EVERTEC, Inc. (EVTC) Business

Item 1. Business

Except as otherwise indicated or unless the context otherwise requires, (a) the terms “EVERTEC,” “we,” “us,” “our,” “our Company” and “the Company” refer to EVERTEC, Inc. and its subsidiaries on a consolidated basis and, (b) the term “EVERTEC Group” refers to EVERTEC Group, LLC and its predecessor entities and their subsidiaries on a consolidated basis. EVERTEC Inc.’s subsidiaries include Holdings, EVERTEC Group; EVERTEC Dominicana, SAS; Evertec Chile Holdings SpA; Evertec Chile SpA; Evertec Chile Global SpA; Evertec Chile Servicios Profesionales SpA; Paytrue S.A.; Caleidon; S.A.; Evertec Brasil Solutions Informática S.A. ("EVERTEC BR"); EVERTEC Panamá, S.A.; EVERTEC Costa Rica, S.A. (“EVERTEC CR”); Zunify Payments Ltda; EVERTEC Guatemala, S.A.; Evertec Colombia, SAS;, EVERTEC USA, LLC; OPG Technology Corp.; Evertec Placetopay, SAS ("PlacetoPay"); BBR Chile, SpA and BBR Perú, S.A.C.,(collectively "BBR"); Paysmart Pagamentos Eletronicos Ltda, Issuer Holding Ltda. and Issuer Instituição de Pagamentos Ltda (collectively "paySmart"); EVERTEC México Servicios de Procesamiento, S.A. de C.V.; Sinqia S.A.,Torq. Inovação Digital Ltda, Sinqia Tecnologia Ltda., Homie do Brasil Informática S.A., Rosk Software S.A., Lote 45 Participações S.A., and Compliasset S.A. (collectively "Sinqia"); Grandata, Inc., Grandata Mexico, S.A. de C.V., Grandata USA, Inc. and Big Data Analytics SA (collectively "Grandata"); and Nubity S.R.L., Nubity Inc., Nubity Cloud, S.A.P.I. de C.V. (collectively "Nubity") and Tecnobank Tecnologia Bancária S.A. (“Tecnobank”). Neither EVERTEC nor EVERTEC Intermediate Holdings, LLC conducts any operations other than with respect to its indirect or direct ownership of EVERTEC Group.

Company Overview

EVERTEC is a leading full-service transaction-processing business and financial technology provider in Latin America, Puerto Rico and the Caribbean, providing a broad range of merchant acquiring, payment services and business solutions. We believe we are one of the largest merchant acquirers in Latin America based on total number of transactions and we also believe we are the largest merchant acquirer in the Caribbean. We serve 26 countries out of 24 offices, including our headquarters in Puerto Rico. We own and operate the ATH network, which we believe is one of the leading debit networks in Latin America. We process over ten billion transactions annually through a system of electronic payment networks in Puerto Rico and Latin America and provide a comprehensive suite of services for core banking, cash processing, fulfillment in Puerto Rico and a "one stop shop" set of products for the financial sector in Latin America, which include solutions such as core banking, investments, asset management, pension funds and consortium. Additionally, we offer managed services, managed security services and payment transactions fraud monitoring to all the regions where we do business. We serve a diversified customer base of leading financial institutions, merchants, corporations, and government agencies with “mission-critical” technology solutions that enable them to issue, process and accept transactions securely. We believe our business is well-positioned to continue to expand across the fast-growing Latin America region.

We are differentiated, in part, by our diversified business model, which enables us to provide our varied customer base with a broad range of transaction-processing services from a single source across numerous channels and geographic markets. We believe this capability provides several competitive advantages that will enable us to continue to penetrate our existing customer base with complementary new services, gain new customers, develop new sales channels, and enter new markets. We believe these competitive advantages include:

•Our ability to provide competitive products;

•Our ability to provide in one package a range of services that traditionally had to be sourced from different vendors;

•Our ability to serve customers with disparate operations in several geographies with technology solutions that enable them to manage their business as one enterprise; and

•Our ability to capture and analyze data across the transaction-processing value chain and use that data to provide value-added services that are differentiated from those offered by pure-play vendors that serve only one portion of the transaction-processing value chain (such as only merchant acquiring or only payment services).

Our broad suite of services spans the entire payment processing value chain and includes a range of front-end customer-facing solutions such as the electronic capture and authorization of transactions at the point-of-sale for both card present transactions and card-not-present transactions, as well as back-end support services such as the clearing and settlement of transactions and account reconciliation for card issuers. These include: (i) merchant acquiring services, which enable point of sales (“POS”) and e-commerce merchants to accept and process electronic methods of payment such as debit, credit, prepaid and electronic benefit transfer (“EBT”) cards; (ii) payment processing services, which enable financial institutions and other issuers to manage, support and facilitate the processing for credit, debit, prepaid, automated teller machines (“ATM”) and EBT card programs; and (iii) business process management solutions, which provide “mission-critical” technology solutions such as core bank processing, as well as IT outsourcing and cash management services to financial institutions, corporations and governments.

4

Table of Contents

We provide these services through scalable, end-to-end technology platforms that we manage and operate in-house and that generate significant operating efficiencies that enable us to maximize profitability.

