grepcent / static financial knowledge base

First Western Financial Inc (MYFW) Business

Verbatim Item 1 Business section from First Western Financial Inc's latest 10-K. Filing date: 2026-02-27. Accession: 0001628280-26-012825.

This page reproduces the company's own Item 1 Business text from the linked SEC filing. It is filer text, not grepcent analysis, scoring, or investment advice.

Informational only - not investment advice. See Disclaimer.

Extracted from Item 1 Business to the first Item 1A/1B/1C/2 boundary after HTML sanitization. Confidence: high. Source form: 10-K. Character span: 74281-191101.

Back to MYFW company profile

Item 1: Business

Our Company

First Western Financial, Inc. is a financial holding company headquartered in Denver, Colorado. We provide a fully integrated suite of wealth management services on our private trust bank platform, which includes a comprehensive selection of deposit, loan, trust, wealth planning and investment management products and services. We believe our integrated business model distinguishes us from other banks and non-bank financial services companies in the markets in which we operate. As of December 31, 2025, we provided fiduciary and advisory services on $7.28 billion of trust and investment management assets (AUM), and we had total assets of $3.15 billion, total loans excluding mortgage loans held for sale of $2.65 billion, total deposits of $2.75 billion, and total shareholders’ equity of $265.6 million.

Our mission is to be the best private bank for the Western wealth management client. We believe that the "Western wealth management client" shares our entrepreneurial spirit and values our sophisticated, high-touch integrated financial services that are tailored to meet their specific needs. Our target clients include successful entrepreneurs, professionals and other high net worth individuals or families, along with their businesses and philanthropic organizations. We offer our services through a branded network of boutique private trust bank offices, loan production offices, and trust offices, which we believe are strategically located in affluent and high-growth markets in nineteen locations across Colorado, Arizona, Wyoming, Montana, and California.

We generate a significant portion of our revenues from non-interest income, which we produce from our trust, investment management, and other advisory services as well as through the origination and sale of mortgage loans. The balance of our revenue is generated from net interest income, which we derive from our traditional banking products and services. For the year ended December 31, 2025, Total non-interest income was $26.6 million or 27.4% of Total income before non-interest expense and Net interest income, before Provision for credit losses, was $75.4 million, or 77.8% of Total income before Non-interest expense.

We believe that we have developed a unique approach to private banking to best serve our Western wealth management clients primarily as a result of the combination of the following factors:

•Offering sophisticated wealth management products and services, including traditional banking as well as trust, wealth planning, investment management and other related services often provided by larger financial institutions with the high-touch and personalized experience that is typically associated with community and trust banks;

•Delivering services through our strategically located private trust bank offices, which we refer to internally as "profit centers"; and

•Using our relationship-based team approach to become a "trusted advisor" to our clients by understanding their investment management, ultimate goals and banking needs and tailoring our products and services to meet those needs.

Our History

We were founded in 2002 by our Chairman, Chief Executive Officer and President, Scott C. Wylie, and a group of local business leaders with the vision of building the best private bank for the Western wealth management client. Since opening our first office in Denver, Colorado in 2004, we have grown organically primarily by establishing boutique private trust bank offices, attracting new clients and expanding our relationships with existing clients, as well as through a series of strategic acquisitions of various trust, registered investment advisory, bank branch and full bank institutions, and other financial services firms. Since we completed an initial public offering of our common stock on July 23, 2018, our common stock has been listed on the Nasdaq Global Select Market under the symbol "MYFW."

5

Table of Contents

Our Business Strategy

We believe we have built a premier private trust bank in the Western United States that focuses on providing the best financial solutions to our clients. We are service-driven, solution-oriented and relationship-based. We accomplish this by continuing to execute on the following strategies:

•Building Out Existing Markets. Once we have established a presence in a particular geographic market that contains attractive high net worth household demographics, we then look to establish additional locations that are closely situated to sub-concentrations of affluent households and/or commercial activity (a "hub and spoke" market build-out, as we have commenced in Denver, Phoenix, and Jackson Hole). We continue to seek out talent to hire as part of our strategy of building out existing markets and continue to be successful in hiring teams that help us accomplish this goal. We also seek to employ highly capable associates with local market experience and relationships.

•Deepening Existing Client Relationships. We deliver our services though our nineteen local boutique private trust bank offices, loan production offices, and trust offices. This allows us to use multi-discipline sales and client service teams, in-market, to ensure we are meeting each client’s comprehensive set of needs. These teams take the time to understand the complexities of our clients’ financial world through wealth planning solutions and create the financial plan that helps them reach their goals. This profit center-based service model is a critical component of our future growth as we continue to develop our understanding of our clients’ evolving needs, allowing us to deepen, broaden and grow our existing relationships.

•Generating Referrals for New Client Relationships. We believe we have demonstrated a successful sales and marketing capability, built around the personal and professional networks and centers of influence of our local profit center leadership. Our existing client base has historically provided a significant amount of new clients through referrals. In surveys, our clients generally rate us very favorably overall in areas of professionalism, reliability, service-orientation, and trust.

•Developing Client Relationships through our Product Groups. Each profit center is designed to feel like a boutique private trust bank office and is staffed with business development and client service personnel. The profit centers work closely with our central product groups to customize our services to each client’s specific situation, without sacrificing the flexibility, expertise and authority to quickly meet complex client needs. Our central product groups are designed to support a significantly larger client and AUM base, providing an opportunity for significant operating leverage as we open additional profit centers. We have sales and service specialists in our product groups, such as Retirement Services and Mortgage Services, who are able to build relationships within their area of expertise and provide high quality service that creates an opportunity for a broader relationship across our suite of products and services.

•Expanding to New Markets. We believe that our profit centers are profitable and stable businesses when mature. We also believe that our product group and support center teams have a high degree of operating leverage (i.e., we believe that increasing the number of profit centers would not require a proportionate increase in our product group or support center expenses). Therefore, a key strategy of ours is to add incremental profit centers and grow them to maturity. We continue to seek out talent as part of our strategy of building out existing markets and continue to be successful in hiring teams that help us accomplish this goal. The trends in the financial services industry that make our business model successful in our existing geographic markets also exist in other locations in the Western United States. Our analysis indicates that there are hundreds of markets and submarkets in the Western United States that could support our profit centers and fit our target demographics. As such, we intend to continue to explore new Western United States markets with favorable high net worth demographics and competitive landscapes.

•Growing our Core Deposit Franchise. The strength of our deposit franchise is derived from the long-standing relationships we have with our clients and the strong ties we have to the markets we serve. Our deposit footprint has provided, and we believe will continue to provide, primary support for our loan growth. A key part of our strategy is to continue to enhance our funding sources by continuing to build our private and commercial banking capabilities to keep building our base of attractively priced core deposits.

•Attracting Talent. Our team of seasoned associates has been, and will continue to be, an important driver of our organic growth by further developing relationships with current and potential clients. We have a record of hiring experienced associates to enhance our organic growth, and sourcing and hiring talent will continue to be a core focus for us. We believe that our client service model, financial strength, growth strategy and public company status will further enhance our ability to attract and retain this talent.

6

Table of Contents

•Developing New Products. We seek to be the primary source of financial products and services for our clients. By continuing to expand our product offerings—either by internal product development or establishing third-party relationships—we work to meet expanding client needs while further diversifying our revenue streams. This includes our recent efforts to focus on our product management disciplines as well as upgrading our commercial banking capabilities, adding market expertise in certain business verticals.

Our Service Model and Products

We deliver a broad array of wealth management products and services through our profit centers using our proprietary ConnectView® approach, which looks holistically across a client’s current and projected financial situation. We believe providing financial solutions in one area (such as estate, retirement planning or lending) often impacts other areas of our clients’ wealth planning (such as risk or balance sheet management), which provides us opportunities to evaluate proposed solutions across multiple business lines and offer additional services to our clients.

We have designed our business around having each profit center staffed with seasoned management. Typically, each profit center team is led by a president, who is a senior investment advisor or banker with strong client relationships and sales and leadership skills. The local team includes deposit, loan, trust, wealth planning, and related professionals, creating a strong interdisciplinary sales and service team.

We provide a broad array of products and services through our boutique private trust bank offices, largely comprised of the products and services described below.

Lending

General. Through our relationship-oriented private bank lending approach, our strategy is to offer a broad range of customized consumer and commercial lending products for the personal investment and business needs of our clients. Our clients are typically well diversified and the purpose for their loan and liquidity needs often does not correlate to the collateral used to secure the loan.

Our commercial lending products include commercial loans, business term loans and lines of credit to a diversified mix of small and midsized businesses. We offer both owner occupied and non-owner occupied commercial real estate (CRE) loans, as well as construction loans.

Our consumer lending products include residential first mortgage loans, originated loans for our own portfolio, as well as those for which we conduct mortgage banking activities whereby we originate and sell, servicing-released, whole loans in the secondary market. Our mortgage banking loan sales activities are primarily directed at originating single family mortgages, which generally conform to Fannie Mae and Freddie Mac guidelines and are delivered to the investor shortly after funding. Additionally, we offer installment loans and lines of credit, which are typically to facilitate investment opportunities for consumer clients whose financial characteristics support the request. We also provide clients loans collateralized by cash and marketable securities.

We employ experienced banking and business development teams who provide superior client service, value-add lending solutions and competitive pricing to market our lending products and services.

7

Table of Contents

As of December 31, 2025, our loan portfolio contained a balanced and diverse mix of loans, as shown below:

Column 1Column 2
Gross Loans(1)

(1) Gross loans excludes $3.2 million in consumer and other loans accounted for under the fair value option.

Our loan portfolio includes commercial and industrial loans, residential real estate loans, commercial real estate loans, and other consumer loans. The principal risk associated with each category of loans we make is the creditworthiness of the borrower. Borrower creditworthiness is affected by general economic conditions, the attributes of the borrower and the borrower’s market or industry. We underwrite for strong cash flow, multiple sources of repayment, adequate collateral, borrower experience and backup guarantors. Attributes of the relevant business market or industry include the competitive environment, client and supplier availability, the threat of substitutes and barriers to entry and exit.

