CWBC US Equity☆

cvcy-20251231

Table of Contents

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

WASHINGTON, D.C. 20549

FORM 10-K

☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2025

OR

☐ TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE

ACT OF 1934

For the transition period from to

Commission file number: 000-31977

COMMUNITY WEST BANCSHARES

(Exact name of registrant as specified in its charter)

(Address of principal executive offices) (Zip Code)

559-298-1775

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Title of Each Class Trading Symbol Name of Each Exchange on which Registered

Common Stock, no par value CWBC NASDAQ Capital Market

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐No☒

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Exchange Act. Yes ☐No☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulations S-T (232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit). Yes ☐No☒

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act:

Large accelerated filer ☐ Accelerated filer ☒ Emerging growth company ☐

Non-accelerated filer ☐ Smaller reporting company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

As of June 30, 2025, the aggregate market value of the registrant’s common stock held by non-affiliates of the registrant was $336,710,000 based on the price at which the stock was last sold on June 30, 2025.

Indicate the number of shares outstanding of each of the issuer’s classes of common stock, as of the latest practicable date.

Common Stock, No Par Value Outstanding at March 11, 2026

Table of Contents

DOCUMENTS INCORPORATEDBY REFERENCE

Portions of the Registrant’s definitive proxy statement to be filed with the Securities and Exchange Commission pursuant to Regulation 14A in connection with the 2025 Annual Meeting of Shareholders to be held on May 27, 2026 are incorporated by reference into Part III of this Report. The proxy statement will be filed with the Securities and Exchange Commission not later than 120 days after the Registrant’s fiscal year ended December 31, 2025.

Table of Contents

TABLE OF CONTENTS

ITEM 1 - DESCRIPTION OF BUSINESS 5

ITEM 1A - RISK FACTORS 17

ITEM 1B - UNRESOLVED STAFF COMMENTS 31

ITEM 1C - CYBERSECURITY 32

ITEM 2 - DESCRIPTION OF PROPERTY 34

ITEM 3 - LEGAL PROCEEDINGS 34

ITEM 4 - MINE SAFETY DISCLOSURES 34

ITEM 6 - [RESERVED] 36

ITEM 7A- QUANTITATIVE AND QUALITATIVE DISCLOSURES ABOUT MARKET RISK 63

ITEM 8 - FINANCIAL STATEMENTS AND SUPPLEMENTARY DATA 67

ITEM 9A - CONTROLS AND PROCEDURES 122

ITEM 9B- OTHER INFORMATION 123

ITEM 9C- DISCLOSURE REGARDING FOREIGN JURISDICTIONS THAT PREVENT INSPECTIONS 123

ITEM 10 - DIRECTORS, EXECUTIVE OFFICERS, AND CORPORATE GOVERNANCE 124

ITEM 11 - EXECUTIVE COMPENSATION 124

ITEM 13 - CERTAIN RELATIONSHIPS AND RELATED TRANSACTIONS 124

ITEM 14 - PRINCIPAL ACCOUNTING FEES AND SERVICES 124

ITEM 15 - EXHIBITS, FINANCIAL STATEMENT SCHEDULES 124

Table of Contents

Cautionary Note Regarding Forward-Looking Statements

Certain matters set forth herein (including any exhibits hereto) constitute “forward-looking statements” within the meaning of the Private Securities Litigation Reform Act of 1995, including forward-looking statements relating to the Company’s current business plans and expectations regarding future operating results. Forward-looking statements may include, but are not limited to, the use of forward-looking language, such as “likely result in,” “expects,” “anticipates,” “estimates,” “forecasts,” “projects,” “intends to,” or may include other similar words or phrases, such as “believes,” “plans,” “trend,” “objective,” “continues,” “remains,” or similar expressions, or future or conditional verbs, such as “will,” “would,” “should,” “could,” “may,” “might,” “can,” or similar verbs. These forward-looking statements are subject to risks and uncertainties that could cause actual results, performance or achievements to differ materially from those projected. These risks and uncertainties, some of which are beyond our control, include, but are not limited to:

•current and future business, economic and market conditions in the United States generally or in the communities we serve, including the effects of declines in property values and overall slowdowns in economic growth should these events occur;

•inflationary pressures and changes in the interest rate environment that reduce our margins and yields, the fair value of financial instruments or our level of loan originations, or increase the level of defaults, losses and prepayments on loans we have made and make, whether held in the portfolio or in the secondary market;

•effects of and changes in trade, monetary and fiscal policies and laws, including the interest rate policies of the Federal Open Market Committee of the Federal Reserve Board;

•geopolitical and domestic political developments such as wars that can increase levels of political and economic unpredictability, contribute to rising energy and commodity prices, and increase the volatility of financial markets;

•changes in the level of nonperforming assets and charge offs and other credit quality measures, and their impact on the adequacy of our allowance for credit losses and our provision for credit losses;

•factors that can impact the performance of our loan portfolio, including real estate values and liquidity in our primary market areas, the financial health of our commercial borrowers, and the success of construction projects that we finance;

•the concentration of our loan portfolio in loans collateralized by residential and commercial real estate;

•our ability to achieve loan growth and attract deposits in our market area, the impact of the cost of deposits and our ability to retain deposits;

•liquidity issues, including fluctuations in the fair value and liquidity of the securities we hold for sale and our ability to raise additional capital, if necessary;

•continued or increasing competition from other financial institutions, credit unions, and non-bank financial services companies, many of which are subject to different or fewer regulations than we are;

•challenges arising from unsuccessful attempts to expand into new geographic markets, products, or services;

•restraints on the ability of Community West Bank to pay dividends to us, which could limit our liquidity;

•increased capital requirements imposed by banking regulators, which may require us to raise capital at a time when capital is not available on favorable terms or at all;

•inaccuracies in our assumptions about future events, which could result in material differences between our financial projections and actual financial performance;

•changes in our management personnel or our inability to retain, motivate and hire qualified management personnel;

•disruptions, security breaches, or other adverse events, failures or interruptions in, or attacks on, our information technology systems or the systems of third-party vendors who perform several of our critical processing functions;

•disruptions, security breaches, or other adverse events affecting the third-party vendors who perform several of our critical processing functions;

•an inability to keep pace with the rate of technological advances due to a lack of resources to invest in new technologies;

•risks related to the merger with United Security Bancshares, including, among others, the expected business expansion may be less successful as projected; the integration of each party’s management, personnel and operations may not be successfully achieved or may be materially delayed or may be more costly or difficult than expected, and deposit attrition;

•natural disasters, such as earthquakes, fires, drought, pandemic diseases (such as the coronavirus) or extreme weather events, any of which may affect services we use or affect our customers, employees or third parties with which we conduct business;

•compliance with governmental and regulatory requirements, relating to banking, consumer protection, securities and tax matters; and

•our ability to the manage the foregoing.

The foregoing factors should not be construed as exhaustive and should be read together with the other cautionary statements included in this report. Because of these risks and other uncertainties, our actual future results, performance or achievement, or industry results, may be materially different from the results indicated by the forward looking statements in this report. In addition, our past results of operations are not necessarily indicative of our future results. You should not rely on any forward looking statements, which represent our beliefs, assumptions and estimates only as of the dates on which they were made, as

4

Table of Contents

predictions of future events. Any forward-looking statement speaks only as of the date on which it is made, and we do not undertake any obligation to update or review any forward-looking statement, whether as a result of new information, future developments or otherwise. Further information on other factors that could affect the financial results of the Company are included in Item 1A of this Annual Report on Form 10-K and in the Company’s other filings with the Securities and Exchange Commission (“SEC”). These documents are available free of charge at the SEC website at http://www.sec.gov.

PART I

ITEM 1 -DESCRIPTION OF BUSINESS

General

Effective April 1, 2024, Central Valley Community Bancorp, completed its merger transaction with Community West Bancshares. Shortly thereafter, Community West Bank, a wholly owned subsidiary of Community West Bancshares, merged with and into Central Valley Community Bank, a wholly owned subsidiary of Central Valley Community Bancorp, with Central Valley Community Bank being the surviving banking institution. Effective with these mergers, the names of Central Valley Community Bancorp and Central Valley Community Bank were changed to Community West Bancshares and Community West Bank, respectively.

Community West Bancshares is a bank holding company registered under the Bank Holding Company Act of 1956, as amended (the “Company”). The Company was incorporated on February 7, 2000 as a California corporation, for the purpose of becoming the holding company for Community West Bank (the “Bank”), formerly known as Central Valley Community Bank, a California state chartered bank.

At December 31, 2025, the Bank was the only banking subsidiary of the Company. Today, the Bank operates full-service Banking Centers in California from Greater Sacramento in the north, throughout the San Joaquin Valley and west to the Central Coast. The Bank also maintains Commercial, Real Estate and Agribusiness Lending, as well as Private Banking and Cash Management Departments. The Company does not currently conduct any operations other than through the Bank. Unless the context otherwise requires, references to “us,” “we,” or “our” refer to the Company and the Bank on a consolidated basis. At December 31, 2025, we had consolidated total assets of approximately $3,690,317,000. See Items 7 and 8, Management’s Discussion and Analysis of Financial Condition and Results of Operations, and Financial Statements.

The Company is regulated by the Board of Governors of the Federal Reserve System (“Federal Reserve”). The Bank is regulated by the California Department of Financial Protection and Innovation (“DFPI”) and its primary Federal regulator is the Federal Deposit Insurance Corporation (“FDIC”).

As of March 2, 2026, we had a total of 341 employees and 327 full time equivalent employees, including the employees of the Bank.

The Bank

The Bank was organized in 1979 and commenced business as a California state chartered bank in 1980. The deposits of the Bank are insured by the FDIC up to applicable limits. The Bank is not a member of the Federal Reserve System.

The Bank operates 26 full-service banking officesinBakersfield, Clovis, Exeter, Folsom, Fresno, Goleta, Kerman, Lodi, Madera, Merced, Modesto, Oakhurst, Oxnard, Paso Robles, Prather, Roseville, Sacramento, San Luis Obispo, Santa Barbara, Santa Maria, Stockton, Ventura, and Visalia. The Bank conducts a commercial banking business, which includes accepting demand, savings and time deposits and making commercial, real estate and consumer loans. It also provides domestic and international wire transfer services and other customary banking services. The Bank also offers Internet Banking that consists of inquiry, account status, bill paying, account transfers, and cash management. The Bank does not offer trust services or international banking services and does not currently plan to do so in the near future. The Bank has a Real Estate Division, an Agribusiness Center, and an SBA Lending Division. The Real Estate Division processes or assists in processing the majority of the Bank’s real estate related transactions, including interim construction loans for single family residences and commercial buildings. We offer permanent single family residential loans through our mortgage broker services. Our total market share of deposits in Fresno, Madera, San Joaquin, and Tulare counties was 4.41% in 2025 compared to 4.10% in 2024 based on FDIC deposit market share information published as of June 30, 2025. Our total market share in San Luis Obispo, Santa Barbara, and Ventura counties was 1.21%. Our total market share in the other counties we operate in (Placer, Sacramento, and Stanislaus), was less than 1.00% as of June 30, 2025 and 2024.

5

Table of Contents

We have a diversified loan portfolio. At December 31, 2025, we had total loans, net of deferred fees of $2,540,570,000. Total commercial and industrial loans outstanding were $156,744,000, total agricultural land and production loans outstanding were $34,152,000, total real estate loans outstanding were $1,934,324,000, and total consumer loans outstanding were $415,350,000. Our secured loans are collateralized by one or more of the following: real estate, listed securities, savings and time deposits, automobiles, inventory, accounts receivable, manufactured housing, and machinery and equipment.

In addition to acquisitions, we have experienced organic growth by expanding our branch network. Management of the Bank analyzes its branch network on an ongoing basis to determine whether to open new branches, consolidate, or potentially eliminate existing branches in the future.

No individual or single group of related accounts is considered material in relation to the Bank’s assets or deposits, or in relation to our overall business. We attract deposits from individual and commercial customers. No single customer or group of related customers’ accounts for a material portion of our deposits such that the loss of any one or more would have a material adverse effect on our business. At December 31, 2025 approximately 76.1% of our loan portfolio held for investment consisted of loans secured by real estate, including construction loans, equity loans and lines of credit, and commercial loans secured by real estate. See Item 7 — Management’s Discussion and Analysis of Financial Condition and Results of Operations. Currently, our business activities are primarily concentrated in Fresno, Kern, Madera, Merced, Placer, Sacramento, San Joaquin, San Luis Obispo, Santa Barbara, Stanislaus, Tulare, and Ventura Counties in California. Consequently, our results of operations and financial condition are dependent upon the general economic trends in our market area and, in particular, the residential and commercial real estate markets. Further, our concentration of operations in these markets exposes us to greater risk than other banking companies with a wider geographic base.

