# Paragon Banking Group PLC

Pillar III Disclosures - 30 September 2025

paragon

---

# Contents

1. Introduction  Page 3
2. Key metrics and overview of risk weighted exposure amounts  Page 7
3. Risk management  Page 13
4. Scope of application  Page 32
5. Own funds  Page 39
6. Countercyclical capital buffer  Page 45
7. Leverage ratio  Page 47
8. Liquidity requirements  Page 51
9. Exposures to credit risk and credit quality  Page 57
10. Credit risk mitigation  Page 67
11. Standardised approach to credit risk  Page 69
12. Exposures to counterparty credit risk  Page 72
13. Exposures to securitisation positions  Page 77
14. Standardised approach and internal model approach for market risk  Page 80
15. Exposures to interest rate risk on positions not held in the trading book  Page 82
16. Operational risk  Page 86
17. Remuneration policy  Page 90
18. Encumbered and unencumbered assets  Page 97
19. IRB approach for credit risk  Page 101
20. Glossary  Page 102

Paragon Banking Group PLC

51 Homer Road, Solihull, West Midlands, B91 3QJ

Registered number: 2336032

LEI: 21380051TDKIB1IUT572

## CAUTIONARY STATEMENT

Sections of this Pillar III disclosure may contain forward-looking statements with respect to certain of the plans and current goals and expectations relating to the future financial condition, business performance and results of the Group. These statements can be identified by the fact that they do not relate strictly to historical or current facts. They use words such as 'anticipate', 'estimate', 'expect', 'intend', 'will', 'project', 'plan', 'believe', 'target' and other words and terms of similar meaning in connection with any discussion of future operating or financial performance but are not the exclusive means of identifying such statements. These have been made by the directors in good faith using information available up to the date on which they approved this report, and the Group undertakes no obligation to update or revise these forward-looking statements for any reason other than in accordance with its legal or regulatory obligations (including under the UK Market Abuse Regulation, UK Listing Rules and the Disclosure Guidance and Transparency Rules of the Financial Conduct Authority (FCA)).

By their nature, all forward-looking statements involve risk and uncertainty because they relate to future events and circumstances that are beyond the control of the Group and depend upon circumstances that may or may not occur in the future that could cause actual results or events to differ materially from those expressed or implied by the forward-looking statements. There are also a number of factors that could cause actual future financial conditions, business performance, results or developments to differ materially from the plans, goals and expectations expressed or implied by these forward-looking statements and forecasts. As a result, you are cautioned not to place reliance on such forward-looking statements as a prediction of actual results or otherwise.

These factors include, but are not limited to: material impacts related to foreign exchange fluctuations; macro-economic activity; the impact of outbreaks, epidemics or pandemics, and the extent of their impact on overall demand for the Group's services and products; potential changes in dividend policy; changes in government policy and regulation (including the monetary, interest rate and other policies of central banks and other regulatory authorities in the principal markets in which the Group operates) and the consequences thereof; actions by the Group's competitors or counterparties; third party, fraud and reputational risks inherent in its operations; the UK's exit from the EU; unstable UK and global economic conditions and market volatility, including currency and interest rate fluctuations and inflation or deflation; the risk of a global economic downturn; social unrest; acts of terrorism and other acts of hostility or war and responses to, and consequences of those acts; technological changes and risks to the security of IT and operational infrastructure, systems, data and information resulting from increased threat of cyber and other attacks; general changes in government policy that may significantly influence investor decisions (including, without limitation, actions taken in support of managing and mitigating climate change and in supporting the global transition to net zero carbon emissions); societal shifts in customer financing and investment needs; and other risks inherent to the industries in which the Group operates.

Nothing in this Pillar III disclosure should be construed as a profit forecast.

---

# 1. Introduction

## This section sets out

- An introduction to the Group
- An overview of the disclosure framework under which this document is prepared
- A summary of the Group's Pillar III disclosure policies
- A summary of the scope and basis of preparation for this document
- A summary of changes made since the Group's last Pillar III disclosures
- A summary of the approval process for the document

Paragon Banking Group PLC (the 'Company') is a UK specialist banking group, sourcing funds in the retail deposit market and lending to consumers and smaller corporates. It is subject to banking regulation and therefore is required, under UK banking regulations, to publicly report on risk and governance matters for each financial year. This expands on the disclosures already required to be given in an entity's Annual Report and Accounts.

This document, referred to as a Pillar III report, is intended to satisfy those requirements. An overview of the disclosures given by theme is shown on page 5.

## The Group

The Company controls a group of companies (together the 'Group') including a regulated bank, Paragon Bank PLC (the 'Bank'). The Group analyses its operations, both for internal management reporting and external financial reporting, on the basis of the markets from which its assets are generated. The segments used are described below:

- Mortgage Lending, including the Group's buy-to-let, and owner-occupied first and second charge lending and related activities
- Commercial Lending, including the Group's equipment leasing activities, development finance, structured lending and other offerings targeted towards SME customers, together with its motor finance business

Each division is responsible for the generation of new business with servicing and the majority of other support functions managed on a group-wide basis.

On 18 February 2014 the Bank was authorised by the Prudential Regulation Authority ('PRA') and is regulated by the PRA and the Financial Conduct Authority ('FCA'). The PRA sets requirements for the Bank relating to capital and liquidity adequacy.

## Disclosure framework

The Group is regulated for prudential capital purposes under the Basel III regime, the international regime governing capital maintenance in banks, which is supervised by the Basel Committee on Banking Supervision ('BCBS'). In the UK this regime is enforced through the PRA Rulebook (the 'Rulebook'), following the implementation of the Financial Services Act 2021 on 1 January 2022. Formerly these rules were applied on a European Union ('EU') basis through the fourth Capital Requirements Directive ('CRD IV') and the first Capital Requirements Regulation ('CRR') (Regulation 575/2013). Certain aspects of this EU legislation remain applicable in the UK.

The Company has been operating under the Basel III regime since the authorisation of the Bank in 2014.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

The Basel III approach consists of three elements, or 'Pillars', which represent the key principles of the regime:

|  Pillar I | This covers the minimum capital requirements of Basel III. The calculation is based on a risk-based approach. It focuses on credit, operational and market risk in determining the Group's Minimum Capital Requirement ('MCR'), based on a standard 8% of its risk weighted assets.  |
| --- | --- |
|  Pillar II | This requires that the Group conducts an Internal Capital Adequacy Assessment Process ('ICAAP') which is subject to review by the PRA under the Supervisory Review and Evaluation Process ('SREP').In the ICAAP the Company's Board undertakes an assessment of the key risks facing the Company's business against which capital has not been provided under Pillar I to determine whether additional regulatory capital, over and above the 8% Pillar I requirement, should be held, based on the identified risks and the quality of the risk management processes in place.A firm's Individual Capital Requirement ('ICR') is set by the PRA based on the ICAAP.  |
|  Pillar III | Pillar III complements Pillars I and II and aims to encourage market discipline by setting out disclosure requirements which should allow market participants to assess key pieces of information on a firm's capital, risk exposures, risk management processes and remuneration.These requirements are set out in the Disclosure (CRR) Part of the Rulebook.  |

Since 2022 the regulatory approach to Pillar III includes standardised templates for all disclosure items which are set out in the Rulebook. The majority of this report comprises these templates, all of which are labelled in accordance with the Rulebook. Where full compliance with the disclosure objectives of the Rulebook might not be achieved through the templates alone, additional information has been provided.

The Group has adopted the Standardised Approach ('SA') for credit risk and the Basic Indicator Approach ('BIA') for operational risk. It has submitted an application for authorisation to adopt an Internal Ratings Based ('IRB') approach for credit risk in future periods. These choices impact on which disclosures are required under Pillar III.

# Pillar III disclosure policy

The Company's Pillar III disclosures cover the Group as a whole, comprising the Company and all its subsidiary undertakings. They are therefore prepared on the same basis as the Group's consolidated accounts. These bodies are regulated on a consolidated basis and this disclosure treats them as such. References to the Group in this document therefore include the Bank.

The Company's Disclosure Policy for Pillar III is based on its Board of Directors' interpretation of the requirements of the Disclosure (CRR) Part of the Rulebook.

The PRA has redefined the threshold for presenting detailed Pillar 3 information to exclude Small Domestic Deposit Takers ('SDDTs'). The Group would currently meet the SDDT criteria, but this status requires a PRA waiver. The Group has not applied for such a waiver. Its balance sheet also exceeds the grandfathered €5.0 billion threshold set in the previous version of the Rulebook for reduced disclosure.

The Group is defined as an 'Other Institution' under these rules (i.e. neither Large nor Small and Simple) having a balance sheet of less than €30.0 billion but greater than €5.0 billion. Its disclosure requirements are therefore set out in Article 433c of the Rulebook. This requires that the Group produces an annual Pillar III report and a summary Pillar III at each half-year date.

There are certain disclosures that are only required by the Rulebook where an institution is large or an LREQ firm, as defined by the PRA Rulebook. The Group's balance sheet size is too small to be classified as large or to fall within the LREQ rules on leverage. Therefore, these have not been presented for the Group and this is stated under the relevant sections within the report.

The level of disclosure on remuneration matters is subject to additional rules, set out in the Rulebook. UK-only institutions with no trading book and average assets less than £20.0 billion are defined as 'Small CRR Firms' and a number of templates in the PRA rulebook apply only to larger institutions. The Group currently qualifies as a Small CRR Firm, and these templates are therefore not applicable. This is noted under the relevant sections within the report.

The Pillar III disclosures are updated on an annual basis using the Group's year end date of 30 September, following publication of the Annual Report and Accounts. A half-yearly summary using the Group's half-year date of 31 March is also provided. The annual and half-yearly reporting process will include consideration of regulatory changes and developing best practice, to ensure that disclosures remain appropriate. More frequent disclosures will be made if there is a material change in the nature of the Group's risk profile during any particular year.

