Span d.d.

Audit Report / Information • Apr 30, 2025

Deloitte d.o.o. ZagrebTower Radnička cesta 80 10 000 Zagreb Croatia TAX ID: 11686457780

Tel: +385 (0) 1 2351 900 Fax: +385 (0) 1 2351 999 www.deloitte.com/hr

INDEPENDENT AUDITOR'S REPORT

To the Shareholders of SPAN d.d.

Report on the Audit of the Financial Statements

Opinion

We have audited the separate financial statements of SPAN d.d (the Company) and consolidated financial statements of the SPAN d.d. and its subsidiaries (the Group) which comprise the separate and the consolidated statement of financial position as at 31 December 2024, the separate and the consolidated statement of comprehensive income, the separate and the consolidated statement of changes in equity and the separate and the consolidated statement of cash flows for the year then ended, and notes to the separate and the consolidated financial statements, including material accounting policy information.

In our opinion, the accompanying separate and consolidated financial statements present fairly, in all material respects, the financial position of the Company and the Group as at 31 December 2024, and its financial performance and its cash flows for the year then ended in accordance with International Financial Reporting Standards as adopted by the European Union (IFRS).

Basis for Opinion

We conducted our audit in accordance with the International Standards on Auditing (ISAs) and Regulation (EU) 537/2014 of the European Parliament and of the Council, dated 16 April 2014, on specific requirements regarding statutory audit of public-interest entities. Our responsibilities under those standards are further described in the Auditor's Responsibilities for the Audit of the Separate and the Consolidated Financial Statements section of our report. We are independent of the Company and the Group in accordance with the International Ethics Standards Board for Accountants' International Code of Ethics for Professional Accountants, including International Independence Standards (IESBA Code) and we have fulfilled our ethical responsibilities in accordance with the IESBA Code. We believe that the audit evidence we have obtained is sufficient and appropriate to provide a basis for our opinion.

Key Audit Matter

Key audit matter is the matter that, in our professional judgment, is of most significance in our audit of the separate and the consolidated financial statements of the current period. This matter was addressed in the context of our audit of the separate and the consolidated financial statements as a whole, and in forming our opinion thereon, and we do not provide a separate opinion on this matter.

This version of the auditor`s report is translation from the original, which was prepared in the Croatian language. All possible care has been taken to ensure that the translation is an accurate representation of the original. However, in all matters of interpretation of information, views or opinions, the original language version of the report takes precedence over this translation.

The company was registered at Zagreb Commercial Court: MBS 030022053; paid-in initial capital: EUR 5,930.00; Company Directors: Katarina Kadunc, Goran Končar and Helena Schmidt, Bank: Privredna banka Zagreb d.d., Radnička cesta 80, 10 000 Zagreb, bank account no. 2340009–1110098294; SWIFT Code: PBZGHR2X IBAN: HR3823400091110098294.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited ("DTTL"), its global network of member firms, and their related entities (collectively, the "Deloitte organization"). DTTL (also referred to as "Deloitte Global") and each of its member firms and related entities are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of each other. DTTL does not provide services to clients. Please see www.deloitte.com/en/about to learn more.

© 2025. For information, contact Deloitte Croatia.

Report on the Audit of the Financial Statements (continued)

Key Audit Matters (continued)

