ACM Research Inc

Evaluation of Disclosure Controls and Procedures

Our management, with the participation of our Chief Executive Officer and our Chief Financial Officer, evaluated the effectiveness of our disclosure controls and procedures pursuant to Rule 13a-15 under the Securities Exchange Act of 1934, as amended (the “Exchange Act”). In designing and evaluating the disclosure controls and procedures, our management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving the desired control objectives. In addition, the design of disclosure controls and procedures must reflect the fact that there are resource constraints and that our management is required to apply its judgment in evaluating the benefits of possible controls and procedures relative to their costs.

Based on this evaluation, our Chief Executive Officer and our Chief Financial Officer concluded that, as of December 31, 2023, our disclosure controls and procedures were designed at a reasonable assurance level and were effective to provide reasonable assurance that the information we are required to disclose in reports that we file or submit under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC rules and forms, and that such information is accumulated and communicated to our management, including our Chief Executive Officer and our Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosures.

Management’s Report on Internal Control Over Financial Reporting

Our management is responsible for establishing and maintaining adequate internal control over financial reporting. Internal control over financial reporting is a process designed by, or under the supervision of, our Chief Executive Officer and Chief Financial Officer to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles and includes those policies and procedures that (1) pertain to the maintenance of records that in reasonable detail accurately and fairly reflect the transactions and dispositions of our assets; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that our receipts and expenditures are being made only in accordance with authorizations of our management and directors and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use or disposition of our assets that could have a material effect on the financial statements.

Under the supervision and with the participation of our management, including our Chief Executive Officer and Chief Financial Officer, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on criteria established in Internal Control – Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”). Our management concluded that our internal control over financial reporting was effective as of December 31, 2023.

Attestation Report of Independent Registered Public Accounting Firm

The effectiveness of our internal control over financial reporting as of December 31, 2023 has been tested by Ernst & Young Hua Ming LLP, our independent registered public accounting firm, as stated in their report which is included in Part II, Item 8 of this report.

Remediation of Previously Reported Material Weaknesses

As previously reported in our Forms 10-Q for the quarters ended March 31, 2023, June 30, 2023 and September 30, 2023, and our Annual Report on Form 10-K for the year ended December 31, 2022, we previously identified the following material weaknesses in internal control over financial reporting:

(i) Management did not design and maintain effective risk assessment procedures, and monitoring activities. These deficiencies were attributed to insufficient identification and assessment of risks impacting the design, implementation, and operating effectiveness of internal control over financial reporting, and insufficient evaluation and determination as to whether components of internal control were present and functioning; and

(ii) Management did not design and maintain effective information technology controls related to (a) user access controls to ensure appropriate segregation of duties and adequately restrict user and privileged access to financial applications, programs, and data to appropriate personnel, (b) computer operations controls to ensure that critical information is monitored, and data backups are authorized and monitored, (c) appropriate controls to evaluate automated controls, and (d) appropriate controls to validate the completeness and accuracy of key reports used within controls across substantially all financial statement areas.

These material weaknesses did not result in any material misstatement of our consolidated financial statements as of and for the year ended December 31, 2022. Our management, under the oversight of the Audit Committee, has implemented the following remediation steps to address previously disclosed material weaknesses and to improve our internal control over financial reporting:

•Engaged a third-party Sarbanes-Oxley (“SOX”) compliance firm to assist management with (i) designing and maintaining effective risk assessment procedures and monitoring activities, (ii) reviewing our current processes, procedures, and systems and assessing the design of controls to identify opportunities to enhance the design of controls that would address relevant risks identified by management to assure the operating effectiveness of internal control over financial reporting, and (iii) enhancing and implementing protocols to retain sufficient documentary evidence of operating effectiveness of such controls.

•Recruited qualified individuals for key positions within our internal audit, IT, and other support functions that have enhanced internal control capabilities, promoted segregation of duties, and provided appropriate oversight and reviews.

•Developed and delivered internal control training to management and finance/accounting personnel, focusing on a review of management and individual roles and responsibilities related to internal control over financial reporting.

•Restricted and monitored user access controls to ensure appropriate segregation of duties and adequately restricted user and privileged access of applications, programs, and data to appropriate personnel; implemented computer operations controls to ensure that critical information is monitored, and data backups are authorized and monitored; established appropriate controls to evaluate automated controls; and designed and monitored appropriate controls to validate the completeness and accuracy of key reports used within controls across substantially all financial statement areas.

During the quarter ended December 31, 2023, we completed our testing of the operating effectiveness of internal controls impacted by these remediation efforts and determined that as a result of the measures described above, the material weaknesses have been remediated as of December 31, 2023.

Changes in Internal Control over Financial Reporting

Other than in connection with the remediation process described above, no change in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) occurred during the most recent fiscal quarter that has materially affected, or is reasonably likely to materially affect, our internal control over financial reporting.