We sell and distribute our services primarily through a proprietary direct sales force with established customer relationships. We continue to pursue joint ventures and merchant acquiring alliances. We benefit from an attractive business model, the hallmarks of which are recurring revenue, scalability, significant operating margins and moderate capital expenditure requirements. Our revenue is predominantly recurring in nature because of the mission-critical and embedded nature of the services we provide. In addition, we generally enter into multi-year contracts with our customers. We believe our business model should enable us to continue to grow our business organically in the primary markets we serve without significant incremental capital expenditures.

For the year ended December 31, 2025, approximately 29% of our revenue was generated from our relationship with Popular. The revenue concentration with Popular makes our MSA with them our most significant client contract.

See “Part II, Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations—Factors and Trends Affecting the Results of Our Operations—Relationship with Popular.”

Recent Acquisitions

On October 1, 2025, Evertec Brasil Informática S.A. (“Evertec BR”), a wholly-owned subsidiary of EVERTEC, Inc., completed the purchase of 75% of the share capital of Tecnobank Tecnologia Bancária S.A. (“Tecnobank”). Tecnobank is a leading fintech vendor in Brazil’s digital vehicle financing contract registration sector.

We plan on leveraging our existing client base to accelerate the growth of this acquisition similar to what we have been able to do with other business acquisitions.

Industry Trends

Accelerated Shift to Digital Payment Methods

In recent years, consumer preference has accelerated its shift away from cash and paper payment methods, noting increased demand for omni-channel payment services that facilitate cashless and contactless transactions. The ongoing migration to digital payment methods continues to benefit the transaction-processing industry globally. Technologies such as contactless payments, QR codes, tap-on-phone, mobile commerce, “e-wallets” and advanced and smart POS devices continue to drive the shift away from cash and other traditional payment methods. The Company has benefited from an increase in transaction volumes for these types of payment solutions. As consumers and merchants increase demand for contactless and mobility-based solutions, the Company has continued to innovate and invest, expanding the footprint and functionality of digital solutions such as PlacetoPay (e-commerce gateway), our wallet ATH Movil and ATH Business, and PayStudio our issuing and acquiring processing platform. Additionally, aligned with this trend, the Company has also developed multiple channel options to connect to Brazil's fastest instant money transfer system called PIX. We believe that the ongoing shift to digital payments will continue to generate substantial growth opportunities for our business.

Fast Growing Latin American and Caribbean Financial Services and Payments Markets

The markets in which we operate, particularly in the Latin America region, continue to grow as consumers and businesses adopt digital payment schemes. Innovation and the introduction of new payment methods, such as digital wallets and QR codes, has also boosted the use of non-cash methods of payment. According to the 2026 World Payments report, Latin America has a projected CAGR of 17.4% over the next five years. Additionally, Latin America grew 22.4% from 2024 to 2025, fueled by mobile-first economies, regional real-time payments adoption, and digital commerce. Non-cash transaction volumes are expected to grow to 383.1 million in 2029 from 140.3 million in 2023 according to the 2026 World Payments report. The region’s fintech sector is also driving change via new contactless payment technologies that are becoming popular alternatives to cash payments. We continue to believe that the attractive characteristics of our markets and our position across multiple services and sectors will continue to drive growth and profitability in our businesses.

Ongoing Technology Outsourcing Trends

We benefit from the trend of financial institutions and government agencies outsourcing technology systems and processes. Financial institutions globally are facing significant challenges including the entrance of non-traditional competitors, the compression of margins on traditional products, significant channel proliferation and increasing regulation that could

5

Table of Contents

potentially curb profitability. Many of these institutions have traditionally fulfilled their IT needs through legacy computer systems, operated by the institution itself. Legacy systems are generally highly proprietary, inflexible, and costly to operate and maintain. Many medium and small-size institutions in the Latin American markets in which we operate have outdated computer systems and updating these legacy systems is financially and logistically challenging, which presents a business opportunity for the Company.

Our Competitive Strengths

Market Leadership in Latin America and the Caribbean

We believe we have an inherent competitive advantage relative to competitors based on our first-hand knowledge of the Latin American and Caribbean markets and technology needs, language, and culture. We have built leadership positions across the transaction-processing value chain and the financial technology space in the key geographic markets that we serve, which we believe will enable us to continue to penetrate our core markets and provide advantages to enter new ones. We own and operate the ATH network, which we believe is one of the leading debit networks in Latin America. According to management’s estimates, ATH branded products are the most frequently used electronic method of payment in Puerto Rico. We own Sinqia, which we believe is one of the leading providers of technology for financial institutions in Brazil. Our scale and customer base of top tier financial institutions and government entities ensures we are the leading card issuer and core bank processors in the Caribbean and the only non-bank provider of cash processing services to the U.S. Federal Reserve in the Caribbean. We believe our competitive position and brand recognition increases card acceptance, driving usage of our proprietary network, and presents opportunities for future strategic relationships.

