CASS INFORMATION SYSTEMS INC (CASS) Risk Factors

ITEM 1A. RISK FACTORS

This section highlights specific risks that could affect the Company’s business. Although this section attempts to highlight key factors, please be aware that other risks may prove to be important in the future. New risks may emerge at any time, and Cass cannot predict such risks or estimate the extent to which they may affect the Company’s financial performance. This section describes the Company’s beliefs regarding the factors that could materially and adversely affect the Company and its business, financial condition and results of operations in the future. All references to past events are intended to be examples only rather than a complete listing or a representation regarding whether such events have occurred in the past or whether they are likely to occur in the future.

In addition to the factors discussed elsewhere or incorporated by reference in this report, the identified risks that could cause actual results to differ materially include the following:

Economic and Market Conditions Risk

Risks from fluctuating conditions in the financial markets and economic and political conditions generally affect the Company

The Company's success depends, to a certain extent, upon local, national and global economic and political conditions, as well as governmental monetary policies. A favorable business environment is generally characterized by, among other factors, economic growth, efficient capital markets, low inflation, low unemployment, high business and investor confidence, and strong business earnings. Unfavorable or uncertain economic and market conditions can be caused by a decline in economic growth both in the U.S. and internationally; declines in business activity or investor or business confidence; limitations on the availability of or increases in the cost of credit and capital; increases in inflation or interest rates; high unemployment; oil price volatility; natural disasters; trade policies and tariffs; or a combination of these or other factors. In addition, financial markets and global supply chains may be adversely affected by the current or anticipated impact of global wars/military conflicts, terrorism or other geopolitical events. Current economic conditions are being heavily impacted by recent inflationary conditions and higher interest rates, the effects of which may impact the Company's profitability by negatively impacting its fixed costs and expenses. Economic and inflationary pressure on consumers and uncertainty regarding economic improvement could result in changes in consumer and business spending, borrowing and savings habits. Such conditions could have a material adverse effect on the credit quality of the Company's loans and its business, financial condition and results of operations.

Federal budget deficit concerns and the potential for political conflict over legislation to fund U.S. government operations and raise the U.S. government's debt limit may increase the possibility of a default by the U.S. government on its debt obligations, related credit-rating downgrades, or an economic recession in the United States. Many of the Company's investment securities are issued by the U.S. government and government agencies and sponsored entities. As a result of uncertain domestic political conditions, including potential future federal government shutdowns, the possibility of the federal government defaulting on its obligations for a period of time due to debt ceiling limitations or other unresolved political issues, investments in financial instruments issued or guaranteed by the federal government pose liquidity risks. Most recently, in connection with successive failures by the U.S. government to reverse the trend of large annual fiscal deficits and growing interest costs, Moody's lowered its long-term issuer credit rating on the U.S. from Aaa to Aa1. A further downgrade, or downgrades by other rating agencies, as well as sovereign debt issues facing the governments of

10

Table of Contents

other countries, could have a material adverse impact on financial markets and economic conditions in the U.S. and worldwide.

Certain events beyond the Company’s control, such as severe weather, natural disasters, terrorist activities or other hostilities, may adversely affect the general economy, financial and capital markets, specific industries, and the Company.

Severe weather, natural disasters, acts of terrorism or other hostilities, and other adverse external events beyond the Company’s control, could have a significant impact on the Company’s ability to conduct business. Such events could disrupt the Company's operations or those of its customers, affect the stability of the Company’s deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue and/or cause the Company to incur additional expenses. The occurrence of any such event in the future could have a material adverse effect on the Company’s business, which, in turn, could have a material adverse effect on the Company’s financial condition and results of operations.

Credit and Interest Rate Risks

Unfavorable developments concerning customer credit quality could affect Cass’ financial results.

