NASDAQ: MRBK

Commercial Banking

The first line of business, or segment, is our traditional banking operations, serving both commercial and consumer customers. We have a strong credit culture that promotes diversity of lending products with a focus on commercial businesses. We provide deposit and treasury management services, commercial and industrial lending and leasing, commercial real estate lending, small business lending, consumer and home equity lending, private banking, merchant services, and title and land settlement services. Our commercial and industrial lending department supports our small business and middle market borrowers with a comprehensive selection of loan products including financing solutions for wholesalers, manufacturers, distributors, service providers, importers and exporters, among others. Our portfolio includes business lines of credit, term loans, small business lending and financing, and lease financing. We have no particular credit concentration. Our commercial loans have been proactively managed in an effort to achieve a balanced portfolio with no unusual exposure to one industry.

Our SBA team and their alliances with local economic development councils provide SBA 504 and 7(a) financing options to help grow local businesses, create and retain jobs and stimulate our local economy. In addition, Meridian understands that connections with the local professional industries benefit us, not only with these individuals as customers or investors, but also given the proven potential for business referrals.

The commercial real estate division offers permanent financing for owner-occupied commercial real estate loans and land development and construction loans for residential and commercial projects. Our approach is to apply disciplined and integrated standards to underwriting, credit and portfolio management. The extensive backgrounds of our commercial real estate lending team, not only in banking, but also directly in the builder/developer fields, bring a unique perspective and ability to communicate and consider all elements of a project and related risk from the clients’ viewpoint as well as ours.

Wealth Management and Advisory Services

The second line of business is wealth management and advisory services. Meridian Wealth, a registered investment advisor and wholly-owned subsidiary of the Bank, provides a comprehensive array of wealth management services and products and the trusted guidance to help its clients and our banking customers prepare for the future. Such clients include professionals, higher net worth individuals, companies seeking to provide benefits plans for their employees, business and consumer customers of the bank, and more. Acquiring and sustaining wealth is a gradual progression, one that requires a considerable amount of thought and planning. Our process takes a comprehensive approach to financial planning and encompasses all aspects of retirement, with an emphasis on

5

sustainability. Meridian Wealth offers a significant enhancement to both our capacity and the variety of tools we can use to help bring effective financial planning and wealth management services to a broad segment of customers.

Mortgage Banking

The third line of business is mortgage banking. Our mortgage consultants guide our clients through the complex process of obtaining a loan to meet consumer needs. Originations consist of consumer for-sale mortgage loans, loans to be held within our portfolio, and wholesale mortgage loans and home equity loans. Clients include homeowners and smaller scale investors. The mortgage segment operates and originates loans in the Delaware Valley tri-state market, Maryland markets and south Florida markets, most typically for 1-4 family dwellings, with the intention of selling substantially all of these loans in the secondary market to qualified investors, while often retaining the servicing rights on these loans. Mortgages are originated through sales and marketing initiatives, as well as realtor, builder, bank, advertising and customer referral resources. The mortgage division performs origination, processing, underwriting, closing and post-closing functions both from our East Norriton mortgage headquarters with 5 other loan production offices in the Delaware Valley tri-state market and also in Florida, and from Maryland through our footprint of 2 other production/processing offices in the state.

Market Area

Meridian is headquartered in Malvern, PA, has an operations center in Exton, PA, and seven full-service branches in Philadelphia and surrounding counties. Its main branch, in Wayne, serves the Main Line. The West Chester and Media branches serve Chester and Delaware counties, respectively, while the Doylestown and Blue Bell branches serve Bucks and Montgomery counties, respectively, and our sixth branch is in Center City Philadelphia. In 2025 we opened up our seventh branch in the southwest Florida town of Bonita Springs. These branches provide “Relationship Hubs” for our regional lending groups and allow Meridian to serve markets at or near the county seat of counties in and surrounding Philadelphia.

In addition to our deposit taking branches, there are currently 10 other locations, including Corporate headquarters, that serve as loan production offices. These offices extend from the Delaware Valley/Philadelphia market area to Delaware, Central Maryland, and southwest Florida.

Demographic information for the five county Philadelphia metropolitan area (Philadelphia County, Chester County, Delaware County, Montgomery County, Bucks County) shows our primary market to be stable, with moderate population growth. According to the U.S. Census Bureau – 2024, the median household income in this area is $101 thousand compared to the national average of $82 thousand, while the total population in this market was 4,218,131. Demographic information for the five county Baltimore metropolitan area (Baltimore County, Howard County, Montgomery County, Anne Arundel County, Prince George’s County) also shows that this secondary market is stable. According to the U.S. Census Bureau – 2024, the median household income in the Baltimore metropolitan area is $116 thousand compared to the national average of $82 thousand, while the total population in this market was 4,183,315. The Delaware and Florida markets we serve are also stable with moderate population growth.

(dollars in thousands / population actual)United StatesPennsylvaniaMaryland

Population (1)
342,328,09513,059,4326,177,224

Median household income (1)
$82 $78 $103

Unemployment rate (2)
4.20 %4.20 %4.20 %

Philadelphia Metropolitan Area Counties

(dollars in thousands / population actual)Bucks CountyMontgomery CountyDelaware CountyChester CountyPhiladelphia CountyTotal

Population (1)
646,538856,553534,413576,8301,603,7974,218,131

Median household income (1)
$113 $112 $131 $90 $61 $101

Unemployment rate (2)
4.00 %3.00 %3.50 %2.60 %4.50 %

Baltimore Metropolitan Area Counties

(dollars in thousands / population actual)Howard CountyMontgomery CountyAnne Arundel CountyPrince George's CountyBaltimore CountyTotal

