Bank of Marin Bancorp

The banking business in California generally, and in our market area specifically, is highly competitive with respect to attracting both loan and deposit relationships. The increasingly competitive environment is affected by changes in regulation, interest rates, technology and product delivery systems, and consolidation among financial service providers. The banking industry is seeing strong competition for high quality loans, with larger banks expanding activities to attract businesses that are traditionally community bank customers. In all of our counties, we have significant competition from nationwide banks with much larger branch networks and greater financial resources, as well as credit unions and other local and regional banks. Nationwide banks have the competitive advantages of developing data analytics and artificial intelligence tools and other technological platforms. Large commercial banks also have substantially greater lending limits and the ability to offer certain services, which are not offered directly by us. Other competitors for depositors' funds are money market mutual funds and non-bank financial institutions such as brokerage firms and insurance companies.

The financial services industry is constantly undergoing technological change, with the frequent introduction of new technology-driven products and services including new payment solutions and the use of agentic artificial intelligence (“AI”). The effective use of technology increases efficiency and enables financial institutions to better serve clients and reduce costs, including mitigating fraud risks. Our future success depends, in part, upon our ability to respond to the needs of our clients by using technology to provide desired products and services and create additional operating efficiencies. Some of our competitors have substantially greater resources to invest in technological improvements. We may not be able to effectively implement new technology-driven products and services or be successful in marketing these products and services to our clients. Failure to keep pace with technological change in the financial services industry could have a material adverse impact on our business and, in turn, on our financial condition and results of operations.

We are subject to risks associated with the adoption of new technologies such as AI.

The Company or its third-party vendors, clients or counterparties may develop or incorporate AI technology, including agentic AI, in certain business processes, services or products. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, and includes regulation targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment and other laws applicable to the use of AI. These evolving laws and regulations could require changes in the Company’s or third parties’ implementation of AI technology and increase the Company’s compliance costs and risk of non-compliance. The Company’s deployment of artificial intelligence at this time is generally limited to internally focused, assistive productivity tools such as Microsoft Copilot. The Company continues to evaluate additional AI capabilities, including agentic AI, in limited capacities, and the associated risks, including potential errors or inaccuracies in work product, data privacy and confidentiality, intellectual property considerations, potential bias, and cybersecurity.

Our business requires the secure management of sensitive client and bank information. We work diligently to implement layered security measures that intend to make our communications and information systems resilient and safe to conduct business. With the advent of AI, cyber threats such as social engineering, ransomware, and phishing are more sophisticated and prevalent now than ever before. These incidents include intentional and unintentional events that may present threats designed to disrupt operations, corrupt data, release sensitive information, or cause denial-of-service attacks. A cybersecurity breach of systems operated by the Bank, merchants, vendors, customers, or externally publicized breaches of other financial institutions may significantly harm our reputation, result in a loss of customer business, subject us to regulatory scrutiny, or expose us to civil litigation and financial liability. While we have systems and procedures designed to prevent security breaches, we cannot be certain that advances in cyberthreats, criminal capabilities, network break-ins, or inappropriate access will not compromise or breach the technology protecting our networks or proprietary client information. If a material security breach were to occur, the Bank has policies and procedures in place to ensure timely disclosure. For additional information on cybersecurity management and governance, refer to ITEM-1C, Cybersecurity, in this report.

The banking business in California generally, and in our market area specifically, is highly competitive with respect to attracting both loan and deposit relationships. The increasingly competitive environment is affected by changes in regulation, interest rates, technology and product delivery systems, and consolidation among financial service providers. The banking industry is seeing strong competition for high quality loans, with larger banks expanding activities to attract businesses that are traditionally community bank customers. In all of our counties, we have significant competition from nationwide banks with much larger branch networks and greater financial resources, as well as credit unions and other local and regional banks. Nationwide banks have the competitive advantages of developing data analytics and artificial intelligence tools and other technological platforms. Large commercial banks also have substantially greater lending limits and the ability to offer certain services, which are not offered directly by

Our business requires the secure management of sensitive client and bank information. We work diligently to implement layered security measures that intend to make our communications and information systems resilient and safe to conduct business. With the advent of artificial intelligence (AI), cyber threats such as social engineering, ransomware, and phishing are more sophisticated and prevalent now than ever before. These incidents include intentional and unintentional events that may present threats designed to disrupt operations, corrupt data, release sensitive information, or cause denial-of-service attacks. A cybersecurity breach of systems operated by the Bank, merchants, vendors, customers, or externally publicized breaches of other financial

The banking business in California generally, and in our market area specifically, is highly competitive with respect to attracting both loan and deposit relationships. The increasingly competitive environment is affected by changes in regulation, interest rates, technology and product delivery systems, and consolidation among financial service providers. The banking industry is seeing strong competition for high quality loans, with larger banks expanding activities to attract businesses that are traditionally community bank customers. In all of our 10 counties, we have significant competition from nationwide banks with much larger branch networks and greater financial resources, as well as credit unions and other local and regional banks. Nationwide banks have the competitive advantages of developing data analytics and artificial intelligence tools and other technological platforms. Large commercial banks

Our business requires the secure management of sensitive client and bank information. We work diligently to implement layered security measures that intend to make our communications and information systems resilient and safe to conduct business. With the advent of artificial intelligence (AI), cyber threats such as social engineering, ransomware, and phishing are more sophisticated and prevalent now than ever before. These incidents include intentional and unintentional events that may present threats designed to disrupt operations, corrupt data, release sensitive information, or cause denial-of-service attacks. A cybersecurity breach of systems operated by the Bank, merchants, vendors, customers, or externally publicized breaches of other financial

well as credit unions and other local and regional banks. Nationwide banks have the competitive advantages of developing data analytics and artificial intelligence tools and other technological platforms. Large commercial banks also have substantially greater lending limits and the ability to offer certain services, which are not offered directly by us. Other competitors for depositors' funds are money market mutual funds and non-bank financial institutions such as brokerage firms and insurance companies.