits. We extend commercial business loans for working capital, accounts receivable and inventory financing and other business purposes. Generally, short-term loans have maturities ranging from 3 months to 1 year, and “term loans” have maturities ranging from 3 to 20 years. Lines of credit are generally intended to finance current transactions and typically provide for periodic principal payments, with interest payable monthly. Term loans generally provide for floating and fixed interest rates, with monthly payments of both principal and interest.

Construction and Development Loans

We offer fixed and adjustable rate residential and commercial construction loan financing to builders and developers and to consumers who wish to build their own home. The term of construction and development loans generally is limited to 9 to 24 months, although payments may be structured on a longer amortization basis. Most loans will mature and require payment in full upon completion and either the sale of the property or refinance into a permanent loan. We believe that construction and development loans generally carry a higher degree of risk than long-term financing of stabilized, rented, and owner-occupied properties because repayment depends on the ultimate completion of the project and usually on the subsequent sale of the property. Specific risks include:

​

We attempt to reduce risk associated with construction and development loans by obtaining personal guaranties and by keeping the maximum loan-to-value ratio at or below 85% of the lesser of cost or appraised value, depending on the project type. Generally, we do not have interest reserves built into loan commitments but require periodic cash payments for interest from the borrower’s cash flow. As of December 31, 2025, construction and development loans made up approximately $215.5 million or 6.0% of our loan portfolio.

11

Table of Contents

Consumer Loans

We make a variety of loans to individuals for personal and household purposes, including secured and unsecured installment loans and revolving lines of credit. Consumer loans are underwritten based on the borrower’s income, current debt level, past credit history, and the availability and value of collateral. Consumer rates are both fixed and variable, with negotiable terms. Our installment loans typically amortize over periods up to seven years. Although we typically require monthly principal and interest payments on our loan products, we will offer consumer loans at interest only with a single maturity date when a specific source of repayment is available. Consumer loans are generally considered to have greater risk than first or second mortgages on real estate because they may be unsecured, or, if they are secured, the value of the collateral may be difficult to assess and more likely to decrease in value than real estate.  As of December 31, 2025, consumer loans made up approximately $54.8 million or 1.5% of our loan portfolio.

Mortgage Banking Activities

Our mortgage banking operations include correspondent or secondary market lending, and in-house mortgage lending (included in residential mortgage and home equity loan totals above). We conduct secondary market lending through Fannie Mae, Federal Home Loan Bank of Chicago, U.S. Dept. of Agriculture, the Federal Housing Administration, and the Wisconsin Housing and Economic Development Authority. We also offer a number of in-house mortgage products, including adjustable rate mortgages at one, three, five, seven, ten, and fifteen years, and fixed rate mortgages at up to thirty years. We also offer an eleven-month construction loan, a construction to permanent loan, and a twelve-month bridge loan.

Deposit Products

We offer a full range of traditional deposit services through our branch network in our market areas that are typically available in most banks and savings institutions, including checking accounts, commercial accounts, savings accounts and other time deposits of various types, ranging from money market accounts to long-term certificates of deposit. Transaction accounts and time deposits are tailored to and offered at rates competitive to those offered in our primary market areas. We also offer retirement accounts and health savings accounts. Our customers include individuals, businesses, associations, organizations and governmental authorities. We believe that our branch infrastructure will assist us in obtaining deposits from local customers in the future. Our deposits are insured by the FDIC up to statutory limits.

Securities

We manage our securities portfolio and cash to maintain adequate liquidity and to ensure the safety and preservation of invested principal, with a secondary focus on yield and returns. Specific goals of our investment portfolio are as follows:

Our investment portfolio is comprised primarily of U.S. government securities, mortgage-backed securities backed by government-sponsored entities, corporate notes, and taxable and tax-exempt municipal securities.

