Affirm Holdings, Inc.

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer (“CEO”) and our Chief Financial Officer (“CFO”), has evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Exchange Act). Based on that evaluation, our CEO and CFO concluded that such disclosure controls and procedures were effective as of the end of the period covered by this Quarterly Report on Form 10-Q and designed to ensure that information required to be disclosed in our reports filed or submitted under the Exchange Act is recorded, processed, summarized and reported within the requisite time periods specified in the applicable rules and forms and is accumulated and communicated to our management, including our CEO and CFO, as appropriate, to allow timely decisions regarding required disclosure. Management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives and management necessarily applies its judgment in evaluating the cost-benefit relationship of possible controls and procedures.

Changes in Internal Control Over Financial Reporting

There were no changes in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) that occurred during the quarter ended September 30, 2026 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.

Inherent Limitation on the Effectiveness of Internal Control

The effectiveness of any system of internal control over financial reporting is subject to inherent limitations, including the exercise of judgment in designing, implementing, operating, and evaluating the controls and procedures, and the inability to eliminate misconduct completely. Accordingly, any system of internal control over financial reporting, no matter how well designed and operated, can only provide reasonable, not absolute assurance that its objectives will be met. In addition, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate. We intend to continue to monitor and upgrade our internal controls as necessary or appropriate for our business but such improvements will be subject to the same inherent limitations outlined in this section.