NASDAQ: ZIONP

ZIONS BANCORPORATION, NATIONAL ASSOCIATION /UT/

CIK 0000109380 · National Commercial Banks

Zions Bancorporation, National Association (“Zions Bancorporation, N.A.,” “the Bank,” “we,” “our,” “us”) is a bank headquartered in Salt Lake City, Utah, with annual net revenue (net interest income and noninterest income) of $3.4 billion in 2025, and total assets of approximately $89 billion at… About this business →

8-K Filed Jun 2, 2026 · Period ending Jun 2, 2026

Summary not yet generated.

10-Q Filed May 7, 2026 · Period ending Mar 31, 2026

Summary not yet generated.

Partner

Trade ZIONP commission-free

Open an account, get a free stock.

Sign up

Investing involves risk. Free stock terms apply.

8-K Filed May 4, 2026 · Period ending May 4, 2026

Summary not yet generated.

8-K Filed May 4, 2026 · Period ending May 1, 2026

Summary not yet generated.

10-K Filed Feb 24, 2026 · Period ending Dec 31, 2025

Summary not yet generated.

10-Q Filed Nov 6, 2025 · Period ending Sep 30, 2025

Summary not yet generated.

10-K Filed Feb 25, 2025 · Period ending Dec 31, 2024

Summary not yet generated.

About ZIONS BANCORPORATION, NATIONAL ASSOCIATION /UT/

Source: Item 1 (Business) from the 10-K filed February 24, 2026. Description as filed by the company with the SEC.

ITEM 1. BUSINESS

DESCRIPTION OF BUSINESS

Zions Bancorporation, National Association (“Zions Bancorporation, N.A.,” “the Bank,” “we,” “our,” “us”) is a bank headquartered in Salt Lake City, Utah, with annual net revenue (net interest income and noninterest income) of $3.4 billion in 2025, and total assets of approximately $89 billion at December 31, 2025. We provide a wide range of banking products and related services, primarily in 11 Western states: Arizona, California, Colorado, Idaho, Nevada, New Mexico, Oregon, Texas, Utah, Washington, and Wyoming. At December 31, 2025, we had more than one million customers, served through 407 branches and various online, mobile, and digital channels, and we had 9,195 full-time equivalent employees.

Our operations are organized principally through seven separately managed, geographically defined bank divisions, which we refer to as “affiliates,” or “affiliate banks,” each operating under its own local brand and management team: Zions Bank; California Bank & Trust (“CB&T”); Amegy Bank (“Amegy”); National Bank of Arizona (“NBAZ”); Nevada State Bank (“NSB”); Vectra Bank Colorado (“Vectra”); and The Commerce Bank of

5

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

Washington (“TCBW”), which also operates as The Commerce Bank of Oregon in Oregon. These affiliate banks constitute our primary operating segments.

We emphasize local authority and accountability, including locally informed pricing and product customization, to maximize customer satisfaction, strengthen community relationships, and improve profitability and shareholder returns.

Read full description ↓

The affiliate banks are supported by an enterprise-level segment—referred to as the “Other” segment— which provides governance and risk oversight, capital allocation, and strategic objectives, and includes centralized technology infrastructure, back-office operations, and certain business lines that are not managed through the affiliate structure. For more information about our segments, see “Operating Segment Results” in Management’s Discussion and Analysis (“MD&A”) on page 45 and Note 22 of the Notes to Consolidated Financial Statements.

PRODUCTS AND SERVICES

We strive to cultivate enduring relationships with our customers by offering competitive products and delivering high-quality service. Establishing and maintaining these relationships is fundamental to understanding and fulfilling our customers’ evolving needs. Our portfolio of products and services—whether provided through digital platforms or traditional channels—include the following:

Commercial and Small Business Banking

We support a broad range of commercial customers, primarily small- and medium-sized businesses. Our suite of products and services includes:

•Commercial, industrial, and owner-occupied lending and leasing, including SBA 7(a) and 504 lending programs

•Municipal and public finance services

•Depository account and cash management services

•Commercial and small business credit cards, along with merchant processing services

