INBK US Equity☆

inbk-20211231

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

or

Commission File Number 001-35750

First Internet Bancorp

(Exact Name of Registrant as Specified in its Charter)

(State or other jurisdiction of (I.R.S. Employer

incorporation or organization) Identification No.)

(Address of principal executive offices) (Zip Code)

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading Symbols Name of exchange on which registered

Common stock, without par value INBK The Nasdaq Stock Market LLC

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ̈Noþ

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ̈Noþ

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or Section 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yesþ No ̈

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yesþ No ̈

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer ̈ Accelerated Filer þ

Non-accelerated filer ̈ Smaller reporting company ☑

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ̈

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐ No þ

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☑

The aggregate market value of common stock held by non-affiliates of the registrant as of June 30, 2021, the last business day of the registrant’s most recently completed second fiscal quarter, was approximately $284.3 million, based on the closing sale price for the registrant’s common stock on that date. For purposes of determining this number, all officers and directors of the registrant are considered to be affiliates of the registrant. This number is provided only for the purpose of this report and does not represent an admission by either the registrant or any such person as to the status of such person.

As of March 11, 2022, the registrant had 9,683,727 shares of common stock issued and outstanding.

Documents Incorporated By Reference

Portions of our Proxy Statement for our 2022 Annual Meeting of Shareholders are incorporated by reference in Part III.

First Internet Bancorp

Table of Contents

PART I PAGE

Item 1. Business 1

Item 1A. Risk Factors 12

Item 1B. Unresolved Staff Comments 23

Item 2. Properties 23

Item 3. Legal Proceedings 23

Item 4. Mine Safety Disclosures 23

PART II

Item 6. Reserved 25

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 51

Item 8. Financial Statements and Supplementary Data 52

Item 9A. Controls and Procedures 52

Item 9B. Other Information 52

Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 52

PART III

Item 10. Directors, Executive Officers and Corporate Governance 53

Item 11. Executive Compensation 54

Item 14. Principal Accountant Fees and Services 54

PART IV

Item 15. Exhibits and Financial Statement Schedules 55

SIGNATURES 57

Cautionary Note Regarding Forward-Looking Statements

This annual report on Form 10-K contains forward-looking statements within the meaning of the federal securities laws. These statements are not historical facts, but rather statements based on the current expectations of First Internet Bancorp and its consolidated subsidiaries (the “Company,” “we,” “our,” or “us”) regarding the pending acquisition of First Century Bancorp. and its effects on the future performance of the Company and First Internet Bank (the “Bank”), the expected timing of completion of the transaction and other statements concerning the financial condition, results of operations, trends in lending policies and loan programs, plans and prospective business partnerships, objectives, future performance and business of the Company. Forward-looking statements are generally preceded by terms such as “anticipate,” “attempt,” “believe,” “can,” “continue,” “could,” “effort,” “estimate,” “expect,” “intend,” “likely,” “may,” “objective,” “optimistic,” “pending,” “plan,” “position,” “potential,” “preliminary,” “remain,” “should,” “will,” “would” or other similar expressions. Such statements are subject to certain risks and uncertainties including: the continued or potential effects of the COVID-19 global pandemic and related variants and mutations and other adverse public health developments on the economy, our business and operations and the business and operations of our vendors and customers; general economic conditions, whether national or regional, and conditions in the lending markets in which we participate that may have an adverse effect on the demand for our loans and other products; our credit quality and related levels of nonperforming assets and loan losses, and the value and salability of the real estate that we own or that is the collateral for our loans; failures or breaches of or interruptions in the communication and information systems on which we rely to conduct our business that could reduce our revenues, increase our costs or lead to disruptions in our business; our plans to continue originating and grow our commercial real estate, commercial and industrial, public finance, U.S. Small Business Administration (“SBA”), healthcare finance and franchise finance loan portfolios, which may carry greater risks of non-payment or other unfavorable consequences; our dependence on capital distributions from the Bank; results of examinations of us by our regulators, including the possibility that our regulators may, among other things, require us to increase our allowance for loan losses or to write-down assets; changing bank regulatory conditions, policies or programs, whether arising as new legislation or regulatory initiatives, that could lead to restrictions on activities of banks generally, or the Bank in particular; more restrictive regulatory capital requirements; increased costs, including deposit insurance premiums; regulation or prohibition of certain income producing activities or changes in the secondary market for loans and other products; changes in market rates and prices that may adversely impact the value of securities, loans, deposits and other financial instruments and the interest rate sensitivity of our balance sheet; our liquidity requirements being adversely affected by changes in our assets and liabilities; the effect of legislative or regulatory developments, including changes in laws concerning taxes, banking, securities, insurance and other aspects of the financial services industry; competitive factors among financial services organizations, including product and pricing pressures and our ability to attract, develop and retain qualified banking professionals; delays in completing our pending acquisition of First Century Bancorp by merger, the failure to obtain necessary regulatory approvals and shareholder approvals or to satisfy any of the other conditions to the merger on a timely basis or at all, the possibility that the anticipated benefits of the merger are not realized when expected or at all, corporate strategies or objectives, including the impact of certain actions and initiatives, anticipated trends in our business, regulatory developments, estimated synergies, cost savings and financial benefits of completed transactions, growth strategies, and the inability to realize cost savings or improved revenues or to implement integration plans and other consequences associated with the proposed merger; execution of future acquisition, reorganization or disposition transactions, including without limitation, the related time and costs of implementing such transactions, integrating operations as part of these transactions and possible failures to achieve expected gains, revenue growth and/or expense savings and other anticipated benefits from such transactions; changes in applicable tax laws; the growth and profitability of noninterest or fee income being less than expected; the loss of any key members of senior management; the effect of changes in accounting policies and practices, as may be adopted by the Financial Accounting Standards Board, the Securities and Exchange Commission (the “SEC”), the Public Company Accounting Oversight Board and other regulatory agencies; and the effect of fiscal and governmental policies of the United States federal government. Additional factors that may affect our results include those discussed in this report under the heading “Risk Factors” and in other reports filed with the SEC. We caution readers not to place undue reliance on any such forward-looking statements, which speak only as of the date made. The factors listed above could affect our financial performance and could cause our actual results for future periods to differ materially from any opinions or statements expressed with respect to future periods in any current statements.

Except as required by law, we do not undertake, and specifically disclaim any obligation, to publicly release the result of any revisions that may be made to any forward-looking statements to reflect events or circumstances after the date of such statements or to reflect the occurrence of anticipated or unanticipated events.

i

PART I

Item 1. Business

When we refer to “First Internet Bancorp,” the “Company,” “we,” “us” and “our” in the remainder of this annual report on Form 10-K, we mean First Internet Bancorp and its consolidated subsidiaries, unless the context indicates otherwise. References to “First Internet Bank” or the “Bank” refer to First Internet Bank of Indiana, an Indiana chartered bank and wholly-owned subsidiary of the Company.

Overview

First Internet Bancorp is a bank holding company with $4.2 billion in total assets as of December 31, 2021, that conducts its primary business activities through its wholly-owned subsidiary, First Internet Bank of Indiana, an Indiana chartered bank. First Internet Bank of Indiana was the first state-chartered, Federal Deposit Insurance Corporation (“FDIC”) insured Internet bank and commenced banking operations in 1999. First Internet Bancorp was incorporated under the laws of the State of Indiana on September 15, 2005. On March 21, 2006, we consummated a plan of exchange by which we acquired all of the outstanding shares of the Bank.

The Company has two wholly-owned subsidiaries: the Bank and FC Subsidiary, Inc., a Georgia corporation, formed in connection with our pending acquisition of First Century Bancorp. (“First Century”). The Bank has three wholly-owned subsidiaries: First Internet Public Finance Corp., an Indiana corporation, which provides a range of public and municipal finance lending and leasing products to governmental entities throughout the United States and acquires securities issued by state and local governments and other municipalities; JKH Realty Services, LLC, a Delaware limited liability company, which manages other real estate owned properties as needed; and SPF15 Inc., an Indiana corporation, which was established to acquire and hold real estate used primarily for the Bank’s principal office.

We offer a wide range of commercial, small business, consumer and municipal banking products and services. We conduct our consumer and small business deposit operations primarily through digital channels on a nationwide basis and have no traditional branch offices. Our residential mortgage products are offered nationwide primarily through a digital direct-to-consumer platform and are supplemented with Central Indiana-based mortgage and construction lending. Our consumer lending products are primarily originated on a nationwide basis through relationships with dealerships and financing partners.

Our commercial banking products and services are delivered through a relationship banking model and include commercial real estate (“CRE”) banking, commercial and industrial (“C&I”) banking, public finance, healthcare finance, small business lending, franchise finance and commercial deposits and treasury management. Within CRE banking, we offer single tenant lease financing on a nationwide basis in addition to traditional investor CRE and construction loans primarily within Central Indiana or a regional basis. Our C&I banking team provides credit solutions such as lines of credit, term loans, owner-occupied CRE loans and corporate credit cards on a regional basis to commercial borrowers located primarily in the Midwest and Southwest regions of the United States. Our public finance team provides a range of public and municipal lending and leasing products to government entities on a nationwide basis. Our healthcare finance team was established in conjunction with a strategic partnership with Provide, Inc. (formerly known as Lendeavor, Inc.), a San Francisco-based technology-enabled lender to healthcare practices, which provided lending on a nationwide basis for healthcare practice finance or acquisition, acquisition or refinancing of owner-occupied CRE and equipment purchases. In the third quarter 2021, Provide, Inc. was acquired by a super-regional financial institution. It is our expectation that the acquiring institution will retain most, if not all, of Provide’s loan origination activity and that our healthcare finance loan balances may decline. Our franchise finance business was established in July 2021 in conjunction with our business relationship with ApplePie Capital, a financial technology (“fintech”) company that specializes in providing financing to franchisees in various industry segments. Our commercial deposits and treasury management team works with the other commercial teams to provide deposit products and treasury management services to our commercial and municipal lending customers as well as pursues commercial deposit opportunities in business segments where we have no credit relationships.

We believe that we can differentiate ourselves from larger financial institutions by providing a full suite of services to emerging small businesses and entrepreneurs on a nationwide basis. We have hired and continue to recruit experienced small business sales, credit and operations personnel to expand our capabilities in small business lending and U.S. government guaranteed lending programs. We continue to scale up this business with the goal of driving increased earnings and profitability in future periods.

1

We plan to expand our fintech partnerships. With the rapid evolution of technology that enables consumers and small businesses to manage their finances digitally, fintechs are addressing a significantly growing marketplace. Fintechs have created robust digital offerings, unburdened by legacy technology architecture, to address growing customer expectations. Through partnerships with selected fintechs, we believe our ability to win and retain consumer and small business relationships will be significantly enhanced. Furthermore, we believe partnering with select fintechs will allow us to further diversify our revenue sources, acquire lower-cost deposits and pursue additional asset generation capabilities.

Pending Merger Transaction

On November 1, 2021, we entered into a merger agreement to acquire all of the outstanding shares of common stock of First Century Bancorp. (“First Century”), the parent company of First Century Bank, N.A. (“First Century Bank”), for $80 million in cash. First Century Bank is a technology-driven, financial solutions company with lines of business focused on payments, tax product lending, sponsored card programs and homeowners association services. We expect to fund our payment obligations upon closing with available on-balance sheet cash. The acquisition is subject to customary regulatory approvals and the completion of various closing conditions. The acquisition has received approval from the Indiana Department of Financial Institutions and First Century shareholders, but it is awaiting approval from the Federal Deposit Insurance Corporation and the Federal Reserve. As of December 31, 2021, First Century had total assets of $486.7 million, total deposits of $409.4 million, and total loans of $25.2 million.

Human Capital Resources

As of December 31, 2021, we had 286 total employees, of which 282 were full-time employees. Throughout our history, team members have been our most valuable assets, helping to create a strong workplace culture that recognizes the unique contributions and perspectives each individual brings to the organization.

At First Internet Bank, we encourage our employees to “Imagine More.” We seek the game-changers, innovators and dreamers – those who are driven to find a better way of doing things for customers and each other. We encourage community involvement and opportunities that support team members, both inside and outside the office. We may be a digital bank, but we strongly believe in the power of personal connection and collaboration.

Supporting and developing our people is a foundational tenet. Our ability to attract the best talent from a diverse range of sources allows us to effectively serve the needs of our business and customers. Employees are empowered to grow professionally and personally through training opportunities and internal development programs that can lead to career advancement, with increased job satisfaction and engagement. This focus on employees is evident in the number of “best workplace” awards we have been honored with over the years.

The COVID-19 pandemic has continued to present broad challenges. We have been proactive in responding by adhering to our business continuity plan and new initiatives to maintain operations at the highest level, while serving our customers and supporting our employees.

Our response team has introduced a number of initiatives, including new workplace safety guidelines, adjusting our banking center hours, reducing our onsite workforce and encouraging team members to work remotely if possible. Ongoing internal communications provided access to the latest COVID-19 information from the Centers for Disease Control, World Health Organization, as well as local, state and federal agencies. We continue to monitor and adjust our plans to optimize support for the organization. Fortunately, as a digital bank without branch locations to maintain, our business model has supported online, contactless transactions since our inception.

