NASDAQ: HBCP

Although we continue to be an active originator of residential home mortgage loans and other consumer loans in our market areas, our efforts are focused on originating commercial real estate loans and commercial and industrial loans. Commercial real estate loans and commercial and industrial loans are deemed attractive due to their generally higher yields and shorter anticipated lives compared to one- to four-family residential mortgage loans. In addition, the Bank views commercial real estate and commercial and industrial loans as attractive lending products because the Bank’s commercial borrowers typically maintain deposit accounts at the Bank, increasing the Bank’s core deposits.

The Company’s headquarters is located at 503 Kaliste Saloom Road, Lafayette, Louisiana, and our telephone number is (337) 237-1960. We maintain a website at www.home24bank.com, and we provide our customers with online banking services. Filings of the Company made with the U.S. Securities and Exchange Commission ("SEC") are available, without charge, on our website. They are also available to the public at the SEC’s website at https://www.sec.gov. Information on our website should not be considered a part of this Annual Report on Form 10-K.

Human Capital Resources

At December 31, 2025, we had 486 full-time employees and eight part-time employees. None of our employees are represented by a collective bargaining group, and we believe that the Company's relationship with its employees is good. We believe our ability to attract and retain employees is a key to the Bank's success.

Our human capital objectives include attracting, developing and retaining the best available talent from a diverse pool of candidates for the Bank. To do so, we strive to maintain competitive pay and benefits, regularly updating our compensation structure and periodically reviewing our compensation and benefits programs. Additionally, the Bank identifies opportunities and paths for the development of our staff, and we seek to, whenever possible, fill positions by promotion within. The Company recognizes that the skills and knowledge of its employees are critical to the success of the organization, and promotes training and continuing education as an ongoing function for employees.

We recognize the importance of our employee's financial health and well-being, and offer benefits such as a 401(k) retirement savings plan and make both matching and profit-sharing contributions to that plan, which also includes the Company's stock as an investment option. Benefit programs available to eligible employees include, in addition to the 401(k) retirement savings plan, an Employee Stock Ownership Plan ("ESOP"), health and life insurance, employee paid holidays and other benefits.

1

We value and promote diversity and inclusion in every aspect of our business and at every level within the Company. We recruit, hire, and promote employees based on their individual ability and experience and in accordance with Affirmative Action and Equal Employment Opportunity laws and regulations. Our policy is that we do not discriminate on the basis of race, color, religion, sex, gender, sexual orientation, ancestry, pregnancy, medical condition, age, marital status, national origin, citizenship status, disability veteran status, gender identity, genetic information, or any other status protected by law.

Market Area and Competition

The Bank has four primary market areas across south Louisiana: Acadiana, Baton Rouge, Greater New Orleans, and the Northshore (of Lake Pontchartrain), currently, one primary market area in each of Natchez, Mississippi and the Houston, Texas area. Since completing its initial public offering of stock in October 2008, the Company has acquired six financial institutions. On March 26, 2022, the Company completed the acquisition of Friendswood Capital Corporation ("Friendswood"), the former holding company of Texan Bank, N.A. ("Texan Bank") of Houston, Texas, expanding the Company's market area to Houston. The Bank currently operates 18 banking offices in Acadiana, four banking offices in Baton Rouge, six banking offices in the Greater New Orleans area, six banking offices in the Northshore region, three banking offices in Natchez, and six banking offices in the Houston area. For additional information on our acquisition activity, see Part II, Item 7 in this Annual Report on Form 10-K, “Management’s Discussion and Analysis of Financial Condition and Results of Operations – Acquisition Activity.”

We face significant competition in originating loans and attracting deposits. This competition stems primarily from other banks, credit unions and mortgage-banking companies. Many of the financial service providers operating in our market areas are significantly larger and have greater financial resources. We face additional competition for deposits from short-term money market funds and other corporate and government securities funds, mutual funds and from other non-depository financial institutions such as brokerage firms and insurance companies. More recently, innovations in loan and deposit products brought about by financial technology companies have added to the level of competition for originating loans and attracting deposits.

Supervision and Regulation

Set forth below is a brief description of certain laws relating to the regulation of Home Bancorp, Inc. and Home Bank, N.A. This description does not purport to be complete and is qualified in its entirety by reference to applicable laws and regulations.

