Stellar Bancorp, Inc.

Risks Related to Cybersecurity, Artificial Intelligence, Third-Parties and Technology

The Trump Administration has commenced efforts to implement significant changes to the size and scope of the federal government and reform its operations to achieve stated goals that include reducing the federal budget deficit and national debt, improving the efficiency of government operations, and promoting innovation and economic growth. To date, these efforts have been carried out through a mix of executive actions aimed at eliminating or modifying federal agency and federal program funding, reducing the size of the federal workforce, reducing or altering the scope of activities conducted by, and possibly eliminating, various federal agencies and bureaus, and encouraging the use of artificial intelligence (“AI”) and other advanced technologies within the public and private sectors. These changes, if implemented and taken as a whole, may have varied effects on the economy that are difficult to predict. For instance, the delivery of government services and the distribution of federal program funds and benefits may be disrupted or, in some cases, eliminated as a result of funding cuts or recasting of federal agency mandates. Further, a substantial reduction of the federal workforce could adversely affect regional and local economies, both directly and indirectly, in geographies with significant concentrations of federal employees and contractors. It is possible that such comprehensive changes to the federal

Risks Related to Cybersecurity, Artificial Intelligence, Third-Parties and Technology

The financial services industry is changing rapidly, and to remain competitive, we continue to enhance and improve the functionality and features of our products, services and technologies. In addition to better serving our customers, the effective use of technology increases efficiency and enables financial institutions to reduce costs. Our future success will depend, at least in part, upon our ability to respond to future technological changes and the ability to address the needs of our customers. We address the needs of our customers by using technology to provide products and services that will satisfy customer demands for convenience as well as to create additional efficiencies in our operations as we continue to grow and expand our products and service offerings. We may experience operational challenges as we implement new products and technology enhancements, such as artificial intelligence, automation and algorithms in our business processes, which could result in unintended consequences due to their limitations or our failure to use them effectively, not fully realizing the anticipated benefits from such new technology or require us to incur significant costs to remedy any such challenges in a timely manner. In addition, complications during a conversion of our core technology platform or implementation or upgrade of any software could negatively impact the experiences or satisfaction of our customers, which could cause those customers to terminate their relationship with us or reduce the amount of business that they do with us, either of which could adversely affect our business, financial condition or results of operations.

The development and use of AI presents risks and challenges that may adversely impact the Company’s business.

Similar wording appears in 12 other banks' reports.

The Company or its third-party (or fourth-party) vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services, or products. The development and use of AI presents a number of risks and challenges to the Company’s business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, both in the U.S. and internationally, and includes regulatory schemes targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment, and other laws applicable to the use of AI. These evolving laws and regulations could require changes in the Company’s implementation of AI technology and increase the Company’s compliance costs and risk of non-compliance. AI models, particularly generative AI models, may produce output or take actions that is incorrect, that reflects biases included in the data on which they are trained, that results in the release of private, confidential, or proprietary information, that infringes on the intellectual property rights of others, or that is otherwise harmful. In addition, the complexity of many AI models makes it difficult to understand why they are generating particular opinions. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding, monitoring the capabilities of the AI models, reducing

Similar wording appears in 26 other banks' reports.

erroneous output, eliminating bias, and complying with regulations that require documentation or explanation of the basis on which decisions are made. Further, the Company may rely on AI models developed by third-parties, and, to that extent, would be dependent in part on the manner in which those third parties develop and train their models, including risks arising from the inclusion of any unauthorized material in the training data for their models and the effectiveness of the steps these third-parties have taken to limit the risks associated with the output of their models, matters over which the Company may have limited visibility. Any of these risks could expose the Company to liability or adverse legal or regulatory consequences and harm the Company’s reputation and the public perception of its business or the effectiveness of its security measures.

Similar wording appears in 25 other banks' reports.