12

Table of Contents

Our investment policy is reviewed annually by our board of directors. Overall investment goals are established by our board, CEO, and members of our Asset Liability Management Committee (“ALCO”). Our board of directors has delegated the responsibility of monitoring our investment activities to our ALCO. Day-to-day activities pertaining to the securities portfolio are conducted under the supervision of our CEO and CFO. We actively monitor our investments on an ongoing basis to identify any material changes in the securities. We also review our securities for potential credit deterioration at least quarterly.

Human Capital Resources

​

Our company culture is built on a long-standing commitment to respect, fairness, and creating an environment where all employees feel valued. We believe that fostering a sense of belonging and embracing a variety of viewpoints, experiences, and backgrounds enhances our ability to serve the needs of our employees, customers, communities, and shareholders. We focus on attracting, developing, and promoting top-tier talent, understanding that varied perspectives strengthen our organization. Our talent acquisition teams work closely with hiring managers to ensure a broad range of qualified candidates are considered, reinforcing our commitment to building a strong and dynamic workforce. All hiring decisions are based on merit and qualifications.

We view our employees as our most valuable asset, and our future success hinges on our ability to build and develop a skilled workforce that reflects the diversity of our customers and the communities we serve. Professional development is a priority, and we support this through various initiatives, including comprehensive training programs, career pathing, leadership development opportunities, and educational reimbursement. Human capital initiatives are overseen by Senior Management and supported by the Board of Directors as part of the Company’s overall business strategy.

To attract and retain top talent, we offer a comprehensive benefits package that includes health, dental, and vision insurance, life and disability coverage, cell phone and gym membership reimbursements, an employee assistance program, educational tuition reimbursement, an annual clothing allowance, a cell phone reimbursement for all employees, an employee referral program, a 401(k) retirement plan with substantial company match, a flexible spending account, and generous paid time off. We are confident that our compensation and benefits offerings are highly competitive within our industry. For more detailed information about our employee benefit plans, please refer to “Note 17 – Employee Benefit Plans” in the consolidated financial statements included in this report.

As of December 31, 2025, Bank First had approximately 380 full-time equivalent employees. Approximately 73% of our employees self-identified as female and approximately 6% self-identified as people of color. Our approach to talent acquisition, development, and retention emphasizes rewarding merit and achievement while supporting the growth and advancement of skilled talent across the Bank. Women represent 17% of our Board of Directors and 36% of our senior management team. None of our employees are represented by a collective bargaining unit or covered by a collective bargaining agreement. We maintain positive employee relations and have not experienced any work stoppages or operational disruptions related to labor matters. We believe our workforce stability and employee engagement support the consistent delivery of high-quality service to our customers and communities.

General Corporate Information

Our principal executive offices are located at 402 N. 8th Street, Manitowoc, Wisconsin 54220, and our telephone number at that address is (920) 652-3100. Additional information can be found on our website: www.bankfirst.com. The information contained on our website is not incorporated in this document by reference.

Public Information

Persons interested in obtaining information on the Company may read and copy any materials that we file with the U.S. Securities and Exchange Commission ("SEC"). The Commission maintains an Internet site that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC at www.sec.gov. We make available, free of charge, on or through our website, www.bankfirst.com, our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and other filings pursuant to Section 13(a) or 15(d) of the Securities

13

Table of Contents

Exchange Act of 1934, and amendments to such filings, as soon as reasonably practicable after each is electronically filed with, or furnished to, the SEC.

Supervision and Regulation

We are extensively regulated under federal and state law. The following is a brief summary that does not purport to be a complete description of all regulations that affect us or all aspects of those regulations. This discussion is qualified in its entirety by reference to the particular statutory and regulatory provisions described below and is not intended to be an exhaustive description of the statutes or regulations applicable to the Company’s and the Bank’s business. In addition, proposals to change the laws and regulations governing the banking industry are frequently raised at both the state and federal levels. The likelihood and timing of any changes in these laws and regulations, and the impact such changes may have on us and the Bank, are difficult to predict. In addition, bank regulatory agencies may issue enforcement actions, policy statements, interpretive letters and similar written guidance applicable to us or the Bank. Changes in applicable laws, regulations or regulatory guidance, or their interpretation by regulatory agencies or courts may have a material adverse effect on our and the Bank’s business, operations, and earnings. Supervision and regulation of banks, their holding companies and affiliates is intended primarily for the protection of depositors and customers, the Deposit Insurance Fund (“DIF”) of the FDIC, and the U.S. banking and financial system rather than holders of our capital stock. As the Company grows in size or complexity, we may become subject to additional supervisory expectations, including enhanced examination, reporting, or governance requirements.