Pillar III disclosures are prepared with input from the Finance, Risk, Treasury and Human Resources functions, and from regulatory specialists. They are reviewed at senior and executive management level, considered by the Audit Committee and approved by the Board of Directors in the same way as the Group's half-year and Annual Report and Accounts for the year.

Pillar III regulatory capital disclosures are published on the investor relations section of the Group's corporate website (www.paragonbankinggroup.co.uk), alongside the Annual Report and Accounts for the year. Both documents are published on the website at approximately the same time, in accordance with the requirement in Article 433 of the Rulebook to publish the Pillar III disclosures in conjunction with the date of publication of the financial statements.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

The Company's Pillar III disclosure policy is considered annually to ensure that it remains appropriate in the light of new regulations and emerging best practice.

The Company's Pillar III regulatory capital disclosure policies were approved by the Board of Directors in February 2015 and have been confirmed annually, most recently in December 2025 on the approval of this document.

# Scope and basis of disclosure

This Pillar III disclosure has been drawn up in conjunction with the Annual Report and Accounts of the Group for the year ended 30 September 2025 ('the Group Accounts') and with the Group's regulatory reporting for the year.

The figures in this Pillar III disclosure are consistent with the Group Accounts, but do not form part of the Group Accounts. The disclosures presented have been reviewed internally but have not been externally audited. The disclosures are also consistent, where appropriate, with regulatory disclosures submitted to the regulator.

The level, structure and format of the Pillar III disclosures are prescribed by the Rulebook, which includes a suite of templates covering all Pillar III disclosure matters. The requirement to use these standard templates, where much content may not be relevant for any particular bank, means that simpler reporters, such as the Group, will provide a significant volume of nil returns.

The Rulebook requires that all disclosures required by the Disclosure (CRR) Part are provided in a single location, therefore requirements may not be addressed by cross-reference to other public documents.

In drawing up these disclosures the Group has considered the regulations carefully and reviewed emerging market practice, analysing Pillar III reports made by comparable UK lenders including those for the larger challenger banks and building societies.

The Group consolidation for regulatory purposes is the same as that used for statutory purposes and hence all subsidiary undertakings within the Group have been consolidated in the Pillar III disclosures. These are listed in Section 4 - Scope of Application, template UK L13.

The Pillar III disclosures have been prepared for the Group as a whole, in accordance with the rules laid out in Articles 431 to 451 of the Disclosure (CRR) Part of the Rulebook and having regard to materiality as described above.

The disclosures provide information on the capital adequacy and risk management processes of the Group. These disclosures have been compiled on the most appropriate basis for this purpose and following the instructions on calculation and classification given in the Rulebook. Therefore they may not agree directly with disclosures addressing similar matters presented in the Group Accounts.

# Overview of disclosures

Under the PRA Rulebook 'Disclosure (CRR)' part, the disclosures are set out in prescribed templates which are required to be presented in their entirety within the Pillar III report. For the purpose of this document these disclosures and their applicable templates have been grouped thematically, as illustrated below.

![img-0.jpeg](img-0.jpeg)
Pillar III document overview

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# Development in disclosures

The Group's Pillar III disclosures were updated in 2022 following the onshoring of the CRR into the Rulebook. No significant changes have been made in the requirements for the current year, but as the Group was among the earliest organisations to report under the new rules, emerging market practice has been kept under review and some minor enhancements to the disclosures presented, particularly in the provision of more information across the Group's principal risks, have been made for the 2025 disclosure.

Market practice will clearly continue to develop as more reports under the new rules are published. The Group will continue to monitor practice as it emerges over time.

Since the Group's last Pillar III report, only minor changes to the Disclosure (CRR) Part of the Rulebook have been made. These did not impact on the Group's reporting.

The PRA is also expected to make further changes to the Pillar III disclosure regime as part of its work to implement the Basel 3.1 capital reforms. So far, these changes are limited to reducing the disclosures required where a firm is classified as a Small Domestic Deposit Taker ('SDDT'). While the Group would currently qualify to apply for SDDT status, it has not yet made any such application. The near-final Basel 3.1 Rules published by the PRA in September 2024, and finalised in January 2026, include changes to a large number of the templates to correspond with changes made to the capital rules more generally. The revised rules also expand the half-yearly reporting requirements for listed firms not qualifying as 'large'. These changes are now expected to be introduced from 1 January 2027.

The Group will continue to monitor these developments to ensure that any changes can be reflected in a timely manner.

# Approval

The Board of Directors considered this document in light of, amongst other things:

- The Board's consideration of the Group Accounts
- The ICAAP approved by the Board in April 2025, and the directors' input into this process
- The Individual Liquidity Adequacy Assessment Process ('ILAAP') approved by the Board in October 2024, and that approved by the Board in October 2025, after the year end, and the directors' input into these processes
- The Board's overall understanding of the Group's risk profile and operations

The Group Accounts include audited and unaudited disclosures addressing the Group's risk exposure, mitigation and appetites. In approving the Group Accounts the directors had to consider the appropriateness of those disclosures and the overall adequacy of the Group's risk management framework, supported by analysis prepared by the Risk and Internal Audit functions.

The Group undertook its annual ICAAP process during the year. The ICAAP was prepared under the direction of the Chief Financial Officer ('CFO') and the executive management of the Group, with appropriate input and challenge from other areas of the business. The ICAAP was reviewed and challenged by the Group's executive, through the Executive Risk Committee ('ERC') and its sub-committees. It was reviewed in detail by the board-level Risk and Compliance Committee and was formally approved by the Board in April 2025. Throughout the ICAAP's preparation, the Board was kept up to date with its progress and key findings, and the directors have received regulatory training sessions to ensure that they are able to provide the appropriate level of challenge.

The Group completes an ICAAP on at least an annual basis. The update process will occur more frequently if there is a significant change in the Group's business model (potentially following a major acquisition) or in the economic environment within which the Group operates.

During the year, in 2025 the PRA conducted a SREP of the Group's capital requirements, based on the ICAAP analysis performed in 2024. The conclusions of the review were very positive with the regulator reducing its capital requirement based on its assessment of the Group's risk exposures and management systems.

Future ICAAPs will be subject to SREP reviews periodically, particularly in the event of significant changes in the business.

This document was considered by the executive directors and by the Board and the Audit Committee and non-executive directors prior to publication, having regard to their understanding of the business and appropriate external advice.

In particular, they considered whether:

- as a whole the document properly represented the Group's position
- the use of materiality for disclosure purposes was appropriate
- the Group's formal Pillar III disclosure policy remained appropriate
- annual publication of the disclosures remained appropriate

The directors were able to satisfy themselves on these matters and the Pillar III disclosures were therefore approved for publication by the Board of Directors of Paragon Banking Group PLC on 22 January 2026.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 2. Key metrics and overview of risk weighted exposure amounts

## This section sets out

- Key metrics
- Overview of risk weighted assets

Included in this section are tables which set out the Group's key capital and liquidity metrics and the calculation of its total Risk Weighted Exposure Amount ('RWEA'). The key metrics table (UK KM1), which the Group is required to publish on a six-monthly basis, summarises information covered in more detail in subsequent sections. The RWEA table (UK OV1) summarises the individual elements of RWEA, the derivation of which is discussed in more detail in other sections of the document.

## Summary of key metrics

During the year the Group has maintained strong regulatory capital ratios, with capital balances being carefully managed. The Group's business is subject to supervision by the Prudential Regulation Authority ('PRA') and, as part of this supervision, the regulator sets a Total Capital Requirement ('TCR'), the minimum amount of regulatory capital which we must hold. This is defined under the international Basel 3 rules, implemented through the PRA Rulebook.

The Group's Common Equity Tier 1 ('CET1') capital comprises equity shareholders' funds, adjusted as required by the Regulatory Capital Rules of the PRA and can be used for all capital purposes. TRC, in addition, includes tier-2 capital in the form of the Group's Tier-2 Bond. This tier-2 capital can be used to meet up to 25% of the TCR. Capital levels on both measures in the year have remained broadly stable, with positive operational performance continuing to support the capital position, even after allowing for paid and proposed distributions.

The year-on-year reduction in TCR requirements shown below relates principally to the result of the supervisory review described above, offset by the impact of asset growth in the period.

While the Group's capital ratios have fallen in the year, the reduction is similar to that in our capital requirement, meaning that the capital headroom represented has changed little over the year.

During the period the Capital Conservation buffer remained at 2.0%, its long-term rate, while the UK Counter-Cyclical buffer ('CCyB') was 2.5% (31 March 2025: 2.5%; 30 September 2024: 2.5%).

Strong deposit flows resulted in an average Liquidity Coverage Ratio ('LCR') of 154.0% for the year (2024: 211.5%) to facilitate debt repayments over the past two years, in particular, on our TFSME borrowings.