General. Home Bank, N.A. is subject to federal regulation and oversight by the Office of the Comptroller of the Currency (“OCC”). The Bank is also subject to regulation and examination by the FDIC, which insures the deposits of the Bank to the maximum extent permitted by law, and requirements established by the Federal Reserve. The Company has experienced heightened regulatory requirements and scrutiny following the global financial crisis and the enactment in 2010 of the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”). Resulting reforms have caused the Company’s compliance and risk management processes, and the costs thereof, to increase. However, in October 2025, the OCC announced several regulatory changes aimed at reducing burden and tailoring oversight for community banks. Effective January 1, 2026, the OCC will eliminate certain mandatory, non-statutory examination requirements, allowing examiners to adjust exam scope and frequency based on each bank’s size, complexity, and risk profile. The agency also introduced initiatives to simplify model risk-management expectations for smaller institutions and expand eligibility for streamlined licensing procedures for well-managed community banks. Together, these measures are designed to make supervision more risk-focused and less prescriptive, while maintaining safety and soundness standards.

Federal law provides the federal banking regulators with substantial enforcement powers. The OCC’s enforcement authority includes, among other things, the ability to assess civil money penalties, to issue cease and desist or removal orders and to initiate injunctive actions. In general, these enforcement actions may be initiated for violations of laws and regulations and unsafe or unsound practices. Other actions or inactions may provide the basis for enforcement action, including misleading or untimely reports filed with the OCC. The FRB has comparable enforcement authority over the Company. In addition, the FDIC, as the insurer of the Bank’s deposits, can initiate enforcement proceedings, remove Bank officials and suspend or terminate deposit insurance. Any change in such regulations could have a material adverse impact on the Company and the Bank.

In May 2018, the Economic Growth, Regulatory Relief and Consumer Protection Act (the “Act”) was enacted to modify or remove certain financial reform rules and regulations, including some of those implemented under the Dodd-Frank Act. While the Act maintains most of the regulatory structure established by the Dodd-Frank Act, it amends certain aspects of the regulatory framework for small depository institutions with assets of less than $10 billion and for large banks with assets of

2

more than $50 billion. Many of these changes could result in meaningful regulatory relief for community banks, such as the Bank.

The Act, among other matters, expands the definition of qualified mortgages which may be held by a financial institution and simplifies the regulatory capital rules for financial institutions and their holding companies with total consolidated assets of less than $10 billion by instructing the federal banking regulators to establish a single “Community Bank Leverage Ratio” of between 8 and 10 percent to replace the leverage and risk-based regulatory capital ratios.

Regulation of Home Bancorp, Inc.

General. The Company is a bank holding company, subject to regulation, supervision and examination by the Federal Reserve. The Federal Reserve has enforcement authority with respect to the Company similar to that of the OCC over the Bank. Applicable federal law and regulations limit the activities of the Company and require the approval of the Federal Reserve for any acquisition of a subsidiary, including another financial institution or holding company thereof, or a merger or acquisition of the Company. The Company must serve as a source of financial and managerial strength for the Bank, maintaining the ability to provide financial assistance if the Bank suffers financial distress. These and other Federal Reserve policies may restrict the Company’s ability to pay dividends. In addition, dividends from the Company may depend, in part, upon its receipt of dividends from the Bank. If the Company does not have the required capital conservation buffer or otherwise meet its capital requirements, its ability to pay dividends to its stockholders will be limited.

A bank holding company is required to give the Federal Reserve prior written notice of any purchase or redemption of its outstanding equity securities if the gross consideration for the purchase or redemption, when combined with the net consideration paid for all such purchases or redemption during the preceding 12 months, is equal to 10% or more of the company’s consolidated net worth. The Federal Reserve may disapprove such a purchase or redemption if it determines that the proposal would constitute an unsafe or unsound practice or would violate any law, regulation, Federal Reserve order, or any condition imposed by, or written agreement with the Federal Reserve. This notification requirement does not apply to any company that meets the well-capitalized standard for bank holding companies, is well-managed and is not subject to any unresolved supervisory issues.