We strive to maintain a diverse and inclusive work culture in which individual differences and experiences are valued and all employees have the opportunity to contribute and thrive. We believe that leveraging our employees’ diverse perspectives and capabilities will enhance innovation, foster a collaborative work culture and enable us to better serve our customers and communities. With this vision in mind, the Company’s diversity and inclusion strategy focuses on five organizational pillars: People, Partners, Philanthropy, Products and Processes. In 2021, we published our first Environmental, Social and Governance (“ESG”) Report to highlight, among other things, our focus on and efforts to advance Diversity and Inclusion goals.

2

Competition

The markets in which we compete to make loans, attract deposits and provide fee based financial services are highly competitive. For retail banking activities, we compete with other digital banks and fintech companies, in addition to traditional banks, savings banks, credit unions, investment banks, insurance companies, securities brokerages and other financial institutions, as nearly all have some form of digital delivery for their retail banking services. For residential mortgage lending, we compete with other digital lenders as well as money center and superregional banks, community banks and credit unions.

For our C&I lending activities, we compete with larger financial institutions operating in the Midwest and Southwest. For our single tenant lease financing activities, we compete nationally with regional banks, local banks and credit unions, as well as life insurance companies and commercial mortgage-backed securities lenders. For our public finance, healthcare finance and franchise finance activities, we compete nationally with superregional and regional banks. These competitors may have significantly greater financial resources and higher lending limits than we do and may also offer specialized products and services that we do not. For our small business lending activities, we compete on a national footprint with other participating SBA-approved lenders, including a large number of regional or community banks. These competitors have resources and/or lending limits that differ greatly from one another.

Regulation and Supervision

The U.S. banking industry is highly regulated under federal and state law and this regulatory environment has a material effect on the operations and financial condition of the Company and its subsidiaries. As a result, the Company’s growth and earnings performance may be affected not only by management decisions and general economic conditions, but also by the requirements of federal and state statutes and by the regulations and policies of various bank regulatory agencies, including the Indiana Department of Financial Institutions (the “DFI”), the Board of Governors of the Federal Reserve System (the “Federal Reserve”), the FDIC and the Consumer Financial Protection Bureau (“CFPB”). Furthermore, taxation laws administered by the Internal Revenue Service and state taxing authorities, accounting rules developed by the Financial Accounting Standards Board (“FASB”), securities laws administered by the SEC and state securities authorities, and anti-money laundering laws enforced by the U.S. Department of the Treasury (“U.S. Treasury”) also have an impact on the Company’s business. This regulatory framework is intended for the protection of depositors, borrowers and other customers, as well as the FDIC deposit insurance funds and the U.S. banking system, rather than the Company’s shareholders or creditors.

Banking statutes and regulations are subject to ongoing review and revision by federal and state legislatures and regulatory agencies. Notably, the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”), enacted in 2010 in response to the global financial crisis, imposed a number of new and expanded regulatory requirements on the banking industry, which in some cases have been subsequently modified. Future changes in laws, regulations or regulatory policies, including changes in the ways laws and regulations are interpreted or enforced, could affect us in significant and unpredictable ways that may have a material impact on our business.

Federal and state banking laws and regulations affect, among other things, the scope of the Company’s business; the kinds and amounts of investments the Company and Bank may make; the fees and charges that may be imposed for bank products and services; required capital levels relative to assets; the nature and amount of collateral for loans; the ability to merge, consolidate, and acquire; dealings with the Company’s and Bank’s insiders and affiliates; and the Company’s payment of dividends. The cost of compliance with these legal and regulatory requirements has increased over time and could increase further in the future in response to changing laws and regulations or regulatory expectations, or as the Company grows and passes certain asset size thresholds at which additional requirements begin to apply. The Dodd-Frank Act, for example, gives rise to a number of additional requirements as financial institutions pass $10 billion in assets.

The supervisory framework for U.S. banking organizations subjects banks and bank holding companies to regular examination by their respective regulatory agencies, which results in examination reports and ratings that are in most cases not publicly available and that can impact the conduct and growth of their business. These examinations consider not only compliance with applicable laws and regulations, but also capital levels, asset quality and risk, management ability and performance, earnings, liquidity, and various other factors. Regulatory agencies may impose restrictions and limitations on the operations of a regulated entity where the agencies determine, among other things, that such operations are unsafe or unsound, fail to comply with applicable law, or are otherwise inconsistent with laws and regulations. These regulatory agencies have broad enforcement power over regulated entities, including the ability to impose substantial fines and other adverse consequences for violations of law and regulations.

3

Following is a summary of the material elements of the supervisory and regulatory framework applicable to the Company and Bank, beginning with a discussion of the impact of the COVID-19 pandemic on the banking industry.It does not describe all of the statutes, regulations, and regulatory policies that apply, and the descriptions in this summary are qualified in their entirety by reference to the particular statutory and regulatory provisions involved.

COVID-19 Pandemic

In March 2020, the Coronavirus Aid, Relief and Economic Security Act (“CARES Act”) was signed into law. The CARES Act was a $2.2 trillion economic stimulus bill intended to provide relief in responding to the COVID-19 pandemic. The new law included a number of provisions impacting bank regulatory agencies and the institutions they regulate. Federal bank regulatory agencies, along with their state counterparts, have issued a steady stream of guidance responding to the COVID-19 pandemic and have taken a number of unprecedented steps to help banks navigate the pandemic and mitigate its impact. These include, without limitation: requiring banks to focus on business continuity and pandemic planning; adding pandemic scenarios to stress testing; encouraging bank use of capital buffers and reserves in lending programs; permitting certain regulatory reporting extensions; reducing margin requirements on swaps; permitting certain otherwise prohibited investments in investment funds; issuing guidance to encourage banks to work with customers affected by the pandemic and encouraging loan workouts; and providing credit under the Community Reinvestment Act (the “CRA”) for certain pandemic-related loans, investments, and public services.

Moreover, the Federal Reserve issued guidance encouraging banking institutions to utilize its discount window for loans and intraday credit extended by its Reserve Banks to help households and businesses impacted by the pandemic and announced numerous funding facilities. The FDIC also has acted to mitigate the deposit insurance assessment effects of participating in the Paycheck Protection Program and the Federal Reserve’s Paycheck Protection Plan (“PPP”) Liquidity Facility and Money Market Mutual Fund Liquidity Facility.

Reference is made to “Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations – COVID-19 Pandemic,” “- Non-TDR Loan Modifications due to COVID-19,” and “- U.S. Small Business Administration Paycheck Protection Program” for information on the CARES Act, the PPP and for discussions of the economic impact of the COVID-19 pandemic. In addition, information as to selected topics is contained in certain relevant sections of this Regulation and Supervision discussion.

Regulatory Capital

Regulatory capital represents the net assets of a banking organization available to absorb losses. Banks and bank holding companies are generally required to hold more capital than other businesses that are not subject to regulation and supervision by the banking agencies, and this directly affects the Company’s earnings capabilities. While capital has historically been one of the key measures of the financial health of both bank holding companies and banks, its role became fundamentally more important in the wake of the global financial crisis, as banking regulators recognized that the amount and quality of capital held by banks prior to the crisis was insufficient to absorb losses during periods of severe stress. Certain provisions of the Dodd-Frank Act and Basel III, discussed below, establish capital standards for banks and bank holding companies that are meaningfully more stringent than those in place previously.

Capital Levels. Banks have been required to hold minimum levels of capital based on guidelines established by bank regulatory agencies since 1983. The minimums have been expressed in terms of ratios of “capital” divided by “total assets.” The capital guidelines for U.S. banks beginning in 1989 have been based upon international capital accords, known as “Basel” rules, adopted by the Basel Committee on Banking Supervision (the “BCBS”), a committee of central banks and bank supervisors that acts as the primary global standard-setter for prudential regulation, as implemented by the U.S. bank regulatory agencies on an interagency basis. The accords recognized that bank assets for the purpose of the capital ratio calculations needed to be weighted (the theory being that riskier assets should require more capital) and that off-balance-sheet credit exposures needed to be factored in the calculations. Following the global financial crisis, the Group of Governors and Heads of Supervision, the oversight body of the BCBS, announced agreement on a strengthened set of capital requirements for banking organizations around the world, known as Basel III, to address deficiencies recognized in connection with the global financial crisis.

The Basel III Rule. In July 2013, the U.S. federal banking agencies approved implementation of the Basel III regulatory capital reforms in pertinent part, and, at the same time, promulgated rules effecting certain changes required by the Dodd-Frank Act (the “Basel III Rule”). In contrast to capital requirements historically, which were in the form of guidelines, Basel III was released in the form of binding regulations by each of the regulatory agencies. The Basel III Rule increased the

4

required quantity and quality of capital and required more detailed categories of risk weighting of riskier, more opaque assets. For nearly every class of assets, the Basel III Rule requires a more complex, detailed, and calibrated assessment of risk in the calculation of risk weightings for all banking organizations that are subject to minimum capital requirements, including federal and state banks and savings and loan associations, as well as to most bank and savings and loan holding companies. The Company and Bank are each subject to the Basel III Rule as described below.

Not only did the Basel III Rule increase most of the required minimum capital ratios in effect prior to January 1, 2015, but in requiring that forms of capital be of higher quality to absorb loss, it also introduced the concept of Common Equity Tier 1 Capital, which consists primarily of common stock, related surplus, retained earnings, and Common Equity Tier 1 minority interests subject to certain regulatory adjustments.The Basel III Rule also changed the definition of capital by establishing more stringent criteria that instruments must meet to be considered Additional Tier 1 Capital (primarily non-cumulative perpetual preferred stock that meets certain requirements) and Tier 2 Capital (primarily other types of preferred stock and subordinated debt, subject to limitations).The Basel III Rule also constrained the inclusion of minority interests, mortgage-servicing assets, and deferred tax assets in capital and required deductions from Common Equity Tier 1 Capital in the event that such assets exceeded a percentage of a banking institution’s Common Equity Tier 1 Capital.

The Basel III Rule requires minimum capital ratios as follows:

•A ratio of minimum Common Equity Tier 1 Capital equal to 4.5% of risk-weighted assets;

•A ratio of minimum Tier 1 Capital equal to 6% of risk-weighted assets;

•A continuation of the minimum required amount of Total Capital (Tier 1 plus Tier 2) at 8% of risk-weighted assets; and

•A minimum leverage ratio of Tier 1 Capital to total quarterly average assets equal to 4% in all circumstances.

In addition, institutions that seek the freedom to make capital distributions (including for dividends and repurchases of stock) and pay discretionary bonuses to executive officers without restriction must also maintain 2.5% in Common Equity Tier 1 Capital attributable to a capital conservation buffer. The purpose of the conservation buffer is to ensure that banking institutions maintain a buffer of capital that can be used to absorb losses during periods of financial and economic stress. Factoring in the conservation buffer increases the minimum ratios depicted above to 7.0% for Common Equity Tier 1 Capital, 8.5% for Tier 1 Capital and 10.5% for Total Capital. Federal bank regulators released a joint statement in response to the COVID-19 pandemic reminding the industry that capital and liquidity buffers were meant to give banks the means to support the economy in adverse situations, and that the agencies would support banks that use the buffers for that purpose if undertaken in a safe and sound manner.

Well-Capitalized Requirements. The ratios described above are minimum standards in order for banking organizations to be considered “adequately capitalized.” Bank regulatory agencies uniformly encourage banks to hold more capital and be “well capitalized” and, to that end, federal law and regulations provide various incentives for banking organizations to maintain regulatory capital at levels in excess of minimum regulatory requirements. For example, a banking organization that is “well capitalized” may: (i) qualify for exemptions from prior notice or application requirements otherwise applicable to certain types of activities; (ii) qualify for expedited processing of other required notices or applications; and (iii) accept, rollover or renew brokered deposits. Higher capital levels could also be required if warranted by the particular circumstances or risk profiles of individual banking organizations. For example, the Federal Reserve’s capital guidelines contemplate that additional capital may be required to take adequate account of, among other things, interest rate risk, or the risks posed by concentrations of credit, nontraditional activities, or securities trading activities. Further, any banking organization experiencing or anticipating significant growth would be expected to maintain capital ratios, including tangible capital positions (i.e., Tier 1 Capital less all intangible assets), well above the minimum levels.

Under the capital regulations of the FDIC and Federal Reserve, in order to be well capitalized, a banking organization must maintain:

•A Common Equity Tier 1 Capital ratio to risk-weighted assets of 6.5% or more;

•A ratio of Tier 1 Capital to total risk-weighted assets of 8.0% or more;

•A ratio of Total Capital to total risk-weighted assets of 10.0% or more; and

•A leverage ratio of Tier 1 Capital to total adjusted average quarterly assets of 5.0% or greater.

It is possible under the Basel III Rule to be well capitalized while remaining out of compliance with the capital conservation buffer discussed above.

5

As of December 31, 2021, the Bank was not subject to a directive from the FDIC to increase its capital and was well capitalized, as defined by FDIC regulations. As of December 31, 2021, the Company had regulatory capital in excess of the Federal Reserve’s requirements and met the requirements to be well capitalized. The Company was also in compliance with the capital conservation buffer.