Broad and Deep Customer Relationships and Recurring Revenue Business Model

We have built a strong and long-standing portfolio of financial institution, merchant, fintech, corporate and government customers across Latin America and the Caribbean, which provides us with a reliable, recurring revenue base and powerful references that have helped us expand into new businesses, new channels and geographic markets. Most of the revenue generated from each of our segments, Payment Services - Puerto Rico & Caribbean, Latin America Payments and Solutions and Merchant Acquiring segments, as well as certain business lines representing the majority of our Business Solutions are recurring in nature. We receive recurring revenues from services based on our customers’ on-going daily commercial activity such as hosting accounts and information on our servers, processing financial products (credits, investments, foreign exchange, mutual funds, consortium) and processing everyday payments at grocery stores, gas stations and similar establishments. We generally provide these services under one to six-year contracts, often with automatic renewals. We also provide a few project-based services that generate non-recurring revenues in our Business Solutions segment and our Latin America Payments and Solutions segment, such as IT consulting for a specific project or integration or one-time license sales. Additionally, we provide a number of critical payment services, core banking services, managed services and managed security services to Popular as part of the A&R MSA through September 2028 and benefit from the bank’s distribution network and continued support. Through our long-standing and diverse customer relationships, we can gain valuable insight into trends in the marketplace that allows us to identify new market opportunities. In addition, we believe the recurring nature of our business model provides us with revenue and earnings stability.

Highly Scalable, End-to-End Technology Platform

Our diversified business model is supported by our scalable, end-to-end technology platforms that allow us to provide a broad range of transaction-processing services and develop and deploy technology solutions for our customers at low incremental costs and increasing operating efficiencies. We have spent over $404 million over the last five years on technology investments, including POS terminals, enhancements to the functionality and capacity of our platforms and we have been able to achieve attractive economies of scale with flexible product development capabilities. We believe that our platforms will allow us to provide differentiated services to our customers and facilitate further expansion into new sales channels and geographic markets.

Experienced Management Team with a Strong Track Record of Execution

We have grown our revenue organically and inorganically which has enabled us to introduce new products and services and expand our geographic footprint throughout Latin America. We have a proven track record of creating value from operational and technology improvements and capitalizing on cross-selling opportunities. EVERTEC’s management team brings many years of industry experience, with long-standing leadership at the operating business level and collectively benefits from an

6

Table of Contents

average of over 20 years of industry experience. We believe our leadership team is well positioned to continue to drive growth across business lines and regions.

Our Growth Strategy

We intend to grow our business by continuing to execute on the following business strategies:

Continue Cross-Sales to Existing Customers

We seek to grow revenue by selling additional products and services to our existing merchant, financial institution, corporate and government customers. We intend to broaden and deepen our customer relationships by leveraging our full suite of end-to-end technology solutions. We have also been successful exporting our regional products into the different markets in which we operate, tailoring to the specific needs and regulatory environments of each. We continue to believe that there is opportunity to cross-sell our financial technology solutions and our payment products. We will also seek to continue to cross-sell value-added services into our existing client base.

Leverage Our Franchise to Attract New Customers in the Markets We Currently Serve

We intend to attract new customers by leveraging our comprehensive product and services offering, the strength of our brand and our leading end-to-end technology platform. Furthermore, we believe we are well positioned to develop new products and services and take advantage of our access and position in markets we currently serve. For example, in markets we serve outside of Puerto Rico, we believe there is a good opportunity to penetrate small to medium and some larger financial institutions, fintech companies and medium to large retailers with our products and services.

Expand in the Latin America Region

We believe there is an opportunity to expand our businesses in Latin America, both organically through new business wins and inorganically through mergers and acquisitions. We believe that we have a competitive advantage relative to our peers based on our first-hand knowledge of the Latin American and Caribbean markets and their technological needs, our physical presence in the region, language, and culture. We believe significant growth opportunities exist in several large markets such as Brazil, Colombia, México, and Chile, as well as in smaller markets in Central America where expanding our presence could have a significant impact on our growth. We also believe that there is an opportunity to provide our services to existing fintech and financial institution customers in other regions where they operate. We continually evaluate our strategic plans for geographic expansion, which can be achieved through joint ventures, partnerships, or alliances and the pursuit of business acquisitions.

Develop New Products and Services

At the core of EVERTEC’s value proposition is innovation. We must take advantage of the changing consumer and market dynamics and build innovative solutions for our clients. Our close relationship with customers and deep understanding of the markets where we operate, together with a proprietary intellectual property around our products and offerings, allow EVERTEC to continuously explore and develop new products and services that tend to our customer’s needs.

We plan to continue investing and growing our merchant, financial institution, fintech, corporate and government customer base by investing in core products, including (i) processing platforms, such as Paystudio, (ii) data and fraud management solutions, such as Risk Center, Scudo and 3DS, (iii) merchant capture channels, such as ATH Movil for person-to-person, and person-to-merchant digital transactions, PVOT for Smart POS and Placetopay for card-not-present and omni-channel experiences, (iv) Sinqia suite of products for financial institutions. We also invest in value-added services such as API enablement, tokenization, loyalty, digital on-boarding, artificial intelligence and predictive models. We intend to continue to focus on these and some of the new products added to our portfolio thru acquisitions to take advantage of our leadership position in the transaction-processing and financial services industry in the Latin American and Caribbean region.

Our Business

We offer our customers end-to-end products and solutions across the transaction-processing value chain from a single source across numerous channels and geographic markets, as further described below.