Competition

The banking business in California generally, and our primary service area specifically, is highly competitive with respect to both loans and deposits, and is dominated by a relatively small number of major banks with many offices operating over a wide geographic area. Among the advantages such major banks have over us is their ability to finance wide-ranging advertising campaigns and to allocate their investment assets, including loans, to regions of higher yield and demand. Major banks offer certain services such as international banking and trust services which we do not offer directly but which we usually can offer indirectly through correspondent institutions. To compete effectively, we rely substantially on local promotional activity, personal contacts by our officers, directors and employees, referrals by our shareholders, personalized service and our reputation in the communities we serve.

Our total market share of deposits in Fresno, Madera, San Joaquin, and Tulare counties was 4.41% in 2025 compared to 4.10% in 2024 based on FDIC deposit market share information published each year as of June. In Fresno and Madera Counties, in addition to our ten full-service branch locations serving the Bank’s primary service areas, as of June 30, 2025 there were 116 operating banking offices in our primary service area, which consists of the cities of Clovis, Fresno, Kerman, Oakhurst, Madera, and Prather, California. Prather does not contain any banking offices other than our branch location. In San Joaquin County, in addition to our two full service branch locations, as of June 30, 2025 there were 87 operating banking offices. In Tulare County, in addition to our two branches there were 45 operating banking offices in our primary service area. Our total market share of deposits in San Luis Obispo, Santa Barbara, and Ventura counties was 1.21% in 2024 based on FDIC deposit market share information published each year as of June. In San Luis Obispo County, in addition to our two full-service branch locations, there were 53 operating banking centers in our primary service area. In Santa Barbara County, in addition to our three branches, there were 81 operating banking centers in our primary service area. In Ventura County, in addition to our two branches, there were 117 operating banking centers in our primary service area. Our combined total market share in the other counties we operate in (Kern, Merced, Placer, Sacramento, and Stanislaus), was less than 1.00% as of 2025 and 2024. In Kern County, in addition to our one branch, as of June 30, 2025, there were 71 operating banking offices in our primary service area. In Merced County, in addition to our one branch, as of June 30, 2025 there were 24 operating banking offices in our primary service area. In Sacramento County, in addition to our two branches, as of June 30, 2025 there were 175 operating banking offices in our primary service area. In Stanislaus County, in addition to our one branch, there were 76 operating banking offices in our primary service area. In Placer County, in addition to our one branch, there were 68 operating banking offices in our primary service area. Business activity in our primary service area is oriented toward light industry, small business and agriculture.

By virtue of their greater total capitalization, larger banks have substantially higher lending limits than we do. Legal lending limits to an individual customer are limited to a percentage of our total capital. For borrowers desiring loans in excess of the Bank’s lending limits, the Bank seeks to make such loans on a participation basis with other financial institutions. Banks also compete with money market funds and other money market instruments, which are not subject to interest rate ceilings. In recent years, increased competition has also developed from specialized finance and non-finance companies that offer wholesale

6

Table of Contents

finance, credit card, and other consumer finance services, including online banking services and personal finance software. Competition for deposit and loan products remains strong, from both banking and non-banking firms, and affects the rates of those products as well as the terms on which they are offered to customers.

Technological innovation continues to contribute to greater competition in domestic and international financial services markets. Technological innovation has, for example, made it possible for non-depository institutions to offer customers automated transfer payment services that previously have been traditional banking products. In addition, customers now expect a choice of several delivery systems and channels, including telephone, mail, home computer, ATMs, remote deposit, mobile banking applications, self-service branches, and in-store branches.

In addition, competition has intensified due to federal and state interstate banking laws and foreign banking laws, which permit banking organizations to expand geographically with fewer restrictions than in the past. Such laws allow banks to merge with other banks across state lines, thereby enabling banks to establish or expand banking operations in our market. The competitive environment also is significantly impacted by federal and state legislation, which may make it easier for non-bank financial institutions to compete with us.

Human Capital Resources

Our success as a financial institution in our market areas is dependent on a workforce that embraces and is dedicated to our mission and culture. Our culture is grounded in a set of core values - teamwork, respect, accountability, integrity and leadership. In order to continue to deliver on our mission and maintain our culture, it is crucial that we attract and retain talent who desire and have the experience to provide creative and innovative financial solutions and options for the diverse communities we serve. Through our hiring and retention programs we aim to create an inclusive workforce with diversified backgrounds and experiences. We strive to maintain an inclusive, safe and healthy workplace, with opportunities for our employees to grow and develop in their careers, supported by advantageous compensation, medical, dental, and vision benefits, health and welfare programs, pre-tax savings programs, 401k and 401k matching, and profit-sharing.

As of December 31, 2025, we had approximately 338 total employees, which included 327 full-time employees, 10 part-time employees and one on-call employee. As a financial institution, approximately 67% of our employees are employed at our banking center and loan production offices, and another 33% are employed at our headquarters. We believe our relationship with our employees to be generally good. None of these employees are represented by a collective bargaining agreement.

As of December 31, 2025, approximately 69% of our current workforce is female, 31% male, and our average tenure is 5.77 years, as compared to 4.58 years as of December 31, 2024.

As part of our compensation philosophy, we offer market competitive total rewards programs for our employees in order to attract and retain superior talent. These programs, include annual bonus opportunities, an Employee Stock Ownership Plan, a matched 401(k) Plan, healthcare and insurance benefits, health savings and flexible spending accounts, paid time off, family leave, family care resources, flexible work schedules, adoption assistance, education reimbursement program, and employee assistance programs.

We encourage and support the growth and development of our associates through training and education and, wherever possible, seek to fill positions by promotion and transfer from within the organization. Additionally, all our employees are expected to display and encourage honest, ethical, and respectful conduct in the workplace. Our employees must adhere to our Code of Business Conduct and Ethics that sets standards for appropriate behavior and includes periodic training on preventing, identifying, reporting, and stopping discrimination of any kind. The success of our business is fundamentally connected to the well-being of our people. Accordingly, we are committed to the health, safety and wellness of our employees and encourage our employees with regular wellness challenges.

Supervision and Regulation

GENERAL

Banking is a complex, highly regulated industry. Regulation and supervision by federal and state banking agencies are intended to maintain a safe and sound banking system, protect depositors and the FDIC’s insurance fund, and facilitate the conduct of sound monetary policy. In furtherance of these goals, Congress and the states have created several largely autonomous regulatory agencies and enacted numerous laws that govern banks, bank holding companies and the financial services industry. Consequently, the growth and earnings performance of the Company can be affected not only by management decisions and general economic conditions, but also by the requirements of applicable state and federal statutes, regulations and the policies of various governmental regulatory authorities, including the Federal Reserve, the FDIC, the DFPI, the Consumer Financial

7

Table of Contents

Protection Bureau (“CFPB”), and the California Privacy Protection Agency. Furthermore, tax laws administered by the Internal Revenue Service and state taxing authorities, accounting rules developed by the FASB, securities laws administered by the SEC and state securities authorities, anti-money laundering laws enforced by the U.S. Department of the Treasury, or Treasury, and mortgage related rules, including with respect to loan securitization and servicing by the U.S. Department of Housing and Urban Development and agencies such as Fannie Mae and Freddie Mac, also impact our business. The statutes, regulations, regulatory policies and rules significantly impact our financial condition and results of operations. Further, the nature and extent of future legislative, regulatory or other changes affecting financial institutions are impossible to predict with any certainty.

Federal and state banking laws impose a comprehensive system of supervision, regulation and enforcement on the operations of banks, their holding companies and their affiliates. These laws are intended primarily for the protection of the FDIC’s Deposit Insurance Fund and bank customers rather than shareholders. Federal and state laws, and the related regulations of the bank regulatory agencies, affect, among other things, the scope of business, the kinds and amounts of investments banks may make, reserve requirements, capital levels relative to operations, the nature and amount of collateral for loans, the establishment of branches, the ability to merge, consolidate and acquire other financial institutions, dealings with insiders and affiliates, and the payment of dividends.

This supervisory and regulatory framework subjects banks and bank holding companies to regular examination by their respective regulatory agencies, which results in examination reports and ratings that, while not publicly available, can affect the conduct and growth of their businesses. These examinations consider not only compliance with applicable laws and regulations, but also capital levels, asset quality and risk, management ability and performance, earnings, liquidity, and various other factors. The regulatory agencies have broad discretion to impose restrictions and limitations on the operations of a regulated entity where the agencies determine, among other things, that such operations are unsafe or unsound, fail to comply with applicable law or are otherwise inconsistent with laws and regulations administered by these agencies.

The following is a summary of the material elements of the supervisory and regulatory framework applicable to the Company and its bank subsidiary. It does not describe all of the statutes, regulations and regulatory policies that apply, nor does it restate all of the requirements of those that are described. The descriptions are qualified in their entirety by reference to the particular statutory or regulatory provision.

BANK HOLDING COMPANY REGULATION

The Company, as a bank holding company, is subject to regulation under the Bank Holding Company Act of 1956, as amended (“BHC Act”), and the supervision and examination by the Federal Reserve. Pursuant to the BHC Act, we are required to obtain the prior approval of the Federal Reserve before we may acquire all or substantially all of the assets of any bank, or ownership or control of voting shares of any bank if, after giving effect to such acquisition, we would own or control, directly or indirectly, 5% or more of the voting shares of such bank.

Under the BHC Act, we may not engage in any business other than managing or controlling banks or furnishing services to our subsidiaries that the Federal Reserve deems to be so closely related to banking as to be a proper incident to banking. Bank holding companies that qualify and elect to be treated as “financial holding companies” may engage in a broad range of additional activities that are (i) financial in nature or incidental to such financial activities or (ii) complementary to a financial activity and do not pose a substantial risk to the safety and soundness of depository institutions or the financial system generally. These activities include securities underwriting and dealing, insurance underwriting and making merchant banking investments. We have not elected to be treated as a financial holding company and currently have no plans to make a financial holding company election.

We are also prohibited, with certain exceptions, from acquiring direct or indirect ownership or control of 5% or more of the voting shares of any company unless the company is engaged in banking activities or the Federal Reserve determines that the activity is so closely related to banking to be a proper incident to banking. The Federal Reserve’s approval must be obtained before the shares of any such company can be acquired and, in certain cases, before any approved company can open new offices.

The BHC Act, the Federal Reserve regulations, and general corporate law also impose certain constraints on the payment of dividends and the redemption or purchase by a bank holding company of its own shares of stock.

Pursuant to Dodd-Frank, bank holding companies are required to act as a source of financial and managerial strength to their subsidiary banks. As such, the Company is expected to commit resources to support the Bank, including at times when the Company may not be in a financial position to do so. The Company must stand ready to use its available resources to provide adequate capital to the subsidiary bank during periods of financial stress or adversity. The Company must also maintain the

8

Table of Contents

financial flexibility and capital raising capacity to obtain additional resources to assist the Bank. The Company’s failure to meet its source of strength obligations may constitute an unsafe and unsound practice, a violation of the applicable regulations, or both. The source of strength doctrine most directly affects bank holding companies where a bank holding company’s subsidiary bank fails to maintain adequate capital levels. In such a situation, the subsidiary bank will be required by its federal regulator to take “prompt corrective action.” Any capital loans by a bank holding company to a subsidiary bank are subordinate in right of payment to deposits and certain other indebtedness of such bank.

In addition, banks are subject to certain restrictions imposed by the Federal Reserve Act (the “FRA”) on extensions of credit to their affiliates, including executive officers, directors, and principal shareholders. Subject to certain exceptions, a bank subsidiary can make loans and other extensions of credit, investments and asset purchases, as well as certain other transactions involving the transfer of value to or for the benefit of an affiliate if such transactions with one affiliate do not exceed 10% of such bank subsidiary’s capital and surplus, or 20% of such bank subsidiary’s capital and surplus for all transactions with affiliates in the aggregate. Such transactions must be on terms and conditions that are consistent with safe and sound banking practices and on terms that are not more favorable than those provided to a non-affiliate. A bank and its subsidiaries generally may not purchase a “low-quality asset,” as defined in the FRA, from an affiliate. Certain transactions between the Bank and its affiliates, including the Company, must be on terms substantially the same, or at least as favorable to the Bank, as those prevailing at the time for comparable transactions with non-affiliates.

A bank holding company and its banking subsidiaries are prohibited from engaging in certain tie-in arrangements in connection with any extension of credit, sale or lease of property or provision of services. For example, with certain exceptions, a bank may not condition an extension of credit on a customer obtaining other services provided by it, its holding company or any of its other bank affiliates, or on a promise by the customer not to obtain other services from a competitor.

The Federal Reserve has cease and desist powers over parent bank holding companies and non-banking subsidiaries where their actions represent an unsafe or unsound practice or violation of law.

The Federal Reserve has the authority to regulate debt obligations (other than commercial paper) issued by bank holding companies by imposing interest ceilings and reserve requirements on such debt obligations. Further, we are required by the Federal Reserve to maintain certain capital levels. See “Capital Standards.”

We are also a bank holding company within the meaning of Sections 1280-1287 of the California Financial Code. As such, we and our subsidiaries are subject to examination by, and may be required to file reports with, the DFPI.

REGULATION OF THE BANK

Banks are extensively regulated under both federal and state law. The Bank, as a California state-chartered bank, is subject to supervision, regulation and periodic examination by the DFPI. The Bank is not a member of the Federal Reserve System, but it is nevertheless subject to certain Federal Reserve regulations.

