Nicolet Bankshares Inc

The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology-driven innovations (such as the use of artificial intelligence and machine learning), products and services as well as evolving industry standards. The effective use of technology increases efficiency and enables financial institutions to better serve customers and to reduce costs. Our future success depends, in part, upon our ability to address the needs of our customers by using technology to provide products and services that will satisfy customer demands, as well as to create additional efficiencies in our operations. Many of our competitors have substantially greater resources to invest in technological improvements. If we are unable to provide enhancements and new features and integrations for our existing platform, develop new products that achieve market acceptance, or innovate quickly enough to keep pace with these rapid technological developments, our business could be harmed.

A number of recent technologies have worked with the existing financial system and traditional banks, such as the evolution of ATM cards into debit/credit cards and the evolution of debit/credit cards into smart phones. These sorts of technologies often have expanded the market for banking services overall while siphoning a portion of the revenues from those services away from banks and disrupting prior methods of delivering those services. Additionally, some recent innovations may tend to replace traditional banks as financial service providers rather than merely augmenting those services. For example, companies which claim to offer applications and services based on artificial intelligence are beginning to compete much more directly with traditional financial services companies in areas involving personal advice, including high-margin services such as financial planning and wealth management. The low-cost, high-speed nature of these “robo-advisor” services can be especially attractive to younger, less-affluent clients and potential clients, as well as persons interested in “self-service” investment management. The rapid growth of stablecoins, accelerated by regulatory frameworks like the Genius Act, has raised important questions about their impact on traditional banking. As these digital tokens gain mainstream acceptance, they could fundamentally reshape the structure and functions of banking and influence the established intermediation role of banks. Other industry changes, such as zero-commission trading offered by certain large firms able to use trading as a loss-leader, may amplify this trend. Similarly, inventions based on blockchain technology eventually may be the foundation for greatly enhancing transactional security throughout the banking industry, but also eventually may reduce the need for banks as secure deposit-keepers and intermediaries. Our success in the competitive environment in which we operate requires consistent investment of capital and human resources in innovation, particularly in light of the current “FinTech” environment, in which the financial services industry is undergoing rapid technological changes and financial institutions are investing significantly in evaluating new technologies, such as artificial intelligence, machine learning, digital assets, blockchain and other distributed ledger technologies, and developing potentially industry-changing new products, services and industry standards. Our investment is directed at generating new products and services, and adapting existing products and services to the evolving standards and demands of the marketplace. Among other things, investing in innovation helps us maintain a mix of products and services that keeps pace with our competitors and achieves acceptable margins.

Two traditional areas, deposit fraud (check kiting, wire fraud, etc.) and loan fraud, continue to be major sources of fraud attempts and loss. The sophistication and methods used to perpetrate fraud continue to evolve as technology changes. In addition to cybersecurity risk (discussed below), new technologies have made it easier for bad actors to obtain and use client personal information, mimic signatures and otherwise create false documents that look genuine. The industry fraud threat continues to evolve, including but not limited to card fraud, check fraud, social engineering and phishing attacks for identity theft and account takeover. Additionally, the use of artificial intelligence and quantum computing could exacerbate many of these risks. Our anti-

