APPFOLIO INC

Evaluation of Disclosure Controls and Procedures

Our management, with the supervision and participation of our principal executive officer and principal financial officer, evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act) as of the end of the period covered by this Annual Report. Based on this evaluation, our principal executive officer and principal financial officer concluded that, as of the end of the period covered by this Annual Report, our disclosure controls and procedures were designed at the reasonable assurance level and were effective to provide reasonable assurance that information we are required to disclose in reports that we file or submit under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms, and that such information is accumulated and communicated to our management, including our principal executive officer and principal financial officer, as appropriate, to allow timely decisions regarding required disclosure.

Management's Report on Internal Control over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act). Internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. Internal control over financial reporting includes those policies and procedures that: (i) pertain to the maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of the assets of the Company; (ii) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the Company are being made only in accordance with authorizations of management and directors of the Company; and (iii) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of the Company’s assets that could have a material effect on the financial statements. Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of the effectiveness of the internal control over financial reporting to future periods are subject to the risk that the controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

As of December 31, 2024, our management assessed the effectiveness of our internal control over financial reporting using the criteria set forth in the Internal Control – Integrated Framework (2013) as issued by the Committee of Sponsoring Organizations (COSO) of the Treadway Commission. Based on our evaluation under the COSO criteria, our management concluded that our internal control over financial reporting was effective at the reasonable assurance level as of December 31, 2024.

The effectiveness of our internal control over financial reporting has been audited by PricewaterhouseCoopers LLP, an independent registered public accounting firm, as stated in their audit report which expresses an unqualified opinion on the effectiveness of our internal control over financial reporting at December 31, 2024.

Changes in Internal Control over Financial Reporting

There were no changes in our internal control over financial reporting identified in connection with the evaluation required by Rules 13(a)-15(d) and 15d-15(d) under the Exchange Act that occurred during the quarter ended December 31, 2024 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.