The Bank’s primary federal regulator is the FDIC. The FDIC currently insures the deposits of insured depository institutions, including all non-interest bearing transaction accounts, up to the standard maximum deposit insurance amount of $250,000 for each deposit insurance ownership category. For this protection, the Bank is required to pay a semi-annual statutory assessment.

Various remedies are available to the FDIC if it determines during an examination that the financial condition, capital resources, asset quality, earnings prospects, management, liquidity, or other aspects of the Bank’s operations are unsatisfactory or that the Bank or its management is violating or has violated any law or regulation. Such remedies include the power to enjoin “unsafe or unsound” practices, to require affirmative action to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in capital, to restrict the growth of the Bank, to assess civil monetary penalties, to remove officers and directors, and ultimately to terminate the Bank’s deposit insurance, which for a California state-chartered bank would result in a revocation of the Bank’s charter. The DFPI has many of the same remedial powers.

Various requirements and restrictions under the laws of the State of California and the United States affect the operations of the Bank. State and federal statutes and regulations relate to many aspects of the Bank’s operations, including standards for safety and soundness, reserves against deposits, interest rates payable on deposits, loans, investments, mergers and acquisitions, borrowings, dividends, locations of branch offices, fair lending requirements, Community Reinvestment Act activities, and loans to affiliates.

9

Table of Contents

Depositor Preference. In the event of the “liquidation or other resolution” of an insured depository institution, the claims of depositors of the institution, including the claims of the FDIC as subrogee of insured depositors, and certain claims for administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution. If an insured depository institution fails, insured and uninsured depositors along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including the parent bank holding company, with respect to any extensions of credit they have made to such insured depository institution.

Brokered Deposit Restrictions. Well-capitalized institutions are not subject to limitations on brokered deposits, while an adequately capitalized institution is able to accept, renew or roll over brokered deposits only with a waiver from the FDIC and subject to certain restrictions on the yield paid on such deposits. Undercapitalized institutions are generally not permitted to accept, renew, or roll over brokered deposits. The Bank is eligible to accept brokered deposits without limitations.

Loans to Directors, Executive Officers and Principal Shareholders. The authority of the Bank to extend credit to its directors, executive officers and principal shareholders, including their immediate family members and entities that they control, is subject to substantial restrictions and requirements under Sections 22(g) and 22(h) of the FRA and Regulation O promulgated thereunder, as well as the Sarbanes-Oxley Act of 2002. These statutes and regulations impose specific limits on the amount of loans the Bank may make to directors and other insiders, and specified approval procedures must be followed in making loans that exceed certain amounts. In addition, all loans the Bank makes to directors and other insiders must satisfy the following requirements; (i) the loans must be made on substantially the same terms, including interest rates and collateral, as prevailing at the time for comparable transactions with persons not affiliated with the Bank; (ii) the Bank must follow credit underwriting procedures at least as stringent as those applicable to comparable transactions with persons who are not affiliated with the Bank; and (iii) the loans must not involve a greater than normal risk of non-payment or include other features not favorable to the Bank.

Furthermore, the Bank must periodically report all loans made to directors and other insiders to the bank regulators, and these loans are closely scrutinized by the regulators for compliance with Sections 22(g) and 22(h) of the FRA and Regulation O. Each loan to directors or other insiders must be pre-approved by the Bank’s Board of Directors with the interested director abstaining from voting.

PAYMENT OF DIVIDENDS AND STOCK REPURCHASES

The Company’s shareholders are entitled to receive dividends when and as declared by our Board of Directors, out of funds legally available, subject to the dividends preference, if any, on preferred shares that may be outstanding. The principal source of cash revenue to the Company is dividends received from the Bank. The Bank’s ability to make dividend payments to the Company is subject to state and federal regulatory restrictions.

The Company’s ability to pay dividends to its shareholders is affected by both general corporate law considerations and the policies of the Federal Reserve applicable to bank holding companies. As a general matter, the Federal Reserve has indicated that the board of directors of a bank holding company should eliminate, defer or significantly reduce dividends to shareholders if: (i) the bank holding company’s net income available to shareholders for the past four quarters, net of dividends previously paid during that period, is not sufficient to fully fund the dividends or (ii) the prospective rate of earnings retention is inconsistent with the bank holding company’s capital needs and overall current and prospective financial condition. If the Company fails to adhere to these policies, the Federal Reserve could find that the Company is operating in an unsafe and unsound manner. See “Supervision and Regulation-Regulatory Capital Requirements” below.

Subject to exceptions for well-capitalized and well-managed holding companies, Federal Reserve regulations also require approval of holding company purchases and redemptions of its securities if the gross consideration paid exceeds 10% of consolidated net worth for any 12-month period. In addition, Federal Reserve policy requires that bank holding companies consult with and inform the Federal Reserve in advance of (i) redeeming or repurchasing capital instruments when experiencing financial weakness and (ii) redeeming or repurchasing common stock and perpetual preferred stock if the result will be a net reduction in the amount of such capital instruments outstanding for the quarter in which the reduction occurs.

As a California corporation, the Company is subject to the limitations of California law, which allows a corporation to distribute cash or property to shareholders, including a dividend or repurchase or redemption of shares, if the corporation meets either a “retained earnings” test or a “balance sheet” test. Under the “retained earnings” test, the Company may make a distribution from retained earnings to the extent that its retained earnings exceed the sum of (i) the amount of the distribution plus (ii) the amount, if any, of dividends in arrears on shares with preferential dividend rights. The Company may also make a distribution under the “balance sheet” test if, immediately after the distribution, the value of its assets equals or exceeds the sum of (i) its total liabilities plus (ii) the liquidation preference of any shares which have a preference upon dissolution over the

10

Table of Contents

rights of shareholders receiving the distribution. Indebtedness is not considered a liability if the terms of such indebtedness provide that payment of principal and interest thereon are to be made only if, and to the extent that, a distribution to shareholders could be made under the balance sheet test. In addition, the Company may not make distributions if it is, or as a result of the distribution would be, likely to be unable to meet its liabilities (except those whose payment is otherwise adequately provided for) as they mature.

Dividends payable by the Bank to the Company are restricted under California law to the lesser of the Bank’s retained earnings, or the Bank’s net income for the latest three (3) fiscal years, less dividends paid during that period, or, with the approval of the DFPI, to the greater of the retained earnings of the Bank, the net income of the Bank for its last fiscal year or the net income of the Bank for its current fiscal year.

In addition to the regulations concerning minimum uniform capital adequacy requirements described below, the FDIC has established guidelines regarding the maintenance of an adequate allowance for credit losses. Therefore, the future payment of cash dividends by the Bank will generally depend, in addition to regulatory constraints, upon the Bank’s earnings during any fiscal period, the assessment by the Board of Directors of the capital requirements of the Bank and other factors, including the maintenance of an adequate allowance for credit losses.

REGULATORY CAPITAL REQUIREMENTS

The Company and the Bank are subject to various regulatory capital requirements administered by federal banking agencies, which are required to take prompt corrective action with respect to any depository institution that does not meet minimum capital requirements. Our capital ratios exceed the required minimums for capital adequacy, and the Bank meets the definition for a “well capitalized” institution.

Capital rules (the “Rules”) adopted by Federal banking regulators (including the Federal Reserve and the FDIC) generally recognize three components, or tiers, of capital: common equity Tier 1 capital, additional Tier 1 capital and Tier 2 capital. Common equity Tier 1 capital generally consists of retained earnings and common stock instruments (subject to certain adjustments), as well as accumulated other comprehensive income (“AOCI”) except to the extent that the Company and the Bank exercise a one-time irrevocable option to exclude certain components of AOCI. Both the Company and the Bank made this election in 2015. Additional Tier 1 capital generally includes non-cumulative preferred stock and related surplus subject to certain adjustments and limitations. Tier 2 capital generally includes certain capital instruments (such as subordinated debt) and portions of the amounts of the allowance for credit losses, subject to certain requirements and deductions. The term “Tier 1 capital” means common equity Tier 1 capital plus additional Tier 1 capital, and the term “total capital” means Tier 1 capital plus Tier 2 capital.

The Rules generally measure an institution’s capital using four capital measures or ratios. The common equity Tier 1 capital ratio is the ratio of the institution’s common equity Tier 1 capital to its total risk-weighted assets. The Tier 1 risk-based capital ratio is the ratio of the institution’s Tier 1 capital to its total risk-weighted assets. The total risk-based capital ratio is the ratio of the institution's total capital to its total risk-weighted assets. The Tier 1 leverage ratio is the ratio of the institution’s Tier 1 capital to its average total consolidated assets. To determine risk-weighted assets, assets of an institution are generally placed into a risk category as prescribed by the regulations and given a percentage weight based on the relative risk of that category. An asset’s risk-weighted value will generally be its percentage weight multiplied by the asset’s value as determined under generally accepted accounting principles. In addition, certain off-balance-sheet items are converted to balance-sheet credit equivalent amounts, and each amount is then assigned to one of the risk categories. An institution’s federal regulator may require the institution to hold more capital than would otherwise be required under the Rules if the regulator determines that the institution’s capital requirements under the Rules are not commensurate with the institution's credit, market, operational or other risks.

To be adequately capitalized, both the Company and the Bank are required to have a common equity Tier 1 capital ratio of at least 4.5% or more, a Tier 1 leverage ratio of 4.0% or more, a Tier 1 risk-based ratio of 6.0% or more and a total risk-based ratio of 8.0% or more. In addition to the preceding requirements, both the Company and the Bank are required to maintain a “conservation buffer,” consisting of common equity Tier 1 capital, which is at least 2.5% above each of the required minimum levels. An institution that does not meet the conservation buffer will be subject to restrictions on certain activities including payment of dividends, stock repurchases and discretionary bonuses to executive officers.

The Rules set forth the manner in which certain capital elements are determined, including but not limited to, requiring certain deductions related to mortgage servicing rights and deferred tax assets. The Rules permit holding companies with less than $15 billion in total assets as of December 31, 2009 (which includes the Company) to continue to include trust preferred securities issued prior to May 19, 2010 in Tier 1 capital, generally up to 25% of other Tier 1 capital.

11

Table of Contents

The Rules also prescribe the methods for calculating certain risk-based assets and risk-based ratios. Higher or more sensitive risk weights are assigned to various categories of assets, among which are credit facilities that finance the acquisition, development or construction of real property, certain exposures or credits that are 90 days past due or are nonaccrual, foreign exposures, certain corporate exposures, securitization exposures, equity exposures and in certain cases mortgage servicing rights and deferred tax assets.

BANK SECRECY ACT / ANTI-MONEY LAUNDERING REGULATIONS

We are subject to federal laws aiming to counter money laundering and terrorist financing, as well as transactions with persons, companies and foreign governments sanctioned by the United States. These laws include, among others, the USA PATRIOT Act, the Bank Secrecy Act (“BSA”), and the Anti-Money Laundering Act (“AMLA”). Financial institutions are subject to prohibitions against specified financial transactions and account relationships as well as enhanced due diligence and identifying customers when establishing new relationships and standards in their dealings with high risk customers, foreign financial institutions, and foreign individuals and entities. The BSA requires financial institutions to develop policies, procedures and practices to prevent and deter money laundering, and mandates that every bank have a written program approved by its board of directors that is designed to assure and monitor compliance. As part of the BSA compliance program, banks are required to adopt a customer identification program. The Bank has extensive controls in place to comply with these requirements.

In 2021, U.S. bank secrecy and anti-money laundering laws underwent a comprehensive reform and modernization, part of which was the adoption of AMLA. Among other things, it codified a risk-based approach to anti-money laundering compliance for financial institutions. AMLA requires financial institutions to develop standards for evaluating technology and internal processes for BSA compliance, expands enforcement-related and investigation-related authority, institutes BSA whistleblower initiatives and protections, and increases sanctions for certain BSA violations. AMLA expanded duties of the Financial Crimes Enforcement Network (“FinCEN”), which issued final regulations implementing the amendments with respect to beneficial ownership requirements effective January 1, 2024; however, these beneficial ownership rules were amended by an interim final rule published on March 26, 2025 that requires only entities previously defined as “foreign reporting companies” to report beneficial ownership information and provides that entities defined as “domestic reporting companies are exempt from the reporting requirements and do not have to report beneficial ownership information to FinCEN. We are monitoring developments concerning the implementation of the AMLA. The Bank has established policies and procedures that it believes comply with these requirements.

The Office of Foreign Assets Control (“OFAC”) is a financial intelligence and enforcement agency of the U.S. Treasury Department, which administers and enforces economic and trade sanctions based on U.S. foreign policy and national security goals against targeted foreign countries and regimes. The OFAC regulations require financial institutions to block or reject payments, transfers, withdrawals or other dealings with respect to accounts and assets of designated targets and countries that are identified as being a threat to national security. This may also include dealings with accounts and assets of nationals of a sanctioned country and with other specially designated individuals (such as designated narcotics traffickers). Financial institutions are also required to report all blocked transactions to OFAC within 10 business days of the occurrence. The Bank has extensive controls in place to comply with these requirements.