Payment Services

7

Table of Contents

Our merchant acquiring business provides services to merchants that allow them to accept electronic methods of payment such as debit, credit, prepaid and EBT cards carrying the ATH, Visa, MasterCard, Discover and American Express brands. We offer a full suite of merchant acquiring services that includes, but is not limited to, the underwriting of each merchant’s contract, the deployment and rental of POS devices and other equipment necessary to capture merchant transactions, the processing of transactions at the point-of-sale, processing of transactions digitally through our online payment gateway, the settlement of funds with the participating financial institution, detailed sales reports, and customer support. We also offer integrated and semi-integrated payment solutions to our merchants, which either connect to or convert their existing cash registers into points-of-sale that allow them to capture payment transactions using EVERTEC rails, consolidating payment transactions in a single device.

We provide financial institutions and fintechs with processing, network and financial technology solutions and we believe we are the largest card processor and card network service provider in the Caribbean. Our main service offerings include authorization, switching, settlement, issuer credit and debit card processing, acquiring processing, and management and monitoring of ATMs and POS. At the point-of-sale, we sell transaction-processing technology solutions, similar to the services in our merchant acquiring business, to other merchant acquirers enabling them to service their own merchant customers. Additionally, through our payment gateway, we allow merchants to capture and process digital transactions. We also offer terminal driving solutions to merchants, merchant acquirers (including our merchant acquiring business) and financial institutions, which provide the technology to securely operate, manage and monitor POS terminals and ATMs. We also rent POS devices to financial institution customers who seek to deploy them across their own businesses. For our processing services, revenues are primarily driven by the number of transactions processed and the number of accounts on file / system (card accounts in the case of Issuers, merchant accounts in the case of Acquirers). These services provide our clients with the technology necessary to facilitate the processing and routing of payments across the transaction-processing value chain. We also provide value adding services for payment transactions such as fraud monitoring, management and control.

To enable financial institutions, governments and other businesses to issue and operate a range of payment products and services, we offer an array of card processing and other payment technology services, such as bill payment systems and EBT solutions. Financial institutions and certain retailers outsource to us certain card processing services such as card issuance, processing card applications, cardholder account maintenance, transaction authorization and posting, high volume payment processing fraud and risk management services, and settlement. Our payment products include electronic check processing, automated clearing house (“ACH”), lockbox, interactive voice response and web-based payments through personalized websites, among others.

To connect the merchants to card issuers, we own and operate the ATH network, which we believe is one of the leading PIN debit networks in Latin America. The ATH network connects the merchant or merchant acquirer to the card issuer and enables transactions to be routed or “switched” across the transaction-processing value chain. The ATH network offers the technology, communications standards, rules and procedures, security and encryption, funds settlement and common branding that allow consumers, merchants, merchant acquirers, ATMs, card issuer processors and card issuers to conduct commerce seamlessly, across a variety of channels, similar to the services provided by Visa and MasterCard. We also own and operate ATH Movil and ATH Movil Business which is an ATH network product that allows individuals to (i) transfer money instantly to other individuals and merchants using only their phone number, and (ii) transfer money between an individual’s registered cards. ATH Business enables businesses through the download of the application to accept payments instantly for their services or products from individuals with ATH Movil in real time and to donate to non-profit organizations.

Our EBT application allows certain agencies to deliver government benefits to participants through a magnetic card system in Puerto Rico.

Business Solutions

We serve our financial institutions, corporate and government customers with a wide suite of business process management solutions, some of which used to provide financial products in areas such as core banking, credit, investments, payments, foreign exchange, mutual funds, pension funds and consortium, in addition to software used to execute processes such as digital onboarding, digital signature and digital collection, as well as network hosting and management, IT consulting, business process outsourcing, item and cash processing, and fulfillment. In addition, we believe we are the only non-bank provider of cash processing services to the U.S. Federal Reserve in the Caribbean as well as the leading provider of a "one stop shop" set of products for the financial sector in Brazil.

With the acquisition of Tecnobank, we entered a new regulated market in Brazil. Tecnobank operates as a trusted third party between lending institutions (banks, credit organizations, etc.) and state traffic departments. When a loan secured by a vehicle is originated, the lender submits the contract to Tecnobank. Tecnobank verifies the legitimacy of the contract and, once validated, instructs the traffic department to record a restriction in the vehicle documentation, preventing its sale until the loan is fully repaid.

8

Table of Contents

Competition

Competitive factors impacting the success of our services include the quality of the technology-based application or service, application features and functions, ease of delivery and integration, ability of the provider to maintain, enhance and support the applications or services, and price. We believe that we compete well in each of these categories. In addition, we believe that scale and financial institution industry expertise, combined with our ability to offer multiple applications, services and integrated solutions to individual customers, enhances our competitiveness against companies with more limited offerings and helps us compete with large global competitors with similar assets to ours.

In payment services, we compete with several other third-party card processors, debit networks, and financial technology providers, including Tecnocom Telecomunicaciones y Energía, S.A., Galileo Financial Technologies, LLC, Marqeta, Inc., Fidelity National Information Services, Inc., Fiserv, Inc., Total System Services, Inc., MasterCard, Inc., Visa, Inc., American Express, Discover, Global Payments, Inc., dLocal Corp. LLP., Rappi Inc. and PayPal Holdings, Inc. Also, card associations and payment networks are increasingly offering products and services that compete with our products and services. The main competitive factors are price, system performance and reliability, system functionality, security, service capabilities and disaster recovery and business continuity capabilities. In merchant acquiring, we compete with several other service providers and financial institutions that are either in our markets or represented through Independent Sales Organizations (“ISO”), including Fidelity National Information Services, Inc., Fiserv, Inc., Global Payments, Inc., Elavon, Inc., PayPal Holdings, Inc., Block, Inc., and some local banks. Also, the card associations and payment networks are increasingly offering products and services that compete with ours. The main competitive factors are price, reliability of service, brand awareness, strength of the relationship with financial institutions, system functionality, integration service capabilities and innovation. Our business is also impacted by the expansion of new payments methods and devices, card association business model expansion, and bank consolidation.