Regulation of the Company

We are registered as a bank holding company with the Federal Reserve under the Bank Holding Company Act of 1956, as amended (the “BHC Act”). As such, we are subject to comprehensive supervision and regulation by the Federal Reserve and are subject to its regulatory reporting requirements. Federal law subjects bank holding companies, such as the Company, to particular restrictions on the types of activities in which they may engage, and to a range of supervisory requirements and activities, including regulatory enforcement actions for violations of laws and regulations. Violations of laws and regulations, or other unsafe and unsound practices, may result in regulatory agencies imposing fines or penalties, cease-and-desist orders, or taking other enforcement actions. Under certain circumstances, these agencies may enforce these remedies directly against officers, directors, employees and other parties participating in the affairs of a bank or bank holding company.

Activity Limitations.   Bank holding companies are generally restricted to engaging in the business of banking, managing or controlling banks and certain other activities determined by the Federal Reserve to be closely related to banking. In addition, the Federal Reserve has the power to order a bank holding company or its subsidiaries to terminate any nonbanking activity or terminate its ownership or control of any nonbank subsidiary, when it has reasonable cause to believe that continuation of such activity or such ownership or control constitutes a serious risk to the financial safety, soundness, or stability of any bank subsidiary of that bank holding company.

Source of Strength Obligations.   A bank holding company is required to act as a source of financial and managerial strength to its subsidiary bank and to maintain resources adequate to support its bank. The term “source of financial strength” means the ability of a company, such as us, that directly or indirectly owns or controls an insured depository institution, such as the Bank, to provide financial assistance to such insured depository institution in the event of financial distress. The appropriate federal banking agency for the depository institution (in the case of the Bank, this agency is the OCC) may require reports from us to assess our ability to serve as a source of strength and to enforce compliance with the source of strength requirements by requiring us to provide financial assistance to the Bank in the event of financial distress. If we were to enter bankruptcy or become subject to the orderly liquidation process established by the Dodd-Frank Act, any commitment by us to a federal bank regulatory agency to maintain the capital of the Bank would be assumed by the bankruptcy trustee or the FDIC, as appropriate, and entitled to a priority of payment.

14

Table of Contents

Acquisitions.   The BHC Act permits acquisitions of banks by bank holding companies, such that we and any other bank holding company, whether located in Wisconsin, Illinois or elsewhere, may acquire a bank located in any other state, subject to certain deposit-percentage, age of bank charter requirements, and other restrictions. The BHC Act requires that a bank holding company obtain the prior approval of the Federal Reserve before (i) acquiring direct or indirect ownership or control of more than 5% of the voting shares of any additional bank or bank holding company, (ii) taking any action that causes an additional bank or bank holding company to become a subsidiary of the bank holding company, or (iii) merging or consolidating with any other bank holding company. The Federal Reserve may not approve any such transaction that would result in a monopoly or would be in furtherance of any combination or conspiracy to monopolize or attempt to monopolize the business of banking in any section of the United States, or the effect of which may be substantially to lessen competition or to tend to create a monopoly in any section of the country, or that in any other manner would be in restraint of trade, unless the anticompetitive effects of the proposed transaction are clearly outweighed by the public interest in meeting the convenience and needs of the community to be served. The Federal Reserve is also required to consider: (1) the financial and managerial resources of the companies involved, including pro forma capital ratios; (2) the risk to the stability of the United States banking or financial system; (3) the convenience and needs of the communities to be served, including performance under the Community Reinvestment Act ("CRA"); and (4) the effectiveness of the companies in combatting money laundering.