Population (1)
332,3171,062,061967,201967,201854,5354,183,315

Median household income (1)
$152 $141 $99 $99 $88 $116

Unemployment rate (2)
3.10 %3.50 %3.10 %4.30 %3.60 %

Delaware CountiesFlorida County

(dollars in thousands / population actual)Kent CountySussex CountyNew Castle CountyTotalLee County

Population (1)
181,851 237,378 570,719 989,948 760,822

Median household income (1)
$81 $85 $90 $85 $84

Unemployment rate (2)
5.6 %5.1 %5.0 %4.9 %

(1) Source: U.S. Census Data – 2024

(2) Source: U.S. Bureau of Labor Statistics –December 2025

6

Competition

Overall, the banking business in our market area is highly competitive. The Bank faces substantial competition both in attracting deposits and in originating loans. The Bank competes with local, regional and national commercial banks, savings banks, and savings and loan associations. Other competitors include non-bank fintech and finance companies, money market mutual funds, mortgage bankers, insurance companies, securities brokerage firms, regulated small loan companies, credit unions, and issuers of commercial paper and other securities.

The Bank seeks to compete for business principally on the basis of high quality, personal service to customers, customer access to our decision-makers, and customer preferred electronic delivery channels while providing an attractive banking platform and competitive interest rates and services.

Human Capital Resources

At December 31, 2025, we employed 327 individuals, nearly all of whom are full-time and of which 49% are women. Women make up 33% of all officers throughout the Meridian organization. None of these employees are covered by collective bargaining agreements, and Meridian believes it enjoys good relations with its personnel. As an integrated full-service financial institution, approximately 62% of our employees are employed through our banking segment, 34% through our mortgage segment, and 4% for our wealth segment.

The Bank is listed by the Philadelphia Inquirer in their “Top Work Places of 2025”, and was named to American Bankers 2023 Top 200 Community Banks. Meridian has also been listed by the Baltimore Sun and the News Journal in their respective “Top Workplace in the Region 2025”.

Since inception, Meridian has been committed to giving back to worthy organizations and institutions throughout the communities that we serve and live in. In 2025, we donated $727 thousand in total to over 100 such organizations and institutions throughout the communities that we serve in Pennsylvania, New Jersey, Delaware, Maryland, and Florida. Meridian also sponsors individual / group service days and provides time off to employees to participate in charitable activities. Meridian encourages employees to serve on boards of community organizations.

In order to compete effectively and continue to provide excellent service to our clients, we must attract, retain, and motivate qualified professionals. During the hiring process Meridian looks to bring onboard well-qualified individuals, without bias to race or gender. As we are currently in a very competitive hiring market, we utilize various methods to find well-qualified talent including third party search firms, social media, internal candidates already in our organization and on campus recruiting at local universities.

During 2025, we hired 74 professionals, 41% of which were women, and 24% of which were ethnically diverse. For 2025, our turnover rate was approximately 1.9%, which makes our overall retention rate very high compared to peers. We believe our culture, our effort to maintain a meritocracy in terms of opportunity and our continued evolution and growth contribute to our success in attracting and retaining strong talent.

Our benefits are designed to attract and retain employees by providing employees and their families with health and wellness programs (medical, dental, vision), retirement wealth accumulation, paid time off, income replacement (paid sick and disability leaves and life insurance) and family oriented benefits (parental leaves and child care assistance).

We aim to continually build on the expertise of our workforce. At entry levels, we have implemented trainee and internship programs. During 2025 Meridian invested throughout the organization in terms of in-house and external training programs to help our employees develop leadership skills, stay current on professional development topic in their area of focus, as well as to keep up to date on cybersecurity, and risk & compliance matters that impact the organization overall.

Our Current Capital Stock Structure

As of December 31, 2025, Meridian had 13,829,645 shares of common stock, $1 par value, issued and 11,826,462 shares outstanding. There are 2,003,183 shares held in treasury.

Information about Meridian

Our executive offices are located at 9 Old Lincoln Highway, Malvern, PA 19355 and our telephone number is (484) 568-5000. Our Internet website is www.meridianbanker.com and our investor relations page can be found at investor.meridianbanker.com. Our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q and Current Reports on Form 8-K, and all amendments thereto have been filed, along with this Annual Report on Form 10-K, with the SEC. The Corporation’s filings with the SEC can also be accessed at the SEC’s internet website: http://www.sec.gov.

Investors can obtain copies of Meridian’s annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and any amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended, on Meridian’s website (accessible under “Investor Relations” – “SEC Filings”) as soon as reasonably practicable after Meridian has filed such materials with, or furnished them to, the SEC. Meridian will also furnish a paper copy of such filings free of charge upon request. Also on our website are our Audit Committee and Compensation Committee Charters. The information contained in our website or in any websites linked by our website, is not part of this Annual Report on Form 10-K.

Reports of the Bank’s condition and income, known as “Call Reports,” are filed with the FDIC and the Parent Company Only Financial Statement for Small Holding Companies known as the “FR Y-9SP” with the Federal Reserve. These reports are available on the FFIEC Central Data Repository’s Public Data Distribution website at cdr.ffiec.gov/public.

7

Supervision and Regulation

Meridian and its subsidiaries are subject to extensive regulation under federal and state banking laws that establish a comprehensive framework for our operations. This framework may materially affect our growth potential and financial performance and is intended primarily for the protection of depositors, customers, federal deposit insurance funds and the banking system as a whole, not for the protection of our shareholders and creditors. The following discussion summarizes certain laws, regulations and policies to which Corporation and the Bank are currently subject to. It does not address all applicable laws, regulations and policies that affect us currently or might affect us in the future. This discussion is qualified in its entirety by reference to the full texts of the laws, regulations and policies described.