Prompt Corrective Action. The concept of an institution being “well capitalized” is part of a regulatory enforcement regime that provides the federal banking regulators with broad power to take “prompt corrective action” to resolve the problems of depository institutions based on the capital level of each particular institution. The extent of the regulators’ powers depends on whether the institution in question is “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” or “critically undercapitalized,” in each case as defined by regulation. Depending upon the capital category to which an institution is assigned, the regulators’ corrective powers include: (i) requiring the institution to submit a capital restoration plan; (ii) limiting the institution’s asset growth and restricting its activities; (iii) requiring the institution to issue additional capital stock (including additional voting stock) or to sell itself; (iv) restricting transactions between the institution and its affiliates; (v) restricting the interest rate that the institution may pay on deposits; (vi) ordering a new election of directors of the institution; (vii) requiring that senior executive officers or directors be dismissed; (viii) prohibiting the institution from accepting deposits from correspondent banks; (ix) requiring the institution to divest certain subsidiaries; (x) prohibiting the payment of principal or interest on subordinated debt; and (xi) ultimately, appointing a receiver for the institution.

Community Bank Leverage Ratio Framework. In response to industry complaints concerning the regulatory burdens imposed on community banks by certain aspects of the Basel III Rule, the U.S. Congress, as part of the 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act, authorized an optional, simplified measure of capital adequacy, the “Community Bank Leverage Ratio” (“CBLR”) framework, for qualifying community banking organizations like the Company with less than $10 billion in total consolidated assets. The federal banking agencies jointly adopted a rulemaking effective January 1, 2020, that implemented this alternative approach to measuring capital. Qualifying institutions must have a leverage ratio greater than 9%, off balance sheet exposures of 25% or less of total consolidated assets, and trading assets and liabilities of 5% or less of total consolidated assets. Banks that opt in to the rule are not required to calculate or report risk-based capital and are deemed to have met the well-capitalized ratio requirement. In response to the COVID-19 pandemic, the banking agencies temporarily lowered the qualifying leverage ratio to 8% in the second quarter of 2020, which then rose to 8.5% for calendar year 2021 and 9% thereafter. The Company has not opted in to the CBLR capital framework.

Holding Company Regulation

General. The Company is a registered bank holding company under the Bank Holding Company Act of 1956 (the “BHCA”) and, as such, is subject to regulation, supervision, examination and enforcement by the Federal Reserve. Under the BHCA, the Company is required to file with the Federal Reserve periodic reports of its operations and such additional information regarding the Company and Bank as the Federal Reserve may require. In addition, the Federal Reserve has the authority to issue orders to bank holding companies to cease and desist from unsafe or unsound banking practices and from violations of conditions imposed by, or violations of agreements with, the Federal Reserve. The Federal Reserve is also empowered, among other things, to assess civil money penalties against companies or individuals who violate Federal Reserve orders or regulations, to order termination of nonbanking activities of bank holding companies and to order termination of ownership and control of a nonbanking subsidiary by a bank holding company.

Activities, Acquisitions, and Changes in Control. Under the BHCA, our activities are limited to businesses so closely related to banking or managing or controlling banks as to be a proper incident thereto, as determined by the Federal Reserve. We have not filed an election with the Federal Reserve to be treated as a “financial holding company,” a type of holding company that can engage in a wider range of nonbanking activities, such as certain insurance and securities-related activities, that are not permitted for a bank holding company. The BHCA also requires a bank holding company to obtain approval from the Federal Reserve before (i) acquiring or holding more than a 5% voting interest in any bank or bank holding company, (ii) acquiring all or substantially all of the assets of another bank or bank holding company or (iii) merging or consolidating with another bank holding company. Federal law also prohibits any person or company from acquiring “control” of an FDIC-insured depository institution or its holding company without prior notice to the appropriate federal bank regulator. “Control” is conclusively presumed to exist upon the acquisition of 25% or more of the outstanding voting securities of a bank or bank holding company, but may arise under certain circumstances between 10% and 24.99% ownership.

Bank mergers and acquisitions generally will require the approval of the regulatory authorities of each banking organization. In determining whether to approve a proposed bank acquisition, federal bank regulators will consider, among other factors, the effect of the acquisition on competition, public benefits expected to be generated by the acquisition, post-acquisition capital levels, and CRA performance. The federal banking regulators are also required to take into account the effectiveness of the Bank Secrecy Act/anti-money laundering activities of the applicant. Federal regulatory policy relating to the

6

approval of proposed mergers and acquisitions is currently under review. In July 2021, President Biden issued an Executive Order on Promoting Competition in the American Economy that, among other initiatives, calls upon the federal banking agencies to review their current merger approval practices under the BHCA and the Bank Merger Act, and adopt a plan for the revitalization of such practices. In February 2022, Acting FDIC Chairman Gruenberg announced that the agency’s priorities include a comprehensive review of the process of considering and evaluating bank mergers, something the FDIC indicated had not been done in 25 years.

Holding Company Dividends. The Company’s ability to pay dividends to shareholders will be impacted both by general corporate law considerations and policies of the Federal Reserve applicable to bank holding companies. It may also be impacted by the ability of the Bank to pay dividends to the Company, discussed under “Bank Regulation—Dividends” below. As an Indiana corporation, the Company is subject to the Indiana Business Corporation Law, as amended, which prohibits the Company from paying a dividend if, after giving effect to the dividend, the Company would not be able to pay its debts as they become due in the usual course of business, or if the Company’s total assets would be less than the sum of its total liabilities plus the amount that would be needed, if the corporation were to be dissolved at the time of the distribution, to satisfy the preferential rights upon dissolution of shareholders whose preferential rights are superior to those receiving the distribution.

The Federal Reserve has indicated that the board of directors of a bank holding company should eliminate, defer or significantly reduce dividends to shareholders if: (i) the company’s net income available to shareholders for the past four quarters, net of dividends previously paid during that period, is not sufficient to fully fund the dividends; (ii) the prospective rate of earnings retention is inconsistent with the Company’s capital needs and overall current and prospective financial condition; or (iii) the company will not meet, or is in danger of not meeting, its minimum regulatory capital adequacy ratios. The Federal Reserve possesses enforcement powers to prevent or remedy actions that represent unsafe or unsound practices or violations of applicable statutes or regulations. Among those powers is the ability to restrict the payment of dividends. In addition, under the Basel III Rule, institutions that seek the freedom to pay dividends have to maintain 2.5% in Common Equity Tier 1 Capital attributable to the capital conservation buffer. See “Regulatory Capital” above.

Source of Strength. Under the Dodd-Frank Act, we are required to serve as a source of financial and managerial strength for the Bank and to commit resources to support it in circumstances where we might not otherwise do so, in the event of the financial distress of the Bank. This provision codified the longstanding policy of the Federal Reserve. In addition, any capital loans by a bank holding company to any of its depository subsidiaries are subordinate to the payment of deposits and to certain other indebtedness. In the event of a bank holding company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a depository subsidiary will be assumed by the bankruptcy trustee and entitled to a priority of payment.

Employee Incentive Compensation. Under regulatory guidance applying to all banking organizations, incentive compensation policies must be consistent with safety and soundness principles. Under this guidance, banking organizations must review their compensation programs to ensure that they: (i) provide employees with incentives that appropriately balance risk and reward and that do not encourage imprudent risk, (ii) are compatible with effective controls and risk management, and (iii) are supported by strong corporate governance, including active and effective oversight by the banking organization's board of directors. Monitoring methods and processes used by a banking organization should be commensurate with the size and complexity of the organization and its use of incentive compensation.

The Dodd-Frank Act requires the federal banking agencies and the SEC to adopt joint rules or guidelines for banking organizations with assets exceeding $1 billion to prohibit incentive-based employment compensation arrangements that encourage institutions to take inappropriate risks by providing compensation that is excessive or could lead to material financial loss. Such rules have been proposed but have not yet been adopted. In October 2021, the SEC signaled a possible interest in this initiative by reopening the comment period on a proposed rule issued in 2015 regarding the recovery of erroneously awarded executive compensation (sometimes referred to as “clawback”) under certain circumstances.

Bank Regulation

General. The Bank is an Indiana-chartered bank formed pursuant to the Indiana Financial Institutions Act (the “IFIA”). As such, the Bank is regularly examined by and subject to regulations promulgated by the DFI and the FDIC as its primary federal bank regulator. The Bank is not a member of the Federal Reserve System.

Business Activities. The Bank derives its lending and investment powers from the IFIA, the Federal Deposit Insurance Act (the “FDIA”) and related regulations.

7

Loans-to-One Borrower Limitations. Generally, the Bank’s total loans or extensions of credit to a single borrower, including the borrower’s related entities, outstanding at one time, and not fully secured, cannot exceed 15% of the Bank’s unimpaired capital and surplus. If the loans or extensions of credit are fully secured by readily marketable collateral, the Bank may lend up to an additional 10% of its unimpaired capital and surplus.

Community Reinvestment Act. Under the CRA, as implemented by FDIC regulations, the Bank has a continuing and affirmative obligation, consistent with safe and sound banking practices, to help meet the credit needs of its entire community, including low and moderate-income neighborhoods. The CRA does not establish specific lending requirements or programs for financial institutions nor does it limit an institution’s discretion to develop the types of products and services that it believes are best suited to its particular community, consistent with the CRA. The CRA requires the FDIC, in connection with its examinations of the Bank, to assess the Bank’s record of meeting the credit needs of its entire community and to take that record into account in evaluating certain applications for regulatory approvals that we may file with the FDIC.

Due to its online-driven model and nationwide banking platform, the Bank has opted to operate under a CRA Strategic Plan, which sets forth certain guidelines the Bank must meet. The Bank's current CRA Strategic Plan covers the time period of January 1, 2021 through December 31, 2023. The Bank received a “Satisfactory” CRA rating in its most recent CRA examination. Failure of an institution to receive at least a “Satisfactory” rating could inhibit such institution or its holding company from engaging in certain activities or pursuing acquisitions of other financial institutions.

In a joint statement responding to the COVID-19 pandemic, bank regulatory agencies announced favorable CRA consideration for banks providing retail banking services and lending activities in their assessment areas, consistent with safe and sound banking practices, that are responsive to the needs of low- and moderate-income individuals, small businesses, and small farms affected by the pandemic. Those activities include waiving certain fees, easing restrictions on out-of-state and non-customer checks, expanding credit products, increasing credit limits for creditworthy borrowers, providing alternative service options, and offering prudent payment accommodations. The joint statement also provided favorable CRA consideration for certain pandemic-related community development activities.

The federal banking agencies are currently working on a comprehensive review and revision of the rule implementing the CRA that is intended to strengthen and enhance the CRA. FDIC Acting Chairman Gruenberg announced in February 2022 that revision of the CRA will be a top priority for the FDIC.

Transactions with Affiliates. The authority of the Bank, like other FDIC-insured institutions, to engage in transactions with its “affiliates” is limited by Sections 23A and 23B of the Federal Reserve Act and the Federal Reserve’s Regulation W. An “affiliate” for this purpose is defined generally as any company that owns or controls the Bank or is under common ownership or control with the Bank, but excludes a company controlled by a bank. In general, transactions between the Bank and its affiliates must be on terms that are consistent with safe and sound banking practices and at least as favorable to the Bank as comparable transactions between the Bank and non-affiliates. In addition, covered transactions with affiliates are restricted individually to 10% and in the aggregate to 20% of the Bank’s capital. Collateral ranging from 100% to 130% of the loan amount depending on the quality of the collateral must be provided for an affiliate to secure a loan or other extension of credit from the Bank. The Company is an “affiliate” of the Bank for purposes of Regulation W and Sections 23A and 23B of the Federal Reserve Act. We believe the Bank complied with these provisions during 2021.

Loans to and Other Transactions with Insiders. The Bank’s authority to extend credit to its directors, executive officers and principal shareholders, as well as to entities controlled by such persons (“Related Interests”), is governed by Sections 22(g) and 22(h) of the Federal Reserve Act and Regulation O of the Federal Reserve. Among other things, these provisions require that extensions of credit to insiders: (1) be made on terms that are substantially the same as, and follow credit underwriting procedures that are not less stringent than, those prevailing for comparable transactions with unaffiliated persons and that do not involve more than the normal risk of repayment or present other unfavorable features; and (2) not exceed certain limitations on the amount of credit extended to such persons, individually and in the aggregate, which limits are based, in part, on the amount of the Bank’s capital. In addition, extensions of credit in excess of certain limits must be approved in advance by the Bank’s Board of Directors. Further, provisions of the Dodd-Frank Act require that any sale or purchase of an asset by the Bank with an insider must be on market terms, and if the transaction represents more than 10% of the Bank’s capital stock and surplus, it must be approved in advance by a majority of the disinterested directors of the Bank. We believe the Bank is in compliance with these provisions.

Enforcement. The DFI and the FDIC share primary regulatory enforcement responsibility over the Bank and its institution-affiliated parties, including directors, officers and employees. This enforcement authority includes, among other things, the ability to appoint a conservator or receiver for the Bank, to assess civil money penalties, to issue cease and desist orders, to seek judicial enforcement of administrative orders and to remove directors and officers from office and bar them from

8

further participation in banking. In general, these enforcement actions may be initiated in response to violations of laws, regulations and administrative orders, as well as in response to unsafe or unsound banking practices or conditions.