1-4 Family Residential. Our 1-4 family residential loan portfolio consists of loans and home equity lines of credit secured by 1-4 family residential properties. These loans typically enable borrowers to purchase or refinance existing homes, most of which serve as the primary residence of the owner. In addition, some borrowers secure a commercial purpose loan with 1-4 family residential properties. As of December 31, 2025, 1-4 family residential loans were $1.03 billion, or 39.1% of our total loan portfolio, consisting of $123.6 million and $910.1 million of fixed-rate and adjustable-rate loans, respectively. While we typically originate loans with adjustable rates and maturities up to 30 years, as of December 31, 2025, the average term on our 1-4 family portfolio was 23.6 years with an average remaining term of 20.3 years. Such loans typically remain outstanding for substantially shorter periods because borrowers often prepay their loans in full either upon sale of the property pledged as security or upon refinancing the original loan.

Commercial loans secured by 1-4 family residential real estate are dependent on the strength of the local economy and local residential and commercial real estate markets. Borrower demand for adjustable-rate compared to fixed-rate loans is a function of the level of interest rates, the expectations of changes in the level of interest rates, and the difference between the interest rates and loan fees offered for fixed-rate mortgage loans as compared to the interest-rates and loan fees for adjustable rate loans.

The loan fees, interest rates, and other provisions of mortgage loans are determined by us on the basis of our own pricing criteria and competitive market conditions. The loans are secured by the real estate, and appraisals are obtained to support the loan amount at origination. Loans collateralized by 1-4 family residential real estate generally are originated in amounts of no more than 80% of appraised value. Generally, our loans conform to Fannie Mae and Freddie Mac underwriting guidelines and conform to internal policies for debt-to-income or free cash flow levels. We retain a valid lien on real estate, obtain a title insurance policy that insures that the property is free from encumbrances and require hazard insurance.

8

Table of Contents

Our focus for mortgage lending is to originate high-quality loans to drive growth in our mortgage loan portfolio. Our mortgage strategy includes attracting new loan clients with our mortgage loan products and services, which we believe will provide an opportunity for our profit centers to bring in well-qualified prospects, and to cross-sell other products and services to clients. We believe that cross-selling enables us to generate additional revenues, increase client retention, and provide products that benefit our clients. We have developed a scalable platform, including loan processing, underwriting and closings, for both secondary sales and origination of 1-4 family residential mortgages maintained in our portfolio and believe we have significant opportunities to grow this business.

Cash, securities and other. Our cash, securities and other loan portfolio consists of consumer and commercial purpose loans, which are primarily secured by securities managed and under custody with us, cash on deposit with us or life insurance policies. As of December 31, 2025, loans secured with cash, marketable securities and other were $164.7 million, or 6.3% of our total loan portfolio. This segment of our portfolio is affected by a variety of local and national economic factors affecting borrowers’ employment prospects, income levels, and overall economic sentiment. PPP loans that are fully guaranteed by the SBA are classified within this line item.

Consumer and other. Our consumer and other loan portfolio consists of unsecured consumer loans. Loans held for investment accounted for under the fair value option are also classified within this line item and had an unpaid principal balance of $3.2 million as of December 31, 2025. Consumer and other loans were $19.6 million, or 0.7% of our loan portfolio, excluding $3.2 million in consumer and other loans accounted for under the fair value option. This segment of our portfolio is affected by a variety of local and national economic factors affecting borrowers’ employment prospects, income levels, and overall economic sentiment.

Commercial and industrial. We originate commercial and industrial loans, including working capital lines of credit, permanent working capital term loans, business asset loans, acquisition, expansion and development loans, and other loan products, primarily in our target markets. These loans are underwritten on the basis of the borrower’s ability to service the debt from income, with maturities tied to the underlying life of the collateral. We generally take a lien on all business assets, including, among other things, accounts receivable, inventory, equipment, available real estate, and generally obtain a personal guaranty of the principal(s). Our commercial and industrial loans generally have variable interest rates and terms that typically range from one to five years. Fixed-rate commercial and industrial loan maturities are generally short-term, with three to five-year maturities, including periodic interest rate resets. As of December 31, 2025, commercial and industrial loans were $225.3 million, or 8.5% of our total loan portfolio. The average maturity on our commercial and industrial portfolio was 5.2 years with an average remaining term of 2.3 years. This portfolio primarily consists of term loans and lines of credit which are mostly dependent on the strength of the industries of the related borrowers and the success of their businesses.

Commercial real estate, Owner occupied and Non-owner occupied. We originate commercial loans collateralized by real estate. These loans may be collateralized by owner occupied or non-owner occupied real estate, as well as multi-family residential real estate. Commercial real estate lending typically involves higher loan principal amounts and the repayment is dependent, in large part, on sufficient income from the properties securing the loans to cover operating expenses and debt service. We require our commercial real estate loans to be secured by well-managed property with adequate margins and generally obtain a guaranty from responsible parties who have outside cash flows, experience and/or other assets. Our commercial real estate loans are generally secured by properties used for business purposes such as office buildings, industrial facilities and retail facilities. Loan amounts generally do not exceed 80% or 75% of the property’s appraised value for owner occupied and non-owner occupied respectively. In addition, aggregate debt service ratios, including the guarantor’s cash flow and the borrower’s other projects, are required by policy to have a minimum annual cash flow to debt service ratio of 2.0x. We require independent appraisals or evaluations from a list of approved appraisers on all loans secured by commercial real estate. As of December 31, 2025, owner occupied commercial real estate loans were $204.1 million, or 7.7% of our total loan portfolio, and non-owner occupied commercial real estate loans were $809.9 million, or 30.6% of our total loan portfolio. These loans are primarily dependent on the strength of the industries of the related borrowers and the success of their businesses.

Construction and development. We originate loans to finance the construction of residential and non-residential properties. Construction and development loans are generally collateralized by first liens on real estate as well as financial guarantees from the borrower and usually have floating interest rates. Our construction and development loans typically have maturities of up to two years depending on factors such as the type and size of the development and the financial strength of the borrower/guarantor, and are typically structured with an interest only construction period. These loans are underwritten to either mature at the completion of construction, or transition to a traditional amortizing commercial real estate facility with the terms and characteristics in line with other commercial real estate loans we hold in our portfolio. As of December 31, 2025, construction and development loans were $189.1 million, or 7.1% of our total loan portfolio.

9

Table of Contents

Concentrations. Most of our lending activity and credit exposure, including real estate collateral for many of our loans, are concentrated in Colorado, Arizona, Wyoming, Montana, and California, as approximately 83.0% of the loans in our loan portfolio as of December 31, 2025 were made to borrowers who live in or conduct business in those states. Our commercial real estate loans are generally secured by first liens on real property. The remaining commercial and industrial loans are typically secured by general business assets, accounts receivable, inventory and/or the corporate guaranty of the borrower and personal guaranty of its principals. The geographic concentration subjects the loan portfolio to the general economic conditions within Colorado, Arizona, Wyoming, Montana, and California. The risks created by such concentrations have been considered by management in the determination of the adequacy of the allowance for credit losses. As of December 31, 2025, management believes the allowance for credit losses is adequate to absorb losses in our loan portfolio.

Sound risk management practices and appropriate levels of capital are essential elements of the commercial real estate lending program. Concentrations of commercial real estate exposures add a dimension of risk that compounds the risk inherent in individual loans. Interagency guidance on commercial real estate concentrations describe sound risk management practices which include board and management oversight, portfolio management, management information systems, market analysis, portfolio stress testing and sensitivity analysis, credit underwriting standards, and credit risk review functions. Management believes it has implemented these practices in order to monitor concentrations in commercial real estate in our loan portfolio.

Credit Policies and Procedures

General. Asset quality and robust underwriting are integral to our strategy and credit culture. We place a considerable emphasis on effective risk management and preserving sound credit underwriting standards as we grow our loan portfolio. Underwriting considerations include adherence to credit policy, collateral, defined sources of repayment, strength of guarantor(s) and opportunities to broaden the relationship with the client. Our credit policy requires key risks be identified and measured, documented and mitigated, to the extent possible, to seek to ensure the soundness of our loan portfolio.

Loan Underwriting and Approval. Historically, we believe we have made sound, high quality loans while recognizing that lending money involves a degree of business risk. We have credit policies designed to assist us in managing this business risk. These policies provide a general framework for our loan origination, monitoring and funding activities, while recognizing that not all risks can be anticipated. Our Board of Directors delegates limited lending authority to individuals and internal loan committees. When the total relationship exceeds an individual’s loan authority, a higher authority or credit committee approval is required. The objective of our approval process is to provide a disciplined, collaborative approach to larger credits while maintaining responsiveness to client needs. Loan decisions are documented as to the borrower’s business, purpose of the loan, evaluation of the repayment source and the associated risks, evaluation of collateral, covenants and monitoring requirements, and the risk rating rationale.

Managing credit risk is an enterprise-wide process. Our strategy for credit risk management includes well-defined central credit policies, uniform underwriting criteria and ongoing risk monitoring and review processes. Our processes emphasize early stage review of loans, regular credit evaluations and management reviews of loans, which supplement the ongoing and proactive credit monitoring and loan servicing provided by our bankers. Our Executive Director, Banking and Mortgages, together with our central underwriting, credit administration and loan operations teams, provides credit oversight. We periodically review all credit risk portfolios to ensure that the risk identification processes are functioning properly and that our credit standards are followed. In addition, a third-party loan review is performed to assist in the identification of problem assets and to confirm our internal risk rating of loans.

Our credit policies include other underwriting guidelines for loans collateralized by real estate. These underwriting standards are designed to determine the maximum loan amount that a borrower has the capacity to repay based upon the type of collateral securing the loan and the borrower’s income. Such credit policies include maximum amortization schedules and loan terms for each category of loans collateralized by liens on real estate. In addition, our credit policies provide guidelines for personal guarantees, an environmental review, loans to employees, executive officers and directors, problem loan identification, maintenance of an adequate allowance for credit losses, and other matters relating to lending practices.

We believe that an important part of our assessment of client risk is the ongoing completion of periodic risk rating reviews. As part of these reviews, we seek to review the risk rating of each facility within a client relationship and may recommend an upgrade or downgrade to the risk rating. We categorize loans into risk categories based on relevant information about the ability of the borrowers to service their debt such as: current financial information, historical payment experience, credit documentation, public information, and current economic trends, among other factors. We analyze loans individually by classifying the loans as to credit risk on a quarterly basis. We attempt to identify potential problem loans early in an effort to seek aggressive resolution of these situations before the loans become a loss, record any necessary charge-offs promptly and management believes the allowance for credit losses is adequate to absorb losses in our portfolio.