Cyber threats are rapidly evolving, and we may not be able to anticipate or prevent all such attacks. Among other things, damage can occur due to outright theft or extortion of our funds, fraud or identity theft perpetrated on clients, or adverse publicity associated with a breach and its potential effects. Perpetrators potentially can be associates, clients, and certain vendors, all of whom legitimately have access to some portion of our systems, as well as outsiders with no legitimate access. These risks are heightened through the increasing use of digital and mobile solutions which allow for rapid money movement and increase the difficulty to detect and prevent fraudulent transactions. Additionally, as the Company grows through acquisitions and pursues new initiatives that improve our operations and cost structure, the Company is also expanding and improving its information technologies, resulting in a larger technological presence, utilization of “cloud” computing services, and corresponding exposure to cybersecurity risk. Certain new technologies, such as use of artificial intelligence, present new and significant cybersecurity safety risks that must be analyzed and addressed before implementation. If we fail to assess and identify cybersecurity risks associated with acquisitions and new initiatives, we may become increasingly vulnerable to such risks. We may be required to spend significant capital and other resources to protect against the threat of security breaches and computer viruses, or to alleviate problems caused by security breaches or viruses. To the extent that our activities or the activities of our customers involve the storage and transmission of confidential information, security breaches (including breaches of security of customer systems and networks) and viruses could expose us to claims, litigation and other possible liabilities. Any inability to prevent security breaches or computer viruses could also cause existing customers to lose confidence in our systems and could adversely affect our reputation, results of operations and ability to attract and maintain customers and businesses. In addition, a security breach could also subject us to additional regulatory scrutiny, expose us to civil litigation and possible financial liability and cause reputational damage.

The U.S. economy continued to demonstrate resilience through 2025, although growth moderated from the unexpectedly strong performance of 2024. Based on all indications, real GDP grew at just under 2% in 2025, reflecting a slight slowdown but still indicating a stable expansionary environment. Heading into 2026, GDP is expected to grow at a slightly slower pace than 2025, which is supported by tax policy, consumer spending, and productivity from advancements in artificial intelligence. Employment conditions softened somewhat in 2025, but the labor market remained fundamentally healthy. Nationwide unemployment is projected to rise only slightly in 2026 and stay below levels historically associated with recessionary conditions. Unemployment in our core markets in the Upper Midwest continue to remain below nationwide levels, which is driven by a strong base in manufacturing and healthcare, as well as a stronger labor participation rate than the rest of the country. Consumer spending in 2025 decelerated from 2024’s robust pace, influenced by higher borrowing costs and pockets of consumer caution, yet remained a key contributor to growth. Business investment continued to benefit from productivity gains—particularly in artificial intelligence and automation—though firms grew more selective amid policy uncertainty and tariff-related cost pressures.

The financial services industry is continually undergoing rapid technological change with frequent introductions of new technology-driven innovations (such as the use of artificial intelligence and machine learning), products and services as well as evolving industry standards. The effective use of technology increases efficiency and enables financial institutions to better serve customers and to reduce costs. Our future success depends, in part, upon our ability to address the needs of our customers by using technology to provide products and services that will satisfy customer demands, as well as to create additional efficiencies in our operations. Many of our competitors have substantially greater resources to invest in technological improvements. If we are unable to provide enhancements and new features and integrations for our existing platform, develop new products that achieve market acceptance, or innovate quickly enough to keep pace with these rapid technological developments, our business could be harmed.

A number of recent technologies have worked with the existing financial system and traditional banks, such as the evolution of ATM cards into debit/credit cards and the evolution of debit/credit cards into smart phones. These sorts of technologies often have expanded the market for banking services overall while siphoning a portion of the revenues from those services away from banks and disrupting prior methods of delivering those services. Additionally, some recent innovations may tend to replace traditional banks as financial service providers rather than merely augmenting those services. For example, companies which claim to offer applications and services based on artificial intelligence are beginning to compete much more directly with traditional financial services companies in areas involving personal advice, including high-margin services such as financial planning and wealth management. The low-cost, high-speed nature of these “robo-advisor” services can be especially attractive to younger, less-affluent clients and potential clients, as well as persons interested in “self-service” investment management. Other industry changes, such as zero-commission trading offered by certain large firms able to use trading as a loss-leader, may amplify this trend. Similarly, inventions based on blockchain technology eventually may be the foundation for greatly enhancing transactional security throughout the banking industry, but also eventually may reduce the need for banks as secure deposit-keepers and intermediaries. Our success in the competitive environment in which we operate requires consistent investment of capital and human resources in innovation, particularly in light of the current “FinTech” environment, in which the financial services industry is undergoing rapid technological changes and financial institutions are investing significantly in evaluating new technologies, such as artificial intelligence, machine learning, blockchain and other distributed ledger technologies, and developing potentially industry-changing new products, services and industry standards. Our investment is directed at generating new products and services, and adapting existing products and services to the evolving standards and demands of the marketplace. Among other things, investing in innovation helps us maintain a mix of products and services that keeps pace with our competitors and achieve acceptable margins.