PRIVACY AND DATA SECURITY

We are subject to several federal, state, and local laws and regulations relating to consumer privacy and data protection. The federal Gramm-Leach Bliley Act of 1999 (“GLBA”) imposes requirements on financial institutions with respect to consumer privacy and disclosure of non-public personal information. The GLBA generally prohibits disclosure of consumer information to most nonaffiliated third parties unless the consumer has been given the opportunity to object and has not objected to such disclosure.

The California Financial Information Privacy Act (“CFIPA”) also requires a financial institution to provide specific information to a consumer related to the sharing of that consumer’s nonpublic personal information. The CFIPA allows a consumer to direct the financial institution not to share his or her nonpublic personal information with affiliated or nonaffiliated companies with which a financial institution has contracted to provide financial products and services, and requires that permission from each such consumer be acquired by a financial institution prior to sharing such information. Financial institutions are required to implement policies and procedures regarding the disclosure of nonpublic personal information about consumers to non-affiliated third parties. In general, financial institutions must provide explanations to consumers on policies and procedures regarding the disclosure of such nonpublic personal information and, except as otherwise required by law, prohibit disclosing such information. In addition, the California Consumer Privacy Act (“CCPA”), which became effective in 2020, gives consumers more control over the personal information that businesses collect about them. The CCPA includes new privacy

12

Table of Contents

rights including the right to know about the personal information a business collects about them and how it is used and shared; the right to delete personal information collected from them (with some exceptions); the right to opt-out of the sale of their personal information; and the right to non-discrimination for exercising their CCPA rights. The CCPA was further expanded by the California Privacy Rights Act of 2020, which became effective on January 1, 2023, and provided additional privacy rights to California residents and created a new agency, the California Privacy Protection Agency, tasked with implementing and enforcement of privacy laws in California. Businesses (including financial institutions) are required to give consumers certain notices explaining their privacy rights. The Bank has implemented privacy policies addressing these restrictions which are distributed regularly to all existing and new customers of the Bank.

CYBERSECURITY

The federal bank regulatory agencies adopted guidelines regarding cybersecurity intended to enhance cyber risk management among financial institutions. Financial institutions are expected to comply with such guidance and standards and develop appropriate security controls and risk management processes. If we fail to observe such regulatory guidance or standards, we could be subject to various regulatory sanctions, including financial penalties.

The federal banking agencies recently established new notification requirements for banking organizations. They are required to notify their primary banking regulator within 36 hours of determining that a “computer-security incident” rising to the level of a “notification incident,” has occurred. Among other types of computer-security incidents, a “notification incident” includes one that has materially disrupted or degraded the banking organization’s ability to carry out banking operations to a material portion of its customer base in the ordinary course of business.The Bank has adopted a customer information security program to comply with such requirements.

In addition to guidance and standards implemented by banking regulators, in July 2023, the SEC adopted final rules requiring disclosure of material cybersecurity incidents, as well as cybersecurity risk management, strategy and governance. Under this rule, banking organizations that are SEC registrants must generally disclose information about a material cybersecurity incident, including the nature, scope, timing, and impact, within four business days of the incident. The disclosure requirements went into effect in December of 2023.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states, including California where we conduct substantially all our banking business, have adopted laws and/ or regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many such states (including California) have also recently implemented or modified their data breach notification and data privacy requirements. We continue to monitor relevant legislative and regulatory developments in California where nearly all our customers are located and evaluate their impact on the Bank.

In the ordinary course of business, we rely on electronic communications and information systems to conduct our operations and to store sensitive data. We employ a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity, as well as to report on any suspected advanced persistent threats. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking and other technology based products and services by us and our customers.

ENVIRONMENTAL, SOCIAL, AND GOVERNANCE DEVELOPMENTS

In the past, bank regulatory agencies and the SEC had shown increased interest in environmental, social and governance matters (“ESG”) and expressed an intent to increase related regulatory oversight of companies’ efforts to address how ESG issues may affect their businesses. In 2022, multiple federal regulatory agencies formalized their intent by issuing proposed policy statements and rules, and by establishing a pilot climate scenario analysis exercise for large banks; these Principles for Climate-Related Financial Risk Managements were finalized in late 2023 (“Principles”). On November 18, 2025, the federal bank regulatory agencies published a rescission of the Principles, effective immediately. The SEC had likewise adopted its own climate-disclosure rules that have been stayed pending the resolution of related litigation. Aside from any regulatory requirements we believe that continued focus on environmental and social issues is consistent with our community banking model. We are continually seeking ways to improve our stewardship of the environment through recycling programs, resource conservation, empowered employees, construction evaluation, and more.

13

Table of Contents

COMMUNITY REINVESTMENT ACT

The Community Reinvestment Act (“CRA”) is intended to encourage insured depository institutions, while operating safely and soundly, to help meet the credit needs of their communities. The CRA specifically directs the federal bank regulatory agencies, in examining insured depository institutions, to assess their record of helping to meet the credit needs of their entire community, including low- and moderate-income neighborhoods, consistent with safe and sound banking practices. The CRA further requires the agencies to take a financial institution’s record of meeting its community credit needs into account when evaluating applications for, among other things, domestic branches, consummating mergers or acquisitions or holding company formations. The federal banking agencies have adopted regulations which measure a bank’s compliance with its CRA obligations on a performance based evaluation system. This system bases CRA ratings on an institution’s actual lending service and investment performance rather than the extent to which the institution conducts needs assessments, documents community outreach or complies with other procedural requirements. The ratings range from “outstanding” to a low of “substantial noncompliance.” In their most recent CRA performance examinations, the Bank’s predecessor institutions (before their merger in 2024), Central Valley Community Bank and Community West Bank, National Association, each received an “Outstanding” rating from the FDIC on January 19, 2022, and on February 2, 2023, respectively.

In October 2023, the federal banking agencies issued a final rule to modernize the CRA regulatory framework (the “CRA Final Rule”). The CRA Final Rule took effect on April 1, 2024. It adapted the CRA framework to changes in the banking industry, including an expanded role of mobile and online banking, tailored performance standards, data collection and reporting requirements, and provided greater clarity and consistency in the application of CRA regulations. However, effective April 1, 2024, a Federal district court judge in the Northern District of Texas enjoined the federal banking agencies from enforcing the CRA Final Rule pending resolution of the underlying lawsuit. In light of this pending litigation, the federal bank regulatory agencies jointly issued a notice of proposed rulemaking to restore certainty in the CRA framework for stakeholders and limit regulatory burden on banks by replacing the CRA Final Rule with the existing regulations in effect on March 29, 2024, with certain conforming and technical amendments. We are monitoring this notice of proposed rulemaking and litigation for key developments.

CONSUMER PROTECTION LAWS AND REGULATIONS

The bank regulatory agencies are focusing greater attention on compliance with consumer protection laws and their implementing regulations. Examination and enforcement have become more intense in nature, and insured institutions have been advised to monitor carefully compliance with such laws and regulations. The Bank is subject to many federal consumer protection statutes and regulations, some of which are discussed below.

The Truth in Lending Act (TILA) is designed to ensure that credit terms are disclosed in a meaningful way so that consumers may compare credit terms more readily and knowledgeably.As a result of TILA, all creditors must use the same credit terminology to express rates and payments, including the annual percentage rate, the finance charge, the amount financed, the total of payments and the payment schedule, among other things.

The Equal Credit Opportunity Act (ECOA) generally prohibits discrimination in any credit transaction, whether for consumer or business purposes, on the basis of race, color, religion, national origin, sex, marital status, age, receipt of income from public assistance programs, or good faith exercise of any rights under the Consumer Credit Protection Act.

The Fair Housing Act (FHA) regulates many practices, including making it unlawful for any lender to discriminate in its housing-related lending activities against any person because of race, color, religion, national origin, sex, handicap or familial status. A number of lending practices have been found by the courts to be, or may be considered, illegal under the FHA, including some that are not specifically mentioned in the FHA itself.

The Home Mortgage Disclosure Act (HMDA) grew out of public concern over credit shortages in certain urban neighborhoods. It seeks to provide public information showing whether financial institutions are serving the housing credit needs of the neighborhoods and communities in which they are located. HMDA also includes a “fair lending” aspect that requires the collection and disclosure of data about applicant and borrower characteristics as a way of identifying possible discriminatory lending patterns and enforcing anti-discrimination statutes.

Finally, the Real Estate Settlement Procedures Act (RESPA) requires lenders to provide borrowers with disclosures regarding the nature and cost of real estate settlements. RESPA also prohibits certain abusive practices, such as kickbacks, and places limitations on the amount of escrow accounts. Penalties under the above laws may include fines, reimbursements and other civil money penalties.

14

Table of Contents

Due to heightened regulatory concern related to compliance with the consumer protection laws, the Bank may incur additional compliance costs or be required to expend additional funds for investments in its local community.

CONSUMER FINANCIAL PROTECTION BUREAU

The CFPB is an independent federal agency with broad rulemaking, supervisory and enforcement powers under various federal consumer financial protection laws. The CFPB is authorized to engage in consumer financial education, track consumer complaints, request data and promote the availability of financial services to underserved consumers and communities. The CFPB has primary examination and enforcement authority over financial institutions with total consolidated assets of $10 billion or more. Nonetheless, the CFPB regulations and guidance apply to all financial institutions, including the Bank. The FDIC has primary responsibility for examination of the Bank and enforcement with respect to federal consumer protection laws so long as the Bank has total consolidated assets of less than $10 billion, and state authorities are responsible for monitoring our compliance with all state consumer laws. The CFPB also has the authority to require reports from financial institutions with less than $10 billion in assets, such as the Bank, to support the CFPB in implementing federal consumer protection laws, supporting examination activities, and assessing and detecting risks to consumers and financial markets.

The consumer protection provisions of Dodd-Frank and the examination, supervision and enforcement of those laws and implementing regulations by the CFPB have created a more intense and complex environment for consumer finance regulation. The CFPB has significant authority to implement and enforce federal consumer finance laws, as well as the authority to identify and prohibit unfair, deceptive or abusive acts and practices (UDAAP). Prevention of such acts and practices is a continuing focus of the CFPB, and of banking regulators more broadly. The ultimate impact of this heightened scrutiny is uncertain but could result in changes to pricing, practices, products and procedures. It could also result in increased costs related to regulatory oversight, supervision and examination, additional remediation efforts and possible penalties. In addition, Dodd-Frank provides the CFPB with broad supervisory, examination and enforcement authority over various consumer financial products and services, including the ability to require reimbursements and other payments to customers for alleged legal violations and to impose significant penalties, as well as injunctive relief that prohibits lenders from engaging in allegedly unlawful practices. The CFPB also has the authority to obtain cease and desist orders providing for affirmative relief or monetary penalties.

We are also subject to certain state consumer protection laws, such as, for example, debt collection practices, and the prohibition of unfair, deceptive, or abusive acts or practices. State regulation of financial products and potential enforcement actions could also impact us. In California, the DFPI was given broad jurisdiction and sweeping new authorities that closely resemble those of the CFPB. The DFPI stated that it intends to exercise its powers to protect consumers from unlawful, unfair, deceptive, and abusive practices in connection with consumer financial products or services. The DFPI also as a matter of state law can now enforce the Dodd-Frank Act’s UDAAP provisions against anyone offering or providing consumer financial products in the state of California. Going forward, financial institutions in California are likely to be faced with a powerful state financial services regulatory regime with expansive enforcement authority, and it is unclear how the DFPI and its enforcement activities will affect the Bank in the future.

DEPOSIT INSURANCE

The FDIC insures the Bank’s customer deposits through the Deposit Insurance Fund (the “DIF”) up to prescribed limits for each depositor. The maximum deposit insurance amount generally is $250,000 for each account ownership category at each depository institution. The amount of FDIC assessments paid by each DIF member institution is based on its relative risk of default as measured by regulatory capital ratios and other supervisory factors.

The Bank is subject to deposit insurance assessments to maintain the DIF. Dodd-Frank increased the minimum designated reserve ratio of the DIF to 1.35% of the estimated amount of total insured deposits as of September 30, 2020, and eliminated the requirement that the FDIC pay dividends to depository institutions when the reserve ratio exceeds certain thresholds. At least semi-annually, the FDIC updates its loss and income projections for the DIF and, if needed, may increase or decrease the assessment rates, following notice and comment on proposed rulemaking. In October 2022, the FDIC increased initial base deposit insurance assessment rate schedules uniformly by 2 basis points, beginning in the first quarterly assessment period of 2023. On November 28, 2025, the FDIC published a notice confirming that the designated reserve ratio of the DIF remains at 2% for 2026.

We are generally unable to control the amount of premiums that we are required to pay for FDIC insurance. If there are additional bank or financial institution failures or if the FDIC otherwise determines, we may be required to pay even higher FDIC premiums than the recently increased levels. These announced increases and any future increases in FDIC insurance premiums may have a material and adverse effect on our earnings and could have a material adverse effect on the value of or market for our common stock.

