HEALTHSTREAM INC

Evaluation of Controls and Procedures

HealthStream’s chief executive officer and principal financial officer have reviewed and evaluated the effectiveness of the Company’s disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) promulgated under the Securities Exchange Act of 1934 (the “Exchange Act”)) as of the end of the period covered by this Form 10-Q. Based on that evaluation, the chief executive officer and principal financial officer have concluded that HealthStream’s disclosure controls and procedures were effective to ensure that the information required to be disclosed by the Company in the reports the Company files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms, and the information required to be disclosed in the reports the Company files or submits under the Exchange Act was accumulated and communicated to the Company’s management, including its chief executive officer and principal financial officer, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure.

Changes in Internal Control over Financial Reporting

There was no change in HealthStream’s internal control over financial reporting that occurred during the first quarter of 2025 that has materially affected, or that is reasonably likely to materially affect, HealthStream’s internal control over financial reporting.