At 30 September 2025, the Bank's Net Stable Funding Ratio ('NSFR') stood at 135.1% (31 March 2025: 142.0%; 30 September 2024: 139.5%), showing a broadly similar position to twelve months earlier.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

2.1 UK KM1 - Key metrics template

|   |   | a 30 Sep 25 £m | c 31 Mar 25 £m | e 30 Sep 24 £m | Notes | Further information  |
| --- | --- | --- | --- | --- | --- | --- |
|  Available own funds (amounts)  |   |   |   |   |   |   |
|  1 | Common Equity Tier 1 ('CET1') Capital | 1,172.4 | 1,193.2 | 1,177.9 |  | Section 5 UK CC1  |
|  2 | Tier 1 capital | 1,172.4 | 1,193.2 | 1,177.9 |  | Section 5 UK CC1  |
|  3 | Total capital | 1,322.4 | 1,343.2 | 1,327.9 |  | Section 5 UK CC1  |
|  Risk-weighted exposure amounts  |   |   |   |   |   |   |
|  4 | Total risk-weighted exposure amount | 8,630.7 | 8,383.2 | 8,278.7 |  | UK OV1 (below)  |
|  Capital ratios (as a percentage of risk-weighted exposure amount)  |   |   |   |   |   |   |
|  5 | Common Equity Tier 1 ratio (%) | 13.6 | 14.2 | 14.2 |  |   |
|  6 | Tier 1 ratio (%) | 13.6 | 14.2 | 14.2 |  |   |
|  7 | Total capital ratio (%) | 15.3 | 16.0 | 16.0 |  |   |
|  Additional own funds requirements based on SREP (as a percentage of risk-weighted exposure amount)  |   |   |   |   |   |   |
|  7a | Additional CET1 SREP requirements (%) | 0.1 | 0.1 | 0.4 |  |   |
|  7b | Additional AT1 SREP requirements (%) | 0.0 | 0.0 | 0.1 |  |   |
|  7c | Additional T2 SREP requirements (%) | 0.0 | 0.0 | 0.2 |  |   |
|  7d | Total SREP own funds requirements (%) | 8.1 | 8.1 | 8.7 |  |   |
|  Combined buffer requirement (as a percentage of risk-weighted exposure amount)  |   |   |   |   |   |   |
|  8 | Capital conservation buffer (%) | 2.0 | 2.0 | 2.0 |  |   |
|  UK 8a | Conservation buffer due to macro-prudential or systemic risk identified at the level of a Member State (%)
| - | - | - |
| [a] |
|  9 | Institution specific countercyclical capital buffer (%) | 2.5 | 2.5 | 2.5 |  | Section 6 UK CCyB1  |
|  UK 9a | Systemic risk buffer (%)
| - | - | - |
| [a] |
|  10 | Global Systemically Important Institution buffer (%)
| - | - | - |
| [a] |
|  UK 10a | Other Systemically Important Institution buffer
| - | - | - |
| [a] |
|  11 | Combined buffer requirement (%) | 4.5 | 4.5 | 4.5 |  |   |
|  UK 11a | Overall capital requirements (%) | 12.6 | 12.6 | 13.2 |  |   |
|  12 | CET1 available after meeting the total SREP own funds requirements (%) | 7.2 | 7.9 | 7.3 |  |   |
|  Leverage ratio  |   |   |   |   |   |   |
|  13 | Total exposure measure excluding claims on central banks | 17,651.1 | 17,192.0 | 16,807.9 |  | Section 7  |
|  14 | Leverage ratio excluding claims on central banks (%) | 6.6 | 6.9 | 7.0 |  | Section 7  |
|  Additional leverage ratio disclosure requirements  |   |   |   |   |   |   |
|  14a | Fully loaded ECL accounting model leverage ratio excluding claims on central banks (%) | N/A | N/A | N/A | [b] |   |
|  14b | Leverage ratio including claims on central banks (%) | N/A | N/A | N/A | [b] |   |
|  14c | Average leverage ratio excluding claims on central banks (%) | N/A | N/A | N/A | [b] |   |
|  14d | Average leverage ratio including claims on central banks (%) | N/A | N/A | N/A | [b] |   |
|  14e | Countercyclical leverage ratio buffer (%) | N/A | N/A | N/A | [b] |   |
|  Liquidity Coverage Ratio  |   |   |   |   |   |   |
|  15 | Total high-quality liquid assets ('HQLA') (Weighted value -average) | 2,439.5 | 2,924.8 | 3,049.1 | [c] | UK LIQ1 Section 8.2  |
|  UK 16a | Cash outflows - Total weighted value | 1,931.2 | 1,936.6 | 1,785.5 | [c] | UK LIQ1 Section 8.2  |
|  UK 16b | Cash inflows - Total weighted value | 347.8 | 342.0 | 332.9 | [c] | UK LIQ1 Section 8.2  |
|  16 | Total net cash outflows (adjusted value) | 1,583.5 | 1,594.5 | 1,452.6 | [c] | UK LIQ1 Section 8.2  |
|  17 | Liquidity coverage ratio (%) | 154.0 | 183.2 | 211.5 | [d] | UK LIQ1 Section 8.2  |

Page 8
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

|   |   | a 30 Sep 25 £m | c 31 Mar 25 £m | e 30 Sep 24 £m | Notes | Further information  |
| --- | --- | --- | --- | --- | --- | --- |
|  Net Stable Funding Ratio  |   |   |   |   |   |   |
|  18 | Total available stable funding | 18,036.8 | 19,076.8 | 19,506.0 | (e) | UK LIQ2 Section 8.4  |
|  19 | Total required stable funding | 13,007.8 | 13,439.0 | 14,120.8 | (e) | UK LIQ2 Section 8.4  |
|  20 | NSFR ratio (%) | 138.7 | 142.0 | 138.2 | (e) | UK LIQ2 Section 8.4  |

Notes:
[a] These buffers are not currently applicable to the Group.
[b] These lines are only required for LREQ banks, as defined by the PRA Rulebook. The Group's balance sheet size is too small to be classified as an LREQ bank.
[c] These measures are based on a 12-month rolling average of month-end positions.
[d] This measure is based on a 12-month rolling average of month-end positions, therefore cannot be derived from the values given above it.
[e] These measures are based on a 4-quarter rolling average of quarter-end positions.

## 2.2 UK OV1 – Overview of risk weighted exposure amounts

|   | Risk weighted exposure amounts (RWEAs) |   | Total own funds requirements | Further information  |   |
| --- | --- | --- | --- | --- | --- |
|   |   |  a | b |   | c  |
|   |   |  30 Sep 25 | 30 Sep 24 |   | 30 Sep 25  |
|   |   |  £m | £m |   | £m  |
|  1 | Credit risk (excluding CCR) | 7,658.8 | 7,351.1 | 612.7 | Section 11, template UK CR4  |
|  2 | Of which the standardised approach | 7,658.8 | 7,351.1 | 612.7  |   |
|  3 | Of which the foundation IRB ('FIRB') approach
| - | - | -  |
|
|  4 | Of which slotting approach
| - | - | -  |
|
|  UK 4a | Of which equities under the simple risk weighted approach
| - | - | -  |
|
|  5 | Of which the advanced IRB ('AIRB') approach
| - | - | -  |
|
|  6 | Counterparty credit risk - CCR | 43.5 | 79.6 | 3.4  |   |
|  7 | Of which the standardised approach | 26.8 | 50.4 | 2.1 | Section 12, template UK CCR1  |
|  8 | Of which internal model method ('IMM')
| - | - | -  |
|
|  UK 8a | Of which exposures to a CCP | 2.4 | 2.3 | 0.2 | Section 12, template UK CCR8  |
|  UK 8b | Of which credit valuation adjustment - CVA | 16.7 | 29.2 | 1.3 | Section 12, template UK CCR2  |
|  9 | Of which other CCR
| - | - | -  |
|
|  10 | Empty set in the UK |  |  |   |   |
|  11 | Empty set in the UK |  |  |  |   |
|  12 | Empty set in the UK |  |  |   |   |
|  13 | Empty set in the UK |  |  |   |   |
|  14 | Empty set in the UK |  |  |   |   |
|  15 | Settlement risk
| - | - | -  |
|
|  16 | Securitisation exposures in the non-trading book (after the cap)
| - | - | - |
Section 13  |
|  17 | Of which SEC-IRBA approach
| - | - | -  |
|
|  18 | Of which SEC-ERBA (including IAA)
| - | - | -  |
|
|  19 | Of which SEC-SA approach
| - | - | -  |
|
|  UK 19a | Of which 1250%/ deduction
| - | - | -  |
|

Page 9

---

|   | Risk weighted exposure amounts (RWEAs) |   | Total own funds requirements | Further information  |   |
| --- | --- | --- | --- | --- | --- |
|   |   |  a 30 Sep 25 £m | b 30 Sep 24 £m |   | c 30 Sep 25 £m  |
|  20 | Position, foreign exchange and commodities risks (Market risk)
| - | - | - |
Sections 14 and 15  |
|  21 | Of which the standardised approach
| - | - | - |
|
|  22 | Of which IMA
| - | - | - |
|
|  UK 22a | Large exposures
| - | - | - |
|
|  23 | Operational risk | 928.3 | 848.0 | 74.3 | Section 16, template UK OR1  |
|  UK 23a | Of which basic indicator approach | 928.3 | 848.0 | 74.3 | Section 16, template UK OR1  |
|  UK 23b | Of which standardised approach
| - | - | - |
|
|  UK 23c | Of which advanced measurement approach
| - | - | - |
|
|  24 | Amounts below the thresholds for deduction (subject to 250% risk weight) (For information)
| - | - | - |
|
|  25 | Empty set in the UK |  |  |  |   |
|  26 | Empty set in the UK |  |  |  |   |
|  27 | Empty set in the UK |  |  |  |   |
|  28 | Empty set in the UK |  |  |  |   |
|  29 | Total | 8,630.6 | 8,278.7 | 690.5 |   |

## 2.3 IFRS 9 / Article 468 - Impact of IFRS 9 transitional arrangements &amp; temporary treatment in accordance with CRR Article 468

The Group had previously elected to take advantage of the IFRS 9 transitional arrangements set out in Article 473a of the CRR, which allowed the capital impact of expected credit losses to be phased in over a five-year period. The phase-in factors applying to transition adjustments allowed for a 95% add back to CET1 capital and Risk Weighted Assets ('RWA') in the financial year ended 30 September 2019, reducing to 85%, 70%, 50% and 25% for the financial years ending in 2020 to 2023, with full recognition of the impact on CET1 capital in the 2024 financial year.