15

Table of Contents

The FDIC may terminate a depository institution’s deposit insurance upon a finding that the institution’s financial condition is unsafe or unsound or that the institution has engaged in unsafe or unsound practices that pose a risk to the DIF or that may prejudice the interest of the bank’s depositors. The termination of deposit insurance for a bank would also result in the revocation of the bank’s charter by the DFPI.

INCENTIVE COMPENSATION

Dodd-Frank requires the federal banking agencies and the SEC to establish joint regulations or guidelines prohibiting incentive-based payment arrangements at regulated entities with at least $1 billion in total consolidated assets that encourage inappropriate risks by providing an executive officer, employee, director, or principal shareholder with excessive compensation, fees, or benefits that could lead to material financial loss to the entity. In August 2022, the SEC finalized the pay versus performance regulations, which require disclosure of information that shows the relationship between executive compensation actually paid and the company’s financial performance in annual proxy statements. The pay versus performance regulations are effective for fiscal years ending on or after December 16, 2022. Smaller reporting companies are subject to scaled reporting mechanism, and certain companies are exempt from the regulations. In October 2022, the SEC adopted final rules on “clawback” of executive compensation, which direct the stock exchanges to establish listing standards requiring listed companies to develop and implement a policy providing for the recovery of erroneously awarded incentive-based compensation received by current or former executive officers. Under the new rules, companies will have to recover compensation in excess of what the executive officer should have received in the event the companies’ financials are restated due to material noncompliance with securities laws. The rules apply to compensation paid in the three years leading up to restatement.

The banking regulations on executive compensation may continue to evolve in the near future after the FDIC and the OCC, among other federal agencies, re-proposed a rulemaking with request for comment concerning Incentive-Based Compensation Arrangements. Importantly, the Federal Reserve and the SEC did not join in this proposed rule as required by the Dodd-Frank Act. We continue to assess the impact of the incentive compensation regulations on the Company, but do not anticipate any material impact to its operations at this time.

OTHER PENDING AND PROPOSED LEGISLATION

Other legislative and regulatory initiatives which could affect the Company and the Bank and the banking industry in general may be proposed or introduced before the United States Congress, the California legislature and other governmental bodies in the future. Such proposals, if enacted, may further alter the structure, regulation and competitive relationship among financial institutions, and may subject the Company or the Bank to increased regulation, disclosure and reporting requirements. In addition, the various banking regulatory agencies often adopt new rules and regulations to implement and enforce existing legislation. It cannot be predicted whether, or in what form, any such legislation or regulations may be enacted or the extent to which the business of the Company or the Bank would be affected thereby.

Specifically, although the Dodd-Frank reforms primarily targeted systemically important financial service providers, its influence has and is expected to continue to filter down in varying degrees to smaller institutions over time. In addition, some of the recent financial laws and regulations relating to regulatory and compliance burden on financial institutions that were adopted during the last presidential administration could be rolled back in the near future. We will continue to evaluate the effect of other pending and proposed legislation. The impact of any future legislative or regulatory changes cannot be predicted, but they could affect the Company and the Bank, and no current assurance may be given that they will not have a negative impact on the results of operations and financial condition of the Company and the Bank.

ADDITIONAL INFORMATION

Under the Securities Exchange Act of 1934, as amended (the “Exchange Act”) we are required to file annual, quarterly and current reports, proxy statements and other information with the Securities and Exchange Commission (“SEC”). The SEC maintains a website at http://www.sec.gov that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. We file electronically with the SEC.

We make available free of charge on or through our website, www.communitywestbank.com, our Annual Report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and all amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act as soon as reasonably practicable after such material is electronically filed with or furnished to the SEC. Information contained on the Company’s website is not incorporated by reference into this Annual Report on Form 10-K and is not part of this or any other report. In addition, copies of the annual report on Form 10-K for the year

16

Table of Contents

ended December 31, 2025 may be obtained without charge upon written request to Shannon R. Livingston, Chief Financial Officer, at the Company’s administrative offices, 7100 N. Financial Dr., Suite 101, Fresno, CA 93720.

General inquiries about Community West Bancshares or Community West Bank should be directed to Amanda Kelley, Assistant Corporate Secretary at 1-800-298-1775.

ITEM 1A -RISK FACTORS

An investment in our common stock is subject to risks inherent to our business. The material risks and uncertainties that management believes may affect our business are described below. Before making an investment decision, you should carefully consider the risks and uncertainties described below together with all of the other information included or incorporated by reference in this Annual Report. The risks and uncertainties described below are not the only ones facing our business. Additional risks and uncertainties that management is not aware of or focused on or that management currently deems immaterial may also impair our business operations. This Annual Report is qualified in its entirety by these risk factors.

General Economic, Market, Investment Risks

General economic conditions could adversely affect our business, financial condition and results of operations.

Our financial performance is highly dependent upon the business environment in the markets in which we operate and in the United States as a whole. Unfavorable or uncertain economic and market conditions can be caused by declines in economic growth, business activity or investor or business confidence; limitations on the availability or increases in the cost of credit and capital; increases in inflation or interest rates; high unemployment; natural disasters; terrorist attacks; disruptions in global or national supply chains; or a combination of these or other factors.

The Bank conducts banking operation principally in Central California. Central California is largely dependent on agriculture. The agricultural economy in Central California is therefore important to our financial performance, results of operations and cash flows. We are also dependent in a large part upon the business activity, population growth, income levels and real estate activity in this market area. A downturn in agriculture and the agricultural related businesses could have a material adverse effect on our business, results of operations and financial condition. The agricultural industry has been affected by declines in prices and changes in yields of various crops and other agricultural commodities. Weaker prices could reduce the cash flows generated by farms and the value of agricultural land in our local markets and thereby increase the risk of default by our borrowers or reduce the foreclosure value of agricultural land and equipment that serve as collateral of our loans. Moreover, weaker prices could threaten farming operations in the Central Valley, reducing market demand for agricultural lending. In particular, farm income has seen recent declines, and in line with the downturn in farm income, farmland prices are coming under pressure.

An economic recession or a downturn in various markets could have one or more of the following adverse effects on our business:

•a decrease in the demand for our loans and other products we offer;

•a decrease in our deposit balances due to overall reductions in the number or value of client accounts;

•a decrease in the value of collateral securing our loans;

•an increase in the level of nonperforming and classified loans;

•an increase in provisions for loan losses and loan charge-offs;

•a decrease in net interest income derived from our lending and deposit gathering activities;

•a decrease in our ability to access the capital markets; and

•an increase in our operating expenses associated with attending to the effects of certain circumstances listed above.

Inflationary pressures and rising prices may affect our results of operations and financial condition.

Inflation began to rise sharply at the end of 2021 and remained at an elevated level through 2023 before decreasing in 2025. Small to medium-sized businesses may be impacted more during periods of high inflation as they are not able to leverage economics of scale to mitigate cost pressures compared to larger businesses. Consequently, the ability of our business customers to repay their loans may deteriorate, and in some cases this deterioration may occur quickly, which would adversely impact our results of operations and financial condition. Furthermore, a prolonged period of inflation could cause wages and other costs to us to increase, which could adversely affect our results of operations and financial condition.

Changes to trade policies and tariffs can have an adverse impact on our business and our customers.

17

Table of Contents

Changes in trade policies, including the imposition of tariffs or the escalation of a trade war, could negatively impact the economic conditions in the markets we serve. Our customers, particularly local businesses engaged in manufacturing and retail, may face higher costs for imported goods and materials, reduced export demand and supply chain disruptions due to increased tariffs. These challenges could lead to lower revenues, reduced profitability and potential layoffs, all of which may impair our customers’ ability to meet their financial obligations. Furthermore, prolonged trade tensions and economic uncertainty could lead to market volatility, declining asset values and weakened consumer confidence. If our customers experience financial stress, we could see loan delinquencies and credit losses, negatively affecting our asset quality and overall financial performance. Additionally, any decline in local economic activity could reduce loan demand and deposit growth, which are critical to our long-term success. While we actively monitor economic and policy developments, we cannot predict the outcome of trade negotiations or the full impact of tariffs and trade restrictions on our business, customers, and the broader economy. Any adverse effects from tariffs or a trade war could materially and negatively impact our financial condition, results of operations, and future growth prospects.

Monetary policies and regulations of the Federal Reserve could adversely affect our business, financial condition and results of operations.

In addition to being affected by general economic conditions, our earnings and growth are affected by the policies of the Federal Reserve. An important function of the Federal Reserve is to regulate the money supply and credit conditions. Among the instruments used by the Federal Reserve to implement these objectives are open market operations in U.S. government securities, adjustments of the discount rate and changes in reserve requirements against bank deposits. These instruments are used in varying combinations to influence overall economic growth and the distribution of credit, bank loans, investments and deposits. Their use also affects interest rates charged on loans or paid on deposits. The monetary policies and regulations of the Federal Reserve have had a significant effect on the operating results of commercial banks in the past and are expected to continue to do so in the future. The effects of such policies upon our business, financial condition and results of operations cannot be predicted.

Our stock price may be negatively impacted by unrelated bank failures and negative depositor confidence in depository institutions. Further, if we were unable to adequately manage our liquidity, deposits, capital levels and interest rate risk, which have come under greater scrutiny in light of recent bank failures, we may experience a material adverse effect on our financial condition and results of operations.

On March 9, 2023, Silvergate Bank, La Jolla, California, announced its decision to voluntarily liquidate its assets and wind down operations. On March 10, 2023, Silicon Valley Bank, Santa Clara, California, was closed by the DFPI on March 12, 2023, Signature Bank, New York, New York, was closed by the New York State Department of Financial Services and on May 1, 2023, First Republic Bank, San Francisco, California, was closed by the DFPI, and in each case the FDIC was appointed receiver for the failed institution. These banks had elevated levels of uninsured deposits, which may be less likely to remain at the bank over time and less stable as a source of funding than insured deposits. These failures led to volatility and declines in the market for bank stocks and questions about depositor confidence in depository institutions.

These events have led to a greater focus by institutions, investors and regulators on the on-balance sheet liquidity of and funding sources for financial institutions, the composition of their deposits, including the amount of uninsured deposits, the amount of accumulated other comprehensive loss, capital levels and interest rate risk management.

If we are unable to adequately manage our liquidity, deposits, capital levels and interest rate risk, we may experience a material adverse effect on our financial condition and results of operations. We must maintain sufficient funds to respond to the needs of depositors and borrowers. Deposits have traditionally been our primary source of funds for use in lending and investment activities. We also receive funds from loan repayments, investment maturities and income on other interest-earning assets. While we emphasize the generation of low-cost core deposits as a source of funding, there is strong competition for such deposits in our market area. Additionally, deposit balances can decrease if customers perceive alternative investments as providing a better risk/return tradeoff. Accordingly, as a part of our liquidity management, we must use a number of funding sources in addition to deposits and repayments and maturities of loans and investments. We also rely on alternative funding sources including unsecured borrowing lines with correspondent banks, secured borrowing lines with the Federal Home Loan Bank of San Francisco and the Federal Reserve Bank of San Francisco, and public time certificates of deposits. Our ability to access these sources could be impaired by deterioration in our financial condition as well as factors that are not specific to us, such as a disruption in the financial markets or negative views and expectations for the financial services industry or serious dislocation in the general credit markets. Adverse operating results or changes in industry conditions could lead to difficulty or an inability to access these additional funding sources.

18

Table of Contents

Any decline in available funding could adversely impact our ability to originate loans, invest in securities, pay our expenses, or fulfill obligations such as repaying our borrowings or meeting deposit withdrawal demands, any of which could have a material adverse impact on our liquidity, business, financial condition and results of operations.

A lack of liquidity could also attract increased regulatory scrutiny and potential restraints imposed on us by regulators. Depending on the capitalization status and regulatory treatment of depository institutions, including whether an institution is subject to a supervisory prompt corrective action directive, certain additional regulatory restrictions and prohibitions may apply, including restrictions on growth, restrictions on interest rates paid on deposits, restrictions or prohibitions on payment of dividends and restrictions on the acceptance of brokered deposits.

Our financial flexibility would be severely constrained if we were unable to maintain our access to funding or if adequate financing were not available at acceptable interest rates. Further, if we were required to rely more heavily on more expensive funding sources to support liquidity, our revenues may not increase proportionately to cover our increased costs. In this case, our operating margins and profitability would be adversely affected. If alternative funding sources were no longer available to us, we may need to sell a portion of our investment or loan portfolio to raise funds, which, depending upon market conditions, could result in us realizing a loss on the sale of such assets. As of December 31, 2025, we had a net unrealized loss of $39,881,000 on our available for-sale investment securities portfolio. Our investment securities totaled $763,324,000, or 20.7% of total assets, at December 31, 2025. The details of this portfolio are included in Note 3 to the consolidated financial statements.

Interest rate shifts may reduce net interest income and otherwise negatively impact our financial condition and results of operations.