Key audit matter	How did we address key audit matter during our audit
For accounting policies. please see Significant accounting policies – note 3: Revenue recognition. Revenue from
	contracts with customers are disclosed in note 5 and amount to 180,183 thousand EUR (2023: 142,836 thousand
EUR) for the Group and 110,033 thousand EUR (2023.: 99,550 thousand EUR) for the Company.
Revenue recognition is a significant aspect of the	Our audit procedures included. among others:
Group's and Company's financial statements due to the	• Assessing the Group's and Company's revenue
complexity of the Group's and Company's revenue	recognition policies and their compliance with
streams. the different types of licenses and services	IFRS 15;
offered. and the various recognition criteria and	• Testing the design and implementation of
methods applied under International financial reporting standard 15: Contract with customers (IFRS	internal controls related to the revenue
15).	recognition in terms of the adequacy of their recording;
With reference to sale of different types of licenses. the	• Selecting a sample of transactions for each
Group and Company is primarily responsible for	revenue stream and performing substantive
delivering purchased Microsoft licenses to customers.	testing to determine the appropriateness of
it is exposed to potential risk of rejection of licenses by	revenue recognition. considering the relevant
the customer. and has the discretion to define prices	criteria under IFRS 15;
and benefits from licenses to the moment of transfer of	• Evaluating management's judgments and
control.	estimates used in determining the transaction
	prices. distinct delivery obligations. and the
The Group and Company sells hardware directly to	point in time or stage of completion for
customers in line with the contract on the sale of	performance obligations;
hardware and provision of services or individual	• Examining the information in the separate and
contracts on the sale of hardware. Revenue is	consolidated financial statements to assess
recognized at the point in time when the control over	whether the disclosures regarding revenue
the equipment has been transferred to the customers.	from customer contracts are appropriate.
and the sale of equipment is considered a distinct
delivery obligation.
Advisory services the Group and Company provides
may be divided in two main service groups: services
related to contracted projects with customers. and
advisory services which refer to customer support
based on contracted price lists.
The recognition of revenue involves significant
management judgment and estimation in determining
the appropriate point in time or the stage of
completion for performance obligations. as well as the
transaction price for each distinct performance
obligation. Due to these risks. this area was established
as a key audit matter.

Report on the Audit of the Financial Statements (continued)

Other Information

Management is responsible for the other information. The other information comprises the information included in the Annual Report, but does not include the separate and the consolidated financial statements and our auditor's report.

Our opinion on the separate and the consolidated financial statements does not cover the other information.

In connection with our audit of the separate and the consolidated financial statements, our responsibility is to read the other information and, in doing so, consider whether the other information is materially inconsistent with the separate and the consolidated financial statements or our knowledge obtained in the audit or otherwise appears to be materially misstated. With respect to the Management Report and the Corporate Governance Report, which are included in the Annual Report, we have also performed the other procedures prescribed by the Accounting Act. These procedures include examination of whether the Management Report include required disclosures as set out in the Articles 22 and 24 of the Accounting Act and whether the Corporate Governance Report includes the information specified in the Articles 22 and 25 of the Accounting Act.

Based on the procedures performed during our audit, to the extent we are able to assess it, we report that:

• 1) Information included in the other information is, in all material respects, consistent with the attached separate and consolidated financial statements.
• 2) Management Report has been prepared, in all material respects, in accordance with the Articles 22 and 24 of the Accounting Act, excluding the requirements on sustainability reporting. In respect of the Sustainability Report, which is included as part of the other information and constitutes a separate part of the Management Report, we performed a limited assurance engagement, the results of which were presented in a separate limited assurance report with an unmodified conclusion.
• 3) Corporate Governance Report has been prepared, in all material aspects, in accordance with the Articles 22 and 25 of the Accounting Act,

Based on the knowledge and understanding of the Company and the Group and its environment, which we gained during our audit of the separate and the consolidated financial statements, we have not identified material misstatements in the other information.

Responsibilities of Management and Those Charged with Governance for the Separate and the Consolidated Financial Statements

Management is responsible for the preparation and fair presentation of the separate and the consolidated financial statements in accordance with IFRSs and for such internal control as Management determines is necessary to enable the preparation of separate and consolidated financial statements that are free from material misstatement, whether due to fraud or error.

In preparing the separate and the consolidated financial statements, Management is responsible for assessing the Company's and the Group's ability to continue as a going concern, disclosing, as applicable, matters related to going concern and using the going concern basis of accounting unless Management either intends to liquidate the Company or the Group or to cease operations, or has no realistic alternative but to do so.

Those charged with governance are responsible for overseeing the Company's and the Group's financial reporting process.

Our objectives are to obtain reasonable assurance about whether the separate and the consolidated financial statements as a whole are free from material misstatement, whether due to fraud or error, and to issue an auditor's report that includes our opinion. Reasonable assurance is a high level of assurance, but is not a guarantee that an audit conducted in accordance with ISAs will always detect a material misstatement when it exists.

Report on the Audit of the Financial Statements (continued)

Auditor's Responsibilities for the Audit of the Separate and the Consolidated Financial Statements

Misstatements can arise from fraud or error and are considered material if, individually or in the aggregate, they could reasonably be expected to influence the economic decisions of users taken on the basis of these separate and consolidated financial statements.