As part of the regulatory response to Covid, Article 473a was revised to extend the transitional arrangements for Stage 1 and Stage 2 impairment provisions created in the financial year ended 30 September 2020 and the financial year ended 30 September 2021, while maintaining the transitional arrangements for impairment provisions created before those years. In order to increase institutions lending capacity in the short term, the EU determined that these additional provisions should be phased into capital over the financial years ending 30 September 2022 to 30 September 2024, rather than recognising the reduction in capital immediately. As such the financial year ending 30 September 2025 will now be the first period with full recognition of the impact on CET1 capital.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

The table disclosed below now fully aligns with the capital and leverage metrics which are disclosed throughout this report in sections 6 and 7 respectively.

|  £m |   | 30 Sep 25 £m | 30 Sep 24 £m  |
| --- | --- | --- | --- |
|  Available capital (amounts)  |   |   |   |
|  1 | Common Equity Tier 1 ('CET1') Capital | 1,172.4 | 1,177.9  |
|  2 | Common Equity Tier-1 ('CET1') capital as if IFRS 9 or analogous ECLs transitional arrangements had not been applied | 1,172.4 | 1,175.2  |
|  2a | CET1 capital as if the temporary treatment of unrealised gains and losses measured at fair value through OCI (other comprehensive income) in accordance with Article 468 of the CRR had not been applied | 1,172.4 | 1,177.9  |
|  3 | Tier-1 capital | 1,172.4 | 1,177.9  |
|  4 | Tier-1 capital as if IFRS 9 or analogous ECLs transitional arrangements had not been applied | 1,172.4 | 1,175.2  |
|  4a | Tier-1 capital as if the temporary treatment of unrealised gains and losses measured at fair value through OCI in accordance with Article 468 of the CRR had not been applied | 1,172.4 | 1,177.9  |
|  5 | Total capital | 1,322.4 | 1,327.9  |
|  6 | Total capital as if IFRS 9 or analogous ECLs transitional arrangements had not been applied | 1,322.4 | 1,325.3  |
|  6a | Total capital as if the temporary treatment of unrealised gains and losses measured at fair value through OCI in accordance with Article 468 of the CRR had not been applied | 1,322.4 | 1,327.9  |
|  Risk-weighted assets (amounts)  |   |   |   |
|  7 | Total risk-weighted assets | 8,630.7 | 8,278.7  |
|  8 | Total risk-weighted assets as if IFRS 9 or analogous ECLs transitional arrangements had not been applied | 8,630.7 | 8,276.0  |
|  Capital ratios  |   |   |   |
|  9 | Common Equity Tier-1 (as a percentage of risk exposure amount) | 13.6% | 14.2%  |
|  10 | Common Equity Tier-1 (as a percentage of risk exposure amount) as if IFRS 9 or analogous ECLs transitional arrangements had not been applied | 13.6% | 14.2%  |
|  10a | CET1 (as a percentage of risk exposure amount) as if the temporary treatment of unrealised gains and losses measured at fair value through OCI in accordance with Article 468 of the CRR had not been applied | 13.6% | 14.2%  |
|  11 | Tier-1 (as a percentage of risk exposure amount) | 13.6% | 14.2%  |
|  12 | Tier-1 (as a percentage of risk exposure amount) as if IFRS 9 or analogous ECLs transitional arrangements had not been applied | 13.6% | 14.2%  |
|  12a | Tier-1 (as a percentage of risk exposure amount) as if the temporary treatment of unrealised gains and losses measured at fair value through OCI in accordance with Article 468 of the CRR had not been applied | 13.6% | 14.2%  |
|  13 | Total capital (as a percentage of risk exposure amount) | 15.3% | 16.0%  |
|  14 | Total capital (as a percentage of risk exposure amount) as if IFRS 9 or analogous ECLs transitional arrangements had not been applied | 15.3% | 16.0%  |
|  14a | Total capital (as a percentage of risk exposure amount) as if the temporary treatment of unrealised gains and losses measured at fair value through OCI in accordance with Article 468 of the CRR had not been applied | 15.3% | 16.0%  |
|  Leverage ratio  |   |   |   |
|  15 | Leverage ratio total exposure measure (£m) | 17,651.1 | 16,807.9  |
|  16 | Leverage ratio | 6.6% | 7.0%  |
|  17 | Leverage ratio as if IFRS 9 or analogous ECLs transitional arrangements had not been applied | 6.6% | 7.0%  |
|  17a | Leverage ratio as if the temporary treatment of unrealised gains and losses measured at fair value through OCI in accordance with Article 468 of the CRR had not been applied | 6.6% | 7.0%  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Page 12
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

## 2.4 UK OVC – ICAAP information

### (a) Approach to assessing the adequacy of the internal capital (Article 438(a) CRR)

The Group's capital risk appetite has been set at a level which ensures that, at all times, it will maintain own funds which are adequate to meet the internal requirements of the Board as well as the PRA's overall financial adequacy rule.

The Group undertakes an Internal Capital Adequacy Assessment Process ('ICAAP') which challenges the amount, and quality, of capital which is required to maintain a strong balance sheet characterised by strong liquidity, superior asset quality and a capital structure which supports the risk taking activities of the Group and its ability to absorb losses.

The Pillar 2A assessment considers firm-specific risks and risks not included in Pillar 1. Pillar 2B considers the impact of a range of plausible but severe economic scenarios on the Group's capital resources and requirements, and the actions that could be taken to manage the capital position during periods of stress, across a five-year planning horizon. A comprehensive scenario library, which is derived from a principal risk and vulnerability review, supports the Pillar 2A and 2B assessments.

The Group's Corporate Plan is developed with input from Finance, Risk, Treasury and the business lines, and forms the foundation for financial modelling and stress testing used as part of the ICAAP.

The ICAAP is reviewed by each of the Executive Risk Committee ('ERC') and the board-level Risk and Compliance Committee ('RCC') and is approved by the Board on their recommendation. Performance metrics are reviewed and monitored by the Asset and Liability Committee ('ALCO') and through Credit Committee.

The ICAAP was most recently completed in April 2025 and is undertaken at least annually or more frequently should the need arise, for example on a significant acquisition or disposal, or change in the Group's risk profile.

### (b) Result of the Group's internal capital adequacy assessment process (Article 438(a) CRR)

Under Annex II to the Disclosure (CRR) Part of the Rulebook, this information shall only be disclosed by institutions when required by the relevant competent authority. This has not been demanded from the Group.

## 2.5 UK INS1 – Insurance participations

The Group has no own funds held in insurance or reinsurance firms therefore template UK INS1 has not been presented.

## 2.6 UK INS2 – Financial conglomerates information on own funds and capital adequacy ratio

Financial conglomerates are large groups with significant activities in more than one financial sector (banking, investment, insurance). The Group does not qualify as a financial conglomerate therefore template UK INS2 has not been presented.

---

# 3. Risk management

## This section sets out

- An overview of the Group's risk management processes, including
- Risk statement
- The risk management framework
- The process of risk governance
- Strategies and processes to manage risks
- The process by which the Group's risk appetite is set with regard to those risks and the principal measures used to monitor them
- Details of the Board's assessment of the Group's risk management processes in the year
- Recruitment policy for the selection of members of management and their actual knowledge, skills and expertise

The way that the Group manages risk is fundamental to its soundness and to the level of capital it is required to carry to protect depositors. The Rulebook requires certain disclosures about the Group's approach to risk management and governance, to place the disclosures dealing with specific aspects of risk in their proper context.

The Group is exposed to a number of principal risks and uncertainties that arise from the operation of its business model and strategy. The identified principal risks are set out below.

|  Capital risk | Liquidity and funding risk | Market risk | Credit risk | Model risk  |
| --- | --- | --- | --- | --- |
|  Reputational risk | Strategic risk | Climate change risk | Conduct risk | Operational risk  |

This section discusses the Group's overarching process to manage all of these risks, including its use of its Enterprise Risk Management Framework ('ERMF') with additional information on particular risks provided in the relevant section of the document where required by the Rulebook.

## 3.1 UK OVA - RISK MANAGEMENT APPROACH

### (a) Risk Statement approved by the management body (Point (f) of Article 435(1) CRR)

Effective risk management is core to the execution of the Group's strategy.

The Group's activities necessarily incur an element of risk; however the Group seeks to protect itself and its stakeholders from the adverse impacts of risk through:

- defining a strategy to support the Group's attitude to risk, including outlining the approach taken to setting qualitative statements and quantitative metrics to define and assess the Group's appetite and tolerance for risk across its principal risk exposures
- establishing a consistent risk taxonomy, describing the principal risk categories and the more granular aspects of each of these risks
- promoting an appropriate risk culture across the Group, ensuring that risk is considered as part of all key strategic and business decision-making
- establishing standards for the consistent identification, assessment, treatment, monitoring and reporting of risk exposure and loss experience

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

- promoting risk management techniques to proactively reduce the frequency and severity of risk events, driving control improvements where necessary
- facilitating adherence to regulatory requirements, including threshold conditions, capital standards and supporting the regulatory requirements associated with the ICAAP, the ILAAP and the Recovery Plan
- providing senior management and relevant committees with risk reporting that is relevant and appropriate, enabling timely action to be taken in response
- defining risk policies which align to the Group's principal risks and identify the minimum control requirements and key indicators to manage and measure these risks

The ERMF is intended to provide a robust, proportionate, structured and consistent approach to the management of risk within agreed appetites, thereby supporting the achievement of the Group's strategic objectives. To support this the Group employs a 'three lines of defence model' to delineate responsibilities in the management of risk ensuring adequate segregation in the oversight and assurance of risk.

