Bridgewater Bancshares (BWB) Risk Analysis

Our business is subject to increased litigation and regulatory risks as a result of a number of factors, including the highly regulated nature of the financial services industry. In the normal course of business, from time to time, we have in the past and may in the future be named as a defendant in various legal actions, including arbitrations, class actions and other litigation, arising in connection with our current or prior business activities. Legal actions could include claims for substantial compensatory or punitive damages or claims for indeterminate amounts of damages. We may also, from time to time, be the subject of subpoenas, requests for information, reviews, investigations and proceedings (both formal and informal) by governmental agencies regarding our current or prior business activities. Any such legal or regulatory actions may subject us to substantial compensatory or punitive damages, significant fines, penalties, obligations to change our business practices or other requirements resulting in increased expenses, diminished income and damage to our reputation. Our involvement in any such matters, whether tangential or otherwise and even if the matters are ultimately determined in our favor, could also cause significant harm to our reputation and divert management attention from the operation of our business. Further, any settlement, consent order or adverse judgment in connection with any formal or informal proceeding or investigation by government agencies may result in litigation, investigations or proceedings as other litigants and government agencies begin independent reviews of the same activities. As a result, the outcome of legal and regulatory actions could have a material adverse effect on our business, reputation, financial condition, results of operations and growth prospects.

We operate in an environment that imposes income taxes on our operations at both the federal and state levels to varying degrees. We engage in certain strategies to minimize the impact of these taxes. Consequently, any change in tax laws or regulations, or new interpretation of an existing law or regulation, could significantly alter the effectiveness of these strategies. The net deferred tax asset reported on our balance sheet generally represents the tax benefit of future deductions from taxable income for items that have already been recognized for financial reporting purposes. The bulk of the deferred tax asset consists of deferred loan loss deductions. The net deferred tax asset is measured by applying currently-enacted income tax rates to the accounting period during which the tax benefit is expected to be realized. As of December 31, 2025, our net deferred tax asset was $18.3 million. Bridgewater Investment Management, Inc., a Minnesota corporation and a subsidiary of the Bank, holds certain municipal securities and engages in municipal lending activities. Based on current tax regulations and guidance, we believe that municipal securities and loans held by a non-bank subsidiary of a financial institution are eligible to receive favorable federal income tax treatment. There is a risk that the IRS may investigate these types of arrangements and issue new guidance eliminating the tax benefit to such a structure.

We are subject to various privacy, information security and data protection laws, including requirements concerning security breach notification, and we could be negatively affected by these laws. For example, our business is subject to the Gramm-Leach-Bliley Act which, among other things (i) imposes certain limitations on our ability to share nonpublic personal information about our clients with nonaffiliated third parties, (ii) requires that we provide certain disclosures to clients about our information collection, sharing and security practices and afford clients the right to "opt out" of any information sharing by us with nonaffiliated third parties (with certain exceptions) and (iii) requires that we develop, implement and maintain a written comprehensive information security program containing appropriate safeguards based on our size and complexity, the nature and scope of our activities and the sensitivity of client information we process, as well as plans for responding to data security breaches. Various state and federal banking regulators and states have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in certain circumstances in the event of a security breach. Moreover, legislators and regulators in the United States are increasingly adopting or revising privacy, information security and data protection laws, including with respect to the use of artificial intelligence by financial institutions and their service providers, that potentially could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of consumer or employee information and some of our current or planned business activities. This could also increase our costs of compliance and business operations and could reduce income from certain business initiatives. This includes increased privacy-related enforcement activity at the federal level, by the Federal Trade Commission and the CFPB, as well as at the state level, such as with regard to mobile applications. Compliance with current or future privacy, data protection and information security laws (including those regarding security breach notification) affecting client or employee data to which we are subject could result in higher compliance and technology costs and could restrict our ability to provide certain products and services, which could have a material adverse effect on our business, financial condition, results of operations and growth prospects. Our failure to comply with privacy, data protection and information security laws could result in potentially significant regulatory or governmental investigations or actions, litigation, fines, sanctions and damage to our reputation, which could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

From time to time, we may implement new lines of business or offer new products and product enhancements as well as new services within our existing lines of business. There are substantial risks and uncertainties associated with these efforts, particularly in instances in which the markets are not fully developed. In implementing, developing or marketing new lines of business, products, product enhancements or services, we may invest significant time and resources, although we may not assign the appropriate level of resources or expertise necessary to make these new lines of business, products, product enhancements or services successful or to realize their expected benefits. Further, initial timetables for the introduction and development of new lines of business, products, product enhancements or services may not be achieved, and price and profitability targets may not prove feasible. External factors, such as compliance with regulations, competitive alternatives and shifting market preferences, may also affect the ultimate implementation of a new line of business or offerings of new products, product enhancements or services. Furthermore, any new line of business, product, product enhancement or service or system conversion could have a significant impact on the effectiveness of our system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business or offerings of new products, product enhancements or services could have a material adverse effect on our business, financial condition, results of operations, growth prospects and reputation.