Permissible Activities. The business activities of the Company are generally limited to those activities permissible for bank holding companies under Section 4(c)(8) of the Bank Holding Company Act and certain additional activities authorized by the Federal Reserve regulations. The Bank Holding Company Act generally prohibits a bank holding company from acquiring direct or indirect ownership or control of more than 5% of the voting shares of any company which is not a bank or bank holding company. A bank holding company must obtain Federal Reserve Board approval before acquiring directly or indirectly, ownership or control of any voting shares of another bank or bank holding company if, after such acquisition, it would own or control more than 5% of such shares (unless it already owns or controls the majority of such shares).

Capital Requirements. The Federal Reserve has established minimum regulatory capital requirements generally applicable to bank holding companies. For a description of the Company's capital requirements, see “Part II, Item 8. Financial Statements and Supplementary Data - Notes to Consolidated Financial Statements - Note 17. Regulatory Matters.”

Federal Securities Laws. We have registered our common stock with the Securities and Exchange Commission under Section 12(b) of the Securities Exchange Act of 1934. Accordingly, the Company is subject to the proxy and tender offer rules, insider trading reporting requirements and restrictions and certain other requirements under the Securities Exchange Act of 1934.

The Sarbanes-Oxley Act. As a public company, the Company is subject to the Sarbanes-Oxley Act of 2002 which addresses, among other issues, corporate governance, auditing and accounting, executive compensation and enhanced and timely disclosure of corporate information. As directed by the Sarbanes-Oxley Act, our principal executive officer and principal financial officer are required to certify that our quarterly and annual reports do not contain any untrue statement of a material fact. The rules adopted by the SEC under the Sarbanes-Oxley Act have several requirements, including having these officers certify that: they are responsible for establishing, maintaining and regularly evaluating the effectiveness of our internal control over financial reporting; they have made certain disclosures to our independent auditors and the Audit Committee of the Board of Directors about our internal control over financial reporting; and they have included information in our quarterly and annual reports about their evaluation and whether there have been changes in our internal control over financial reporting or in other factors that could materially affect internal control over financial reporting.

3

Volcker Rule Regulations. Regulations have been adopted by the federal banking agencies to implement the provisions of the Dodd-Frank Act commonly referred to as the Volcker Rule. The regulations contain prohibitions and restrictions on the ability of financial institution holding companies and their affiliates to engage in proprietary trading and to hold certain interests in, or to have certain relationships with, various types of investment funds, including hedge funds and private equity funds. Recently promulgated federal regulations exclude from the Volker Rule restrictions on community banks with $10.0 billion or less in total consolidated assets and total trading assets and liabilities of 5.0% or less of total consolidated assets. The Company qualifies for this exclusion from the Volker Rule restrictions.

Regulation of Home Bank, N.A.

General. The Bank is subject to regulation and oversight by the OCC extending to all aspects of its operations. As part of this authority, the Bank is required to file periodic reports with the OCC and is subject to periodic examinations by the OCC and the FDIC. The investment and lending authorities of national banks are prescribed by federal laws and regulations, and such institutions are prohibited from engaging in any activities not permitted by such laws and regulations. Such regulation and supervision is primarily intended for the protection of depositors and the Deposit Insurance Fund.

The OCC’s enforcement authority over national banks includes, among other things, the ability to assess civil money penalties, to issue cease and desist or removal orders and to initiate injunctive actions. In general, these enforcement actions may be initiated for violations of laws and regulations and unsafe or unsound practices. Other actions or inactions may provide the basis for enforcement action, including misleading or untimely reports filed with the OCC.

Insurance of Accounts. The deposits of the Bank are insured to the maximum extent permitted by the Deposit Insurance Fund and are backed by the full faith and credit of the U.S. government. The Dodd-Frank Act permanently increased deposit insurance on most separately insured deposit relationship category to $250,000. As insurer, the FDIC is authorized to conduct examinations of, and to require reporting by, insured institutions. It also may prohibit any insured institution from engaging in any activity determined by regulation or order to pose a serious threat to the FDIC. The FDIC also has the authority to initiate enforcement actions against insured institutions.