Change in Control.   Federal law restricts the amount of voting stock of a bank holding company or a bank that a person may acquire without the prior approval of banking regulators. Under the Change in Bank Control Act and the regulations thereunder, a person or group must give advance notice to the Federal Reserve before acquiring control of any bank holding company, such as the Company, and the OCC before acquiring control of any national bank, such as the Bank. Upon receipt of such notice, the bank regulatory agencies may approve or disapprove the acquisition. The Change in Bank Control Act creates a rebuttable presumption of control if a person or group acquires the power to vote 10% or more of our outstanding common stock. The overall effect of such laws is to make it more difficult to acquire a bank holding company and a bank by tender offer or similar means than it might be to acquire control of another type of corporation. Consequently, shareholders of the Company may be less likely to benefit from the rapid increases in stock prices that may result from tender offers or similar efforts to acquire control of other companies. Investors should be aware of these requirements when acquiring shares of our stock.

Governance and Financial Reporting Obligations. We are required to comply with various corporate governance and financial reporting requirements under the Sarbanes-Oxley Act of 2002, as well as rules and regulations adopted by the SEC, the Public Company Accounting Oversight Board (“PCAOB”), and Nasdaq. In particular, we are required to include management and independent registered public accounting firm reports on internal controls as part of our Annual Report on Form 10- K in order to comply with Section 404 of the Sarbanes-Oxley Act. We have evaluated our controls, including compliance with the SEC rules on internal controls, and have and expect to continue to spend significant amounts of time and money on compliance with these rules. Our failure to comply with these internal control rules may materially adversely affect our reputation, ability to obtain the necessary certifications to financial statements, and the values of our securities. The assessments of our financial reporting controls as of December 31, 2025 are included in this report under “Item 9A. Controls and Procedures.”

Corporate Governance.   The Dodd-Frank Act addresses many investor protections, corporate governance, and executive compensation matters that will affect most U.S. publicly traded companies. The Dodd-Frank Act (1) grants shareholders of U.S. publicly traded companies an advisory vote on executive compensation; (2) enhances independence requirements for Compensation Committee members; and (3) requires companies listed on national securities exchanges to adopt incentive-based compensation claw-back policies for executive officers.

15

Table of Contents

Incentive Compensation.   The Dodd-Frank Act required the banking agencies and the SEC to establish joint rules or guidelines for financial institutions with more than $1 billion in assets, such as us and the Bank, which prohibit incentive compensation arrangements that the agencies determine to encourage inappropriate risks by the institution. The banking agencies issued proposed rules in 2011 and previously issued guidance on sound incentive compensation policies. In 2016, the Federal Reserve and the OCC also proposed rules that would, depending upon the assets of the institution, directly regulate incentive compensation arrangements and would require enhanced oversight and recordkeeping. As of December 31, 2025, these rules have not been implemented. We and the Bank have undertaken efforts to ensure that our incentive compensation plans do not encourage inappropriate risks, consistent with three key principles— that incentive compensation arrangements should appropriately balance risk and financial rewards, be compatible with effective controls and risk management, and be supported by strong corporate governance.

Shareholder Say-On-Pay Votes.  The Dodd-Frank Act requires public companies to take shareholders’ votes on proposals addressing compensation (known as say-on-pay), the frequency of a say-on-pay vote, and the golden parachutes available to executives in connection with change-in-control transactions. Public companies must give shareholders the opportunity to vote on the compensation at least every three years and the opportunity to vote on frequency at least every six years, indicating whether the say-on-pay vote should be held annually, biennially, or triennially. The say-on-pay, the say-on-parachute and the say-on-frequency votes are explicitly nonbinding and cannot override a decision of our board of directors.