Standards for Safety and Soundness. Pursuant to the FDIA, the federal banking agencies have adopted a set of guidelines prescribing safety and soundness standards. These guidelines establish general standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines. We believe we are in compliance with the safety and soundness guidelines.

Dividends. The ability of the Bank to pay dividends is limited by state and federal laws and regulations, including the requirement for the Bank to obtain the prior approval of the DFI before paying a dividend that, together with other dividends it has paid during a calendar year, would exceed the sum of its net income for the year to date combined with its retained net income for the previous two years. The ability of the Bank to pay dividends is further affected by the requirement to maintain adequate capital pursuant to applicable capital adequacy guidelines and regulations, and it is generally prohibited from paying any dividends if, following payment thereof, it would be undercapitalized. Notwithstanding the availability of funds for dividends, the FDIC and the DFI may prohibit the payment of dividends by the Bank if either or both determine such payment would constitute an unsafe or unsound practice. In addition, under the Basel III Rule, institutions that seek the freedom to pay dividends have to maintain 2.5% in Common Equity Tier 1 Capital attributable to the capital conservation buffer.

Insurance of Deposit Accounts. The Bank is a member of the Deposit Insurance Fund (“DIF”), which is administered by the FDIC. All deposit accounts at the Bank are insured by the FDIC up to a maximum of $250,000 per depositor. Under the FDIA, the FDIC may terminate deposit insurance upon a finding that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC.

Liquidity. The Bank is required to maintain a sufficient amount of liquid assets to ensure its safe and sound operation. To fund its operations, the Bank historically has relied upon deposits, Federal Home Loan Bank of Indianapolis (“FHLB”) borrowings, Fed Funds lines with correspondent banks and brokered deposits. The FDIA and FDIC regulations limit the ability of banks to accept, renew, or roll over brokered deposits unless the institution is well capitalized. The FDIC may grant a waiver to permit a less than well capitalized bank to hold brokered deposits, but limitations on the rates paid on such deposits will apply, and the bank may also be required to pay a higher deposit insurance assessment on such deposits. The Bank believes it has sufficient liquidity to meet its funding obligations for at least the next twelve months.

Federal Home Loan Bank System. The Bank is a member of the FHLB, which is one of the regional Federal Home Loan Banks comprising the Federal Home Loan Bank System. Each Federal Home Loan Bank serves as a central credit facility primarily for its member institutions. The Bank, as a member of the FHLB, is required to acquire and hold shares of FHLB capital stock. While the required percentage of stock ownership is subject to change by the FHLB, the Bank is in compliance with this requirement with an investment in FHLB stock at December 31, 2021 of $25.7 million. Any advances from the FHLB must be secured by specified types of collateral, and long-term advances may be used for the purpose of providing funds to make residential mortgage or commercial loans and to purchase investments. Long-term advances may also be used to help alleviate interest rate risk for asset and liability management purposes. The Bank receives dividends on its FHLB stock.

Federal Reserve System. Although the Bank is not a member of the Federal Reserve System, it is subject to provisions of the Federal Reserve Act and the Federal Reserve’s regulations under which depository institutions may be required to maintain reserves against their deposit accounts and certain other liabilities. In March 2020, the Federal Reserve announced that the banking system had ample reserves and, as reserve requirements no longer played a significant role in this regime, it reduced all reserve tranches to zero percent, thereby freeing banks from the reserve maintenance requirement. This action permits the Bank to loan or invest funds that were previously unavailable. The Federal Reserve has indicated that it currently has no plans to reimpose reserve requirements but that it may impose such a requirement in the future if conditions warrant.

Anti-Money Laundering and the Bank Secrecy Act. Under the Bank Secrecy Act (the “BSA”), a financial institution is required to have systems in place to detect and report transactions of a certain size and nature. Financial institutions are generally required to report to the U.S. Treasury any cash transactions involving more than $10,000. In addition, financial institutions are required to file suspicious activity reports for transactions that involve more than $5,000 and which the financial institution knows, suspects or has reason to suspect involves illegal funds, is designed to evade the requirements of the BSA or has no lawful purpose. The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (the “USA PATRIOT Act”), which amended the BSA, is designed to deny terrorists and others the ability to obtain anonymous access to the U.S. financial system. The USA PATRIOT Act has significant implications for

9

financial institutions and businesses of other types involved in the transfer of money. The USA PATRIOT Act, in conjunction with the implementation of various federal regulatory agency regulations, has caused financial institutions, such as the Bank, to adopt and implement additional policies or amend existing policies and procedures with respect to, among other things, anti-money laundering compliance, suspicious activity, currency transaction reporting, customer identity verification and customer risk analysis. Bank regulators regularly examine institutions for compliance with these obligations, and may impose “cease and desist” orders and civil money penalty sanctions on institutions determined to be in violation of these obligations.

In January 2021, the Anti-Money Laundering Act of 2020 (the “AMLA”), which amends the BSA, was enacted. The AMLA is intended to comprehensively reform and modernize U.S. anti-money laundering laws. Among other things, the AMLA codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the development of standards by the U.S. Treasury for evaluating technology and internal processes for BSA compliance; and expands enforcement- and investigation-related authority, including a significant expansion in the available sanctions for certain BSA violations and enhanced whistleblower provisions permitting monetary awards to persons who provide information that leads to successful enforcement of certain violations. Many of the statutory provisions in the AMLA will require additional rulemaking, reports and other measures, and the impact of the AMLA will depend on, among other things, rulemaking and implementation guidance.

The United States has imposed economic sanctions that affect transactions with designated foreign countries, nationals and others. These sanctions, which are administered by the U.S. Treasury Office of Foreign Assets Control (“OFAC”), take many different forms. Generally, however, they contain one or more of the following elements: (1) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on “U.S. persons” engaging in financial transactions relating to making investments in, or providing investment-related advice or assistance to, a sanctioned country; and (2) blocking of assets in which the government or specially designated nationals of the sanctioned country have an interest by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (for example, property and bank deposits) cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC. Failure to comply with these sanctions can give rise to serious legal and reputational consequences.

Consumer Protection Laws. The Bank is subject to a number of federal and state laws designed to protect consumers and prohibit unfair or deceptive business practices. These laws include the Equal Credit Opportunity Act, Fair Housing Act, Homeowners Protection Act, Fair Credit Reporting Act, as amended by the Fair and Accurate Credit Transactions Act of 2003 (the “FACT Act”), the Gramm-Leach-Bliley Act (the “GLBA”), the Truth in Lending Act, the CRA, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, the National Flood Insurance Act, the Service Members Civil Relief Act, the Expedited Funds Availability Act, the Electronic Fund Transfer Act, the Truth in Savings Act, the Right to Financial Privacy Act, laws relating to unfair, deceptive and abusive acts and practices, and various state laws such as usury laws, or laws which are counterparts and/or extensions of the foregoing federal laws. These laws and regulations mandate certain disclosure requirements and regulate the manner in which financial institutions must interact with customers when taking deposits, making loans, collecting loans and providing other services. Further, the Dodd-Frank Act established the CFPB as an independent agency within the Federal Reserve System. The CFPB has the exclusive authority to administer, enforce, and otherwise implement federal consumer financial laws, which includes the power to make rules, issue orders, and issue guidance governing the provision of consumer financial products and services. The CFPB also has a broad mandate to prohibit unfair or deceptive acts and practices and is specifically empowered to require certain disclosures to consumers and draft model disclosure forms. Failure to comply with consumer protection laws and regulations can subject financial institutions to enforcement actions, fines and other penalties. In recent years, state authorities have also increased their attention to the enforcement of consumer protection rules, and in some cases, states are permitted to adopt and enforce consumer protection laws and regulations that are stricter than those issued or enforced by the CFPB. The CFPB has exclusive federal consumer law supervisory authority and primary enforcement authority over insured depository institutions with assets totaling over $10 billion. Authority for institutions with $10 billion or less rests with the prudential regulator, and in the case of the Bank lies with the FDIC.

Residential Mortgage Restrictions. The Dodd-Frank Act initiated a number of significant residential mortgage lending reforms that have taken place in recent years. These reforms include standards that mortgage lenders must consider before making a residential mortgage loan, including verifying a borrower’s ability to repay such mortgage loan. Borrowers are also allowed to assert violations of certain provisions of the Truth-in-Lending Act as a defense to foreclosure proceedings. Prepayment penalties are prohibited for certain mortgage transactions and creditors are prohibited from financing insurance policies in connection with a residential mortgage loan or home equity line of credit. Mortgage lenders are required to make additional disclosures prior to the extension of credit, in each billing statement and for negative amortization loans and hybrid adjustable rate mortgages. Additionally, mortgage originators are prohibited from receiving compensation based on the terms of residential mortgage loans and are subject to limitations on their ability to be compensated by others if compensation is received from a consumer.

10

Customer Information Security. The federal banking agencies have adopted final guidelines for establishing standards for safeguarding nonpublic personal information about customers. These guidelines implement provisions of the GLBA. Specifically, the Information Security Guidelines established by the GLBA require each financial institution, under the supervision and ongoing oversight of its board of directors or an appropriate committee thereof, to develop, implement and maintain a comprehensive written information security program designed to ensure the security and confidentiality of customer information (as defined under the GLBA), to protect against anticipated threats or hazards to the security or integrity of such information and to protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer. The federal banking regulators have issued guidance for banks on response programs for unauthorized access to customer information. This guidance, among other things, requires notice to be sent to customers whose “sensitive information” has been compromised if misuse of this information is “reasonably possible.”

Identity Theft Red Flags. Rules implementing Section 114 of the FACT Act require each financial institution or creditor to develop and implement a written Identity Theft Prevention Program to detect, prevent and mitigate identity theft in connection with the opening of certain accounts or certain existing accounts. In addition, the federal banking agencies issued guidelines to assist financial institutions and creditors in the formulation and maintenance of an Identity Theft Prevention Program that satisfies the requirements of the rules. Rules implementing Section 114 of the FACT Act also require credit and debit card issuers to assess the validity of notifications of changes of address under certain circumstances. Additionally, the federal banking agencies issued joint rules under Section 315 of the FACT Act that provide guidance regarding reasonable policies and procedures that a user of consumer reports must employ when a consumer reporting agency sends the user a notice of address discrepancy.

Privacy. The GLBA requires financial institutions to implement policies and procedures regarding the disclosure of nonpublic personal information about consumers to nonaffiliated third parties. In general, the statute requires financial institutions to explain to consumers their policies and procedures regarding the disclosure of such nonpublic personal information and, except as otherwise required or permitted by law, financial institutions are prohibited from disclosing such information except as provided in their policies and procedures. The Bank is required to provide notice to its customers on an annual basis disclosing its policies and procedures on the sharing of nonpublic personal information. From time to time, Congress and state legislatures consider additional legislation relating to privacy and other aspects of consumer information that could have an impact on our business, financial condition or results of operations.

A number of U.S. states have also enacted data privacy and security laws and regulations that govern the collection, use, disclosure, transfer, storage, disposal and protection of personal information, such as social security numbers, financial information and other information. These laws and regulations may be more restrictive and not preempted by U.S. federal laws.For example, several U.S. territories and all 50 states now have data breach laws that require timely notification to individuals, and at times regulators, the media or credit reporting agencies, if a company has experienced the unauthorized access or acquisition of personal information.Other state laws include the California Consumer Privacy Act (“CCPA”), which took effect on January 1, 2020. The CCPA, among other things, contains new disclosure obligations for businesses that collect personal information about California residents and affords those individuals numerous rights relating to their personal information that may affect our ability to use personal information or share it with our business partners.

A second law called the California Privacy Rights Act (“CPRA”), which goes into effect in 2023, expands the scope of the CCPA, imposes new restrictions on behavioral advertising, and establishes a new California Privacy Protection Agency which will enforce the law and issue regulations. Similar laws were enacted in Virginia and Colorado in 2021 and go into effect in 2023, and other states have considered and are actively considering legislation along the same lines. We will continue to monitor and assess the impact of these state laws, which may impose substantial penalties for violations, impose significant costs for investigation and compliance, allow private class-action litigation and carry significant potential liability for our business.

Cybersecurity. In 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish lines of defense and ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing digital-based services of the financial institution. The other statement indicates that a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption, and maintenance of the institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to this type of cyber-attack. If we fail to observe the regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties.

11

In November 2021, the federal banking agencies published a final rule establishing computer-security incident notification requirements that require a banking organization to notify its primary federal regulator of any “computer security incident” that rises to the level of a “notification incident” as soon as possible and no later than 36 hours after determining that such an incident has occurred. The rule also requires a bank service provider to notify each affected banking organization customer as soon as possible when the service provider determines it has experienced a computer security incident that has caused, or is reasonably likely to cause, a material service disruption or degradation for four or more hours.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. For example, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many states have also recently implemented or modified their data breach notification and data privacy requirements. We expect this trend of increased activity and changes at the state level to continue.

In 2018, the SEC published interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents. These SEC guidelines, and any other regulatory guidance, are in addition to notification and disclosure requirements under state and federal banking law and regulations.