10

Table of Contents

Lending Limits. Our lending activities are subject to a variety of lending limits imposed by state and federal regulations. The Bank is subject to a legal lending limit on loans to related borrowers based on the Bank’s capital level. The dollar amounts of the Bank’s lending limit increases or decreases as the Bank’s capital increases or decreases. The Bank is able to sell participations in its larger loans to other financial institutions, which allows it to manage the risk involved in these loans and to meet the lending needs of its clients requiring extensions of credit in excess of these limits.

Deposits

The strength of our deposit franchise is derived from the long-standing relationships we have with our clients and the strong ties we have to the markets we serve. Our deposit footprint has provided, and we believe will continue to provide, the primary support for our loan growth. A key part of our strategy is to continue to enhance our funding sources by continuing to build our private and commercial banking capabilities to keep building our base of attractively priced core deposits.

We provide demand deposits, interest-bearing transaction accounts, money market accounts, time and savings deposits, ICS®, certificates of deposit and CDARS® reciprocal products. We also offer a range of treasury management products including cash manager and commercial analysis accounts, electronic receivables management, remote deposit capture, cash vault services, merchant services and other cash management services. Deposit flows are significantly influenced by general and local economic conditions, changes in prevailing interest rates, internal pricing decisions and competition. Our deposits are primarily obtained from depositors located in our geographic footprint, and we believe that we have attractive opportunities to capture additional deposits in our markets. In order to attract and retain deposits, we rely on providing quality service, offering a suite of retail and commercial products and services and introducing new products and services that meet our clients’ needs as they evolve.

For liquidity purposes, the Bank occasionally uses brokered deposits. As of December 31, 2025 and 2024, we had brokered deposits of $115.8 million and $134.5 million, respectively.

We have experienced banking and business development teams who we believe provide superior client service, creative cash management solutions and competitive pricing to market our depository products and services. As of December 31, 2025, total deposits were $2.75 billion, an increase of $232 million, or 9.2%, compared to $2.51 billion as of December 31, 2024.

As of December 31, 2025, our deposit portfolio contained a diverse mix of deposits, as shown below:

Column 1Column 2
Deposits

11

Table of Contents

Trust and Investment Management, Advisory

We offer sophisticated wealth advisory and planning services including investment management, trusts and estate services, philanthropic services, insurance planning and retirement consulting. Our client relationships frequently include in-depth financial plans which are based on our proprietary ConnectView® approach, and sophisticated, institutional quality investment management that is driven by comprehensive investment policy statements and access to industry-leading money managers. These customized documents—wealth plans and investment policy statements—form the roadmap for how we serve each client and monitor our progress in achieving their goals.

We have experienced trust officers in several profit centers, plus expert trust and estate attorneys on our central product group team, to provide fiduciary services through our profit centers. These include traditional fiduciary, directed trusts, special needs trusts, and custody services. Most of our investment management business is conducted through the trust department in agency accounts where we are not serving as trustee.

We also have experienced portfolio managers and business development teams in our profit centers who provide high-touch, tailored solutions that we believe further exemplifies our superior client service. These local teams have personal and professional networks and relationships with centers of influence to market our wealth advisory products and services. As of December 31, 2025, total AUM was $7.28 billion, a decrease of $43.0 million, or 0.6%, compared to $7.32 billion as of December 31, 2024.

As of December 31, 2025, we provided fiduciary and advisory services on $7.28 billion of trust and investment management assets, as shown below:

Column 1Column 2
Trust and Investment Management Assets

Our investment management platform combines a broad range of asset and sub asset classes meeting the needs of both taxable and tax-free private client accounts as well as trust investment services. We deliver most of our discretionary money management by allocating client portfolios across a centrally controlled platform of select third-party managers in each asset and sub asset class, including separately managed and comingled options, and with active and passive management strategies. We also have a limited number of proprietary products that we believe further differentiates us from many of our competitors.

We believe acting as an investment manager, and not just a manager of managers, has a number of critical benefits for our clients. These include the ability to have our money managers available to meet with clients and prospects, to tailor products and separately managed accounts for our clients, to better educate and inform our client-facing portfolio managers, and to develop new solutions as market conditions and client needs change. By combining internal research and a dedicated team of accredited specialized advisors like Chartered Financial Analysts and Certified Financial Planners with our pairing of proprietary and third-party investment options, we create unique solutions tailored to the specific needs of each of our clients.

12

Table of Contents

Other Products

In addition to the traditional loan, deposit and trust and investment management products and services, our profit centers are supported by a central team of specialized product experts in our "product groups," which include experienced professionals in commercial banking, investment management, wealth planning, risk management/insurance, personal trust, retirement planning and tax-advantaged products, and mortgage lending. We believe that the sophistication of our product groups rivals the offerings and expertise typically provided by larger financial institutions. Our product groups are led and staffed with highly accredited and well known professionals, each with significant experience in their fields. Beyond traditional banking, trust and wealth management activities, at each profit center we provide other services including:

•Mortgage Lending. Although our primary objective is to originate loans for our own portfolio, we also conduct mortgage banking activities in which we originate and sell, servicing-released, whole loans in the secondary market. Typically, loans with a fixed interest rate of greater than 10 years are available-for-sale and sold on the secondary market. Our mortgage banking loan sales activities are primarily directed at originating single family mortgages that are priced and underwritten to conform to previously agreed criteria before loan funding and are delivered to the investor shortly after funding. The level of future loan originations, loan sales and loan repayments depends on overall credit availability, the interest rate environment, the strength of the general economy, local real estate markets and the housing industry, and conditions in the secondary loan sale market. The amount of gain or loss on the sale of loans is primarily driven by market conditions and changes in interest rates, as well as our pricing and asset liability management strategies.

•Treasury Management. We offer a broad range of customized treasury management products and services for commercial accounts, including disbursement and payables management, liquidity management and online business banking services. Our profit center sales and service teams are supported by a central team of treasury management specialists and deposit operations professionals.

•Risk Management/Insurance. Through the wealth planning process, our profit center teams are supported by a central team of insurance planning experts, specializing in risk management services, estate tax law, trusts and tax planning. We offer customized solutions in the form of, among others, charitable giving tax strategies, deferred-compensation plans, irrevocable life insurance trusts, long-term care insurance, and executive key person insurance.

•Retirement Services, including 401(k) Plan Consulting. We have a team of retirement plan consultants who partner with businesses to sponsor retirement plans. We offer creative corporate retirement plan design and analysis solutions and fiduciary liability management, providing tools such as corporate retirement plans, and ERISA regulation compliance, education and expertise.

Our profit centers and product groups are also supported centrally by teams providing management services such as operations, risk management, credit administration, technology support, marketing, human capital and accounting/finance services, which we refer to as "support centers." Our associates in our support centers have significant experience in wealth management, investment advisory, and commercial banking, including areas such as lending, underwriting, credit administration, risk management, accounting/finance, operations and information technology. We have structured our teams, services and product offerings to use technology to efficiently provide our clients with a high-touch, solution-oriented experience that we believe is scalable and provides operating leverage for future growth.

To demonstrate how these three groups—profit centers, product groups and support centers—work together to deliver a highly competitive product offering through a team of local professionals, our investment management offering is an example:

•In each profit center, there are one or more portfolio managers that work as part of that local team’s sales and service delivery. These portfolio managers are typically Certified Financial Planners, and occasionally Chartered Financial Analysts, with experience in wealth planning and portfolio construction. They meet with clients and develop an overall wealth management strategy, specific goals and objectives, an investment policy statement, and an implementation plan. They use our guided architecture, a diverse array of select third-party and proprietary investment products covering a broad range of asset classes as their source for portfolio construction options, asset allocation and products. Sales and marketing support is provided centrally but delivered locally.

•Our investment platform is controlled by our central investment research group, which has a strong research focus and includes many associates who have Chartered Financial Analyst designations, with oversight by our Executive Director, Wealth and Fiduciary and our Investment Policy Committee.

13

Table of Contents

•Operational support for these profit center and product group teams is provided by our central trust and investment management support center team.

Investment Activities

The primary objectives of our Bank portfolio investment policy are to provide a source of liquidity, to provide an appropriate return on funds invested, to manage interest rate risk, to meet pledging requirements and to meet regulatory capital requirements. As of December 31, 2025, the carrying value of our investment portfolio totaled $140.6 million with an average yield of 4.2%.

Our investment policy outlines investment type limitations, security mix parameters, authorization guidelines and risk management guidelines. The policy authorizes us to invest in a variety of investment securities, subject to various limitations. Our current investment portfolio consists of obligations of the U.S. Treasury and other U.S. government agencies, corporate or sponsored entities, including mortgage-backed securities, collateralized mortgage obligations, subordinated debt bonds, and mutual funds. We participate in the Mortgage Partnership Finance Program (MPF) and are required to maintain an investment in Federal Home Loan Bank of Topeka (FHLB) stock, for which the investment is based on the level of our FHLB credit obligations. Our Board of Directors has the overall responsibility for the investment portfolio, including approval of our investment policy. Our Asset and Liability Committee (ALCO) and management are responsible for implementation of the investment policy and monitoring of our investment performance. Our ALCO and management review the status of our investment portfolio at least ten times per year.

Our Markets

Our strategic market area is defined by metropolitan areas in the Western United States having strong long-term economic growth prospects, a significant wealth demographic measured by growth in high net worth households, a dynamic commercial business landscape and the ability to sustain one or more of our profit centers. We target households with more than $1.0 million in liquid net worth and their related businesses and philanthropic interests. We believe that the complex and diverse financial needs of this market segment presents an opportunity to serve a broad array of client needs efficiently and cost effectively.

Our current operating markets have a high concentration of our targeted client segment and are expected to experience high growth, providing opportunity for continued future organic growth through demographic and market share growth.

We seek to expand our presence in our existing markets as well as other Western markets with similar demographic profiles. With improved access to capital as a result of our initial public offering in 2018, we expect to proactively evaluate opportunities to accelerate our organic growth and acquire banks, investment management firms and related businesses, while also seeking to hire talented personnel. We believe consolidation in the financial services industry along with the industry’s movement towards automated and impersonal client service further presents the Company with a unique and significant opportunity. Our business model differentiates us from the industry, which we expect will enable us to increase our market share in existing markets and, on a strategic and opportunistic basis, expand our geographic footprint into new markets in the Western United States that share similar characteristics to our current markets.