Although the Company regularly reviews credit exposure related to its customers and various industry sectors in which it has business relationships, default risk may arise from events or circumstances that are difficult to detect or foresee. Under such circumstances, the Company could experience an increase in the level of provision for credit losses, delinquencies, nonperforming assets, net charge-offs and allowance for credit losses.

The Company’s allowance for credit losses (“ACL”) is subject to continuing evaluation and may be insufficient.

The Company maintains an ACL, which is a reserve established through a provision for credit losses charged to expense. The ACL is a valuation account that is deducted from the amortized cost basis to present the net amount expected to be collected on loans. Management uses a systematic, documented approach in determining the appropriate level of ACL, which represents management’s estimate of losses in loans and off-balance sheet exposures as of the balance sheet date. Management estimated the allowance balance using relevant available information relating to internal and external factors, past events, current conditions and reasonable and supportable forecasts based on economic sources, such as Gross Domestic Product (“GDP”). Historical credit loss experience, of both the Company and similar peer banks, provides the basis for the estimation of expected credit losses. Adjustments to historical loss information are made for asset quality trends, borrower’s ability to pay, collateral, and other environmental factors. The ACL is measured on a collective pool basis when similar risk characteristics exist. The determination of the appropriate level of the allowance for credit losses inherently involves a high degree of subjectivity and requires management to make estimates based on risks and trends that are subject to material change. A deterioration in economic conditions, including any recession, affecting borrowers and securities issuers; inflation; rising interest rates; new information regarding existing loans, credit commitments and securities holdings; global pandemics; geopolitical and economic conditions; natural disasters and risks related to climate change; and identification of problem loans, ratings down-grades and other factors, both within and outside of the Company’s control, may require an increase in the allowances for credit losses on loans, investment securities and off-balance sheet credit exposures.

The determination and application of the ACL accounting policy involves judgments, estimates, and uncertainties that are subject to change. Changes in these assumptions, estimates or the conditions surrounding them may have a material impact on the Company’s financial condition, liquidity or results of operations. Various regulatory agencies, as an integral part of the examination process, periodically review the ACL. Such agencies may require the Company to recognize additions to the ACL or reserve increases to adversely graded classified loans based on information available to them at the time of their examinations.

The application of the model used to determine the ACL could result in volatility in earnings. Additionally, if charge-offs in future periods exceed the ACL, the Company will need additional provisions to increase the ACL. Any increases in the ACL will result in a decrease in net income and, possibly, capital, and may have a material adverse effect on the Company’s business, financial condition and results of operations.

See Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Provision and Allowance for Credit Losses on Loans and Allowance for Unfunded Commitments” and Item 8, “Financial Statements and Supplementary Data—Note 1” for additional information.

11

Table of Contents

Fluctuations in interest rates could affect Cass’ net interest income and balance sheet.

The operations of financial institutions such as the Company are dependent to a large degree on net interest income, which is the difference between interest income from loans and investments and interest expense on deposits and borrowings. Prevailing economic conditions, the fiscal and monetary policies of the federal government and the policies of various regulatory agencies all affect market rates of interest, which in turn significantly affect financial institutions’ net interest income. Fluctuations in interest rates affect Cass’ financial statements, as they do for all financial institutions. Volatility in interest rates can also result in disintermediation, which is the flow of funds away from financial institutions into direct investments, such as federal government and corporate securities and other investment vehicles, which, because of the absence of federal insurance premiums and reserve requirements, generally pay higher rates of return than financial institutions. Due in part to a higher market interest rate environment in recent years, the Company's net interest margin has increased to 3.83% in 2025 from 3.42% in 2024, 3.25% in 2023 and 2.74% in 2022, therefore increasing net interest income. Notwithstanding these recent increases, as discussed in greater detail in Item 7A, “Quantitative and Qualitative Disclosures about Market Risk,” a decline in market interest rates would be expected to have a negative impact on the Company’s net interest income.

In certain circumstances, Cass remits payment of invoices prior to receiving funds from its customers. As such, Cass could experience losses if such funds are not received from customers after payment is remitted.