•Corporate trust services

•Correspondent banking and international lending services

Capital Markets and Investment Banking

We offer customized financing solutions to help customers raise capital efficiently, execute strategic transactions, and manage exposure to financial markets. Our capital markets offerings include:

•Loan syndication and private credit placement services

•Interest rate and commodities risk management and foreign exchange services

•Fixed income and equity securities underwriting

•Mergers and acquisitions advisory services

•Strategic advisory and capital raising services

•Commercial mortgage-backed securities conduit lending

•Power and project finance solutions

Commercial Real Estate (“CRE”) Lending

We offer financing solutions secured by commercial real estate, serving a broad spectrum of borrowers. Our products include:

•Term and construction/land development financing, including, but not limited to, the following collateral types:

◦Multifamily, industrial, retail, and office properties

◦Residential single-family, community development, and affordable housing projects

6

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

Retail Banking

We provide a wide range of quality retail banking products and services, including:

•Residential mortgage lending

•Home equity lines of credit

•Personal lines of credit and installment loans

•Depository account services

•Consumer credit cards

•Personal trust services

Wealth Management

Our wealth management solutions are designed to provide planning-driven strategies, personalized advisory services, and sophisticated asset management capabilities. Services primarily include:

•Investment management

•Fiduciary and estate planning

•Advanced business succession and estate planning solutions

COMPETITION

We operate in a highly competitive environment. Our primary competitors for loans, deposits, and other banking services generally include commercial banks, credit unions, fintechs, and private credit or debt funds. Many of these financial institutions lack a physical presence within our geographic footprint, but actively pursue business through digital channels and other remote means. Credit unions, however, are particularly prominent, active, and competitive within several of our footprint states, including Utah and Idaho, which heightens local competition for customers and deposits.

Additional competition arises from finance companies, mutual fund providers, insurance companies, brokerage firms, securities dealers, investment banks, nondepository financial institutions (“NDFIs”), and other nontraditional financial institutions. Many of these competitors operate under fewer regulatory constraints and possess greater capabilities to develop, deploy, and deliver innovative financial products, services, and technologies. They may also benefit from lower operating costs, tax advantages, and reduced regulatory burdens.

The financial services industry is experiencing rapid technological transformation, marked by the continual introduction of new technology-driven products and services. These innovations include advanced methods for customers to make payments and manage accounts, such as mobile payment solutions, digital wallets, and digital assets.

Our competitive strengths lie in the quality of service we provide, our deep understanding of the local communities we serve, the accessibility of our branch and office network, the breadth of our products and services offerings, and the strength of our customer relationships. We strive to compete effectively in these areas to remain successful.

SUPERVISION AND REGULATION

The banking and financial services industry in which we operate is highly regulated. These regulations are designed to promote the safety, soundness, and stability of financial institutions, while safeguarding the interests of customers, depositors, communities, the Deposit Insurance Fund, and the broader financial system. These regulations are generally not intended to protect shareholders, investors, or non-depositor creditors.

Federal banking laws and regulations grant regulatory agencies broad authority to supervise and influence many aspects of the financial services industry. Furthermore, changes to applicable laws or regulations—along with the manner in which they are interpreted, implemented, or enforced—are inherently unpredictable and could materially impact our operations and financial performance.

7

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

General

We are governed by the National Bank Act and other statutes applicable to national banks, and we are subject to the regulatory oversight of the Office of the Comptroller of the Currency (“OCC”), the Consumer Financial Protection Bureau (“CFPB”), and the Federal Deposit Insurance Corporation (“FDIC”). Additionally, the Bank and certain of our subsidiaries are regulated by various other federal and state agencies, each of which may exercise significant supervisory and examination authority over our operations. For example, the Bank's investment advisory subsidiary, our broker-dealer operations, and certain capital markets activities are subject to regulation by the SEC. Our brokerage subsidiary is further subject to regulation by the Financial Industry Regulatory Authority, and state securities regulators.

The National Bank Act

Our corporate governance is primarily subject to the National Bank Act and related regulations administered by the OCC. As a national bank, we are not directly governed by the Securities Act of 1933 (“Securities Act”) with respect to securities matters; instead, we comply with OCC regulations that establish requirements for securities offerings and related reporting obligations.