The Group's independent risk function, which is led by the Chief Risk Officer ('CRO'), provides oversight and challenge of risk management practices and performance, with the Internal Audit function providing assurance to the Board on the overall effectiveness of the internal control environment.

The current suite of principal risks that the Group is seeking to manage to meet its strategic objectives, the processes used to manage and mitigate those risks, and the principal risk committee that oversees each of these, is set out below.

Operational risk includes a number of subsidiary risks, including: risks related to the use of IT (information technology, information security, data protection and data management), including cyber risk; risk related to employees and employment practices; risks related to change management; risks related to the Group's use of significant third parties to facilitate its operations; financial crime risk; and risks related to financial reporting and control.

## Capital Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk that the Group's capital becomes insufficient to operate effectively, including meeting minimum regulatory requirements, operating within board-approved risk appetite, and supporting our strategic goals | A robust process exists over reporting capital metrics, both internally and to the PRA, with a comprehensive annual ICAAP assessment including all material capital risks. An internal capital buffer is maintained in excess of minimum regulatory requirements to protect against unexpected losses and intra-period volatility. | Executive Risk Committee  |
|  The Bank of England has published its final policy for the implementation of the Basel 3.1 standards in the UK, currently intended to be effective from 1 January 2027, which raises the capital requirement for buy-to-let mortgage loans, our largest asset class. | We continue to engage with the PRA in respect of the application for the accreditation of our IRB approach to buy-to-let credit risk, responding to feedback as the regulator proceeds with its internal assessment process. We retain the option to apply for the Small Domestic Deposit Takers ('SDDT') regime in due course. |   |

Further information on the Group's exposure to, and management of capital risk is given in Sections 5 to 7

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Page 15
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

# Liquidity and Funding Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk that the Group has insufficient liquidity and funding resources to meet its obligations as they fall due, cannot raise or maintain sufficient funds to finance its future plans or can only secure such resources at excessive cost and / or encumbrance. | The Group maintains a diversified range of both retail and wholesale funding sources to cover current and future business requirements. | Asset and Liability Committee  |
|   | Comprehensive treasury policies are in place to ensure sufficient liquid assets are maintained and that all financial obligations can be met as they fall due, even under stressed conditions. |   |
|   | The Group has a dedicated Treasury function, which is responsible for the day-to-day management of its overall liquidity and wholesale funding. The Board, through the delegated authority provided to the ALCO, sets limits for the level, composition and maturity of funding and liquidity resources. |   |
|   | The Group's covered bond programme, put in place in the year, provides a relatively quick and cost-effective means of raising additional wholesale funding when conditions are appropriate. |   |
|   | The Group's holdings of its own mortgage-backed securities, together with assets pre-positioned with the Bank of England, mean that it has ready access to wholesale funding or liquidity if required. |   |

Further information on the Group's exposure to, and management of liquidity and funding risk is given in Section 8

# Market Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk that changes in the interest rates at which the Group lends and those at which it borrows may adversely affect net interest income and profitability. | This risk is managed within board-approved risk appetite limits with comprehensive treasury policies in place to ensure that the risks posed by changes and mismatches in interest rates are effectively managed. | Asset and Liability Committee  |
|   | Day-to-day management of interest rate risk within board-approved limits is the responsibility of the treasury function, with control and oversight provided by ALCO. |   |
|   | The Group seeks to match the maturity profile of assets and liabilities and uses financial instruments, such as interest rate swaps, to hedge the exposure arising from repricing mismatches. |   |

Further information on the Group's exposure to, and management of market risk is given in Sections 14 and 15

---

# Credit Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk of financial loss arising from a borrower or counterparty failing to meet their financial obligations to the Group when they fall due, or a change in the credit quality of the third party or instrument, as evidenced by a change in its credit ratings (as determined by the applicable ratings system) | The Group has a robust credit risk framework supported by comprehensive policies in place that set out detailed criteria which must be met before loans are approved. Exceptions to credit policies require approval by the Credit Risk function, operating under a mandate from the Credit Committee. | Credit Committee  |
|   |  The Group uses a range of sources to inform expectations of key external factors such as interest rate movements and house price inflation which are in turn used to guide policy and underwriting.  |   |
|   |  The Group also continues to develop opportunities to diversify the range of its activities and income streams, consistent with its strategic objective of operating as a prudent, risk-focussed specialist lender.  |   |
|  Credit risk elements which could expose the Group to the risk of unexpected material losses include: | The majority of the Group's loans by value continue to be secured against UK residential property at conservative loan-to-value levels. The primary collateral therefore forms part of a highly mature, sustainable market, demonstrated over many decades of operation.  |   |
|  • Customer risks through failure to screen potential borrowers, or to manage repayments  |   |   |
|  • Concentration risk in credit portfolios through an uneven distribution of exposures of borrowers, asset classes, sectors or geographies  |   |   |
|  • Reduction in the value of collateral owned by the Group, or secured against debt owed to it | Exposure to wholesale counterparty credit risk, which is supervised by the Asset and Liability Committee ('ALCO'), is limited to counterparties that meet specific credit rating criteria per the Group's comprehensive treasury policies. Exposure to approved counterparties is monitored daily by senior management within the Group's Treasury function with all exposure managed within ALCO-approved limits.  |   |
|  • Wholesale counterparty risk  |   |   |
|  • Outsourcer default risk | Ongoing monitoring of the credit rating and financial performance of all outsourced relationships and critical suppliers is undertaken by the Credit Risk team and reported through to the Operational Risk Committee as part of their oversight of third party risk.  |   |

Further information on the Group's exposure to, and management of credit risk is given in Sections 9 to 12

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# Model Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk that the Group may make incorrect decisions based on the output of internal statistical models, due to errors in the development, implementation or use of such models resulting in a loss or misreporting within financial statements | A robust framework of management and governance is in place to manage the risks associated with the use of internally developed models. This includes the Model Risk Committee ('MRC') which oversees the development, implementation and ongoing monitoring of models across the Group. | Model Risk Committee  |
|  Models are used across the Group to inform financial decision making and hence it is imperative that the environment in which the models are designed, implemented and operate is subject to appropriate rigour. | The Model Risk Management Framework provides a structured and disciplined approach to the management of model risk. It includes clear development, implementation and ongoing oversight principles, together with requirements for independent validation based on model materiality criteria. |   |
|   | PRA Supervisory Statement SS 1/23 addresses model risk management principles for banks and applies to firms with permission to use internal models to calculate regulatory capital. The Group is undertaking a programme of work to ensure compliance with the principles of the Supervisory Statement in advance of receiving IRB accreditation and is therefore well-placed to meet the requirements within the timeframes required. This, in turn, means that our approach to managing this risk more generally complies with recognised external benchmarks. |   |

# Reputational Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk of negative consequences arising from a failure to meet the expectations and standards of the Group's customers, investors, regulators, or other stakeholders whilst undertaking business activities | The reputational risk policy supports reputational risk management across the Group. Reputational issues are considered at Board and ExCo level and, where relevant, will be identified, reviewed and escalated through the risk committee governance structure. | Executive Risk Committee  |
|  Maintenance of a strong reputation across all business lines, operational activities, and the conduct of employees and associated third parties is core to the Group's philosophy. | The reputational impacts of changes to strategy, pricing, people, processes or third-party relationships are explicitly considered in the decision-making process and are reviewed by the Director of External Relations. The Group will not undertake any activity it considers might be damaging to its reputation. |   |
|  Detrimental reputational impacts may result from internal actions and external events, as a consequence of the crystallisation of other principal risks, or through failure to safeguard the integrity of the Group's brand or meet external expectations in its business practices, or any combination of these. | Employees adhere to defined standards of conduct, encompassing policies, procedures and ways of working. These are defined in the Group's publicly available Code of Conduct. |   |
|   | The Group has an experienced External Relations function which manages all Group communications and ensures that the reputational profile of the Group is protected. Reputational risk is monitored through tracking traditional and social media coverage, net promoter scores, review platforms and regular customer surveys. |   |
|   | Any material risk events are reviewed for reputational impact, and mitigating actions are initiated as appropriate. |   |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# Strategic Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk that the corporate plan does not fully align to and support the strategic priorities or is not executed effectively as a result of external factors, incorrect planning assumptions or insufficient or inadequate resources. | The Group closely monitors economic developments in the UK and overseas, with support from leading independent macro-economic and other advisors. | Executive Risk Committee  |
|   | Stress testing is performed to assess its expected performance under a range of operating conditions. This provides the Board with an informed understanding and appreciation of the Group's capacity to withstand shocks of varying severities. |   |
|  The Group's strategy as a specialist lender is key to its operating model and business planning. However, there is a risk that changes to its business model, or macroeconomic, geopolitical, regulatory, competitive or other external factors may impact delivery of strategic objectives. | The Group continues to exploit opportunities to diversify the range of its activities and income streams, consistent with its strategic objective of operating as a prudent, risk-focussed lender. |   |