Although the Company regularly reviews credit exposure related to its customers and various industry sectors in which it has business relationships, default risk may arise from events or circumstances that are difficult to detect or foresee. Under such circumstances, the Company could experience losses related to funds remitted for payment to freight carriers, utility companies and other such companies, prior to receiving funds from its customers.

The Company has lending concentrations, including, but not limited to, faith-based ministries located in selected cities, franchise restaurants, and privately-held businesses located in or near St. Louis, Missouri, that could suffer a significant decline which could adversely affect the Company.

Cass’ customer base consists, in part, of lending concentrations in several segments and geographical areas. If any of these segments or areas is significantly affected by weak economic conditions, the Company could experience increased credit losses, and its business could be adversely affected.

Rising interest rates have decreased the value of the Company’s available-for-sale investment securities portfolio, and the Company would realize losses if it were required to sell such investment securities to meet liquidity needs.

As a result of inflationary pressures and resulting higher interest rates, the fair value of previously issued government and other fixed income investment securities has declined significantly, resulting in unrealized losses. If the Company were required to sell such investment securities to meet liquidity needs, it may incur losses, which could impair the Company’s capital, financial condition, and results of operations and require the Company to raise additional capital on unfavorable terms, thereby negatively impacting its profitability. While the Company has taken actions to maximize its funding sources, there is no guarantee that such actions will be successful or sufficient in the event of sudden liquidity needs.

Business Operations and Strategic Risk

Cass uses AI in connection with its business and operations, which exposes the Company to inherent risks that may expose it to material harm.

The Company uses AI in connection with its business and operations, including through the models it employs. AI is complex and rapidly evolving, and the introduction of AI, a relatively new and emerging technology in the early stages of commercial use, into the Company's business and operations may subject it to new or heightened legal, regulatory, ethical, operational, reputational, or other risks. The models underlying AI may be incorrectly or inadequately designed or implemented and trained on, or otherwise use, data or algorithms that are, and output that may be, incomplete, inadequate, misleading, biased, poor-quality or otherwise flawed, any of which may not be easily detectable. Further, inappropriate or controversial data practices by developers and end-users or other factors adversely affecting public opinion of AI could impair the acceptance of AI, including those incorporated in the Company's business and operations. If the AI that Cass uses is deficient, inaccurate or controversial, the Company could incur operational inefficiencies, competitive harm, legal and regulatory action, brand or reputational harm, or other adverse impacts on its business and financial results. Further, there can be no assurance that the Company's use of AI will be successful in enhancing its business or operations, be

12

Table of Contents

successfully adopted and deployed by its colleague base, or otherwise result in its intended outcomes, and the Company's competitors may incorporate AI into their businesses or operations more quickly or more successfully than Cass.

AI and the use thereof is also subject to a variety of existing laws and regulations, including fair lending, consumer protection, intellectual property, cybersecurity, data privacy, and equal opportunity, and is expected to be subject to new laws and regulations or new applications of existing laws and regulations. AI is the subject of evolving review by various governmental and regulatory agencies, and changes in laws and regulations governing AI may adversely affect the Company's ability to use AI. Additionally, various federal, state and foreign governments and regulators have implemented, or are considering implementing, general legal and regulatory frameworks for the appropriate use of AI. It is possible that the Company will not be able to anticipate how to respond to these rapidly developing laws and regulations. Further, if the Company does not have sufficient rights to use the data or algorithms on which its AI solutions rely or the output generated thereby, it also may incur liability through the violation of applicable laws and regulations, such as fair lending laws and regulations, third-party intellectual property, privacy or other rights, or contracts to which the Company is a party. The Company may not be able to sufficiently mitigate or detect any of the foregoing risks or concerns given its and other market participants’ lack of experience with using AI, the pace of technological change, and rapid adoption of AI by its business partners and competitors. Any actual or perceived failure to address risks or concerns relating to the use of AI, whether unfounded or not, could adversely affect the Company's business and operations.