The FDIC assesses deposit insurance premiums on the assessment base of a depository institution, which is the average total assets reduced by the amount of its average tangible equity. Under the current rules, when the reserve ratio for the Deposit Insurance Fund for the prior assessment period reaches, or is greater than 2.0% and less than 2.5%, assessment rates will range from two basis points to 28 basis points and when the reserve ratio for the prior assessment period is greater than 2.5%, assessment rates will range from one basis-point to 25 basis points. No institution may pay a dividend if it is in default on its federal deposit insurance assessment. As of December 31, 2025, assessment rates ranged from 2.5 basis points to 32 basis points for all institutions, subject to adjustments for unsecured debt issued by the institution, unsecured debt issued by other FDIC-insured institutions, and brokered deposits held by the institution.

The FDIC adopted a final rule in October 2022, to increase initial base deposit insurance assessment rates by two basis points beginning in the first quarterly assessment period of 2023. The FDIC has the authority to increase insurance assessments in the future. A significant increase in insurance premiums would have an adverse effect on the operating expenses and results of operations of the Bank.

The FDIC may terminate the deposit insurance of any insured depository institution if it determines after a hearing that the institution has engaged or is engaging in unsafe or unsound practices, is in an unsafe or unsound condition to continue operations or has violated any applicable law, regulation, order or any condition imposed by an agreement with the FDIC. It also may suspend deposit insurance temporarily during the hearing process for the permanent termination of insurance, if the institution has no tangible capital. If insurance of accounts is terminated, the accounts at the institution at the time of the termination, less subsequent withdrawals, shall continue to be insured for a period of six months to two years, as determined by the FDIC. Management is aware of no existing circumstances which would result in termination of the Bank’s deposit insurance.

Regulatory Capital Requirements. Current OCC capital standards require institutions such as the Bank to satisfy a common equity Tier 1 capital requirement, a leverage capital requirement and a risk-based capital requirement. The common equity Tier 1 capital component generally consists of retained earnings and common stock instruments and must equal at least 4.5% of risk-weighted assets. Leverage capital, also known as “core” capital, must equal at least 4.0% of adjusted total assets. Core capital generally consists of common stockholders’ equity (including retained earnings). Under the risk-based capital requirement, “total” capital (a combination of core and “supplementary” capital) must equal at least 8.0% of “risk-weighted” assets. In addition, in order to make capital distributions and pay discretionary bonuses to executive officers without restriction, an institution must also maintain a capital conservation buffer consisting of additional Tier 1 Common Equity Capital greater than 2.5% of risk weighted assets above the required minimum risk-based capital levels. The OCC also is authorized to impose capital requirements in excess of these standards on individual institutions on a case-by-case basis.

4

In determining compliance with the risk-based capital requirement, a national bank is allowed to include both core capital and supplementary capital in its total capital, provided that the amount of supplementary capital included does not exceed the national bank’s core capital. Supplementary capital generally consists of general allowances for loan losses up to a maximum of 1.25% of risk-weighted assets, together with certain other items. In determining the required amount of risk-based capital, total assets, including certain off-balance sheet items, are multiplied by a risk weight based on the risks inherent in the type of assets. The Bank does not have any assets assigned to a risk category over 400%.

National banks must value securities available for sale at amortized cost for regulatory capital purposes. This means that in computing regulatory capital, national banks should add back any unrealized losses and deduct any unrealized gains, net of income taxes, on debt securities reported as a separate component of capital, as defined by generally accepted accounting principles.

At December 31, 2025, the Bank exceeded all of its regulatory capital requirements, with Tier 1, Tier 1 common equity, Tier 1 common equity (to risk-weighted assets) and total risk-based capital ratios of 11.84%, 14.09%, 14.09% and 15.29%, respectively.

Any national bank that fails any of the capital requirements is subject to possible enforcement action by the OCC or the FDIC. Such action could include a capital directive, a cease and desist order, civil money penalties, the establishment of restrictions on the institution’s operations, termination of federal deposit insurance and the appointment of a conservator or receiver. The OCC’s capital regulations provide that such actions, through enforcement proceedings or otherwise, could require one or more of a variety of corrective actions.

Prompt Corrective Action. The following table shows the amount of capital associated with the different capital categories set forth in the prompt corrective action regulations.