# Climate Change Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk of climate changes impacting the Group either directly or indirectly through its third-party relationships or its lending activities. | The Group proactively manages physical risk and has specific underwriting policies aimed at the mitigation of, for example, risks associated with flooding, coastal erosion, and subsidence. | Executive Risk Committee  |
|  This includes both the transitional risk to its strategy and profile through external measures to progress to a low-carbon environment, and any physical risks arising from changes to the natural environment that could impact the calculation and valuation of assets and liabilities. | The Sustainability Committee, which reports to Performance ExCo, provides comprehensive oversight of climate initiatives across each business line, whilst the Credit Committee additionally monitors the performance of mortgaged property collateral against EPC data and concentration of electric vehicles. |   |
|   |  The potential for transition risk is monitored within the different business lines, with external events prompting consideration of amendments to credit policy and underwriting criteria. Other climate risk mitigation levers, such as offering sustainable products, are available to support the evolution of our balance sheet in line with the markets in which we operate, mitigating stranded asset risk. |   |
|   |  The Group continues to actively engage with public forums such as Bankers for Net Zero ('B4NZ'), and UK Finance to support the development of future policy and regulation. |   |
|   |  Ongoing and enhanced climate change analysis, supported by scenario testing, continues to be developed and expanded to cover a broader asset range to inform longer-term strategic planning. |   |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# Conduct Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk that the Group's culture drives poor behaviours or decision making in the execution of its business activities which leads to failure to deliver good outcomes for customers and / or the inability to demonstrate that the Group is acting with integrity in the market | The management of conduct risk within the Group is tailored to the specific product and customer type and includes dedicated quality and control teams. These teams focus on validating process adherence, measuring the delivery of good customer outcomes, and overseeing the appropriate management of those customers showing signs of vulnerability, including those in financial difficulties. | Customer and Conduct Committee  |
|  The commitment to delivering good customer outcomes is at the heart of the Group's culture and strategy. | All employees, whether customer-facing or not, have clear customer-focused objectives, acknowledging their ability to drive a culture designed to deliver good customer outcomes. |   |
|  Conduct risk arises where the culture and behaviours fail to promote the customer's best interests and avoid foreseeable consumer harm, resulting in poor outcomes for them. | The Group's approach to employee remuneration means that very few employees are included in financial incentive schemes. The remuneration policy is reviewed by the Remuneration Committee annually and individual schemes require approval from the Chief People Officer (who holds the SMF which covers incentives), CFO and Conduct and Compliance Director before implementation. |   |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# Operational Risk

|  Description | Mitigation | Risk Management Committee  |
| --- | --- | --- |
|  The risk of financial or non-financial detriment resulting from the possible inadequacy or failure of internal procedures, people and systems or from external events. | The Group has an established operational risk framework, which enables timely and accurate analysis of operational risk exposures and drives accountability and remedial actions where issues are identified. | Operational Risk Committee  |
|  Operational risk is inherently diverse in nature. All the Group's activities create various forms of operational risk which need to be managed through a strong control and oversight structure. Exposure to operational risk will be exacerbated through periods of transformation and / or stress. | Operational risk is managed through a comprehensive framework of policies, which are designed to ensure that all key operational risks are managed consistently across the business. The operating landscape continues to evolve at a rapid pace, bringing with it innovative technologies. Whilst keen to embrace these opportunities, the ongoing resilience of the Group remains a core priority. The increasing use of AI, the commitment to harness digital capability as part of the IT roadmap and the reliance on third parties all increase the surface area for malevolent cyber activity against the Group. In response, the Group continues to invest in cyber defences, and ensuring it is well-prepared in the event of any cyber attack is a priority area. Our cyber profile is therefore subject to continued monitoring and enhancement given the dynamic nature of the threat. The Group continues to monitor the external landscape and react promptly to any intelligence on cyber threats that have the potential to cause detriment. Whilst remaining alert to such emerging threats the Group also recognises the need to reduce operational risk exposures inherent in its legacy systems and processes. Strategic transformation across all its lending lines is key to remaining resilient and ensuring that infrastructure remains scalable and robust across all product lines. As we undertake such activity, the impact on our resilience and the impact on inherent operational risks is assessed on a continual basis to ensure it remains within risk appetite. A well-embedded change framework ensures that changes are managed in a controlled way. Operational resilience remains a key driver with consideration at all stages of the project lifecycle. A consequence of the Group's change programme is the expanding use of third-party providers. We have several significant suppliers and outsourced activities particularly in respect of material IT services and the Paragon-branded savings offering. The number of such suppliers has expanded significantly over the year with the launch of the Spring savings business. The robust oversight of third parties remains critical to overall resilience, and the Group has a well-established third-party framework to ensure effective oversight across the lifecycle of such relationships including contingency arrangements in the event of an exit scenario. The Group continues to focus on building an engaged and highly-skilled workforce through the delivery of effective reward, succession planning, recruitment, development and retention strategies. In addition, the Group remains committed to the wellbeing of its employees and responding to their feedback, enabled through its multiple employee networks. |   |

Further information on the Group's exposure to, and management of operational risk is given in Section 16

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

There are no transactions with related parties within the Group that have a material impact on the risk profile of the Group. The Group does not have any affiliates.

The Group's risk appetite is aligned to its principal risks and is supported by board, ERC and executive sub-committee level measures underpinned by tolerances that align to the risk appetite thresholds.

These measures are subject to regular review by the relevant risk management committee, with any ERC or sub-committee level measure exceeding its tolerance being escalated to higher-level committees as appropriate.

Risk appetite measures are reviewed as part of the annual review of the principal risk policy and, in addition, holistically reviewed by the Board annually as part of the corporate planning process and setting of the Group's strategy.

Embedding the Group's ERMF, remains ongoing and the Group is committed to a process of continuous improvement to ensure the framework remains fit for purpose and proportionate. A regular assessment of risk maturity is undertaken to evaluate the effectiveness of the framework and to drive any focus areas for improvement.

(b) Information on the risk governance structure for each type of risk (Point (b) of Article 435(1) CRR)

The Group has an integrated framework for risk management, which addresses all of the identified risks noted above. This governance structure is outlined below.

Governance

The Board is accountable for the management of the principal risks facing the Group. It delegates oversight responsibility to the Risk and Compliance Committee ('RCC') and receives regular reports on the status of each principal risk from the ERC, via the Chief Executive Officer ('CEO'). The RCC receives regular reporting on each principal risk and the Chief Risk Officer ('CRO') provides an update on the activities of the ERC at each RCC meeting. The oversight of the management of each principal risk, other than model risk, is delegated by the ERC to the relevant risk management committee, which monitors performance against risk appetite on an ongoing basis.

Responsibility for the oversight of model risk has been delegated by the RCC to the MRC.

Board-level committees and sub-committees contributing to the risk governance process are shown below:

Paragon Banking Group PLC Board

Audit Committee

Assists the Board in fulfilling its oversight responsibilities by reviewing and monitoring:
- the integrity of the financial information provided to shareholders
- the Group's systems of internal financial control and other control systems
- the internal and external audit process and auditors
- the process for compliance with laws and regulations

Risk and Compliance Committee

Reviews, on behalf of the Board, management's recommendations on enterprise risk, in particular:
- the Group's current and future risk appetite including the extent and categories of risk which the Board regards as acceptable
- the Group's enterprise risk management framework including principles, supporting frameworks, risk policies, personnel and procedures
- the risk culture, to ensure that it supports the Group's risk appetite
- the strategy to ensure that it promotes integrity in the market, the fair treatment of customers and good outcomes for retail customers as central to operations and culture
- the Group's processes for compliance with laws, regulations and ethical codes of practice and prevention of fraud

Model Risk Committee ('MRC')

The MRC is a subsidiary committee of the RCC, and its role is to review and make recommendations on all material aspects of the rating and estimation processes in relation to key credit and finance models. The MRC also acts as the 'Designated Committee' for IRB purposes, approving all material aspects of IRB rating systems.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Under the leadership of the CEO, there are a number of risk management committees that oversee management of risk across the Group, as follows:

## Executive Risk Committee

Oversight of Reputational, Climate Change and Strategic Risk

Assists the CEO in designing and embedding the Group's risk framework, monitoring adherence to risk appetite statements, identifying, assessing and managing the principal risks within the Group and reviewing stress and scenario testing of the Group's strategic and business plans. The ERC has direct responsibility for Strategic, Climate Change and Reputational Risk but delegates the oversight of certain other principal risks to its sub-committees, as described below. The ERC reviews all Principal Risk and level 2 Risk Policies and recommends changes to Principal Risk Policies to the Board Risk and Compliance Committee. The ERC oversees the development and maintenance of the Strategic and Reputational Risk policies and adherence to them, and monitors the interaction and integration of business objectives, strategy and plans with risk appetite and risk strategy.

## Asset and Liability Committee ('ALCO')

Oversight of capital risk, liquidity and funding risk, market risk and wholesale counterparty credit risk

The principal purpose of ALCO is to monitor and review the financial risk management of the Group's balance sheet. As such, it is responsible for overseeing all aspects of market risk, liquidity risk, pricing and capital management as well as the treasury control framework. ALCO operates within clearly delegated authorities, monitoring exposures and providing recommendations on actions required.

## Credit Committee ('CC')

Oversight of credit risk

The Credit Committee approves credit risk policies in respect of customer exposures and defines risk grading and underwriting criteria for the Group. It also provides guidance and makes recommendations in order to implement the Group's strategic plans for credit. It oversees the management of the credit portfolios, the post-origination risk management processes and the management of past due or impaired credit accounts. It also monitors performance against appetite and operates the most senior lending mandate.

## Customer and Conduct Committee ('CCC')

Oversight of conduct risk and regulatory compliance risk

Responsible for overseeing the management of the Group's conduct risk and regulatory compliance risk (including financial crime risk). The CCC considers conduct risk information, such as details of conduct or regulatory breaches; systems and procedures for delivering good outcomes to customers; the product governance framework; and monitoring reports. It is responsible for overseeing adherence to FCA Consumer Duty principles and outcomes.

## Operational Risk Committee ('ORC')

Oversight of operational risk

The ORC is responsible for overseeing the Group's operational risk and resilience arrangements, including those systems and controls intended to counter the risk that the Group might be used to further financial crime. The remit of the ORC also includes risks arising from personnel, technology and environmental matters within the business, including those arising from the use of third parties.