The Company is exposed to risks associated with the handling of customer funds.

The Company makes payments of approximately $94 billion on an annual basis on behalf of its customers. Consequently, at any given time, the Company may be holding or directing funds of transportation, facility, CassPay and Bank customers. This function creates a risk of loss arising from, among other things, fraud by employees or third parties, execution of unauthorized transactions, ACH reversals, or errors relating to transaction processing. The occurrence of any of these types of events could cause the Company financial loss and reputational harm.

The Company may be adversely impacted by changing oil and overall energy prices.

A decline in the cost of oil worldwide can have a negative effect on both the number of freight transactions processed and the dollar amount of invoices processed. For example, lower oil prices can cause a significant drop in drilling supplies being transported to fracking operations by domestic railroads and trucks. Lower oil prices can also result in lower gas and fuel prices, negatively affecting the dollar amounts of the invoices that Cass processes for its freight and facility customers. In addition, a decline in the price of electricity would also result in lower dollars processed for facility customers. As such, a decline in oil and overall energy prices could have an adverse effect on the Company’s revenues in the form of net interest income and financial fees, and significantly impact its results of operations.

The Company may be adversely impacted by changing freight rates.

The Company is exposed to changes in freight rates, which impact the overall level of accounts and drafts payable, payments in advance of funding and resulting interest income and financial fees. Freight rates are highly sensitive to many factors, including carrier capacity, economic conditions, and other factors beyond the Company's control. A decline in freight rates would be expected to have an adverse effect on the Company's revenues and could significantly impact its result of operations.

Interruptions or performance problems associated with the Company's network technology and infrastructure may adversely affect its business and operating results.

The Company has experienced, and may in the future experience, disruptions, outages, and other performance problems related to its payments platform due to a variety of factors, including infrastructure changes, introductions of new functionality (including functionality that incorporates artificial intelligence tools), human or software errors, denial-of-service attacks, actions or inactions attributable to third parties, earthquakes, hurricanes, floods, fires, natural disasters, power losses, disruptions in telecommunications services, fraud, military or political conflicts, terrorist attacks and other geopolitical unrest, computer viruses, ransomware, malware, or other events. The Company's systems also may be subject to break-ins, sabotage, theft, and intentional acts of vandalism, including by its own employees. Some of the Company's systems are not fully redundant and disaster recovery planning may not be sufficient for all eventualities.

Occasionally, the Company may experience limited periods of server downtime due to server failure or other technical difficulties. In some instances, the Company may not be able to identify the cause or causes of these performance problems

13

Table of Contents

within an acceptable period of time. It may become increasingly difficult to maintain and improve its performance, especially during peak usage times. If the platform is unavailable or if the Company's users are unable to access the Company's platform within a reasonable amount of time, or at all, the Company's business would be adversely affected and its brand could be harmed. In the event of any of the factors described above, or certain other failures of the Company's infrastructure, customer data may be permanently lost and Cass could experience significant losses of revenue.

To the extent that the Company does not effectively address capacity constraints, upgrade systems as needed, and continually develop its payments technology and network architecture to accommodate actual and anticipated changes in technology, the Company's business and operating results may be adversely affected.

Operational difficulties or cybersecurity problems could damage Cass’ reputation and business.