The Bank is an FDIC-insured commercial bank chartered under the laws of Pennsylvania with regulatory oversight from the FDIC and the PDBS. The holding company, Meridian Corporation, is subject to supervision and examination by, and the regulations and reporting requirements of, the FRB, and is subject to the disclosure and regulatory requirements of the Exchange Act. In order to adhere to regulatory expectations on an ongoing basis and to successfully prepare for the normal examination processes, Meridian maintains numerous internal controls including policies and programs appropriate to maintain the Bank’s safety and soundness, under such key areas as lending, compliance, BSA-AML, information security, human resources, deposit and cash management products, enterprise risk, merchant services, finance, title services, branch security and wealth management. As a public company, the Corporation also files reports with the SEC and is subject to its regulatory authority, as well as the disclosure and regulatory requirements of the Securities Act, as amended, and the Exchange Act, as amended, with respect to the Corporation’s securities, financial reporting and certain governance matters. Because the Corporation’s securities are listed on the NASDAQ Stock Market, we are subject to NASDAQ's rules for listed companies, including rules relating to corporate governance.

Permissible Activities for Bank Holding Companies

The Corporation is a registered bank holding company under the BHC Act. In general, the BHC Act limits the business of bank holding companies to banking, managing or controlling banks and other activities that the Federal Reserve has determined to be so closely related to banking as to be a proper incident thereto, which include certain activities relating to extending credit or acting as an investment or financial advisor.

The FRB has the power to order any bank holding company or any of its subsidiaries to terminate any activity or to terminate its ownership or control of any subsidiary when the FRB has reasonable grounds to believe that continuing such activity, ownership or control constitutes a serious risk to the financial soundness, safety or stability of any bank subsidiary of the bank holding company.

Permissible Activities for Banks

As a Pennsylvania-chartered commercial bank, our business is subject to extensive supervision and regulation by state and federal bank regulatory agencies. Our business is generally limited to activities permitted by Pennsylvania law and any applicable federal laws. Under the Pennsylvania Banking Code of 1965 (the “Pennsylvania Banking Code”), the Bank may generally engage in all usual banking activities, including, among other things, accepting deposits; lending money on personal and real estate security; issuing letters of credit; buying, selling, discounting, factoring, and negotiating promissory notes and other forms of indebtedness; buying and selling foreign currency and, subject to certain limitations, certain investment securities; engaging in certain insurance activities and management services providing cash.

The FDIC has adopted regulations pertaining to the other activity restrictions imposed upon insured state banks and their subsidiaries. Pursuant to such regulations, insured state banks engaging in impermissible activities may seek approval from the FDIC to continue such activities. State banks not engaging in such activities but that desire to engage in otherwise impermissible activities either directly or through a subsidiary may apply for approval from the FDIC to do so; however, if such bank fails to meet the minimum capital requirements or the activities present a significant risk to the Deposit Insurance Fund, such application will not be approved by the FDIC. Pursuant to this authority, the FDIC has determined that investments in certain majority-owned subsidiaries of insured state banks do not represent a significant risk to the deposit insurance funds. Investments permitted under that authority include real estate activities and securities activities.

Meridian currently conducts certain non-banking activities through certain of the Bank’s non-bank subsidiaries. Meridian Bank currently operates four wholly-owned subsidiaries: Meridian Land Settlement Services, which provides title insurance services; Apex Realty, a real estate holding company; Meridian Wealth, a registered investment advisory firm, and Meridian Equipment Finance, an equipment leasing and other finance receivables company.

Pennsylvania law also imposes restrictions on the Bank’s activities intended to ensure the safety and soundness of the Bank. For example, Meridian Bank is restricted under the Pennsylvania Banking Code from investing in certain types of investment securities and is generally limited in the amount of money it can lend to a single borrower or invest in securities issued by a single issuer.

Acquisitions by Bank Holding Companies

Control Acquisitions. The CBCA prohibits a person or group of persons from acquiring “control” of a bank holding company unless the Federal Reserve has been notified and has not objected to the transaction. Under a rebuttable presumption established by the Federal Reserve, the acquisition of 10% or more of a class of voting stock of a bank holding company with a class of securities registered under Section 12 of the Exchange Act, such as Meridian Corporation, would, under the circumstances set forth in the presumption, constitute acquisition of control of Meridian Corporation.

In addition, the CBCA prohibits any entity from acquiring 25% (the BHC Act has a lower limit for acquirers that are existing bank holding companies) or more of a bank holding company’s or bank’s voting securities, or otherwise obtaining control or a controlling influence over a bank holding company or bank without the approval of the Federal Reserve. On January 31, 2020, the Federal Reserve Board

8

approved the issuance of a final rule (which became effective April 1, 2020) that clarifies and codifies the Federal Reserve’s standards for determining whether one company has control over another. The final rule establishes four categories of tiered presumptions of non-control that are based on the percentage of voting shares held by the investor (less than 5%, 5-9.9%, 10-14.9% and 15-24.9%) and the presence of other indicia of control. As the percentage of ownership increases, fewer indicia of control are permitted without falling outside of the presumption of non-control. These indicia of control include nonvoting equity ownership, director representation, management interlocks, business relationship and restrictive contractual covenants. Under the final rule, investors can hold up to 24.9% of the voting securities and up to 33% of the total equity of a company without necessarily having a controlling influence.

Dividends

The Corporation is a legal entity separate and distinct from the Bank and the Bank’s wholly-owned subsidiaries. As a Pennsylvania banking institution, the Bank is subject to certain restrictions on its ability to pay dividends under applicable banking laws and regulations.