The majority of our banking assets are monetary in nature and subject to risk from changes in interest rates. Like most banks, our earnings and cash flows depend to a great extent upon the level of our net interest income, or the difference between the interest income we earn on loans, investments and other interest-earning assets, and the interest we pay on interest-bearing liabilities, such as deposits and borrowings. Changes in interest rates can increase or decrease our net interest income, because different types of assets and liabilities may react differently, and at different times, to market interest rate changes.

When interest-bearing liabilities mature or reprice more quickly, or to a greater degree than interest-earning assets in a period, an increase in interest rates could reduce net interest income. Similarly, when interest-earning assets mature or reprice more quickly, or to a greater degree than interest-bearing liabilities, falling interest rates could reduce net interest income. An increase in interest rates may, among other things, reduce the demand for loans and our ability to originate loans and decrease loan repayment rates. Conversely, a decrease in the general level of interest rates may affect us through, among other things, increased prepayments on our loan portfolio and increased competition for deposits. Accordingly, changes in the level of market interest rates affect our net yield on interest-earning assets, loan origination volume and our overall results of operations. Although our asset-liability management strategy is designed to control and mitigate exposure to the risks related to changes in market interest rates, those rates are affected by many factors outside of our control, including governmental monetary policies, inflation, deflation, recession, changes in unemployment, the money supply, international disorder and instability in domestic and foreign financial markets.

The development and use of Artificial Intelligence (AI) presents risks and challenges that may adversely impact our business.

We or our third-party vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services, or products. The development and use of AI presents a number of risks and challenges to our business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, both in the U.S. and internationally, and includes regulatory schemes targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment, and other laws applicable to the use of AI. These evolving laws and regulations could require changes in our implementation of AI technology and increase our compliance costs and the risk of non-compliance. AI models, particularly generative AI models, may produce output or take action that is incorrect, that reflects biases included in the data on which they are trained, that results in the release of private, confidential, or proprietary information, that infringes on the intellectual property rights of others, or that is otherwise harmful. In addition, the complexity of many AI models makes it difficult to understand why they are generating particular outputs. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding and monitoring the capabilities of the AI models, reducing erroneous output, eliminating bias, and complying with regulations that require documentation or explanation of the basis on which decisions are made. Further, we may rely on AI models developed by third parties, and, to that extent, would be dependent in part on the manner in which those third parties develop and train their models, including risks arising from the inclusion of any unauthorized material in the training data for their models and the effectiveness of the steps these third parties have taken to limit the risks associated with the output of their models, matters over which we may have limited visibility. Any

19

Table of Contents

of these risks could expose us to liability or adverse legal or regulatory consequences and harm our reputation and the public perception of our business or the effectiveness of our security measures.

Risks Related to our Lending Activities

Agribusiness lending presents unique credit risks.

As of December 31, 2025, approximately $34.2 million, or 1.3% of our total gross loan portfolio was comprised of agribusiness loans. Repayment of agribusiness loans depends primarily on the successful planting and harvest of crops and marketing the harvested commodity or raising and feeding of livestock (including milk production). Collateral securing these loans may be illiquid. In addition, the limited purpose of some agricultural-related collateral affects credit risk because such collateral may have limited or no other uses to support values when loan repayment problems emerge. Many external factors can impact our agricultural borrowers’ ability to repay their loans, including adverse weather conditions, water issues, commodity price volatility, diseases, land values, production costs, changing government regulations and subsidy programs, changing tax treatment, technological changes, labor market shortages/increased wages, and changes in consumers’ preferences, over which our borrowers may have no control. These factors, as well as recent volatility in certain commodity prices, could adversely impact the ability of those to whom we have made agribusiness loans to perform under the terms of their borrowing arrangements with us, which in turn could result in credit losses and materially and adversely affect our business, financial condition and results of operations.

Because a significant portion of our loan portfolio is comprised of real estate loans, negative changes in the economy affecting real estate values and liquidity could impair the value of collateral securing our real estate loans and result in loan and other losses.

At December 31, 2025, $1.93 billion, or 76.1% of our total loan and lease portfolio, consisted of real estate related loans. The real estate securing our loan portfolio is concentrated in California. The market value of real estate can fluctuate significantly in a short period of time as a result of market conditions in the geographic area in which the real estate is located. Real estate values and real estate markets are generally affected by changes in national, regional or local economic conditions, the rate of unemployment, fluctuations in interest rates and the availability of loans to potential purchasers, changes in tax laws and other governmental statutes, regulations and policies and acts of nature, such as earthquakes and natural disasters. Adverse changes affecting real estate values and the liquidity of real estate in one or more of our markets could increase the credit risk associated with our loan portfolio, significantly impair the value of property pledged as collateral on loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses. Such declines and losses would have a material adverse impact on our business, financial condition and results of operations.

Increased scrutiny by regulators of commercial real estate concentrations could restrict our activities and impose financial requirements or limits on the conduct of our business.

Banking regulators give commercial real estate lending a high level of scrutiny, and may require banks with higher levels of commercial real estate loans to implement improved underwriting, internal controls, risk management policies and portfolio stress testing, as well as possibly higher levels of allowances for losses and capital levels as a result of commercial real estate lending growth and exposures. Therefore, we could be required to raise additional capital or restrict our future growth as a result of our higher level of commercial real estate loans.

Many of our loans are to commercial borrowers, which may have a higher degree of risk than other types of borrowers.

At December 31, 2025, commercial loans totaled $156.7 million or 6.2% of our loan portfolio (including SBA loans, asset-based lending, and factored receivables). Commercial loans are often larger and involve greater risks than other types of lending. Because payments on such loans are often dependent on the successful operation or development of the property or business involved, repayment of such loans is often more sensitive than other types of loans to adverse conditions in the real estate market or the general business climate and economy. Accordingly, a downturn in the real estate market and a challenging business and economic environment may increase our risk related to commercial loans, particularly commercial real estate loans. Unlike home mortgage loans, which generally are made on the basis of the borrowers’ ability to make repayment from their employment and other income and which are secured by real property whose value tends to be more easily ascertainable, commercial loans typically are made on the basis of the borrowers’ ability to make repayment from the cash flow of the commercial venture. Our commercial and industrial loans are primarily made based on the identified cash flow of the borrower and secondarily on the collateral underlying the loans. Most often, collateral consists of accounts receivable, inventory and equipment. Inventory and equipment may depreciate over time, may be difficult to appraise and may fluctuate in value based on the success of the business. Accounts receivable may be uncollectible. If the cash flow from business operations is reduced, the

20

Table of Contents

borrower’s ability to repay the loan may be impaired. Vacancy rates can also negatively impact cash flows from business operations. Due to the larger average size of each commercial loan as compared with other loans such as residential loans, as well as collateral that is generally less readily-marketable, losses incurred on a small number of commercial loans could have a material adverse effect on our business, financial condition and results of operations.

Small Business Administration lending is an important part of our business. Our SBA lending program is dependent upon the U.S. federal government, and we face specific risks associated with originating SBA loans.

Our SBA lending program is dependent upon the U.S. federal government. As an approved participant in the SBA Preferred Lender’s Program (an “SBA Preferred Lender”), we enable our clients to obtain SBA loans without being subject to the potentially lengthy SBA approval process necessary for lenders that are not SBA Preferred Lenders. The SBA periodically reviews the lending operations of participating lenders to assess, among other things, whether the lender exhibits prudent risk management. When weaknesses are identified, the SBA may request corrective actions or impose enforcement actions, including revocation of the lender’s SBA Preferred Lender status. If we lose our status as an SBA Preferred Lender, we may lose some or all of our customers to lenders who are SBA Preferred Lenders, and as a result we could experience a material adverse effect to our financial results. Any changes to the SBA program, including but not limited to changes to the level of guarantee provided by the federal government on SBA loans, changes to program specific rules impacting volume eligibility under the guaranty program, as well as changes to the program amounts authorized by Congress may also have a material adverse effect on our business. In addition, any default by the U.S. government on its obligations or any prolonged government shutdown could, among other things, impede our ability to originate SBA loans or sell such loans in the secondary market, which could adversely affect our business, results of operations and financial condition.

Because government regulation greatly affects the business and financial results of all commercial banks and bank holding companies and especially our organization, changes in the laws, regulations and procedures applicable to SBA loans could adversely affect our business, financial condition and results of operation.

Credit Risks

We may not be able to measure and limit our credit risk adequately, which could lead to unexpected losses.

The primary component of our business involves making loans to our clients. The business of lending is inherently risky, including risks that the principal or interest on any loan will not be repaid in a timely manner or at all or that the value of any collateral supporting the loan will be insufficient to cover losses in the event of a default. These risks may be affected by the strength of the borrower’s business and industry, and local, regional and national market and economic conditions. Many of our loans are made to small- to medium-sized businesses that may be less able to withstand competitive, economic and financial pressures than larger borrowers. Our risk management practices, such as managing the concentration of our loans within specific industries, loan types and geographic areas, and our credit approval practices may not adequately reduce credit risk. Further, our credit administration personnel, policies and procedures may not adequately adapt to changes in economic or any other conditions affecting clients and the quality of the loan portfolio. A failure to effectively measure and manage the credit risk associated with our loan portfolio could lead to unexpected losses and have an adverse effect on our business, financial condition and results of operations.

Our allowance for credit losses on loans may prove to be insufficient to absorb potential losses in our loan portfolio.

We maintain an allowance for credit losses on loans to provide for loan defaults and non-performance. This allowance, expressed as a percentage of loans, was 1.18%, at December 31, 2025. Allowance for credit losses on loans is funded from a provision for credit losses on loans, which is a charge to our income statement. We had a provision for credit losses on loans of $3,754,000 for the year ended December 31, 2025. The allowance for credit losses on loans reflects our estimate of the current expected credit losses in our loan portfolio at the relevant balance sheet date. Our allowance for credit losses on loans is based on our prior experience, as well as an evaluation of the known risks in the current portfolio, composition and growth of the loan portfolio and economic forecasts for correlated economic factors. The determination of an appropriate level of allowance for credit losses on loans is an inherently difficult and subjective process, requiring complex judgments, and is based on numerous analytical assumptions. The amount of future losses is susceptible to changes in economic and other conditions, including changes in interest rates, changes in economic forecasts, changes in the financial condition of borrowers, and deteriorating values of collateral that may be beyond our control, and these losses may exceed current estimates. The allowance is only an estimate of the probable incurred losses in the loan portfolio and may not represent actual over time, either of losses in excess of the allowance or of losses less than the allowance.

21

Table of Contents

In addition, we evaluate all loans identified as impaired loans and allocate an allowance based upon our estimation of the potential loss associated with those problem loans. While we strive to carefully manage and monitor credit quality and to identify loans that may be deteriorating, at any time there are loans included in the portfolio that may result in losses, but that have not yet been identified as nonperforming or potential problem loans. Through established credit practices, we attempt to identify deteriorating loans and adjust the allowance for credit losses on loans accordingly. However, because future events are uncertain and because we may not successfully identify all deteriorating loans in a timely manner, there may be loans that deteriorate in an accelerated time frame. We cannot be sure that we will be able to identify deteriorating loans before they become nonperforming assets, or that we will be able to limit losses on those loans that have been so identified.

Although management believes that the allowance for credit losses on loans is adequate to absorb losses on any existing loans that may become uncollectible, we may be required to take additional provisions for credit losses on loans in the future to further supplement the allowance for credit losses on loans, either due to management’s decision to do so or because our banking regulators require us to do so. Our bank regulatory agencies will periodically review our allowance for credit losses on loans and the value attributed to nonaccrual loans or to real estate acquired through foreclosure and may require us to adjust our determination of the value for these items. If our allowance for credit losses on loans is inaccurate, for any of the reasons discussed above (or other reasons), and is inadequate to cover the loan losses that we actually experience, the resulting losses could have a material adverse effect on our business, financial condition and results of operations.

Non-performing assets adversely affect our results of operations and financial condition and take significant management time to resolve.

At December 31, 2025, our non-performing loans and leases were 0.27% of total loans and leases compared to 0.28% at December 31, 2024, and 0.00% at December 31, 2023. Our non-performing assets (which include foreclosed real estate) were 0.19% of total assets as of December 31, 2025 compared to 0.18% at December 31, 2024. The allowance for credit losses as a percentage of non-performing loans and leases was 432.37% as of December 31, 2025 compared to 399.37% at December 31, 2024. Non-performing assets adversely affect our net income in various ways. We generally do not record interest income on non-performing loans or other real estate owned, thereby adversely affecting our income and increasing our loan administration costs. When we take collateral in foreclosures and similar proceedings, we are required to mark the related asset to the then fair value of the collateral, which may ultimately result in a loss. An increase in the level of non-performing assets increases our risk profile and may impact the capital levels our regulators believe are appropriate in light of the ensuing risk profile, which could result in a request to reduce our level of non-performing assets. When we reduce problem assets through loan sales, workouts, restructurings and otherwise, decreases in the value of the underlying collateral, or in these borrowers’ performance or financial condition, whether or not due to economic and market conditions beyond our control, could adversely affect our business, results of operations and financial condition. In addition, the resolution of non-performing assets requires significant commitments of time from management, which can be detrimental to the performance of their other responsibilities. There can be no assurance that we will not experience future increases in non-performing assets or that the disposition of such non-performing assets will not have a material adverse effect on our business, financial condition and results of operations.