Our common stock and certain other securities are registered under the Securities Exchange Act of 1934 (“Exchange Act”), which authorizes the OCC to administer and enforce specific provisions of the Exchange Act applicable to national banks. Notwithstanding this regulatory framework, we voluntarily submit filings required under the Exchange Act to the SEC. The statutory and regulatory frameworks applicable to us as a national bank are comparatively less developed than the corporate and securities law frameworks that govern many other publicly traded companies.

Capital Standards – Basel III Framework

We are subject to regulatory capital standards, including risk-based capital requirements established by the OCC under the Basel III framework. At December 31, 2025, we exceeded all capital adequacy requirements under the Basel III capital framework, which includes specific risk-based capital ratio requirements prescribed by the OCC. The Basel III capital rules define the components of regulatory capital and incorporate factors such as risk weightings that influence capital ratio calculations for banking institutions.

Under the Basel III capital rules, we are required to maintain minimum capital ratios, along with a 2.5% capital conservation buffer intended to absorb losses during periods of economic stress. This buffer is composed entirely of common equity Tier 1 (“CET1”). Financial institutions with CET1 ratios above the minimum but below the buffer threshold are subject to limitations on dividend distributions, equity repurchases, and discretionary compensation. The extent of these restrictions is determined by the size of the shortfall and the institution’s “eligible retained income,” defined as the greater of (1) net income over the preceding four quarters, adjusted for distributions and related tax effects not reflected in net income, or (2) the average net income over the same four-quarter period.

For more information about our capital ratios, see “Capital Management” in MD&A on page 80.

Prompt Corrective Action

The Federal Deposit Insurance Corporation Improvement Act (“FDICIA”) requires that each federal banking agency take prompt corrective action to address deficiencies in insured depository institutions, particularly those that fall below established minimum capital ratio thresholds. Under FDICIA, the FDIC has implemented regulations that classify insured depository institutions into five capital categories based on their capital ratios: (1) well capitalized, (2) adequately capitalized, (3) undercapitalized, (4) significantly undercapitalized, and (5) critically undercapitalized.

Under the prompt corrective action provisions of FDICIA, as amended by the Basel III capital framework, an insured depository institution is generally considered well capitalized if it maintains a:

•CET1 capital ratio of at least 6.5%

•Tier 1 risk-based capital ratio of at least 8%

•Total risk-based capital ratio of at least 10%

•Tier 1 leverage ratio of at least 5%.

8

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

Conversely, an insured depository institution is generally deemed undercapitalized if it has a:

•CET1 capital ratio below 4.5%

•Tier 1 risk-based capital ratio below 6%

•Total risk-based capital ratio below 8%

•Tier 1 leverage ratio below 4%.

Institutions classified as well capitalized, adequately capitalized, or undercapitalized, may also be reclassified to a lower capital category if the appropriate federal banking regulator determines—after providing notice and an opportunity for a hearing—that the institution is operating in an unsafe or unsound condition, or engaging in unsafe or unsound practices.

Each successive lower capital classification imposes increasingly more stringent restrictions and prohibitions. These may include limitations on asset growth, interest rates paid on deposits, the acceptance of brokered deposits, and dividend payments. Institutions that fall into any undercapitalized category are required to submit a capital restoration plan to their federal banking regulator.

At December 31, 2025, all of our capital amounts and ratios exceeded the thresholds required to be considered “well-capitalized” under the prompt corrective action framework. The following schedule presents minimum capital ratio requirements, the capital conservation buffer, our capital ratios at December 31, 2025, and the thresholds required to be considered well capitalized:

MINIMUM CAPITAL RATIO AND CAPITAL CONSERVATION BUFFER REQUIREMENTS

December 31, 2025

Minimum capital requirementCapital conservation bufferMinimum capital ratio requirement with capital conservation bufferCurrent capital

ratio
Minimum requirement to be “well capitalized”

CET1 to risk-weighted assets4.5%2.5%7.0%11.5%6.5%

Tier 1 risk-based capital
(i.e., CET1 plus additional Tier 1 capital) to risk-weighted assets
6.0%2.5%8.5%11.6%8.0%