Risks Related to Cybersecurity, Artificial Intelligence, Third-Parties and Technology

The Trump Administration has commenced efforts to implement significant changes to the size and scope of the federal government and reform its operations to achieve stated goals that include reducing the federal budget deficit and national debt, improving the efficiency of government operations, and promoting innovation and economic growth. To date, these efforts have been carried out through a mix of executive actions aimed at eliminating or modifying federal agency and federal program funding, reducing the size of the federal workforce, reducing or altering the scope of activities conducted by, and possibly eliminating, various federal agencies and bureaus, and encouraging the use of artificial intelligence (“AI”) and other advanced technologies within the public and private sectors. These changes, if implemented and taken as a whole, may have varied effects on the economy that are difficult to predict. For instance, the delivery of government services and the distribution of federal program funds and benefits may be disrupted or, in some cases, eliminated as a result of funding cuts or recasting of federal agency mandates. Further, a substantial reduction of the federal workforce could adversely affect regional and local economies, both directly and indirectly, in geographies with significant concentrations of federal employees and contractors. It is possible that such comprehensive changes to the federal government may be materially adverse to the regional and local economies where we conduct business and to our customers, which, in turn, could be materially adverse to our business, financial condition and results of operations.

Similar wording appears in 6 other banks' reports.

Risks Related to Cybersecurity, Artificial Intelligence, Third-Parties and Technology

The financial services industry is changing rapidly, and to remain competitive, we continue to enhance and improve the functionality and features of our products, services and technologies. In addition to better serving our customers, the effective use of technology increases efficiency and enables financial institutions to reduce costs. Our future success will depend, at least in part, upon our ability to respond to future technological changes and the ability to address the needs of our customers. We address the needs of our customers by using technology to provide products and services that will satisfy customer demands for convenience as well as to create additional efficiencies in our operations as we continue to grow and expand our products and service offerings. We may experience operational challenges as we implement new products and technology enhancements, such as artificial intelligence, automation and algorithms in our business processes, which could result in unintended consequences due to their limitations or our failure to use them effectively, not fully realizing the anticipated benefits from such new technology or require us to incur significant costs to remedy any such challenges in a timely manner. In addition, complications during a conversion of our core technology platform or implementation or upgrade of any software could negatively impact the experiences or satisfaction of our customers, which could cause those customers to terminate their relationship with us or reduce the amount of business that they do with us, either of which could adversely affect our business, financial condition or results of operations.

The development and use of AI presents risks and challenges that may adversely impact the Company’s business.

Similar wording appears in 7 other banks' reports.

The Company or its third-party (or fourth party) vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services, or products. The development and use of AI presents a number of risks and challenges to the Company’s business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, both in the U.S. and internationally, and includes regulatory schemes targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment, and other laws applicable to the use of AI. These evolving laws and regulations could require changes in the Company’s implementation of AI technology and increase the Company’s compliance costs and risk of non-compliance. AI models, particularly generative AI models, may produce output or take actions that is incorrect, that reflects biases included in the data on which they are trained, that results in the release of private, confidential, or proprietary information, that infringes on the intellectual property rights of others, or that is otherwise harmful. In addition, the complexity of many AI models makes it difficult to understand why they are generating particular opinions. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding, monitoring the capabilities of the AI models, reducing erroneous output, eliminating bias, and complying with regulations that require documentation or explanation of the basis on which decisions are made. Further, the Company may rely on AI models developed by third parties, and, to that extent, would be dependent in part on the manner in which those third parties develop and train their models, including risks arising from the inclusion of any unauthorized material in the training data for their models and the effectiveness of the steps these third parties have taken to limit the risks associated with the output of their models, matters over which the Company may have limited visibility. Any of these risks could expose the Company to liability or adverse legal or regulatory consequences and harm the Company’s reputation and the public perception of its business or the effectiveness of its security measures.

Similar wording appears in 28 other banks' reports.

The financial services industry is changing rapidly, and to remain competitive, we continue to enhance and improve the functionality and features of our products, services and technologies. In addition to better serving our customers, the effective use of technology increases efficiency and enables financial institutions to reduce costs. Our future success will depend, at least in part, upon our ability to respond to future technological changes and the ability to address the needs of our customers. We address the needs of our customers by using technology to provide products and services that will satisfy customer demands for convenience as well as to create additional efficiencies in our operations as we continue to grow and expand our products and service offerings. We may experience operational challenges as we implement new products and technology enhancements ,such as artificial intelligence, automation and algorithms in our business processes, which could result in unintended consequences due to their limitations or our failure to use them effectively, not fully realizing the anticipated benefits from such new technology or require us to incur significant costs to remedy any such challenges in a timely manner. In addition, complications during a conversion of our core technology platform or implementation or upgrade of any software could negatively impact the experiences or satisfaction of our customers, which could cause those customers to terminate their relationship with us or reduce the amount of business that they do with us, either of which could adversely affect our business, financial condition or results of operations.