Two traditional areas, deposit fraud (check kiting, wire fraud, etc.) and loan fraud, continue to be major sources of fraud attempts and loss. The sophistication and methods used to perpetrate fraud continue to evolve as technology changes. In addition to cybersecurity risk (discussed below), new technologies have made it easier for bad actors to obtain and use client personal information, mimic signatures and otherwise create false documents that look genuine. The industry fraud threat continues to evolve, including but not limited to card fraud, check fraud, social engineering and phishing attacks for identity theft and account takeover. Additionally, the use of artificial intelligence and quantum computing could exacerbate many of these risks. Our anti-fraud measures are both preventive and, when necessary, responsive; however, some level of fraud loss is unavoidable, and the risk of a major loss cannot be eliminated.

Cyber threats are rapidly evolving and we may not be able to anticipate or prevent all such attacks. Among other things, damage can occur due to outright theft or extortion of our funds, fraud or identity theft perpetrated on clients, or adverse publicity associated with a breach and its potential effects. Perpetrators potentially can be associates, clients, and certain vendors, all of whom legitimately have access to some portion of our systems, as well as outsiders with no legitimate access. These risks are heightened through the increasing use of digital and mobile solutions which allow for rapid money movement and increase the difficulty to detect and prevent fraudulent transactions. Additionally, as the Company grows through acquisitions and pursues new initiatives that improve our operations and cost structure, the Company is also expanding and improving its information technologies, resulting in a larger technological presence, utilization of “cloud” computing services, and corresponding exposure to cybersecurity risk. Certain new technologies, such as use of artificial intelligence, present new and significant cybersecurity safety risks that must be analyzed and addressed before implementation. If we fail to assess and identify cybersecurity risks associated with acquisitions and new initiatives, we may become increasingly vulnerable to such risks. We may be required to spend significant capital and other resources to protect against the threat of security breaches and computer viruses, or to alleviate problems caused by security breaches or viruses. To the extent that our activities or the activities of our customers involve the storage and transmission of confidential information, security breaches (including breaches of security of customer systems and networks) and viruses could expose us to claims, litigation and other possible liabilities. Any inability to prevent security breaches or computer viruses could also cause existing customers to lose confidence in our systems and could adversely affect our reputation, results of operations and ability to attract and maintain customers and businesses. In addition, a security breach could also subject us to additional regulatory scrutiny, expose us to civil litigation and possible financial liability and cause reputational damage.

The Federal Reserve began to loosen its monetary policy during the year in an attempt to slow inflation. After a short period of sharp increases in interest rates in 2022 and 2023, the Fed cut rates by 50 bps in September, which was followed by two 25 bps cuts in November and December 2024. The decrease in rates appeared to have their intended effect, as inflation has come down from the mid-single digits in the beginning of the year, to 2.8% to close out the year in December. As inflation remains above the Fed’s 2% target, the market appears to believe rates may remain “higher for longer” until inflation drops closer to this level. As such, in early 2025, the market is expecting two 25bps rate cuts during the year. Furthermore, other economic indicators point to a slowing, but strong macroeconomic environment in 2025. Unemployment is expected to tick up, but remain below 5%. Consumer and business spending may slow, but still remain relatively strong despite higher interest rates. And productivity gains are expected to continue as new developments in AI and other technologies challenge businesses on how they invest for the future. Despite these tailwinds, there are several unknowns of a new administration that provide some level of economic uncertainty. While the general belief is this administration is more business friendly, and will usher in ideas that will increase business investment and growth (such as lower taxes, fewer regulations, and a more friendly M&A environment), there are others that leave questions on their effects (such as tariffs, trade policy, and mass deportations).