Total risk-based capital
(i.e., Tier 1 capital plus Tier 2 capital) to risk-weighted assets
8.0%2.5%10.5%13.8%10.0%

Tier 1 leverage ratio
(i.e., Tier 1 risk-based capital) to average consolidated assets
4.0%N/A4.0%9.0%5.0%

Regulatory Developments

Basel III Endgame

In July 2023, federal banking regulators issued a proposal to implement the Basel Committee on Banking Supervision’s finalized post-crisis regulatory capital reforms. Commonly referred to as the “Basel III Endgame,” this proposal would significantly revise capital requirements for large banking organizations, defined as those with total assets of $100 billion or more. At December 31, 2025, we had $89.0 billion in total assets and do not yet meet the definition of a large banking organization. The Federal Reserve has indicated its intention to collaborate with other federal banking regulators on a revised proposal in 2026. The timing, substance, and potential impact of any re-proposal remain uncertain.

Long-term Debt

In August 2023, federal banking regulators issued a proposal to expand the long-term debt requirement to include all banks with total assets of $100 billion or more. Under the proposed rule, these banks would be required to maintain an outstanding amount of eligible long-term debt equal to the greatest of: (1) 6% of total risk-weighted assets, (2) 2.5% of total leverage exposure, or (3) 3.5% of average total assets. If our total assets were to reach

9

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

$100 billion or more, we would have a three-year implementation period to issue the necessary debt and comply with other requirements. The timing and structure of any final rule implementing these requirements remain uncertain.

Heightened Standards

In December 2025, the OCC proposed raising the asset threshold at which its “Heightened Standards” for safety and soundness apply—from $50 billion to $700 billion in total consolidated assets. If adopted as proposed, the Bank would no longer be subject to the Heightened Standards, including the prescriptive requirements governing covered banks’ risk governance frameworks and related activities.

Capital Planning and Stress Testing

We utilize stress testing as an important tool for informing decisions regarding the appropriate level of capital to maintain under adverse economic conditions. These tests are based on hypothetical scenarios that reflect a severity comparable to those published by the Federal Reserve Board (“FRB”). Our most recent internal stress test incorporated assumptions including:

•Rising unemployment rates

•Declining CRE values

•Higher losses on consumer loans driven by falling residential property prices

•Increased credit losses on commercial loans due to deteriorating asset values and reduced economic activity

•Additional disruptions across economic, financial, and social domains.

The results of this stress test demonstrated that, under these hypothetical conditions, we would continue to maintain capital ratios above the regulatory minimum requirements and the capital conservation buffer throughout a nine-quarter stress horizon.

Liquidity

We utilize internal liquidity stress testing as a key mechanism for establishing and managing liquidity guidelines. These guidelines address the composition of investment securities and other liquid assets, the availability of contingency funding, the concentration of funding sources, and the maturity structure of liabilities.

At December 31, 2025, our available liquidity sources exceeded the level of uninsured deposits, without requiring the sale of any investment securities. We continue to actively manage our deposit portfolio and associated funding costs in response to changes in the interest rate environment. For more information about our liquidity profile, see “Liquidity Risk Management” in MD&A on page 75.

Financial Privacy and Cybersecurity

Federal legislation and regulatory frameworks have established comprehensive requirements governing the use and protection of consumer information by banks and other financial institutions. The Gramm-Leach-Bliley Act and related regulations, among other provisions, restrict the disclosure of nonpublic personal information to unaffiliated third parties, require financial institutions to provide clear privacy notices to consumers and, in certain cases, offer consumers certain rights to opt out of specific disclosures. Additionally, these regulations require the implementation of a comprehensive cybersecurity program incorporating administrative, technical, and physical safeguards to ensure the security and confidentiality of customer records and information.

