SouthState Bank Corp (SSB) Business

Item 1. Business.

Overview

SouthState Bank Corporation (“We,” “Our,” “SouthState” or the “Company”) is a financial holding company headquartered in Winter Haven, Florida. During the third quarter of 2025, the Company was redomiciled to the state of Florida by merging SouthState Corporation, a South Carolina corporation, with and into SouthState Bank Corporation, a Florida corporation that was wholly-owned by SouthState Corporation prior to such merger, and adopting its name. We provide a wide range of banking services and products to our customers through our wholly owned bank subsidiary, SouthState Bank, National Association (the “Bank”), a national banking association, from our headquarters branch in Winter Haven, Florida and, as of December 31, 2025, a 342-branch network located throughout Florida, South Carolina, Texas, Georgia, Colorado, North Carolina, Alabama, and Virginia. In addition, the Company owns SSB Insurance Corp., a captive insurance subsidiary pursuant to Section 831(b) of the U.S. Tax Code, which has been in dissolution since 2024. We do not engage in any significant operations other than the ownership of our banking subsidiary.

​

Through the Bank, we operate a correspondent banking and capital markets service division for over 1,200 small and medium sized community financial institutions, credit unions, and money managers throughout the United States. Based primarily in Atlanta, Georgia and Birmingham, Alabama, this division earns commissions on fixed income security sales, fees from hedging services, loan brokerage fees and consulting fees for services related to these activities. In addition, the Bank operates SouthState Securities Corp. (formally known as SouthState|DuncanWilliams Securities Corp., “SouthState Securities”), a full-service registered broker dealer headquartered in Memphis, Tennessee. The services offered by SouthState Securities are complementary to the Bank’s correspondent banking and capital markets businesses and provide additional opportunities to the Bank’s client base. The Bank also operates SouthState Private Capital Management LLC (“SouthState PCM”), a wholly-owned registered investment advisor, which offers support to the Bank’s Wealth line of business. SouthState PCM is the result of the December 31, 2025 merger of SouthState Advisory, Inc., a wholly-owned registered investment advisor, with and into Private Capital Management LLC, also a wholly-owned registered investment advisor the Bank acquired through the Independent Bank Group, Inc. (“Independent”) acquisition completed on January 1, 2025 (the “Independent Merger”). The Bank operates Corporate Billing, a transaction-based finance division headquartered in Decatur, Alabama that provides factoring, invoicing, collection and accounts receivable management services to transportation companies and automotive parts and service providers nationwide. In late 2023, the Bank formed SSB First Street Corporation, an investment subsidiary headquartered in Wilmington, Delaware, to hold tax-exempt municipal investment securities as part of the Bank’s investment portfolio.

​

At December 31, 2025, we had approximately $67.2 billion in assets, $48.6 billion in loans, $55.1 billion in deposits, $9.1 billion in shareholders’ equity, and a market capitalization of approximately $9.3 billion.

​

Our principal executive offices are located at, and our mailing address is, 1101 First Street South, Suite 202, Winter Haven, Florida 33880. Our telephone number is (863) 293-4710.

​

Our revenue is primarily derived from interest on, and fees received in connection with, real estate and other loans, interest and dividends from investment securities and short-term investments, commissions on bond sales, fees from deposit accounts, hedging services, and gains from the sale of residential mortgage loans. The principal sources of funds for our lending activities are customer deposits, repayment of loans, and the sale and maturity of investment securities. Our principal expenses are interest paid on deposits and operating and general administrative expenses.

​

2

Table of Contents

As is the case with banking institutions generally, our operations are materially and significantly influenced by the real estate market, general economic conditions, and by the tax, monetary and fiscal policies of the U.S. and state government and regulatory agencies, including the Federal Reserve. Deposit flows and costs of funds are influenced by interest rates on competing investments and general market rates of interest. Lending activities are affected by the demand for financing of real estate, equipment, receivables and other commercial collateral, and other types of loans, which in turn is affected by the interest rates at which such financing may be offered and other factors affecting local demand and availability of funds, including tax rates and regulatory structure. We face strong competition in the attraction of deposits (our primary source of lendable funds) and in the origination of loans. See “Competition.”

Products and Services

Lending Activities

Our loan portfolio includes commercial real estate loans, residential real estate loans, commercial and industrial loans, and consumer loans. The principal risk associated with each category of loans we make is the creditworthiness of the borrower. Borrower creditworthiness is affected by general economic conditions and the attributes of the borrower and the borrower’s market or industry. Attributes of the relevant business market or industry include the competitive environment, customer and supplier availability, the threat of substitutes and barriers to entry and exit.

Commercial Real Estate Loans. As of December 31, 2025, $28.0 billion, or 58%, of our loan portfolio consisted of loans secured by commercial real estate (including owner occupied and non-owner occupied commercial real estate, other income producing property and construction and land development lending). We offer construction financing, acquisition financing or refinancing of properties, commercial lines of credit and other loans that are secured by commercial real estate.

Residential Real Estate Loans. As of December 31, 2025, $10.5 billion, or 21%, of our loan portfolio consisted of residential real estate loans including home equity loans. We provide one-to-four family residential real estate loans with terms ranging from 10 to 30 years, with either fixed or adjustable interest rates and home equity lines. It is not our normal business practice to originate subprime loans. Our closed-end first lien loans are for purposes of property purchased, or for refinancing existing loans. The majority of our loans are owner-occupied, full documentation loans.

Commercial and Industrial (“C&I”) Loans. As of December 31, 2025, $9.2 billion, or 19%, of our loan portfolio consisted of commercial and industrial loans. Our C&I loans include lines of credit, acquisition finance credit facilities and other types of commercial credit and typically have maturities of five years or less. We also have a SBA 7(a) line of business whereby we routinely sell the government guaranteed portion of the SBA loans to investors with the unguaranteed portion of the loan and the servicing rights retained.

Other Consumer Loans. As of December 31, 2025, $1.0 billion, or 2%, of our loan portfolio consisted of other types of consumer loans. We offer consumer loans to our customers for personal, family and household purposes, including auto, boat, and personal installment loans.

We believe we have a strong team of consumer and commercial bankers to execute on our client-centered, relationship-driven banking model. Our commercial banking team consists of experienced professionals that use an advisory approach that emphasizes understanding each client’s business and offering a broad suite of loan, deposit and treasury management products and services. Our consumer banking team consists of experienced professionals that focus on knowing their individual clients in order to best meet their financial needs, offering a full complement of loan, deposit and online banking solutions. We generally do business with clients located in the areas served by our branches, and we focus our marketing efforts on these areas.

​

3

Table of Contents

Deposit Products, Treasury Services, and Other Funding Sources

We offer our customers a variety of deposit products and services, including checking accounts, savings accounts, money market accounts, time deposit accounts, and treasury and merchant services, through multiple channels, including our network of 342 full-service branches, as of December 31, 2025, and our online, mobile and telephone banking platforms. As of December 31, 2025, our deposit portfolio was comprised of 24% noninterest-bearing deposits and 76% interest bearing deposits. We intend to continue our efforts to provide funding for our business from customer relationship deposits.

Deposit flows are significantly influenced by general and local economic conditions, changes in prevailing interest rates, internal pricing decisions and competition. Our deposits are primarily obtained from depositors located around our branch footprint, and we believe that we have attractive opportunities to capture additional retail and commercial deposits in our markets. To attract and retain deposits, we rely on providing quality service, offering a suite of retail and commercial products and services and introducing new products and services that meet our customers’ needs as they evolve.

In addition to traditional banking activities and the other products and services specified above, we provide a broad array of financial services to our customers, including debit card and mobile services, funds transfer products and services, and treasury management services, including merchant services, automated clearing house services, lock-box services, remote deposit capture services and other treasury services.

Correspondent Banking and Capital Markets

We operate a correspondent banking and capital markets business division through the Bank and through SouthState Securities, the Bank’s broker dealer. This line of business’s primary revenue generating activities are related to the capital markets division, which includes commissions earned on fixed income security sales, fees from hedging services, loan brokerage fees and consulting fees for services related to these activities; and its correspondent banking division, which includes spread income earned on correspondent bank deposits (i.e., federal funds purchased) and correspondent bank checking account deposits and fees from safe-keeping activities, bond accounting services for correspondents, asset/liability consulting related activities, international wires, and other clearing and corporate checking account services. The fees derived from the correspondent banking services are less volatile than those generated through the capital markets group. The customer base includes small to medium sized financial institutions located throughout the United States.