Federal banking regulators are authorized to determine under certain circumstances relating to the financial condition of a bank holding company or a bank that the payment of dividends would be an unsafe or unsound practice and to prohibit payment thereof. In particular, federal banking regulators have stated that paying dividends that deplete a banking organization’s capital base to an inadequate level would be an unsafe and unsound banking practice and that banking organizations should generally pay dividends only out of current operating earnings. In addition, in the current financial and economic environment, the federal banking regulators have indicated that banks should carefully review their dividend policy and have discouraged payment ratios that are at maximum allowable levels unless both asset quality and capital are very strong. Under the Capital Rules, institutions that seek to pay dividends must maintain 2.5% in Common Equity Tier 1 capital attributable to the capital conservation buffer. See “—Regulatory Capital Requirements”.

Our principal source of cash flow and income is dividends from our subsidiaries, which is also the component of our liquidity. In addition to the restrictions discussed above, the Bank is subject to limitations under Pennsylvania law regarding the level of dividends that it may pay to its shareholder. Under the Pennsylvania Banking Code, the Bank generally may not pay dividends in excess of its net profits.

Parity Regulation

A Pennsylvania banking institution may, in accordance with Pennsylvania law and regulations issued by the PDBS, exercise any power and engage in any activity that has been authorized for national banks, federal thrifts or state banks in a state other than Pennsylvania, provided that the activity is permissible under applicable federal law and not specifically prohibited by Pennsylvania law. Such powers and activities must be subject to the same limitations and restrictions imposed on the national bank, federal thrift or out-of-state bank that exercised the power or activity, subject to a required notice to the PDBS. The FDIA, however, prohibits state-chartered banks from making new investments, loans, or becoming involved in activities as principal and equity investments which are not permitted for national banks unless (1) the FDIC determines the activity or investment does not pose a significant risk of loss to the Deposit Insurance Fund and (2) the Bank meets all applicable capital requirements. Accordingly, the additional operating authority provided to the Bank by the Pennsylvania Banking Code is restricted by the FDIA.

Transactions with Affiliates and Insiders

Transactions between our subsidiaries, or between the Corporation and our subsidiaries, are regulated under Sections 23A and 23B of the Federal Reserve Act. The Federal Reserve Act imposes quantitative and qualitative requirements and collateral requirements on covered transactions by the Bank with, or for the benefit of, its affiliates. Generally, the Federal Reserve Act limits the extent to which a bank or its subsidiaries may engage in “covered transactions” with any one affiliate to an amount equal to 10% of a bank’s capital stock and surplus, limits the aggregate amount of all such transactions with all affiliates to an amount equal to 20% of such capital stock and surplus, and requires those transactions to be on terms at least as favorable to a bank as if the transaction were conducted with an unaffiliated third party. Covered transactions are defined by statute to include a loan or extension of credit, as well as a purchase of securities issued by an affiliate, a purchase of assets (unless otherwise exempted by the Federal Reserve) from the affiliate, certain derivative transactions with an affiliate, the acceptance of securities issued by the affiliate as collateral for a loan, and the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate. In addition, any credit transactions with any affiliate, must be secured by designated amounts of specified collateral.

Federal law also limits a bank’s authority to extend credit to its directors, executive officers and 10% shareholders, as well as to entities controlled by such persons. Among other things, extensions of credit to insiders are required to be made on terms that are substantially the same as, and follow credit underwriting procedures that are not less stringent than, those prevailing for comparable transactions with unaffiliated persons. Also, the terms of such extensions of credit may not involve more than the normal risk of non-repayment or present other unfavorable features and may not exceed certain limitations on the amount of credit extended to such persons individually and in the aggregate.

Source of Strength

Federal Reserve policy and federal law require bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. Under this requirement, Meridian is expected to commit resources to support the Bank, including at times when it may not be in a financial position to provide such resources, and it may not be in our, or our shareholders’ or creditors’, best interests to do so. In addition, any capital loans Meridian makes to the Bank are subordinate in right of payment to depositors and to certain other indebtedness of the Bank. In the event of our bankruptcy, any commitment by us to a federal banking regulatory agency to maintain the capital of the Bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

9

Regulatory Capital Requirements

The Corporation and the Bank remain subject to regulatory capital standards administered by the Federal Reserve, the FDIC, and the Pennsylvania Department of Banking and Securities, each of which monitors capital adequacy through a combination of risk‑based measures and leverage requirements.

Basel III / U.S. Capital Framework

U.S. banking organizations continue to operate under the Basel III regulatory capital regime; however, the framework is undergoing significant revision due to the federal banking agencies’ ongoing “Basel III Endgame” reform process. In July 2025, U.S. regulators reaffirmed plans to implement a revised capital rule that would materially change how credit, market, and operational risks are measured, including reducing reliance on internal models and adopting enhanced standardized approaches. These reforms—initially proposed in 2023—have since been reevaluated after substantial industry feedback, with regulators signaling a more “industry‑friendly” and less punitive capital framework expected to be re‑proposed in early 2026.

In August 2025, the Federal Reserve publicly confirmed it is abandoning the prior, more stringent 2023 Basel III Endgame proposal in favor of a new, simplified capital framework designed to reduce unnecessary regulatory burden while maintaining safety and soundness. Although final requirements are still forthcoming, these developments reflect active regulatory recalibration that may affect future risk‑based capital ratios, buffer requirements, and the treatment of certain asset classes.

Until the revised capital rule becomes effective, minimum Basel III regulatory capital requirements applicable to the Corporation and the Bank remain in place, including: (i) 4.5% CET1 to risk-weighted assets, (ii) 6% Tier 1 capital (that is, CET1 plus Additional Tier 1 capital) to risk-weighted assets, (iii) 8% total capital (that is, Tier 1 capital plus Tier 2 capital) to risk-weighted assets and (iv) 4% Tier 1 capital to average consolidated assets as reported on consolidated financial statements (known as the “leverage ratio”).

Institutions must also maintain a 2.5% capital conservation buffer, resulting in effective minimum ratios of 7% CET1, 8.5% Tier 1, and 10.5% Total capital. Mortgage servicing assets, deferred tax assets, and certain other exposures remain subject to CET1 deduction thresholds. These requirements will remain applicable until superseded by the forthcoming Basel III Endgame revisions.