We are also subject to United States (“U.S.”) federal regulations issued by federal banking regulators that require, among other things, banking organizations to notify their primary regulator as soon as possible, and no later than 36 hours, after identifying a “computer-security incident” that has materially disrupted or degraded—or is reasonably likely to materially disrupt or degrade—operations in a manner that could jeopardize the organization's viability, prevent customers from accessing deposit and other accounts, result in a material loss of revenue, profit or franchise value, or pose a threat to the stability of the U.S. financial sector. In addition, federal banking regulators, the SEC,

10

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

and related self-regulatory organizations regularly issue guidance intended to strengthen cybersecurity risk management across financial institutions.

Under the Fair Credit Reporting Act, consumers have the right to restrict the sharing of certain information—such as credit report details and financial data collected through applications—among affiliated companies when such information is used to determine eligibility for financial products or services. Additionally, U.S. federal and state laws and regulations allow consumers to direct financial institutions not to share information regarding their transactions and experiences with affiliates or non-affiliates for marketing or non-marketing purposes. We, along with our nonbanking subsidiaries, are also subject to rules and regulations issued by the Federal Trade Commission that prohibit unfair or deceptive acts and practices, including those related to privacy and cybersecurity.

In recent years, both federal and state regulators have increased efforts to implement and enforce privacy and cybersecurity standards and regulations. For example, the Cyber Incident Reporting for Critical Infrastructure Act (“CIRCIA”), will—once rulemaking is finalized—require certain companies to report significant cyber incidents to the Cybersecurity and Infrastructure Agency (“CISA”) within 72 hours of reasonably determining that an incident has occurred, and within 24 hours of making any ransom payment resulting from a ransomware attack. On April 4, 2024, the CISA proposed a rule under the CIRCIA to clarify the scope of reportable cyber incidents and to define covered entities, expressly including financial services companies that are already required to report cyber incidents to their primary federal regulators. Although CIRCIA initially required CISA to finalize its regulations by October 4, 2025, the deadline has been extended to May 2026.

Concurrently, a growing number of states—including those in which we operate—have enacted or are considering legislation, such as the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, which enhances consumer privacy rights, mandates data breach notifications, and requires certain financial institutions to establish robust and prescriptive cybersecurity programs. In addition, laws in all 50 U.S. states require businesses to notify consumers under certain circumstances when personal information has been compromised due to a data breach. Moreover, the U.S. Congress has considered—and is likely to continue considering—additional privacy and cybersecurity legislation that could apply to us if enacted.

The regulatory landscape surrounding privacy and cybersecurity continues to evolve rapidly and remains a key area of focus for lawmakers and financial banking regulators at both the state and federal levels.

Open Banking

In October 2024, the CFPB issued a final rule under Section 1033 of the Dodd-Frank Act, establishing new data access requirements applicable to various entities within the financial services ecosystem—including financial institutions, data aggregators, and third-party providers authorized by consumers to access financial information on their behalf. Among other provisions, the rule requires certain entities, including the Bank, to provide consumers, upon request, with access to information in their possession or control related to consumer financial products or services obtained from the Bank. The current compliance deadline for a bank of our size is April 1, 2027. We are taking steps to achieve compliance by the deadline; however, the rule is currently subject to litigation, which has been stayed while the CFPB considers revisions to or replacement of the final rule.

Resolution and Recovery Planning

The FDIC requires banks with total assets of $100 billion or more that are not affiliates of U.S. global systemically important banking organizations to submit comprehensive resolution plans, including an identified resolution strategy, every three years. Banks with total assets between $50 billion and $100 billion, including us, are required to provide more limited information every three years. Additionally, the FDIC requires that these banks submit interim supplemental information regarding resolution planning during off-cycle years. We completed and submitted our initial informational filing on October 1, 2025.

11

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

Other Regulations and Proposals

We are subject to a wide range of requirements and restrictions under both federal and state laws. These regulatory frameworks and legislative proposals encompass, but are not limited to, the following areas:

•Limitations on Dividends Payable to Shareholders — Our ability to declare and pay dividends on both common and preferred stock is subject to regulatory restrictions. For further details, see Note 15 of the Notes to Consolidated Financial Statements.

•Safety and Soundness Standards — Prescribed in FDICIA, these standards relate to internal controls, information systems, internal audit functions, loan documentation, credit underwriting practices, interest rate risk management, asset growth, executive compensation, and other operational and management standards deemed appropriate by federal banking regulators.