Our focus on lending to small to mid-sized community-based businesses may increase our credit risk.

Commercial real estate and commercial business loans generally are considered riskier than single-family residential loans because they have larger balances to a single borrower or group of related borrowers. Commercial real estate and commercial business loans involve risks because the borrowers’ ability to repay the loans typically depends primarily on the successful operation of the businesses or the properties securing the loans. Most of our commercial real estate and commercial business loans are made to small and medium sized businesses who may have a heightened vulnerability to economic conditions. The deterioration of our borrowers’ businesses may hinder their ability to repay their loans with us, which could have a material adverse effect on our business, financial condition and results of operations.

Securities Portfolio Risks

We could recognize losses on securities held in our securities portfolio, particularly if interest rates increase or economic and market conditions deteriorate.

22

Table of Contents

As of December 31, 2025, the carrying value of our securities portfolio was approximately $763,324,000. Factors beyond our control can significantly influence the fair value of securities in our portfolio and can cause potential adverse changes to the fair value of these securities. For example, fixed-rate securities acquired by us are generally subject to decreases in market value when interest rates rise. Additional factors include, but are not limited to, rating agency downgrades of the securities or our own analysis of the value of the security, defaults by the issuer or individual mortgagors with respect to the underlying securities, and continued instability in the credit markets. Any of the foregoing factors could cause credit-related impairment in future periods and result in realized losses. The process for determining whether impairment is credit related usually requires difficult, subjective judgments about the future financial performance of the issuer and any collateral underlying the security in order to assess the probability of receiving all contractual principal and interest payments on the security. Because of changing economic and market conditions affecting interest rates, we may recognize realized and unrealized losses in future periods, which could have a material adverse effect on our business, financial condition and results of operations.

Key Personnel Risks

We are highly dependent on our management team, and the loss of our senior executive officers or other key employees could harm our ability to implement our strategic plan, impair our relationships with customers and adversely affect our business, financial condition and results of operations.

Our success depends, in large degree, on the skills of our management team and our ability to retain, recruit and motivate key officers and employees. Our senior management team has significant industry experience, and their knowledge and relationships would be difficult to replace. Leadership changes will occur from time to time, and we cannot predict whether significant resignations will occur or whether we will be able to recruit additional qualified personnel. Competition for senior executives and skilled personnel in the financial services and banking industry is intense, which means the cost of hiring, paying incentives and retaining skilled personnel may continue to increase. We need to continue to attract and retain key personnel and to recruit qualified individuals to succeed existing key personnel to ensure the continued growth and successful operation of our business. In addition, as a provider of relationship-based commercial banking services, we must attract and retain qualified banking personnel to continue to grow our business, and competition for such personnel can be intense. To attract and retain personnel with appropriate skills and knowledge to support our business, we may offer a variety of benefits, which could reduce our earnings or have a material adverse effect on our business, financial condition and results of operations. The loss of the services of any senior executive or other key personnel, the inability to recruit and retain qualified personnel in the future, or an increase in compensation benefits could have a material adverse effect on our business, financial condition and results of operations.

Capital Risks

We may be subject to more stringent capital requirements in the future.

We are subject to current and changing regulatory requirements specifying minimum amounts and types of capital that we must maintain. Our failure to comply with capital requirements may restrict the types of activities we or our subsidiaries may conduct, and we may be prohibited from taking certain capital actions, such as paying dividends and repurchasing or redeeming capital securities. While we expect to meet the requirements of the Rules, we may fail to do so. Failure to meet minimum capital requirements could result in certain mandatory and possible additional discretionary actions by regulators that, if undertaken, could have an adverse material effect on our financial condition and results of operations. In addition, these requirements could have a negative impact on our ability to lend, grow deposit balances, make acquisitions or make capital distributions in the form of dividends or share repurchases. Higher capital levels could also lower our return on equity.

We may not be successful in raising additional capital needed in the future.

We may need to raise additional capital in the future to provide us with sufficient capital resources and liquidity to meet our commitments and business strategies. Our ability to raise additional capital will depend on, among other things, conditions in the capital markets at that time which are outside of our control, and our financial performance. We cannot be assured that such capital will be available to us on acceptable terms or at all. Any occurrence that may limit our access to the capital markets may adversely affect our capital costs and our ability to raise capital. Moreover, if we need to raise capital in the future, we may have to do so when many other financial institutions are also seeking to raise capital and would have to compete with those institutions for investors. An inability to raise additional capital on acceptable terms when needed could have a material adverse effect on our business, financial condition and results of operations.

23

Table of Contents

Strategic Risks

We may not be able to maintain our historical growth rate which may adversely impact our business, financial condition and results of operations and financial condition.

We have initiated internal asset growth programs, completed various acquisitions and opened additional offices in prior years. We may not be able to sustain our historical rate of asset growth or may not even be able to grow at all. We may not be able to obtain the financing necessary to fund additional asset growth and may not be able to find suitable candidates for acquisition. Various factors, such as economic conditions and competition, may impede or prohibit the opening of new branch offices. Further, our inability to attract and retain experienced bankers may adversely affect our internal asset growth. A significant decrease in our historical rate of asset growth could have a material adverse impact on our business, financial condition and results of operations.

There are risks related to acquisitions.

We plan to continue to grow our business organically. However, from time to time, we may consider opportunistic strategic acquisitions that we believe support our long-term business strategy. We face significant competition from numerous other financial services institutions, many of which will have greater financial resources than we do, when considering acquisition opportunities. Accordingly, attractive acquisition opportunities may not be available to us. We may not be successful in identifying or completing any future acquisitions. Acquisitions of financial institutions involve operational risks and uncertainties and acquired companies may have unforeseen liabilities, exposure to asset quality problems, key employee and customer retention problems and other problems that could negatively affect our organization.

If we complete any future acquisitions, we may not be able to successfully integrate the operations, management, products and services of the entities that we acquire and eliminate redundancies. The integration process could result in the loss of key employees or disruption of the combined entity’s ongoing business or inconsistencies in standards, controls, procedures, and policies that adversely affect our ability to maintain relationships with customers and employees or achieve the anticipated benefits of the transaction. The integration process may also require significant time and attention from our management that they would otherwise direct at servicing existing business and developing new business. We may not be able to realize any projected cost savings, synergies or other benefits associated with any such acquisition we complete. We cannot determine all potential events, facts and circumstances that could result in loss and our investigation or mitigation efforts may be insufficient to protect against any such loss.

Issuing additional shares of our common stock to acquire other banks and bank holding companies may result in dilution for existing shareholders and may adversely affect the market price of our stock.

In connection with our growth strategy, we have issued, and may issue in the future, shares of our common stock to acquire additional banks or bank holding companies that may complement our organizational structure. Resales of substantial amounts of common stock in the public market and the potential of such sales could adversely affect the prevailing market price of our common stock and impair our ability to raise additional capital through the sale of equity securities. We sometimes must pay an acquisition premium above the fair market value of acquired assets for the acquisition of banks or bank holding companies. Paying this acquisition premium, in addition to the dilutive effect of issuing additional shares, may also adversely affect the prevailing market price of our common stock.

If the goodwill that we recorded in connection with a business acquisition becomes impaired, it could require charges to earnings, which would have a negative impact on our financial condition and results of operations.

Goodwill represents the amount by which the cost of an acquisition exceeded the fair value of net assets we acquired in connection with the purchase. We review goodwill for impairment at least annually, or more frequently if events or changes in circumstances indicate that the carrying value of the asset might be impaired. We determine impairment by comparing the implied fair value of the reporting unit goodwill with the carrying amount of that goodwill. Estimates of fair value are determined based on a complex model using cash flows, the fair value of our Company as determined by our stock price, and company comparisons. If management’s estimates of future cash flows are inaccurate, fair value determined could be inaccurate and impairment may not be recognized in a timely manner. If the carrying amount of the reporting unit goodwill exceeds the implied fair value of that goodwill, an impairment loss is recognized in an amount equal to that excess. Any such adjustments are reflected in our results of operations in the periods in which they become known. There can be no assurance that our future evaluations of goodwill will not result in findings of impairment and related write-downs, which may have a material adverse effect on our financial condition and results of operations.

24

Table of Contents

Our decisions regarding the fair value of assets acquired could be different than initially estimated, which could materially and adversely affect our business, financial condition and results of operations.

In business combinations, we acquire significant portfolios of loans that are marked to their estimated fair value. There is no assurance that the acquired loans will not suffer deterioration in value. The fluctuations in national, regional and local economic conditions, including those related to local residential, commercial real estate and construction markets, may increase the level of charge offs in the loan portfolio that we acquire and correspondingly reduce our net income. These fluctuations are not predictable, cannot be controlled and may have a material adverse effect on our business, financial condition, and results of operations.

We must effectively manage our branch growth strategy.

We seek to expand our franchise safely and consistently. A successful growth strategy requires us to manage multiple aspects of our business simultaneously, such as following adequate loan underwriting standards, balancing loan and deposit growth without increasing interest rate risk or compressing our net interest margin, maintaining sufficient capital, maintaining proper system and controls, and recruiting, training and retaining qualified professionals. We also may experience a lag in profitability associated with new branch openings. As part of our general growth strategy we may expand into additional communities or attempt to strengthen our position in our current markets by opening new offices, subject to any regulatory constraints on our ability to open new offices. To the extent that we are able to open additional offices, we are likely to experience the effects of higher operating expenses relative to operating income from the new operations for a period of time which could have a material adverse effect on our business, financial condition and results of operations.

New lines of business or new products and services may subject us to additional risks.

From time to time, we may implement or may acquire new lines of business or offer new products and services within existing lines of business. There are substantial risks and uncertainties associated with these efforts, particularly in instances where the markets are not fully developed, such as the market for digital assets. In developing and marketing new lines of business and new products and services we may invest significant time and resources. We may not achieve target timetables for the introduction and development of new lines of business and new products or services and price and profitability targets may not prove feasible. External factors, such as regulatory compliance obligations, competitive alternatives, and shifting market preferences, may also impact the successful implementation of a new line of business or a new product or service. Furthermore, any new line of business or new product or service could have a significant impact on the effectiveness of our system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business or new products or services could have a material adverse effect on our business, financial condition and results of operations.

Competition Risks

Competition in originating loans and attracting deposits may adversely affect our profitability.

We operate in a highly competitive banking market and face substantial competition in originating loans. This competition currently comes principally from other banks, savings institutions, mortgage banking companies, credit unions and other lenders. Many of our competitors enjoy advantages, including greater financial resources and higher lending limits, a wider geographic presence, more accessible branch office locations, the ability to offer a wider array of services or more favorable pricing alternatives, as well as lower origination and operating costs. This competition could reduce our net income by decreasing the number and size of loans that we originate and the interest rates we may charge on these loans.

In attracting deposits, we face substantial competition from other insured depository institutions such as banks, savings institutions and credit unions, as well as institutions offering uninsured investment alternatives, including money market funds. Many of our competitors enjoy advantages, including greater financial resources, more aggressive marketing campaigns, better brand recognition and more branch locations. These competitors may offer higher interest rates than we do, which could decrease the deposits that we attract or require us to increase our rates to retain existing deposits or attract new deposits. Increased deposit competition could adversely affect our ability to generate the funds necessary for lending operations, which may increase our cost of funds or negatively impact our liquidity.

We also compete with non-bank providers of financial services, such as brokerage firms, consumer finance companies, insurance companies and governmental organizations, which may offer more favorable terms. Some of our non-bank competitors are not subject to the same extensive regulations that govern our operations. As a result, such non-bank competitors

25

Table of Contents

may have advantages over us in providing certain products and services. This competition may reduce or limit our margins on banking services, reduce our market share and adversely affect our earnings and financial condition.

The financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. Our inability to compete successfully in the markets in which we operate could have an adverse effect on our business, financial condition or results of operations.

We have a continuing need for new technology, and we may not have the resources to implement new technology effectively, or we may experience operational challenges when implementing new technology or technology needed to compete effectively with larger institutions may not be available to us on a cost-effective basis.

The financial services industry undergoes rapid technological changes with frequent introductions of new technology-driven products and services, including developments in telecommunications, data processing, automation, internet-based banking, debit cards and so-called “smart cards” and remote deposit capture. In addition to serving clients better, the effective use of technology increases efficiency and enables financial institutions to reduce costs. Our future success will depend, at least in part, upon our ability to address the needs of our clients by using technology to provide products and services that will satisfy client demands for convenience, as well as to create additional efficiencies in our operations as we continue to grow and expand our products and service offerings. We may experience operational challenges as we implement new technology enhancements or products, which could impair our ability to realize the anticipated benefits from such new technology or require us to incur significant costs to remedy any such challenges in a timely manner.