In the ordinary course of business, the Company depends on the reliable operation of its computer operations and network connections from its clients to its systems. Any failure, interruption, or breach in security of these systems would cause Cass to be unable to process transactions for its clients, resulting in decreased revenues. The Company also relies on electronic communications and information systems to store sensitive customer data. Any failure, interruption, breach in security or loss of data, whatever the cause, could reduce client satisfaction with the Company’s products and services, cause reputational harm, and harm Cass’ financial results. These types of threats may derive from human error, fraud or malice on the part of external or internal parties, or may result from accidental technological failure. Further, to access the Company’s products and services, Cass’ customers may use computers and mobile devices that are beyond the Company’s security control systems. The Company’s technologies, systems, networks and software, and those of other financial institutions have been, and are likely to continue to be, the target of cybersecurity threats and attacks, which may range from uncoordinated individual attempts to sophisticated and targeted measures directed at Cass. The risk of a security breach or disruption, particularly through cyber-attack or cyber intrusion, has increased as the number, intensity and sophistication of attempted attacks and intrusions from around the world have increased. Criminals continuously adapt their methods to circumvent existing safeguards, and emerging technologies such as artificial intelligence may further enhance their ability to perpetrate fraud. A material security problem affecting Cass could damage its reputation, deter prospects from purchasing its products and services, deter customers from using its products and services or result in liability to Cass.

Cloud technologies are also critical to the operation of the Company's systems, and reliance on cloud technologies is growing. Service disruptions in cloud technologies may lead to delays in accessing, or the loss of, data that is important to the Company's businesses and may hinder customers access to products and services.

Although the Company makes significant efforts to maintain the security and integrity of Cass’ information systems and has implemented various measures to manage the risk of a security breach or disruption, there can be no assurance that Cass’ security efforts and measures will be effective or that attempted security breaches or disruptions would not be successful or damaging. Even the most well protected information, networks, systems and facilities remain potentially vulnerable because attempted security breaches, particularly cyber-attacks and intrusions, or disruptions will occur in the future, and because the techniques used in such attempts are constantly evolving and generally are not recognized until launched against a target, and in some cases are designed not to be detected and, in fact, may not be detected. Accordingly, the Company may be unable to anticipate these techniques or to implement adequate security barriers or other preventative measures, and thus it is virtually impossible to entirely mitigate this risk. While specific “cyber” insurance coverage is maintained, which would apply in the event of various breach scenarios, the amount of coverage may not be adequate in any particular case. Furthermore, because cyber threat scenarios are inherently difficult to predict and can take many forms, some breaches may not be covered under Cass’ cyber insurance coverage. A security breach or other significant disruption of Cass’ information systems or those related to customers, merchants and third-party vendors, including as a result of cyber-attacks, could (i) disrupt the proper functioning of Cass’ networks and systems and therefore operations and/or those of certain customers; (ii) result in the unauthorized access to, and destruction, loss, theft, misappropriation or release of confidential, sensitive or otherwise valuable information of the Company or its customers; (iii) result in a violation of applicable privacy, data breach and other laws, subjecting the Company to additional regulatory scrutiny and expose Cass to civil litigation, governmental fines and possible financial liability; (iv) require significant management attention and resources to remedy the damages that result; or (v) harm Cass’ reputation or cause a decrease in the number of customers that choose to do business with the Company. The occurrence of any of the foregoing could have a material adverse effect on Cass’ business, financial condition and results of operations.

14

Table of Contents

Cass must respond to rapid technological changes and these changes may be more difficult or expensive than anticipated.

If competitors introduce new products and services embodying new technologies, such as those related to artificial intelligence, more quickly or more successfully than the Company, or if new industry standards and practices emerge, the Company’s existing product and service offerings, technology and systems may become obsolete. Further, if Cass fails to adopt or develop new technologies or to adapt its products and services to emerging industry standards, Cass may lose current and future customers. Finally, Cass’ ability to adopt these technologies can also be inhibited by intellectual property rights of third parties. Any of these could have a material adverse effect on its business, financial condition and results of operations. The payment processing and financial services industries are changing rapidly and in order to remain competitive, Cass must continue to enhance and improve the functionality and features of its products, services and technologies. These changes may be more difficult or expensive than the Company anticipates.

Methods of reducing risk exposures might not be effective.

Instruments, systems and strategies used to hedge or otherwise manage exposure to various types of credit, interest rate, market and liquidity, operational, regulatory/compliance, business risks and enterprise-wide risks could be less effective than anticipated. As a result, the Company may not be able to effectively mitigate its risk exposures in particular market environments or against particular types of risk.