Wealth Management

Through the Bank and SouthState PCM, we offer wealth management and other fiduciary and private banking services targeted to affluent clients, including individuals, business owners, families, and professional service companies. In addition to fiduciary and investment management fee income, we believe these services enable us to build new relationships and expand existing relationships to grow our deposits and loans. Through our wealth management line of business, we offer financial planning, retirement services and trust and investment management for affluent clients as well as clients with more modest resources. We offer a wide range of investment alternatives, including certificates of deposits, mutual funds, annuities, individual retirement accounts, money market accounts and other financial products.

Mortgage Banking

We have a mortgage line of business that originates single-family home loans and either sells into the secondary market or holds in our portfolio those mortgages. We retain servicing rights for those loans we hold in our portfolio and for the majority of the loans that are sold.

​

4

Table of Contents

Growth Strategy

Our business strategy has been to grow our business organically within our footprint and adjoining market areas faster than the related economic growth in those markets through our existing relationship managers and through targeted hiring of talented officers or teams. Our business growth, profitability and market share have been enhanced by engaging in strategic mergers and acquisitions or branch expansion either within or contiguous to our existing footprint. That expansion strategy focuses on banking institutions that:

​

We expect to continue to assess future opportunities of financial companies using these criteria, based on market and other conditions.

Competition

Our profitability depends principally on our ability to compete effectively in the markets in which we conduct business. In the financial services industry, market demands, technological and regulatory changes and economic pressures have increased competition among banks, as well as other financial institutions. Competition may further intensify as additional companies enter the markets where we conduct business, and we enter mature markets in accordance with our expansion strategy.

​

We experience strong competition from both bank and non-bank competitors. We compete with national banks, super-regional banks, smaller community banks, nontraditional internet-based banks, credit unions, insurance companies and government sponsored entities. We also compete with other financial intermediaries and investment alternatives such as mortgage companies, credit card issuers, leasing companies, finance companies, money market mutual funds, brokerage firms, governmental and corporation bonds, and other securities firms.

​

We encounter strong competition in making loans and attracting deposits. We compete with other financial institutions to offer customers competitive interest rates on deposit accounts, competitive interest rates charged on loans and other credit products and reasonable service charges. In addition, we also compete based on the quality and scope of the services we provide and the convenience of our banking facilities, compared to our competitors. The larger national and super-regional banks may have significantly greater lending limits and may offer additional products. However, by emphasizing customer service and by providing a wide variety of services, we believe that our Bank has generally been able to compete successfully with our competitors, regardless of their size.

​

Technological advances have made it possible for our competitors, including nonbank competitors, to offer products and services that traditionally were banking products and for financial institutions and other companies to provide electronic and internet-based financial solutions, including online deposit accounts, electronic payment processing and marketplace lending, without having a physical presence where their customers are located. Moreover, technological change has introduced new technology-driven products and services, including innovative ways that customers can make payments or manage their accounts, such as through the use of mobile payments, digital wallets, or digital assets. In addition, many of our non-bank competitors are not subject to the same extensive federal regulations that govern bank holding companies and federally insured banks. In many cases, our competitors have substantially greater resources and lending limits and offer certain services that we do not currently provide.

​

Legislation has continued to heighten the competitive environment in which financial institutions must conduct their business, and the potential for competition among financial institutions of all types has increased significantly. To compete, we rely upon specialized services, responsive handling of customer needs, and personal contacts by our officers, directors, and staff.

​

5

Table of Contents

Human Capital Management

We consider our relationship with our employees instrumental to the success of our business. We value our employees by investing in a healthy work-life balance, competitive compensation and benefit packages, and a team-oriented environment centered on professional service and open communication amongst employees. The Board of Directors oversees the strategic management of our human capital resources. The Human Resources Department’s day-to-day responsibility is managing our human capital resources.

Core Values and Culture

A strategic priority for the Company is to develop a dynamic, high performing team by, in part, facilitating a culture that increases employee engagement, devotes resources to recruiting, developing, and retaining talent, and recognizes the benefits of different perspectives and experiences. The Company’s core values, an essential cultural cornerstone, set the course by which we intend to meet this goal through our interactions with each other, our customers, and our suppliers:

​

Because we recognize the importance of encouraging an environment that inspires our employees to act consistently with the Company’s core values, we incorporate our core values into our strategic planning process, requiring any initiative to further one or more of those values. In addition, our management-level Culture Council oversees the internal and external culture and values messaging, and implements a program for continuing to build and retain a diverse and inclusive employee base, as well as to recruit, train and retain the leadership and talent necessary to deliver the Company’s vision, and maintaining an employee engagement program with clear objectives.

​

The Company’s Code of Ethics, which also addresses conflicts of interest and self-dealing, applies to all directors, officers, and employees, each of whom are expected to adhere to it in every transaction. The Company believes that each employee is entitled to work in an atmosphere and environment free of discrimination and unlawful harassment. As a result, the Company has established and communicated to all employees a reporting structure for reporting incidents of harassment or discrimination. The Company’s Whistleblower hotline, which is located on our website and governed by our Whistleblower Policy, provides employees, customers, vendors and others with a confidential mechanism to express concerns or complaints regarding the Company’s accounting, internal accounting controls, auditing matters, securities law compliance, or any provision of federal law relating to fraud against shareholders. Other complaints or concerns, such as relating to human resources matters, may also be submitted confidentially through the whistleblower process, and any such matters are referred to our Human Resources Department or other departments, as appropriate, for resolution. Reporting on whistleblower complaints are reviewed by the Audit Committee of the Board.

​

6

Table of Contents

Demographic Information

As of December 31, 2025, we had 6,190 full-time employees (compared to 4,986 as of the same date in 2024) and 203 part-time team members. As of December 31, 2025, approximately 96.98% of our team members are located in the Bank’s eight-state branch footprint of Florida (26.07%), South Carolina (25.54%), Texas (13.79%), Georgia (13.51%), North Carolina (5.89%), Colorado (5.72%), Alabama (4.96%), and Virginia (1.5%). To date, none of our team members are covered by collective bargaining agreements and all team members live in the United States. During fiscal year 2025, we hired 1,786 team members, and our voluntary turnover rate was 11.82% for all team members and 1.49% for management-level team members in 2025. Additional workforce demographics by gender, race or ethnicity and generation as of December 31, 2025, are reflected in the graphics above.

​

Corporate Stewardship

Our company remains committed to creating a diverse workforce and a culture that creates a sense of belonging. Our efforts are enhanced through the work of the Cultural Council and the Corporate Stewardship Council and Working Group that started over 5 years ago. Our Director of Corporate Stewardship bears primary responsibility for overseeing and directing strategic initiatives related to corporate stewardship, community development, management development, recruiting a diverse talent pool, and the Employee Sunshine Fund, which is funded voluntarily by Company employees to provide emergency monetary grants to Company employees facing financial difficulties.

Through intentional collaboration and relationship building with local leaders, the Company formed the Corporate Stewardship Council and Working Group has made meaningful progress with removing barriers that impacted recruitment and of diverse candidates and developing talent throughout the enterprise. We will continue to use various metrics to monitor the results, track outcomes, and work together to maintain a workforce with diverse leaders and teams.

The results from the adoption of our 2021 corporate stewardship strategic plan led to the creation of SouthState Connects Team Member Network Groups in 2024, starting with the Women’s Network Group, followed by Women in Technology, Military & Veterans. The engagement and camaraderie around this group allowed additional points of connection, and in 2025, we launched the Rising Leaders Network Group, which works closely with SouthState Leads. Through educational webinars, cultural awareness, fireside chats with leaders, and book clubs, team members can connect, network, and collaborate more together. In 2025, team members supported various organizations that brought awareness to financial literacy, empowerment of girls and women, and support for military and veteran organizations.