Community Bank Leverage Ratio (CBLR)

The Bank elected the CBLR framework in 2020. Historically, the CBLR required a leverage ratio greater than 9% for qualifying institutions. In late 2025, however, the federal banking agencies issued coordinated proposals to meaningfully revise the framework.

On November 25, 2025, the OCC, Federal Reserve, and FDIC jointly proposed lowering the CBLR threshold from greater than 9% to greater than 8%, as authorized by federal statute. The proposed rule would also extend the “grace period” for qualifying institutions that temporarily fall below the required CBLR from two quarters to four quarters, provided the leverage ratio remains above 7%. A parallel Federal Register notice published on December 1, 2025, confirms the same proposed reduction and expanded grace‑period structure. Federal Reserve statements issued the same week similarly support reducing the requirement to 8% while preserving a capital level consistent with safe and sound banking. Additional industry commentary indicates that lowering the CBLR threshold is intended to broaden eligibility, reduce regulatory burden, and increase lending capacity for community banks. As of December 31, 2025, these CBLR revisions remain proposed but not yet final. With respect to the Bank, the Capital Rules also revised the prompt corrective action regulations pursuant to Section 38 of the FDIA. See “Prompt Corrective Action Framework” below.

Prompt Corrective Action Framework

The FDIC’s Prompt Corrective Action framework, used to classify institutions based on capital levels, remains unchanged. Basel III Endgame discussions have not modified PCA thresholds, and institutions must continue to maintain capital ratios that satisfy the “well‑capitalized” standards to avoid restrictions.

Liquidity Regulations

Historically, the regulation and monitoring of bank and bank holding company liquidity has been addressed as a supervisory matter, without required formulaic measures. The Basel final framework requires banks and bank holding companies to measure their liquidity against specific liquidity tests that, although similar in some respects to liquidity measures historically applied by banks and regulators for management and supervisory purposes, going forward would be required by regulation. One test, referred to as the liquidity coverage ratio, or LCR, is designed to ensure that the banking entity maintains an adequate level of unencumbered high-quality liquid assets equal to the entity’s expected net cash outflow for a 30-day time horizon (or, if greater, 25% of its expected total cash outflow) under an acute liquidity stress scenario. The other test, referred to as the net stable funding ratio, or NSFR, is designed to promote more medium- and long-term funding of the assets and activities of banking entities over a one-year time horizon. These requirements will incentivize banking entities to increase their holdings of U.S. Treasury securities and other sovereign debt as a component of assets and increase the use of long-term debt as a funding source.

Safety and Soundness Standards

The FDIA requires the federal banking agencies to prescribe standards, by regulations or guidelines, relating to internal controls, information systems and internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings, stock valuation and compensation, fees and benefits, and such other operational and managerial standards as the agencies deem appropriate. The federal banking agencies have adopted the Interagency Guidelines for Establishing Standards for Safety and Soundness. The guidelines establish general standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, asset quality, earnings and compensation, fees and benefits. In general, these guidelines require, among other things, appropriate systems and practices to identify and manage the

10

risk and exposures specified in the guidelines. These guidelines also prohibit excessive compensation as an unsafe and unsound practice and describe compensation as excessive when the amounts paid are unreasonable or disproportionate to the services performed by an executive officer, employee, director or principal shareholder. In addition, the agencies adopted regulations that authorize, but do not require, an agency to order an institution that has been given notice by an agency that it is not satisfying all safety and soundness standards to submit a compliance plan. If, after being so notified, an institution fails to submit an acceptable compliance plan or fails in any material respect to implement an acceptable compliance plan, the banking regulator must issue an order directing action to correct the deficiency and may issue an order directing other actions of the types to which an undercapitalized institution may be subject under the FDIA. See “—Prompt Corrective Action Framework”. If an institution fails to comply with such an order, the banking regulator may seek to enforce such order in judicial proceedings and to impose civil money penalties.

Deposit Insurance

FDIC insurance assessments

As an FDIC-insured bank, the Bank must pay deposit insurance assessments to the FDIC based on its average total assets minus its average tangible equity. Deposits are insured up to applicable limits by the FDIC and such insurance is backed by the full faith and credit of the United States Government.

As an institution with less than $10 billion in assets, the Bank’s assessment rates are based on the level of risk it poses to the FDIC’s DIF. The initial base rate for deposit insurance is between three and 30 basis points. Total base assessment after possible adjustments now ranges between 1.5 and 40 basis points. For established smaller institutions, like the Bank, supervisory ratings are used along with (i) an initial base assessment rate, (ii) an unsecured debt adjustment (which can be positive or negative), and (iii) a brokered deposit adjustment, to calculate a total base assessment rate.

Under the Dodd-Frank Act, the limit on FDIC deposit insurance was increased to $250 thousand. The coverage limit is per depositor, per insured depository institution for each account ownership category. The Dodd-Frank Act also set a new minimum DIF reserve ratio at 1.35% of estimated insured deposits.

In October, 2022, the FDIC adopted a final rule to increase the initial base deposit insurance assessment rate schedules uniformly by 2 basis points beginning with the first quarterly assessment period of 2023. The increased assessment rate schedules would remain in effect unless and until the reserve ratio of the Deposit Insurance Fund meets or exceeds 2 percent. As a result of the new rule, the FDIC insurance costs of insured depository institutions, including Meridian Bank, would generally increase.

Under the FDIA, the FDIC may terminate deposit insurance upon a finding that an institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC.