Capital CategoryTotal

Risk-Based

CapitalTier 1

Risk-Based

CapitalTier 1

Common

Equity

CapitalTier 1

Leverage

Capital

Well capitalized10% or more8% or more6.5% or more5% or more

Adequately capitalized8% or more6% or more4.5% or more4% or more

UndercapitalizedLess than 8%Less than 6%Less than 4.5%Less than 4%

Significantly undercapitalizedLess than 6%Less than 4%Less than 3%Less than 3%

In addition, an institution is “critically undercapitalized” if it has a ratio of tangible equity to total assets that is equal to or less than 2.0%. Under specified circumstances, a federal banking agency may reclassify a well-capitalized institution as adequately capitalized and may require an adequately capitalized institution or an undercapitalized institution to comply with supervisory actions as if it were in the next lower category (except that the OCC may not reclassify a significantly undercapitalized institution as critically undercapitalized).

An institution generally must file a written capital restoration plan which meets specified requirements within 45 days of the date that the institution receives notice or is deemed to have notice that it is undercapitalized, significantly undercapitalized or critically undercapitalized. A federal banking agency must provide the institution with written notice of approval or disapproval within 60 days after receiving a capital restoration plan, subject to extensions by the agency. An institution which is required to submit a capital restoration plan must concurrently submit a performance guaranty by each company that controls the institution. In addition, undercapitalized institutions are subject to various regulatory restrictions, and the appropriate federal banking agency also may take any number of discretionary supervisory actions.

As of December 31, 2025, the Bank was deemed a well-capitalized institution for purposes of the above regulations and as such is not subject to the above mentioned restrictions.

Community Reinvestment Act and Fair Lending Laws. All insured depository institutions have a responsibility under the Community Reinvestment Act and related regulations to help meet the credit needs of their communities, including low- and moderate-income borrowers. The Office of the Comptroller of the Currency is required to assess the Bank’s record of compliance with the Community Reinvestment Act ("CRA"). A bank’s failure to comply with the provisions of the Community Reinvestment Act could, at a minimum, result in denial of certain corporate applications such as branches or mergers, or in restrictions on its activities. In addition, the Equal Credit Opportunity Act and the Fair Housing Act prohibit lenders from discriminating in their lending practices. The failure to comply with the Equal Credit Opportunity Act and the Fair Housing Act could result in enforcement actions by the Office of the Comptroller of the Currency, as well as other federal regulatory agencies and the Department of Justice.

5

On October 24, 2023, the federal banking agencies, including the OCC issued a final rule designed to strengthen and modernize regulations implementing the CRA. The changes are designed to encourage banks to expand access to credit, investment and banking services in low- and moderate-income communities, adapt to changes in the banking industry including mobile and internet banking, provide greater clarity and consistency in the application of the CRA regulations and tailor CRA evaluations and data collection to bank size and type. The final rule was published with an April 1, 2024, effective date and staggered compliance dates; however, implementation of the 2023 final rule was stayed by a preliminary injunction. In 2025, the federal banking agencies issued a Joint Notice of Proposed Rulemaking to rescind the 2023 final rule and reinstate the prior CRA regulations. As a result, the Bank will continue to be evaluated under the pre-2023 CRA regulatory framework.

The Community Reinvestment Act requires all institutions insured by the Federal Deposit Insurance Corporation to publicly disclose their rating. The Bank received an “Outstanding” Community Reinvestment Act rating in its most recent federal examination.

Limitations on Dividends. OCC regulations impose various restrictions on the ability of the Bank to pay dividends. The Bank generally may pay dividends during any calendar year in an amount up to 100% of net income for the year-to-date plus retained net income for the two preceding years, so long as it is well-capitalized after the distribution. If the Bank proposes to pay a dividend when it does not meet its capital requirements or that will exceed these limitations, it must obtain the OCC’s prior approval. The OCC may object to a proposed dividend based on safety and soundness concerns. No insured depository institution may pay a dividend if, after paying the dividend, the institution would be undercapitalized. In addition, as noted above, if Home Bank does not have the required capital conservation buffer, its ability to pay dividends to the Company will be limited.