•Safety and Soundness Enforcement — In October 2025, the FDIC and OCC issued a proposed rule that would define the term “unsafe or unsound practice” for purposes of their enforcement authority under the Federal Deposit Insurance Act. The proposed definition focuses on whether a practice is likely to materially harm—or has already materially harmed—the financial condition of an institution.

•Approval of Acquisitions and Restrictions on Other Activities — The National Bank Act requires regulatory and shareholder approval for mergers involving national and state banks. The Act prohibits direct mergers between national banks and unaffiliated nonbank entities. Additional laws and regulations governing national banks impose similar requirements on acquisitions and permissible activities. See further discussion in “Risk Factors.”

•Limits on Interchange Fees — Under the Dodd-Frank Act, interchange fees for electronic debit transactions must be reasonable and proportionate to transaction processing costs. In October 2023, the Federal Reserve proposed amendments to Regulation II that would reduce the maximum allowable debit interchange fee by nearly 30% and implement a biennial review of the fee cap without public comment. This proposal is currently subject to litigation, which may impact its implementation. If enacted as proposed, the revised regulation could reduce our annual fee income by approximately $10 million or more.

•Limitations on Loans — Regulations impose restrictions on the aggregate dollar amount of loans that may be extended to a single borrower and its affiliates.

•Limitations on Transactions with Affiliates — Federal laws limit the nature and extent of transactions between banks and their affiliates to mitigate conflicts of interest and ensure financial stability.

•Limitations on Investments and Securities Activities — Restrictions apply to the types and amounts of permissible investments; banks may also face limitations on underwriting certain securities, including common equity.

•Branch Operations — Opening and closing branch locations is subject to regulatory approval and procedural requirements.

•Consumer Protection Laws — A number of federal and state consumer protection laws—including fair lending and truth in lending laws—provide equitable access to credit and safeguard consumers in financial transactions. As a bank with total assets exceeding $10 billion, we are subject to examination and primary enforcement authority with respect to consumer financial laws by the CFPB, which holds broad rulemaking, supervisory, and enforcement authority. These regulations often impact revenue and shareholder returns.

•Community Reinvestment Act (“CRA”) — The CRA requires banks to help meet the credit needs of the communities they serve, especially low- and moderate-income individuals. Noncompliance may result in supervisory consequences, including the denial of applications to establish or relocate branches, add subsidiaries or affiliates, or pursue mergers and acquisitions. In October 2023, federal banking regulators implemented substantial revisions to the CRA evaluation framework, making compliance more challenging. However, in July 2025, the regulators issued a joint notice of proposed rulemaking to rescind the October 2023 final rule and revert to the prior CRA framework. The earlier framework currently remains in effect due to a preliminary injunction that stayed implementation of the October 2023 rule.

•Compensation Requirements — Regulations govern the structure, timing, and documentation of incentive compensation for executives and other key personnel. These include requirements related to deferral, risk-balancing, governance, and clawback provisions—such as those under the SEC’s pay versus performance

12

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

disclosure rules. Deficiencies in compensation practices may influence supervisory ratings and affect our ability to pursue acquisitions or other strategic activities and may result in regulatory enforcement actions.

•Anti-Money Laundering (“AML”) Regulations — We are subject to the Bank Secrecy Act (“BSA”), Title III of the Uniting and Strengthening of America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (“USA Patriot Act”), and other federal laws aimed at preventing money laundering, terrorist financing, and other illicit activities. These laws require financial institutions to maintain robust policies, procedures, and controls to detect and report suspicious activity. Regulatory agencies possess broad enforcement authority, including the ability to impose significant civil and criminal penalties, restitution orders, and cease-and-desist directives under AML, BSA, and Office of Foreign Assets Control regulations.

•Tax laws — We are subject to U.S. federal, state, and applicable local tax laws governing our operations.

We are subject to the Sarbanes-Oxley Act of 2002, certain provisions of the Dodd-Frank Act, and other applicable federal and state laws and regulations. These frameworks govern critical aspects of corporate operations, including corporate governance, auditing and accounting practices, internal controls over financial reporting, and the timely and comprehensive disclosure of material corporate information.