​

7

Table of Contents

Talent Acquisition, Retention, and Employee Development

Recruitment is an essential part of managing our human capital resources. We seek to hire well-qualified employees who are also a good fit for our value system. Through our commercial banking internships and management training programs, we recruit from a talented, diverse pool of students from local colleges and universities. To complement other recruitment efforts, our Talent Acquisition team is committed to attending job fairs hosted by Historical Black Colleges and Universities within our footprint. Additionally, the Talent Acquisition team partners closely with regional line of business leadership to network and recruit in-market, experienced and diverse talent in metropolitan markets within our footprint who bring with them a requisite skill set, professional background and aptitude to help grow the Bank and position our teams to support and lead a larger financial institution in the future.

We encourage and support the growth and development of our employees and, when possible, seek to fill positions by promotion and transfer from within the organization. We invest in the growth and development of our employees by providing opportunities to participate in continuing education courses that are relevant to the banking industry and their job function within the Company. Our internal Corporate Learning team offers a suite of leadership development programs to support various levels of leadership experience and expertise with graduated topics designed to engage and develop leaders by improving business acumen and offering 360-degree reviews, individual coaching opportunities and education on topics as varied as culture, communication styles and mentoring. Because the banking industry is highly regulated, we also require employees to complete annual compliance training, the classes for which are selected based on each employee’s actual job responsibilities. In 2025, in the aggregate, our employees completed over 300,000 Company-provided training courses, including compliance-related courses that were assigned based on job roles and responsibilities.

Employee retention helps us operate efficiently. We stive to offer competitive salaries, and many of our officers and key employees participate in the Company’s incentive program, which offers short-term cash incentives to reward annual performance and long-term incentives designed to reward sustainable shareholder value creation and encourage talent retention. In addition, we provide a comprehensive employee benefit program that includes: group life, health, dental and vision insurance; prescription benefits; flexible spending accounts; health savings accounts; employee wellness program; educational opportunities; an employee stock purchase plan; deferred compensation plans for officers and key employees; and a 401(k) plan with a Company match. The Company offers a broad leave plan awarded based on tenure of service and officer title, to include paid time off, paid parental leave, paid volunteer time, and paid leave for personal illness and for caring of their immediate family members. The Company-sponsored Employee Stock Purchase Plan encourages our employees to invest in the Company by offering shares at a discounted price to participants.

Employee Health, Wellness and Safety

The overall well-being of our employees is a top priority. To raise awareness of good health habits, the Company offers employees a robust wellness program that provides extensive wellness resources to include on-site biometric screenings and a health risk assessment program. The Company also provides support through wellness resources and the Employee Assistance Program designed to support physical, financial, career, social, and mental wellness. The Company offers flexible work options in support of employees optimizing their workplace experience, with approximately 25.7% of our employees work effectively from remote locations.

​

8

Table of Contents

Oversight of Corporate Stewardship Matters

The Governance and Nominating Committee of the Company’s Board of Directors oversees the Company’s current and emerging environmental, corporate stewardship, and governance matters that are relevant to the business, operations, or public image of the Company or that are otherwise pertinent to the Company and its shareholders, employees, customers, and parties with whom it does business. The Company issues a Corporate Social Responsibility Report on an annual basis, which highlights the Company’s environmental and corporate stewardship initiatives, including the Company’s commitment to: building vibrant communities where we operate and where our customers live and work; fostering a strong culture that supports and encourages a diverse and inclusive workforce; promoting the highest ethical standards and acting as good stewards; and being environmentally resourceful as we support efficient and sustainable practices. Our commitment to our communities, colleagues, corporate stewardship, and the environment will inform our Company’s actions as we strive to meet our vision: investing in the entrepreneurial spirit, pursuing excellence, and inspiring a greater purpose. During 2025, we continued to build out our transition and climate risk programs, actively working toward developing the necessary structure to understand the Bank’s direct and indirect greenhouse gas scopes and emissions across the Company and to develop a process for undertaking climate risk assessments. A copy of the Company’s 2025 Corporate Social Responsibility Report is available on the Bank’s website at 2025 Corporate Social Responsibility Report.

Effect of Governmental Policies

Our earnings and business are and will be affected by the policies of various regulatory authorities of the United States, especially the Federal Reserve. The Federal Reserve, among other things, seeks to influence interest rates and the supply of money and credit within the United States. Among the traditional methods that have been used to achieve this objective are open market operations in U.S. government securities, changes in the discount rate for bank borrowings, expanded access to funds for non-banks and changes in reserve requirements against bank deposits. The Federal Reserve steeply increased the size of its balance sheet by buying securities in 2020-2021, and since then tapered such purchases to gradually reduce its balance sheet, but has resumed purchasing mortgage-backed securities to increase liquidity in the market. Since the financial crisis, the Federal Reserve has paid interest on excess reserves held by banks at the Federal Reserve. The Federal Reserve decreased its target federal funds rate three times during 2025 from 3.50% to 3.75%. Both the traditional and more recent methods are used in varying combinations to influence overall growth and distribution of bank loans, investments and deposits, interest rates on loans and securities, and rates paid for deposits. The monetary policies of the Federal Reserve have had a significant effect on the operating results of commercial banks and are expected to continue to do so in the future. The monetary policies of the Federal Reserve are influenced by various factors, including inflation, unemployment, and short-term and long-term changes in the international trade balance and in the fiscal policies of the U.S. government. Future monetary policies, including whether and when the Federal Reserve will increase or decrease the federal funds rate and whether or at what pace it will reduce or increase the size of its balance sheet, and the effect of such policies on the future business and earnings of the Company and our subsidiary bank cannot be predicted.

Supervision and Regulation

We are extensively regulated and supervised under federal and state law. The following is a brief summary of certain aspects of that regulation that are material to us and does not purport to be a complete description of all regulations that affect us or all aspects of those regulations. To the extent particular statutory and regulatory provisions are described, the description is qualified in its entirety by reference to the particular statute or regulation. Proposals to change the laws and regulations governing the banking industry are frequently raised at both the state and federal levels. The likelihood and timing of any changes in these laws and regulations, and the impact such changes may have on the Company and the Bank, are difficult to ascertain. In addition to laws and regulations, bank regulatory agencies may issue policy statements, interpretive letters and similar written guidance applicable to the Company or the Bank. A change in applicable laws, regulations or regulatory guidance, or in the manner such laws, regulations or regulatory guidance are interpreted by regulatory agencies or courts, may have a material adverse effect on the Company’s and the Bank’s business, operations, and earnings. Supervision, regulation, and examination of banks by regulatory agencies are intended primarily for the protection of depositors and customers, the deposit insurance fund and the U.S. banking and financial system rather than shareholders.

​

9

Table of Contents

In the past year, the scope of the laws and regulations and the intensity of the supervision to which we are subject have decreased in response to the Trump Administration’s deregulatory policies. The Company expects that its business will remain subject to extensive regulation and supervision despite the recent deregulatory environment.

We are also subject to the disclosure and regulatory requirements of the Securities Act of 1933, as amended, and the Securities Exchange Act of 1934, as amended, both as administered by the SEC, as well as the rules of the NYSE that apply to companies with securities listed on the New York Stock Exchange.

Regulation of the Company

We are registered as a bank holding company with the Federal Reserve under the Bank Holding Company Act of 1956 (the “BHC Act”) and have elected to be a financial holding company. As a financial holding company, we are subject to comprehensive regulation, examination and supervision by the Federal Reserve and are subject to its regulatory reporting requirements. Federal law subjects financial holding companies, such as the Company, to particular restrictions on the types of activities in which they may engage, and to a range of supervisory requirements and activities, including regulatory enforcement actions for violations of laws and regulations.