Customer borrowing, repayment, investment, deposit, and payable processing practices may be different than anticipated.

The Company uses a variety of financial tools, models and other methods to anticipate customer behavior as part of its strategic and financial planning and to meet certain regulatory requirements. Individual, economic, political and industry-specific conditions and other factors outside of Cass’ control could alter predicted customer borrowing, repayment, investment, deposit, and payable processing practices. Such a change in these practices could adversely affect Cass’ ability to anticipate business needs, including cash flow and its impact on liquidity, and to meet regulatory requirements.

Competitive product and pricing pressure within Cass’ markets may change.

The Company operates in a very competitive environment, which is characterized by competition from a number of other vendors and financial institutions in each market in which it operates. The Company competes with large payment processors and national and regional financial institutions and also smaller auditing companies and banks in terms of products and pricing. If the Company is unable to compete effectively in products and pricing in its markets, business could decline.

Management’s ability to maintain and expand customer relationships may differ from expectations.

The industries in which the Company operates are very competitive. The Company not only competes for business opportunities with new customers, but also competes to maintain and expand the relationships it has with its existing customers. The Company continues to experience pressures to maintain these relationships as its competitors attempt to capture its customers.

The introduction, withdrawal, success and timing of business initiatives and strategies, including, but not limited to, the expansion of payment and processing activities to new markets, and the expansion of products and services to existing markets, may be less successful or may be different than anticipated.

The Company makes certain projections as a basis for developing plans and strategies for its payment processing and banking products. If the Company does not accurately determine demand for its products and services, it could result in the Company incurring significant expenses without the anticipated increases in revenue, which could result in an adverse effect on its earnings.

In addition, there are risks and uncertainties associated with the introduction of new products and services, including substantial investments of time and resources. The introduction and development of new products and services may not be achieved along expected timelines, or at all, and may not be successful as a result of factors beyond the Company’s control, including regulatory, competition and external market factors. Failure to successfully manage these risks in the development and implementation of new products or services, and failure to integrate such new products and services into

15

Table of Contents

the Company's existing system of internal controls, could have a material adverse effect on its business, financial condition and results of operations.

The Company is subject to liquidity risk.

The Company requires liquidity to meet deposit and accounts and drafts payable obligations as they come due. Access to funding sources in amounts adequate to finance the Company’s commitments and business activities or on terms that are acceptable or favorable to the Company could be impaired by risks and uncertainties that are beyond the Company’s control, including those described in this Item 1A, “Risk Factors” section.

The Company’s access to deposits and accounts and drafts payable for liquidity purposes may also be adversely affected by the needs of the Company’s depositors and customers. A failure to maintain adequate liquidity could have a material adverse effect on the Company’s business, financial condition and results of operations.

The bank failures in 2023 exemplify the potential serious results of the unexpected inability of insured depository institutions to obtain needed liquidity to satisfy deposit withdrawal requests, including how quickly such requests can accelerate once uninsured depositors lose confidence in an institution's ability to satisfy its obligations to depositors. The Company seeks to ensure funding needs are met by maintaining a level of liquidity through asset and liability management. If the Company becomes unable to obtain funds when needed, it could have a material adverse effect on its business, financial condition, and results of operations.

Management’s ability to retain key officers and employees may change.

Cass’ future operating results depend substantially upon the continued service of Cass’ executive officers and key personnel. Cass’ future operating results also depend in significant part upon Cass’ ability to attract and retain qualified management, financial, technical (including with AI experience), marketing, sales, and support personnel. Competition for qualified personnel is intense, and the Company cannot ensure success in attracting or retaining qualified personnel. There may be only a limited number of persons with the requisite skills to serve in these positions, and it may be increasingly difficult for the Company to hire personnel over time. Cass’ business, financial condition and results of operations could be materially adversely affected by the loss of any of its key employees, by the failure of any key employee to perform in his or her current position, or by Cass’ inability to attract and retain skilled employees.