Other Regulatory Matters.   We and our subsidiaries are subject to oversight by the SEC, the Financial Industry Regulatory Authority (“FINRA”), the PCAOB, Nasdaq and various state securities regulators. We and our subsidiaries have from time to time received requests for information from regulatory authorities in various states, including state attorneys general, securities regulators and other regulatory authorities, concerning our business practices. Such requests are considered incidental to the normal conduct of business.

Capital Requirements

The Company and Bank are required under federal law to maintain certain minimum capital levels based on ratios of capital to total assets and capital to risk-weighted assets. The required capital ratios are minimums, and the federal banking agencies may determine that a banking organization, based on its size, complexity or risk profile, must maintain a higher level of capital in order to operate in a safe and sound manner. Risks such as concentration of credit risks and the risks arising from non-traditional activities, as well as the institution’s exposure to a decline in the economic value of its capital due to changes in interest rates, and an institution’s ability to manage those risks are important factors that are to be taken into account by the federal banking agencies in assessing an institution’s overall capital adequacy. The following is a brief description of the relevant provisions of these capital rules and their potential impact on our capital levels.

The Company and Bank are subject to the following risk-based capital ratios: a common equity Tier 1 (“CET1”) risk-based capital ratio, a Tier 1 risk-based capital ratio, which includes CET1 and additional Tier 1 capital, and a total capital ratio, which includes Tier 1 and Tier 2 capital. CET1 is primarily comprised of the sum of common stock instruments and related surplus net of treasury stock, retained earnings, and certain qualifying minority interests, less certain adjustments and deductions, including with respect to goodwill, intangible assets, mortgage servicing assets and deferred tax assets subject to temporary timing differences. Additional Tier 1 capital is primarily comprised of noncumulative perpetual preferred stock, tier 1 minority interests and grandfathered trust preferred securities. Tier 2 capital consists of instruments disqualified from Tier 1 capital, including qualifying subordinated debt, other preferred stock and certain hybrid capital instruments, and a limited amount of loan loss reserves up to a maximum of 1.25% of risk-weighted assets, subject to certain eligibility criteria. The capital rules also define the risk-weights assigned to assets and off-balance sheet items to determine the risk-weighted asset components of the risk-based capital rules, including, for example, certain “high volatility” commercial real estate, past due assets, structured securities and equity holdings.

The leverage capital ratio, which serves as a minimum capital standard, is the ratio of Tier 1 capital to quarterly average assets net of goodwill, certain other intangible assets, and certain required deduction items. The required minimum leverage ratio for all banks is 4.0%.

16

Table of Contents

In addition, the capital rules require a capital conservation buffer of CET1 of 2.5% above each of the minimum risk-based capital ratio requirements (CET1, Tier 1, and total risk-based capital), which is designed to absorb losses during periods of economic stress. These buffer requirements must be met for a bank to be able to pay dividends, engage in share buybacks or make discretionary bonus payments to executive management without restriction.

The Federal Deposit Insurance Corporation Improvement Act of 1991 (“FDICIA”), among other things, requires the federal bank regulatory agencies to take “prompt corrective action” regarding depository institutions that do not meet minimum capital requirements. FDICIA establishes five regulatory capital tiers: “well capitalized”, “adequately capitalized”, “undercapitalized”, “significantly undercapitalized”, and “critically undercapitalized”. A depository institution’s capital tier will depend upon how its capital levels compare to various relevant capital measures and certain other factors, as established by regulation. FDICIA generally prohibits a depository institution from making any capital distribution (including payment of a dividend) or paying any management fee to its holding company if the depository institution would thereafter be undercapitalized.

To be well-capitalized, the Company and Bank must maintain at least the following capital ratios:

Failure to be well-capitalized or to meet minimum capital requirements could result in certain mandatory and possible additional discretionary actions by regulators that, if undertaken, could have an adverse material effect on our operations or financial condition. For example, only a well-capitalized depository institution may accept brokered deposits without prior regulatory approval. Failure to be well-capitalized or to meet minimum capital requirements could also result in restrictions on the Bank’s ability to pay dividends or otherwise distribute capital or to receive regulatory approval of applications or other restrictions on its growth. The Bank was well capitalized at December 31, 2025, and brokered deposits are not restricted.