In business solutions, our main competition includes internal technology departments within financial institutions, retailers, data processing or software development departments of large companies, large technology and consulting companies, and/or financial technology providers, such as Fidelity National Information Services, Inc., Jack Henry & Associates, Inc., CGI Inc., HCL Technologies Limited, and Fiserv, Inc., Totvs S.A., and Stefanini S.A. The main competitive factors are organizational capabilities, portfolio comprehensiveness, price, system performance and reliability, system functionality, security, service capabilities, and disaster recovery and business continuity capabilities.

Intellectual Property

We own numerous registrations for several trademarks in different jurisdictions, pursue the registration of domain names for websites that we use and that we consider material to the marketing of our products, including the evertecinc.com domain, and own or have licenses to use certain software and technology, which are critical to our business and future success. For example, we own the ATH and EVERTEC trademarks in several jurisdictions, which are associated by the public, financial institutions and merchants with high quality and reliable electronic commerce, payments, and debit network solutions and services. Such goodwill allows us to be competitive, retain our customers and expand our business. Further, we also use a combination of (i) proprietary software, and (ii) duly licensed third-party software to operate our business and deliver secure and reliable products and services to our customers. The licensed software is subject to terms and conditions that we consider within the industry standards. Most are perpetual licenses, and the rest are term licenses with renewable terms. In addition, we monitor these license agreements and maintain close contact with our suppliers to ensure their continuity of service.

We seek to protect our intellectual property rights by securing appropriate statutory intellectual property protection in the relevant jurisdictions. We also protect proprietary know-how and trade secrets through our confidentiality policies, licenses, programs, and contractual agreements. However, we cannot guarantee that all applicable parties have executed such agreements. Such agreements can also be breached, and we may not have adequate remedies for such breach.

Intellectual property laws, procedures, and restrictions provide only limited protection, and any of our intellectual property rights may be challenged, invalidated, circumvented, infringed, misappropriated, or otherwise violated. Furthermore, the laws of certain countries do not protect intellectual property and proprietary rights to the same extent as the laws of the United States, and we therefore may be unable to protect our proprietary technology in certain jurisdictions.

Despite our efforts to protect our proprietary rights, unauthorized parties may attempt to copy or obtain and use our technology to develop products and services with the same functionality as our products. Policing unauthorized use of our technology is

9

Table of Contents

difficult. Our competitors could also independently develop technologies like ours, and our intellectual property rights may not be broad enough for us to prevent competitors from selling products and services incorporating those technologies.

People and Culture

On December 31, 2025, we had approximately 5,327 employees, 45% located in Brazil, 23% in Puerto Rico and the United States, and 32% located across Latin America and the Caribbean, including the Dominican Republic, Mexico, Guatemala, Costa Rica, Panama, Colombia, Chile, Peru, Argentina and Uruguay.

In Brazil, we have approximately 2,330 unionized employees covered by industry-specific collective agreements. These agreements align with both industry standards and Brazilian labor laws to establish a fair and transparent framework for employment. We believe they contribute to a positive and collaborative work environment, supporting the overall success and sustainability of our operations in Brazil.

None of our other employees are otherwise represented by any labor organization. Our company has maintained a strong record of operational continuity, having never experienced any work stoppages related to employee matters. By fostering open communication, proactive engagement, and fair employment practices, we strive to create an environment where employee concerns are addressed promptly and effectively.

Inclusion and Belonging

Our culture is built on our core values, including a strong commitment to inclusion and belonging, an essential driver of innovation and brilliant ideas. We strive to integrate, leverage, and promote a sense of belonging across generations, cultures, abilities, and lifestyles to develop creative solutions that address our client's needs, while positively impacting our communities and business outcomes.

We foster an inclusive culture across our people, products, and services. Our regional model enables us to incorporate a variety of perspectives, ensuring that mindsets from a variety of backgrounds are reflected in our business strategies and decisions.

We estimate our workforce is approximately 34% female and approximately 66% male, and we believe our female representation is above the technology industry average. Additionally, due in large to the location of our employee base, approximately 99.79% of our employees and 99.86% of our managers are Hispanic or Latino.

Additionally, we periodically conduct gender gap pay analyses for our employee population.

Employee Engagement

Fostering strong employee engagement is a key component of our high-performance culture. We take a multifaceted approach to creating an environment where our workforce feels valued, heard, and motivated. Regular employee surveys are central to our strategy, providing a structured platform to gather feedback on various aspects of the workplace, including job satisfaction, communication, and opportunities for growth.

Additionally, our internal newsletters on Evertec’s intranet are thoughtfully curated to feature relevant content, recognizing achievements, highlight milestones, and spotlighting employee contributions. Continuous team meetings and town halls further facilitate open communication, allowing for transparent discussions about company goals, challenges, and future initiatives.