Limitations on Transactions with Affiliates. Transactions between a national bank and any affiliate are governed by Sections 23A and 23B of the Federal Reserve Act. An affiliate of a national bank includes any company or entity which controls the national bank or that is controlled by a company that controls the national bank. In a holding company context, the holding company of a national bank (such as the Company) and any companies which are controlled by such holding company are affiliates of the national bank. Generally, Section 23A limits the extent to which the national bank or its subsidiaries may engage in “covered transactions” with any one affiliate to an amount equal to 10% of such bank’s capital stock and surplus, and contains an aggregate limit on all such transactions with all affiliates to an amount equal to 20% of such capital stock and surplus. Section 23B applies to “covered transactions” as well as certain other transactions and requires that all transactions be on terms substantially the same, or at least as favorable, to the national bank as those provided to a non-affiliate. The term “covered transaction” includes the making of loans to, purchase of assets from and issuance of a guarantee to an affiliate and similar transactions. Section 23B transactions also include the provision of services and the sale of assets by a national bank to an affiliate.

In addition, Sections 22(g) and (h) of the Federal Reserve Act, place restrictions on loans to executive officers, directors and principal shareholders of a national bank and its affiliates. Under Section 22(h), loans to a director, an executive officer, a greater than 10% shareholder of a national bank and certain affiliated interests of either, may not exceed, together with all other outstanding loans to such person and affiliated interests, a national bank’s loans to one borrower limit (generally equal to 15% of the bank’s unimpaired capital and surplus). Section 22(h) also requires that loans to directors, executive officers and principal shareholders be made on terms substantially the same as offered in comparable transactions to other persons unless the loans are made pursuant to a benefit or compensation program that (i) is widely available to employees of the bank and (ii) does not give preference to any director, executive officer or principal shareholder or certain affiliated interests of either, over other employees of the national bank. Section 22(h) also requires prior board approval for certain loans. In addition, the aggregate amount of extensions of credit by a national bank to all insiders cannot exceed the bank’s unimpaired capital and surplus. Furthermore, Section 22(g) places additional restrictions on loans to executive officers. The Bank currently is subject to Sections 22(g) and (h) of the Federal Reserve Act, and as of December 31, 2025 was in compliance with the above restrictions.

Consumer Financial Services. The historical structure of federal consumer protection regulation applicable to all providers of consumer financial products and services changed significantly with the establishment of the Consumer Financial Protection Bureau (“CFPB”) as part of the Dodd-Frank Act reforms. On July 21, 2011, the CFPB commenced operations to supervise and enforce consumer protection laws. The CFPB has broad rulemaking authority for a wide range of consumer protection laws that apply to all providers of consumer products and services, including the Bank, as well as the authority to prohibit “unfair, deceptive or abusive” acts and practices. CFPB has examination and enforcement authority over providers with more than $10 billion in assets. FDIC-insured institutions with $10 billion or less in assets, like the Bank, continue to be examined by their applicable bank regulators. However, in early 2025, CFPB leadership significantly scaled back the agency’s rulemaking, enforcement and supervisory activities, including pausing major enforcement actions, rescinding guidance, and narrowing priorities which has significantly reduced active oversight of financial institutions. Although

6

statutory consumer protection requirements remain in force, the agency’s diminished operations have created regulatory uncertainty with respect to the supervision and enforcement of the existing consumer financial protection laws.

Commercial Real Estate Lending Concentrations. The federal banking agencies have issued guidance on sound risk management practices for concentrations in commercial real estate lending. The particular focus is on exposure to commercial real estate loans that are dependent on the cash flow from the real estate held as collateral and that are likely to be sensitive to conditions in the commercial real estate market (as opposed to real estate collateral held as a secondary source of repayment or as an abundance of caution). The purpose of the guidance is not to limit a bank’s commercial real estate lending but to guide banks in developing risk management practices and capital levels commensurate with the level and nature of real estate concentrations. The guidance directs the FDIC and other bank regulatory agencies to focus their supervisory resources on institutions that may have significant commercial real estate loan concentration risk. A bank that has experienced rapid growth in commercial real estate lending, has notable exposure to a specific type of commercial real estate loan, or is approaching or exceeding the following supervisory criteria may be identified for further supervisory analysis with respect to real estate concentration risk:

•Total reported loans for construction, land development and other land represent 100% or more of the bank’s total regulatory capital; or

•Total commercial real estate loans (as defined in the guidance) represent 300% or more of the bank’s total regulatory capital and the outstanding balance of the bank’s commercial real estate loan portfolio has increased 50% or more during the prior 36 months.