As a financial holding company, we are permitted to engage in, and be affiliated with companies engaging in, a broader range of activities than those permitted for a bank holding company. Bank holding companies are generally restricted to engaging in the business of banking, managing or controlling banks and certain other activities determined by the Federal Reserve to be related closely to banking. Financial holding companies may also engage in activities that are considered to be financial in nature, as well as those incidental or complementary to financial activities, including certain insurance underwriting activities. We and the Bank must each remain “well-capitalized” and “well-managed”, and the Bank must receive a Community Reinvestment Act (“CRA”) rating of at least “Satisfactory” at its most recent examination in order for us to maintain our status as a financial holding company. In addition, the Federal Reserve has the power to order a financial holding company or its subsidiaries to terminate any activity or terminate its ownership or control of any subsidiary, when it has reasonable cause to believe that continuation of such activity or such ownership or control constitutes a serious risk to the financial safety, soundness, or stability of any bank subsidiary of that financial holding company.

A financial holding company is required to act as a source of financial and managerial strength to its subsidiary bank and to maintain resources adequate to support its bank. The term “source of financial strength” has been defined as the ability of a company to provide financial assistance to its insured depository institution subsidiaries in the event of financial distress. The appropriate federal banking agency for the depository institution (in this case, the Office of the Comptroller of the Currency or “OCC”) may require reports from the Company to assess its ability to serve as a source of strength and to enforce compliance with the source-of-strength requirements by requiring the holding company to provide financial assistance to the Bank if its capital were to become impaired. If the Company fails to provide such assistance within three months, it could be ordered to sell its stock of the Bank to cover the deficiency. Any capital loans by the Company to the Bank would be subordinate in right of payment to deposits and certain other debts of the Bank. In the event of the Company’s bankruptcy, any commitment by the Company to a federal bank regulatory agency to maintain the capital of the Bank would be assumed by the bankruptcy trustee and entitled to a priority of payment.

The BHC Act requires that a financial holding company obtain the prior approval of the Federal Reserve before (i) acquiring direct or indirect ownership or control of more than 5% of the voting shares of any additional bank or bank holding company, (ii) taking any action that causes an additional bank or bank holding company to become a subsidiary of the financial holding company, or (iii) merging or consolidating with any other bank holding company. The Federal Reserve may not approve any such transaction that would result in a monopoly or would be in furtherance of any combination or conspiracy to monopolize or attempt to monopolize the business of banking in any section of the United States, or the effect of which may be substantially to lessen competition or to tend to create a monopoly in any section of the country, or that in any other manner would be in restraint of trade, unless the anticompetitive effects of the proposed transaction are clearly outweighed by the public interest in meeting the convenience and needs of the community to be served. The Federal Reserve is also required to consider (1) the financial and managerial resources of the companies involved, including pro forma capital ratios; (2) the risk to the stability of the United States banking or financial system; (3) the convenience and needs of the communities to be served, including the companies’ performance under the CRA; and (4) the effectiveness of the companies in combatting money laundering. We are permitted under applicable federal and state law to make out-of-state acquisitions and mergers of other banks and bank holding companies, subject to the requirements summarized above.

10

Table of Contents

Federal law restricts the amount of voting stock of a bank holding company and a bank that a person may acquire without the prior approval of banking regulators. The overall effect of such laws is to make it more difficult to acquire a bank holding company and a bank by tender offer or similar means than it might be to acquire control of another type of corporation. Consequently, shareholders of the Company may be less likely to benefit from the rapid increases in stock prices that may result from tender offers or similar efforts to acquire control of other companies. Federal law also imposes restrictions on acquisitions of stock in a bank holding company or a national bank. Under the federal Change in Bank Control Act and the regulations thereunder, a person or group must give advance notice to the Federal Reserve before acquiring control of any bank holding company, such as the Company, and the OCC before acquiring control of any national bank, such as the Bank. Upon receipt of such notice, the bank regulatory agencies may approve or disapprove the acquisition. The Change in Bank Control Act creates a rebuttable presumption of control if a member or group acquires a certain percentage or more of a bank holding company’s or bank’s voting stock, or if one or more other control factors set forth in the Act are present. As a result, a person or entity generally must provide prior notice to the Federal Reserve before acquiring the power to vote 10% or more of our outstanding common stock. Investors should be aware of these requirements when acquiring shares of our stock.

Regulation of the Bank

The Bank is a national bank subject to comprehensive regulation, examination and supervision by the OCC and is subject to its regulatory reporting requirements. The deposits of the Bank are insured by the FDIC and, accordingly, the Bank is also subject to certain FDIC regulations and the FDIC has backup examination authority and some enforcement powers over the Bank. The Bank also is subject to certain Federal Reserve regulations. These regulations include limitations on loans to a single borrower and to its directors, officers and employees; restrictions on the opening and closing of branch offices; the maintenance of required capital and liquidity ratios; the granting of credit under equal and fair conditions; the disclosure of the costs and terms of such credit, requirements to maintain reserves against deposits and loans, limitation on the types of investment that may be made and requirements governing risk management practices.

The Bank also is subject to restrictions on its ability to lend to and engage in other transactions with the Company and the Bank’s other affiliates. Under these provisions, individual loans or other extensions of credit between the Bank and the Company or any nonbank affiliate generally are limited to 10% of the Bank’s capital and surplus, and all such transactions between the Bank and either the Company or any nonbank affiliate are limited to 20% of the Bank’s capital and surplus. Loans and other extensions of credit from the Bank to any affiliate generally are required to be secured by eligible collateral in specified amounts. In addition, any transaction between the Bank and any affiliate is required to be on arm’s length terms and conditions. The definition of “extension of credit” for these purposes includes credit exposures arising from a derivative transaction, a repurchase or reverse repurchase agreement and a securities lending or borrowing transaction. Federal banking laws also place similar restrictions on loans and other extensions of credit by FDIC-insured banks, such as the Bank, to their directors, executive officers and principal shareholders. These restrictions have not had a material impact on the Company or the Bank.

The Bank is permitted under federal law to branch on a de novo basis across state lines where the laws of the state would permit banks chartered by that state to open a de novo branch.

In 2024, the Department of Justice (the "DOJ”) withdrew its 1995 Bank Merger Guidelines and issued the 2024 Banking Addendum to 2023 Merger Guidelines (the “2024 Banking Addendum”). The DOJ clarified that it will assess competition considerations in connection with bank and bank holding company mergers using its 2023 Merger Guidelines, which is the general merger review framework the DOJ now uses to evaluate transactions in all segments of the economy, and the 2024 Banking Addendum. The 2024 Banking Addendum provides guidance on how the DOJ will assess competition in the context of bank and bank holding company mergers. An analysis under the 2023 Merger Guidelines and 2024 Banking Addendum may include consideration of theories of harm and relevant markets not considered under the 1995 Bank Merger Guidelines, which focused primarily on concentrations of deposits and branches. While the 2024 Banking Addendum remains in effect, the DOJ appears to be assessing bank mergers under a looser standard than implied by the 2024 Banking Addendum.

​

11

Table of Contents

As a result of Independent Merger into the Company, the Bank grew above $50 billion in assets as of January 1, 2025, and thus would become subject, effective the fourth quarter of 2026, to the OCC’s heightened standards guidelines. These guidelines set expectations for the governance and risk management practices of large depository institutions subject to its supervision with more than $50 billion in assets. The guidelines require such institutions to establish and adhere to a written governance framework in order to manage and control their risk-taking activities and to incorporate their risk appetite statement and concentration risk limits into capital and liquidity stress testing and planning processes. On December 23, 2025, the OCC issued a notice of proposed rulemaking that would increase the threshold at which the heightened standards apply from $50 billion to $700 billion in total assets. If the rule is adopted as proposed, the Bank would not become subject to the OCC’s heightened standards in the fourth quarter of 2026. The changes are not expected to have any impact on the Bank’s risk management program.

Supervision, Examination and Enforcement

The Federal Reserve, OCC and FDIC have broad supervisory, examination and enforcement authority with regard to bank holding companies and banks, including the power to impose nonpublic supervisory agreements, issue cease and desist or removal orders, impose fines and other civil and criminal penalties, initiate injunctive actions, terminate deposit insurance and appoint a conservator or receiver. In general, these actions may be initiated for violations of laws and regulations, as well as engagement in unsafe and unsound practices, and certain of these actions also may be taken against an “institution affiliated party” as defined in the law. Specifically, the regulators may direct a bank holding company or bank to, among other things, increase its capital, sell subsidiaries or other assets, limit its dividends and distributions, restrict its growth or remove officers and directors. Supervision and examinations are confidential, and the outcomes of these actions may not be made public.