Enterprise Technology

We continue to make investments in our information technology systems as we adapt to the changing security, technology, online and mobile, and other platform delivery needs and wants of our clients. We believe that this investment is essential to our ability to offer new products and optimize overall client experience, provide opportunities for future growth and acquisitions, and provide a secure infrastructure that supports our operations. We leverage the experience of a third-party managed service provider for information technology services, to augment security, and to deliver the technical expertise around network architecture required to operate securely with optimal efficiency. The majority of our systems are hosted by third-party service providers. The scalability of this infrastructure supports our growth strategy. In addition, business resiliency testing and planning ensures the capability of critical vendors to fail over to fully-hot replicated systems that provide complete redundancy in the event of a disaster.

14

Table of Contents

Enterprise Risk Management

We place significant emphasis on our holistic approach to integrated risk management that provides oversight, control, and discipline to support strategic initiative and business objectives and to promote a risk-aware culture. We utilize the COSO 2017 ERM Framework to govern the process of anticipating, identifying, assessing, managing, optimizing, and monitoring risks within the organization. Our Enterprise Risk Management (ERM) Committee oversees our ERM program. This group contains key members of management including the Chief Operating Officer, Chief Financial Officer, Executive Director Legal and Governance, and the Executive Director Risk, Human Capital, and Operations. In order to carry out the ERM program, we have developed the following objectives to:

•Integrate ERM practices with our strategy setting process and performance management practices to realize benefits related to value;

•Improve the Company’s ability to identify risks and establish appropriate responses to reduce costs and limit losses;

•Identify operational gaps to reduce performance variability;

•Include business resiliency in strategy setting;

•Identify interrelated risks within First Western and establish an integrated response; and

•Assess the positive and negative aspects of risk to address challenges and opportunities within our internal and external environment.

We routinely monitor and measure risk throughout the organization to optimize the allocation of resources, preserve capital, and to ensure the attainment and/or protection of strategic goals and business objectives.

Competition

The financial services industry is highly competitive and we compete in a number of areas, including commercial and consumer banking, residential mortgages, wealth advisory, investment management, trust, and insurance, among others. We compete with other bank and non-bank institutions located within our market area, along with competitors situated regionally, nationally or with only an online presence. These include large banks and other financial intermediaries, such as consumer finance companies, brokerage firms, mortgage banking companies, business leasing and finance companies and insurance agencies, as well as major retailers, all actively engaged in providing various types of loans and other financial services. We also face growing competition from online businesses with few or no physical locations, including online banks, lenders and consumer and commercial lending platforms as well as automated retirement and investment services providers. Competition involves efforts to retain current clients, obtain new loan, deposit and advisory services clients, increase the scope and type of services offered, and offer competitive interest rates paid on deposits, charged on loans, or charged for advisory services. We believe our integrated and high-touch service offering, along with our sophisticated relationship-oriented approach sets us apart from our competitors.

Human Capital Overview

As of December 31, 2025, we had 320 associates. We strive to recruit and retain team-oriented, respectful, problem solvers. We serve our internal team with the same approach we serve our clients, with an adaptive, entrepreneurial spirit. We take advantage of new opportunities, and encourage our team to explore new processes, products, and services to improve First Western. Associates are our trusted partners both within their teams and with our clients as we build a partnership for generations to come.

We strive to be a high performing financial institution producing consistent, strong financial results, coming from a well-executed strategy. It is our belief that this can only be accomplished by a well-run organization of outstanding, motivated, engaged and supported associates. Internally, we call this a “People First” mind-set and over the last several years have focused on building upon the foundational elements of this strategy. Those elements include an internally developed manager training program designed to train our managers to be great bosses in support of a culture of learning, collaboration, growth and development. We provide meaningful work for our associates by connecting their role to the Company’s mission and vision as well as simplifying and streamlining repetitive tasks to make work more interesting and value added. We are building role-based development opportunities and accountabilities into each role so that throughout the associates lifecycle there is opportunity to master skills and pursue professional and personal growth. People First is also about building connection and community with the Company. We believe the benefits of being part of our Company means you are appreciated and valued, you can build meaningful relationships, and have a sense of mutual accountability.

15

Table of Contents

None of our associates are represented by any collective bargaining unit or are parties to a collective bargaining agreement. We believe that our strong relationships with our associates are central to establishing the corporate culture we need to serve our clients, shareholders, and our communities well.

We are committed to implementing diverse, equitable, and inclusive policies and practices across the Company. Our corporate values speak directly to the spirit of inclusion as well as the importance of embracing diversity and equitable practices. We believe in a corporate culture where all people are empowered to reach their full potential through autonomy, mastery, and purpose. The Company’s Board of Directors fosters this belief by ensuring that strategies are adopted that result in the Company understanding both associate performance and engagement at every level.

The Company has invested in developing the necessary formal infrastructure to ensure fair pay across job classes and our geographic footprint. It has also adopted and enforces codes of conduct that establish principles of integrity, respect, and excellence at all levels of the Company.

Learning and Development

We provide extensive training to our associates in an effort to ensure that our clients receive superior service and that our risks are well managed. Learning and development opportunities consist of leadership development programs, communication courses, and technical development training (to name a few) as part of our goal to provide associates meaningful work with career advancement and opportunity for growth and development. Our strategic commitment to learning and development ensures the Company’s leadership and management teams continue to grow at a pace consistent with our financial growth goals.

Compensation and Benefits

We offer a total rewards program to attract and retain team-oriented, respectful, problem solvers who have a growth mindset. Our compensation program includes competitive salary/hourly pay and incentive pay in the form of quarterly bonuses and annual stock awards to officers and certain members of the management team. We have significant insider ownership and the Board of Directors has approved stock ownership guidelines applicable to our executive officers and other key position holders to further align management and shareholder interests. In addition, the Company offers a 401(k) Plan with an employer matching contribution. Further, we offer a number of healthcare and insurance options, health savings accounts, paid time off, and paid family leave time for all associates.

Core Values and Culture

Developing and maintaining a strong, healthy culture is a key strategic focus as we continue to grow both organically and through acquisition. Our core values reflect our continued focus to maintain a highly-engaged team.

Problem solver – Being a Problem solver at First Western means that when we see a problem, we see opportunity. We pick it up and we address it, and if appropriate, work to create or improve the “FW Way” for that type of issue.

Team oriented – Team oriented at First Western means using our teammates to deliver the best possible results for our stakeholders. Our structure, with local teams and central experts, is designed to serve clients that have assets, liabilities, families, businesses, and long term goals that each require different types of expertise.

Respectful – For First Westerners, Respectful means valuing the unique knowledge and experiences each stakeholder brings to a discussion. We appreciate the different value that each of us brings to First Western and treasure that expertise.

Adaptive – First Westerners have an Adaptive, entrepreneurial spirit. When our world changes, we change to take advantage of new opportunities. We are always looking for ways to improve processes, products, and services.

Growth mindset – First Westerns have a growth mindset and entrepreneurial spirit. We are always looking for ways to grow profitably. When our world changes, we adapt and take advantage of new opportunities through continual improvement.

16

Table of Contents

Available Information

The Company files reports, proxy statements and other information with the Securities and Exchange Commission (SEC) under the Securities Exchange Act of 1934, as amended (the "Exchange Act"). Electronic copies of our SEC filings are available to the public at the SEC’s website at https://www.sec.gov. You may also obtain copies of our annual, quarterly and special reports, proxy statements and certain other information filed by the Company with the SEC, as well as amendments thereto, free of charge from the Company’s website, https://myfw.gcs-web.com/investor-relations. These documents are posted to our website after we have filed them with the SEC. Our corporate governance guidelines, including our code of business conduct and ethics applicable to all of our associates, officers and directors, as well as the charters of our audit committee, compensation committee and corporate governance and nominating committee are available at https://myfw.gcs-web.com/investor-relations. The foregoing information is also available in print to any shareholder who requests it from the Company. Except as explicitly provided, information furnished by the Company and information on, or accessible through, the SEC’s or the Company’s website is not incorporated into this Annual Report on Form 10-K or our other securities filings and is not a part of them.

Supervision and Regulation

The U.S. banking industry is highly regulated under federal and state law. Banking laws, regulations, and policies affect the operations of the Company and its subsidiaries. Investors should understand that the primary objective of the U.S. bank regulatory regime is the protection of depositors, the Deposit Insurance Fund (DIF), and the banking system as a whole, not the protection of the Company’s shareholders.

As a bank holding company, we are subject to inspection, examination, supervision, and regulation by the Board of Governors of the Federal Reserve System (Federal Reserve). The Bank, which is our subsidiary, is a Colorado-chartered commercial bank and is not a member of the Federal Reserve System (a "state nonmember bank"). As such, the Bank is subject to regulation, supervision, and examination by both the Colorado Division of Banking (CDB) and the Federal Deposit Insurance Corporation (FDIC). In addition, we expect that any additional businesses that we may invest in or acquire will be regulated by various state and/or federal banking regulators.

Banking statutes and regulations are subject to continual review and revision by Congress, state legislatures and federal and state regulatory agencies. A change in such statutes or regulations, including changes in how they are interpreted or implemented, could have a material effect on our business. In addition to laws and regulations, state and federal bank regulatory agencies may issue policy statements, interpretive letters and similar written guidance pursuant to such laws and regulations, which are binding on us and our subsidiaries.

Banking statutes, regulations and policies could restrict our ability to diversify into other areas of financial services, acquire depository institutions, and make distributions or pay dividends on our equity securities. They may also require us to provide financial support to any bank that we control, maintain capital balances in excess of those desired by management, and pay higher deposit insurance premiums as a result of a general deterioration in the financial condition of the Bank or other depository institutions we control.

The description below summarizes certain elements of the applicable bank regulatory framework. This description is not intended to describe all laws and regulations applicable to us and our subsidiaries. The description is qualified in its entirety by reference to the full text of the statutes, regulations, policies, interpretive letters and other written guidance that are described.

Regulatory Capital

The Company and the Bank are each required to comply with applicable capital adequacy standards established by the Federal Reserve and the FDIC. The current risk-based capital standards applicable to the Company and the Bank are based on the December 2010 final capital framework for strengthening international capital standards, known as Basel III, of the Basel Committee on Banking Supervision, or Basel Committee. The final rules implementing the Basel Committee on Banking Supervision’s capital guidelines for U.S. banks (Basel III Rules) have been fully phased in. The Basel III Rules require banks and bank holding companies, including the Company and the Bank, to maintain minimum capital amounts and ratios. These ratios are common equity Tier 1 capital (CET1), Tier 1 capital and total capital (as defined in the regulations) to risk-weighted assets (as defined in the regulations), and Tier 1 capital (as defined in the regulations) to average assets (as defined in the regulations).