As part of our commitment to recognizing and rewarding excellence, we have an employee recognition program called "Valoro". This program includes a platform that allows us to acknowledge employees for their outstanding work and embodiment of our corporate values. Also, twice per year, we recognize employees who perform exceptionally in special projects. Additionally, we honor our top talent with the prestigious Chairman Award, the highest recognition within the Company, celebrating our top talent.

By combining these initiatives, we aim to foster a dynamic and inclusive environment that promotes employee engagement, fosters a sense of community, and empowers our team members to actively contribute to the success of the organization. We strive to continually refine and expand these efforts to promote the overall well-being of the organization.

Recruiting and Development Initiatives

Evertec actively aims to draw from the broadest feasible talent pool, regardless of background, and is an equal opportunity employer, committed to hiring the most qualified candidates for available positions. We promote based on merit. The Company

10

Table of Contents

currently offers a hybrid (on site/remote) work environment to most of our workforce, in order to provide flexibility for our employees.

Evertec is dedicated to equipping our employees with the tools they need for career development. Our Evertec University platform offers learning opportunities to our workforce, featuring a curriculum that includes both online courses and external training. As part of our organizational development framework, we have developed a leadership program that includes a 360-degree assessment, feedforward sessions, a leadership on-boarding program and a leadership academy. The Talent Development program identifies emerging leaders within the organization and equips them with training and development opportunities to prepare them as successors for senior management. Aligned with our Wellness core value, as part of our health and wellness educational programs, we offer company wide health and safety educational sessions, with on-site clinics and external health consultations by healthcare professionals.

Our People and Culture values are aligned with our commitment to environmental, social and governance (ESG) principles. For more information, refer to our 2025 ESG Summary available on our website at https://ir.evertecinc.com/ESG as well as Vision, Mission and Values section in our most recent proxy statement. Nothing on our website shall be deemed incorporated by reference into this Report.

Government Regulation and Payment Network Rules

Examinations

As a technology service provider to financial institutions, we are also subject to regulatory oversight and examination by the Federal Financial Institutions Examination Council (the “FFIEC”), an interagency body of federal financial regulators that includes the Board of Governors of the Federal Reserve System (known as the Federal Reserve Board). The Federal Deposit Insurance Corporation and the office of the Commissioner of Financial Institutions of Puerto Rico also participate in such examinations by the FFIEC. In addition, independent auditors annually review several of our operations to provide reports on internal controls for our clients’ auditors and regulators. We are also subject to examinations from regulatory bodies in all other regions in which we operate.

Regulatory Reform and Other Legislative Initiatives

The payment card industry is subject to scrutiny from lawmakers and regulators. The Dodd-Frank Wall Street Reform and Protection Act (the “Dodd-Frank Act”) set forth significant structural and other changes to the regulation of the financial services industry, including the establishment of the Consumer Financial Protection Bureau (the “CFPB”). The CFPB has broad supervisory, enforcement and rulemaking authority over consumer financial products and services (including many offered by us and by our clients) and certain bank and non-bank providers of such products and services. In addition, Section 1075 of the Dodd-Frank Act (commonly referred to as the “Durbin Amendment”) imposes restrictions on card networks and debit card issuers. More specifically, the Durbin Amendment provides that the interchange transaction fees that a card issuer or payment network may receive or charge for an electronic debit transaction must be “reasonable and proportional” to the cost incurred by the card issuer in authorizing, clearing, and settling the transaction.

The Durbin Amendment currently has capped debit interchange that an issuer may receive (unless such issuer is otherwise exempt). The Durbin Amendment is subject to revision by the Federal Reserve and any future revisions may lower the maximum interchange fee which could impact our business. In addition, the Federal Reserve could also revise rules requiring that issuers enable at least two unaffiliated payment card networks on their debit cards without regard to authentication method; and prohibiting card issuers and payment card networks from entering into exclusivity arrangements for debit card processing, as well as restricting card issuers and payment networks from inhibiting the ability of merchants to direct the routing of debit card transactions over networks of their choice.

The CFPB is responsible for many of the regulatory functions with respect to consumer financial products and services. In addition to rulemaking authority over several enumerated federal consumer financial protection laws, the CFPB is authorized to issue rules prohibiting unfair, deceptive, or abusive acts or practices in connection with the offering of a consumer financial product or service or any transaction with a consumer for such product or service. The CFPB also has authority to examine supervised entities for compliance with, and to enforce violations of, consumer financial protection laws.

We are subject to the supervision, enforcement, and rulemaking authority of the CFPB as a nonbank and as a service provider to insured depository institutions with $10 billion or more in total consolidated assets and to larger participants in markets for consumer financial products and services. CFPB rules, examinations and enforcement actions now and as they may be enacted in the future may require us to adjust our activities and may increase our compliance costs.

11

Table of Contents

From time to time, various legislative initiatives are introduced in Congress and state legislatures, and changes in regulations or agency policies, or in the interpretation of such regulations and policies, are proposed by regulatory agencies. Such legislation or changes in regulation could affect our operating environment in substantial and unpredictable ways. If adopted, such legislation or changes in regulation could increase the cost of doing business. We cannot predict whether any such legislation will be enacted, and, if enacted, the effect that it, or any implementing regulations or related policies and guidance, would have on our financial condition or results of operations.