We also are supervised and examined by the Consumer Financial Protection Bureau (“CFPB”) with respect to consumer protection laws and regulations.

FDIC Insurance Assessments and Depositor Preference

The deposits of the Bank are insured by the FDIC up to the limits under applicable law, which currently are set at $250,000 for accounts under the same name and title. The Bank is subject to deposit insurance premium assessments. The FDIC imposes a risk-based deposit premium assessment system. Under this system, the assessment rates for an insured depository institution vary according to the level of risk incurred in its activities. To arrive at an assessment rate for a banking institution, the FDIC places it in one of four risk categories determined by reference to its capital levels and supervisory ratings. In the case of those institutions in the lowest risk category, the FDIC further determines its assessment rate based on certain specified financial ratios or, if applicable, long-term debt ratings. The assessment rate schedule can change from time to time, at the discretion of the FDIC, subject to certain limits. Under the current system, premiums are assessed quarterly. The FDIC has published guidelines on the adjustment of assessment rates for certain institutions.

The FDIC uses a performance score and loss-severity score to calculate the Bank’s initial FDIC assessment rate. In calculating these scores, the FDIC uses the Bank’s capital level and regulatory supervisory ratings and certain financial measures to assess the Bank’s ability to withstand asset-related and funding related stress, and make certain adjustments based on risk factors that are not adequately captured in these calculations.

Insurance of deposits may be terminated by the FDIC upon a finding that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations or has violated any applicable law, regulation, rule, order or condition imposed by a bank’s federal regulatory agency. Deposits and certain claims for administrative expenses and employee compensation against insured depository institutions are afforded a priority over other general unsecured claims against the institution, including federal funds and letters of credit, in the liquidation or other resolution of that institution by any receiver appointed by federal authorities. These priority creditors include the FDIC.

​

12

Table of Contents

In response to the bank failures in early 2023, the FDIC implemented a special assessment to recover the losses to the FDIC’s Deposit Insurance Fund at an annual rate of approximately 13.4 basis points over eight quarterly assessment periods beginning with the first quarterly assessment period of 2024. The base for the special assessment is equal to an insured depository institution’s estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion. The FDIC anticipates that the total amount of the special assessment will be collected for a total of eight quarterly assessment period. In December 2025, the FDIC issued an interim final rule that would reduce the special assessment for the eight collection quarter from 3.35 basis points to 2.97 basis points. Under the interim final rule, upon termination of the receiverships, the FDIC will either provide an offset to regular quarterly deposit insurance assessments for insured depository institutions subject to the special assessment if the amount collected exceeds losses or collect from insured depository institutions subject to the special assessment a one-time final shortfall special assessment if losses at the termination of the receiverships exceed the amount collected. The total estimated FDIC special assessment allocable to the Bank is approximately $33.5 million, which includes the special assessment applicable to the deposits assumed from Independent on January 1, 2025 and subject to the special assessment for the period subsequent to the acquisition date. The FDIC may impose additional special assessments from time to time based on the actual losses incurred by the FDIC as a result of the March 2023 bank failures or future failures.

​

Resolution Planning

​

In June 2024, the FDIC released a final rule amending its requirements for insured depository institutions with

more than $50 billion in assets to develop and submit plans demonstrating how they could be resolved in an orderly and timely manner in the event of receivership. As a result of the Independent Merger, the Bank grew above $50 billion in assets as of January 1, 2025, and is actively planning to comply with its requirements, which the FDIC had advised the Bank was in October 2026. In December 2025, the FDIC announced plans to propose changes to the Resolution Planning Rule for FDIC Board consideration in 2026. As a result, submissions due in October 2026, including those of the Bank, have been deferred, and the Bank anticipates that its submission will be due in 2027, pending finalization of any revisions to the Resolution Planning Rule.

Dividend Restrictions

The Company is a legal entity separate and distinct from its banking and other subsidiaries and has in the past relied on dividends from the Bank as its primary source of liquidity. There are limitations on the payment of dividends by the Bank to the Company, as well as by the Company to its shareholders.

The OCC has the general authority to limit the dividends paid by the Bank if such payment may be deemed to constitute an unsafe and unsound practice. The Bank may not pay dividends from its paid-in surplus. All dividends must be paid out of undivided profits then on hand, after deducting expenses, including reserves for losses and bad debts. In addition, a national bank, such as the Bank, is prohibited from declaring a dividend on its shares of common stock until its surplus equals its stated capital, unless there has been a transfer to surplus of no less than one tenth of the bank’s net profits of the preceding two consecutive half-year periods (in the case of an annual dividend). The approval of the OCC is required if the total of all dividends declared by a national bank in any calendar year exceeds the total of its net profits for that year combined with its retained net profits for the preceding two years, less any required transfers to surplus.

​

We and the Bank must maintain the applicable common equity Tier 1 (“CET1”) capital conservation buffer of 2.5% to avoid becoming subject to restrictions on capital distributions, including dividends. For more information on the CET1 capital conservation buffer, see Part I Item 1 “Supervision and Regulation – Capital Requirements.”

​

13

Table of Contents

In addition, Federal Reserve policy provides that bank holding companies, such as the Company, should generally pay dividends to shareholders only if (i) the organization’s net income available to common shareholders over the past year has been sufficient to fully fund the dividends; (ii) the prospective rate of earnings retention appears consistent with the organization’s capital needs, asset quality and overall financial condition; and (iii) the organization will continue to meet minimum capital adequacy ratios. The policy also provides that a bank holding company should inform the Federal Reserve reasonably in advance of declaring or paying a dividend that exceeds earnings for the period for which the dividend is being paid or that could result in a material adverse change to the bank holding company’s capital structure. Bank holding companies also are required to consult with the Federal Reserve before increasing dividends or redeeming or repurchasing capital instruments. Additionally, the Federal Reserve could prohibit or limit the payment of dividends by a bank holding company if it determines that payment of the dividend would constitute an unsafe or unsound practice.

Capital Requirements

We are required under federal law to maintain certain minimum capital levels at each of the Company and the Bank. The federal banking agencies have issued substantially similar risk-based and leverage capital requirements to banking organizations they supervise. Under these requirements, the Company and the Bank are required to maintain certain capital standards based on ratios of capital to total assets and capital to risk-weighted assets. The requirements also define the weights assigned to assets and off-balance sheet items to determine the risk-weighted asset components of the risk-based capital rules. The required capital ratios are minimums, and the Federal Reserve and OCC may determine that a banking organization, based on its size, complexity or risk profile, must maintain a higher level of capital in order to operate in a safe and sound manner. Risks such as concentration of credit risks and the risk arising from non-traditional activities, as well as the institution’s exposure to a decline in the economic value of its capital due to changes in interest rates, and an institution’s ability to manage those risks are important factors that are to be taken into account by the federal banking agencies in assessing an institution’s overall capital adequacy.

​

Under the applicable capital rules, the Company and the Bank are subject to the following risk-based capital ratios: a CET1 risk-based capital ratio, a Tier 1 risk-based capital ratio, which includes CET1 and additional Tier 1 capital, and a total capital ratio, which includes Tier 1 and Tier 2 capital. CET1 is primarily comprised of the sum of common stock instruments and related surplus net of treasury stock, retained earnings, and certain qualifying minority interests, less certain adjustments and deductions, including with respect to goodwill, intangible assets, mortgage servicing assets and deferred tax assets subject to temporary timing differences. Additional Tier 1 capital is primarily comprised of noncumulative perpetual preferred stock, tier 1 minority interests and grandfathered trust preferred securities, if applicable.

​

Tier 2 capital consists of instruments disqualified from Tier 1 capital, including qualifying subordinated debt, certain trust preferred securities, other preferred stock and certain hybrid capital instruments, and a limited amount of loan loss reserves up to a maximum of 1.25% of risk-weighted assets, subject to certain eligibility criteria. The Company’s trust preferred securities and subordinated debentures qualify as Tier 2 capital. For institutions, such as us, that have exercised an opt-out election regarding the treatment of accumulated other comprehensive income (“AOCI”), up to 45% of net unrealized gains on available for sale equity securities with readily determinable fair market values are also included in Tier 2 capital. The capital rules also define the risk-weights assigned to assets and off-balance sheet items to determine the risk-weighted asset components of the risk-based capital rules, including, for example, “high volatility” commercial real estate, past due assets, structured securities and equity holdings.

