Franklin Financial Services (FRAF) Risk Analysis

The Corporation has observed an increased level of attention in the industry focused on cyber-attacks that include, but are not limited to, gaining unauthorized access to digital systems for purposes of misappropriating assets or sensitive information, corrupting data, or causing operational disruption. While the Corporation maintains insurance coverage that may, subject to policy terms and conditions including significant self-insured deductibles, cover or ameliorate certain financial aspects of cyber risks, such insurance coverage may be insufficient to cover all losses. While we have systems, policies and procedures designed to prevent or limit the effect of the failure, interruption or security breach of our information systems, there can be no assurance that any such failures, interruptions or security breaches will not occur or, if they do occur, that they will be adequately addressed. The occurrence of any failures, interruptions or security breaches of our information systems could damage our reputation, result in a loss of client business, or expose us to civil litigation and possible financial liability, any of which could have a material adverse effect on our business, financial condition and results of operations.

The Corporation may incorporate AI solutions into platforms that deliver products and services to its customers, including solutions developed by third parties whose AI is integrated into its products and services. The Corporation's business could be harmed and it may be exposed to legal liability and reputational risk if the AI it uses is or is alleged to be deficient, inaccurate, or biased because the AI algorithms are flawed, insufficient, of poor quality, or reflect unwanted forms of bias, particularly if third party AI integrated with its platforms produces false or "hallucinatory" inferences.Data practices by the Corporation or others that result in controversy could impair the acceptance of AI, which could undermine the decisions, predictions, or analysis that AI applications produce. The Corporation's customers and potential customers may express adverse opinions concerning its use of AI and machine learning that could result in brand or reputational harm, competitive harm, or legal liability. If the Corporation develops Generative AI, its content creation may require additional investment as testing for bias, accuracy and unintended, harmful impact is often complex and may be costly. As a result, the Corporation may need to increase the cost of its products and services which may make it less competitive, particularly if its competitors incorporate AI more quickly or successfully.Governmental bodies have implemented laws and are considering further regulation of AI (including machine learning), which could negatively impact the Corporation's ability to use and develop AI. The Corporation is unable to predict how application of existing laws, including federal and state privacy and data protection laws, and adoption of new laws and regulations applicable to AI will affect it but it is likely that compliance with such laws and regulations will increase its compliance costs and such increase may be substantial and adversely affect its results of operations. Furthermore, its use of Generative AI and other forms of AI may expose us to risks relating to intellectual property ownership and licensing rights, including copyright of Generative AI and other AI output as these issues have not been fully interpreted by federal courts or been fully addressed by federal or state legislation or regulations.

8   The following is a summary of the primary risks associated with the Corporation’s business, financial condition and results of operations, and common stock. Risk Factors Relating to the Corporation

From time to time, customers make claims and take legal action pertaining to the Corporation’s performance of its fiduciary responsibilities. Whether customer claims and legal action related to the Corporation’s performance of its fiduciary responsibilities are founded or unfounded, if such claims and legal actions are not resolved in a manner favorable to the Corporation, they may result in significant financial liability and/or adversely affect the market perception of the Corporation and its products and services, as well as impact customer demand for those products and services. Any financial liability or reputation damage could have a material adverse effect on the Corporation’s business, which, in turn, could have a material adverse effect on the Corporation’s financial condition and results of operations. Our business and financial results could be impacted materially by adverse results in legal proceedings. The nature of the Corporation’s business generates a certain amount of litigation involving matters arising in the ordinary course of business (and, in some cases, from the activities of companies we have acquired). These legal proceedings, whether founded or unfounded, could result in reputation damage and have an adverse effect on our financial condition and results of operation if they are not resolved in a manner favorable to the Corporation. Although we establish legal accruals for legal proceedings when information related to the loss contingencies represented by these matters indicates that both a loss is probable and that the amount of the loss can be reasonably estimated, we do not have accruals for all legal proceedings where we face a risk of loss. In addition, due to the inherent subjectivity of the assessments and unpredictability of outcomes of legal proceedings, any amounts that may be accrued or included in estimates of possible losses or ranges of possible losses may not represent the actual loss to the Corporation. We discuss these matters further in Part I

At December 31, 2025, the Bank’s in-house policy lending limit was $32.7 million. Accordingly, the size of the loans that can be offered to customers is less than the size of loans that many of our competitors, with larger lending limits, can offer. This limit affects the Bank’s ability to seek relationships with larger businesses in its market area. Loan amounts in excess of the lending limits can be accommodated through the sale of participations in such loans to other banks. However, there can be no assurance that the Bank will be successful in attracting or maintaining customers seeking larger loans or that it will be able to engage in participation of such loans or on terms favorable to the Bank. There is strong competition in the Bank’s primary market areas and its geographic diversification is limited. The Bank encounters strong competition from other financial institutions in its primary market area, which consists of Franklin, Cumberland, Dauphin, Fulton and Huntingdon Counties, Pennsylvania, and Washington County, MD. In addition, established financial institutions not already operating in the Bank’s primary market area may open branches there at future dates or can compete in the market via the Internet. In the conduct of certain aspects of banking business, the Bank also competes with credit unions, mortgage banking companies, consumer finance companies, insurance companies and other institutions, some of which are not subject to the same degree of regulation or restrictions as are imposed upon the Bank. Many of these competitors have substantially greater resources and lending limits and can offer services that the Bank does not provide. In addition, many of these competitors have numerous branch offices located throughout their extended market areas that provide them with a competitive advantage. No assurance can be given that such competition will not have an adverse effect on the Bank’s financial condition and results of operations.