17

Table of Contents

The final rules of Basel III also established a "capital conservation buffer" of 2.5% above new regulatory minimum capital ratios. The minimum capital ratios inclusive of the capital conservation buffer are as follows: (i) a CET1 ratio of 7.0%; (ii) a Tier 1 capital ratio of 8.5%; and (iii) a total capital ratio of 10.5%. Banks are subject to limitations on paying dividends, engaging in share repurchases, and paying discretionary bonuses if their capital level falls below the buffer amount. These limitations establish a maximum percentage of eligible retained income that can be utilized for such activities.

The Basel III Capital Rules also attempt to improve the quality of capital by implementing changes to the definition of capital. Among the most important changes are stricter eligibility criteria for regulatory capital instruments that disallow the inclusion of certain instruments, such as trust preferred securities (other than grandfathered trust preferred securities), in Tier 1 capital going forward and new constraints on the inclusion of minority interests, mortgage-servicing assets, deferred tax assets and certain investments in the capital of unconsolidated financial institutions. In addition, the Basel III Capital Rules require that most regulatory capital deductions be made from CET1 capital.

The Federal Reserve and the FDIC may also set higher capital requirements for individual institutions whose circumstances warrant it. For example, institutions experiencing internal growth or making acquisitions are expected to maintain strong capital positions substantially above the minimum supervisory levels, without significant reliance on intangible assets. At this time, the bank regulatory agencies are more inclined to impose higher capital requirements to meet well capitalized standards and future regulatory change could impose higher capital standards as a routine matter. The Company’s regulatory capital ratios and those of the Bank are in excess of the levels established for "well capitalized" institutions under the rules.

The Basel III Capital Rules also set forth certain changes in the methods of calculating certain risk-weighted assets, which in turn affects the calculation of risk-based capital ratios. Under the Basel III Capital Rules, higher or more sensitive risk weights have been assigned to various categories of assets, including certain credit facilities that finance the acquisition, development or construction of real property, certain exposures or credits that are 90 days past due or on nonaccrual status, foreign exposures and certain corporate exposures. In addition, these rules include greater recognition of collateral and guarantees, and revised capital treatment for derivatives and repo-style transactions.

The federal bank regulators have modified certain aspects of the Basel III Capital Rules since the rules were initially published, and additional modifications may be made in the future. In December 2017, the Basel Committee published standards that it described as the finalization of the Basel III post-crisis regulatory reforms (commonly referred to as Basel IV). Among other things, these standards revise the Basel Committee’s standardized approach for credit risk (including by recalibrating risk weights and introducing new capital requirements for certain "unconditionally cancellable commitments," such as unused credit card lines of credit) and provides a new standardized approach for operational risk capital. Under the Basel framework, these standards were generally effective on January 1, 2023, with an aggregate output floor phasing in through January 1, 2028. On September 9, 2022, the U.S. federal banking regulators announced their intent to revise regulatory capital requirements to align them with the regulatory capital standards that were finalized by the Basel Committee in December 2017. On July 27, 2023, the OCC, Federal Reserve, and FDIC jointly released a Notice of Proposed Rulemaking that would implement the Basel III revisions for large banking organizations; however, a final rule has not yet been issued. In addition, the U.S. federal banking regulators stated that Community banking organizations would not be impacted by the proposal. Under the current U.S. capital rules, operational risk capital requirements and a capital floor apply only to advanced approaches institutions, and not to the Company or the Bank. The impact of Basel IV on us will depend on the manner in which it is implemented by the federal bank regulators.

In accordance with the Economic Growth, Regulatory Relief, and Consumer Protection Act (Regulatory Relief Act), discussed below, the federal banking agencies published final rules implementing the community bank leverage ratio in November 2019. Under the final rules, which went into effect on January 1, 2020, depository institutions and depository institution holding companies that have less than $10 billion in total consolidated assets and meet other qualifying criteria, including a leverage capital ratio of greater than 9%, off-balance-sheet exposures of 25% or less of total consolidated assets and trading assets plus trading liabilities of 5% or less of total consolidated assets, are deemed "qualifying community banking organizations" and are eligible to opt into the community bank leverage ratio framework. A qualifying community banking organization that elects to use the community bank leverage ratio framework and that maintains a leverage capital ratio of greater than 9% is considered to have satisfied the generally applicable risk-based and leverage capital requirements under the Basel III Capital Rules and, if applicable, is considered to have met the “well capitalized” ratio requirements for purposes of its primary federal regulators prompt corrective action rules, discussed below. The Company and the Bank have not made an election to use the community bank leverage ratio framework but may make such an election in the future if determined to be possible and advantageous.

18

Table of Contents

Regulation of the Company

The Bank Holding Company Act of 1956, as amended (BHC Act), and other federal laws subject bank holding companies to particular restrictions on the types of activities in which they may engage, and to a range of supervisory requirements and activities, including regulatory enforcement actions for violations of laws and regulations.

Permitted Activities. Generally, bank holding companies are prohibited under the BHC Act from engaging in, or acquiring direct or indirect control of more than 5% of the voting shares of any company engaged in any activity other than (i) banking or managing or controlling banks or (ii) an activity that the Federal Reserve determines to be so closely related to banking as to be a proper incident to the business of banking. The Federal Reserve has the authority to require a bank holding company to terminate an activity or terminate control of or liquidate or divest certain subsidiaries or affiliates when the Federal Reserve believes the activity or the control of the subsidiary or affiliate constitutes a significant risk to the financial safety, soundness or stability of any of its banking subsidiaries.

Status as a Financial Holding Company. Under the BHC Act, a bank holding company may file an election with the Federal Reserve to be treated as a financial holding company and engage in an expanded list of financial activities. The election must be accompanied by a certification that all of the company’s insured depository institution subsidiaries are "well capitalized" and "well managed." Additionally, the Community Reinvestment Act of 1977 (CRA) rating of each subsidiary bank must be satisfactory or better. If, after becoming a financial holding company and undertaking activities not permissible for a bank holding company, the company fails to continue to meet any of the prerequisites for financial holding company status, the company must enter into an agreement with the Federal Reserve to comply with all applicable capital and management requirements. If the company does not return to compliance within 180 days, the Federal Reserve may order the company to divest its subsidiary banks or the company may discontinue or divest investments in companies engaged in activities permissible only for a bank holding company that has elected to be treated as a financial holding company. The Company filed an election and became a financial holding company in 2006.

Sound Banking Practices. Bank holding companies and their non-banking subsidiaries are prohibited from engaging in activities that represent unsafe or unsound banking practices. For example, under certain circumstances the Federal Reserve’s Regulation Y requires a holding company to give the Federal Reserve prior notice of any redemption or repurchase of its own equity securities if the consideration to be paid, together with the consideration paid for any repurchases in the preceding year, is equal to 10% or more of the company’s consolidated net worth. The Federal Reserve may oppose the transaction if it believes that the transaction would constitute an unsafe or unsound practice or would violate a regulation. As another example, a holding company is prohibited from impairing its subsidiary bank’s soundness by causing the bank to make funds available to non-banking subsidiaries or their clients if the Federal Reserve believes it not prudent to do so. The Federal Reserve has the power to assess civil money penalties for knowing or reckless violations if the activities leading to a violation caused a substantial loss to a depository institution. Potential penalties are as high as $1.0 million for each day the activity continues.

Source of Strength. In accordance with the Dodd-Frank Act and long-standing Federal Reserve policy, the Company must act as a source of financial and managerial strength to the Bank. Under this policy, the Company must commit resources to support the Bank, including at times when the Company may not be in a financial position to provide it. As discussed below, the Company could be required to guarantee the capital plan of the Bank if it becomes undercapitalized for purposes of banking regulations. Any capital loans by a bank holding company to its subsidiary bank are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary bank. The BHC Act provides that, in the event of a bank holding company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a bank subsidiary will be assumed by the bankruptcy trustee and entitled to priority of payment.

Regulatory agencies have promulgated regulations to increase the capital requirements for bank holding companies to a level that matches those of banking institutions.

Anti-Tying Restrictions. Bank holding companies and affiliates are prohibited from tying the provision of services, such as extensions of credit, to other services offered by a holding company or its affiliates.

Acquisitions. The BHC Act, Section 18(c) of the Federal Deposit Insurance Act, as amended (FDIA), the Colorado Banking Code and other federal and state statutes regulate acquisitions of commercial banks and their holding companies. The BHC Act generally limits acquisitions by bank holding companies to commercial banks and companies engaged in activities that the Federal Reserve has determined to be so closely related to banking as to be a proper incident thereto. The BHC Act requires every bank holding company to obtain the prior approval of the Federal Reserve before: (i) acquiring more than 5% of the voting stock of any bank or other bank holding company; (ii) acquiring all or substantially all of the assets of any bank or bank holding company; or (iii) merging or consolidating with any other bank holding company.

19

Table of Contents

In reviewing applications seeking approval of merger and acquisition transactions, the bank regulatory authorities generally consider, among other things, the competitive effect and public benefits of the transactions, the financial and managerial resources and future prospects of the combined organization (including the capital position of the combined organization), the applicant’s performance record under the Community Reinvestment Act, (see the section captioned "Community Reinvestment Act" included below in this item), fair housing laws and the effectiveness of the subject organizations in combating money laundering activities.

The Company is also subject to the Change in Bank Control Act of 1978 (Control Act) and related Federal Reserve regulations, which provide that any person who proposes to acquire at least 10% (but less than 25%) of any class of a bank holding company’s voting securities is presumed to control the company (unless the company is not publicly held or some other shareholder owns a greater percentage of voting stock). Any person who would be presumed to acquire control or who proposes to acquire control of 25% or more of any class of a bank holding company’s voting securities, or who proposes to acquire actual control, must provide the Federal Reserve with at least 60 days’ prior written notice of the acquisition. The Federal Reserve may disapprove a proposed acquisition if: (i) it would result in adverse competitive effects; (ii) the financial condition of the acquiring person might jeopardize the target institution’s financial stability or prejudice the interests of depositors; (iii) the competence, experience or integrity of any acquiring person indicates that the proposed acquisition would not be in the best interests of the depositors or the public; or (iv) the acquiring person fails to provide all of the information required by the Federal Reserve. Any proposed acquisition of the voting securities of a bank holding company that is subject to approval under the BHC Act is not subject to the Control Act notice requirements. Any company that proposes to acquire "control," as those terms are defined in the BHC Act and Federal Reserve regulations, of a bank holding company or to acquire 25% or more of any class of voting securities of a bank holding company would be required to seek the Federal Reserve’s prior approval under the BHC Act to become a bank holding company.