As part of an audit in accordance with ISAs, we exercise professional judgment and maintain professional scepticism throughout the audit. We also:

• Identify and assess the risks of material misstatement of the separate and the consolidated financial statements, whether due to fraud or error, design and perform audit procedures responsive to those risks, and obtain audit evidence that is sufficient and appropriate to provide a basis for our opinion. The risk of not detecting a material misstatement resulting from fraud is higher than for one resulting from error, as fraud may involve collusion, forgery, intentional omissions, misrepresentations, or the override of internal control.
• Obtain an understanding of internal control relevant to the audit in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of the Company's and the Group's internal controls.
• Evaluate the appropriateness of accounting policies used and the reasonableness of accounting estimates and related disclosures made by Management.
• Conclude on the appropriateness of Management's use of the going concern basis of accounting and, based on the audit evidence obtained, whether a material uncertainty exists related to events or conditions that may cast significant doubt on the Company's and the Group's ability to continue as a going concern. If we conclude that a material uncertainty exists, we are required to draw attention in our auditor's report to the related disclosures in the separate and the consolidated financial statements or, if such disclosures are inadequate, to modify our opinion. Our conclusions are based on the audit evidence obtained up to the date of our auditor's report. However, future events or conditions may cause the Company and the Group to cease to continue as a going concern.
• Evaluate the overall presentation, structure and content of the separate and the consolidated financial statements, including the disclosures, and whether the separate and the consolidated financial statements represent the underlying transactions and events in a manner that achieves fair presentation.
• Plan and perform the group audit to obtain sufficient appropriate audit evidence regarding the financial information of the entities or business units within the group as a basis for forming an opinion on the group financial statements. We are responsible for the direction, supervision and review of the audit work performed for purposes of the group audit. We remain solely responsible for our audit opinion.

We communicate with those charged with governance regarding, among other matters, the planned scope and timing of the audit and significant audit findings, including any significant deficiencies in internal control that we identify during our audit.

We also provide those charged with governance with a statement that we have complied with relevant ethical requirements regarding independence, and communicate with them all relationships and other matters that may reasonably be thought to bear on our independence, and where applicable, actions taken to eliminate threats or safeguards applied.

From the matters communicated with those charged with governance, we determine those matters that were of most significance in the audit of the separate and the consolidated financial statements of the current period and are therefore the key audit matters. We describe these matters in our auditor's report unless law or regulation precludes public disclosure about the matter or when, in extremely rare circumstances, we determine that a matter should not be communicated in our report because the adverse consequences of doing so would reasonably be expected to outweigh the public interest benefits of such communication.

Report on Other Legal and Regulatory Requirements

Report based on the requirements of Delegated Regulation (EU) No. 2018/815 amending Directive No. 2004/109/EC of the European Parliament and of the Council as regards regulatory technical standards for the specification of the uniform electronic format for reporting (ESEF)

Auditor's reasonable assurance report on the compliance of separate and consolidated financial statements (financial statements), prepared based on the provision of Article 462 (5) of the Capital Market Act by applying the requirements of the Delegated Regulation (EU) 2018/815 specifying for the issuers a single electronic reporting format ("ESEF Regulation"). We conducted a reasonable assurance engagement on whether the financial statements of the Company the Group for the financial year ended 31 December 2024 prepared to be made public pursuant to Article 462 (5) of the Capital Market Act, contained in the electronic file 747800L0D5F39CX8NA43-2024-12-31-0-en have been prepared in all material aspects in accordance with the requirements of the ESEF Regulation.

Responsibilities of the Management and Those Charged with Governance

Management is responsible for the preparation and content of the financial statements in line with the ESEF Regulation.

In addition, Management is responsible for maintaining the internal controls system that reasonably ensures the preparation of financial statements without material differences with the reporting requirements from the ESEF Regulation, whether due to fraud or error.

Furthermore, Company Management is responsible for the following:

• public reporting of financial statements presented in the Annual Report in valid XHTML format
• selection and use of XBRL markups in line with the requirements of the ESEF Regulation.

Those charged with governance are responsible for supervising the preparation of financial statements in ESEF format as part of the financial reporting process.