Other assessments

In addition, the Deposit Insurance Funds Act of 1996 authorized the FICO to impose assessments on certain deposits in order to service the interest on the FICO’s bond obligations from deposit insurance fund assessments. The amount assessed on individual institutions is in addition to the amount, if any, paid for deposit insurance according to the FDIC’s risk-related assessment rate schedules. Assessment rates may be adjusted quarterly to reflect changes in the assessment base. FICO assessments are expected to end after the bonds mature in 2027, as of December 31, 2025, they are still in effect.

Depositor Preference

The FDIA provides that, in the event of the “liquidation or other resolution” of an insured depository institution, the claims of deposits of the institution, including the claims of the FDIC as subrogate of insured depositors, and certain claims for administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution. If an insured depository institution fails, insured and uninsured depositors, along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including depositors whose deposits are payable only outside of the United States and the parent bank holding company, with respect to any extensions of credit they have made to such insured depository institution.

Interstate Branching

Pennsylvania banking laws authorize banks in Pennsylvania to acquire existing branches or branch de novo in other states, and also permits out-of-state banks to acquire existing branches or branch de novo in Pennsylvania.

Federal law permits state and national banks to merge with banks in other states subject to: (i) regulatory approval; (ii) federal and state deposit concentration limits; and (iii) any state law limitations requiring the merging bank to have been in existence for a minimum period of time (not to exceed five years) prior to the merger. The establishment of new interstate branches or the acquisition of individual branches of a bank in another state (rather than the acquisition of an out-of-state bank in its entirety) has historically been permitted only in those states the laws of which expressly authorize such expansion. However, the Dodd-Frank Act permits well-capitalized and well-managed banks to establish new branches across state lines without these impediments, unless expressly prohibited.

Consumer Financial Protection

The Bank is subject to a number of federal and state consumer protection laws that extensively govern our relationship with our customers. These laws include the ECOA, the Fair Credit Reporting Act, the TILA, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Service Members Civil Relief Act, the Right to Financial Privacy Act,

11

Telephone Consumer Protection Act, CAN-SPAM Act, and these laws’ respective state-law counterparts, as well as state usury laws and laws regarding unfair and deceptive acts and practices. These and other federal laws, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, restrict our ability to raise interest rates on extensions of credit and subject us to substantial regulatory oversight. Violations of applicable consumer protection laws can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal banking regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, action by the state and local attorneys general in each jurisdiction in which we operate and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain any required bank regulatory approval for merger or acquisition transactions we may wish to pursue or our prohibition from engaging in such transactions even if approval is not required.

The CFPB has broad rule making, supervisory and enforcement powers under various federal consumer financial protection laws with respect to certain consumer financial products and services, including the ability to require reimbursements and other payments to customers for alleged legal violations. The CFPB has the authority to impose significant penalties, as well as injunctive relief that prohibits lenders from engaging in allegedly unlawful practices. The CFPB is also authorized to engage in consumer financial education, track consumer complaints, request data and promote the availability of financial services to underserved consumers and communities. Although all institutions are subject to rules adopted by the CFPB and examination by the CFPB in conjunction with examinations by the institution’s primary federal regulator, the CFPB has primary examination and enforcement authority over institutions with assets of $10 billion or more. The FDIC has primary responsibility for examination of the Bank and enforcement with respect to various federal consumer protection laws so long as the Bank has total consolidated assets of less than $10 billion, and state authorities are responsible for monitoring our compliance with all state consumer laws. The CFPB also has the authority to require reports from institutions with less than $10 billion in assets, such as the Bank, to support the CFPB in implementing federal consumer protection laws, supporting examination activities, and assessing and detecting risks to consumers and financial markets.

The consumer protection provisions of the Dodd-Frank Act and the examination, supervision and enforcement of those laws and implementing regulations by the CFPB have created a more intense and complex environment for consumer finance regulation. The CFPB has significant authority to implement and enforce federal consumer finance laws, including the TILA, the ECOA and new requirements for financial services products provided for in the Dodd-Frank Act.

The CFPB has broad rule making authority for a wide range of consumer financial laws that apply to all banks including, among other things, the authority to prohibit “unfair, deceptive, or abusive” acts and practices. Abusive acts or practices are defined in the Dodd-Frank Act as those that (1) materially interfere with a consumer’s ability to understand a term or condition of a consumer financial product or service, or (2) take unreasonable advantage of a consumer’s (a) lack of financial savvy, (b) inability to protect herself or himself in the selection or use of consumer financial products or services, or (c) reasonable reliance on a covered entity to act in the consumer’s interests. The review of products and practices to prevent such acts and practices is a continuing focus of the CFPB, and of banking regulators more broadly. The ultimate impact of this heightened scrutiny is uncertain but it could result in changes to pricing, practices, products and procedures. It could also result in increased costs related to regulatory oversight, supervision and examination, additional remediation efforts and possible penalties. The Dodd-Frank Act does not prevent states from adopting stricter consumer protection standards. State regulation of financial products and potential enforcement actions could also adversely affect our business, financial condition or results of operations.

In October 2023, the Federal Reserve issued a proposal under which the maximum permissible interchange fee for an electronic debit transaction would be the sum of 14.4 cents per transaction and 4 basis points multiplied by the value of the transaction. Furthermore, the fraud-prevention adjustment would increase from a maximum of 1 cent to 1.3 cents. The proposal would adopt an approach for future adjustments to the interchange fee cap, which would occur every other year based on issuer cost data gathered by the Federal Reserve from large debit card issuers. As of December 31, 2025 the proposal had not yet been adopted.

Federal Home Loan Bank Membership

The Bank is a member of the FHLB, which serves as a central credit facility for its members. The FHLB is funded primarily from proceeds from the sale of obligations of the FHLB system. It makes loans to member banks in the form of FHLB advances. All advances from the FHLB are required to be fully collateralized as determined by the FHLB.