Dividends. The Company’s earnings and activities are affected by legislation, by regulations and by local legislative and administrative bodies and decisions of courts in the jurisdictions in which we conduct business. These include limitations on the ability of the Bank to pay dividends to the Company and the Company’s ability to pay dividends to its shareholders. It is the policy of the Federal Reserve that bank holding companies should pay cash dividends on common stock only out of income available over the past year and only if prospective earnings retention is consistent with the organization’s expected future needs and financial condition. The policy provides that bank holding companies should not maintain a level of cash dividends that undermines the bank holding company’s ability to serve as a source of strength to its banking subsidiary. Consistent with such policy, a banking organization should have comprehensive policies on dividend payments that clearly articulate the organization’s objectives and approaches for maintaining a strong capital position and achieving the objectives of the policy statement.

As a Colorado state-chartered bank, the Bank is subject to limitations under Colorado law on the payment of dividends. The Colorado Banking Code provides that a bank may declare dividends from retained earnings and other components of capital specifically approved by the Colorado State Banking Board so long as the declaration is made in compliance with rules established by the Colorado State Banking Board.

In addition, a state nonmember bank may not declare a dividend if paying the dividend would result in the bank being undercapitalized under FDIA, discussed above, and must comply with any discretionary distribution restrictions imposed on it under the federal banking agencies’ capital buffer rules. The FDIC has stated that, in general, state nonmember banks can pay dividends in reasonable amounts only after the bank’s earnings have first been applied to the elimination of losses and the establishment of necessary reserves and prudent capital levels. The FDIC may also direct state nonmember banks that are poorly rated or subject to written supervisory actions not to pay dividends in order to ensure adequate capital exists to support their risk profile.

20

Table of Contents

In 2009, the Federal Reserve issued a supervisory letter providing greater clarity to its policy statement on the payment of dividends by bank holding companies. In this letter, the Federal Reserve stated that when a holding company’s board of directors is deciding on the level of dividends to declare, it should consider, among other factors: (i) overall asset quality, potential need to increase reserves and write down assets, and concentrations of credit; (ii) potential for unanticipated losses and declines in asset values; (iii) implicit and explicit liquidity and credit commitments, including off-balance sheet and contingent liabilities; (iv) quality and level of current and prospective earnings, including earnings capacity under a number of plausible economic scenarios; (v) current and prospective cash flow and liquidity; (vi) ability to serve as an ongoing source of financial and managerial strength to depository institution subsidiaries insured by the FDIC, including the extent of double leverage and the condition of subsidiary depository institutions; (vii) other risks that affect the holding company’s financial condition and are not fully captured in regulatory capital calculations; (viii) level, composition, and quality of capital; and (ix) ability to raise additional equity capital in prevailing market and economic conditions (the "Dividend Factors"). It is particularly important for a bank holding company’s board of directors to ensure that the dividend level is prudent relative to the organization’s financial position and is not based on overly optimistic earnings scenarios. In addition, a bank holding company’s board of directors should strongly consider, after careful analysis of the Dividend Factors, reducing, deferring or eliminating dividends when the quantity and quality of the holding company’s earnings have declined or the holding company is experiencing other financial problems, or when the macroeconomic outlook for the holding company’s primary profit centers has deteriorated. The Federal Reserve further stated that, as a general matter, a bank holding company should eliminate, defer or significantly reduce its distributions if: (i) its net income is not sufficient to fully fund the dividends; (ii) its prospective rate of earnings retention is not consistent with its capital needs and overall current and prospective financial condition; or (iii) it will not meet, or is in danger of not meeting, its minimum regulatory capital adequacy ratios. Failure to do so could result in a supervisory finding that the bank holding company is operating in an unsafe and unsound manner.

Additionally, the Federal Reserve possesses enforcement powers over bank holding companies and their non-bank subsidiaries with which it can prevent or remedy actions that represent unsafe or unsound practices, or violations of applicable statutes and regulations. Among these powers is the ability to proscribe the payment of dividends by banks and bank holding companies.

Stock Redemptions and Repurchases. It is an essential principle of safety and soundness that a banking organization’s redemption and repurchases of regulatory capital instruments, including common stock, from investors be consistent with the organization’s current and prospective capital needs. In assessing such needs, the board of directors and management of a bank holding company should consider the Dividend Factors discussed above under "Dividends." The risk-based capital rule directs bank holding companies to consult with the Federal Reserve before redeeming any equity or other capital instrument included in Tier 1 or Tier 2 capital prior to stated maturity, if such redemption could have a material effect on the level or composition of the organization’s capital base. Bank holding companies that are experiencing financial weaknesses, or that are at significant risk of developing financial weaknesses, must consult with the appropriate Federal Reserve supervisory staff before redeeming or repurchasing common stock or other regulatory capital instruments for cash or other valuable consideration. Similarly, any bank holding company considering expansion, whether through acquisitions or through organic growth and new activities, generally also must consult with the appropriate Federal Reserve supervisory staff before redeeming or repurchasing common stock or other regulatory capital instruments for cash or other valuable consideration. In evaluating the appropriateness of a bank holding company’s proposed redemption or repurchase of capital instruments, the Federal Reserve will consider the potential losses that the holding company may suffer from the prospective need to increase reserves and write down assets from continued asset deterioration and the holding company’s ability to raise additional common stock and other Tier 1 capital to replace capital instruments that are redeemed or repurchased. A bank holding company must inform the Federal Reserve of a redemption or repurchase of common stock or perpetual preferred stock for cash or other value resulting in a net reduction of the bank holding company’s outstanding amount of common stock or perpetual preferred stock below the amount of such capital instrument outstanding at the beginning of the quarter in which the redemption or repurchase occurs. In addition, a bank holding company must advise the Federal Reserve sufficiently in advance of such redemptions and repurchases to provide reasonable opportunity for supervisory review and possible objection should the Federal Reserve determine a transaction raises safety and soundness concerns.

Regulation Y requires that a bank holding company that is not well capitalized or well managed, or that is subject to any unresolved supervisory issues, provide prior notice to the Federal Reserve for any repurchase or redemption of its equity securities for cash or other value that would reduce by 10% or more the holding company’s consolidated net worth aggregated over the preceding 12-month period.

Annual Reporting; Examinations. The Company is required to file an annual report with the Federal Reserve and to provide such additional information as the Federal Reserve may require. The Federal Reserve may examine a bank holding company and any of its subsidiaries, and charge the company for the cost of such an examination.

21

Table of Contents

The Bank is examined from time to time by its primary federal banking regulator, the FDIC, and the CDB and is charged for the cost of such an examination. Depending on the results of a given examination, the FDIC and the CDB may revalue the Bank’s assets and require that the Bank establish specific reserves to compensate for the difference between the value determined by the regulator and the book value of the assets. The Company is required to provide annual audited financial statements and other information to the FDIC as required under Part 363 of FDIC rules and regulations.

In July 2023, the federal banking regulators proposed revisions to the Basel III Capital Rules to implement the Basel IV standards and make other changes to the Basel III Capital Rules. The proposal introduces revised credit, equity, and operational risks, as well as credit valuation adjustment risk and market risk requirements, among other changes. However, the revised capital requirements of the proposed rule would not apply to the Company or the Bank because they have less than $100 billion in total consolidated assets and trading assets and liabilities below the threshold for market risk requirements.

Imposition of Liability for Undercapitalized Subsidiaries. The FDIA requires bank regulators to take "prompt corrective action" to resolve problems associated with insured depository institutions. In the event an institution becomes "undercapitalized," it must submit a capital restoration plan. The capital restoration plan will not be accepted by the regulators unless each company "having control of" the undercapitalized institution "guarantees" the subsidiary’s compliance with the capital restoration plan until it becomes "adequately capitalized." For purposes of this statute, the Company has control of the Bank. Under the FDIA, the aggregate liability of all companies controlling a particular institution is limited to the lesser of five percent of the depository institution’s total assets at the time it became undercapitalized or the amount necessary to bring the institution into compliance with applicable capital standards. The FDIA grants greater powers to bank regulators in situations where an institution becomes "significantly" or "critically" undercapitalized or fails to submit a capital restoration plan. For example, a bank holding company controlling such an institution can be required to obtain prior Federal Reserve approval of proposed distributions, or might be required to consent to a merger or to divest the troubled institution or other affiliates.

State Law Restrictions. As a Colorado corporation, the Company is subject to certain limitations and restrictions under applicable Colorado corporate law. For example, state law restrictions in Colorado include limitations and restrictions relating to indemnification of directors; distributions and dividends to shareholders; transactions involving directors, officers or interested shareholders; maintenance of books, records, and minutes; and observance of certain corporate formalities.

Regulation of the Bank

Capital Adequacy. Under the Basel III Capital Rules, discussed above, the FDIC monitors the capital adequacy of the Bank by using a combination of risk-based guidelines and leverage ratios. The FDIC considers the Bank’s capital levels when acting on various types of applications and when conducting supervisory activities related to the safety and soundness of the Bank and the banking system. Higher capital levels may be required if warranted by the circumstances or risk profiles of individual institutions, or if required by the banking regulators due to the economic conditions impacting our markets. For example, FDIC regulations provide that higher capital may be required to take adequate account of, among other things, interest rate risk and the risks posed by concentrations of credit, nontraditional activities or securities trading activities.

As of December 31, 2025 and 2024, the Bank exceeded all regulatory minimum capital requirements.

Prompt Corrective Regulatory Action. Under applicable federal statutes, the federal bank regulatory agencies are required to take "prompt corrective action" with respect to institutions that do not meet specified minimum capital requirements. For these purposes, the law establishes five capital categories: well capitalized, adequately capitalized, undercapitalized, significantly undercapitalized, and critically undercapitalized. Under the FDIC’s prompt corrective action regulations, an institutions capitalization is deemed to be as follows:

•"Well capitalized" if it has a total risk-based capital ratio of 10.0% or greater, a Tier 1 risk-based capital ratio of 8.0% or greater, a CET1 risk-based capital ratio of 6.5% or greater and a leverage capital ratio of 5.0% or greater.