The guidance provides that the strength of an institution’s lending and risk management practices with respect to such concentrations will be taken into account in supervisory guidance on evaluation of capital adequacy.

Anti-money Laundering. All financial institutions, including national banks, are subject to federal laws that are designed to prevent the use of the U.S. financial system to fund terrorist activities. Financial institutions operating in the United States must develop anti-money laundering compliance programs, due diligence policies and controls to ensure the detection and reporting of money laundering. Such compliance programs are intended to supplement compliance requirements, also applicable to financial institutions, under the Bank Secrecy Act and the Office of Foreign Assets Control Regulations. The Bank has established policies and procedures to ensure compliance with these provisions.

Federal Home Loan Bank System. The Bank is a member of the FHLB of Dallas, which is one of 11 regional FHLBs that administer the home financing credit function of various financial institutions. The FHLBs provides financial institutions additional strength to serve their communities through financial services to support its mission of affordable housing and economic development. Each FHLB serves as a reserve or central bank for its members within its assigned region. It is funded primarily from proceeds derived from the sale of consolidated obligations of the FHLB System. It makes loans to members (i.e., advances) in accordance with policies and procedures established by the board of directors of the FHLB. As of December 31, 2025, the Bank had $3.0 million of FHLB advances and $1.3 billion available on its line of credit with the FHLB.

As a member, the Bank is required to purchase and maintain stock in the FHLB of Dallas in an amount equal to at least 0.4% of its total assets in Class B-1 stock and activity-based investment of Class B-2 stock equal to 4.1% of its advances outstanding and 2.0% of acquired members advances currently on the Bank’s balance sheet. As of December 31, 2025, the Bank had $2.6 million in FHLB stock, which was in compliance with this requirement.

Federal Reserve System. The FRB requires all depository institutions to maintain reserves against their transaction accounts and non-personal time deposits. Effective March 26, 2020, the Federal Reserve Board reduced reserve requirement ratios to zero percent. At December 31, 2025, the reserve requirement remained at zero percent.

Privacy and Cyber Security. Financial institutions are required to disclose their policies for collecting and protecting confidential information. Customers generally may prevent financial institutions from sharing personal financial information with nonaffiliated third parties except for third parties that market the institutions’ own products and services.

Additionally, financial institutions generally may not disclose consumer account numbers to any nonaffiliated third party for use in telemarketing, direct mail marketing or other marketing through electronic mail to consumers. The Bank has established policies and procedures designed to safeguard its customers’ personal financial information and to ensure compliance with applicable privacy laws.

7

The federal banking agencies recently adopted rules providing for new notification requirements for banking organizations and their service providers for significant cybersecurity incidents. Specifically, the new rules require a banking organization to notify its primary federal regulator as soon as possible, and no later than 36 hours after, the banking organization determines that a “computer-security incident” rising to the level of a “notification incident” has occurred. Notification is required for incidents that have materially affected or are reasonably likely to materially affect the viability of a banking organization’s operations, its ability to deliver banking products and services, or the stability of the financial sector. Service providers are required under the rule to notify affected banking organization customers as soon as possible when the provider determines that it has experienced a computer-security incident that has materially affected or is reasonably likely to materially affect the banking organization’s customers for four or more hours.

The Securities and Exchange Commission adopted rules requiring registrants to disclose material cybersecurity incidents they experience and to disclose on an annual basis material information regarding their cybersecurity risk management, strategy, and governance. The rules require registrants to disclose on the new Item 1.05 of Form 8-K any cybersecurity incident they determine to be material and to describe the material aspects of the incident's nature, scope, and timing, as well as its material impact or reasonably likely material impact on the registrant. An Item 1.05 Form 8-K will generally be due four business days after a registrant determines that a cybersecurity incident is material. See Item 1C. Cybersecurity for annual disclosures.