A number of recent technologies have worked with the existing financial system and traditional banks, such as the evolution of ATM cards into debit/credit cards and the evolution of debit/credit cards into smart phones. These sorts of technologies often have expanded the market for banking services overall while siphoning a portion of the revenues from those services away from banks and disrupting prior methods of delivering those services. Additionally, some recent innovations may tend to replace traditional banks as financial service providers rather than merely augmenting those services. For example, companies which claim to offer applications and services based on artificial intelligence are beginning to compete much more directly with traditional financial services companies in areas involving personal advice, including high-margin services such as financial planning and wealth management. The low-cost, high-speed nature of these “robo-advisor” services can be especially attractive to younger, less-affluent clients and potential clients, as well as persons interested in “self-service” investment management. Other industry changes, such as zero-commission trading offered by certain large firms able to use trading as a loss-leader, may amplify this trend. Similarly, inventions based on blockchain technology eventually may be the foundation for greatly enhancing transactional security throughout the banking industry, but also eventually may reduce the need for banks as secure deposit-keepers and intermediaries.

Two traditional areas, deposit fraud (check kiting, wire fraud, etc.) and loan fraud, continue to be major sources of fraud attempts and loss. The sophistication and methods used to perpetrate fraud continue to evolve as technology changes. In addition to cybersecurity risk (discussed below), new technologies have made it easier for bad actors to obtain and use client personal information, mimic signatures and otherwise create false documents that look genuine. The industry fraud threat continues to evolve, including but not limited to card fraud, check fraud, social engineering and phishing attacks for identity theft and account takeover. Additionally, the use of artificial intelligence could exacerbate many of these risks. Our anti-fraud measures are both preventive and, when necessary, responsive; however, some level of fraud loss is unavoidable, and the risk of a major loss cannot be eliminated.

Cyber threats are rapidly evolving and we may not be able to anticipate or prevent all such attacks. Among other things, damage can occur due to outright theft or extortion of our funds, fraud or identity theft perpetrated on clients, or adverse publicity associated with a breach and its potential effects. Perpetrators potentially can be associates, clients, and certain vendors, all of whom legitimately have access to some portion of our systems, as well as outsiders with no legitimate access. These risks are heightened through the increasing use of digital and mobile solutions which allow for rapid money movement and increase the difficulty to detect and prevent fraudulent transactions. Additionally, the use of artificial intelligence could exacerbate many of these risks. We may be required to spend significant capital and other resources to protect against the threat of security breaches and computer viruses, or to alleviate problems caused by security breaches or viruses. To the extent that our activities or the activities of our customers involve the storage and transmission of confidential information, security breaches (including breaches of security of customer systems and networks) and viruses could expose us to claims, litigation and other possible liabilities. Any inability to prevent security breaches or computer viruses could also cause existing customers to lose confidence in our systems and could adversely affect our reputation, results of operations and ability to attract and maintain customers and businesses. In addition, a security breach could also subject us to additional regulatory scrutiny, expose us to civil litigation and possible financial liability and cause reputational damage.

A number of recent technologies have worked with the existing financial system and traditional banks, such as the evolution of ATM cards into debit/credit cards and the evolution of debit/credit cards into smart phones. These sorts of technologies often have expanded the market for banking services overall while siphoning a portion of the revenues from those services away from banks and disrupting prior methods of delivering those services. Additionally, some recent innovations may tend to replace traditional banks as financial service providers rather than merely augmenting those services. For example, companies which claim to offer applications and services based on artificial intelligence are beginning to compete much more directly with traditional financial services companies in areas involving personal advice, including high-margin services such as financial planning and wealth management. The low-cost, high-speed nature of these “robo-advisor” services can be especially attractive to younger, less-affluent clients and potential clients, as well as persons interested in “self-service” investment management. Other industry changes, such as zero-commission trading offered by certain large firms able to use trading as a loss-leader, may amplify this trend. Similarly, inventions based on blockchain technology eventually may be the foundation for greatly enhancing transactional security throughout the banking industry, but also eventually may reduce the need for banks as secure deposit-keepers and intermediaries.