•"Adequately capitalized" if it has a total risk-based capital ratio of 8.0% or greater, a Tier 1 risk-based capital ratio of 6.0% or greater, a CET1 risk-based capital ratio of 4.5% or greater and a leverage capital ratio of 4.0% or greater.

•"Undercapitalized" if it has a total risk-based capital ratio of less than 8.0%, a Tier 1 risk-based capital ratio of less than 6.0%, a CET1 risk-based capital ratio of less than 4.5% or a leverage capital ratio of less than 4.0%.

•"Significantly undercapitalized" if it has a total risk-based capital ratio of less than 6.0%, a Tier 1 risk-based capital ratio of less than 4.0%, a CET1 capital ratio of less than 3.0% or a leverage capital ratio of less than 3.0%.

22

Table of Contents

•"Critically undercapitalized" if it has a ratio of tangible equity to total assets that is equal to or less than 2.0%.

Undercapitalized institutions are subject to growth limitations and are required to submit a capital restoration plan to the FDIC. The federal bank regulatory agencies may not accept such a plan without determining, among other things, that the plan is based on realistic assumptions and is likely to succeed in restoring the depository institution’s capital. In addition, for a capital restoration plan to be acceptable, the depository institution’s parent holding company must guarantee that the institution will comply with such capital restoration plan. If a depository institution fails to submit an acceptable plan, it is treated as if it is "significantly undercapitalized." "Significantly undercapitalized" depository institutions may be subject to a number of requirements and restrictions, including orders to sell sufficient voting stock to become "adequately capitalized," requirements to reduce total assets, and cessation of receipt of deposits from correspondent banks. "Critically undercapitalized" institutions are subject to the appointment of a receiver or conservator.

As of December 31, 2025 and 2024, the Bank qualified as "well capitalized" under the prompt corrective action rules.

Deposit Insurance Assessments. All of a depositor’s accounts at an insured bank, including all noninterest-bearing transaction accounts, are insured by the FDIC up to $250,000. FDIC-insured banks are required to pay deposit insurance premiums to the FDIC. The FDIC has adopted a risk-based assessment system whereby FDIC-insured depository institutions pay insurance premiums at rates based on their risk classification. An institution’s risk classification is assigned based on current financial ratios and supervisory ratings of the institution’s financial condition and operations. Assessments are based on an institution’s average consolidated total assets less average tangible equity, subject to adjustments for certain types of institutions, including custodial banks.

The FDIC may terminate a depository institution’s deposit insurance upon a finding that the institution’s financial condition is unsafe or unsound or that the institution has engaged in unsafe or unsound practices or has violated any applicable rule, regulation, order, or condition enacted or imposed by the institution’s regulatory agency. If deposit insurance for a banking business that we invest in or acquire were to be terminated, that would have a material adverse effect on that banking business and potentially on the Company as a whole.

Depositor Preference. FDIA provides that, in the event of the "liquidation or other resolution" of an insured depository institution, the claims of depositors of the institution, including the claims of the FDIC as subrogee of insured depositors, and certain claims for administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution. If an insured depository institution fails, insured and uninsured depositors, along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including the parent bank holding company, with respect to any extensions of credit they have made to such insured depository institution.

Consumer Financial Protection. The Bank is subject to a number of federal and state consumer protection laws that extensively govern its relationship with its clients. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Right to Financial Privacy Act, the Service Members Civil Relief Act and these laws’ respective state law counterparts, as well as state usury laws and laws regarding unfair and deceptive acts and practices. These and other federal laws, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, prohibit unfair, deceptive, and abusive practices, restrict the Bank’s ability to raise interest rates and subject the Company and the Bank to substantial regulatory oversight. Violations of applicable consumer protection laws can result in significant potential liability from litigation brought by clients, including actual damages, restitution, and attorneys’ fees. Federal bank regulators, the U.S. Department of Justice, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, action by the U.S. Department of Justice, the state and local attorneys general in each jurisdiction in which we operate and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain any required bank regulatory approval for merger or acquisition transactions the Company may want to pursue or our prohibition from engaging in such transactions even if approval is not required.

Notwithstanding ongoing legal, budgetary, and structural challenges affecting the Consumer Financial Protection Bureau (CFPB), the CFPB remains an active federal regulatory agency with continuing supervisory and enforcement authority and retains its broad rulemaking authority for a wide range of consumer financial laws that apply to all banks. The CFPB is authorized to issue rules for both bank and non-bank companies that offer consumer financial products and services, subject to consultation with the prudential banking regulators. In general, however, banks with assets of $10 billion or less, such as the Bank, will continue to be examined for consumer compliance by their primary federal bank regulator.

23

Table of Contents

Much of the CFPB’s rulemaking has focused on mortgage lending and servicing, including an important rule requiring lenders to ensure that prospective buyers have the ability to repay their mortgages. Other areas of CFPB focus include consumer protections for prepaid cards, payday lending, debt collection, overdraft services and privacy notices. The CFPB has been particularly active in issuing rules and guidelines concerning residential mortgage lending and servicing, issuing numerous rules and guidance related to residential mortgages. Perhaps the most significant of these guidelines is the "Ability-to-Repay and Qualified Mortgage Standards under the Truth in Lending Act" portions of Regulation Z. Under the Dodd-Frank Act, creditors must make a reasonable and good faith determination, based on verified and documented information, that the consumer has a reasonable "ability to repay" a residential mortgage according to its terms. There is a statutory presumption of compliance with this requirement for mortgages that meet the requirements to be deemed "qualified mortgages." The CFPB rule defines the key threshold terms "ability to repay" and "qualified mortgage."

The CFPB has actively issued enforcement actions against both large and small entities and to entities across the entire financial service industry. The CFPB has relied upon "unfair, deceptive, or abusive acts" prohibitions as its primary enforcement tool. However, the CFPB and Department of Justice (DOJ) continue to be focused on fair lending in taking enforcement actions against banks with renewed emphasis on alleged "redlining" practices. Failure to comply with these laws and regulations could give rise to regulatory sanctions, client rescission rights, actions by state and local attorneys general and civil or criminal liability.

Brokered Deposit Restrictions. Well capitalized institutions are not subject to limitations on brokered deposits, while an adequately capitalized institution is able to accept, renew or roll over brokered deposits only with a waiver from the FDIC and is subject to certain restrictions on the yield paid on such deposits. Undercapitalized institutions are generally not permitted to accept, renew, or roll over brokered deposits.

Community Reinvestment Act. The CRA is intended to encourage banks to help meet the credit needs of their entire communities, including low- and moderate-income neighborhoods, consistent with safe and sound operations. The regulators examine banks and assign each bank a public CRA rating. The CRA then requires bank regulators to consider the bank's record in meeting the needs of its community when considering certain applications by a bank, including applications to establish a banking center or to conduct certain mergers or acquisitions. The Federal Reserve is required to consider the CRA records of a bank holding company’s controlled banks when considering an application by the bank holding company to acquire a bank or to merge with another bank holding company.

When we apply for regulatory approval to make certain investments, the regulators will consider the CRA record of the target institution and our depository institution subsidiary. An unsatisfactory CRA record could substantially delay approval or result in denial of an application.

Insider Credit Transactions. Banks are subject to certain restrictions imposed by the Federal Reserve Act on extensions of credit to certain executive officers, directors, principal shareholders, and any related interests of such persons (Regulation O). Extensions of credit to such persons must (a) be made on substantially the same terms, including interest rates and collateral, and follow credit underwriting procedures that are not less stringent than those prevailing at the time for comparable transactions with persons not covered by such restrictions, and (b) not involve more than the normal risk of repayment or present other unfavorable features. Banks are also subject to certain lending limits and restrictions on overdrafts to such persons. A violation of these restrictions may result in the assessment of substantial civil monetary penalties on the affected bank or any officer, director, employee, agent, or other person participating in the conduct of the affairs of that bank, the imposition of a cease and desist order, and other regulatory sanctions.

Safety and Soundness Standards. Under the FDIC Improvement Act (FDICIA), each federal banking agency has prescribed, by regulation, non-capital safety and soundness standards for institutions under its authority. These standards cover internal controls, information and internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, compensation, fees and benefits, such other operational and managerial standards as the agency determines to be appropriate, and standards for asset quality, earnings, and stock valuation. An institution which fails to meet these standards must develop a plan acceptable to the agency, specifying the steps that the institution will take to meet the standards. Failure to submit or implement such a plan may subject the institution to regulatory sanctions.

Financial Privacy. In accordance with the Gramm-Leach-Bliley Act of 1999 (GLB Act), federal banking regulators adopted rules that limit the ability of banks and other financial institutions to disclose nonpublic information about consumers to nonaffiliated third parties. These rules require disclosure of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to a nonaffiliated third party. The privacy provisions of the GLB Act affect how consumer information is transmitted through diversified financial companies and conveyed to outside vendors.

24

Table of Contents

Anti-Money Laundering. Under federal law, including the Bank Secrecy Act and Title III of the Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (USA PATRIOT Act), certain types of financial institutions, including insured depository institutions, must maintain anti-money laundering programs that include established internal policies, procedures and controls; a designated compliance officer; an ongoing training program; and testing of the program by an independent audit function. Financial institutions are restricted from entering into specified financial transactions and account relationships and must meet enhanced standards for due diligence, client identification and recordkeeping, including in their dealings with non-U.S. financial institutions and non-U.S. clients. Financial institutions must take reasonable steps to conduct enhanced scrutiny of account relationships to guard against money laundering and to report any suspicious information maintained by financial institutions. Bank regulators routinely examine institutions for compliance with these obligations and they must consider an institution’s anti-money laundering compliance when considering regulatory applications filed by the institution, including applications for banking mergers and acquisitions. The regulatory authorities have imposed "cease and desist" orders and civil money penalty sanctions against institutions found to be violating these obligations.