Other Government Regulations

Our services are also subject to a broad range of complex federal, state, and foreign regulation, including privacy laws, international trade regulations, anti-money laundering laws, anti-trust and competition laws, the U.S. Internal Revenue Code, the PR Code, the Employee Retirement Income Security Act, the Health Insurance Portability and Accountability Act and other laws and regulations. Failure of our services to comply with applicable laws and regulations could result in restrictions on our ability to provide such services, as well as the imposition of civil fines and/or criminal penalties. The principal areas of regulation (in addition to the ones described above) that impact our business are described below.

Privacy and Information Security Regulations

We and our financial institution clients are required to comply with various U.S. state, federal and foreign privacy laws and regulations, including those imposed under the Gramm-Leach-Bliley Act of 1999 which applies directly to a broad range of financial institutions and to companies that provide services to financial institutions. These laws and regulations place restrictions on the collection, processing, storage, use and disclosure of certain personal information, require disclosure to individuals of detailed privacy practices and provide them with certain rights to prevent the use and disclosure of protected information. The regulations, however, permit financial institutions to share information with non-affiliated parties who perform services for the financial institutions. These laws also impose requirements for safeguarding personal information through the issuance of data security standards or guidelines. Certain state laws impose similar privacy obligations, as well as, in certain circumstances, obligations to provide notification to affected individuals, states officers and consumer reporting agencies, as well as businesses and governmental agencies that own data, of security breaches of computer databases that contain personal information. In addition, U.S. state and federal government agencies have been contemplating or developing new initiatives to safeguard privacy and enhance data and information security. Some foreign privacy laws may be stricter than those applicable under U.S. federal, state, or Puerto Rican law. The Brazilian General Data Protection Law contains specific provisions and requirements related to the processing, collection, storage and use of personal data of individuals in Brazil. As a provider of services to financial institutions, we are required to comply with applicable privacy and cybersecurity regulations and are bound by the same limitations on disclosure of the information received from our customers as applied to the financial institutions themselves. See “Part I, Item 1A. Risk Factors—Risks Related to Our Business—We are subject to security breaches or other confidential data theft from our systems, which can adversely affect our reputation and business.”

Anti-Money Laundering and Office of Foreign Assets Control Regulation

Since we provide data processing services to both foreign and domestic financial institutions, we are required to comply with certain anti-money laundering and terrorist financing laws and economic sanctions imposed on designated foreign countries, nationals, and others. Certain of our services must adhere to the requirements of the Bank Secrecy Act, as amended by the USA PATRIOT Act of 2001 (collectively, the “BSA”) regarding processing and facilitation of financial transactions, as well as other state, local and foreign laws relating to money laundering. Furthermore, as a data processing company that provides services to foreign parties and facilitates financial transactions between foreign parties, we are obligated to screen transactions for compliance with the sanctions programs administered by the U.S. Department of the Treasury’s Office of Foreign Assets Control (“OFAC”). These regulations prohibit us from entering into or facilitating a transaction to or from or dealings with specified countries, their governments and, in certain circumstances, their nationals and others, such as narcotics traffickers and terrorists or terrorist organizations designated by the U.S. Government under one or more sanctions regimes.

A major focus of governmental policy in recent years has been aimed at combating money laundering and terrorist financing. Preventing and detecting money laundering and other related suspicious activities at their earliest stages warrants careful monitoring. Anti-money laundering laws impose various reporting and record-keeping requirements concerning currency and other types of monetary instruments. Similar anti-money laundering, counter-terrorist financing and proceeds of crime laws apply to movements of currency and payments through electronic transactions and to dealings with persons specified on lists maintained by organizations similar to OFAC in several other countries and which may impose specific data retention obligations or prohibitions on intermediaries in the payment process. These laws and regulations impose obligations to maintain appropriate policies, procedures, and controls to detect, prevent and report money laundering and terrorist financing

12

Table of Contents

and to verify the identity of their customers. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing, or to comply with all the relevant laws or regulations, could have serious legal and reputational consequences for us. We may also be subject to enforcement actions and as a result may incur losses and liabilities that may impact our business.

Federal Trade Commission Act and Other Laws Impacting our Customers’ Business

All persons engaged in commerce, including, but not limited to, us and our merchant and financial institution customers are subject to Section 5 of the Federal Trade Commission Act prohibiting Unfair or Deceptive Acts or Practices (“UDAP”). In addition, there are other laws, rules and/or regulations, including the Telemarketing Sales Act, that may directly impact the activities of our merchant customers and in some cases may subject us, as the merchant’s payment processor, to investigations, fees, fines, and disgorgement of funds in the event we are deemed to have aided and abetted or otherwise provided the means and instrumentalities to facilitate the illegal activities of the merchant through our payment processing services. Federal and state regulatory enforcement agencies including the Federal Trade Commission, or FTC, and the states’ attorneys general have authority to take action against nonbanks that engage in UDAP or violate other laws, rules, and regulations. To the extent we process payments for a merchant that may be in violation of these laws, rules, and regulations, we may be subject to enforcement actions and as a result may incur losses and liabilities that may impact our business.