We actively monitor emerging developments in sustainability standards, including federal and state regulations, as well as evolving expectations from our stakeholders. We strive to enhance our operations through the integration of sustainable practices that we believe deliver long-term value for our investors, customers, employees, and the communities we serve. Examples of these initiatives include:

•Development of a Leadership in Energy and Environmental Design (“LEED”) Platinum-certified technology campus and other LEED-certified facilities

•Implementation of water conservation systems

•Adoption of remote deposit capture and electronic forms and signatures

•Financing renewable energy and energy efficiency projects

•Subsidizing employee use of public transportation

Compliance with laws and regulations such as California's Climate Corporate Data Accountability Act (SB 253)—which requires public reporting of direct and indirect greenhouse gas emissions—is expected to continue increasing operational costs and may present challenges due to potential conflicts with other state and federal requirements or restrictions on business activities in certain jurisdictions.

Corporate Governance

Our Board of Directors (“Board”) provides oversight of management’s implementation of a comprehensive corporate governance and risk management framework. This framework is supported by a robust set of policies, guidelines, and committee charters designed to promote ethical conduct, accountability, and effective oversight. Key components include:

•Corporate Governance Guidelines

•Code of Business Conduct and Ethics for Employees

•Code of Ethics for Directors

•Risk Management Framework

•Related Party Transactions Policy

•Incentive Compensation Recoupment and Clawback Policies

•Stock Ownership and Retention Guidelines

•Insider Trading Policy

•Charters for the Audit, Risk Oversight, Compensation, and Nominating and Corporate Governance Committees

Additional information regarding our corporate governance practices is available on our website at www.zionsbancorporation.com. The website is not incorporated by reference into this Form 10-K.

13

Table of Contents

ZIONS BANCORPORATION, NATIONAL ASSOCIATION AND SUBSIDIARIES

HUMAN CAPITAL MANAGEMENT

We are committed to providing our employees with opportunities for growth, development, and leadership, while recognizing and rewarding their contributions to our collective success. Our ongoing efforts to strengthen our brand presence in the markets we serve are designed to attract and retain a high-performing workforce, which is an essential driver of our long-term success and value creation for our investors. The following strategic objectives and initiatives are integral to our human capital management efforts:

Cultivating an environment where everyone is respected and valued

We are committed to fostering a workplace where every individual is respected, valued, and empowered to succeed. Our organization prioritizes employee growth, development, and leadership potential, providing opportunities that are based on merit, qualifications, and abilities. We strive to maintain a workplace where everyone is treated with fairness and mutual respect, reinforcing our belief that every individual matters.

Attracting, developing, and retaining talent for long-term success

We are focused on attracting, developing, and retaining highly qualified individuals who reflect the diverse markets we serve. To achieve this, we prioritize three areas: (1) recruiting top talent, (2) fostering career growth and professional development, and (3) proactively building a pipeline for future leadership opportunities. As part of this strategy, we continuously evaluate emerging skill requirements to help keep our workforce equipped to meet evolving demands.

Recognizing the competitive nature of today's labor market, we actively monitor key metrics related to recruitment and retention. These insights inform our decisions on compensation and work arrangements, helping us remain responsive to the workforce environment and well-positioned for long-term success.

Aligned with our strategic objectives, we invest in employee training and development, offering access to a comprehensive suite of tools and resources designed to enhance capabilities. Our enterprise-wide learning platform offers more than 20,000 programs and resources—including digital courses and structured learning paths—enabling employees to tailor development plans to their individual goals. Our talent development framework emphasizes a balanced approach that integrates education, hands-on experience, and exposure to a broad range of job functions.

Recognizing, engaging, and rewarding our employees

Our comprehensive rewards and recognition programs are designed to acknowledge exceptional performance, strengthen employee retention, and enhance the overall employee experience through meaningful recognition and opportunities for advancement. We provide performance-based incentives to individuals who demonstrate accountability and contribute to the achievement of business objectives while maintaining a strong risk management framework.