In 2025, the Company and Bank’s regulatory capital ratios were above the applicable well-capitalized standards and met the then-applicable capital conservation buffer. Based on current estimates, we believe that the Company and Bank will continue to exceed all applicable well-capitalized regulatory capital requirements and the capital conservation buffer in 2026.

As a result of the Economic Growth, Regulatory Relief, and Consumer Protection Act (the “Economic Growth Act”) the federal banking agencies were also required to develop a “Community Bank Leverage Ratio” (the ratio of a bank’s Tier 1 capital to average total consolidated assets) for financial institutions with assets of less than $10 billion. A “qualifying community bank” that exceeds this ratio will be deemed to be in compliance with all other capital and leverage requirements, including the capital requirements to be considered “well capitalized” under prompt corrective action statutes. The federal banking agencies may consider a financial institutions risk profile when evaluation whether it qualifies as a community bank for purposes of the capital ratio requirement. The federal banking agencies set the minimum capital for the new Community Bank Leverage Ratio at 9%. The Bank does not intend to opt into the Community Bank Leverage Ratio Framework.

On December 21, 2018, federal banking agencies issued a joint final rule to revise their regulatory capital rules to (i) address the implementation of the “current expected credit losses” (“CECL”) accounting standard under GAAP; (ii) provide an optional three-year phase-in period for the day-one adverse regulatory capital effects that banking organizations were expected to experience upon adopting CECL; and (iii) require the use of CECL in stress tests beginning with the 2020 capital planning and stress testing cycle for certain banking organizations.

Payment of Dividends

We are a legal entity separate and distinct from the Bank and our other subsidiaries. Our primary source of cash, other than securities offerings, is dividends from the Bank. The prior approval of the OCC is required if the total of all dividends declared

17

Table of Contents

by a national bank (such as the Bank) in any calendar year will exceed the sum of such bank’s net profits for that year and its retained net profits for the preceding two calendar years, less any required transfers to surplus. Federal law also prohibits any national bank from paying dividends that would be greater than such bank’s undivided profits after deducting statutory bad debts in excess of such bank’s allowance for possible credit losses.

In addition, we and the Bank are subject to various general regulatory policies and requirements relating to the payment of dividends, including requirements to maintain adequate capital above regulatory minimums. The appropriate federal bank regulatory authority may prohibit the payment of dividends where it has determined that the payment of dividends would be an unsafe or unsound practice and to prohibit payment thereof. The OCC and the Federal Reserve have indicated that paying dividends that deplete a bank’s capital base to an inadequate level would be an unsound and unsafe banking practice. The OCC and the Federal Reserve have each indicated that depository institutions and their holding companies should generally pay dividends only out of current operating earnings.

Under a Federal Reserve policy adopted in 2009, the board of directors of a bank holding company must consider different factors to ensure that its dividend level is prudent relative to maintaining a strong financial position, and is not based on overly optimistic earnings scenarios, such as potential events that could affect its ability to pay, while still maintaining a strong financial position. As a general matter, the Federal Reserve has indicated that the board of directors of a bank holding company should consult with the Federal Reserve and eliminate, defer or significantly reduce the bank holding company’s dividends if:

Regulation of the Bank

As a national bank, our primary bank subsidiary, Bank First, N.A., is subject to comprehensive supervision and regulation by the OCC and is subject to its regulatory reporting requirements. The deposits of the Bank are insured by the FDIC up to applicable limits and, accordingly, the Bank is also subject to certain FDIC regulations, and the FDIC has backup examination authority and some enforcement powers over the Bank. The Bank also is subject to certain Federal Reserve regulations. Banking organizations may also be subject to heightened supervisory expectations relating to risk management, internal controls, and contingency planning as regulatory standards evolve.