Many of our larger competitors have substantially greater resources to invest in technological improvements. Third parties upon which we rely for our technology needs may not be able to develop on a cost-effective basis the systems that will enable us to keep pace with such developments. As a result, competitors may be able to offer additional or superior products compared to those that we will be able to provide, which would put us at a competitive disadvantage. We may lose clients seeking new technology-driven products and services to the extent we are unable to provide such products and services. Accordingly, the ability to keep pace with technological change is important and the failure to do so could adversely affect our business, financial condition and results of operations.

Technology Risks

A failure in or breach of our operational or security systems, or those of our third-party service providers, including as a result of cyber-attacks, could disrupt business, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, increase costs and cause losses.

In the normal course of its business, we collect, process and retain sensitive and confidential customer and consumer information. Despite the security measures we have in place, our facilities may be vulnerable to cyber-attacks, security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming or human errors, and other similar events.

Information security risks for financial institutions such as us have increased recently in part because of new technologies, such as artificial intelligence, the use of the Internet and telecommunications technologies (including mobile devices) to conduct financial and other business transactions and the increased sophistication and activities of organized crime, perpetrators of fraud, hackers, terrorists and others. In addition to cyber attacks or other security breaches involving the theft of sensitive and confidential information, hackers have engaged in attacks against financial institutions designed to disrupt key business services such as customer-facing web sites. National and international economic and geopolitical conditions may also have a negative impact in the number of cyber security threats we may face. We are not able to anticipate or implement effective preventative measures against all security breaches of these types. Although we employ detection and response mechanisms designed to contain and mitigate security incidents, early detection may be thwarted by sophisticated attacks and malware designed to avoid detection, which continue to evolve.

Additionally, we face the risk of operational disruption, failure, termination or capacity constraints of any of the third parties that facilitate its business activities, including third-party service providers, exchanges, clearing agents, clearing houses or other financial intermediaries. Such parties could also be the source of an attack on, or breach of, our operational systems.

Any failures, interruptions or security breaches in our information systems could damage our reputation, result in a loss of customer business, result in a violation of privacy or other laws, or expose us to civil litigation, regulatory fines or losses not covered by insurance.

See Item 1C - Cybersecurity for additional information regarding our efforts to detect, identify, assess, manage, and respond to material risks from cybersecurity threats.

26

Table of Contents

Reputation and Operations Risks

Our ability to maintain our reputation is critical to the success of our business, and the failure to do so may materially and adversely affect our business and the value of our common stock.

We are a community bank, and, notwithstanding a push by federal banking regulators to de-emphasize the importance of reputational risk, our reputation is one of the most valuable components of our business. Threats to our reputation can come from many sources, including: adverse sentiment about financial institutions generally; unethical practices, failures of technological systems or breaches of security measures, including, but not limited to, those resulting from computer viruses or cyber-attacks; theft, fraud or misappropriation of assets, whether arising from the intentional actions of internal personnel or external third parties; failure to deliver minimum standards of service or quality; compliance deficiencies; and questionable or fraudulent activities of our customers. Negative publicity regarding our industry, us, employees, or customers, with or without merit, may result in the loss of customers, investors and employees, costly litigation, a decline in revenues and increased governmental regulation and have a material adverse effect on our business, financial condition and results of operation.

Our risk management framework may not be effective in mitigating risks or losses to us.

Our risk management framework is comprised of various processes, systems and strategies, and is designed to manage the types of risk to which we are subject, including, among others, credit, market, liquidity, interest rate and compliance. Our framework also includes financial or other modeling methodologies that involve management assumptions and judgment. Our risk management framework may not be effective under all circumstances and may not adequately mitigate any risk or loss to us. If our risk management framework is not effective, we could suffer unexpected losses and our business, financial condition and results of operations could be materially and adversely affected. We may also be subject to potentially adverse regulatory consequences.

Pandemics, natural disasters, global climate change, acts of terrorism and global conflicts may have a negative impact on our business and operations.

Pandemics, natural disasters, global climate change, acts of terrorism, global conflicts or other similar events have in the past, and may in the future have, a negative impact on our business and operations. These events impact us negatively to the extent that they result in reduced capital markets activity, lower asset price levels, or disruptions in general economic activity in the United States or abroad, or in financial market settlement functions. In addition, these or similar events may impact economic growth negatively, which could have an adverse effect on our business and operations and may have other adverse effects on us in ways that we are unable to predict.

Our business operations could be disrupted if significant portions of our workforce were unable to work effectively, including because of illness, quarantines, government actions, or other restrictions in connection with the pandemic. Further, work-from-home and other modified business practices may introduce additional operational risks, including cybersecurity and execution risks, which may result in inefficiencies or delays, and may affect our ability to, or the manner in which we, conduct our business activities. Disruptions to our clients could result in increased risk of delinquencies, defaults, foreclosures and losses on our loans.

Climate change could have a material negative impact on us and our customers.

Our business, as well as the operations and activities of our clients, could be negatively impacted by climate change. Climate change presents both immediate and long-term risks to us and our clients, and these risks are expected to increase over time. Climate change presents multi-faceted risks, including: operational risk from the physical effects of climate events on us and our clients’ facilities and other assets; credit risk from borrowers with significant exposure to climate risk; transition risks associated with the transition to a less carbon-dependent economy; and reputational risk from stakeholder concerns about our practices related to climate change, our carbon footprint, and our business relationships with clients who operate in carbon-intensive industries.

Federal and state banking regulators and supervisory authorities, investors, and other stakeholders have increasingly viewed financial institutions as important in helping to address the risks related to climate change both directly and with respect to their clients. This may result in financial institutions coming under increased pressure regarding the disclosure and management of their climate risks and related lending and investment activities. Given that climate change could impose systemic risks upon the financial sector, either via disruptions in economic activity resulting from the physical impacts of climate change or changes in policies as the economy transitions to a less carbon-intensive environment, we may face regulatory risk of increasing focus

27

Table of Contents

on our resilience to climate-related risks, including in the context of stress testing for various climate stress scenarios. Ongoing legislative or regulatory uncertainties and changes regarding climate risk management and practices may result in higher regulatory, compliance, credit, and reputational risks and costs.

Scrutiny and evolving expectations from customers, regulators, investors, and other stakeholders with respect to our environmental, social and governance practices may impose additional costs on us or expose us to new or additional risks.

Companies can face increasing scrutiny from customers, regulators, investors, and other stakeholders related to their environmental, social and governance (“ESG”) practices and disclosure. Investor advocacy groups, investment funds and influential investors may also focus on these practices, especially as they relate to the environment, health and safety, diversity, labor conditions and human rights. Increased ESG-related compliance costs for us as well as among our suppliers, vendors and various other parties within our supply chain could result in increases to our overall operational costs. Failure to adapt to or comply with regulatory requirements or investor or stakeholder expectations and standards could negatively impact our reputation, ability to do business with certain partners, access to capital, and our stock price.

Finance and Accounting Risks

Accounting estimates and risk management processes rely on analytical models that may prove inaccurate resulting in a material adverse effect on our business, financial condition and results of operations.

The processes we use to estimate probable incurred loan losses and to measure the fair value of financial instruments, as well as the processes used to estimate the effects of changing interest rates and other market measures on our financial condition and results of operations, depends upon the use of analytical models. These models reflect assumptions that may not be accurate, particularly in times of market stress or other unforeseen circumstances. Even if these assumptions are adequate, the models using those assumptions may prove to be inadequate or inaccurate because of other flaws in their design or their implementation. If the models we use for interest rate risk and asset-liability management are inadequate, we may incur increased or unexpected losses upon changes in market interest rates or other market measures. If the models we use for determining our probable loan losses are inadequate, the allowance for credit losses on loans may not be sufficient to support future charge-offs. If the models we use to measure the fair value of financial instruments are inadequate, the fair value of such financial instruments may fluctuate unexpectedly or may not accurately reflect what we could realize upon sale or settlement of such financial instruments. Any such failure in our analytical models could result in losses that could have a material adverse effect on our business, financial condition and results of operations.

Changes in accounting standards could materially impact our financial statements.

From time to time, the FASB or the SEC may change the financial accounting and reporting standards that govern the preparation of our financial statements. Such changes may result in us being subject to new or changing accounting and reporting standards. In addition, the bodies that interpret the accounting standards (such as banking regulators or outside auditors) may change their interpretations or positions on how these standards should be applied. These changes may be beyond our control, can be hard to predict and can materially impact how we record and report our financial condition and results of operations. In some cases, we could be required to apply a new or revised standard retrospectively, or apply an existing standard differently, also retrospectively, in each case resulting in our needing to revise or restate prior period financial statements. Restating or revising our financial statements may result in reputational harm or may have other adverse effects on us.

Failure to maintain effective internal controls over financial reporting could have a material adverse effect on our business and stock price.

We are required to comply with the SEC’s rules implementing Section 302, Section 404, and Section 906 of the Sarbanes-Oxley Act, which will require management to certify financial and other information in our quarterly and annual reports and provide an annual management report on the effectiveness of controls over financial reporting. In particular, we are required to certify our compliance with Section 404 of the Sarbanes-Oxley Act, which requires us to furnish annually a report by management on the effectiveness of our internal control over financial reporting and our independent registered public accounting firm is required to report on the effectiveness of our internal control over financial reporting.

If we identify any material weaknesses in our internal control over financial reporting or are unable to comply with the requirements of Section 404 in a timely manner or assert that our internal control over financial reporting is effective, or if our independent registered public accounting firm is unable to express an opinion as to the effectiveness of our internal control over financial reporting, investors, counterparties and customers may lose confidence in the accuracy and completeness of our

28

Table of Contents

financial statements and reports; our liquidity, access to capital markets and perceptions of our creditworthiness could be adversely affected; and the market price of our common stock could decline. In addition, we could become subject to investigations by the stock exchange on which our securities are listed, the SEC, the Federal Reserve, the FDIC, the DFPI or other regulatory authorities, which could require additional financial and management resources. These events could have a material adverse effect on our business and stock price.

We have a significant deferred tax asset and cannot assure that it will be fully realized.

Deferred tax assets and liabilities are the expected future tax amounts for the temporary differences between the carrying amounts and tax basis of assets and liabilities computed using enacted tax rates. We regularly assess available positive and negative evidence to determine whether it is more likely than not that our net deferred tax asset will be realized. Realization of a deferred tax asset requires us to apply significant judgment and is inherently speculative because it requires estimates that cannot be made with certainty. At December 31, 2025, we had a net deferred tax asset of $37.5 million. If we were to determine at some point in the future that we will not achieve sufficient future taxable income to realize our net deferred tax asset, we would be required, under generally accepted accounting principles, to establish a full or partial valuation allowance which would require us to incur a charge to income for the period in which the determination was made.

Legislative and Regulatory Risks

We are subject to extensive government regulation that could limit or restrict our activities, which, in turn, may hamper our ability to increase our assets and earnings.

Our business is highly regulated, and our operations are subject to extensive supervision and regulation by federal and state governmental regulatory authorities. We are subject to various laws, regulations, and judicial and administrative decisions imposing requirements and restrictions on our operations. Similarly, the lending, credit and deposit products we offer are subject to broad oversight and regulation. The laws, rules, regulations and supervisory guidance and policies applicable to us are subject to regular modification and change. Perennially, various laws, rules and regulations are proposed at the federal, state and local levels of government, which, if adopted, could impact our operations by making compliance much more difficult or expensive, restricting our ability to originate or sell loans or further restricting the amount of interest or other charges or fees earned on loans or other products. Current and future legal and regulatory requirements, restrictions and regulations, including those imposed under Dodd-Frank, may adversely impact our profitability and may have a material and adverse effect on our business, financial condition, and results of operations. While the banking regulators continue to refine existing regulations implemented after the 2007-2008 financial crisis, currently they are also focusing their attention on certain policy areas, such as climate risk, digital currencies, and technological innovation. This new focus may require us to invest significant management attention and resources to evaluate and make any changes required by the legislation and accompanying rules, and may make it more difficult for us to attract and retain qualified executive officers and employees.

Regulations relating to privacy, information security and data protection could increase our costs, affect or limit how we collect and use personal information.

We are subject to an increasing number of federal and state privacy, information security and data protection laws, and we could be negatively impacted by these laws. Various state and federal banking regulators and states have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification. Moreover, other state and federal legislators and regulators are increasingly adopting or revising privacy, information security and data protection laws that potentially could have a significant impact on our current and planned privacy, data protection and information security-related practices, as well as on our collection, use, sharing, retention and safeguarding of consumer or employee information.

The effects of these privacy and data protection laws, including the cost of compliance and required changes in the manner in which we conduct our business, are not fully known and are potentially significant, and the failure to comply could adversely affect us. Compliance with current or future privacy, data protection and information security laws (including those regarding security breach notification) affecting customer or employee data to which we are subject could result in higher compliance and technology costs and could restrict our ability to provide certain products and services. Our failure to comply with privacy, data protection and information security laws could result in potentially significant regulatory or governmental investigations or actions, litigation, fines, sanctions and damage to our reputation, which could have a material adverse effect on our business, financial condition and results of operations.

We face a risk of noncompliance and enforcement action with the Bank Secrecy Act and other anti-money laundering statutes and regulations.

29

Table of Contents