## Model Review Group

Oversight of model risk

Model Review Group is a technical forum whose purpose is to review the performance of all models recorded on the Group's Model Inventory. Due to the nature of the risk the Model Review Group reports directly to the Model Risk Committee

To support this approach the Group operates a formal "three lines of defence" governance model. The three lines of defence governance model ensures appropriate responsibility and accountability is allocated to management and enables the Group to separate risk management activities between those that:

- Own and take risk, and implement controls (Line 1)
- Oversee and challenge Line 1 and provide risk management activity including overseeing the frameworks and standards for risk management and supporting controls (Line 2)
- Provide assurance that the risk management process is fit-for-purpose, and this is being carried out as intended (Line 3)

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

A summary of the three lines of defence model is set out below.

## Three lines of defence

|  Line 1 | Line 2 | Line 3  |
| --- | --- | --- |
|  Operational and support areas that own and manage risk within agreed limits | Risk and Compliance function which designs, implements and oversees the ERMF and provides support and challenge | Internal Audit function which independently assesses the effectiveness of risk management  |

- The first line of defence ('Line 1'), comprises executive directors, managers and employees in operational and support areas. Line 1 has day-to-day responsibility for:
- Risk identification, assessment, treatment, monitoring and reporting
- Control implementation, and ongoing monitoring and assessment of operations
- Management, escalation and reporting of risk issues against stated appetites

Risk Champions are appointed within all business areas to support the embedding of an effective risk culture across the Group

- The second line of defence ('Line 2') is provided by the independent Risk and Compliance function. This division is headed by the CRO, who is a member of the Group's Performance Executive Committee and chairs the ERC. The function is overseen by the RCC, ERC and its supporting executive committees. Line 2 provides support and independent challenge on all risk-related issues specifically:
- Developing and maintaining and monitoring effectiveness of the ERMF across the Group
- Developing and maintaining supporting risk processes within that framework, ensuring these are consistent with the Board's risk appetite
- Ensuring that risks identified by Line 1 are measured, monitored, controlled and reported consistently and on a timely basis
- Maintaining open and constructive engagement with the regulatory authorities

The CRO attends meetings of the RCC and the Board to report directly to the directors on risk issues and has a close working relationship with the Chair of the RCC, an independent non-executive director.

- The third line of defence ('Line 3') is provided by the Internal Audit function, which is responsible for reviewing the effectiveness of Line 1 and Line 2. This function is overseen by the Audit Committee and led by the Chief Internal Auditor who reports directly to the Chair of the Audit Committee. Internal Audit provides independent assurance on:
- Line 1 and Line 2 risk management activities
- Effectiveness of the ERMF
- The appropriateness and effectiveness of internal controls
- Effectiveness of policy implementation

## Policy and control

The Group's risk policies are an integral part of the ERMF. The policies are aligned to the principal risks and, in some cases, sub-risk categories. These are executive-owned and:

- Set the principles for managing the risk
- Define the relevant risk appetite measures, metrics and thresholds
- Set the standards and minimum control requirements for the risk

It is the supporting minimum control requirements that set out the control environment for the effective management of the risk within appetite, and inform the business-level key controls that need to be in operation. Under the Risk and Control Self-Assessment ('RCSA') process these controls are then tested on a regular basis.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

As part of the ongoing development of the ERMF further refinement of the risk and control inventories continues to be undertaken through refresh of the policies and ensuring the minimum control requirements are embedded within the RCSAs to reflect the organisational structure and strategy of the Group. This helps to inform the approach to risk assurance, facilitating better planning and targeted reviews to ensure focus is maintained on higher risk areas or where specific controls need strengthening. A consolidated Second Line assurance plan is in place which sets out the various types of assurance activity to be undertaken and covers all principal risk categories, including the sub-categories of operational and conduct risk. Updates on progress and any proposed changes to the assurance plan are regularly reported to the RCC.

The Rulebook (in Annex IV) requires that changes in certain roles related to risk management should be disclosed in a firm's Pillar III reporting. There have been no changes of the CRO, Internal Audit Director, Enterprise Risk Director or Conduct and Compliance Director during the period. However, the job title of the Internal Audit Director was changed to Chief Internal Auditor from 1 October 2024, although her reporting line and mandate remain the same.

(c) Declaration approved by the management body on the adequacy of the risk management arrangements (Point (e) of Article 435(1) CRR)

The Board, as the management body, monitors the Group's risk management and control systems and carries out an annual review of the effectiveness of control. Based on the current year's review it has been acknowledged that "the Group's control environment is felt to be adequate".

(d) Disclosure of the scope and nature of risk disclosure and/or measurement systems (Point (c) of Article 435(1) CRR)

The statement set out in 'c' above is reviewed by the Audit Committee and approved by the Board following an annual review of the effectiveness of control undertaken by Second and Third lines, and forms the annual attestation.

(e) Disclosure information on the main features of risk disclosure and measurement systems (Point (c) of Article 435(1) CRR)

The RCC's annual review of effectiveness of control includes assessment of the effectiveness of the Group's system of governance, risk management and control across the principal risk categories. The assessment extends across all principal risk categories and is informed by information gathered from internal sources such as risk and control self-assessment and covers, but is not limited to: risk profiles, control effectiveness, risk event management and action management.

(f) Strategies and processes to manage risks for each separate category of risk (Point (a) of Article 435(1) CRR)

The ERMF sets out the strategy for risk management for all classes of risk across the Group. The ERMF comprises a number of connected components that give a robust and integrated structure for consistent and effective risk management (see below).

Each principal risk policy sets out the strategy for managing that specific risk category and, where appropriate, the sub-risks.

![img-1.jpeg](img-1.jpeg)

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Page 25
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

|  ERMF component | Purpose | Documents and activities  |
| --- | --- | --- |
|  Risk strategy | Establishes the Group's high-level approach to risk management through the ERMF. Also covers an agreed approach for assessing embeddedness of the ERMF through design and implementation of a Risk Maturity Assessment approach | • ERMF • Three Lines of Defence model • Risk Maturity Framework and Assessments  |
|  Risk appetite | Defines the approach to setting and managing risk appetite through the Risk Appetite Framework. This covers risk appetite statements, measures, metrics and thresholds, which set out the levels of risk within which the Group is willing to operate. Establishes Key Risk Indicators and reporting requirements | • Risk Appetite Framework • Risk Appetite Measures and Tolerances • Risk Appetite Adherence Tracking (aggregated)  |
|  Risk universe | Documents the types of risk that the Group faces and needs to manage. These include the principal risks and sub-level risks to which business areas' risks align, to form the complete set of risks the Group is exposed to | • Risk Categories • Business Area Risks  |
|  Communication and stakeholder management | Sets out the communication approach to external stakeholders so that their interests and needs can be appropriately managed. Also covers the way external interests in the Group's approach to risk management are managed and addressed | • Regulatory engagement • Shareholder engagement • Insurance programme • Risk Division intranet site  |
|  Governance, organisation and policies | Sets out the Group's risk governance structure and terms of reference for each risk committee, aligned to the ERMF and relevant Senior Managers and Certification Regime ('SM&CR') responsibilities. Also establishes a set of risk policies and associated policy standards, covering the defined risk categories and setting out the requirements for managing each risk | • Management and Risk Oversight Committee Structures and Terms of Reference • Business Unit Risk Forums • Risk Policy Framework, inventory and templates • Risk Policies and Policy Standards  |
|  Risk assessment, capital adequacy and management | Defines a standardised approach to risk management identification, analysis and treatment, which facilitates the prioritising of risk management activities. Facilitates appropriate capital allocation and an appropriate return on capital for the agreed risks | • Operational Risk Frameworks (e.g. RCSA, Risk Events) • Risk registers • Risk Acceptance and Policy Waiver Process • ICAAP and Capital Allocations • Stress Testing Framework  |
|  People, reward and culture | Establishes a target state risk culture that is communicated and understood, enabling risk management activities to be delivered and recognised in the right way. Sets out clear risk management responsibilities and training approaches to enhance risk capability and support risk maturity | • Risk Culture Framework and dashboard • Role profiles and risk responsibilities • Training (e.g. e-learning module) • Risk champions community • Performance Management  |
|  Management information | Defines requirements for the recording and reporting of risks and control activities and for providing assurance to senior management on the adequacy of risk management arrangements | • Business Level Risk Reporting • Committee Reporting Packs • Risk Assurance Framework, planning and reporting  |
|  Technology and infrastructure | Underpins risk management capability with the tools and systems to support effective implementation, operation and evolution and embedment of the risk management framework | • Risk Management Software • ERMF Document Library  |

---

# Stress testing

Stress testing is an integral part of the Group's approach to risk management. Stress testing is a forward-looking risk management tool used to quantify, evaluate and understand the potential impact of specified changes to risk factors on the financial strength and operational resilience of the Group, including its capital and liquidity positions.

The Group's Stress Testing Framework uses a multi-layered approach, from single portfolio (business line or product) level analysis to comprehensive group-wide stress testing, which is aligned to guidance and requirements from relevant regulatory and standard setting bodies.

Stresses considered are not solely financial, but also address operational and climate-related scenarios, amongst other issues.

Stress testing exercises are conducted at least annually to support internal capital and liquidity adequacy assessments (the ICAAP and ILAAP). In addition, stress tests are performed alongside the corporate planning process, the assessment of going concern in support of external reporting requirements and on an ad hoc basis as required to support targeted reviews based on emerging or potential risks. A programme of stress and scenario testing is undertaken throughout the year to support the operational resilience programme and ensure that any vulnerabilities that may affect the Group's ability to remain within impact tolerances are identified and addressed. The RCC oversees the overall stress testing programme, its implementation and performance, providing review and challenge and ensuring that appropriate technical expertise is utilised.

