HEALTHSTREAM INC 10-Q

Item 4. Controls and Procedures Evaluation of Controls and Procedures HealthStream’s chief executive officer and principal financial officer have reviewed and evaluated the effectiveness of the Company’s disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) promulgated under the Securities Exchange Act of 1934 (the “Exchange Act”)) as of the end of the period covered by this Form 10-Q. Based on that evaluation, the chief executive officer and principal financial officer have concluded that HealthStream’s disclosure controls and procedures were effective to ensure that the information required to be disclosed by the Company in the reports the Company files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in the SEC’s rules and forms, and the information required to be disclosed in the reports the Company files or submits under the Exchange Act was accumulated and communicated to the Company’s management, including its chief executive officer and principal financial officer, or persons performing similar functions, as appropriate to allow timely decisions regarding required disclosure. Changes in Internal Control over Financial Reporting There was no change in HealthStream’s internal control over financial reporting that occurred during the first quarter of 2026 that has materially affected, or that is reasonably likely to materially affect, HealthStream’s internal control over financial reporting. 20 Table of Contents PART II ‑ OTHER INFORMATION Item 1. Legal Proceedings None. Item 1A. Risk Factors There have been no material changes to the risk factors previously disclosed in Part I, Item 1A of the 2025 Form 10-K.