Cass’ stock price can become volatile and fluctuate widely in response to a variety of factors.

The Company’s stock price can fluctuate based on factors that can include actual or anticipated variations in Cass’ quarterly results; new technology or services by competitors; unanticipated losses or gains due to unexpected events, including losses or gains on securities held for investment purposes; significant acquisitions or business combinations, strategic partnerships, joint ventures or capital commitments by or involving the Company or its competitors; changes in accounting policies or practices; failure to integrate acquisitions or realize anticipated benefits from acquisitions; or changes in government regulations.

General market fluctuations, industry factors and general economic and political conditions, such as economic slowdowns or recessions, governmental intervention, interest rate changes, credit loss trends, low trading volume or currency fluctuations also could cause Cass’ stock price to decrease regardless of the Company’s operating results.

Regulatory, Legal and Accounting Risk

The Company is subject to extensive government regulation and supervision and possible enforcement or other legal actions that could detrimentally affect Cass’ business.

The Company is subject to extensive federal and state regulation and supervision, the primary focus of which is to protect customers, depositors, the deposit insurance fund and the safety and soundness of the banking system as a whole, and not shareholders. Regulatory authorities have extensive discretion in connection with their supervisory and enforcement activities and examination policies, including policies with respect to capital levels, the timing and amount of dividend payments, the classification of assets and the establishment of adequate loan loss reserves for regulatory purposes. Failure to comply with applicable laws, regulations, policies or guidance could result in enforcement and other legal actions by federal and state authorities, including criminal and civil penalties, the loss of FDIC insurance, revocation of a banking

16

Table of Contents

charter, and other regulatory sanctions, as well as reputational damage, any of which could have a material adverse effect on the Company’s business, financial condition and results of operations.

Congress and federal regulatory agencies continually review banking laws, regulations and policies for possible changes. The substance and impact of pending or future legislation or regulation, or the application thereof, cannot be predicted, although any change could impact the regulatory structure under which the Company or its competitors operate and may significantly increase costs, impede the efficiency of internal business processes, require an increase in regulatory capital, require modifications to the Company’s business strategy, and/or limit its ability to pursue business opportunities in an efficient manner. A change in statutes, regulations or regulatory policies applicable to the Company or any of its subsidiaries could have a material, adverse effect on the Company’s business, financial condition and results of operations.

See Item 1, “Business—Supervision and Regulation,” and Item 8, Note 3 to the consolidated financial statements included elsewhere in this report for additional information.

The Company may need to raise additional capital or sell assets if it fails to meet regulatory capital requirements or meet commitments and liquidity needs. Such capital may not be available on favorable terms, or at all.

Compliance with regulatory capital requirements could result in management modifying its business strategy and could limit the Company’s ability to make distributions, including paying dividends, or buying back shares.

The Company may also need to raise additional capital in the future to provide it with sufficient capital resources and liquidity to meet commitments and business needs. The ability to raise additional capital, if needed, will depend on, among other things, conditions in the capital markets at that time and the Company’s financial condition, as well as the need for other financial institutions to raise capital at the same time. Economic conditions and the loss of confidence in financial institutions may increase the cost of funding and limit access to certain customary sources of capital, including inter-bank borrowings, repurchase agreements and borrowings from the discount window of the Federal Reserve.

An inability to raise additional capital on acceptable terms when needed could have a materially adverse effect on the Company’s business, financial condition and results of operations.

Legal and regulatory proceedings and related matters with respect to the financial services industry, including those directly involving the Company and its subsidiaries, could adversely affect Cass or the financial services industry in general.