​

The capital rules require a minimum CET1 risk-based capital ratio of 4.5%, a minimum overall Tier 1 risk-based capital ratio of 6.0%, and a total risk-based capital ratio of 8.0%. In addition, the capital rules require a capital conservation buffer of 2.5% above each of the minimum capital ratio requirements (CET1, Tier 1, and total risk-based capital), which must be met for a bank or bank holding company to be able to pay dividends, engage in share buybacks or make discretionary bonus payments to executive management without automatic restriction. The capital conservation buffer is 2.50%, so a banking organization needs to maintain a CET1 capital ratio of at least 7%, a total Tier 1 capital ratio of at least 8.5% and a total risk-based capital ratio of at least 10.5% or it would be subject to restrictions on capital distributions and discretionary bonus payments to its executive management.

​

The leverage capital ratio, which serves as a minimum capital standard, is the ratio of Tier 1 capital to quarterly average total assets, less goodwill and other disallowed intangible assets. The required minimum leverage ratio for all banks and bank holding companies is 4%.

14

Table of Contents

To be well-capitalized, the Bank must maintain the following capital ratios:

​

The Federal Reserve has not yet revised the well-capitalized standard for bank holding companies to reflect the higher capital requirements imposed under the current capital rules. For purposes of the Federal Reserve’s Regulation Y, including determining whether a bank holding company meets the requirements to be a financial holding company, bank holding companies, such as the Company, must maintain a Tier 1 risk-based capital ratio of 6.0% or greater and a total risk-based capital ratio of 10.0% or greater to be well-capitalized. If the Federal Reserve were to apply the same or a very similar well-capitalized standard to bank holding companies as that applicable to the Bank, the Company’s capital ratios as of December 31, 2025, would exceed such revised well-capitalized standard. The Federal Reserve may require bank holding companies, including the Company, to maintain capital ratios substantially in excess of mandated minimum levels, depending upon general economic conditions and a bank holding company’s particular condition, risk profile and growth plans.

​

Failure to be well-capitalized or to meet minimum capital requirements could result in certain mandatory and possible additional discretionary actions by regulators that, if undertaken, could have an adverse material effect on our operations or financial condition. For example, only a well-capitalized depository institution may accept brokered deposits without prior regulatory approval. Failure to be well-capitalized or to meet minimum capital requirements could also result in restrictions on the Company’s or the Bank’s ability to pay dividends or otherwise distribute capital or to receive regulatory approval of applications or other restrictions on its growth.

​

As of December 31, 2025, the Company’s and the Bank’s regulatory capital ratios were above the well-capitalized standards and met the fully phased-in capital conservation buffer. Please refer to the table below for a summary of the Company’s and the Bank’s regulatory capital ratios as of December 31, 2025 and 2024, calculated using the regulatory capital methodology applicable to us during 2025.

​

15

Table of Contents

On July 27, 2023, the banking agencies released a proposed rule to implement major changes to the capital rules for banking organizations with $100 billion or more in assets intended to bring the U.S. capital rules into conformance with the current international capital standards issued by the Basel Committee on Banking Supervision (“Basel Framework”). In light of the adverse reaction to the proposal, the Federal Reserve announced that it would publish a re-proposal of regulations finalizing the Basel III standards. The re-proposal is expected in early 2026.

​

Safety and Soundness Guidelines

The federal banking agencies have adopted guidelines prescribing safety and soundness standards relating to internal controls, risk management, information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth and compensation, fees and benefits. These guidelines in general require appropriate systems and practices to identify and manage specified risks and exposures. The guidelines prohibit excessive compensation as an unsafe and unsound practice and characterize compensation as excessive when the amounts paid are unreasonable or disproportionate to the services performed by an executive officer or employee, director or principal shareholder. In addition, the agencies have adopted regulations that authorize but do not require an agency to order an institution that has been given notice by the agency that it is not in compliance with any of the safety and soundness standards to submit a compliance plan. If after being so notified, an institution fails to submit an acceptable compliance plan, the agency must issue an order directing action to correct the deficiency and may issue an order directing other actions of the types, including those that may limit growth or capital distributions.

Lending Standards and Guidance

The federal banking agencies have adopted uniform regulations prescribing standards for extensions of credit that are secured by liens or interests in real estate or made for the purpose of financing permanent improvements to real estate. Under these regulations, all insured depository institutions, such as the Bank, must adopt and maintain written policies establishing appropriate limits and standards for extensions of credit that are secured by liens or interests in real estate or are made for the purpose of financing permanent improvements to real estate. These policies must establish loan portfolio diversification standards, prudent underwriting standards (including loan-to-value limits) that are clear and measurable, loan administration procedures, and documentation, approval and reporting requirements. The real estate lending policies must reflect consideration of the federal bank regulators’ Interagency Guidelines for Real Estate Lending Policies.

The federal banking agencies have also jointly issued guidance on “Concentrations in Commercial Real Estate Lending” (the “Guidance”), which defines commercial real estate loans as exposures secured by raw land, land development and construction (including 1-4 family residential construction), multi-family property, and non-farm nonresidential property where the primary or a significant source of repayment is derived from rental income associated with the property (that is, loans for which 50% or more of the source of repayment comes from third-party, non-affiliated, rental income) or the proceeds of the sale, refinancing, or permanent financing of the property. The Guidance requires that appropriate processes be in place to identify, monitor and control risks associated with real estate lending concentrations. If a concentration is present, management must employ heightened risk management practices that address key elements, including board and management oversight and strategic planning, portfolio management, development of underwriting standards, risk assessment and monitoring through market analysis and stress testing, and maintenance of increased capital levels as needed to support the level of commercial real estate lending. The required heightened risk management practices could include enhanced strategic planning, underwriting policies, risk management, internal controls, portfolio stress testing and risk exposure limits as well as appropriately designed compensation and incentive programs. Higher allowances for credit losses and capital levels may also be required. The Guidance states that the following metrics may indicate a concentration of commercial real estate loans, but that these metrics are neither limits nor a safe harbor: (1) total reported loans for construction, land development, and other land represent 100% or more of total risk-based capital; or (2) total reported loans secured by multi-family properties, non-farm non-residential properties (excluding those that are owner-occupied), and loans for construction, land development, and other land represent 300% or more of total risk-based capital and the bank’s commercial real estate loan portfolio has increased 50% or more during the prior 36 months. As of December 31, 2025, our total reported loans for construction, land development, and other land were 35.2% of the Bank’s total Tier 1 capital plus the allowance for credit losses (excluding reserve for unfunded commitments) and our total reported loans secured by multifamily and non-farm nonresidential properties and loans for construction, land development, and other land were 271.8% of the Bank’s total Tier 1 capital plus the allowance for credit losses.

​

​

16

Table of Contents

Consumer Protection Laws

The Bank is subject to a number of federal laws designed to protect its customers. These consumer protection laws apply to a broad range of our activities and to various aspects of our business and include laws relating to interest rates, fair lending, disclosures of credit terms and estimated transaction costs to consumer borrowers, debt collection practices, the use of and the provision of information to consumer reporting agencies, and the prohibition of unfair, deceptive or abusive acts or practices in connection with the offer, sale or provision of consumer financial products and services. Administration of many of these consumer protection rules are the responsibility of the CFPB, which has exclusive supervisory authority over insured depository institutions with more than $10 billion in total assets and any affiliates thereof. The CFPB also has authority to define and prevent unfair, deceptive and abusive practices in the consumer financial area, and expanded data collecting powers for purposes of determining bank compliance with fair lending laws.