Anti-trust and Competition Laws

We are required to comply with various federal, local, and foreign competition and anti-trust laws, including the Sherman Act, Clayton Act, Hart-Scott-Rodino Antitrust Improvements Act, Robinson-Patman Act, Federal Trade Commission Act and Puerto Rico Anti-Monopoly Act. In general, competition laws are designed to protect businesses and consumers from anti-competitive behavior. Competition and anti-trust law investigations can be lengthy, and violations are subject to civil and/or criminal fines and other sanctions for both corporations and individuals that participate in the prohibited conduct. Class action civil anti-trust lawsuits can result in significant judgments, including in some cases, payment of treble damages and/or attorneys’ fees to the successful plaintiff. See “Part I, Item 1A. Risk Factors—Risks Related to Our Business—We are subject to extensive government regulation and oversight. Failure to comply with existing and future rules and regulations in the jurisdictions in which we operate could materially adversely affect the operations of one or more of our businesses in those jurisdictions.”

Foreign Corrupt Practices Act (“FCPA”), Export Administration and Other

As a data processing company that services both foreign and domestic clients, our business activities in foreign countries, and in particular our transactions with foreign governmental entities, subject us to the anti-bribery provisions of the FCPA, as well as the laws and regulations of the foreign jurisdiction where we operate. Pursuant to applicable anti-bribery laws, our transactions with foreign government officials and political candidates are subject to certain limitations. Finally, in the course of business with foreign clients and subsidiaries, we export certain software and hardware that is regulated by the Export Administration Regulations from the United States to the foreign parties. Together, these regulations place restrictions on who we can transact with, what transactions may be facilitated, how we may operate in foreign jurisdictions and what we may export to foreign countries.

The preceding list of laws and regulations is not exhaustive, and the regulatory framework governing our operations changes continuously. The enactment of new laws and regulations may increasingly affect directly and indirectly the operation of our business, which could result in substantial regulatory compliance costs, litigation expense, loss of revenue, decreased profitability and/or adverse publicity.

Association and Network Rules

Several of our subsidiaries are registered with or certified by card associations and payment networks, including the ATH network, MasterCard, Visa, American Express, Discover and numerous debit and EBT networks as members or as service providers for member institutions in connection with the services we provide to our customers. As such, we are subject to applicable card association and network rules, which could subject us to a variety of fines or penalties that may be levied by the card associations or networks for certain acts and/or omissions by us, our acquirer customers, processing customers and/or merchants. For example, “Contactless” is a credit and debit card authentication methodology that the card associations are mandating to processors, issuers, and acquirers in the payment industry. Compliance deadlines for Contactless mandates vary by country and by payment network. We have invested significant resources and man-hours to develop and implement this methodology in all our payment related platforms. However, we are not certain if or when our financial institution customers will use or accept the methodology and the time it will take for this technology to be rolled-out to all customer ATM and POS devices connected to our platforms or adopted by our card issuing clients. Non-compliance with Contactless mandates could

13

Table of Contents

result in lost business or financial losses from fraud or fines from network operators. We are also subject to network operating rules promulgated by the National Automated Clearing House Association relating to payment transactions processed by us using the Automated Clearing House Network and to various government laws regarding such operations, including laws pertaining to EBT.

Payment Card Industry Data Security Standard

Additionally, we are subject to the Payment Card Industry Data Security Standard (the "PCI DSS"), issued by the Payment Card Industry Security Standards Council. The PCI DSS contains compliance requirements regarding our security surrounding the physical and electronic storage, processing and transmission of cardholder data. Non-compliance with the security standards required by PCI DSS may subject us to fines, restrictions and expulsion from card acceptance programs, which could materially and adversely affect our business.

Geographic Concentration

For the year ended December 31, 2025, 61% of revenues were generated from our business in Puerto Rico, while the remaining 39% was generated from Latin America and the Caribbean. Latin America includes, among others, Costa Rica, México, Guatemala, Colombia, Chile, Uruguay, Brazil, Peru and Panamá. The Caribbean primarily represents the Dominican Republic and the U.S. and British Virgin Islands. See Note 26 to the Audited Consolidated Financial Statements included elsewhere in this Report for additional information related to geographic areas.

Seasonality

Our payment businesses generally experience increased activity during the traditional holiday shopping periods and around other nationally recognized holidays, which follow consumer spending patterns.

Available Information

EVERTEC’s Annual Report on Form 10-K, Quarterly Reports on Form 10-Q and Current Reports on Form 8-K and amendments to such reports (if applicable) filed or furnished pursuant to Sections 13(a) or 15(d) of the Exchange Act are available free of charge, through our website, http://www.evertecinc.com, as soon as reasonably practicable after such material is electronically filed with or furnished to the SEC. In addition, we make available on our website under the heading of “Governance Documents” our: (i) Code of Ethics; (ii) Code of Ethics for Service Providers; (iii) Corporate Governance Guidelines; (iv) the charters of the Audit, Compensation and Nominating and Corporate Governance committees, and we intend to disclose any amendments to the Code of Ethics. The information found on our website is not part of this or any other report we file with, or furnish to, the SEC. The aforementioned reports and materials can also be obtained free of charge upon written request or telephoning to the following address or telephone number:

EVERTEC, Inc.

Cupey Center Building

Road, 176, Kilometer 1.3

San Juan, Puerto Rico 00926

(787) 759-9999

Our filings with the SEC can also be accessed through the SEC's website at http://www.sec.gov.

Our Corporate Information

We were incorporated on April 13, 2012 in Puerto Rico under the name Evertec, Inc. Our principal executive offices are located at Cupey Center Building, Road 176, Kilometer 1.3, San Juan, Puerto Rico 00926, and our telephone number is (787) 759-9999.