As a bank, we are susceptible to fraudulent activity, information security breaches and cybersecurity-related incidents that may be committed against us, third parties and their subservicers, or our clients, which may result in financial losses or increased costs to us, our third party partners or our clients, disclosure or misuse of our information or our client information, misappropriation of assets, privacy breaches against our clients, litigation or damage to our reputation. Such fraudulent activity may take many forms, including check fraud, electronic fraud, wire fraud, phishing, social engineering and other dishonest acts. Information security breaches and cybersecurity-related incidents may include fraudulent or unauthorized access to systems used by us or our clients, denial or degradation of service attacks and malware, ransomware, or other cyber-attacks. In recent periods, there continues to be a rise in electronic fraudulent activity, security breaches and cyber-attacks within the financial services industry, especially in the commercial banking sector due to cyber criminals targeting commercial bank accounts and as a result of increasingly sophisticated methods of conducting cyber attacks, including those employing artificial intelligence or resulting from insider fraud. Moreover, several large corporations, including financial institutions, third party partners specializing in providing services to financial institutions, and retail companies, have suffered major data breaches, in some cases exposing not only confidential and proprietary corporate information, but also sensitive financial and other personal information of their customers and employees and subjecting them to potential fraudulent activity. Some of our clients may have been affected by these breaches, which could increase their risks of identity theft and other fraudulent activity that could involve their accounts with us. Information pertaining to us and our clients is maintained, and transactions are executed, on networks and systems maintained by us and certain third party partners, such as our online banking, mobile banking or accounting systems. The secure maintenance and transmission of confidential information, as well as execution of transactions over these systems, are essential to protect us and our clients against fraud and security breaches and to maintain the confidence of our clients. Breaches of information security also may occur through intentional or unintentional acts by those having access to our systems or the confidential information of our clients, including employees. In addition, increases in criminal activity levels and sophistication, advances in computer capabilities, new discoveries, vulnerabilities in third party technologies (including browsers and operating systems) or other developments could result in a compromise or breach of the technology, processes and controls that we use to prevent fraudulent transactions and to protect data about us, our clients and underlying transactions, as well as the technology used by our clients to access our systems. Our third party partners' inability to anticipate, or failure to adequately mitigate, breaches of security could result in a number of negative events, including losses to us or our clients, loss of business or clients, damage to our reputation, the incurrence of additional expenses, disruption to our business, additional regulatory scrutiny or penalties or our exposure to civil litigation and possible financial liability, any of which could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

Severe weather, natural disasters, effects of climate change, widespread disease or pandemics, acts of war or terrorism, or other adverse external events could have a significant impact on our ability to conduct business. In addition, such events could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue or cause us to incur additional expenses. The occurrence of any of these events in the future could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