​

The CFPB has promulgated many mortgage-related final rules, including rules related to the ability to repay and qualified mortgage standards, mortgage servicing standards, loan originator compensation standards, high-cost mortgage requirements, Home Mortgage Disclosure Act requirements and appraisal and escrow standards for higher priced mortgages. In addition, several proposed revisions to mortgage-related rules are pending finalization. The mortgage-related final rules issued by the CFPB have materially restructured the origination, servicing and securitization of residential mortgages in the United States. These rules have impacted, and will continue to impact, the business practices of mortgage lenders, including the Company. For example, under the CFPB’s Ability to Repay and Qualified Mortgage rule, before making a mortgage loan, a lender must establish that a borrower has the ability to repay the mortgage. “Qualified mortgages,” as defined in the rule, are presumed to comply with this requirement and, as a result, present less litigation risk to lenders. For a loan to qualify as a qualified mortgage, the loan must satisfy certain limits on terms and conditions, pricing and a maximum debt-to-income ratio. Loans eligible for purchase, guarantee or insurance by a government agency or government-sponsored enterprise are exempt from some of these requirements. Satisfying the qualified mortgage standards, ensuring correct calculations are made for individual loans, recordkeeping and monitoring, as well as understanding the effect of the qualified mortgage standards on CRA obligations, impose significant new compliance obligations on, and involve compliance costs for, mortgage lenders, including the Company.

Under applicable law, the Bank, as a debit card issuer, may receive a maximum permissible interchange fee equal to no more than $0.21 plus 5.0 basis points of the transaction value for many types of debit interchange transactions. Further, a debit card issuer may also recover $0.01 per transaction for fraud prevention purposes if the issuer complies with certain fraud-related requirements required by the Federal Reserve. In addition, the Federal Reserve rules governing routing and exclusivity require debit card issuers to offer two unaffiliated networks for routing transactions on each debit or prepaid product.

In 2023, the Federal Reserve released a notice of proposed rulemaking that would lower the maximum interchange fee that a large debit card issuer can receive on a debit card transaction. Under the proposal, the Federal Reserve would set the components of the maximum interchange fee to amounts lower than those in the currently applicable Regulation II. In addition, the proposal would adopt an approach for future adjustments to the interchange fee cap, which would occur every other year based on issuer cost data gathered from large debit card issuers. The proposal has not been finalized and if it were to be finalized as proposed, would likely materially decrease the Bank’s noninterest income.

​

In 2023, the CFPB issued the “Small Business Lending Rule” to implement Section 1071 of the Dodd-Frank Act for the stated purpose of increasing transparency in small business lending, promoting economic development, and combating unlawful discrimination. Under this rule, covered lenders, including the Bank, are required to collect and report information about the small business credit applications they receive, including, but not limited to, geographic and demographic data. As a result of ongoing litigation since the “Small Business Lending Rule” was first issued, implementation of the final rule had been delayed and postponed. In November 2025, the CFPB published a new notice of proposed rulemaking on the Small Business Lending Rule. The proposed rule will revise the scope of data collected, with the intention of reducing complexity and improving data quality, while still meeting the purpose of the Small Business Lending Rule. The mandatory compliance date for all covered lenders is anticipated to be January 1, 2028. As the Bank has had a formal project to comply with the original rule, we believe the reproposed rule, if adopted as proposed, will not have a material impact on the Bank.

​

​

17

Table of Contents

In October 2024, the CFPB finalized a rule to implement Section 1033 of the Dodd-Frank Act, which would require certain entities, including the Company and the Bank, to, among other things, make available to a consumer, upon request, information in its control or possession concerning the consumer financial product or service that the consumer obtained from that entity. In general, the rule also requires, among other things, data providers holding a consumer account, such as the Bank, to establish a developer interface satisfying certain data security specifications and other standards, through which the data provider can receive requests for, and provide, specific types of data covered by the rule in electronic, usable form to authorized third parties, including data aggregators. Under the rule, data providers are prohibited from, among other things, charging consumers or third parties fees for processing these consumer data requests. The rule also places certain data security, authorization and other obligations on third parties accessing covered data from data providers, which could include the Company and the Bank when acting in certain capacities. The rule requires third parties to limit their collection, use, and retention of the data received to only what is reasonably necessary to provide the consumers’ requested product or service. The compliance date for a depository institution data provider that holds at least $10 billion in total assets but less than $250 billion in total assets is April 1, 2027. In August 2025, the CFPB released an advance notice of proposed rulemaking seeking comments on certain aspects of the Section 1033 rule. The release did not extend the compliance dates set forth in the original rule and various agencies have requested those dates be rescinded. We continue to monitor the release of the final rule and evaluate the impact this will have on the Company and Bank.

In December 2024, the CFPB issued a final rule that removes an exception for overdraft lending services from longstanding provisions of the Truth in Lending Act (“TILA”) and other consumer financial protection laws by requiring banks with assets greater than or equal to $10 billion to treat overdraft loans like credit cards and other loans, including providing clear disclosures, to the extent the bank charges customer fees in excess of the direct costs of providing the service or in accordance with established benchmarks by the CFPB. This rule would have likely had a material impact on the Bank by reducing revenue from overdraft lending services. In May 2025, this rule was invalidated by a Congressional Review Act resolution.

Community Reinvestment Act

The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting the credit needs of the communities served by the institution, including low- and moderate-income neighborhoods. Furthermore, the relevant federal bank regulatory agency is required to consider a bank’s CRA assessment when considering the bank’s application to, among other things, merge or consolidate with or acquire the assets or assume the liabilities of an insured depository institution or open or relocate a branch office. The relevant federal banking agency, the OCC in the Bank’s case, examines each bank and assigns it a public CRA rating. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “unsatisfactory.” The Bank received a “satisfactory” rating at its most recent CRA evaluation.

In October 2023, the Federal Reserve, the FDIC, and the OCC issued a final rule amending the agencies’ CRA regulations. In July 2025, the federal banking agencies issued a joint Notice of Proposed Rulemaking, which, if finalized, would rescind the 2023 final rule and reinstate the CRA framework that existed prior to the issuance of that rule. Implementation of the October 2023 final rule, which was subject to an injunction and has not taken effect, would have materially changed the CRA framework, including imposing additional costs and changing how CRA performance would be assessed.

Anti-Money Laundering Rules

The Bank Secrecy Act, as amended by the USA PATRIOT Act of 2001, (together, the “BSA”) and its implementing regulations require financial institutions to, among other duties, implement and maintain an effective anti-money laundering / countering the financing of terrorism (“AML/CFT”) compliance program and file suspicious activity and currency transaction reports when appropriate.

​

18

Table of Contents

The Anti-Money Laundering Act of 2020, enacted on January 1, 2021 as part of the National Defense Authorization Act (“AMLA”), amends the BSA but does not directly impose new requirements on banks. However, AMLA requires the U.S. Treasury Department to, among other things, issue National Anti-Money Laundering and Countering the Financing of Terrorism Priorities and implementing regulations, and conduct studies and issue regulations that may, over the next few years, significantly alter certain due diligence, recordkeeping and reporting requirements that the BSA and its implementing regulations impose on banks. AMLA also contains provisions that increase penalties for violations of the BSA and includes whistleblower incentives, both of which could increase regulatory enforcement against banks. Implementation of AMLA is ongoing and is anticipated to impact the Bank’s AML/CET compliance program.

Violations of the BSA and its implementing regulations can result in substantial civil and criminal penalties, and the federal banking agencies are required to consider the effectiveness of a financial institution’s AML compliance program when reviewing bank mergers and bank holding company acquisitions. In addition to the federal banking agencies, FinCEN is authorized to impose significant civil monetary penalties for violations of the BSA and its implementing regulations and has recently engaged in coordinated enforcement actions with state and federal law enforcement agencies and banking regulators.