Ability-To-Pay Rules and Qualified Mortgages

As required by the Dodd-Frank Act, the CFPB issued a series of final rules in January 2013 amending Regulation Z, implementing TILA, which requires mortgage lenders to make a reasonable and good faith determination, based on verified and documented information, that a consumer applying for a residential mortgage loan has a reasonable ability to repay the loan according to its terms. These final rules prohibit creditors, such as the Bank, from extending residential mortgage loans without regard for the consumer’s ability to repay and add restrictions and requirements to residential mortgage origination and servicing practices. In addition, these rules restrict the imposition of prepayment penalties and restrict compensation practices relating to residential mortgage loan origination. Mortgage lenders are required to determine consumers’ ability to repay in one of two ways. The first alternative requires the mortgage lender to consider eight underwriting factors when making the credit decision. Alternatively, the mortgage lender can originate “qualified mortgages”, which are entitled to a presumption that the creditor making the loan satisfied the ability-to-repay requirements. In general, a qualified mortgage is a residential mortgage loan that does not have certain high risk features, such as negative amortization, interest-only payments, balloon payments, or a term exceeding 30 years. In addition, to be a qualified mortgage, the points and fees paid by a consumer cannot exceed 3% of the total loan amount, and the loan must meet certain underwriting requirements. For most loans, the borrower’s total debt-to-income ratio is no longer subject to a strict 43% cap: instead, a loan qualified as a General QM if its annual percentage rate does not exceed the average prime offer rate for a comparable transaction by more than 2.25 percentage points (with

12

higher thresholds for smaller loans). Lenders must still consider and verify income, assets, debt, and DTI as part of the underwriting process.

Commercial Real Estate Guidance

In December 2023, the FDIC released a statement entitled “Managing Commercial Real Estate Concentrations in a Challenging Economic Environment” (the “Updated CRE Guidance”). In the Updated CRE Guidance, the FDIC conveys several key risk management practices to consider in managing CRE loan concentrations in the current challenging economic environment. The advisory also continues to emphasize the importance of effectively managing liquidity and funding risks, which can compound lending risks, particularly for CRE concentrated institutions. This advisory does not create new risk management principles; however, it does update and build upon previously issued guidance. The federal banking regulators previously issued guidance in December 2006, entitled “Interagency Guidance on Concentrations in Commercial Real Estate Lending, Sound Risk Management Practices” (the “2006 CRE Guidance”) which stated that an institution is potentially exposed to significant commercial real estate concentration risk, and should employ enhanced risk management practices, where (1) total commercial real estate loans represent 300% or more of its total capital and (2) the outstanding balance of such institution’s commercial real estate loan portfolio has increased by 50% or more during the prior 36 months.

In the Updated CRE Guidance, the FDIC noted that Institutions with significant CRE concentrations are reminded that strong risk management, governance, capital, and appropriate ACL levels are needed to help mitigate risks. Institutions with overall credit risk management processes that reflect consideration of the principles of the 2006 CRE Guidance are better positioned to manage through adverse economic environments. As of December 31, 2025, the principles in the 2006 CRE Guidance remain relevant, particularly in challenging economic environments, and particularly for institutions engaged in significant CRE lending strategies to help them remain healthy and profitable while continuing to serve the credit needs of the community.

Leveraged Lending Guidance

The federal banking regulators jointly issued guidance on leveraged lending that describes regulatory expectations for the sound risk management of leveraged lending activities, including the importance for institutions to maintain, among other things, (i) a credit limit and concentration framework consistent with the institution’s risk appetite, (ii) underwriting standards that define acceptable leverage levels, (iii) strong pipeline management policies and procedures and (iv) guidelines for conducting periodic portfolio and pipeline stress tests.

Community Reinvestment Act of 1977

Under the CRA, the Bank has an obligation, consistent with safe and sound operations, to help meet the credit needs of the market areas where it operates, which includes providing credit to low and moderate-income individuals and communities. In connection with its examination of the Bank, the FDIC is required to assess our compliance with the CRA. Our bank’s failure to comply with the CRA could, among other things, result in the denial or delay in certain corporate applications filed by us, including applications for branch openings or relocations and applications to acquire, merge or consolidate with another banking institution or holding company.

In October 2023, the Federal Reserve, FDIC, and OCC issued a final rule modernizing CRA regulations. The new rule expands access to credit, investment, and basic banking services in low- and moderate-income communities, adapts to changes in the banking industry (including internet and mobile banking), provides greater clarity, consistency, and transparency in the application of the regulations, and tailors performance standards to account for differences in bank size, business model, and local conditions.

Our bank received a rating of “Satisfactory” in its most recently completed CRA examination in 2023 that was as of November 19, 2022.

Financial Privacy

The federal banking regulators have adopted rules limiting the ability of banks and other financial institutions to disclose non-public information about consumers to unaffiliated third parties. These limitations require disclosure of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to an unaffiliated third party. These regulations affect how consumer information is transmitted through diversified financial companies and conveyed to outside vendors.

In October 2024, the CFPB finalized its Personal Financial Data Rights Rule, which was intended to require banks and other providers of payment accounts or products to give consumers access to their financial data and, with the consumer’s express authorization, make that data available to third parties through secure, standardized interfaces. The final rule covered information such as transaction histories, account balances, account and routing numbers, terms and conditions, upcoming bill information, and certain account‑verification data, and was designed to enhance consumer control over financial data and increase competition in financial services. However, in 2025 a federal court put the rule on hold, and under new leadership the CFPB reopened the rulemaking process, issuing an Advance Notice of Proposed Rulemaking to reconsider key elements of the framework—including which third parties may access consumer data, fee structures for data access, and the scope of privacy and security requirements. As part of this process, the CFPB has indicated it expects to revise compliance timelines originally set under the 2024 final rule.