In support of our digital banking platform, we rely heavily on electronic communications and information systems to conduct our operations and store sensitive data. We employ an in-depth approach that leverages people, processes, and technology to manage and maintain cybersecurity controls. In addition, we employ a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity, as well as to report on any suspected advanced persistent threats. Notwithstanding the strength of our defensive measures, the threat from cyber-attacks is severe, attacks are sophisticated and increasing in volume, and attackers respond rapidly to changes in defensive measures.

We continually strive to enhance our cyber and information security in order to be resilient against emerging threats and improve our ability to detect and respond to attempts to gain unauthorized access to our data and systems. We regularly conduct cybersecurity risk assessments, regularly engage with the Board or appropriate committees on cybersecurity matters, routinely update our incident response plans based on emerging threats, periodically practice implementation of incident response plans across applicable departments, and train officers and employees to detect and report suspicious activity. Although to date we have not experienced any material losses relating to cyber-attacks or other information security breaches, our systems and those of our customers and third-party service providers are under constant threat, and it is possible that we could experience a significant event in the future due to the rapidly evolving nature and sophistication of these threats.

Climate-Related Risk Management and Regulation.In recent years, the federal banking agencies and the SEC have increased their focus on climate-related risks impacting the operation of banks, the communities they serve and the financial system as a whole. Proposals related to climate-related financial and other risks impacting banks are being considered at both the federal and state level. It is too early to predict to what extent legislative and regulatory proposals will impact community banking organizations such as the Company and the Bank, but we will continue to monitor these developments and the steps that will need to be taken to address any new requirements.

Available Information

The Company makes available its Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and all amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), free of charge on its website at www.firstinternetbancorp.com as soon as reasonably practicable after we electronically file such material with or furnish it to the SEC. In addition, the SEC maintains an internet site at www.sec.gov that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC.

Item 1A. Risk Factors

Risk factors which could cause actual results to differ from our expectations and which could negatively impact our financial condition and results of operations are discussed below and elsewhere in this report. Additional risks and uncertainties not presently known to us or that are currently not believed to be significant to our business may also affect our actual results and could harm our business, financial condition and results of operations. If any of the risks or uncertainties

12

described below or any additional risks and uncertainties actually occur, our business, results of operations and financial condition could be materially and adversely affected.

Business, Strategic, and Reputational Risks

A failure of, or interruption in, the communications and information systems on which we rely to conduct our business could adversely affect our revenues and profitability.

We rely heavily upon communications and information systems to conduct our business. Although we have built a level of redundancy into our information technology infrastructure and update our business continuity plan annually, any failure or interruption of our information systems, or the third-party information systems on which we rely, as a result of inadequate or failed processes or systems, human errors or external events, could adversely affect our digital-based operations and slow or temporarily halt the processing of applications, loan servicing, deposit-related transactions, and our general banking operations. In addition, our communication and information systems may present security risks and could be susceptible to hacking or other unauthorized access. The occurrence of any of these events could have a material adverse effect on our business, financial condition and results of operations.

Weakness in the economy may disproportionately and materially adversely affect our business and results of operations.

Any economic downturn could result in financial stress on our borrowers that would adversely affect consumer confidence, a reduction in general business activity and increased market volatility. The resulting economic pressure on consumers and businesses and the lack of confidence in the financial markets could adversely affect our business, financial condition, results of operations and stock price. Our ability to properly assess the creditworthiness of our customers and to estimate the losses inherent in our credit exposure would be made more complex by difficult market and economic conditions. Accordingly, if market conditions worsen, we may experience increases in foreclosures, delinquencies, write-offs and customer bankruptcies, as well as more restricted access to funds.

The competitive nature of the banking and financial services industry could negatively affect our ability to increase or maintain our market share and retain long-term profitability.

Competition in the banking and financial services industry is strong. We compete with commercial banks, savings institutions, mortgage brokerage firms, credit unions, finance companies, fintechs, mutual funds, insurance companies and securities brokerage and investment banking firms operating locally and nationwide. Some of our competitors have greater name recognition and market presence than we do and offer certain services that we do not or cannot provide. In addition, larger competitors may be able to price loans and deposits more aggressively than we do, which could affect our ability to increase our market share and remain profitable on a long-term basis.

In 2018, the Office of the Comptroller of the Currency announced that it would begin to accept and evaluate charters for entities that wanted to conduct certain components of a banking business pursuant to a federal charter, known as a “special purpose national bank” (“SPNB”) charter. Intended to promote economic opportunity and spur financial innovation, SPNBs may engage in any of the following activities: paying checks, lending money, or taking deposits. If any such applications are granted, recipients of an SPNB charter may enter the U.S. payments market in which the Bank operates, which could have a material adverse effect on the Bank and certain of its business lines.

Reputational risk and social factors may negatively affect us.

Our ability to attract and retain customers is highly dependent upon other external perceptions of our business practices and financial condition. Adverse perceptions could damage our reputation to a level that could lead to difficulties in generating and maintaining lending and deposit relationships and accessing equity or credit markets, as well as increased regulatory scrutiny of our business.Adverse developments or perceptions regarding the business practices or financial condition of our competitors, or our industry as a whole, may also indirectly adversely affect our reputation.

In addition, adverse reputational developments with respect to third parties with whom we have important relationships may negatively affect our reputation. All of the above factors may result in greater regulatory and/or legislative scrutiny, which may lead to laws or regulations that may change or constrain the manner in which we engage with our customers and the products we offer and may also increase our litigation risk. If these risks were to materialize, they could negatively affect our business, financial condition and results of operations.

13

We have and expect to incur substantial costs related to the merger with First Century (the “merger”) and integration.

We have incurred and expect to incur a number of non-recurring costs associated with the merger. These costs include legal, financial advisory, accounting, consulting and other advisory fees, retention, severance and employee benefit-related costs, regulatory fees, closing, integration and other related costs. Some of these costs are payable regardless of whether or not the merger is completed.

The merger may be more difficult, costly, or time-consuming than expected, and we may not realize the anticipated benefits of the merger.

The anticipated benefits of the merger, including revenue diversification and growth, may not be realized fully or at all or may take longer to realize than expected and integration may result in additional and unforeseen expenses. An inability to realize the full extent of the anticipated benefits of the merger, as well as any delays encountered in the integration process, could have an adverse effect upon our operating results following the completion of the merger.

In addition, we and First Century have operated and, until the completion of the merger, must continue to operate, independently. It is possible that the integration process could result in the loss of key employees, including employees of First Century, the disruption of each company’s ongoing businesses or inconsistencies in standards, controls, procedures, and policies that adversely affect each company’s ability to maintain relationships with clients, customers, depositors, and employees or to achieve the anticipated benefits of the merger. Integration efforts between the companies may also divert management attention and resources. These integration matters could have an adverse effect on the Company during this transition period and for an undetermined period after completion of the merger.

Regulatory approvals may not be received, may take longer than expected, or may impose conditions that are not presently anticipated or that could have an adverse effect on the Company following the merger.

Before the merger and the merger of First Century Bank, N.A. into the Bank may be completed, various approvals, consents, and non-objections must be obtained from the FDIC, the Federal Reserve, and other regulatory authorities in the United States. In determining whether to grant these approvals, such regulatory authorities consider a variety of factors, including the regulatory standing of each party. These approvals could be delayed or not obtained at all, including due to an adverse development in either party’s regulatory standing or in any other factors considered by regulators when granting such approvals; governmental, political or community group inquiries, investigations or opposition; or changes in legislation or the political environment generally.

The approvals that are granted may impose terms and conditions, limitations, obligations, or costs, or place restrictions on the conduct of our business or require changes to the terms of the transactions contemplated by the merger agreement. There can be no assurance that regulators will not impose any such conditions, limitations, obligations, or restrictions and that such conditions, limitations, obligations, or restrictions will not have the effect of delaying the completion of any of the transactions contemplated by the merger agreement, imposing additional material costs on or materially limiting our revenues following the merger or otherwise reducing the anticipated benefits of the merger if the merger were consummated successfully within the expected timeframe. In addition, there can be no assurance that any such conditions, terms, obligations, or restrictions will not result in the delay or abandonment of the merger.

Failure to complete the merger could negatively impact the Company.

If the merger is not completed for any reason, there may be various adverse consequences and we may experience negative reactions from the financial markets and from our customers and employees. Additionally, if the merger agreement is terminated, the market price of our common stock could decline to the extent that current market prices reflect a market assumption that the merger will be beneficial and will be completed. We also could be subject to litigation related to any failure to complete the merger or to perform our obligations under the merger agreement.

We will be subject to business uncertainties and contractual restrictions while the merger is pending.

Uncertainty about the effect of the merger on employees and customers may have an adverse effect on the Company and/or First Century. These uncertainties may impair First Century and/or our ability to attract, retain and motivate key

14

personnel until the merger is completed, and could cause customers and others that deal with First Century and/or the Company to seek to change existing business relationships with First Century and/or the Company.

The merger agreement may be terminated in accordance with its terms and the merger may not be completed.

The merger agreement is subject to a number of conditions which must be fulfilled in order to complete the merger. Those conditions include: (i) approval by First Century shareholders; (ii) the receipt of required regulatory approvals, including the approval of the DFI, the FDIC and the Federal Reserve; and (iii) the absence of any statute, rule, regulation, injunction, order, or decree, which shall have been enacted, entered, promulgated, or enforced, which prohibits, prevents, or makes illegal the completion of the merger, and no material claim, litigation or proceeding shall have been initiated and pending or threatened relating to the merger agreement or the merger or seeking to prevent the completion of the merger. Each party’s obligation to complete the merger is also subject to certain additional customary conditions. These conditions to the closing may not be fulfilled in a timely manner or at all, and, accordingly, the merger may not be completed.

We may not have discovered certain liabilities or other matters related to First Century, which may adversely affect the future financial performance of the combined company.

In the course of the due diligence review that we conducted prior to the execution of the merger agreement, we may not have discovered, or may have been unable to properly quantify, certain liabilities of First Century or other factors that may have an adverse effect on the business, results of operations, financial condition, and cash flows of the combined company after the consummation of the merger.

Our estimates and judgments related to the acquisition accounting methods used to record the purchase price allocation related to the merger may be inaccurate.

Our management will make significant accounting judgments and estimates related to the application of acquisition accounting of the merger under GAAP, as well as the underlying valuation models. Our business, operating results, and financial condition could be materially adversely impacted in future periods if the accounting judgments and estimates prove to be inaccurate.

New lines of business, and new products and services may result in exposure to new risks and the value and earnings related to existing lines of business are subject to market conditions.

The Bank has introduced, and in the future, may introduce new products and services to differing markets either alone or in conjunction with third parties, including programs and products introduced as part of our fintech partnership initiatives. New lines of business, products or services could have a significant impact on the effectiveness of our system of internal controls or the controls of third parties and could reduce our revenues and potentially generate losses. There are material inherent risks and uncertainties associated with offering new products and services, especially when new markets are not fully developed or when the laws and regulations regarding a new product are not mature. New products and services, or entrance into new markets, may require substantial time, resources and capital, and profitability targets may not be achieved. Factors outside of our control, such as developing laws and regulations, regulatory orders, competitive product offerings and changes in commercial and consumer demand for products or services may also materially impact the successful launch and implementation of new products or services. Failure to manage these risks, or failure of any product or service offerings to be successful and profitable, could have a material adverse effect on our financial condition and results of operations.

Significant external events could adversely affect our business and results of operations.

We could experience other external events such as severe weather, natural disasters, acts of war, such as the current conflict in Ukraine, or terrorism or other widespread public health issues or continued circumstances that could impair the ability of our customers to repay outstanding loans; impair the value of collateral, if any, securing outstanding loans; negatively impact our deposit base, loan originations or general demand for our services; cause significant property damage; result in loss of revenue or cause us to incur additional expenses or losses. We could also be adversely affected if key personnel or a significant number of employees were to become unavailable due to external events affecting the places they live. Although we have business continuity plans and other safeguards in place, there is no assurance that such plans and safeguards will completely mitigate the adverse impacts of any significant external event. The occurrence or continuation of any such event could materially adversely impact our business, our ability to provide our services, demand for our services, asset quality, financial condition and results of operations.

15

The COVID-19 pandemic, or other such epidemic, pandemic or outbreak of a highly contagious disease, occurring in the United States or in the geographies in which we conduct operations, could adversely affect our business operations, asset valuations, financial condition and results of operations.

Our business is dependent upon the willingness and ability of our customers to conduct banking and other financial transactions. The COVID-19 pandemic, or outbreak of another highly contagious or infectious disease, could negatively impact the ability of our employees and customers to conduct such transactions and disrupt the business activities and operations of our customers in the geographic areas in which we operate. The spread of the COVID-19 virus had an impact on our operations during fiscal year 2021, and we expect that the virus will continue to have an impact on our business, financial condition and results of operations and those of our customers during 2022. The COVID-19 pandemic has caused changes in the behavior of customers, businesses and their employees, including illness, quarantines, social distancing practices, cancellation of events and travel, business and school shutdowns, reduction in commercial activity and financial transactions, supply chain interruptions, increased unemployment and overall economic and financial market instability. Future effects, including additional actions taken by federal, state, and local governments to contain COVID-19 or treat its impact, are unknown. Any sustained disruption to our operations is likely to negatively impact our financial condition and results of operations. Notwithstanding our contingency and business continuity plans and other safeguards against pandemics or another contagious disease, the spread of COVID-19 could also negatively impact the availability of our personnel who are necessary to conduct our business operations, as well as potentially impact the business and operations of our third party service providers who perform critical services for us. If the response to contain COVID-19, or another highly infectious or contagious disease, is unsuccessful, we could experience a material adverse effect on our business operations, asset valuations, financial condition and results of operations. Material adverse impacts may include all or a combination of allowance for loan losses, income taxes, valuation and impairments of investment securities and goodwill, as well as fair value measurements of derivatives, loans held-for-sale and other real estate owned.

Anti-takeover provisions could negatively impact our shareholders.

Provisions of Indiana law and provisions of our articles of incorporation could make it more difficult for a third party to acquire control of us or have the effect of discouraging a third party from attempting to acquire control of us. We are subject to certain anti-takeover provisions under the Indiana Business Corporation Law. Additionally, our articles of incorporation authorize our Board of Directors to issue one or more classes or series of preferred stock without shareholder approval and such preferred stock could be issued as a defensive measure in response to a takeover proposal.

Although these provisions do not preclude a takeover, they may have the effect of discouraging, delaying or deferring a tender offer or takeover attempt that a shareholder might consider in his or her best interest, including those attempts that might result in a premium over the market price of our common stock. Such provisions will also render the removal of the Board of Directors and of management more difficult and, therefore, may serve to perpetuate current management. These provisions could potentially adversely affect the market price of our common stock.

Credit Risks

Our commercial loan portfolio exposes us to higher credit risks than residential real estate loans, including risks relating to the success of the underlying business and conditions in the market or the economy and concentrations in our commercial loan portfolio.

Our commercial loans totaled $2.4 billion, or 81.8% of our total loan portfolio. These loans generally involve higher credit risks than residential real estate loans and are dependent upon our lenders maintaining close relationships with the borrowers. Payments on these loans are often dependent upon the successful operation and management of the underlying business or assets, and repayment of such loans may be influenced to a great extent by conditions in the market or the economy. Commercial loans typically involve larger loan balances than residential real estate loans and could lead to concentration risks within our commercial loan portfolio. In addition, our C&I, healthcare finance, franchise finance and small business loans have primarily been extended to small to medium sized businesses that generally have fewer financial resources in terms of capital or borrowing capacity than larger entities.Our failure to manage this commercial loan growth and the related risks could have a material adverse effect on our business, financial condition and results of operations.

In addition, with respect to CRE, federal and state banking regulators are examining CRE lending activity with heightened scrutiny and may require banks with higher levels of CRE loans to implement more stringent underwriting, internal controls, risk management policies and portfolio stress testing, as well as possibly higher levels of allowances for losses and

16

capital levels as a result of CRE lending growth and exposures. Because a significant portion of our loan portfolio is comprised of CRE loans, our banking regulators may require us to maintain higher levels of capital than we would otherwise be expected to maintain, which could limit our ability to leverage our capital and have a material adverse effect on our business, financial condition, results of operations and prospects.

Portions of our commercial lending activities are geographically concentrated in Central Indiana and adjacent markets, and changes in local economic conditions may impact their performance.

We offer our residential mortgage and consumer lending as well as public finance, healthcare finance, franchise finance, small business lending and single tenant financing products and services throughout the United States. However, we serve CRE and C&I borrowers primarily in Central Indiana and adjacent markets. Accordingly, the performance of our CRE and C&I lending depends upon demographic and economic conditions in those regions. The profitability of our CRE and C&I loan portfolio may be impacted by changes in those conditions. Additionally, unfavorable local economic conditions could reduce or limit the growth rate of our CRE and C&I loan portfolios for a significant period of time, or otherwise decrease the ability of those borrowers to repay their loans, which could have a material adverse effect on our business, financial condition and results of operations.

We are subject to risks arising from conditions in the real estate market, as a significant portion of our loans are secured by commercial and residential real estate.

At December 31, 2021, approximately 44.9% of our loans held for investment portfolio was comprised of loans with real estate as the primary component of collateral. Our real estate lending activities, and our exposure to fluctuations in real estate collateral values, are significant and may increase as our assets increase. The market value of real estate can fluctuate significantly in a relatively short period of time as a result of market conditions in the geographic area in which the real estate is located, in response to factors such as economic downturns, changes in the economic health of industries heavily concentrated in a particular area and in response to changes in market interest rates, which influence capitalization rates used to value revenue-generating commercial real estate. If the value of real estate serving as collateral for our loans declines materially, a significant part of our loan portfolio could become under-collateralized and losses incurred upon borrower defaults would increase. Conditions in certain segments of the real estate industry, including homebuilding, lot development and mortgage lending, may have an effect on values of real estate pledged as collateral for our loans. The inability of purchasers of real estate, including residential real estate, to obtain financing may weaken the financial condition of our borrowers who are dependent on the sale or refinancing of property to repay their loans. Changes in the economic health of certain industries can have a significant impact on other sectors or industries which are directly or indirectly associated with those industries, and may impact the value of real estate in areas where such industries are concentrated.

The implementation of CECL, including the design and maintenance of related internal controls over financial reporting, will require a significant amount of time and resources which may have a material impact on our results of operations.

A new accounting standard adopted by FASB, referred to as Current Expected Credit Loss, or (“CECL”), will require financial institutions, like the Bank, to determine periodic estimates of lifetime expected credit losses on loans, and recognize the expected credit losses as allowances for loan and lease losses beginning with our fiscal year ending December 31, 2023.Current GAAP requires an incurred loss methodology for recognizing credit losses that delays recognition until it is probable a loss has been incurred.CECL will represent a significant change in methodology and may greatly increase the types of data we will need to collect and review to determine the appropriate level of the allowance for loan and lease losses.We are in the process of evaluating the impact of the adoption of this guidance on our financial statements.However, the allowance for loan and lease losses may increase upon the adoption of CECL and any such increased allowance level would decrease shareholders' equity and the Company's and Bank's regulatory capital ratios.

A significant amount of time and resources may be needed to implement CECL effectively, including the design and implementation of adequate internal controls, which may adversely affect our results of operations.If we are unable to maintain effective internal control over financial reporting relating to CECL, or otherwise, our ability to report our financial condition and results of operations accurately and on a timely basis could also be adversely affected.

17

Our active participation in the PPP, or in other relief programs, may expose us to credit losses as well as litigation and compliance risk.

To support our customers, businesses, and communities, we have participated in the PPP as a lender. As of December 31, 2021, we had originated 728 loans with balances in excess of $85 million to new and existing customers through the PPP. As of December 31, 2021, only 23 PPP loans, with aggregate outstanding principal balances of $3.15 million, had not been repaid or forgiven. Because of the short timeframe between the passing of the CARES Act and the April 3, 2020 opening of the PPP, there was some ambiguity in the laws, rules and guidance regarding the operation of the program, which exposes the Company to risks relating to noncompliance with the PPP. In addition, since the commencement of the PPP, several other banks have been subject to litigation regarding the process and procedures that such banks followed in accepting and processing applications for the PPP. We may be exposed to the risk of similar litigation. The Bank also has credit risk on PPP loans if a determination is made by the SBA that there is a deficiency in the manner in which the loan was originated, funded, or serviced by the Bank, such as an issue with the eligibility of a borrower to receive a PPP loan, which may or may not be related to the ambiguity in the laws, rules and guidance regarding the operation of the program. In the event of a loss resulting from a default on a PPP loan and a determination by the SBA that there was a deficiency in the manner in which the PPP loan was originated, funded, or serviced by the Corporation, the SBA may deny its liability under the guaranty, reduce the amount of the guaranty, or, if it has already paid under the guaranty, seek recovery of any loss related to the deficiency from the Bank. Any financial liability, litigation costs or reputational damage caused by PPP-related litigation could have a material adverse impact on our business, financial condition and results of operations.

Market, Interest Rate, and Liquidity Risks

The market value of some of our investments could decline and adversely affect our financial position.

In assessing the impairment of investment securities, we consider the length of time and extent to which the fair value has been less than cost, the financial condition and near-term prospects of the issuers, whether the market decline was affected by macroeconomic conditions and whether we have the intent to sell the security or will be required to sell the security before its anticipated recovery. We also use economic models to assist in the valuation of some of our investment securities. If our investment securities experience a decline in value, we would need to determine whether the decline represented an other-than-temporary impairment, in which case we would be required to record a write-down of the investment and a corresponding charge to our earnings.

An increase in interest rates, or the replacement of the London Inter-bank Offered Rate (“LIBOR”) with a benchmark rate that is higher or more volatile than LIBOR, could increase our cost of borrowing and could adversely impact our business, financial condition and results of operations.

In 2017, the Chief Executive of the United Kingdom Financial Conduct Authority (the “Authority”) announced that the Authority intended to stop persuading or compelling banks to submit rates for the calculation of LIBOR to the ICE Benchmark Administration Limited (together with any successor, “IBA”), as administrator of LIBORIn response to concerns regarding the future of LIBOR, Federal Reserve and the Federal Reserve Bank of New York convened the Alternative Reference Rates Committee (“ARRC”) to identify alternatives to LIBOR. The ARRC first recommended a benchmark replacement waterfall that facilitated continued linkage to LIBOR while recognizing that the discontinuation of LIBOR would eventually occur. The initial steps in the ARRC's recommended waterfall referenced variations of the Secured Overnight Financing Rate (“SOFR”), and the ARRC has since recommended SOFR as the replacement rate for U.S. dollar denominated LIBOR. While market participants were warned that LIBOR may cease to exist after 2021, the IBA announced in early 2021 that it would continue to publish the most widely used tenors of U.S. dollar denominated LIBOR (such as one-month and three-month LIBOR) until June 30, 2023. While the IBA's announcement extended LIBOR's phase-out, there is no current expectation that LIBOR will continue beyond mid-2023, and U.S. banking regulators have issued guidance encouraging banking organizations to cease using U.S. dollar denominated LIBOR as a reference rate in new contracts.

At this time, it is not possible to predict whether SOFR will attain market acceptance as the standard replacement for LIBOR, whether alternative reference rates other than SOFR (such as Ameribor) will gain market traction or whether additional reforms to LIBOR may be enacted. Further, other central banks and regulators have convened working groups to evaluate other interest rate benchmarks (such as EURIBOR), and it is possible that a transition away from certain of these interest rate benchmarks will occur leading to the establishment of new market accepted reference rates. Uncertainty regarding the market standard replacement for LIBOR, and floating rate benchmarks generally, could have adverse impacts on floating-rate obligations, loans, deposits, derivatives and other financial instruments that currently use LIBOR as a benchmark rate and adversely affect the Company's business, financial condition or results of operations.

18

Additionally, the floating rate features of our outstanding 6.0% Fixed-to-Floating Rate Subordinated Notes due 2029 (the “2029 Notes”) are based on LIBOR, while the floating rate features of our 3.75% Fixed-to-Floating Rate Subordinated notes due 2031 (the “2031 Notes”) are based on SOFR. In anticipation of LIBOR’s phase out, and the uncertainty of SOFR as a LIBOR replacement, the terms of our 2029 Notes and 2031 Notes provide for a benchmark replacement rate for LIBOR or SOFR, as applicable, with such benchmark replacement rate to be determined by the Company or an independent financial advisor appointed by the Company, as applicable, in each case in accordance with terms of the 2029 Notes and 2031 Notes, respectively. There can be no assurance that any replacement benchmark rate for our 2029 Notes or 2031 Notes will be determined or agreed upon, as applicable, before experiencing adverse effects due to changes in interest rates, if at all. We will continue to monitor the situation and address the potential reference rate changes in future debt obligations that we may incur. Accordingly, the potential effect of the phase-out of LIBOR, or the unavailability of any other interest rate benchmarks such as SOFR or EURIBOR, on our cost of capital cannot yet be determined. Further, the use of an alternative base rate or a benchmark replacement rate as a basis for calculating interest with respect to any outstanding variable rate indebtedness could lead to an increase in the interest we pay and a corresponding increase in our costs of capital or otherwise have a material adverse impact on our business, financial condition or results of operations.

The Bank may not be able to pay us dividends.

The ability of the Bank to pay dividends to us is limited by state and federal law and depends generally on the Bank’s ability to generate net income. If we are unable to comply with applicable provisions of these statutes and regulations, the Bank may not be able to pay dividends to us, we may not be able to pay dividends on our outstanding common stock and our ability to service our debt may be materially impaired.

We may need additional capital resources in the future, and these capital resources may not be available when needed or at all, without which our financial condition, results of operations and prospects could be materially impaired.

In recent years, we have raised additional capital in the public debt and equity markets to support balance sheet growth, refinance existing debt obligations, or explore strategic alternatives which may include additional asset, deposit or revenue generation channels. Our ability to raise future capital, if needed, will depend upon our financial performance and conditions in the capital markets, as well as economic conditions generally. Accordingly, such financing may not be available to us on acceptable terms or at all. If we cannot raise additional capital when needed, it could have a material adverse effect on our business, financial condition and results of operations.

Operational Risks

Because our business is highly dependent on technology that is subject to rapid change and transformation, we are subject to risks of obsolescence.

The Bank conducts its deposit gathering activities and a significant portion of its residential mortgage lending activities through digital channels. The financial services industry is undergoing rapid technological change, and we face constant evolution of customer demand for technology-driven financial and banking products and services. Many of our competitors have substantially greater resources to invest in technological improvement and product development, marketing and implementation. Any failure to successfully keep pace with and fund technological innovation in the markets in which we compete could have a material adverse effect on our business, financial condition and results of operations.

We rely on our management team and could be adversely affected by the unexpected loss of key officers.

Our future success and profitability are substantially dependent upon our management and the abilities of our senior executives. We believe that our future results will also depend in part upon our ability to attract and retain highly skilled and qualified management. Competition for senior personnel is intense, and we may not be successful in attracting and retaining such personnel. Changes in key personnel and their responsibilities may be disruptive to our business and could have a material adverse effect on our business, financial condition and results of operations. In particular, the loss of our chief executive officer could have a material adverse effect on our business, financial condition and results of operations.

19

A failure in or breach of our operational or security systems or infrastructure, or those of our third-party vendors and other service providers, including as a result of cyber-attacks, could disrupt our business and lead to unauthorized disclosure of customers’ personal information, theft or misuse of confidential or proprietary information, damage to our reputation, and increases in our costs or financial losses.

We depend upon our ability to process, record and monitor our client transactions on a continuous basis. As customer, public and regulatory expectations regarding data privacy and information security have increased, our operational systems and infrastructure must continue to be safeguarded and monitored for potential failures, disruptions and breakdowns. Our business, financial, accounting and data processing systems, or other operating systems and facilities, may stop operating properly or become disabled or damaged as a result of a number of factors, including events that are wholly or partially beyond our control. For example, there could be electrical or telecommunications outages; natural disasters such as earthquakes, tornadoes and hurricanes; disease pandemics; events arising from local or larger-scale political or social matters, including terrorist acts; and, as described below, cyber-attacks. Although we have business continuity plans and other safeguards in place, our business operations may be adversely affected by significant and widespread disruption to our physical infrastructure or operating systems that support our business.

Information security risks for financial institutions such as ours have generally increased in recent years in part because of the proliferation of new technologies, the use of digital technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, activists and other external parties. As noted above, our operations rely on the secure processing, transmission and storage of confidential information in our computer systems and networks. Our business relies on our digital technologies, computer and email systems, software and networks to conduct its operations. In addition, to access our products and services, our customers may use smartphones, tablets, personal computers and other mobile devices that are beyond our control systems. Although we have information security procedures and controls in place, our technologies, systems, networks and our customers’ devices may become the target of cyber-attacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of our or our customers’ confidential, proprietary and other information, or otherwise disrupt our or our customers’ or other third parties’ business operations.

Third parties with whom we do business or that facilitate our business activities, including financial intermediaries or vendors that provide services or security solutions for our operations, could also be sources of operational and information security risk to us, including from breakdowns or failures of their own systems or capacity constraints. Although to date we have not experienced any material losses relating to cyber-attacks or other information security breaches, like other companies, we and our vendors face a wide range of ongoing cyber threats that include phishing emails and social engineering schemes, ransomware threats, and criminal re-use of credentials sold on the dark web. Therefore, there can be no assurance that we will not suffer such material losses in the future. Our risk and exposure to these matters remains heightened because of the evolving nature of these threats. As a result, cybersecurity and the continued development and enhancement of our controls, processes and practices designed to protect our systems, computers, software, company data, networks, and customer information from attack, damage or unauthorized access remain a focus for us. As threats continue to evolve, we may be required to expend additional resources to continue to modify or enhance our protective measures or to investigate and remediate information security vulnerabilities.

Disruptions or failures in the physical infrastructure or operating systems that support our business and clients, or cyber-attacks or security breaches of the networks, systems or devices that our clients use to access our products and services, could result in client attrition, regulatory fines, penalties or intervention, breach investigation and notification expenses, reputational damage, claims or litigation, reimbursement or other compensation costs and/or additional compliance costs, any of which could materially and adversely affect our business, financial condition and results of operations.

Legal and Regulatory Risks

We operate in a highly regulated environment, which could restrain our growth and profitability.

We are subject to extensive laws and regulations that govern almost all aspects of our operations. These laws and regulations, and the supervisory framework that oversees the administration of these laws and regulations, are primarily intended to protect depositors, the DIF and the banking system as a whole, and not shareholders. These laws and regulations, among other matters, affect our lending practices, capital structure, investment practices, dividend policy, operations and growth. Compliance with the myriad laws and regulations applicable to our organization can be difficult and costly. In addition, these laws, regulations and policies are subject to continual review by governmental authorities, and changes to these laws, regulations and policies, including changes in interpretation or implementation of these laws, regulations and policies, could affect us in substantial and unpredictable ways and often impose additional compliance costs. Further, any new laws, rules and

20

regulations could make compliance more difficult or expensive. All of these laws and regulations, and the supervisory framework applicable to our industry, could have a material adverse effect on our business, financial condition and results of operations.

Federal and state regulators periodically examine our business and we may be required to remediate adverse examination findings.

The Federal Reserve, the FDIC and the DFI periodically examine our business, including our compliance with laws and regulations. If, as a result of an examination, a federal or state banking agency were to determine that our financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of any of our operations had become unsatisfactory, or that we were in violation of any law or regulation, it may take a number of different remedial actions as it deems appropriate. These actions include the power to enjoin “unsafe or unsound” practices, to require action to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil monetary penalties against our officers or directors, to remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to depositors, to terminate our deposit insurance and place us into receivership or conservatorship. Any regulatory action against us could have a material adverse effect on our business, financial condition and results of operations.

Our FDIC deposit insurance premiums and assessments may increase, which would reduce our profitability.

The deposits of the Bank are insured by the FDIC up to legal limits and, accordingly, subject to the payment of FDIC deposit insurance assessments. The Bank’s regular assessments are determined by its risk classification, which is based on a number of factors, including regulatory capital levels, asset growth and asset quality. High levels of bank failures during and following the financial crisis and increases in the statutory deposit insurance limits have increased resolution costs to the FDIC and put significant pressure on the DIF. In order to maintain a strong funding position and restore the reserve ratios of the DIF, the FDIC may increase deposit insurance assessment rates and may charge a special assessment to all FDIC-insured financial institutions. Further increases in assessment rates or special assessments may occur in the future, especially if there are significant additional financial institution failures. Any future special assessments, increases in assessment rates or required prepayments in FDIC insurance premiums could reduce our profitability or limit our ability to pursue certain business opportunities, which could have a material adverse effect on our business, financial condition and results of operations.

The long-term impact of regulatory capital rules is uncertain and a significant increase in our capital requirements could have an adverse effect on our business and profitability.

In order to remain “well-capitalized”, the Basel III Capital Rules require the Company and the Bank to maintain: (i) a minimum ratio of Common Equity Tier 1 capital to risk-weighted assets of 4.5%, plus a 2.5% “capital conservation buffer” (resulting in a minimum ratio of Common Equity Tier 1 capital to risk-weighted assets of 7.0%); (ii) a minimum ratio of Tier 1 capital to risk-weighted assets of 6.0%, plus the capital conservation buffer (resulting in a minimum Tier 1 capital ratio of 8.5%); (iii) a minimum ratio of Total capital to risk-weighted assets of 8.0%, plus the capital conservation buffer (resulting in a minimum Total capital ratio of 10.5%); and (iv) a minimum Leverage Ratio of 4.0%.

The application of more stringent capital requirements for both the Company and the Bank could, among other things, result in lower returns on equity, require the raising of additional capital, and result in regulatory actions constraining us from paying dividends or repurchasing shares if we were to be unable to comply with such requirements, any of which could have a material adverse effect on our business and profitability.

We are subject to numerous laws designed to protect consumers, including the CRA and fair lending laws, and failure to comply with these laws could lead to a wide variety of sanctions.

The CRA, the Equal Credit Opportunity Act, the Fair Housing Act and other fair lending laws and regulations impose nondiscriminatory lending requirements on financial institutions. The Department of Justice and other federal agencies are responsible for enforcing these laws and regulations. A successful regulatory challenge to an institution’s performance under the CRA or fair lending laws and regulations could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions activity, restrictions on expansion and restrictions on entering new business lines. Private parties may also have the ability to challenge an institution’s performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our business, financial condition and results of operations.

21

We are subject to evolving and expensive regulations and requirements. Our failure to adhere to these requirements or the failure or circumvention of our controls and procedures could seriously harm our business.

We are subject to extensive regulation as a financial institution and are also required to follow the corporate governance and financial reporting practices and policies required of a company whose stock is registered under the Exchange Act and listed on the Nasdaq Global Select Market. Compliance with these requirements means we incur significant legal, accounting and other expenses. Compliance also requires a significant diversion of management time and attention, particularly with regard to disclosure controls and procedures and internal control over financial reporting. Although we have reviewed, and will continue to review, our disclosure controls and procedures in order to determine whether they are effective, our controls and procedures may not be able to prevent errors or frauds in the future. Faulty judgments, simple errors or mistakes, or the failure of our personnel to adhere to established controls and procedures may make it difficult for us to ensure that the objectives of the control system will be met. A failure of our controls and procedures to detect other than inconsequential errors or fraud could seriously harm our business and results of operations.

We face risk under the BSA and other anti-money laundering statutes and regulations, as well as general fund transfer and payments-related risk.

The BSA, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain an effective anti-money laundering program and file suspicious activity and currency transaction reports as appropriate. The federal Financial Crimes Enforcement Network is authorized to impose significant civil money penalties for violations of those requirements and has engaged in coordinated enforcement efforts with the individual federal banking regulators, as well as the U.S. Department of Justice, Drug Enforcement Administration and Internal Revenue Service. We are also subject to increased scrutiny of compliance with the rules enforced by the OFAC. If our policies, procedures and systems are deemed deficient, we would be subject to liability, including fines and regulatory actions, which may include restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain aspects of our business plan, including our acquisition plans. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us. Any of these results could have a material adverse effect on our business, financial condition and results of operations.

In addition, financial institutions, including ourselves, bear fund transfer risks of different types which result from large transaction volumes and large dollar amounts of incoming and outgoing money transfers. Loss exposure may result if money is transferred from the Bank before it is received, or legal rights to reclaim monies transferred are asserted. Such exposure results from payments which are made to merchants for payment clearing, while customers have statutory periods to reverse their payments. It also results from funds transfers made prior to receipt of offsetting funds, as accommodations to customers. Transfers could also be made in error. Additionally, as with other financial institutions, we may incur legal liability or reputational risk, if we unknowingly process payments for companies in violation of money laundering laws or regulations or immoral activities.

The merger and our introduction of new products and programs in partnership with fintechs is expected to increase account and transaction volume at the Bank and thereby increase the foregoing risks, the results of which could have a material adverse effect on our business, financial condition and results of operations.

We may be subject to potential liability and business risk from actions by our regulators related to supervision of third parties.

Our regulators or auditors may require us to increase the level and manner of our oversight of the third parties which provide marketing and other services through which we offer products and services, whether in connection with the merger, our introduction of new programs and products, or otherwise. Although we have significant compliance staff and have used outside consultants, our internal and external compliance examiners continually evaluate our practices and must be satisfied with the results of our third-party oversight activities. We cannot assure you that we will satisfy all related requirements. Not maintaining a compliance management system which is deemed adequate could result in sanctions against the Bank. Our ongoing review and analysis of our compliance management system and implementation of any changes resulting from that review and analysis will likely result in increased non-interest expense.

Federal banking laws limit the acquisition and ownership of our common stock.

Because we are a bank holding company, any purchaser of certain specified amounts of our common stock may be required to file a notice with or obtain the approval of the Federal Reserve under the BHCA, as amended, and the Change in

22

Bank Control Act of 1978, as amended. Specifically, under regulations adopted by the Federal Reserve, (1) any other bank holding company may be required to obtain the approval of the Federal Reserve before acquiring 5% or more of our common stock and (2) any person may be required to file a notice with and not be disapproved by the Federal Reserve to acquire 10% or more of our common stock and will be required to file a notice with and not be disapproved by the Federal Reserve to acquire 25% or more of our common stock.

Item 1B. Unresolved Staff Comments

None.

Item 2. Properties

In March 2013, the Company borrowed $4.0 million from the Bank for the purchase of the Company’s principal executive offices. On February 16, 2021, the Company entered into an agreement to sell its principal executive offices to a third party. The sale was completed on April 16, 2021 and as a part of the sale agreement, the buyer leased the office building back to the Company through December 31, 2021. We vacated the office building at the end of the lease, on or prior to December 31, 2021. Additionally, the remaining principal balance of the Company’s loan from the Bank was paid-in-full.

During 2019, the Bank's subsidiary, SPF15, Inc., acquired several parcels of real estate located in Fishers, Indiana. Site demolition was completed on the properties in early 2020 and construction of a multi-use development, which included the future headquarters of the Company and the Bank began shortly thereafter. The Company and the Bank now fully occupy the new headquarters, which is located at 8701 East 116th Street, Fishers, IN 46038.