In addition, as discussed in more detail below, the Bank and any other of our subsidiaries that offer consumer financial products and services are subject to regulation and potential supervision by the Consumer Financial Protection Bureau (“CFPB”). Authority to supervise and examine the Company and the Bank for compliance with federal consumer laws remains largely with the Federal Reserve and the OCC, respectively. However, the CFPB may participate in examinations on a “sampling basis” and may refer potential enforcement actions against such institutions to their primary regulators. The CFPB also may participate in examinations of our other direct or indirect subsidiaries that offer consumer financial products or services. In addition, the Dodd-Frank Act permits states to adopt consumer protection laws and regulations that are stricter than those regulations promulgated by the CFPB, and state attorneys general are permitted to enforce certain federal consumer financial protection rules adopted by the CFPB. As the Company and the Bank each had less than $10 billion in consolidated assets in 2025, they are not subject to the routine supervision of the CFPB, but this may change in the future as the Company and the Bank grow.

Broadly, regulations applicable to the Bank include limitations on loans to a single borrower and to its directors, officers and employees; restrictions on the opening and closing of branch offices; the maintenance of required capital and liquidity ratios; the granting of credit under equal and fair conditions; the disclosure of the costs and terms of such credit; requirements to maintain reserves against deposits and loans; limitations on the types of investment that may be made by the Bank; and

18

Table of Contents

requirements governing risk management practices. The Bank is permitted under federal law to branch on a de novo basis across state lines where the laws of that state would permit a bank chartered by that state to open a de novo branch.

Transactions with Affiliates and Insiders. The Bank is subject to restrictions on extensions of credit and certain other transactions between the Bank and the Company or any nonbank affiliate. Generally, these covered transactions with either the Company or any affiliate are limited to 10% of the Bank’s capital and surplus, and all such transactions between the Bank and the Company and all of its nonbank affiliates combined are limited to 20% of the Bank’s capital and surplus. Loans and other extensions of credit from the Bank to the Company or any affiliate generally are required to be secured by eligible collateral in specified amounts. In addition, any transaction between the Bank and the Company or any affiliate are required to be on an arm’s length basis. Federal banking laws also place similar restrictions on certain extensions of credit by insured banks, such as the Bank, to their directors, executive officers and principal shareholders.

Reserves. Historically, Federal Reserve rules required depository institutions, such as the Bank, to maintain reserves against their transaction accounts, primarily interest bearing and noninterest-bearing checking accounts. The Federal Reserve announced that reserve requirement ratios were reduced to zero percent effective March 26, 2020. This action eliminated reserve requirements for all depository institutions.

FDIC Insurance Assessments and Depositor Preference. The Bank’s deposits are insured by the FDIC’s DIF up to the limits under applicable law, which currently are set at $250,000 per depositor, per insured bank, for each account ownership category. The Bank is subject to FDIC assessments for its deposit insurance. The FDIC calculates quarterly deposit insurance assessments based on an institution’s average total consolidated assets less its average tangible equity, and applies one of four risk categories determined by reference to its capital levels, supervisory ratings, and certain other factors. The assessment rate schedule can change from time to time, at the discretion of the FDIC, subject to certain limits.

Insurance of deposits may be terminated by the FDIC upon a finding that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order or condition imposed by a bank’s federal regulatory agency. In addition, the Federal Deposit Insurance Act provides that, in the event of the liquidation or other resolution of an insured depository institution, the claims of depositors of the institution, including the claims of the FDIC as subrogee of insured depositors, and certain claims for administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution, including those of the parent bank holding company.

In October of 2022, the FDIC adopted a final rule to increase the initial base deposit insurance assessment rate by 2 basis points, applicable to all insured depository institutions, which began with the first quarterly assessment period in 2023 and will remain in effect until the level of the DIF reserve ratios to insured deposits meets the FDIC's long-term goals.