OFAC Regulation

The U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”) is responsible for administering U.S. economic sanctions, which can prohibit certain transactions with designated foreign countries or territories, nationals and others. OFAC-administered sanctions take on many different forms. For example, sanctions may include: (1) restrictions on trade with or investment in a sanctioned country or territory, including prohibitions against direct or indirect imports from and exports to a sanctioned country or territory and prohibitions on U.S. persons engaging in financial transactions relating to, making investments in, or providing investment-related advice or assistance to, a sanctioned country or territory; and (2) blocking assets in which certain sanctioned foreign governments, entities or individuals have an interest, by prohibiting transfers of property subject to U.S. jurisdiction, including property in the possession or control of U.S. persons. OFAC also maintains lists of designated persons, groups or entities that are the target of sanctions, including the “Specially Designated Nationals and Blocked Persons List.” The assets of designated persons, groups or entities are blocked, and U.S. persons are generally prohibited from dealing with any such persons. Moreover, blocked assets, for example property and bank deposits, cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC. If we find a name on any transaction, account or wire transfer associated with a sanctioned person, we must freeze or block such account or transaction, file a blocked property report with OFAC and notify the appropriate authorities. Failure to comply with U.S. economic sanctions could have serious legal and reputational consequences.

​

19

Table of Contents

Data Privacy and Cybersecurity

Various federal, state and local laws, rules, regulations and standards contain extensive data privacy and cybersecurity provisions, and the legal and regulatory framework for data privacy and cybersecurity is in considerable flux and rapidly evolving. For example, current federal laws, rules, regulations and standards, including the Gramm-Leach-Bliley Act (the “GLBA”), require financial institutions to, among other things, periodically disclose their privacy policies and practices relating to sharing personal information and enable retail customers to opt out of our ability to share such personal information with unaffiliated third parties under certain circumstances. Such laws and regulations also require financial institutions to implement a comprehensive cybersecurity program that includes administrative, technical and physical safeguards to ensure the security and confidentiality of customer records and information. An amendment to Regulation S-P, an implementing regulation promulgated under the GLBA, was adopted by the SEC on May 16, 2024 and requires broker-dealers and registered investment advisers to, among other things, adopt and implement an incident response program as part of their formal cybersecurity policies and procedures and report data breaches to affected individuals whose sensitive customer information was, or is reasonably likely to have been, accessed or used without authorization within 30 days of becoming aware of such data breach. Other federal and state laws and regulations impact our ability to share certain information with affiliates and non-affiliates for marketing and/or non-marketing purposes, or to contact customers with marketing offers. Federal law also makes it a criminal offense, except in limited circumstances, to obtain or attempt to obtain customer information of a financial nature by fraudulent or deceptive means. The Bank is also subject to rules and regulations issued by the Federal Trade Commission, which regulates unfair or deceptive acts or practices, including with respect to data privacy and cybersecurity. Additionally, like other lenders, the Bank uses credit bureau data in its underwriting activities. Use of such data is regulated under the Fair Credit Reporting Act, which also regulates reporting information to credit bureaus, prescreening individuals for credit offers, sharing of information between affiliates, and using affiliate data for marketing purposes. Similar state laws may impose additional requirements on us and our subsidiaries. The federal government also is considering, and may pass, additional data privacy and cybersecurity legislation, to which we may become subject if passed.

The enactment of the Cyber Incident Reporting for Critical Infrastructure Act (the “CIRCIA”) in 2022, once rulemaking is complete, will require, among other things, certain companies to report significant cyber incidents to the Cybersecurity and Infrastructure Agency (the “CISA”) within 72 hours from the time the company reasonably believes the incident occurred (and within 24 hours of making a ransom payment as a result of a ransomware attack). On April 4, 2024, the CISA proposed a rule to finalize the regulations implementing CIRCIA that would clarify the scope of cyber incidents to be reported and would further define covered entities subject to CIRCIA to expressly include companies in the financial services industry that are required to report cyber incidents to their primary federal regulators. We continue to monitor for the final requirements to implement this rule.

We also are subject to federal regulations that, among other things, require a banking organization to notify its primary federal regulators as soon as possible and within 36 hours after identifying a “computer-security incident” that has materially disrupted or degraded, or the banking organization believes in good faith is reasonably likely to materially disrupt or degrade its business or operations in a manner that would, among other things, jeopardize the viability of its operations, result in customers being unable to access their deposit and other accounts, result in a material loss of revenue, profit or franchise value, or pose a threat to the financial stability of the U.S. financial sector. Additionally, the federal banking regulators, as well as the SEC and related self-regulatory organizations, regularly issue guidance regarding cybersecurity that is intended to enhance cyber risk management among financial institutions.

Data privacy and cybersecurity are also areas of increasing state legislative focus. For example, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), among other things, gives California residents the right to request access to or correct personal information collected about them, and whether that personal information has been sold or shared with others, the right to request deletion of personal information (subject to certain exceptions), the right to opt out of certain sharing and sales of their personal information, and the right not to be discriminated against for exercising these rights. The CCPA contains several exemptions, including that many, but not all, requirements of the CCPA are inapplicable to personal information that is collected, sold, disclosed or otherwise processed subject to certain federal laws, including the GLBA. Similar laws have been or may be adopted by other states where we do business or collect personal information. In addition, laws in all 50 U.S. states generally require businesses to provide notice under certain circumstances to individuals whose personal information has been disclosed as a result of a data breach.

​

20

Table of Contents

For further information regarding the risks associated with data privacy and cybersecurity laws, please see Part I – Item 1A – Risk Factors – “We are subject to complex and evolving laws, regulations, rules, standards and contractual obligations regarding data privacy and cybersecurity, which could increase the cost of doing business, compliance risks and potential liability” and “We face cybersecurity risks from cyber-attacks, information security breaches and other similar incidents that could result in the disclosure of confidential and other information (including personal information), adversely affect our business or reputation, and create significant legal and financial exposure.”

Broker Dealer and Investment Adviser Regulation

Our broker dealer subsidiary and investment adviser subsidiary are subject to regulation by the SEC. FINRA is the primary self-regulatory organization for our registered broker-dealer subsidiary. The broker dealer and investment adviser subsidiaries also are subject to additional regulation by states or local jurisdictions. The SEC and FINRA have active enforcement functions that oversee broker dealers and investment advisers and can bring actions that result in fines, restitution, a limitation on permitted activities, disqualification to continue to conduct certain activities and an inability to rely on certain favorable exemptions. Certain types of infractions and violations also can affect the Company’s ability to issue new securities expeditiously. In addition, certain changes in the activities of a broker dealer require approval from FINRA, and FINRA takes into account a variety of considerations in acting upon applications for such approval, including internal controls, capital levels, management experience and quality, prior enforcement and disciplinary history, and supervisory concerns.

Future Legislation and Regulation

Banking statutes, regulations and policies are continually under review by Congress, state legislatures and federal and state regulatory agencies. In addition to laws and regulations, state and federal bank regulatory agencies may issue policy statements, interpretive letters and similar written guidance applicable to us and our subsidiaries. We cannot predict the substance or impact of pending or future legislation or regulation or the application of those laws or regulations, although enactment of any significant proposal could affect how we operate and could significantly increase our costs, impede the efficiency of internal business processes or limit our ability to pursue business opportunities in an efficient manner, any of which could materially and adversely affect our business, financial condition and results of operations.

Availability of Reports Furnished or Filed with the Securities and Exchange Commission

We make available at no cost all of our reports filed electronically with the United States Securities and Exchange Commission (“SEC”), including our Annual Report on Form 10-K, quarterly reports on Form 10-Q, and current reports on Form 8-K, and the annual proxy statement, as well as amendments to those reports, through the Investor Relations page of our website at www.SouthStatebank.com. These filings are also accessible on the SEC’s website at www.sec.gov.

We also will provide without charge a copy of our Annual Report on Form 10-K to any shareholder by mail. Requests should be sent to SouthState Bank Corporation, Attention: Corporate Secretary, 1101 First Street South, Winter Haven, Florida 33880.

Information with respect to the Company’s Board of Directors, Executive Officers and corporate governance policies and principles is presented on the Company’s website, www.SouthStatebank.com, on the Investor Relations page. We encourage our employees to take initiative and be responsible for their actions. We have implemented a Whistleblower program and adopted a Code of Ethics, and information about both is available under Corporate Overview/Governance Documents on the Investor Relations page of our website located at www.SouthStatebank.com. We also adopted a formal corporate governance policy, a copy of which is available under Corporate Overview/Governance Documents/Corporate Governance Guidelines on the Investor Relations page of our website located at www.SouthStatebank.com.

​

​