Liquidity is essential to our business. Liquidity risk is the risk that we will be unable to meet our obligations as they come due because of an inability to liquidate assets or obtain adequate funding, or the potential that we cannot easily unwind or offset specific exposures without significantly adjusting market prices because of inadequate market depth or market disruptions. An inability to raise funds through deposits, borrowings, the sale of loans or investment securities and from other sources could have a substantial negative effect on our liquidity. Our most important source of funds consists of our client deposits, which can decrease for a variety of reasons, including when clients perceive alternative investments, such as bonds, treasuries or stocks, as providing a better risk/return tradeoff. If clients move money out of bank deposits and into other investments, we could lose a relatively low cost source of funds, which would require us to seek other funding alternatives, including increasing our dependence on wholesale funding sources, in order to continue to grow, thereby potentially increasing our funding costs and reducing our net interest income and net income. Additionally, uninsured deposits have historically been viewed by the FDIC as less stable than insured deposits. According to statements made by the FDIC staff and the leadership of the federal banking agencies, clients with larger uninsured deposit account balances often are small- to mid-sized businesses that rely upon deposit funds for payment of operational expenses and, as a result, are more likely to closely monitor the financial condition and performance of their depository institutions. As a result, in the event of financial distress, uninsured depositors historically have been more likely to withdraw their deposits. If a significant portion of our deposits were to be withdrawn within a short period of time such that additional sources of funding would be required to meet withdrawal demands, the Company may be unable to obtain funding at favorable terms, which may have an adverse effect on our net interest margin. Additionally, we access collateralized public funds, which are bank deposits of state and local municipalities. These deposits are required to be secured by certain investment grade securities or other sources permitted by law to ensure repayment. If we are unable to pledge sufficient qualifying collateral to secure public funding, we may lose access to this source of liquidity that we have historically utilized. In addition, the availability of and fluctuations in these funds depends on the individual municipality's fiscal policies and cash flow needs. Other primary sources of funds consist of cash from operations, investment security maturities and sales and proceeds from the issuance and sale of our equity and debt securities to investors. Additional liquidity is provided by brokered deposits and the ability to borrow from the Federal Reserve and the FHLB. We may also borrow from third party lenders from time to time. Our access to funding sources in amounts adequate to finance or capitalize our activities or on terms that are acceptable to us could be impaired by factors that affect us directly or the financial services industry or economy in general, such as disruptions in the financial markets or negative views and expectations about the prospects for the financial services industry. Economic conditions and a loss of confidence in financial institutions may increase our cost of funding and limit access to certain customary sources of capital, including inter-bank borrowings, repurchase agreements and borrowings from the discount window of the Federal Reserve. Any decline in available funding could adversely impact our ability to continue to implement our strategic plan, including originating loans and investing in securities, or to fulfill obligations such as paying our expenses, repaying our borrowings or meeting deposit withdrawal demands, any of which could have a material adverse effect on our business, financial condition, results of operations and growth prospects.

We operate in the highly competitive financial services industry and face significant competition for clients from financial institutions located both within and beyond our market area. We compete with national commercial banks, regional banks, private banks, savings banks, credit unions, non-bank financial services companies, fintech companies, digital asset providers, and other financial institutions operating within or near the areas we serve, many of whom target the same clients we do in the Twin Cities MSA. As client preferences and expectations continue to evolve, technology has lowered barriers to entry and made it possible for banks to expand their geographic reach by providing services over the internet and for non-banks to offer products and services traditionally provided by banks, such as automatic transfer and automatic payment systems. The banking industry is experiencing rapid changes in technology, and, as a result, our future success will depend in part on our ability to address our clients' needs by using technology. Client loyalty can be influenced by a competitor's new products, especially offerings that could provide cost savings or a higher return to the client. Increased lending activity of competing banks has also led to increased competitive pressures on loan rates and terms for high-quality credits. We may not be able to compete successfully with other financial institutions in our markets, particularly with larger financial institutions that have significantly greater resources than us, and we may have to pay higher interest rates to attract deposits, accept lower yields to attract loans and pay higher wages for new employees, resulting in lower net interest margins and reduced profitability. Many of our non-bank competitors are not subject to the same extensive regulations that govern our activities and may have greater flexibility in competing for business. The financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. In addition, some of our current commercial banking clients may seek alternative banking sources as they develop needs for credit larger than we may be able to accommodate or more expansive product mixes offered by larger institutions. While we do not offer products relating to digital assets, including cryptocurrencies, stablecoins and other similar assets, there has been a significant increase in digital asset adoption within the United States and globally over the past several years. In 2025, President Trump signed the GENIUS Act into law. This act creates a Federal regulatory system for stablecoins, requiring, among other things, a 100% reserve backing with liquid assets, public disclosure of the compositions of the reserves, and alignment with State and Federal stablecoin networks. Certain characteristics of digital asset transactions, such as the speed with which such transactions can be conducted, the ability to transact without the involvement of regulated intermediaries, the ability to engage in transactions across multiple jurisdictions, and the anonymous nature of the transactions, are appealing to certain consumers notwithstanding the various risks posed by such transactions. Accordingly, digital asset service providers-many of which, at present are not subject to the same degree of scrutiny and oversight as banking organizations and other financial institutions-are becoming active competitors to more traditional financial institutions. The process of eliminating banks as intermediaries, known as "disintermediation," could result in the loss of fee income, as well as the loss of client deposits and the related income generated from deposits. The loss of these revenue streams and the lower cost deposits as a source of funds could have a material adverse effect on our business, financial condition and results of operations. Potential partnerships with digital asset companies, moreover, could also entail significant investment.