Standards for Safety and Soundness.   The Federal Deposit Insurance Act requires the federal bank regulatory agencies to prescribe, by regulation or guideline, operational and managerial standards for all insured depository institutions relating to: (1) internal controls; (2) information systems and audit systems; (3) loan documentation; (4) credit underwriting; (5) interest rate risk exposure; and (6) asset quality. The federal banking agencies have adopted regulations and Interagency Guidelines Establishing Standards for Safety and Soundness to implement these required standards. These guidelines set forth the safety and soundness standards used to identify and address problems at insured depository institutions before capital becomes impaired. Under the regulations, if a regulator determines that a bank fails to meet any standards prescribed by the guidelines, the regulator may require the bank to submit an acceptable plan to achieve compliance, consistent with deadlines for the submission and review of such safety and soundness compliance plans.

Anti-Money Laundering. A continued focus of governmental policy relating to financial institutions in recent years has been combating money laundering and terrorist financing. The USA PATRIOT Act broadened the application of anti-money laundering regulations to apply to additional types of financial institutions such as broker-dealers, investment advisors and insurance companies, and strengthened the ability of the U.S. government to help prevent, detect and prosecute international money laundering and the financing of terrorism. The principal provisions of Title III of the USA PATRIOT Act require that regulated financial institutions: (i) establish an anti-money laundering program that includes training and audit components; (ii) comply with regulations regarding the verification of the identity of any person seeking to open an account; (iii) take additional required precautions with non-U.S. owned accounts; and (iv) perform certain verification and certification

19

Table of Contents

of money laundering risk for their foreign correspondent banking relationships. Failure of a financial institution to comply with the USA PATRIOT Act's requirements could have serious legal and reputational consequences for the institution. The Bank has augmented its systems and procedures to meet the requirements of these regulations and will continue to revise and update its policies, procedures and controls to reflect changes required by law.

FinCEN has adopted rules that require financial institutions to obtain beneficial ownership information with respect to legal entities with which such institutions conduct business, subject to certain exclusions and exemptions. Bank regulators are focusing their examinations on anti-money laundering compliance, and we continue to monitor and augment, where necessary, our anti-money laundering compliance programs.

Banking regulators will consider compliance with the Act's money laundering provisions in acting upon merger and acquisition proposals.

Bank regulators routinely examine institutions for compliance with these anti-money laundering obligations and recently have been active in imposing “cease-and-desist” and other regulatory orders and money penalty sanctions against institutions found to be in violation of these requirements. Sanctions for violations of the Act can be imposed in an amount equal to twice the sum involved in the violating transaction, up to $1 million. On January 1, 2021, Congress passed federal legislation that made sweeping changes to federal anti-money laundering laws, subject to pending implementation by regulatory rulemaking. Most recently, on June 30, 2021, FinCEN published the first set of “national AML priorities,” as required by the Bank Secrecy Act, which include, but are not limited to, cybercrime, terrorist financing, fraud, and drug/human trafficking.  FinCEN is required to implement regulations to specify how covered financial institutions, such as the Company, should incorporate these national priorities into their AML programs.

Economic Sanctions. The Office of Foreign Assets Control (“OFAC”) is responsible for helping to ensure that U.S. entities do not engage in transactions with certain prohibited parties, as defined by various Executive Orders and acts of Congress. OFAC publishes, and routinely updates, lists of names of persons and organizations suspected of aiding, harboring or engaging in terrorist acts, including the Specially Designated Nationals and Blocked Persons List. If we find a name on any transaction, account or wire transfer that is on an OFAC list, we must undertake certain specified activities, which could include blocking or freezing the account or transaction requested, and we must notify the appropriate authorities.

Concentrations in Lending.  During 2006, the federal bank regulatory agencies released guidance on “Concentrations in Commercial Real Estate Lending” (the “Guidance”) and advised financial institutions of the risks posed by commercial real estate (“CRE”) lending concentrations. The Guidance requires that appropriate processes be in place to identify, monitor and control risks associated with real estate lending concentrations. Higher allowances for credit losses and capital levels may also be required. The Guidance is triggered when CRE loan concentrations exceed either: