INBK US Equity☆

inbk-20221231

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

or

Commission File Number 001-35750

First Internet Bancorp

(Exact Name of Registrant as Specified in its Charter)

(State or other jurisdiction of (I.R.S. Employer

incorporation or organization) Identification No.)

(Address of principal executive offices) (Zip Code)

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading Symbols Name of exchange on which registered

Common stock, without par value INBK The Nasdaq Stock Market LLC

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ̈Noþ

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ̈Noþ

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or Section 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yesþ No ̈

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yesþ No ̈

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer ̈ Accelerated Filer þ

Non-accelerated filer ̈ Smaller reporting company ☐

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ̈

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☑

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1 (b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐ No þ

The aggregate market value of common stock held by non-affiliates of the registrant as of June 30, 2022, the last business day of the registrant’s most recently completed second fiscal quarter, was approximately $284.3 million, based on the closing sale price for the registrant’s common stock on that date. For purposes of determining this number, all officers and directors of the registrant are considered to be affiliates of the registrant. This number is provided only for the purpose of this report and does not represent an admission by either the registrant or any such person as to the status of such person.

As of March 10, 2023, the registrant had 8,949,423 shares of common stock issued and outstanding.

Documents Incorporated By Reference

Portions of our definitive proxy statement for our 2023 annual meeting of shareholders are incorporated by reference into Part III of this Annual Report on Form 10-K where indicated.

First Internet Bancorp

Table of Contents

PART I PAGE

Item 1. Business 1

Item 1A. Risk Factors 12

Item 1B. Unresolved Staff Comments 20

Item 2. Properties 20

Item 3. Legal Proceedings 20

Item 4. Mine Safety Disclosures 20

PART II

Item 6. Reserved 22

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 46

Item 8. Financial Statements and Supplementary Data 47

Item 9A. Controls and Procedures 47

Item 9B. Other Information 48

Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 48

PART III

Item 10. Directors, Executive Officers and Corporate Governance 49

Item 11. Executive Compensation 49

Item 14. Principal Accountant Fees and Services 50

PART IV

Item 15. Exhibits and Financial Statement Schedules 51

SIGNATURES 53

Cautionary Note Regarding Forward-Looking Statements

This Annual Report on Form 10-K contains forward-looking statements within the meaning of the federal securities laws. These statements are not historical facts, but rather statements based on the current expectations of First Internet Bancorp and its consolidated subsidiaries (the “Company,” “we,” “our,” or “us”) regarding our business strategies, intended results and future performance, including, without limitation, statements concerning the financial condition, results of operations, trends in lending policies and loan programs, prospective business partnerships, objectives, future performance and business of the Company. Forward-looking statements are generally preceded by terms such as “anticipate,” “attempt,” “believe,” “can,” “continue,” “could,” “effort,” “estimate,” “expect,” “intend,” “likely,” “may,” “objective,” “optimistic,” “pending,” “plan,” “position,” “potential,” “preliminary,” “remain,” “should,” “will,” “would” or other similar expressions. Such statements are subject to certain risks and uncertainties including: our business and operations and the business and operations of our vendors and customers; general economic conditions, whether national or regional, and conditions in the lending markets in which we participate that may have an adverse effect on the demand for our loans and other products; our credit quality and related levels of nonperforming assets and loan losses, and the value and salability of the real estate that is the collateral for our loans; failures or breaches of or interruptions in the communication and information systems on which we rely to conduct our business that could reduce our revenues, increase our costs or lead to disruptions in our business; our dependence on capital distributions from First Internet Bank of Indiana (the “Bank”); results of examinations of us by our regulators, including the possibility that our regulators may, among other things, require us to increase our allowance for loan losses or to write-down assets; changing bank regulatory conditions, policies or programs, whether arising as new legislation or regulatory initiatives, that could lead to restrictions on activities of banks generally, or the Bank in particular; more restrictive regulatory capital requirements; increased costs, including deposit insurance premiums; regulation or prohibition of certain income producing activities or changes in the secondary market for loans and other products; changes in market rates and prices that may adversely impact the value of securities, loans, deposits and other financial instruments and the interest rate sensitivity of our balance sheet; our liquidity requirements being adversely affected by changes in our assets and liabilities; the effect of legislative or regulatory developments, including changes in laws concerning taxes, banking, securities, insurance and other aspects of the financial services industry; competitive factors among financial services organizations, including product and pricing pressures and our ability to attract, develop and retain qualified banking professionals; the growth and profitability of noninterest or fee income being less than expected; the loss of any key members of senior management; the effect of changes in accounting policies and practices, as may be adopted by the Financial Accounting Standards Board, the Securities and Exchange Commission (the “SEC”), the Public Company Accounting Oversight Board and other regulatory agencies; and the effect of fiscal and governmental policies of the United States federal government. Additional factors that may affect our results include those discussed under the heading “Risk Factors” in this Annual Report on Form 10-K. We caution readers not to place undue reliance on any such forward-looking statements, which speak only as of the date made. The factors listed above could affect our financial performance and could cause our actual results for future periods to differ materially from any opinions or statements expressed with respect to future periods in any current statements.

Except as required by law, we do not undertake, and specifically disclaim any obligation, to publicly release the result of any revisions that may be made to any forward-looking statements to reflect events or circumstances after the date of such statements or to reflect the occurrence of anticipated or unanticipated events.

i

PART I

Item 1. Business

When we refer to “First Internet Bancorp,” the “Company,” “we,” “us” and “our” in the remainder of this Annual Report on Form 10-K, we mean First Internet Bancorp and its consolidated subsidiaries, unless the context indicates otherwise. References to “First Internet Bank” or the “Bank” refer to First Internet Bank of Indiana, an Indiana chartered bank and wholly-owned subsidiary of the Company.

Overview

First Internet Bancorp is a financial holding company headquartered in Fishers, Indiana that conducts its primary business activities through its wholly-owned subsidiary, First Internet Bank of Indiana, an Indiana chartered bank. The Bank was the first state-chartered, Federal Deposit Insurance Corporation (“FDIC”) insured Internet bank and commenced banking operations in 1999. First Internet Bancorp was incorporated under the laws of the State of Indiana on September 15, 2005. On March 21, 2006, we consummated a plan of exchange by which we acquired all of the outstanding shares of the Bank.

The Bank has three wholly-owned subsidiaries: First Internet Public Finance Corp., an Indiana corporation, which provides a range of public and municipal finance lending and leasing products to governmental entities throughout the United States and acquires securities issued by state and local governments and other municipalities; JKH Realty Services, LLC, a Delaware limited liability company, which manages other real estate owned properties as needed; and SPF15 Inc., an Indiana corporation that owns real estate used primarily for the Bank’s principal office.

We offer a wide range of commercial, small business, consumer and municipal banking products and services. We conduct our consumer and small business deposit operations primarily through digital channels on a nationwide basis and have no traditional branch offices. Our consumer lending products are primarily originated on a nationwide basis through relationships with dealerships and financing partners.

Our commercial banking products and services are delivered through a relationship banking model and include commercial and industrial (“C&I”) banking, construction and investor commercial real estate, single tenant lease financing, public finance, healthcare finance, small business lending, franchise finance and commercial deposits and treasury management. Our C&I team provides credit solutions such as lines of credit, term loans, owner-occupied commercial real estate loans and corporate credit cards on a regional basis to commercial borrowers primarily in the Midwest and Southwest regions of the United States. We primarily offer construction and investor commercial real estate loans within Central Indiana or on a regional basis and single tenant lease financing on a nationwide basis. Our public finance team provides a range of public and municipal lending and leasing products to government entities on a nationwide basis. Our healthcare finance team was established in conjunction with our strategic partnership with Provide, Inc. (formerly known as Lendeavor, Inc.), a San Francisco-based technology-enabled lender to healthcare practices, which provided lending on a nationwide basis for healthcare practice finance or acquisition, acquisition or refinancing of owner-occupied commercial real estate and equipment purchases. In the third quarter 2021, Provide was acquired by a super-regional financial institution. Subsequent to Provide being acquired, the acquiring institution has retained most, if not all, of Provide’s loan origination activity and our healthcare finance loan balances have declined. Our franchise finance business was established in July 2021 in conjunction with our business relationship with ApplePie Capital, a financial technology (“fintech”) company that specializes in providing financing to franchisees in various industry segments. Our commercial deposits and treasury management team works with the other commercial teams to provide deposit products and treasury management services to our commercial and municipal lending customers as well as pursues commercial deposit opportunities in business segments where we have no credit relationships.

We believe that we differentiate ourselves from larger financial institutions by providing a full suite of services to emerging small businesses and entrepreneurs on a nationwide basis. We are one of the fastest-growing lenders in the Small Business Administration (“SBA”) 7(a) program, closing more than $155.4 million in SBA 7(a) loans during 2022 and ranking in the top 30 SBA 7(a) lenders for the SBA’s 2022 fiscal year. We also offer a top-ranked small business checking account product to our country’s entrepreneurs. We continue to scale up this business with the goal of driving increased earnings and profitability in future periods.

We also offer payment, deposit, card and lending products and services through fintech partnerships, which we intend to grow in future periods. With the rapid evolution of technology that enables consumers and small businesses to manage their finances digitally, fintechs are addressing a significantly growing marketplace. Fintechs have created robust digital offerings, unburdened by legacy technology architecture, to address growing customer expectations. Through partnerships with selected

1

fintechs, we believe our ability to win and retain consumer and small business relationships will be significantly enhanced. Furthermore, we believe partnering with select fintechs will allow us to further diversify our revenue sources, acquire lower-cost deposits and pursue additional asset generation capabilities.

As of December 31, 2022, the Company had consolidated assets of $4.5 billion, consolidated deposits of $3.4 billion and stockholders’ equity of $365.0 million.

Human Capital

As of December 31, 2022, we employed 319 people, 314 of which were full-time. Our team members have been and continue to be our most valuable assets, helping to create a strong workplace culture that recognizes the unique contributions and perspectives each individual brings to the organization.

We encourage our employees to “Imagine More.” We seek the game-changers, innovators and dreamers – those who are driven to find a better way of doing things for customers and each other. We encourage community involvement and opportunities that support team members, both inside and outside the office. We may be a digital bank, but we strongly believe in the power of personal connection and collaboration. Our focus on employees is evident in the number of “best work place” awards we have been honored with over the years.

We strive to maintain a diverse and inclusive work culture in which individual differences and experiences are valued and all employees have the opportunity to contribute and thrive. We believe that leveraging our employees’ diverse perspectives and capabilities will enhance innovation, foster a collaborative work culture and enable us to better serve our customers and communities. With this vision in mind, the Company’s diversity and inclusion strategy focuses on five organizational pillars: People, Partners, Philanthropy, Products and Processes. In 2021, we published our first Environmental, Social and Governance (“ESG”) Report to highlight, among other things, our focus on and efforts to advance Diversity and Inclusion goals. In 2022, we provided a status update to our ESG Report, highlighting key initiatives and efforts. One such effort in 2022 was the introduction of mandatory Diversity, Equity & Inclusion (“DEI”) training for executive leadership and all employees. The phased training program — including topics such as unconscious bias, sexual harassment, regulatory issues and the benefits of a more diverse workplace — is delivered both in-person and online. Ongoing quarterly sessions and annual refresher courses will help reinforce the program’s methods and maintain active awareness. A copy of our ESG Report can be found on our website at www.firstinternetbancorp.com. See “Available Information” section below for more information.

To further foster inclusion as a norm, our organization promotes and supports the development of employee-led business resource groups, which currently include First Ladies and LIFT (a young professionals group). These groups magnify traditionally underrepresented voices. We also offer tuition reimbursement, a robust internal training program, and leadership training and coaching through a third party consultant to help employees advance their careers and perform competently and confidently. The tuition reimbursement program reimburses approved tuition costs, registration fees for classes, and costs of books and computer-based resources as required by class. The internal training program focuses on topics such as privacy, fair banking, skills-training and many industry specific topics and regulations. And the leadership training program features courses and curriculum designed to grow and support up-and-coming leaders, with support from internal sponsors and an external, professional coach.

Community service is a foundational tenet. We commit time, talent and financial support to community initiatives that inspire passion among our team members and support the communities within which we live and work. We allow paid volunteer time and sponsor community initiatives such as The Indy Pride Rainbow 5k, the Marian University-Indianapolis Diversity in Leadership Program and Habitat for Humanity. The result is a sense of pride and increased engagement within the Bank that serves as a catalyst for the greater good.

Competition

The markets in which we compete to make loans, attract deposits and provide fee based financial services are highly competitive. For consumer banking activities, we compete with other digital banks and fintech companies, in addition to traditional banks, savings banks, credit unions, investment banks, insurance companies, securities brokerages and other financial institutions, as nearly all have some form of digital delivery for their consumer banking services.

For our construction, investor CRE, and C&I lending activities, we compete with super-regional, regional and community banks operating in the Midwest and Southwest regions of the United States. For our single tenant lease financing activities, we compete nationally with regional banks, community banks and credit unions, as well as life insurance companies

2

and commercial mortgage-backed securities lenders. For our public finance, healthcare finance and franchise finance activities, we compete nationally with superregional and regional banks. These competitors may have significantly greater financial resources and higher lending limits than we do and may also offer specialized products and services that we do not. For our small business lending activities, we compete on a national footprint with other participating SBA-approved lenders, including a large number of regional and community banks. These competitors have resources and/or lending limits that differ greatly from one another.

Regulation and Supervision

The U.S. banking industry is highly regulated under federal and state law and this regulatory environment has a material effect on the operations and financial condition of the Company and its subsidiaries. As a result, the Company’s growth and earnings performance may be affected not only by management decisions and general economic conditions, but also by the requirements of federal and state statutes and by the regulations and policies of various bank regulatory agencies, including the Indiana Department of Financial Institutions (the “DFI”), the Board of Governors of the Federal Reserve System (the “Federal Reserve”), the FDIC and the Consumer Financial Protection Bureau (“CFPB”). Furthermore, taxation laws administered by the Internal Revenue Service and state taxing authorities, accounting rules developed by the Financial Accounting Standards Board (the “FASB”), securities laws administered by the SEC and state securities authorities, and anti-money laundering laws enforced by the U.S. Department of the Treasury (“U.S. Treasury”) also have an impact on the Company’s business. This regulatory framework is intended for the protection of depositors, borrowers and other customers, as well as the FDIC deposit insurance funds and the U.S. banking system, rather than the Company’s shareholders or creditors.

Banking statutes and regulations are subject to ongoing review and revision by federal and state legislatures and regulatory agencies. Notably, the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”), enacted in 2010 in response to the global financial crisis, imposed a number of new and expanded regulatory requirements on the banking industry, which in some cases have been subsequently modified. Future changes in laws, regulations or regulatory policies, including changes in the ways laws and regulations are interpreted or enforced, could affect us in significant and unpredictable ways that may have a material impact on our business.

Federal and state banking laws and regulations affect, among other things, the scope of the Company’s business; the kinds and amounts of investments the Company and Bank may make; the fees and charges that may be imposed for bank products and services; required capital levels relative to assets; the nature and amount of collateral for loans; the ability to merge, consolidate, and acquire; dealings with the Company’s and Bank’s insiders and affiliates; and the Company’s payment of dividends. The cost of compliance with these legal and regulatory requirements has increased over time and could increase further in the future in response to changing laws and regulations or regulatory expectations, or as the Company grows and passes certain asset size thresholds at which additional requirements begin to apply. The Dodd-Frank Act, for example, gives rise to a number of additional requirements as financial institutions pass $10 billion in assets.

The supervisory framework for U.S. banking organizations subjects banks and their holding companies to regular examination by their respective regulatory agencies, which results in examination reports and ratings that are in most cases not publicly available and that can impact the conduct and growth of their business. These examinations consider not only compliance with applicable laws and regulations, but also capital levels, asset quality and risk, management ability and performance, earnings, liquidity, and various other factors. Regulatory agencies may impose restrictions and limitations on the operations of a regulated entity where the agencies determine, among other things, that such operations are unsafe or unsound, fail to comply with applicable law, or are otherwise inconsistent with laws and regulations. These regulatory agencies have broad enforcement power over regulated entities, including the ability to impose substantial fines and other adverse consequences for violations of law and regulations.

Following is a summary of the material elements of the supervisory and regulatory framework applicable to the Company and Bank. It does not describe all of the statutes, regulations, and regulatory policies that apply, and the descriptions in this summary are qualified in their entirety by reference to the particular statutory and regulatory provisions involved.

Holding Company Regulation

General. The Company is registered as a bank holding company under the Bank Holding Company Act of 1956 (the “BHCA”) and has elected to be a financial holding company. It is subject to regulation, supervision, examination and enforcement by the Federal Reserve. Under the BHCA, the Company is required to file with the Federal Reserve periodic reports of its operations and such additional information regarding the Company and Bank as the Federal Reserve may require. In addition, the Federal Reserve has the authority to issue orders to bank holding companies to cease and desist from unsafe or

3

unsound banking practices and from violations of conditions imposed by, or violations of agreements with, the Federal Reserve. The Federal Reserve is also empowered, among other things, to assess civil money penalties against companies or individuals who violate Federal Reserve orders or regulations, to order termination of nonbanking activities of bank holding companies and to order termination of ownership and control of a nonbanking subsidiary by a bank holding company.

Regulatory

Capital. Regulatory capital represents the net assets of a banking organization available to absorb losses. Banks and bank holding companies are generally required to hold more capital than other businesses that are not subject to regulation and supervision by the banking agencies, and this directly affects the Company’s earnings capabilities. While capital has historically been one of the key measures of the financial health of both bank holding companies and banks, its role became fundamentally more important in the wake of the global financial crisis, as banking regulators recognized that the amount and quality of capital held by banks prior to the crisis was insufficient to absorb losses during periods of severe stress. Certain provisions of the Dodd-Frank Act and Basel III, discussed below, establish capital standards for banks and bank holding companies that are meaningfully more stringent than those in place previously.

Banks have been required to hold minimum levels of capital based on guidelines established by bank regulatory agencies since 1983. The minimums have been expressed in terms of ratios of “capital” divided by “total assets.” The capital guidelines for U.S. banks beginning in 1989 have been based upon international capital accords, known as “Basel” rules, adopted by the Basel Committee on Banking Supervision (the “BCBS”), a committee of central banks and bank supervisors that acts as the primary global standard-setter for prudential regulation, as implemented by the U.S. bank regulatory agencies on an interagency basis. The accords recognized that bank assets for the purpose of the capital ratio calculations needed to be weighted (the theory being that riskier assets should require more capital) and that off-balance-sheet credit exposures needed to be factored in the calculations. Following the global financial crisis, the Group of Governors and Heads of Supervision, the oversight body of the BCBS, announced agreement on a strengthened set of capital requirements for banking organizations around the world, known as Basel III, to address deficiencies recognized in connection with the global financial crisis.

The Basel III Rule. In July 2013, the U.S. federal banking agencies approved implementation of the Basel III regulatory capital reforms in pertinent part, and, at the same time, promulgated rules effecting certain changes required by the Dodd-Frank Act (the “Basel III Rule”). In contrast to capital requirements historically, which were in the form of guidelines, Basel III was released in the form of binding regulations by each of the regulatory agencies. The Basel III Rule increased the required quantity and quality of capital and required more detailed categories of risk weighting of riskier, more opaque assets. For nearly every class of assets, the Basel III Rule requires a more complex, detailed, and calibrated assessment of risk in the calculation of risk weightings for all banking organizations that are subject to minimum capital requirements, including federal and state banks and savings and loan associations, as well as to most bank and savings and loan holding companies. The Company and Bank are each subject to the Basel III Rule as described below.

Not only did the Basel III Rule increase most of the required minimum capital ratios in effect prior to January 1, 2015, but in requiring that forms of capital be of higher quality to absorb loss, it also introduced the concept of Common Equity Tier 1 Capital, which consists primarily of common stock, related surplus, retained earnings, and Common Equity Tier 1 minority interests subject to certain regulatory adjustments.The Basel III Rule also changed the definition of capital by establishing more stringent criteria that instruments must meet to be considered Additional Tier 1 Capital (primarily non-cumulative perpetual preferred stock that meets certain requirements) and Tier 2 Capital (primarily other types of preferred stock and subordinated debt, subject to limitations).The Basel III Rule also constrained the inclusion of minority interests, mortgage-servicing assets, and deferred tax assets in capital and required deductions from Common Equity Tier 1 Capital in the event that such assets exceeded a percentage of a banking institution’s Common Equity Tier 1 Capital.

The Basel III Rule requires minimum capital ratios for bank holding companies as follows:

•A ratio of minimum Common Equity Tier 1 Capital equal to 4.5% of risk-weighted assets;

•A ratio of minimum Tier 1 Capital equal to 6% of risk-weighted assets;

•A continuation of the minimum required amount of Total Capital (Tier 1 plus Tier 2) at 8% of risk-weighted assets; and

•A minimum leverage ratio of Tier 1 Capital to total quarterly average assets equal to 4% in all circumstances.

In addition, institutions that seek the freedom to make capital distributions (including for dividends and repurchases of stock) and pay discretionary bonuses to executive officers without restriction must also maintain 2.5% in Common Equity Tier 1 Capital attributable to a capital conservation buffer. The purpose of the conservation buffer is to ensure that banking institutions maintain a buffer of capital that can be used to absorb losses during periods of financial and economic stress.

4

Factoring in the conservation buffer increases the minimum ratios depicted above to 7.0% for Common Equity Tier 1 Capital, 8.5% for Tier 1 Capital and 10.5% for Total Capital.

Well-Capitalized Requirements. The ratios described above are minimum standards in order for banking organizations to be considered “adequately capitalized.” Bank regulatory agencies uniformly encourage banks to hold more capital and be “well capitalized” and, to that end, federal law and regulations provide various incentives for banking organizations to maintain regulatory capital at levels in excess of minimum regulatory requirements. For example, a banking organization that is “well capitalized” may: (i) qualify for exemptions from prior notice or application requirements otherwise applicable to certain types of activities; (ii) qualify for expedited processing of other required notices or applications; and (iii) accept, rollover or renew brokered deposits. Higher capital levels could also be required if warranted by the particular circumstances or risk profiles of individual banking organizations. For example, the Federal Reserve’s capital guidelines contemplate that additional capital may be required to take adequate account of, among other things, interest rate risk, or the risks posed by concentrations of credit, nontraditional activities, or securities trading activities. Further, any banking organization experiencing or anticipating significant growth would be expected to maintain capital ratios, including tangible capital positions (i.e., Tier 1 Capital less all intangible assets), well above the minimum levels.

Under the capital regulations of the FDIC and Federal Reserve, in order to be well capitalized, a banking organization must maintain:

•A Common Equity Tier 1 Capital ratio to risk-weighted assets of 6.5% or more;

•A ratio of Tier 1 Capital to total risk-weighted assets of 8.0% or more;

•A ratio of Total Capital to total risk-weighted assets of 10.0% or more; and

•A leverage ratio of Tier 1 Capital to total adjusted average quarterly assets of 5.0% or greater.

It is possible under the Basel III Rule to be well capitalized while remaining out of compliance with the capital conservation buffer discussed above.

As of December 31, 2022, the Company had regulatory capital in excess of the Federal Reserve’s requirements and met the requirements to be well capitalized. The Company was also in compliance with the capital conservation buffer. As of December 31, 2022, the Bank was was well capitalized, as defined by FDIC regulations.

Prompt Corrective Action. The concept of an institution being “well capitalized” is part of a regulatory enforcement regime that provides the federal banking regulators with broad power to take “prompt corrective action” to resolve the problems of depository institutions based on the capital level of each particular institution. The extent of the regulators’ powers depends on whether the institution in question is “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” or “critically undercapitalized,” in each case as defined by regulation. Depending upon the capital category to which an institution is assigned, the regulators’ corrective powers include: (i) requiring the institution to submit a capital restoration plan; (ii) limiting the institution’s asset growth and restricting its activities; (iii) requiring the institution to issue additional capital stock (including additional voting stock) or to sell itself; (iv) restricting transactions between the institution and its affiliates; (v) restricting the interest rate that the institution may pay on deposits; (vi) ordering a new election of directors of the institution; (vii) requiring that senior executive officers or directors be dismissed; (viii) prohibiting the institution from accepting deposits from correspondent banks; (ix) requiring the institution to divest certain subsidiaries; (x) prohibiting the payment of principal or interest on subordinated debt; and (xi) ultimately, appointing a receiver for the institution.

Community Bank Leverage Ratio Framework. In response to industry complaints concerning the regulatory burdens imposed on community banks by certain aspects of the Basel III Rule, the U.S. Congress, as part of the 2018 Economic Growth, Regulatory Relief, and Consumer Protection Act, authorized an optional, simplified measure of capital adequacy, the “Community Bank Leverage Ratio” (“CBLR”) framework, for qualifying community banking organizations like the Company with less than $10 billion in total consolidated assets. The federal banking agencies jointly adopted a rulemaking effective January 1, 2020, that implemented this alternative approach to measuring capital. Qualifying institutions must have a leverage ratio greater than 9%, off-balance sheet exposures of 25% or less of total consolidated assets, and trading assets and liabilities of 5% or less of total consolidated assets. Banks that opt in to the rule are not required to calculate or report risk-based capital and are deemed to have met the well-capitalized ratio requirement. In response to the COVID-19 pandemic, the banking agencies temporarily lowered the qualifying leverage ratio to 8% in the second quarter of 2020, which then rose to 8.5% for calendar year 2021 and 9% thereafter. The Company has not opted in to the CBLR capital framework.

Activities, Acquisitions, and Changes in Control. The BHCA requires a bank holding company to obtain approval from the Federal Reserve before (i) acquiring or holding more than a 5% voting interest in any bank or bank holding company, (ii)

5

acquiring all or substantially all of the assets of another bank or bank holding company or (iii) merging or consolidating with another bank holding company. Federal law also prohibits any person or company from acquiring “control” of an FDIC-insured depository institution or its holding company without prior notice to the appropriate federal bank regulator. “Control” is conclusively presumed to exist upon the acquisition of 25% or more of the outstanding voting securities of a bank or bank holding company, but may arise under certain circumstances between 10% and 24.99% ownership.

Bank mergers and acquisitions generally will require the approval of the regulatory authorities of each banking organization. In determining whether to approve a proposed bank acquisition, federal bank regulators will consider, among other factors, the effect of the acquisition on competition, public benefits expected to be generated by the acquisition, post-acquisition capital levels, and performance under the Community Reinvestment Act of 1977, as amended (the “CRA”). The federal banking regulators are also required to take into account the effectiveness of the Bank Secrecy Act/anti-money laundering activities of the applicant. Federal regulatory policy relating to the approval of proposed mergers and acquisitions is currently under review. In July 2021, President Biden issued an Executive Order on Promoting Competition in the American Economy that, among other initiatives, calls upon the federal banking agencies to review their current merger approval practices under the BHCA and the Bank Merger Act, and adopt a plan for the revitalization of such practices. In February 2022, Acting FDIC Chairman Gruenberg announced that the agency’s priorities include a comprehensive review of the process of considering and evaluating bank mergers, something the FDIC indicated had not been done in 25 years.

Holding Company Dividends. The Company’s ability to pay dividends to shareholders will be impacted both by general corporate law considerations and policies of the Federal Reserve applicable to bank holding companies. It may also be impacted by the ability of the Bank to pay dividends to the Company, discussed under “Bank Regulation—Dividends” below. As an Indiana corporation, the Company is subject to the Indiana Business Corporation Law, as amended, which prohibits the Company from paying a dividend if, after giving effect to the dividend, the Company would not be able to pay its debts as they become due in the usual course of business, or if the Company’s total assets would be less than the sum of its total liabilities plus the amount that would be needed, if the corporation were to be dissolved at the time of the distribution, to satisfy the preferential rights upon dissolution of shareholders whose preferential rights are superior to those receiving the distribution.

The Federal Reserve has indicated that the board of directors of a bank holding company should eliminate, defer or significantly reduce dividends to shareholders if: (i) the company’s net income available to shareholders for the past four quarters, net of dividends previously paid during that period, is not sufficient to fully fund the dividends; (ii) the prospective rate of earnings retention is inconsistent with the Company’s capital needs and overall current and prospective financial condition; or (iii) the company will not meet, or is in danger of not meeting, its minimum regulatory capital adequacy ratios. The Federal Reserve possesses enforcement powers to prevent or remedy actions that represent unsafe or unsound practices or violations of applicable statutes or regulations. Among those powers is the ability to restrict the payment of dividends. In addition, under the Basel III Rule, institutions that seek the freedom to pay dividends have to maintain 2.5% in Common Equity Tier 1 Capital attributable to the capital conservation buffer. See “Regulatory” section above.

Source of Strength. Under the Dodd-Frank Act, we are required to serve as a source of financial and managerial strength for the Bank and to commit resources to support it in circumstances where we might not otherwise do so, in the event of the financial distress of the Bank. This provision codified the longstanding policy of the Federal Reserve. In addition, any capital loans by a bank holding company to any of its depository subsidiaries are subordinate to the payment of deposits and to certain other indebtedness. In the event of a bank holding company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a depository subsidiary will be assumed by the bankruptcy trustee and entitled to a priority of payment.

Employee Incentive Compensation. Under regulatory guidance applying to all banking organizations, incentive compensation policies must be consistent with safety and soundness principles. Under this guidance, banking organizations must review their compensation programs to ensure that they: (i) provide employees with incentives that appropriately balance risk and reward and that do not encourage imprudent risk, (ii) are compatible with effective controls and risk management, and (iii) are supported by strong corporate governance, including active and effective oversight by the banking organization's board of directors. Monitoring methods and processes used by a banking organization should be commensurate with the size and complexity of the organization and its use of incentive compensation.

Bank Regulation

General. The Bank is an Indiana-chartered bank formed pursuant to the Indiana Financial Institutions Act (the “IFIA”). As such, the Bank is regularly examined by and subject to regulations promulgated by the DFI and the FDIC as its primary federal bank regulator. The Bank is not a member of the Federal Reserve System.

6

Business Activities. The Bank derives its lending and investment powers from the IFIA, the Federal Deposit Insurance Act (the “FDIA”) and related regulations.

Loans-to-One Borrower Limitations. Generally, the Bank’s total loans or extensions of credit to a single borrower, including the borrower’s related entities, outstanding at one time, and not fully secured, cannot exceed 15% of the Bank’s unimpaired capital and surplus. If the loans or extensions of credit are fully secured by readily marketable collateral, the Bank may lend up to an additional 10% of its unimpaired capital and surplus.

Community Reinvestment Act. Under the CRA, as implemented by FDIC regulations, the Bank has a continuing and affirmative obligation, consistent with safe and sound banking practices, to help meet the credit needs of its entire community, including low and moderate-income neighborhoods. The CRA does not establish specific lending requirements or programs for financial institutions nor does it limit an institution’s discretion to develop the types of products and services that it believes are best suited to its particular community, consistent with the CRA. The CRA requires the FDIC, in connection with its examinations of the Bank, to assess the Bank’s record of meeting the credit needs of its entire community and to take that record into account in evaluating certain applications for regulatory approvals that we may file with the FDIC.

Due to its online-driven model and nationwide banking platform, the Bank has opted to operate under a CRA Strategic Plan, which sets forth certain guidelines the Bank must meet. The Bank's current CRA Strategic Plan covers the time period of January 1, 2021 through December 31, 2023. The Bank received a “Satisfactory” CRA rating in its most recent CRA examination. Failure of an institution to receive at least a “Satisfactory” rating could inhibit such institution or its holding company from engaging in certain activities or pursuing acquisitions of other financial institutions.

The federal banking agencies are currently working on a comprehensive review and revision of the rule implementing the CRA that is intended to strengthen and enhance the CRA.

Transactions with Affiliates. The authority of the Bank, like other FDIC-insured institutions, to engage in transactions with its “affiliates” is limited by Sections 23A and 23B of the Federal Reserve Act and the Federal Reserve’s Regulation W. An “affiliate” for this purpose is defined generally as any company that owns or controls the Bank or is under common ownership or control with the Bank, but excludes a company controlled by a bank. In general, transactions between the Bank and its affiliates must be on terms that are consistent with safe and sound banking practices and at least as favorable to the Bank as comparable transactions between the Bank and non-affiliates. In addition, covered transactions with affiliates are restricted individually to 10% and in the aggregate to 20% of the Bank’s capital. Collateral ranging from 100% to 130% of the loan amount depending on the quality of the collateral must be provided for an affiliate to secure a loan or other extension of credit from the Bank. The Company is an “affiliate” of the Bank for purposes of Regulation W and Sections 23A and 23B of the Federal Reserve Act. We believe the Bank complied with these provisions during 2022.

Loans to and Other Transactions with Insiders. The Bank’s authority to extend credit to its directors, executive officers and principal shareholders, as well as to entities controlled by such persons (“Related Interests”), is governed by Sections 22(g) and 22(h) of the Federal Reserve Act and Regulation O of the Federal Reserve. Among other things, these provisions require that extensions of credit to insiders: (1) be made on terms that are substantially the same as, and follow credit underwriting procedures that are not less stringent than, those prevailing for comparable transactions with unaffiliated persons and that do not involve more than the normal risk of repayment or present other unfavorable features; and (2) not exceed certain limitations on the amount of credit extended to such persons, individually and in the aggregate, which limits are based, in part, on the amount of the Bank’s capital. In addition, extensions of credit in excess of certain limits must be approved in advance by the Bank’s Board of Directors. Further, provisions of the Dodd-Frank Act require that any sale or purchase of an asset by the Bank with an insider must be on market terms, and if the transaction represents more than 10% of the Bank’s capital stock and surplus, it must be approved in advance by a majority of the disinterested directors of the Bank. We believe the Bank is in compliance with these provisions.

Enforcement. The DFI and the FDIC share primary regulatory enforcement responsibility over the Bank and its institution-affiliated parties, including directors, officers and employees. This enforcement authority includes, among other things, the ability to appoint a conservator or receiver for the Bank, to assess civil money penalties, to issue cease and desist orders, to seek judicial enforcement of administrative orders and to remove directors and officers from office and bar them from further participation in banking. In general, these enforcement actions may be initiated in response to violations of laws, regulations and administrative orders, as well as in response to unsafe or unsound banking practices or conditions.

Standards for Safety and Soundness. Pursuant to the FDIA, the federal banking agencies have adopted a set of guidelines prescribing safety and soundness standards. These guidelines establish general standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset

7

growth, asset quality, earnings standards, compensation, fees and benefits. In general, the guidelines require appropriate systems and practices to identify and manage the risks and exposures specified in the guidelines. We believe we are in compliance with the safety and soundness guidelines.

Dividends. The ability of the Bank to pay dividends is limited by state and federal laws and regulations, including the requirement for the Bank to obtain the prior approval of the DFI before paying a dividend that, together with other dividends it has paid during a calendar year, would exceed the sum of its net income for the year to date combined with its retained net income for the previous two years. The ability of the Bank to pay dividends is further affected by the requirement to maintain adequate capital pursuant to applicable capital adequacy guidelines and regulations, and it is generally prohibited from paying any dividends if, following payment thereof, it would be undercapitalized. Notwithstanding the availability of funds for dividends, the FDIC and the DFI may prohibit the payment of dividends by the Bank if either or both determine such payment would constitute an unsafe or unsound practice. In addition, under the Basel III Rule, institutions that seek the freedom to pay dividends have to maintain 2.5% in Common Equity Tier 1 Capital attributable to the capital conservation buffer.

Insurance of Deposit Accounts. The Bank is a member of the Deposit Insurance Fund (“DIF”), which is administered by the FDIC. All deposit accounts at the Bank are insured by the FDIC up to a maximum of $250,000 per depositor. Under the FDIA, the FDIC may terminate deposit insurance upon a finding that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC.

Liquidity. The Bank is required to maintain a sufficient amount of liquid assets to ensure its safe and sound operation. To fund its operations, the Bank historically has relied upon deposits, Federal Home Loan Bank of Indianapolis (“FHLB”) borrowings, Fed Funds lines with correspondent banks and brokered deposits. The FDIA and FDIC regulations limit the ability of banks to accept, renew, or roll over brokered deposits unless the institution is well capitalized. The FDIC may grant a waiver to permit a less than well capitalized bank to hold brokered deposits, but limitations on the rates paid on such deposits will apply, and the bank may also be required to pay a higher deposit insurance assessment on such deposits. The Bank believes it has sufficient liquidity to meet its funding obligations for at least the next twelve months.

Federal Home Loan Bank System. The Bank is a member of the FHLB, which is one of the regional Federal Home Loan Banks comprising the Federal Home Loan Bank System. Each Federal Home Loan Bank serves as a central credit facility primarily for its member institutions. The Bank, as a member of the FHLB, is required to acquire and hold shares of FHLB capital stock. While the required percentage of stock ownership is subject to change by the FHLB, the Bank is in compliance with this requirement with an investment in FHLB stock at December 31, 2022 of $28.4 million. Any advances from the FHLB must be secured by specified types of collateral, and long-term advances may be used for the purpose of providing funds to make residential mortgage or commercial loans and to purchase investments. Long-term advances may also be used to help alleviate interest rate risk for asset and liability management purposes. The Bank receives dividends on its FHLB stock.

Federal Reserve System. Although the Bank is not a member of the Federal Reserve System, it is subject to provisions of the Federal Reserve Act and the Federal Reserve’s regulations under which depository institutions may be required to maintain reserves against their deposit accounts and certain other liabilities. In March 2020, the Federal Reserve announced that the banking system had ample reserves and, as reserve requirements no longer played a significant role in this regime, it reduced all reserve tranches to zero percent, thereby freeing banks from the reserve maintenance requirement. This action permits the Bank to loan or invest funds that were previously unavailable. The Federal Reserve has indicated that it currently has no plans to reimpose reserve requirements but that it may impose such a requirement in the future if conditions warrant.

Anti-Money Laundering and the Bank Secrecy Act. Under the Bank Secrecy Act (the “BSA”), a financial institution is required to have systems in place to detect and report transactions of a certain size and nature. Financial institutions are generally required to report to the U.S. Treasury any cash transactions involving more than $10,000. In addition, financial institutions are required to file suspicious activity reports for transactions that involve more than $5,000 and which the financial institution knows, suspects or has reason to suspect involves illegal funds, is designed to evade the requirements of the BSA or has no lawful purpose. The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (the “USA PATRIOT Act”), which amended the BSA, is designed to deny terrorists and others the ability to obtain anonymous access to the U.S. financial system. The USA PATRIOT Act has significant implications for financial institutions and businesses of other types involved in the transfer of money. The USA PATRIOT Act, in conjunction with the implementation of various federal regulatory agency regulations, has caused financial institutions, such as the Bank, to adopt and implement additional policies or amend existing policies and procedures with respect to, among other things, anti-money laundering compliance, suspicious activity, currency transaction reporting, customer identity verification and customer risk analysis. Bank regulators regularly examine institutions for compliance with these obligations, and may impose “cease and desist” orders and civil money penalty sanctions on institutions determined to be in violation of these obligations.

8

In January 2021, the Anti-Money Laundering Act of 2020 (the “AMLA”), which amends the BSA, was enacted. The AMLA is intended to comprehensively reform and modernize U.S. anti-money laundering laws. Among other things, the AMLA codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the development of standards by the U.S. Treasury for evaluating technology and internal processes for BSA compliance; and expands enforcement- and investigation-related authority, including a significant expansion in the available sanctions for certain BSA violations and enhanced whistleblower provisions permitting monetary awards to persons who provide information that leads to successful enforcement of certain violations. Many of the statutory provisions in the AMLA will require additional rulemaking, reports and other measures, and the impact of the AMLA will depend on, among other things, rulemaking and implementation guidance.

The United States has imposed economic sanctions that affect transactions with designated foreign countries, nationals and others. These sanctions, which are administered by the U.S. Treasury Office of Foreign Assets Control (“OFAC”), take many different forms. Generally, however, they contain one or more of the following elements: (1) restrictions on trade with or investment in a sanctioned country, including prohibitions against direct or indirect imports from and exports to a sanctioned country and prohibitions on “U.S. persons” engaging in financial transactions relating to making investments in, or providing investment-related advice or assistance to, a sanctioned country; and (2) blocking of assets in which the government or specially designated nationals of the sanctioned country have an interest by prohibiting transfers of property subject to U.S. jurisdiction (including property in the possession or control of U.S. persons). Blocked assets (for example, property and bank deposits) cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC. Failure to comply with these sanctions can give rise to serious legal and reputational consequences.

Consumer Protection Laws. The Bank is subject to a number of federal and state laws designed to protect consumers and prohibit unfair or deceptive business practices. These laws include the Equal Credit Opportunity Act, Fair Housing Act, Homeowners Protection Act, Fair Credit Reporting Act, as amended by the Fair and Accurate Credit Transactions Act of 2003 (the “FACT Act”), the Gramm-Leach-Bliley Act (the “GLBA”), the Truth in Lending Act, the CRA, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, the National Flood Insurance Act, the Service Members Civil Relief Act, the Expedited Funds Availability Act, the Electronic Fund Transfer Act, the Truth in Savings Act, the Right to Financial Privacy Act, laws relating to unfair, deceptive and abusive acts and practices, and various state laws such as usury laws, or laws which are counterparts and/or extensions of the foregoing federal laws. These laws and regulations mandate certain disclosure requirements and regulate the manner in which financial institutions must interact with customers when taking deposits, making loans, collecting loans and providing other services. Further, the Dodd-Frank Act established the CFPB as an independent agency within the Federal Reserve System. The CFPB has the exclusive authority to administer, enforce, and otherwise implement federal consumer financial laws, which includes the power to make rules, issue orders, and issue guidance governing the provision of consumer financial products and services. The CFPB also has a broad mandate to prohibit unfair or deceptive acts and practices and is specifically empowered to require certain disclosures to consumers and draft model disclosure forms. Failure to comply with consumer protection laws and regulations can subject financial institutions to enforcement actions, fines and other penalties. In recent years, state authorities have also increased their attention to the enforcement of consumer protection rules, and in some cases, states are permitted to adopt and enforce consumer protection laws and regulations that are stricter than those issued or enforced by the CFPB. The CFPB has exclusive federal consumer law supervisory authority and primary enforcement authority over insured depository institutions with assets totaling over $10 billion. Authority for institutions with $10 billion or less rests with the prudential regulator, and in the case of the Bank lies with the FDIC.

Residential Mortgage Restrictions. The Dodd-Frank Act initiated a number of significant residential mortgage lending reforms that have taken place in recent years. These reforms include standards that mortgage lenders must consider before making a residential mortgage loan, including verifying a borrower’s ability to repay such mortgage loan. Borrowers are also allowed to assert violations of certain provisions of the Truth-in-Lending Act as a defense to foreclosure proceedings. Prepayment penalties are prohibited for certain mortgage transactions and creditors are prohibited from financing insurance policies in connection with a residential mortgage loan or home equity line of credit. Mortgage lenders are required to make additional disclosures prior to the extension of credit, in each billing statement and for negative amortization loans and hybrid adjustable rate mortgages. Additionally, mortgage originators are prohibited from receiving compensation based on the terms of residential mortgage loans and are subject to limitations on their ability to be compensated by others if compensation is received from a consumer.

Customer Information Security. The federal banking agencies have adopted final guidelines for establishing standards for safeguarding nonpublic personal information about customers. These guidelines implement provisions of the GLBA. Specifically, the Information Security Guidelines established by the GLBA require each financial institution, under the supervision and ongoing oversight of its board of directors or an appropriate committee thereof, to develop, implement and maintain a comprehensive written information security program designed to ensure the security and confidentiality of customer

9

information (as defined under the GLBA), to protect against anticipated threats or hazards to the security or integrity of such information and to protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer. The federal banking regulators have issued guidance for banks on response programs for unauthorized access to customer information. This guidance, among other things, requires notice to be sent to customers whose “sensitive information” has been compromised if misuse of this information is “reasonably possible.”

Identity Theft Red Flags. Rules implementing Section 114 of the FACT Act require each financial institution or creditor to develop and implement a written Identity Theft Prevention Program to detect, prevent and mitigate identity theft in connection with the opening of certain accounts or certain existing accounts. In addition, the federal banking agencies issued guidelines to assist financial institutions and creditors in the formulation and maintenance of an Identity Theft Prevention Program that satisfies the requirements of the rules. Rules implementing Section 114 of the FACT Act also require credit and debit card issuers to assess the validity of notifications of changes of address under certain circumstances. Additionally, the federal banking agencies issued joint rules under Section 315 of the FACT Act that provide guidance regarding reasonable policies and procedures that a user of consumer reports must employ when a consumer reporting agency sends the user a notice of address discrepancy.

Privacy. The GLBA requires financial institutions to implement policies and procedures regarding the disclosure of nonpublic personal information about consumers to nonaffiliated third parties. In general, the statute requires financial institutions to explain to consumers their policies and procedures regarding the disclosure of such nonpublic personal information and, except as otherwise required or permitted by law, financial institutions are prohibited from disclosing such information except as provided in their policies and procedures. The Bank is required to provide notice to its customers on an annual basis disclosing its policies and procedures on the sharing of nonpublic personal information. From time to time, Congress and state legislatures consider additional legislation relating to privacy and other aspects of consumer information that could have an impact on our business, financial condition or results of operations.

A number of U.S. states have also enacted data privacy and security laws and regulations that govern the collection, use, disclosure, transfer, storage, disposal and protection of personal information, such as social security numbers, financial information and other information. These laws and regulations may be more restrictive and not preempted by U.S. federal laws.For example, several U.S. territories and all 50 states now have data breach laws that require timely notification to individuals, and at times regulators, the media or credit reporting agencies, if a company has experienced the unauthorized access or acquisition of personal information.Other state laws include the California Consumer Privacy Act (“CCPA”), which took effect on January 1, 2020. The CCPA, among other things, contains new disclosure obligations for businesses that collect personal information about California residents and affords those individuals numerous rights relating to their personal information that may affect our ability to use personal information or share it with our business partners.

A second law called the California Privacy Rights Act (“CPRA”), which goes into effect in 2023, expands the scope of the CCPA, imposes new restrictions on behavioral advertising, and establishes a new California Privacy Protection Agency which will enforce the law and issue regulations. Similar laws were enacted in Virginia and Colorado in 2021 and go into effect in 2023, and other states have considered and are actively considering legislation along the same lines. We will continue to monitor and assess the impact of these state laws, which may impose substantial penalties for violations, impose significant costs for investigation and compliance, allow private class-action litigation and carry significant potential liability for our business.

Cybersecurity. In 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish lines of defense and ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing digital-based services of the financial institution. The other statement indicates that a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption, and maintenance of the institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to this type of cyber-attack. If we fail to observe the regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties.

In November 2021, the federal banking agencies published a final rule establishing computer-security incident notification requirements that require a banking organization to notify its primary federal regulator of any “computer security incident” that rises to the level of a “notification incident” as soon as possible and no later than 36 hours after determining that such an incident has occurred. The rule also requires a bank service provider to notify each affected banking organization

10

customer as soon as possible when the service provider determines it has experienced a computer security incident that has caused, or is reasonably likely to cause, a material service disruption or degradation for four or more hours.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. For example, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many states have also recently implemented or modified their data breach notification and data privacy requirements. We expect this trend of increased activity and changes at the state level to continue.

In 2018, the SEC published interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents. These SEC guidelines, and any other regulatory guidance, are in addition to notification and disclosure requirements under state and federal banking law and regulations.

In support of our digital banking platform, we rely heavily on electronic communications and information systems to conduct our operations and store sensitive data. We employ an in-depth approach that leverages people, processes, and technology to manage and maintain cybersecurity controls. In addition, we employ a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity, as well as to report on any suspected advanced persistent threats. Notwithstanding the strength of our defensive measures, the threat from cyber-attacks is severe, attacks are sophisticated and increasing in volume, and attackers respond rapidly to changes in defensive measures.

We continually strive to enhance our cyber and information security in order to be resilient against emerging threats and improve our ability to detect and respond to attempts to gain unauthorized access to our data and systems. We regularly conduct cybersecurity risk assessments, regularly engage with the Board or appropriate committees on cybersecurity matters, routinely update our incident response plans based on emerging threats, periodically practice implementation of incident response plans across applicable departments, and train officers and employees to detect and report suspicious activity. Although to date we have not experienced any material losses relating to cyber-attacks or other information security breaches, our systems and those of our customers and third-party service providers are under constant threat, and it is possible that we could experience a significant event in the future due to the rapidly evolving nature and sophistication of these threats.

Climate-Related Risk Management and Regulation.In recent years, the federal banking agencies and the SEC have increased their focus on climate-related risks impacting the operation of banks, the communities they serve and the financial system as a whole. Proposals related to climate-related financial and other risks impacting banks are being considered at both the federal and state level. It is too early to predict to what extent legislative and regulatory proposals will impact the Company and the Bank, but we will continue to monitor these developments and the steps that will need to be taken to address any new requirements.

Additional Matters. The earnings of financial institutions are also affected by general economic conditions and prevailing interest rates, both domestic and foreign, and by the monetary and fiscal policies of the United States Government and its various agencies, particularly the Federal Reserve. The Federal Reserve regulates the supply of credit in order to influence general economic conditions, primarily through open market operations in United States Government obligations, varying the discount rate on financial institution borrowings, varying reserve requirements against financial institution deposits, and restricting certain borrowings by financial institutions and their subsidiaries. The monetary policies of the Federal Reserve have had a significant effect on the operating results of the Bank in the past and are expected to continue to do so in the future.

Additional legislation and administrative actions affecting the banking industry may be considered by the United States Congress, state legislatures and various regulatory agencies, including those referred to above. It cannot be predicted with certainty whether such legislation or administrative action will be enacted or the extent to which the banking industry, the Company or the Bank would be affected.

Available Information

The Company makes available its Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and all amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), free of charge on its website at www.firstinternetbancorp.com as soon as reasonably practicable after it electronically files such material with, or furnishes it to, the SEC. In addition, the SEC maintains an internet site at www.sec.gov that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC. References to the Company’s website address in this Annual Report on Form 10-K are provided as a convenience only and are not incorporated by reference.

11

Item 1A. Risk Factors

Risk factors which could cause actual results to differ from our expectations and which could negatively impact our financial condition and results of operations are discussed below and elsewhere in this report. Additional risks and uncertainties not presently known to us or that are currently not believed to be significant to our business may also affect our actual results and could harm our business, financial condition and results of operations. If any of the risks or uncertainties described below or any additional risks and uncertainties actually occur, our business, results of operations and financial condition could be materially and adversely affected.

Business, Strategic, and Reputational Risks

A failure of, or interruption in, the communications and information systems on which we rely to conduct our business could adversely affect our revenues and profitability.

We rely heavily upon communications and information systems to conduct our business. Although we have built a level of redundancy into our information technology infrastructure and update our business continuity plan annually, any failure or interruption of our information systems, or the third-party information systems on which we rely, as a result of inadequate or failed processes or systems, human errors or external events, could adversely affect our digital-based operations and slow or temporarily halt the processing of applications, loan servicing, deposit-related transactions, and our general banking operations. In addition, our communication and information systems may present security risks and could be susceptible to hacking or other unauthorized access. The occurrence of any of these events could have a material adverse effect on our business, financial condition and results of operations.

Economic conditions have affected and could continue to adversely affect our revenues and profits.

Our success depends, to a certain extent, upon favorable economic and political conditions, local and national, as well as governmental monetary policies. Conditions such as recession, unemployment, changes in interest rates, inflation, money supply, and other factors beyond the Company’s control may adversely affect deposit levels, costs, loan demand and/or asset quality and, therefore, our earnings. Further, any economic downturn could result in financial stress on our borrowers that would adversely affect consumer confidence, a reduction in general business activity and increased market volatility. The resulting economic pressure on consumers and businesses and the lack of confidence in the financial markets could adversely affect our business, financial condition, results of operations and stock price. Our ability to properly assess the creditworthiness of our customers and to estimate the losses inherent in our credit exposure would be made more complex by difficult or rapidly changing market and economic conditions. Accordingly, if market conditions worsen, we may experience increases in foreclosures, delinquencies, write-offs and customer bankruptcies, as well as more restricted access to funds.

The competitive nature of the banking and financial services industry could negatively affect our ability to increase or maintain our market share and retain long-term profitability.

Competition in the banking and financial services industry is strong. We compete with commercial banks, savings institutions, mortgage brokerage firms, credit unions, finance companies, fintechs, mutual funds, insurance companies and securities brokerage and investment banking firms operating locally and nationwide and may soon compete with entities that granted “special purpose national bank” (“SPNB”) charters by the Office of the Comptroller of the Currency. Some of our competitors have greater name recognition and market presence than we do and offer certain services that we do not or cannot provide. In addition, larger competitors may be able to price loans and deposits more aggressively than we do, which could affect our ability to increase our market share and remain profitable on a long-term basis.

Reputational risk and social factors may negatively affect us.

Our ability to attract and retain customers is highly dependent upon other external perceptions of our business practices and financial condition. Adverse perceptions could damage our reputation to a level that could lead to difficulties in generating and maintaining lending and deposit relationships and accessing equity or credit markets, as well as increased regulatory scrutiny of our business.Adverse developments or perceptions regarding the business practices or financial condition of our competitors, or our industry as a whole, may also indirectly adversely affect our reputation.

12

In addition, adverse reputational developments with respect to third parties with whom we have important relationships may negatively affect our reputation. All of the above factors may result in greater regulatory and/or legislative scrutiny, which may lead to laws or regulations that may change or constrain the manner in which we engage with our customers and the products we offer and may also increase our litigation risk. If these risks were to materialize, they could negatively affect our business, financial condition and results of operations.

New lines of business, and new products and services may result in exposure to new risks and the value and earnings related to existing lines of business are subject to market conditions.

The Bank has introduced, and in the future, may introduce new products and services to differing markets either alone or in conjunction with third parties, including programs and products introduced as part of our fintech partnership initiatives. New lines of business, products or services could have a significant impact on the effectiveness of our system of internal controls or the controls of third parties and could reduce our revenues and potentially generate losses. There are material inherent risks and uncertainties associated with offering new products and services, especially when new markets are not fully developed or when the laws and regulations regarding a new product are not mature. New products and services, or entrance into new markets, may require substantial time, resources and capital, and profitability targets may not be achieved. Factors outside of our control, such as developing laws and regulations, regulatory orders, competitive product offerings and changes in commercial and consumer demand for products or services may also materially impact the successful launch and implementation of new products or services. Failure to manage these risks, or failure of any product or service offerings to be successful and profitable, could have a material adverse effect on our financial condition and results of operations.

The wind-down of our consumer mortgage operations may take longer than expected and may cost more than anticipated.

Due to the steep decline in consumer mortgage volumes and the negative outlook for consumer mortgage lending over the next several years, the Company decided to exit the consumer mortgage business during the first quarter of 2023. We have incurred and expect to incur a number of costs associated with the wind-down of the consumer mortgage business through at least the end of the second quarter of 2023. Our management made accounting judgments and estimates related to the wind-down of the consumer mortgage business. Our operating results could be adversely impacted in future periods if the accounting judgments and estimates prove to be inaccurate, if the wind-down takes significantly longer than anticipated, if we incur additional, unanticipated costs, or if we face litigation related to the exit.

Significant external events, including continued spread of the COVID-19 pandemic or outbreak of a highly contagious disease, could adversely affect our business and results of operations.

We could experience other external events such as severe weather, natural disasters, acts of war, such as the current conflict in Ukraine, terrorism or widespread public health issues, such as the COVID-19 pandemic or another highly contagious or infectious disease, that could impair the ability of our customers to repay outstanding loans; impair the value of collateral, if any, securing outstanding loans; negatively impact our deposit base, loan originations or general demand for our services; cause significant property damage; result in loss of revenue or cause us to incur additional expenses or losses. We could also be adversely affected if key personnel or a significant number of employees were to become unavailable due to external events affecting the places they live. Although we have business continuity plans and other safeguards in place, there is no assurance that such plans and safeguards will completely mitigate the adverse impacts of any significant external event. The occurrence or continuation of any such event could materially adversely impact our business, our ability to provide our services, demand for our services, asset quality, financial condition and results of operations.

Anti-takeover provisions could negatively impact our shareholders.

Provisions of Indiana law and provisions of our articles of incorporation could make it more difficult for a third party to acquire control of us or have the effect of discouraging a third party from attempting to acquire control of us. We are subject to certain anti-takeover provisions under the Indiana Business Corporation Law. Additionally, our articles of incorporation authorize our Board of Directors to issue one or more classes or series of preferred stock without shareholder approval and such preferred stock could be issued as a defensive measure in response to a takeover proposal.

Although these provisions do not preclude a takeover, they may have the effect of discouraging, delaying or deferring a tender offer or takeover attempt that a shareholder might consider in his or her best interest, including those attempts that might result in a premium over the market price of our common stock. Such provisions will also render the removal of the Board of Directors and of management more difficult and, therefore, may serve to perpetuate current management. These provisions could potentially adversely affect the market price of our common stock.

13

Credit Risks

Our commercial loan portfolio exposes us to higher credit risks than residential real estate loans, including risks relating to the success of the underlying business and conditions in the market or the economy and concentrations in our commercial loan portfolio.

Our commercial loans totaled $2.7 billion, or 77.7% of our total loan portfolio as of December 31, 2022. These loans generally involve higher credit risks than residential real estate loans and are dependent upon our lenders maintaining close relationships with the borrowers. Payments on these loans are often dependent upon the successful operation and management of the underlying business or assets, and repayment of such loans may be influenced to a great extent by conditions in the market or the economy. Commercial loans typically involve larger loan balances than residential real estate loans and could lead to concentration risks within our commercial loan portfolio. In addition, our C&I, healthcare finance, franchise finance and small business loans have primarily been extended to small to medium sized businesses that generally have fewer financial resources in terms of capital or borrowing capacity than larger entities.Our failure to manage this commercial loan growth and the related risks could have a material adverse effect on our business, financial condition and results of operations.

In addition, with respect to CRE, federal and state banking regulators are examining CRE lending activity with heightened scrutiny and may require banks with higher levels of CRE loans to implement more stringent underwriting, internal controls, risk management policies and portfolio stress testing, as well as possibly higher levels of allowances for losses and capital levels as a result of CRE lending growth and exposures. Because a significant portion of our loan portfolio is comprised of CRE loans, our banking regulators may require us to maintain higher levels of capital than we would otherwise be expected to maintain, which could limit our ability to leverage our capital and have a material adverse effect on our business, financial condition, results of operations and prospects.

Portions of our commercial lending activities are geographically concentrated in Central Indiana and adjacent markets, and changes in local economic conditions may impact their performance.

We offer our consumer lending as well as public finance, healthcare finance, franchise finance, small business lending and single tenant financing products and services throughout the United States. However, we serve CRE and C&I borrowers primarily in Central Indiana and adjacent markets. Accordingly, the performance of our CRE and C&I lending depends upon demographic and economic conditions in those regions. The profitability of our CRE and C&I loan portfolio may be impacted by changes in those conditions. Additionally, unfavorable local economic conditions could reduce or limit the growth rate of our CRE and C&I loan portfolios for a significant period of time, or otherwise decrease the ability of those borrowers to repay their loans, which could have a material adverse effect on our business, financial condition and results of operations.

We are subject to risks arising from conditions in the real estate market, as a significant portion of our loans are secured by real estate.

At December 31, 2022, approximately 48.2% of our loans held for investment portfolio was comprised of loans with real estate as the primary component of collateral. Our real estate lending activities, and our exposure to fluctuations in real estate collateral values, are significant and may increase as our assets increase. The market value of real estate can fluctuate significantly in a relatively short period of time as a result of market conditions in the geographic area in which the real estate is located, in response to factors such as economic downturns, changes in the economic health of industries heavily concentrated in a particular area and in response to changes in market interest rates, which influence capitalization rates used to value revenue-generating commercial real estate. If the value of real estate serving as collateral for our loans declines materially, a significant part of our loan portfolio could become under-collateralized and losses incurred upon borrower defaults would increase. Conditions in certain segments of the real estate industry, including homebuilding, lot development and mortgage lending, may have an effect on values of real estate pledged as collateral for our loans. The inability of purchasers of real estate, including residential real estate, to obtain financing may weaken the financial condition of our borrowers who are dependent on the sale or refinancing of property to repay their loans. Changes in the economic health of certain industries can have a significant impact on other sectors or industries which are directly or indirectly associated with those industries, and may impact the value of real estate in areas where such industries are concentrated.

The implementation of CECL, including the design and maintenance of related internal controls over financial reporting, will require a significant amount of time and resources which may have a material impact on our results of operations.

14

A new accounting standard adopted by FASB, referred to as Current Expected Credit Loss, or (“CECL”), will require financial institutions, like the Bank, to determine periodic estimates of lifetime expected credit losses on loans, and recognize the expected credit losses as allowances for loan and lease losses beginning with our fiscal year ending December 31, 2023.Current GAAP requires an incurred loss methodology for recognizing credit losses that delays recognition until it is probable a loss has been incurred.CECL will represent a significant change in methodology and may greatly increase the types of data we will need to collect and review to determine the appropriate level of the allowance for loan and lease losses.We are in the process of evaluating the impact of the adoption of this guidance on our financial statements.However, the allowance for loan and lease losses may increase upon the adoption of CECL and any such increased allowance level would decrease shareholders' equity and the Company's and Bank's regulatory capital ratios.

A significant amount of time and resources may be needed to implement CECL effectively, including the implementation of adequate internal controls, which may adversely affect our results of operations.If we are unable to maintain effective internal control over financial reporting relating to CECL, or otherwise, our ability to report our financial condition and results of operations accurately and on a timely basis could also be adversely affected.

Market, Interest Rate, and Liquidity Risks

The market value of some of our investments could decline and adversely affect our financial position.

In assessing the impairment of investment securities, we consider the length of time and extent to which the fair value has been less than cost, the financial condition and near-term prospects of the issuers, whether the market decline was affected by macroeconomic conditions and whether we have the intent to sell the security or will be required to sell the security before its anticipated recovery. We also use economic models to assist in the valuation of some of our investment securities. If our investment securities experience a decline in value, we would need to determine whether the decline represented an other-than-temporary impairment, in which case we would be required to record a write-down of the investment and a corresponding charge to our earnings.

Changes in interest rates could adversely affect the Company’s results of operations and financial condition.

The Company’s earnings depend substantially on the Company’s interest rate spread, which is the difference between (i) the rates the Bank earns on loans, securities, and other earning assets and (ii) the interest rates the Bank pays on deposits and other borrowings. These rates are highly sensitive to many factors beyond the Company’s control, including general economic conditions and the policies of various governmental and regulatory authorities. If market interest rates continue to rise, especially at the pace they did in 2022, the Company will have competitive pressure to increase the rates the Bank pays on deposits, which could result in a decrease of net interest income. If market interest rates decline, the Bank could experience fixed-rate loan prepayments and higher investment portfolio cash flows, resulting in a lower yield on earning assets. Earnings can also be impacted by the spread between short-term and long-term market interest rates.

The replacement of the London Inter-bank Offered Rate (“LIBOR”) with a benchmark rate that is higher or more volatile than LIBOR, could increase our cost of borrowing and could adversely impact our business, financial condition and results of operations.

In 2017, the Chief Executive of the United Kingdom Financial Conduct Authority (the “Authority”) announced that the Authority intended to stop persuading or compelling banks to submit rates for the calculation of LIBOR to the ICE Benchmark Administration Limited (together with any successor, “IBA”), as administrator of LIBORIn response to concerns regarding the future of LIBOR, Federal Reserve and the Federal Reserve Bank of New York convened the Alternative Reference Rates Committee (“ARRC”) to identify alternatives to LIBOR. The ARRC first recommended a benchmark replacement waterfall that facilitated continued linkage to LIBOR while recognizing that the discontinuation of LIBOR would eventually occur. The initial steps in the ARRC's recommended waterfall referenced variations of the Secured Overnight Financing Rate (“SOFR”), and the ARRC has since recommended SOFR as the replacement rate for U.S. dollar denominated LIBOR. While market participants were warned that LIBOR may cease to exist after 2021, the IBA announced in early 2021 that it would continue to publish the most widely used tenors of U.S. dollar denominated LIBOR (such as one-month and three-month LIBOR) until June 30, 2023. While the IBA's announcement extended LIBOR's phase-out, there is no current expectation that LIBOR will continue beyond mid-2023, and U.S. banking regulators have issued guidance encouraging banking organizations to cease using U.S. dollar denominated LIBOR as a reference rate in new contracts.

15

At this time, it is not possible to predict whether SOFR will attain market acceptance as the standard replacement for LIBOR, whether alternative reference rates other than SOFR (such as Ameribor) will gain market traction or whether additional reforms to LIBOR may be enacted. Further, other central banks and regulators have convened working groups to evaluate other interest rate benchmarks (such as EURIBOR), and it is possible that a transition away from certain of these interest rate benchmarks will occur leading to the establishment of new market accepted reference rates. Uncertainty regarding the market standard replacement for LIBOR, and floating rate benchmarks generally, could have adverse impacts on floating-rate obligations, loans, deposits, derivatives and other financial instruments that currently use LIBOR as a benchmark rate and adversely affect the Company's business, financial condition or results of operations.

Additionally, the floating rate features of our outstanding 6.0% Fixed-to-Floating Rate Subordinated Notes due 2029 (the “2029 Notes”) are based on LIBOR, while the floating rate features of our 3.75% Fixed-to-Floating Rate Subordinated notes due 2031 (the “2031 Notes”) are based on SOFR. In anticipation of LIBOR’s phase out, and the uncertainty of SOFR as a LIBOR replacement, the terms of our 2029 Notes and 2031 Notes provide for a benchmark replacement rate for LIBOR or SOFR, as applicable, with such benchmark replacement rate to be determined by the Company or an independent financial advisor appointed by the Company, as applicable, in each case in accordance with terms of the 2029 Notes and 2031 Notes, respectively. There can be no assurance that any replacement benchmark rate for our 2029 Notes or 2031 Notes will be determined or agreed upon, as applicable, before experiencing adverse effects due to changes in interest rates, if at all. We will continue to monitor the situation and address the potential reference rate changes in future debt obligations that we may incur. Accordingly, the potential effect of the phase-out of LIBOR, or the unavailability of any other interest rate benchmarks such as SOFR or EURIBOR, on our cost of capital cannot yet be determined. Further, the use of an alternative base rate or a benchmark replacement rate as a basis for calculating interest with respect to any outstanding variable rate indebtedness could lead to an increase in the interest we pay and a corresponding increase in our costs of capital or otherwise have a material adverse impact on our business, financial condition or results of operations.

The Bank may not be able to pay us dividends.

The ability of the Bank to pay dividends to us is limited by state and federal law and depends generally on the Bank’s ability to generate net income. If we are unable to comply with applicable provisions of these statutes and regulations, the Bank may not be able to pay dividends to us, we may not be able to pay dividends on our outstanding common stock and our ability to service our debt may be materially impaired.

We may need additional funding resources in the future, and these funding resources may not be available when needed or at all, without which our financial condition, results of operations and prospects could be materially impaired.

As a part of our liquidity management, we use a number of funding sources in addition to core deposit growth and repayments and maturities of loans and investments. These sources include brokered deposits and federal funds purchased. Further, in recent years, we have raised additional capital in the public debt and equity markets to support balance sheet growth, refinance existing debt obligations, or explore strategic alternatives which may include additional asset, deposit or revenue generation channels. Our ability to source deposits and raise future capital, if needed, will depend upon our financial performance and conditions in the capital markets, as well as economic conditions generally. Accordingly, such financing may not be available to us on acceptable terms or at all. If we cannot raise additional capital when needed, it could have a material adverse effect on our business, financial condition and results of operations.

The Company’s stock price can be volatile.

The Company’s stock price can fluctuate widely in response to a variety of factors, including without limitation: actual or anticipated variations in the Company’s quarterly operating results; recommendations by securities analysts; significant acquisitions or business combinations; strategic partnerships, joint ventures or capital commitments; operating and stock price performance of other companies that investors deem comparable to the Company; new technology used or services offered by the Company’s competitors; news reports relating to trends, concerns and other issues in the banking and financial services industry, and changes in government regulations. General market fluctuations, industry factors and general economic and political conditions and events, including terrorist attacks, increased inflation, economic slowdowns or recessions, interest rate changes, credit loss trends or currency fluctuations, could also cause the Company’s stock price to decrease, regardless of the Company’s operating results.

Operational Risks

16

Because our business is highly dependent on technology that is subject to rapid change and transformation, we are subject to risks of obsolescence.

The Bank conducts its deposit gathering activities and a significant portion of its lending activities through digital channels. The financial services industry is undergoing rapid technological change, and we face constant evolution of customer demand for technology-driven financial and banking products and services. Many of our competitors have substantially greater resources to invest in technological improvement and product development, marketing and implementation. Any failure to successfully keep pace with and fund technological innovation in the markets in which we compete could have a material adverse effect on our business, financial condition and results of operations.

We rely on our management team and could be adversely affected by the unexpected loss of key officers.

Our future success and profitability are substantially dependent upon our management and the abilities of our senior executives. We believe that our future results will also depend in part upon our ability to attract and retain highly skilled and qualified management. Competition for senior personnel is intense, and we may not be successful in attracting and retaining such personnel. Changes in key personnel and their responsibilities may be disruptive to our business and could have a material adverse effect on our business, financial condition and results of operations. In particular, the loss of our chief executive officer could have a material adverse effect on our business, financial condition and results of operations.

A failure in or breach of our operational or security systems or infrastructure, or those of our third-party vendors and other service providers, including as a result of cyber-attacks, could disrupt our business and lead to unauthorized disclosure of customers’ personal information, theft or misuse of confidential or proprietary information, damage to our reputation, and increases in our costs or financial losses.

We depend upon our ability to process, record and monitor our client transactions on a continuous basis. As customer, public and regulatory expectations regarding data privacy and information security have increased, our operational systems and infrastructure must continue to be safeguarded and monitored for potential failures, disruptions and breakdowns. Our business, financial, accounting and data processing systems, or other operating systems and facilities, may stop operating properly or become disabled or damaged as a result of a number of factors, including events that are wholly or partially beyond our control. For example, there could be electrical or telecommunications outages; natural disasters such as earthquakes, tornadoes and hurricanes; disease pandemics; events arising from local or larger-scale political or social matters, including terrorist acts; and, as described below, cyber-attacks. Although we have business continuity plans and other safeguards in place, our business operations may be adversely affected by significant and widespread disruption to our physical infrastructure or operating systems that support our business.

Information security risks for financial institutions such as ours have generally increased in recent years in part because of the proliferation of new technologies, the use of digital technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, terrorists, activists and other external parties. As noted above, our operations rely on the secure processing, transmission and storage of confidential information in our computer systems and networks. Our business relies on our digital technologies, computer and email systems, software and networks to conduct its operations. In addition, to access our products and services, our customers may use smartphones, tablets, personal computers and other mobile devices that are beyond our control systems. Although we have information security procedures and controls in place, our technologies, systems, networks and our customers’ devices may become the target of cyber-attacks or information security breaches that could result in the unauthorized release, gathering, monitoring, misuse, loss or destruction of our or our customers’ confidential, proprietary and other information, or otherwise disrupt our or our customers’ or other third parties’ business operations.

Third parties with whom we do business or that facilitate our business activities, including financial intermediaries or vendors that provide services or security solutions for our operations, could also be sources of operational and information security risk to us, including from breakdowns or failures of their own systems or capacity constraints. Although to date we have not experienced any material losses relating to cyber-attacks or other information security breaches, like other companies, we and our vendors face a wide range of ongoing cyber threats that include phishing emails and social engineering schemes, ransomware threats, and criminal re-use of credentials sold on the dark web. Therefore, there can be no assurance that we will not suffer such material losses in the future. Our risk and exposure to these matters remains heightened because of the evolving nature of these threats. As a result, cybersecurity and the continued development and enhancement of our controls, processes and practices designed to protect our systems, computers, software, company data, networks, and customer information from attack, damage or unauthorized access remain a focus for us. As threats continue to evolve, we may be required to expend additional resources to continue to modify or enhance our protective measures or to investigate and remediate information security vulnerabilities.

17

Disruptions or failures in the physical infrastructure or operating systems that support our business and clients, or cyber-attacks or security breaches of the networks, systems or devices that our clients use to access our products and services, could result in client attrition, regulatory fines, penalties or intervention, breach investigation and notification expenses, reputational damage, claims or litigation, reimbursement or other compensation costs and/or additional compliance costs, any of which could materially and adversely affect our business, financial condition and results of operations.

Legal and Regulatory Risks

We operate in a highly regulated environment, which could restrain our growth and profitability.

We are subject to extensive laws and regulations that govern almost all aspects of our operations. These laws and regulations, and the supervisory framework that oversees the administration of these laws and regulations, are primarily intended to protect depositors, the DIF and the banking system as a whole, and not shareholders. These laws and regulations, among other matters, affect our lending practices, capital structure, investment practices, dividend policy, operations and growth. Compliance with the myriad laws and regulations applicable to our organization can be difficult and costly. In addition, these laws, regulations and policies are subject to continual review by governmental authorities, and changes to these laws, regulations and policies, including changes in interpretation or implementation of these laws, regulations and policies, could affect us in substantial and unpredictable ways and often impose additional compliance costs. Further, any new laws, rules and regulations could make compliance more difficult or expensive. All of these laws and regulations, and the supervisory framework applicable to our industry, could have a material adverse effect on our business, financial condition and results of operations.

Federal and state regulators periodically examine our business and we may be required to remediate adverse examination findings.

The Federal Reserve, the FDIC and the DFI periodically examine our business, including our compliance with laws and regulations. If, as a result of an examination, a federal or state banking agency were to determine that our financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of any of our operations had become unsatisfactory, or that we were in violation of any law or regulation, it may take a number of different remedial actions as it deems appropriate. These actions include the power to enjoin “unsafe or unsound” practices, to require action to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil monetary penalties against our officers or directors, to remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to depositors, to terminate our deposit insurance and place us into receivership or conservatorship. Any regulatory action against us could have a material adverse effect on our business, financial condition and results of operations.

Our FDIC deposit insurance premiums and assessments may increase, which would reduce our profitability.

The deposits of the Bank are insured by the FDIC up to legal limits and, accordingly, subject to the payment of FDIC deposit insurance assessments. The Bank’s regular assessments are determined by its risk classification, which is based on a number of factors, including regulatory capital levels, asset growth and asset quality. High levels of bank failures during and following the financial crisis and increases in the statutory deposit insurance limits have increased resolution costs to the FDIC and put significant pressure on the DIF. In order to maintain a strong funding position and restore the reserve ratios of the DIF, the FDIC may increase deposit insurance assessment rates and may charge a special assessment to all FDIC-insured financial institutions. Further increases in assessment rates or special assessments may occur in the future, especially if there are significant additional financial institution failures. Any future special assessments, increases in assessment rates or required prepayments in FDIC insurance premiums could reduce our profitability or limit our ability to pursue certain business opportunities, which could have a material adverse effect on our business, financial condition and results of operations.

The long-term impact of regulatory capital rules is uncertain and a significant increase in our capital requirements could have an adverse effect on our business and profitability.

In order to remain “well-capitalized”, the Basel III Capital Rules require the Company and the Bank to maintain: (i) a minimum ratio of Common Equity Tier 1 capital to risk-weighted assets of 4.5%, plus a 2.5% “capital conservation buffer” (resulting in a minimum ratio of Common Equity Tier 1 capital to risk-weighted assets of 7.0%); (ii) a minimum ratio of Tier 1 capital to risk-weighted assets of 6.0%, plus the capital conservation buffer (resulting in a minimum Tier 1 capital ratio

18

of 8.5%); (iii) a minimum ratio of Total capital to risk-weighted assets of 8.0%, plus the capital conservation buffer (resulting in a minimum Total capital ratio of 10.5%); and (iv) a minimum Leverage Ratio of 4.0%.

The application of more stringent capital requirements for both the Company and the Bank could, among other things, result in lower returns on equity, require the raising of additional capital, and result in regulatory actions constraining us from paying dividends or repurchasing shares if we were to be unable to comply with such requirements, any of which could have a material adverse effect on our business and profitability.

We are subject to numerous laws designed to protect consumers, including the CRA and fair lending laws, and failure to comply with these laws could lead to a wide variety of sanctions.

The CRA, the Equal Credit Opportunity Act, the Fair Housing Act and other fair lending laws and regulations impose nondiscriminatory lending requirements on financial institutions. The Department of Justice and other federal agencies are responsible for enforcing these laws and regulations. A successful regulatory challenge to an institution’s performance under the CRA or fair lending laws and regulations could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions activity, restrictions on expansion and restrictions on entering new business lines. Private parties may also have the ability to challenge an institution’s performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our business, financial condition and results of operations.

We are subject to evolving and expensive regulations and requirements. Our failure to adhere to these requirements or the failure or circumvention of our controls and procedures could seriously harm our business.

We are subject to extensive regulation as a financial institution and are also required to follow the corporate governance and financial reporting practices and policies required of a company whose stock is registered under the Exchange Act and listed on the Nasdaq Global Select Market. Compliance with these requirements means we incur significant legal, accounting and other expenses. Compliance also requires a significant diversion of management time and attention, particularly with regard to disclosure controls and procedures and internal control over financial reporting. Although we have reviewed, and will continue to review, our disclosure controls and procedures in order to determine whether they are effective, our controls and procedures may not be able to prevent errors or frauds in the future. Faulty judgments, simple errors or mistakes, or the failure of our personnel to adhere to established controls and procedures may make it difficult for us to ensure that the objectives of the control system will be met. A failure of our controls and procedures to detect other than inconsequential errors or fraud could seriously harm our business and results of operations.

We face risk under the BSA and other anti-money laundering statutes and regulations, as well as general fund transfer and payments-related risk.

The BSA, the USA PATRIOT Act and other laws and regulations require financial institutions, among other duties, to institute and maintain an effective anti-money laundering program and file suspicious activity and currency transaction reports as appropriate. The federal Financial Crimes Enforcement Network is authorized to impose significant civil money penalties for violations of those requirements and has engaged in coordinated enforcement efforts with the individual federal banking regulators, as well as the U.S. Department of Justice, Drug Enforcement Administration and Internal Revenue Service. We are also subject to increased scrutiny of compliance with the rules enforced by the OFAC. If our policies, procedures and systems are deemed deficient, we would be subject to liability, including fines and regulatory actions, which may include restrictions on our ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain aspects of our business plan, including our acquisition plans. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us. Any of these results could have a material adverse effect on our business, financial condition and results of operations.

In addition, financial institutions, including ourselves, bear fund transfer risks of different types which result from large transaction volumes and large dollar amounts of incoming and outgoing money transfers. Loss exposure may result if money is transferred from the Bank before it is received, or legal rights to reclaim monies transferred are asserted. Such exposure results from payments which are made to merchants for payment clearing, while customers have statutory periods to reverse their payments. It also results from funds transfers made prior to receipt of offsetting funds, as accommodations to customers. Transfers could also be made in error. Additionally, as with other financial institutions, we may incur legal liability or reputational risk, if we unknowingly process payments for companies in violation of money laundering laws or regulations or immoral activities.

19

Our introduction of new products and programs in partnership with fintechs is expected to increase account and transaction volume at the Bank and thereby increase the foregoing risks, the results of which could have a material adverse effect on our business, financial condition and results of operations.

We may be subject to potential liability and business risk from actions by our regulators related to supervision of third parties.

Our regulators or auditors may require us to increase the level and manner of our oversight of the third parties which provide marketing and other services through which we offer products and services, whether in connection with our introduction of new programs and products, or otherwise. Although we have significant compliance staff and have used outside consultants, our internal and external compliance examiners continually evaluate our practices and must be satisfied with the results of our third-party oversight activities. We cannot assure you that we will satisfy all related requirements. Not maintaining a compliance management system which is deemed adequate could result in sanctions against the Bank. Our ongoing review and analysis of our compliance management system and implementation of any changes resulting from that review and analysis will likely result in increased non-interest expense.

Federal banking laws limit the acquisition, ownership and repurchase of our common stock.

Because we are a bank holding company, any purchaser of certain specified amounts of our common stock may be required to file a notice with or obtain the approval of the Federal Reserve under the BHCA, as amended, and the Change in Bank Control Act of 1978, as amended. Specifically, under regulations adopted by the Federal Reserve, (1) any other bank holding company may be required to obtain the approval of the Federal Reserve before acquiring 5% or more of our common stock and (2) any person may be required to file a notice with and not be disapproved by the Federal Reserve to acquire 10% or more of our common stock and will be required to file a notice with and not be disapproved by the Federal Reserve to acquire 25% or more of our common stock. Further, recently enacted laws impose an excise tax on a public company’s repurchase of its own stock. There are discussions and proposed legislation to increase that excise tax. Increases in the excise tax on stock repurchases could negatively affect our current stock repurchase program and our ability to repurchase common stock in the future.

Item 1B. Unresolved Staff Comments

None.

Item 2. Properties

In March 2013, the Company borrowed $4.0 million from the Bank for the purchase of the Company’s principal executive offices. On February 16, 2021, the Company entered into an agreement to sell its principal executive offices to a third party. The sale was completed on April 16, 2021 and as a part of the sale agreement, the buyer leased the office building back to the Company through December 31, 2021. We vacated the office building at the end of the lease, on or prior to December 31, 2021. Additionally, the remaining principal balance of the Company’s loan from the Bank was paid-in-full.

During 2019, the Bank's subsidiary, SPF15, Inc., acquired several parcels of real estate located in Fishers, Indiana. Site demolition was completed on the properties in early 2020 and construction of a multi-use development, which included the future headquarters of the Company and the Bank began shortly thereafter. The Company and the Bank now fully occupy the new headquarters, which is located at 8701 East 116th Street, Fishers, IN 46038.

Item 3. Legal Proceedings

Neither we nor any of our subsidiaries are party to any material legal proceedings. From time to time, the Bank is a party to legal actions arising from its normal business activities.

Item 4. Mine Safety Disclosures

None.

20

PART II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Market Information

The Company’s common stock trades on the Nasdaq Global Select Market under the symbol “INBK.”

As of March 10, 2023, the Company had 8,949,423 shares of common stock issued and outstanding, and there were 98 holders of record of common stock.

Dividends

Total cash dividends declared in 2022 were $0.24 per share. The Company expects to continue to pay cash dividends on a quarterly basis; however, the declaration and amount of any future cash dividends will be subject to the sole discretion of the Board of Directors and will depend upon many factors, including our results of operations, financial condition, capital requirements, regulatory and contractual restrictions (including with respect to the Company’s outstanding subordinated debt), business strategy and other factors deemed relevant by the Board of Directors.

Because the Company is a holding company and does not engage directly in business activities of a material nature, its ability to pay dividends to shareholders may depend, in large part, upon the receipt of distributions from the Bank, which is also subject to numerous limitations on the payment of dividends under federal and state banking laws, regulations and policies. The present and future ability of the Bank to distribute funds to the Company are subject to the discretion of the Board of the Directors of the Bank and the Bank is not obligated to pay any distributions to the Company.

Issuer Purchases of Equity Securities

In October 2021, the Company's Board of Directors approved a stock repurchase program authorizing the repurchase of up to $30.0 million, which was subsequently increased to $35.0 million, of our outstanding common stock from time to time on the open market or in privately negotiated transactions. The stock repurchase authorization was scheduled to expire on December 31, 2022. Under this program, the Company repurchased 855,956 shares of common stock through December 19, 2022, at an average price of $36.31, for a total investment of $31.1 million.

In December 2022, the Company’s Board of Directors approved a new stock repurchase program authorizing the repurchase of up to $25.0 million of the Company’s outstanding stock from time to time on the open market or in privately negotiated transactions. The stock repurchase program is scheduled to expire on December 31, 2023, and replaced the stock repurchase program mentioned above. Under this program, the Company repurchased 178,188 shares of common stock through March 10, 2023, at an average price of $25.46, for a total investment of $4.5 million.

The following table presents information with respect to purchases of the Company’s common stock made during the fourth quarter of 2022 by or on behalf of the Company or any “affiliated purchaser,” as defined in Rule 10b-18(a)(3).

Stock Performance Graph

The following graph and table compares the five-year cumulative total return to shareholders of First Internet Bancorp common stock with that of the Nasdaq Composite Index and the S&P U.S. BMI Banks Index. The following assumes $100 invested on December 31, 2017 in First Internet Bancorp, the Nasdaq Composite Index and the S&P U.S. BMI Bank Index, and

21

assumes that dividends are reinvested. The historical stock price performance for our common stock is not necessarily indicative of future stock performance.

December 31,

Item 6. [RESERVED]

22

Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations

The following discussion and analysis of our financial condition and results of operations should be read in conjunction with our consolidated financial statements and related notes appearing elsewhere in this report.

The following discussion, analysis and comparisons generally focus on the operating results for the years ended December 31, 2022 and 2021. Discussion, analysis and comparisons of the years ended December 31, 2021 and 2020 that are not included in this Annual Report on Form 10-K can be found in “Management's Discussion and Analysis of Financial Condition and Results of Operations” in Part II, Item 7 of our Annual Report on Form 10-K for the year ended December 31, 2021. This discussion and analysis includes certain forward-looking statements that involve risks, uncertainties and assumptions. You should review the “Risk Factors” section of this report for a discussion of important factors that could cause actual results to differ materially from the results described in or implied by such forward-looking statements. See also the “Cautionary Note Regarding Forward-Looking Statements” at the beginning of this report.

Costs Associated with Exit Activities

Due to the steep decline in consumer mortgage volumes and the negative outlook for consumer mortgage lending over the next several years, the Company decided to exit its consumer mortgage business during the first quarter of 2023. This includes its nationwide digital direct-to-consumer mortgage platform that originates residential loans for sale in the secondary market, as well as its local traditional consumer mortgage and construction-to-permanent business. The Company’s commercial construction and land development business will not be affected by this decision and will remain an important part of the Company’s lending strategy.

This action is expected to reduce total annual noninterest expense by approximately $6.8 million and increase annualized pre-tax income by approximately $2.7 million, with 80% of the benefit realized in 2023 and 100% thereafter. The Company estimates that it will incur total pre-tax expense of approximately $3.3 million in the first and second quarters of 2023 associated with exiting this line of business.

Results of Operations

During the twelve months ended December 31, 2022, net income was $35.5 million, or $3.70 per diluted share, compared to net income of $48.1 million, or $4.82 per diluted share, for the twelve months ended December 31, 2021 and net income of $29.5 million, or $2.99 per diluted share, for the twelve months ended December 31, 2020.

The $12.6 million decrease in net income for the twelve months ended December 31, 2022 compared to the twelve months ended December 31, 2021 was due primarily to an $11.6 million decrease in noninterest income, an $11.5 million increase in noninterest expense and a $3.9 million increase in provision for loan losses, partially offset by a $10.5 million increase in net interest income and a $3.9 million decrease in income tax expense.

The increase in net income of $18.7 million for the twelve months ended December 31, 2021 compared to the twelve months ended December 31, 2020 was due primarily to a $22.0 million increase in net interest income and an $8.3 million decrease in provision for loan losses, partially offset by a $4.1 million increase in noninterest expense, a $4.0 million increase in income tax expense and a $3.5 million decrease in noninterest income.

During the twelve months ended December 31, 2022, return on average assets was 0.85%, compared to 1.14% for the twelve months ended December 31, 2021. During the twelve months ended December 31, 2022, return on average shareholders’ equity was 9.53%, compared to 13.44% for the twelve months ended December 31, 2021. Additionally, for the twelve months ended December 31, 2022, return on average tangible common equity was 9.65% compared to 13.61% for the twelve months ended December 31, 2021. These profitability ratios declined during 2022 due primarily to the decrease in net income. Refer to the “Reconciliation of Non-GAAP Financial Measures” section of Item 7 of Part II of this report, Management's Discussion and Analysis of Financial Condition and Results of Operations for additional information.

23

Consolidated Average Balance Sheets and Net Interest Income Analyses

For the periods presented, the following tables provide the average balances of interest-earning assets and interest-bearing liabilities and the related yields and cost of funds. The tables do not reflect any effect of income taxes. Balances are based on the average of daily balances. Nonaccrual loans are included in average loan balances.

Twelve Months Ended

Assets

Interest-earning assets

Liabilities

Interest-bearing liabilities

1 Yield on total interest-earning assets minus cost of total interest-bearing liabilities

2 Net interest income divided by average interest-earning assets

3 On a fully-taxable equivalent (“FTE”) basis assuming a 21% tax rate. Refer to the “Reconciliation of Non-GAAP Financial Measures” section of Item 7 of Part II of this report, Management's Discussion and Analysis of Financial Condition and Results of Operations

24

Rate/Volume Analysis

The following table illustrates the impact of changes in the volume of interest-earning assets and interest-bearing liabilities and interest rates on net interest income for the periods indicated. The change in interest not due solely to volume or rate has been allocated in proportion to the absolute dollar amounts of the change in each.

Rate/Volume Analysis of Net Interest Income

(amounts in thousands) Volume Rate Net Volume Rate Net

Interest income

Interest expense

Net interest income for the twelve months ended December 31, 2022 was $97.1 million, an increase of $10.5 million, or 12.2%, compared to $86.6 million for the twelve months ended December 31, 2021. The increase in net interest income was the result of a $23.0 million, or 17.2%, increase in total interest income to $156.9 million for the twelve months ended December 31, 2022 compared to $133.9 million for the twelve months ended December 31, 2021. This increase in total interest income was partially offset by a $12.5 million, or 26.4%, increase in total interest expense to $59.8 million for the twelve months ended December 31, 2022 compared to $47.3 million for the twelve months ended December 31, 2021.

The increase in total interest income was due to increases in interest earned on loans, including loans held-for-sale, securities and other earning assets. Interest income earned on loans, including loans held-for-sale, increased by $17.1 million as a result of the yield on the loan portfolio increasing by 35 bps, as well as the average balance of loans increasing by $142.9 million, or 4.8%. The increase in average loan balances was due primarily to increases in both the commercial (with the exception of healthcare finance) and consumer loan portfolios. Interest income earned on securities increased $3.5 million, or 38.8%, due to an increase of 60 bps in the yield earned on securities, partially offset by a decrease of $15.8 million, or 2.5%, in the average balance of securities. Interest income earned on other earning assets increased $2.4 million, or 168.0%, due to an increase of 107 bps in the yield earned on these assets, partially offset by a decrease of $188.5 million, or 40.4%, in the average balance of other earning assets. The decrease in the average balance of other earning assets was due primarily to lower cash balances. The increase in the yields earned on loans, securities and other earning assets was due primarily to the rise in interest rates throughout 2022.

The increase in total interest expense was driven primarily by increases in interest expense related to money market accounts, interest-bearing demand deposits and BaaS – brokered deposits, but partially offset by a decrease in interest expense related to certificates and brokered deposits. The increase in interest expense related to money market accounts of $12.6 million, or 214.2%, was driven by an increase of 89 bps in the cost of these deposits, partially offset by a decrease of $11.6 million, or 0.8%, in the average balance of these deposits. The increase in interest expense related to interest-bearing demand deposits of $1.5 million, or 252.7%, was due primarily to an increase of $138.0 million, or 70.5%, in the average balance of these deposits and an increase of 32 bps in the cost of these deposits. The increase in BaaS – brokered deposit expense was due to a $60.7 million increase in the average balance of deposits. The decrease in interest expense in certificates and brokered deposits of $3.3 million, or 14.0%, was due primarily to a $264.2 million, or 18.7%, decrease in the average balance of these deposits, partially offset by an increase of 9 bps in the cost of these deposits. The decrease in certificates and brokered deposit balances was driven by our pricing strategy to reduce the level of these higher cost deposits. The increase in the cost of total interest-bearing deposits, reflects the increase in interest rates throughout 2022.

25

Net interest margin (“NIM”) was 2.41% for the twelve months ended December 31, 2022 compared to 2.11% for the twelve months ended December 31, 2021. On a fully-taxable equivalent (“FTE”) basis, NIM was 2.54% for the twelve months ended December 31, 2022 compared to 2.25% for the twelve months ended December 31, 2021, an increase of 29 bps. The increase in NIM and FTE NIM compared to the twelve months ended December 31, 2021 was due primarily to an increase in the yield earned on interest-earning assets, partially offset by an increase in the cost of interest-bearing liabilities. The increase in the yield on interest-earning assets and cost of interest-bearing deposits was driven primarily by the increase in interest rates throughout 2022.

Noninterest Income

The following table presents noninterest income for the three most recent years.

Twelve Months Ended December 31,

Gain on sale of securities — — 139

Gain on sale of premises and equipment — 2,523 —

During the twelve months ended December 31, 2022, noninterest income totaled $21.3 million, representing a decrease of $11.6 million, or 35.3%, compared to $32.8 million for the twelve months ended December 31, 2021. The decrease in noninterest income was driven primarily by a decrease in revenue from mortgage banking activities, no gain on sale of premises and equipment in 2022 and a $0.6 million decrease in loan servicing asset revaluation, which was partially offset by an increase in other noninterest income. The decrease in mortgage banking revenue was due mainly to decreases in interest rate locks, sold loan volumes and gain-on-sale margins driven by the increase in interest rates throughout 2022. The increase in other noninterest income was due primarily to distributions received on certain Small Business Investment Company and venture capital fund investments. Net loan servicing revenue was relatively stable as growth in the balance of the Company’s SBA 7(a) servicing portfolio was offset by the negative impact of prepayment speeds on the servicing asset revaluation.

Noninterest Expense

The following table presents noninterest expense for the three most recent years.

Twelve Months Ended December 31,

Write-down of other real estate owned — — 2,065

26

Noninterest expense for the twelve months ended December 31, 2022 was $73.3 million, compared to $61.8 million for the twelve months ended December 31, 2021. The increase of $11.5 million, or 18.6%, compared to the twelve months ended December 31, 2021 was due primarily to increases of $3.6 million in premises and equipment, $3.3 million in salaries and employee benefits, $2.3 million in loan expenses, $0.9 million in other noninterest expense and $0.8 million in consulting and professional fees. The increase in premises and equipment was due mainly to costs associated with the Company’s new corporate headquarters, as well as investments in technology, software maintenance and a write-down of software. The higher salaries and employee benefits expense was due mainly to increased headcount, higher medical claims expense, a $0.5 million discretionary inflation bonus paid to certain employees and $0.3 million of accelerated equity compensation related to employees who retired during the year. The increase in loan expenses was due primarily to servicing fees related to tax refund advance loans and franchise finance loans. The increase in other was due to several items, none of which were individually significant. The increase in consulting and professional fees was due primarily to a $0.9 million consulting fee associated with a special project.

27

Income Taxes

The following table reconciles reported income tax expense to that computed at the statutory federal tax rate for the three most recent years.

Twelve Months Ended December 31,

(Subtract) add the tax effect of:

Income from tax-exempt securities and loans (4,190) (4,217) (4,464)

State income taxes, net of federal tax effect 592 865 1,765

We recognized income tax expense of $4.6 million in 2022, resulting in an effective tax rate of 11.4%, compared to $8.5 million and an effective tax rate of 15.0% in 2021. Our federal statutory tax rate was 21% in 2022 and 2021. In both 2022 and 2021, the variance from the federal statutory rate was due primarily to tax-exempt income, partially offset by state income taxes. Interest income on certain loans or securities issued by governmental, municipal and not-for-profit entities, and earnings from bank-owned life insurance were the primary components of tax-exempt income. The decrease in the effective tax rate and income tax expense was due primarily to the decrease in pre-tax earnings driven by a lower proportion of taxable revenue, including decreased mortgage banking activities and no gain on sale of premises and equipment in 2022.

28

Financial Condition

The following table presents summary balance sheet data as of the end of the last two years.

(amounts in thousands) December 31,

Total assets increased $332.1 million, or 7.9%, to $4.5 billion as of December 31, 2022 compared to $4.2 billion as of December 31, 2021. The increase in total assets was driven primarily by an increase in loan balances, partially offset by decreases in cash and securities.

As of December 31, 2022, total shareholders’ equity was $365.0 million, a decrease of $15.4 million, or 4.0%, compared to December 31, 2021, due primarily to stock repurchase activity and an increase in accumulated other comprehensive loss resulting from a decline in the value of the available-for-sale securities portfolio caused mainly by the continued rise in interest rates during the year. This was partially offset by the net income earned during the year and an increase in the value of interest rate swaps classified as cash flow hedges. Tangible common equity totaled $360.3 million as of December 31, 2022, representing a decrease of $15.4 million, or 4.1%, compared to December 31, 2021. The ratio of total shareholders’ equity to total assets decreased to 8.03% as of December 31, 2022 from 9.03% as of December 31, 2021 and the ratio of tangible common equity to tangible assets decreased to 7.94% as of December 31, 2022 from 8.93% as of December 31, 2021.

Book value per common share increased 3.3% to $40.26 as of December 30, 2022 from $38.99 as of December 31, 2021. Tangible book value per share increased 3.2% to $39.74 as of December 31, 2022 from $38.51 as of December 31, 2021. The growth in both book value per common share and tangible book value per share reflects net income earned during the year and the effect of stock repurchase activity throughout the year, partially offset by the increase in accumulated other comprehensive loss. Refer to the “Reconciliation of Non-GAAP Financial Measures” section of Item 7 of Part II of this report, Management's Discussion and Analysis of Financial Condition and Results of Operations for additional information.

29

Loan Portfolio Analysis

The following table provides information regarding our loan portfolio as of the end of the last two years.

December 31,

Commercial loans

Consumer loans

1 Includes carrying value adjustments of $32.5 million and $37.5 million related to terminated interest rate swaps associated with public finance loans as of December 31, 2022 and December 31, 2021, respectively.

Total loans were $3.5 billion as of December 31, 2022, an increase of $611.7 million, or 21.2%, compared to December 31, 2021. Total commercial loan balances were $2.7 billion, as of December 31, 2022, up $355.5 million, or 15.0%, from December 31, 2021. Total consumer loan balances were $733.3 million as of December 30, 2022, an increase of $263.3 million, or 56.0%, compared to December 31, 2021. The increase in commercial loan balances was driven primarily by growth in franchise finance, single tenant lease financing, investor commercial real estate, construction, commercial and industrial, public finance and small business lending balances. These increases were partially offset by net payoffs in healthcare finance and owner-occupied commercial real estate loans. The increase in consumer loan balances was due primarily to higher balances in the residential mortgage, recreational vehicles and trailers loan portfolios.

30

Loan Maturities and Rate Sensitivity

The following table shows the contractual maturity distribution intervals (without regard to repayment schedules) of the outstanding loans in our portfolio as of December 31, 2022.

(amounts in thousands) Within 1 Year 1-5 Years 5-15 Years Beyond 15 Years Total

Commercial loans

Consumer loans

The following table shows the rate sensitivity of the outstanding loans in our portfolio by the contractual maturity distribution intervals as of December 31, 2022.

(amounts in thousands) Within 1 Year 1-5 Years 5-15 Years Beyond 15 Years Total

Loan Approval Procedures and Authority

Our lending activities follow written, non-discriminatory policies with loan approval limits approved by the Board of Directors of the Bank. Loan officers have underwriting and approval authorization of varying amounts based on their lending experience and product type. Additionally, based on the amount of the loan, multiple approvals may be required. Based on the Bank’s legal lending limit, the maximum it could lend to any one borrower at December 31, 2022 was $74.7 million.

Our goal is to have a well-diversified and balanced loan portfolio. In order to manage our loan portfolio risk, we establish concentration limits by borrower, product type, industry and geography. To supplement our internal loan review resources, we have engaged independent third-party loan review groups, which are a key component of our overall risk management process related to credit administration.

31

Asset Quality

December 31,

Nonaccrual loans

Commercial loans:

Commercial and industrial $ 51 $ 674

Owner-occupied commercial real estate 1,570 3,419

Single tenant lease financing — 1,100

Consumer loans:

Home equity — 14

Other consumer 17 9

Past Due 90 days and accruing loans

Consumer loans:

Residential mortgage 79 —

Total consumer loans 79 —

Total past due 90 days and accruing loans 79 —

Other real estate owned

Single tenant lease financing — 1,188

Total other real estate owned — 1,188

Other nonperforming assets 42 29

Total nonperforming assets $ 7,571 $ 8,618

Total nonperforming loans to total loans 0.22 % 0.26 %

Total nonperforming assets to total assets 0.17 % 0.20 %

Allowance for loan losses to total loans 0.91 % 0.96 %

Nonaccrual loans to total loans 0.22 % 0.26 %

Allowance for loan losses to nonaccrual loans 426.0 % 376.2 %

A loan is designated as impaired, in accordance with the impairment accounting guidance when, based on current information or events, it is probable that we will be unable to collect all amounts due (principal and interest) according to the contractual terms of the loan agreement. Payments with delays generally not exceeding 90 days outstanding are not considered impaired. Certain nonaccrual and substantially all delinquent loans more than 90 days past due may be considered to be impaired. Generally, loans are placed on nonaccrual status at 90 days past due and accrued interest is reversed against earnings, unless the loan is well secured and in the process of collection. The accrual of interest on impaired and nonaccrual loans is discontinued when, in management’s opinion, the borrower may be unable to meet payments as they become due.

Impaired loans include nonperforming loans and also include loans modified in troubled debt restructurings (“TDRs”) where concessions have been granted to borrowers experiencing financial difficulties. These concessions could include a reduction in the interest rate on the loan, payment extensions, forgiveness of principal, forbearance, or other actions intended to maximize collection.

Nonperforming loans are comprised of total nonaccrual loans and loans 90 days past due and accruing. Nonperforming assets include nonperforming loans, other real estate owned and other nonperforming assets, which consist of

32

repossessed assets. Nonperforming assets can also include investments that were classified as other-than-temporarily impaired; however, we did not own any investments classified as such during the two-year period ended December 31, 2022.

The increase in nonperforming loans of $0.1 million, or 1.7%, to $7.5 million as of December 31, 2022 compared to $7.4 million as of December 31, 2021 was due primarily to SBA loans placed on nonaccrual, partially offset by upgrades and payoffs in owner-occupied commercial real estate and single tenant lease financing during 2022. Total nonperforming assets declined by $1.0 million, or 12.2%, as of December 31, 2022 compared to December 31, 2021, due primarily to the upgrades and payoffs discussed above, as well as the decline in other real estate owned (“OREO”) discussed below.

The ratio of nonperforming loans to total loans decreased to 0.22% as of December 31, 2022 compared to 0.26% as of December 31, 2021 and the ratio of nonperforming assets to total assets decreased to 0.17% as of December 31, 2022, compared to 0.20% as of December 31, 2021.

Troubled Debt Restructurings

December 31,

Troubled debt restructurings – nonaccrual $ 2,864 $ 2,492

Troubled debt restructurings – performing 2,658 1,693

Total troubled debt restructurings $ 5,522 $ 4,185

Total TDRs as of December 31, 2022 were $5.5 million, up $1.3 million from December 31, 2021. The increase was driven by two portfolio residential mortgage loans and one small business lending loan classified as new TDRs during the twelve months ended December 31, 2022 with pre-modification and post-modification balances totaling $1.6 million.

As of December 31, 2022, the Company did not own any OREO. As of December 31, 2021, we had one commercial property in OREO with a carrying value of $1.2 million. During 2022, the Company reached a settlement agreement with the guarantor, which resulted in the Company recovering $1.2 million in excess of the carrying value of OREO.

Non-TDR Loan Modifications due to COVID-19

The “Interagency Statement on Loan Modifications and Reporting for Financial Institutions Working with Customers Affected by the Coronavirus” was issued by our banking regulators on March 22, 2020. This guidance encourages financial institutions to work prudently with borrowers who are or may be unable to meet their contractual payment obligations due to the effects of COVID-19.

Additionally, Section 4013 of the CARES Act further provided that loan modifications due to the impact of COVID-19 that would otherwise be classified as TDRs under GAAP will not be so classified. Modifications within the scope of this relief were in effect from the period beginning March 1, 2020 until January 1, 2022.

In accordance with this guidance, we offered modifications to borrowers who were both impacted by COVID-19 and current on all principal and interest payments. As of December 31, 2022, the Company had no loans as non-TDR loan modifications due to COVID-19.

U.S. Small Business Administration Paycheck Protection Program

Section 1102 of the CARES Act created the Paycheck Protection Program (“PPP”), which is jointly administered by the SBA and the Department of the Treasury. The PPP is designed to provide a direct incentive to small businesses to retain employees on their payroll during COVID-19 as well as to help cover certain utility costs and rent payments. These loans may be forgiven if certain conditions are satisfied and are fully guaranteed by the SBA. In 2020, as a preferred SBA lender, we assisted our clients in participating in the PPP to help them maintain their workforce in an uncertain and challenging environment. The loans originated in 2020 bear an interest rate of 1.00%, and we received gross origination fees of approximately $2.3 million. The Company received this fee revenue from the SBA in late June 2020, and it was deferred over the life of the PPP loans and recognized as interest income. The Company began processing applications for forgiveness from this round beginning in December 2020 and 100% of loan balances had been forgiven as of December 31, 2021.

On December 27, 2020, $285 billion in additional funding was allocated to the PPP through the passage of the Economic Aid to Hard-Hit Small Businesses, Nonprofits, and Venues Act. The Company began offering PPP loans again in 2021 and continued until the program’s funds were depleted. These loans may be forgiven if certain conditions are satisfied and

33

are fully guaranteed by the SBA. The loans originated during 2021 bear an interest rate of 1.00% and the Company received gross origination fees of approximately $1.3 million. The Company received this fee revenue from the SBA during 2021, and it was deferred over the life of the PPP loans and recognized as interest income. The Company began processing applications for forgiveness from this round beginning in May 2021 and 100% of loan balances had been forgiven as of December 31, 2022.

The following table provides a rollforward of the activity of PPP loans through December 31, 2022.

(dollars in thousands)

Number of Loans Principal Balance Net Deferred Fees

Net deferred fees recognized (1,253)

Net deferred fees recognized (1,624)

Originated