Office of Foreign Assets Control Regulation. The United States has imposed economic sanctions that affect transactions with designated foreign countries, foreign nationals, and others. These are typically known as the "OFAC" rules based on their administration by the U.S. Department of the Treasury Office of Foreign Assets Control (OFAC). The OFAC-administered sanctions targeting countries take many different forms. Generally, however, they contain one or more of the following elements: (i) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on "U.S. persons" engaging in financial transactions relating to making investments in, or providing investment-related advice or assistance to, a sanctioned country; and (ii) a blocking of assets in which the government or specially designated nationals of the sanctioned country have an interest, by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (e.g., property and bank deposits) cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC. The Bank is responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious legal and reputational consequences.

Transactions with Affiliates

Transactions between depository institutions and their affiliates, including transactions between the Bank and the Company, are governed by Sections 23A and 23B of the Federal Reserve Act and the Federal Reserve’s Regulation W promulgated thereunder. Generally, Section 23A limits the extent to which a depository institution and its subsidiaries may engage in "covered transactions" with any one affiliate to an amount equal to 10% of the depository institution’s capital stock and surplus and contains an aggregate limit on all such transactions with all affiliates of an amount equal to 20% of the depository institution’s capital stock and surplus. Section 23A also establishes specific collateral requirements for loans or extensions of credit to, or guarantees, acceptances or letters of credit issued on behalf of, an affiliate. Section 23B requires that covered transactions and a broad list of other specified transactions be on terms substantially the same, or at least as favorable to the depository institution and its subsidiaries, as those for similar transactions with non-affiliates.

The Volcker Rule

Section 619 of the Dodd-Frank Act, commonly known as the "Volcker Rule," generally prohibits certain banking entities from engaging in short-term proprietary trading of financial instruments and from owning, sponsoring or having certain relationships with hedge funds or private equity funds (collectively, "covered funds"). The Regulatory Relief Act, discussed below, includes a provision exempting banking organizations with $10 billion or less in total consolidation assets, and total trading assets and trading liabilities that are 5% or less of total consolidated assets, from the Volcker Rule. Thus, the Company and the Bank are not currently subject to the Volcker Rule.

Concentration in Commercial Real Estate Lending (CRE)

As a part of their regulatory oversight, the federal regulators have issued guidelines on sound risk management practices with respect to a financial institution’s CRE lending activities. The guidelines identify certain concentration levels that, if exceeded, will expose the institution to additional supervisory analysis surrounding the institution’s CRE concentration risk. The guidelines are designed to promote appropriate levels of capital and sound loan and risk management practices for institutions with a concentration of CRE loans. The Company’s CRE concentrations are discussed in the "Risk Factors" section below.

25

Table of Contents

Interstate Banking and Branching

Under the Riegle-Neal Interstate Banking and Branching Efficiency Act of 1999 (Riegle-Neal Act), a bank holding company may acquire banks in states other than its home state, subject to any state requirement that the bank has been organized and operating for a minimum period of time, not to exceed five years, and to certain deposit market-share limitations. Bank holding companies must be well capitalized and well managed, not merely adequately capitalized and adequately managed, in order to acquire a bank located outside of the bank holding company’s home state. The Riegle-Neal Act also authorizes banks to merge across state lines, thereby creating interstate branches.

Colorado state law provides that a Colorado-chartered bank can establish a branch anywhere in Colorado provided that the branch is approved in advance by the CDB. The branch must also be approved by the FDIC. The approval process considers a number of factors, including financial history, capital adequacy, earnings prospects, character of management, needs of the community and consistency with corporate powers. The Dodd-Frank Act permits a national or state bank, with the approval of its regulator, to open a de novo branch in any state if the law of the state in which the branch is proposed would permit the establishment of the branch if the bank was charted in such state.

The Federal Reserve, the OCC and FDIC jointly issued a final rule in 1997 that adopted uniform regulations implementing Section 109 of the Riegle-Neal Act. Section 109 which prohibits any bank from establishing or acquiring a branch or branches outside of its home state primarily for the purpose of deposit production. Congress enacted Section 109 to ensure that interstate branches would not take deposits from a community without the bank reasonably helping to meet the credit needs of that community.

Limitations on Incentive Compensation

In 2016, several federal financial agencies (including the Federal Reserve and FDIC) re-proposed restrictions on incentive-based compensation pursuant to Section 956 of the Dodd-Frank Act for financial institutions with $1 billion or more in total consolidated assets. For institutions with at least $1 billion but less than $50 billion in total consolidated assets, the proposal would impose principles-based restrictions that are broadly consistent with existing interagency guidance on incentive-based compensation. Such institutions would be prohibited from entering into incentive compensation arrangements that encourage inappropriate risks by the institution (i) by providing an executive officer, employee, director, principal shareholder, or individuals who are "significant risk takers" with excessive compensation, fees, or benefits, or (ii) that could lead to material financial loss to the institution. The comment period for these proposed regulations has closed, but a final rule has not been published. Depending upon the outcome of the rule making process, the application of this rule to us could require us to revise our compensation strategy, increase our administrative costs and adversely affect our ability to recruit and retain qualified associates.

Cybersecurity

The Federal Financial Institutions Examination Council (FFIEC) requires financial institutions to design multiple layers of security controls to establish lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing internet-based services of the financial institution. Further, a financial institution’s management is expected to maintain sufficient business continuity management planning processes to ensure the rapid recovery, resumption, and maintenance of the institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to this type of cyber-attack. If we fail to observe the regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties.

Additionally, the FDIC's Information Technology Risk Examination (InTREx) Program, based on the Uniform Rating System for Information Technology (URSIT), includes core modules for Audit, Management, Development and Acquisition, and Support and Delivery component ratings. If we fail to remain compliant with changing components of this regulation, we could be subject to various regulatory sanctions, including financial penalties.

The FFIEC's examination procedures regarding overall business continuity management (BCM) focus on enterprise-wide approaches that address technology, business operations, testing, and communication strategies critical to the continuity of the business. The BCM procedures describe principles and practices for information technology (IT) and operations designed to achieve safety and soundness, consumer financial protection, and compliance with applicable laws, regulations, and rules. Continued testing, training, and program updates ensure appropriate response to cyber and non-cyber, human and non-human disaster events. While we are compliant with BCM measures, the scope and severity of cyber and non-cyber, human, and non-human disaster events is unpredictable.

26

Table of Contents

The safeguard provision of the FTC's Gramm-Leach Bliley Act (GLBA) requires the Bank to take steps to protect their clients' information. The law requires the Bank to create a written information security plan that outlines its strategy for protecting customer/client information. The Bank must have reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of client information. The security measures must be commensurate with its size, scope of activities, sensitivity of the information in question, and the risk of data loss. While we are compliant with the FTC Safeguard's Rule, unforeseen risks and threats could challenge the strategy for protecting such information and the controls in place.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs, and many states have also recently implemented or modified their data breach notification, information security and data privacy requirements. The Company expects this trend of state-level activity in those areas to continue and are continually monitoring developments in the states in which its customers are located.

In addition, the SEC requires disclosure of material cybersecurity incidents, as well as cybersecurity risk management, strategy and governance. Under this rule, banking organizations that are SEC registrants must generally disclose information about a material cybersecurity incident within four business days of determining it is material with periodic updates as to the status of the incident in subsequent filings as necessary.

Anti-Money Laundering Act of 2020

On January 1, 2021, Congress enacted the National Defense Authorization Act (NDAA), which included significant reforms to the U.S. anti-money laundering (AML) regime. The NDAA includes the Anti-Money Laundering Act of 2020 (AML Act). The AML Act seeks to strengthen, modernize, and streamline the existing AML regime by promoting innovation, regulatory reform, and industry engagement through forums, such as the Bank Secrecy Act Advisory Group (BSAAG) and FinCEN Exchange. The Act also calls for FinCEN to work closely with regulatory, national security, and law enforcement partners to identify risks and priorities and provide valuable feedback to the financial industry. Some of the key requirements of the AML Act requires FinCEN to: (1) establish standards for the reporting of information on beneficial ownership, build an IT system to collect and secure the data, and create access protocols; (2) establish national anti-money laundering and countering the financing of terrorism priorities; (3) Enhancement of whistleblower provisions to provide for a robust whistleblower program and new anti-retaliation protections; (4) Review, and revise as appropriate, Currency Transaction Report (CTR) and Suspicious Activity Report (SAR) reporting requirements, and other existing Bank Secrecy Act (BSA) regulations and guidance; and (6) require law enforcement reporting to FinCEN on the use of BSA data, and establish procedures for additional feedback between FinCEN and financial institutions on the usefulness of SARs, and semi-annual publication of review of SAR activity and other BSA reports, including threat patterns, trends, and typologies.

Banks are not required to incorporate the AML/CFT Priorities into their risk based BSA compliance programs until the effective date of the final revised regulations. Nevertheless, in preparation for any new requirements when those final rules are published, the Bank is considering how it will incorporate the AML/CFT Priorities into its risk based BSA compliance program, by assessing the potential related risks associated with the products and services it offers the customers it serves, and the geographic areas in which it operates.

Changing Regulatory Structure and Future Legislation and Regulation

Congress may enact further legislation that affects the regulation of the financial services industry, and state legislatures may enact further legislation affecting the regulation of financial institutions chartered by or operating in these states. Federal and state regulatory agencies also periodically propose and adopt changes to their regulations or change the manner in which existing regulations are applied. We cannot predict the substance or impact of pending or future legislation or regulations, or the application thereof, although enactment of the proposed legislation could impact the regulatory structure under which the Company operates and may significantly increase costs, impede the efficiency of internal business processes, require an increase in regulatory capital, require modifications to the Company’s business strategy, and limit the Company’s ability to pursue business opportunities in an efficient manner. A change in statutes, regulations or regulatory policies applicable to the Company or any of its subsidiaries could have a material effect on our business.

27

Table of Contents

Monetary Policy and Economic Environment

The policies of regulatory authorities, including the monetary policy of the Federal Reserve, can have a significant effect on the operating results of bank holding companies and their subsidiaries. Among the means available to the Federal Reserve to affect the money supply are open market operations in United States government securities, changes in the discount rate on member bank borrowings, and changes in reserve requirements against member bank deposits. These means are used in varying combinations to influence overall financial stability of the economy which in turn stimulates need for growth and distribution of bank loans, investments, and deposits, and their use may affect interest rates charged on loans or paid on deposits as well as overall risk for banks and in turn, bank holding companies.

The Federal Reserve’s monetary policies have materially affected the operating results of commercial banks in the past and are expected to continue to do so in the future. The nature of future monetary policies and the effects of these policies on the Bank’s business and earnings cannot be predicted.