Other Legislative and Regulatory Changes

Various legislative and regulatory proposals are being considered by the executive branch of the federal government, Congress and various state governments, including Pennsylvania, that would result in substantial changes in banking, the regulation of banks, thrifts and other financial institutions, compensation, the regulation of financial markets and their participants, financial instruments and securities and the regulators and taxation of these entities.

Throughout 2025, Congress and the federal bank regulators expanded the scope of permissible digital asset activities for banks. The Government Enabling New Innovative Unstoppable Systems Act, or GENIUS Act, enacted in July 2025 as a significant piece of

13

legislation aimed at establishing a comprehensive regulatory framework for stablecoins and digital assets in the U.S. The GENIUS Act provides clarity on the treatment of digital currencies, including the framework for stablecoin issuances by bank and non-banking entities, custody, reserves and payments systems and adopts a supervisory framework for stablecoin issuers. Under the GENIUS Act, banks are allowed to engage in stablecoin issuances and hold related reserves, provided they comply with established AML, KYC and capital adequacy standards.

In addition, the FDIC and Federal Reserve issued revised guidance regarding their engagement in crypto-related activities. This guidance rescinds prior guidance which previously required banks to submit prior notifications to the FDIC before engaging in such activities. Under the new framework, banks may engage in permissible crypto-related services, including custody and stablecoin reserve management, without needing to receive prior FDIC approval. However, banks are still required to manage risks effectively, including market, liquidity, operational and cybersecurity risks, and to comply with all AML/CFT and consumer protection requirements.

While we are not yet involved in stablecoin issuance or similar digital asset services, we continue to monitor developments under the GENIUS Act and FDIC policy, particularly as they evolve in the areas of digital asset custody, payments systems and associated regulatory requirements. The FDIC’s recent approach signals that smaller banks have greater flexibility to explore these opportunities, provided they adhere to compliance standards designed to protect customers and ensure safety and soundness.

Anti-Money Laundering and the USA PATRIOT ACT

The USA PATRIOT Act of 2001, which was enacted in the wake of the September 11, 2001 attacks, includes provisions designed to combat international money laundering and advance the U.S. government’s war against terrorism. The USA PATRIOT Act and the regulations which implement it contain many obligations which must be satisfied by financial institutions, including the Bank. Those regulations impose obligations on financial institutions, such as the Bank, to maintain appropriate policies, procedures and controls to detect, prevent and report money laundering and terrorist financing and to verify the identity of their customers. The failure of a financial institution to maintain and implement adequate programs to combat money laundering and terrorist financing could have serious legal and reputational consequences for the financial institution.

Office of Foreign Assets Control Regulation

The U.S. Treasury Department’s OFAC administers and enforces economic and trade sanctions against targeted foreign countries and regimes, under authority of various laws, including designated foreign countries, nationals and others. OFAC publishes lists of specially designated targets and countries. We are responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious legal and reputational consequences and could result in civil money penalties imposed on the institution by OFAC. Failure to comply with these sanctions could also cause applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required.

Incentive Compensation

Our primary regulator, as part of the regular, risk-focused examination process, will review the incentive compensation arrangements of banking organizations, such as us, that are not “large, complex banking organizations.” These reviews will be tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies will be incorporated into the organization’s supervisory ratings, which can affect the organization’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk management control or governance processes, pose a risk to the organization’s safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies.

For regulated entities with at least $1 billion in total assets, federal banking agencies have re‑proposed, but not yet finalized, rules under Section 956 of the Dodd‑Frank Act that would establish general qualitative standards for incentive‑based compensation arrangements. Under the currently proposed framework, covered institutions would be required to: (i) prohibit incentive arrangements that encourage inappropriate risk‑taking by providing excessive compensation; (ii) prohibit incentive arrangements that could lead to material financial loss; (iii) ensure performance measures appropriately balance risk and reward; (iv) maintain robust board‑level oversight of incentive compensation programs; and (v) implement sound record‑keeping practices. These requirements reflect those contained in the May 2024 Notice of Proposed Rulemaking, which re‑issued the 2016 proposal; however, because the six required federal agencies have not jointly finalized the rule, these standards are not yet binding and remain subject to further revision.

Pursuant to rules adopted by the stock exchanges and approved by the SEC in January 2013 under the Dodd-Frank Act, public company compensation committee members must meet heightened independence requirements and consider the independence of compensation consultants, legal counsel and other advisors to the compensation committee. A compensation committee must have the authority to hire advisors and to have the public company fund reasonable compensation of such advisors.

In October 2022, the SEC adopted a final rule directing national securities exchanges and associations, including Nasdaq, to implement listing standards that require listed companies to adopt policies mandating the recovery or “clawback” of excess incentive-based compensation earned by a current or former executive officer during the three fiscal years preceding the date the listed company is required to prepare an accounting restatement, including to correct an error that would result in a material misstatement if the error were corrected in the current period or left uncorrected in the current period. The final rule requires Meridian to adopt a clawback policy within 60 days after such listing standard becomes effective, which Meridian did on November 21, 2023.

14

Future Legislation and Regulation

Congress may enact legislation from time to time that affects the regulation of the financial services industry, and state legislatures may enact legislation from time to time affecting the regulation of financial institutions chartered by or operating in those states. Federal and state regulatory agencies also periodically propose and adopt changes to their regulations or change the manner in which existing regulations are applied. The substance or impact of pending or future legislation or regulation, or the application thereof, cannot be predicted, although enactment of the proposed legislation could affect the regulatory structure under which we operate and may significantly increase our costs, impede the efficiency of our internal business processes, require us to increase our regulatory capital or modify our business strategy, or limit our ability to pursue business opportunities in an efficient manner. Our business, financial condition, results of operations or prospects may be adversely affected, perhaps materially, as a result.