Auditor's Responsibilities

It is our responsibility to carry out a reasonable assurance engagement and, based on the audit evidence obtained, give our conclusion on whether the financial statements have been prepared without material differences with the requirements from the ESEF Regulation. We conducted our reasonable assurance engagement in accordance with the International Standard on Assurance Engagements 3000 (Revised) – Assurance Engagements Other than Audits or Reviews of Historical Financial Information (ISAE 3000). This standard requires that we plan and perform the engagement to obtain reasonable assurance for providing a conclusion.

Quality management

We have conducted the engagement in compliance with independence and ethical requirements as provided by the Code of Ethics for Professional Accountants (including International Independence Standards) issued by the International Ethics Standards Board for Accountants. The code is based on the principles of integrity, objectivity, professional competence and due diligence, confidentiality, and professional conduct. We comply with the International Standard on Quality Management 1, Quality Management for Firms that Perform Audits and Reviews of Financial Statements, and Other Assurance and Related Services Engagements (ISQM 1) and accordingly maintain an overall management control system, including documented policies and procedures regarding compliance with ethical requirements, professional standards, and applicable legal and statutory requirements.

Report on Other Legal and Regulatory Requirements (continued)

Report based on the requirements of Delegated Regulation (EU) No. 2018/815 amending Directive No. 2004/109/EC of the European Parliament and of the Council as regards regulatory technical standards for the specification of the uniform electronic format for reporting (ESEF) (continued)

Procedures performed

As part of the selected procedures, we have conducted the following activities:

• We have read the requirements of the ESEF Regulation;
• We have gained an understanding of internal controls of the Company and the Group, relevant for the application of the ESEF Regulation requirements;
• We have identified and assessed the risks of material differences with the ESEF Regulation due to fraud or error;
• We have devised and designed procedures for responding to estimated risks and obtaining reasonable assurance in order to give our conclusion.

Our procedures focused on assessing whether:

• Financial statements included in the separate and the consolidated report have been prepared in valid XHTML format;
• Data included in the separate and the consolidated financial statements required by the ESEF Regulation have been marked up and meet all of the following requirements:
  • o XBRL has been used for markups.
  • o Core taxonomy elements stipulated in the ESEF Regulation with the closest accounting meaning were used unless an extension taxonomy element was created in line with the Annex IV of the ESEF Regulation;
  • o Markups comply with the common rules on markups in line with the ESEF Regulation.

We believe the evidence we obtained to be sufficient and appropriate to provide a basis for our conclusion.

Conclusion

We believe that, based on the procedures performed and evidence obtained, the financial statements of the Company and the Group presented in the ESEF format, contained in the aforementioned electronic file, and based on the provision of Article 462 (5) of the Capital Market Act, have been prepared to be published for public, in all material aspects in accordance with the requirements of articles 3, 4 and 6 of the ESEF Regulation for the year ended 31 December 2024.

In addition to this conclusion, as well as the audit opinion contained in this Independent Auditor's Report for the accompanying financial statements and Annual Report for the year ended 31 December 2024, we do not express any opinion on the information contained in these documents or other information contained in the above mentioned file.

Report on Other Legal and Regulatory Requirements (continued)

Other reporting obligations as required by Regulation (EU) No. 537/2014 of the European Parliament and the Council and the Audit Act

We were appointed as the statutory auditor of the Company and the Group by the shareholders on General Shareholders' Meeting held on 18 June 2025 to perform audit of accompanying separate and consolidated financial statements. Our total uninterrupted engagement has lasted 7 years and covers the period from 1 January 2018 to 31 December 2024.

We confirm that:

• our audit opinion on the accompanying separate and consolidated financial statements is consistent with the additional report issued to the Audit Committee of the Company on 29 April 2025 in accordance with the Article 11 of Regulation (EU) No. 537/2014 of the European Parliament and the Council;
• no prohibited non-audit services referred to in the Article 5(1) of Regulation (EU) No. 537/2014 of the European Parliament and the Council were provided.

There are no services, in addition to the statutory audit, which we provided to the Company and its controlled undertakings, and which have not been disclosed in the Annual Report.

The engagement partner on the audit resulting in this independent auditor's report is Katarina Kadunc.

Katarina Kadunc Director and certified auditor

Deloitte d.o.o.

30 April 2025 Radnička cesta 80, 10 000 Zagreb, Croatia