Item 3. Legal Proceedings

Neither we nor any of our subsidiaries are party to any material legal proceedings. From time to time, the Bank is a party to legal actions arising from its normal business activities.

Item 4. Mine Safety Disclosures

None.

23

PART II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Market Information

The Company’s common stock trades on the Nasdaq Global Select Market under the symbol “INBK.”

As of March 11, 2022, the Company had 9,683,727 shares of common stock issued and outstanding, and there were 106 holders of record of common stock.

Dividends

Total cash dividends declared in 2021 were $0.24 per share. The Company expects to continue to pay cash dividends on a quarterly basis; however, the declaration and amount of any future cash dividends will be subject to the sole discretion of the Board of Directors and will depend upon many factors, including our results of operations, financial condition, capital requirements, regulatory and contractual restrictions (including with respect to the Company’s outstanding subordinated debt), business strategy and other factors deemed relevant by the Board of Directors.

Because the Company is a holding company and does not engage directly in business activities of a material nature, its ability to pay dividends to shareholders may depend, in large part, upon the receipt of distributions from the Bank, which is also subject to numerous limitations on the payment of dividends under federal and state banking laws, regulations and policies. The present and future ability of the Bank to distribute funds to the Company are subject to the discretion of the Board of the Directors of the Bank and the Bank is not obligated to pay any distributions to the Company.

Issuer Purchases of Equity Securities

On October 18, 2021, the Company's Board of Directors approved a stock repurchase program authorizing the repurchase of up to $30.0 million of our outstanding common stock from time to time on the open market or in privately negotiated transactions. The stock repurchase authorization is scheduled to expire on December 31, 2022. Under this program, the Company has repurchased 200,000 shares of common stock through March 11, 2022, at an average price of $46.97, for a total investment of $9.4 million. As of March 11, 2022, we have $20.6 million remaining under this program.

The following table presents information with respect to purchases of the Company’s common stock made during the fourth quarter of 2021 by or on behalf of the Company or any “affiliated purchaser,” as defined in Rule 10b-18(a)(3).

Stock Performance Graph

The following graph and table compares the five-year cumulative total return to shareholders of First Internet Bancorp common stock with that of the Nasdaq Composite Index and the S&P U.S. BMI Banks Index. The following assumes $100 invested on December 31, 2016 in First Internet Bancorp, the Nasdaq Composite Index and the S&P U.S. BMI Bank Index, and assumes that dividends are reinvested. The historical stock price performance for our common stock is not necessarily indicative of future stock performance.

24

December 31,

Item 6. [RESERVED]

25

Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and related notes appearing elsewhere in this report.

The following discussion, analysis and comparisons generally focus on the operating results for the years ended December 31, 2021 and 2020. Discussion, analysis and comparisons of the years ended December 31, 2020 and 2019 that are not included in this Annual Report on Form 10-K can be found in “Management's Discussion and Analysis of Financial Condition and Results of Operations” in Part II, Item 7 of our Annual Report on Form 10-K for the year ended December 31, 2020. This discussion and analysis includes certain forward-looking statements that involve risks, uncertainties and assumptions. You should review the “Risk Factors” section of this report for a discussion of important factors that could cause actual results to differ materially from the results described in or implied by such forward-looking statements. See also the “Cautionary Note Regarding Forward-Looking Statements” at the beginning of this report.

COVID-19 Pandemic

The year 2021 was characterized by continued uncertainty as the coronavirus (“COVID-19”) pandemic persisted globally. However, federal, state and local governments have continued to take additional steps to reopen and stimulate economies, evidenced by improving economic indicators as 2021 progressed. While the effects of COVID-19 did have an impact on our operating results during 2021, we believe the impact was consistent with the effects of COVID-19 on the overall banking industry. The extent to which COVID-19 will continue to impact our business will depend on numerous evolving factors and future developments that we are not able to predict, including potential new variants of COVID-19, the effectiveness of continuing containment measures, including the speed of the ongoing vaccine distribution effort, the efficacy of the various vaccines, and how quickly and to what extent normal economic and operating conditions can resume.

COVID-19 impacted our business during 2021, as the low interest rate environment following Federal Reserve rate cuts in the first quarter 2020 had a negative impact on some variable rate assets throughout 2021. However, the low interest rate environment has also allowed us to reprice our interest-bearing deposits at lower rates, which provided a benefit to net interest income in 2021.

Throughout COVID-19, our top priority has been the health of our team and clients. As a digitally-focused institution without branch locations, we were able to continue serving clients when they needed us most, while minimizing operational disruptions caused by COVID-19. The vast majority of our employees who worked remotely during the earlier stages of the pandemic have returned to the office. Management continues to assess the evolving health and safety situations at local, regional and national levels. Our plans remain flexible to adapt as these situations evolve.

Pending Merger Transaction

On November 1, 2021, we entered into a merger agreement to acquire all of the outstanding shares of common stock of First Century Bancorp. (“First Century”), the parent company of First Century Bank, N.A. (“First Century Bank”), for $80 million in cash. First Century Bank is a technology-driven, financial solutions company with lines of business focused on payments, tax product lending, sponsored card programs and homeowners association services. We expect to fund our payment obligations upon closing with available on-balance sheet cash. The acquisition is subject to customary regulatory approvals and the completion of various closing conditions. The acquisition has received approval from the Indiana Department of Financial Institutions and First Century shareholders, but it is awaiting approval from the Federal Deposit Insurance Corporation and the Federal Reserve. As of December 31, 2021, First Century had total assets of $486.7 million, total deposits of $409.4 million, and total loans of $25.2 million.

Results of Operations

During the twelve months ended December 31, 2021, net income was $48.1 million, or $4.82 per diluted share, compared to net income of $29.5 million, or $2.99 per diluted share, for the twelve months ended December 31, 2020 and net income of $25.2 million, or $2.51 per diluted share, for the twelve months ended December 31, 2019.

The $18.7 million increase in net income for the twelve months ended December 31, 2021 compared to the twelve months ended December 31, 2020 was due primarily to a $22.0 million increase in net interest income and an $8.3 million decrease in provision for loan losses, partially offset by a $4.1 million increase in noninterest expense, a $4.0 million increase in income tax expense and a $3.5 million decrease in noninterest income.

26

The increase in net income of $4.2 million for the twelve months ended December 31, 2020 compared to the twelve months ended December 31, 2019 was due primarily to a $19.5 million increase in noninterest income and a $1.6 million increase in net interest income, partially offset by an $11.0 million increase in noninterest expense, a $3.4 million increase in provision for loan losses and a $2.5 million increase in income tax expense.

During the twelve months ended December 31, 2021, return on average assets was 1.14%, compared to 0.69% for the twelve months ended December 31, 2020. During the twelve months ended December 31, 2021, return on average shareholders’ equity was 13.44%, compared to 9.39% for the twelve months ended December 31, 2020. Additionally, for the twelve months ended December 31, 2021, return on average tangible common equity was 13.61% compared to 9.53% for the twelve months ended December 31, 2020. These profitability ratios improved during 2021 due to net income growth of 63.4%, while total average assets was down slightly from 2020. Additionally, the growth in net income outpaced growth in average shareholders' equity of 14.1% and growth in average tangible common equity of 14.4%. Refer to the “Reconciliation of Non-GAAP Financial Measures” section of Item 7 of Part II of this report, Management's Discussion and Analysis of Financial Condition and Results of Operations for additional information.

27

Consolidated Average Balance Sheets and Net Interest Income Analyses

For the periods presented, the following tables provide the average balances of interest-earning assets and interest-bearing liabilities and the related yields and cost of funds. The tables do not reflect any effect of income taxes. Balances are based on the average of daily balances. Nonaccrual loans are included in average loan balances.

Twelve Months Ended

Assets

Interest-earning assets

Liabilities

Interest-bearing liabilities

1 Yield on total interest-earning assets minus cost of total interest-bearing liabilities

2 Net interest income divided by average interest-earning assets

3 On a fully-taxable equivalent (“FTE”) basis assuming a 21% tax rate. Refer to the “Reconciliation of Non-GAAP Financial Measures” section of Item 7 of Part II of this report, Management's Discussion and Analysis of Financial Condition and Results of Operations

28

Rate/Volume Analysis

The following table illustrates the impact of changes in the volume of interest-earning assets and interest-bearing liabilities and interest rates on net interest income for the periods indicated. The change in interest not due solely to volume or rate has been allocated in proportion to the absolute dollar amounts of the change in each.

Rate/Volume Analysis of Net Interest Income

(amounts in thousands) Volume Rate Net Volume Rate Net

Interest income

Interest expense

Net interest income for the twelve months ended December 31, 2021 was $86.6 million, an increase of $22.0 million, or 34.1%, compared to $64.5 million for the twelve months ended December 31, 2020. The increase in net interest income was the result of a $25.0 million, or 34.6%, decrease in total interest expense to $47.3 million for the twelve months ended December 31, 2021 compared to $72.3 million for the twelve months ended December 31, 2020. This decrease in total interest expense was partially offset by a $3.0 million, or 2.2%, decrease in total interest income to $133.9 million for the twelve months ended December 31, 2021 compared to $136.9 million for the twelve months ended December 31, 2020.

The decrease in total interest expense was driven primarily by decreases in interest expense related to certificates and brokered deposits and money market accounts. Interest expense on certificates and brokered deposits decreased $20.3 million, or 46.7%, due to a decline of 67 bps in the cost of these deposits as well as a $471.6 million, or 25.0%, decrease in the average balance of these deposits. The decrease in certificates and brokered deposit balances was driven by our pricing strategy to reduce the level of these higher cost deposits. The decrease in interest expense related to money market accounts of $5.5 million, or 48.2%, was driven by a decline of 57 bps in the cost of these deposits, partially offset by an increase of $278.7 million, or 24.1%, in the average balance of these deposits. Money market balances increased throughout 2021 due to targeted digital marketing efforts to grow small business accounts, as well as consumers, small businesses and commercial clients increasing their cash balances due in part to the continued economic uncertainty resulting from COVID-19. The decrease in interest expense related to interest-bearing demand deposits and savings accounts was due primarily to decreases of 28 bps and 39 bps, respectively, in the cost of these deposits, partially offset by increases of $50.5 million, or 34.8%, and $16.4 million, or 40.3%, respectively, in the average balance of these deposits. The increase in interest expense associated with other borrowed funds was due primarily to the recognition of $0.8 million of costs related to the Company redeeming the 2026 Notes on September 30, 2021.

The decrease in total interest income was due primarily to decreases in interest earned on securities and other earning assets, partially offset by an increase in interest earned on loans, including loans held-for sale. Interest income earned on securities decreased $3.9 million, or 21.6%, due to a decline of 62 bps in the yield earned on securities, partially offset by an increase of $3.1 million, or 0.4%, in the average balance of securities. The decrease in the yield earned on securities was driven primarily by lower market interest rates following Federal Reserve interest rate cuts in March 2020 in response to the economic effects of COVID-19, which contributed to increased prepayment activity and lower yields earned on private label and agency mortgage-backed securities and U.S. Government agency securities, as well as early redemptions and maturities in corporate and municipal securities. Interest income earned on other earning assets decreased $2.0 million, or 57.7%, due to a decline of 34 bps in the yield earned on these assets, as well as a decrease of $57.2 million, or 10.9%, in the average balance of other earning assets. The decrease in the yield earned on other earning assets was due primarily to lower market interest rates, as

29

described above. The decrease in the average balance of other earning assets was due to lower cash balances driven by declines in the average balance of deposits. Interest income earned on loans, including loans held-for-sale, increased by $2.8 million as the yield on the loan portfolio increased by 13 bps, but was partially offset by a decrease of $26.8 million, or 0.9%, in the average balance of loans. The decrease in average loan balances was due primarily to declines in the single tenant lease financing, public finance, owner-occupied commercial real estate, commercial and industrial and consumer portfolios, but was partially offset by increases in the healthcare finance, construction, small business lending (which included loans originated through the Paycheck Protection Program (“PPP”)), franchise finance and investor commercial real estate portfolios.

Net interest margin was 2.11% for the twelve months ended December 31, 2021 compared to 1.55% for the twelve months ended December 31, 2020. The increase in net interest margin was due primarily to a 62 bp decrease in the cost of interest-bearing liabilities, partially offset by a 1 bp decrease in the yield earned on interest-earning assets. The decline in the cost of interest-bearing liabilities was driven primarily by the lower deposit costs, as discussed above, due primarily to the continued low interest rate environment following Federal Reserve interest rate cuts in March 2020 in response to the economic effects of COVID-19. Looking ahead into 2022, we believe that yields on interest-earning assets will increase as we anticipate growing our commercial loan portfolio. We have approximately $712.8 million of certificates and brokered deposits with a weighted average cost of 1.02% that mature over the next twelve months. As the weighted average of cost of these deposits is significantly higher than current new production costs, we expect the cost of deposit funding to continue to decline in 2022, although at a much slower pace than in 2021.

Noninterest Income

The following table presents noninterest income for the three most recent years.

Twelve Months Ended December 31,

Loan servicing asset revaluation (1,069) (432) —

Gain (loss) on sale of securities — 139 (458)

Gain on sale of premises and equipment 2,523 — —