The Company is subject to various legal and regulatory proceedings. It is inherently difficult to assess the outcome of these matters, and there can be no assurance that the Company will prevail in any proceeding or litigation. Any such matter could result in substantial cost and diversion of Cass’ efforts, which by itself could have a material adverse effect on Cass’ financial condition and operating results. Further, adverse determinations in such matters could result in actions by Cass’ regulators that could materially adversely affect Cass’ business, financial condition or results of operations. Please refer to Item 3, “Legal Proceedings.”

The Company’s accounting policies and methods are the basis of how Cass reports its financial condition and results of operations, and they require management to make estimates about matters that are inherently uncertain. In addition, changes in accounting policies and practices, as may be adopted by the regulatory agencies, the Financial Accounting Standards Board, or other authoritative bodies, could materially impact Cass’ financial statements.

The Company’s accounting policies and methods are fundamental to how Cass records and reports its financial condition and results of operations. Management must exercise judgment in selecting and applying many of these accounting policies and methods in order to ensure that they comply with generally accepted accounting principles and reflect management’s judgment as to the most appropriate manner in which to record and report Cass’ financial condition and results of operations. In some cases, management must select the accounting policy or method to apply from two or more alternatives, any of which might be reasonable under the circumstances yet might result in the Company reporting materially different amounts than would have been reported under a different alternative.

Cass has identified one accounting policy around the calculation of the allowance for credit losses as being “critical” to the presentation of its financial condition and results of operations because it requires management to make particularly subjective and/or complex judgments about matters that are inherently uncertain and because of the likelihood that materially different amounts would be reported under different conditions or using different assumptions. More

17

Table of Contents

information on Cass’ critical accounting policies is contained in Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations.”

From time to time, the regulatory agencies, the Financial Accounting Standards Board (“FASB”), and other authoritative bodies change the financial accounting and reporting standards that govern the preparation of the Company’s financial statements. These changes can be hard to predict and can materially impact how management records and reports the Company’s financial condition and results of operations.

Cass is subject to examinations and challenges by tax authorities, which, if not resolved in the Company’s favor, could adversely affect the Company’s financial condition and results of operations.

In the normal course of business, Cass and its affiliates are routinely subject to examinations and challenges from federal, state, and foreign tax authorities regarding the amount of taxes due in connection with investments it has made and the businesses in which it is engaged. The challenges made by tax authorities may result in adjustments to the timing or amount of taxable income or deductions or the allocation of income among tax jurisdictions. If any such challenges are made and are not resolved in the Company’s favor, they could have an adverse effect on Cass’ financial condition and results of operations.

General Risks

The value of the Company's goodwill and other intangible assets may decline in the future.

As of December 31, 2025, the Company had $19.9 million of goodwill and other intangible assets. A significant decline in the Company's expected future cash flows, a significant adverse change in the business climate, slower growth rates or a significant and sustained decline in the price of the Company's common stock may necessitate taking charges in the future related to the impairment of goodwill and other intangible assets which could have a material adverse effect on the Company's financial condition and results of operations.

Climate change could have a material negative impact on the Company and its clients.

There is an increasing concern over the risks of climate change and related environmental sustainability matters. The physical risks of climate change include discrete events, such as flooding, hurricanes, and wildfires, and longer-term shifts in climate patterns, such as extreme heat, sea level rise, and more frequent and prolonged drought. Under medium or longer-term scenarios, such events, if uninterrupted or unaddressed, could disrupt the Company's operations or those of its customers or third parties on which it relies, including through direct damage to assets and indirect impacts from supply chain disruption and market volatility. Additionally, transitioning to a low-carbon economy may entail extensive policy, legal, technology, and market initiatives. Transition risks, including changes in consumer preferences and additional regulatory requirements or supervisory expectations or taxes, could increase the Company's expenses and undermine its strategies. In addition, the Company's reputation and client relationships may be damaged as a result of its practices related to climate change, including its involvement, or its customers’ involvement, in certain industries or projects, in the absence of mitigation and/or transition measures, associated with causing or exacerbating climate change, as well as any decisions the Company makes to continue to conduct or change its activities in response to considerations relating to climate change.