(g) Information on the strategies and processes to manage, hedge and mitigate risks, as well as on the monitoring of the effectiveness of hedges and mitigants (Points (a) and (d) of Article 435(1) CRR)

The Group's ERMF describes the overarching approach to risk management including the various approaches to mitigating or hedging risks including mitigating, accepting, transferring and avoiding, to ensure that all risks are managed within agreed levels of appetite. The application of these approaches is described in detail in the specific principal risk policy, which defines and describes the relevant risk.

The governance over the management of each risk is well-defined within the policy and ultimately the processes for managing and monitoring the effectiveness of hedges and mitigants are overseen by the RCC.

These policies for management, mitigation and hedging are summarised in the table of principal risks above with more detail given later in the document in respect of the principal financial risks: credit risk, market risk, capital risk, liquidity and funding risk and operational risk.

Key to the strategy of continuous improvement of the ERMF is the expectation that further enhancements will be made to the associated frameworks to refine the approaches and ensure consistency across all risk types, informed by any findings from regular risk maturity assessments.

## 3.2. UK OVB – Disclosure on governance arrangements

### (a) The number of directorships held by members of the management body (Point (a) of Article 435(2) CRR)

The number of other directorships of board members outside the Group, as at 30 September 2025, disclosed in accordance with Article 435(2) point (a) are set out below.

The number of directorships within the Group is also shown for each director. All directors are members of the boards of both Paragon Banking Group PLC and Paragon Bank PLC.

|  Director | Position | Directorships of group entities | Total number of external directorships | Number of external directorships counted in accordance with CRD Article 91(3) and 91(4)  |
| --- | --- | --- | --- | --- |
|  Robert D East | Chair of the Board | 2 | 1 | 1  |
|  Nigel S Terrington | Chief Executive Officer | 3 | - | -  |
|  Richard J Woodman | Chief Financial Officer | 56 | 3 | 2  |
|  Hugo R Tudor | Non-executive director | 2 | 6 | 4  |
|  Peter A Hill | Non-executive director | 2 | 3 | 2  |
|  Alison C M Morris | Non-executive director | 2 | 6 | 2  |
|  Barbara A Ridpath | Non-executive director | 2 | 2 | 1  |
|  Graeme H Yorston | Non-executive director | 2 | 1 | 1  |
|  Tanvi P Davda | Non-executive director | 2 | 2 | 2  |
|  Zoe L Howorth | Non-executive director | 2 | 2 | 2  |

When counted in accordance with CRD Article 91(3) and 91(4) directorships of related entities (e.g. two subsidiaries of the same group) are counted as a single appointment and organisations pursuing predominantly non-commercial objectives are disregarded.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(b) Information regarding the recruitment policy for the selection of members of the management body and their actual knowledge, skills and expertise (Point (b) of Article 435(2) CRR)

The Group has Board Composition and Succession plans in place to ensure that the Board is composed of persons who collectively are fit and proper to direct the Group's business with prudence and integrity; and possess an appropriate range of diverse backgrounds and balance of experience, knowledge and skills.

The Human Resources division develops and maintains succession plans for senior leadership roles. Effective succession planning, supported by the Group's talent management processes, helps leadership to identify and nurture internal talent, ensuring a pipeline of capable leaders ready to step into key roles as needed, particularly where recruitment is expected within the next five years. Where possible, high-potential internal successors are identified for these roles, with these employees receiving tailored development plans, supported and overseen by the Nomination Committee. Succession plans are updated in response to business strategy changes or external developments so that they remain fit for purpose.

The Group strongly values diversity on the Board, not only of gender, but also of experience and background, recognising the contribution such diversity can make towards achieving the appropriate balance of skills and knowledge which an effective board of directors requires. The EDI policy, which applies to the Board, its committees, the executive committees, senior management and entire workforce, addresses such matters as age, gender, ethnicity, sexual orientation, disability and varied educational and socio-economic background. The Group's compliance with the FCA Listing Rule requirement and its agreement of voluntary targets to meet the expectations of the Parker Review and Women in Finance Charter demonstrate its commitment to achieving a diverse workforce at all levels.

The recruitment process for directors is designed to ensure the Board possesses a range of skills, noted below, and appropriate objectivity. It also involves detailed referencing and other checks to establish the candidate's credentials, including suitability, fitness and propriety. Regulatory approval is also required for board roles assigned SMF responsibilities, as defined by the Senior Managers and Certification Regime ('SM&amp;CR').

## Board development

The Group maintains a focus on board development to ensure that board members' skills and expertise remain up-to-date and appropriate to the Group's activities, strategy and risk profile.

At the start of the financial year each board member had completed a skills matrix self-assessment to assist in identifying the key areas for ongoing board development and to assess the necessary skills and experience when considering future board succession planning. Following consideration of the skills matrix, the Board approved the training approach for the current year in November 2024.

Going forward, the annual Board performance review and discussions at the annual Board strategy event will be used to identify collective training needs for each year. Individual training and development requirements are discussed as part of each directors' own performance review. The Nomination Committee will provide oversight on behalf of the Board in line with its Terms of Reference.

## Induction

All directors receive an induction training schedule tailored to their individual requirements upon joining the Board. The induction, which is designed and arranged by the Chief People Officer in consultation with the Chair and Company Secretary, includes meetings with existing directors, senior management and other key personnel, to assist new directors in increasing their knowledge of the Group's operations, management and governance structures, as well as key issues for the Group.

## Development

A number of topics agreed for board development were delivered during the financial year, with further topics agreed for the coming period. This programme aims to retain a diverse balance of skills and increase coverage in key areas to support oversight and delivery of the corporate plan. Topics for board training sessions are recommended to and approved by the Board and provide for a balance of subjects between technical matters, customer insight, risk management, governance and professional development.

Separately, ongoing individual development opportunities have been provided during the period and will continue to be made available during the forthcoming financial year. A training schedule is maintained by our Human Resources department in conjunction with the Company Secretary. Oversight of the Board's training and development programme is the responsibility of the Nomination Committee and contributes to ensuring the ongoing effectiveness of the Board.

Business insight and awareness sessions, and deep dives covering particular areas are held regularly to provide non-executive directors with the appropriate depth of knowledge to contribute effectively at board meetings on key business topics.

The non-executive directors have received presentations during the year on various aspects of the activities of the business to support their on-going awareness and development. The Board has dedicated several days during the year to training and will undertake additional training as required by our strategic and operational needs.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Specific detailed training sessions were provided in the year on the following subjects:

|  Topic | Board meeting  |
| --- | --- |
|  Legal and Regulatory: covering topics including UK MAR, directors' duties, developments relating to historical motor commissions, and the overall legal / regulatory landscape | Mar 2025  |
|  Prudential Risk: covering the approach to public affairs in the prudential space, PRA priorities for 2025 and key regulatory developments, delivered by the Prudential Risk team | Mar 2025  |
|  Solvent Exit Analysis and Solvent Exit Execution Plan: delivered by a professional services firm and the Balance Sheet Risk team | Mar 2025  |
|  Cyber Risk and Security: delivered by a combination of in-house experts and an external cyber security solutions provider | Apr 2025  |
|  Debt Capital Markets: including an overview of types of debt issuance, contingent liquidity and peer analysis, delivered by the Treasury team | Jul 2025  |
|  2024 Corporate Governance Code Provision 29: covering the changes to the Code, key questions for the Board, material control scoping, and assurance, delivered by a professional services firm | Jul 2025  |
|  EDI: covering topics such as EDI strategy, the internal EDI Network and future initiatives, delivered by the Chair of the EDI Network | Jul 2025  |

# Actual knowledge, skills and expertise

The skills and experience of the directors on the Board at 30 September 2025 are set out below:

|  Director | Experience | Specific areas of expertise*  |
| --- | --- | --- |
|  Robert D EastChair of the Boardand Chair ofthe NominationCommittee | Robert has over 40 years' experience in UK financial services, including at board level, as CEO and Chair.During his executive career he held senior roles at Barclays. He was also CEO of Cattles, where he led the restructuring and wind down of its operations from 2010 to 2016.He has held positions as Chair of Vanquis Bank, Skipton Building Society and Hampshire Trust Bank. He has previously served as a non-executive director on the boards of Provident Financial Group, Skipton Building Society and Hampshire Trust Bank, where he was also Chair of the Risk Committee.Robert holds a Diploma in Financial Studies (DipFS) from the London Institute of Banking and Finance and is an associate of the Chartered Institute of Bankers ('CIB'). | • Strong track record of leading and chairing financial services businesses • Extensive experience in, and understanding of, banking and the financial services sector • Significant experience of leading transformational change  |
|  Nigel S TerringtonCEO | Nigel's early career began in investment banking, which included working at UBS, where he ran its Financial Institutions Group. He joined Paragon in 1987, becoming Treasurer shortly thereafter, before being appointed as Finance Director and then Chief Executive.Nigel takes an active role in engaging with regulators and government on banking matters, particularly those which impact the UK mid-tier banking community. He was previously a member of HM Treasury's Home Finance Forum and a member of the Bank of England Residential Property Forum.Until September 2023, Nigel was a member of the Board of UK Finance, having previously served as Chair of UK Finance's Specialist Bank Advisory Committee, Chair of the Council of Mortgage Lenders ('CML'), Chair of the Intermediary Mortgage Lenders Association ('IMLA'), Chair of the FLA Consumer Finance Division and a board member of the FLA.He is an associate of the CIB and in 2017 received an Honorary Doctorate from Birmingham City University for services to the finance industry. | • Strategic and detailed understanding of banking and of our business, its markets, its operations and its people • Leadership of Paragon's diversification from a monoline buy-to-let lender to a broad-based specialist banking group • Long-term, through-the-cycle expertise, including successful management of the business through the 1992 and 2007 financial crises  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Page 29
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

|  Director | Experience | Specific areas of expertise*  |
| --- | --- | --- |
|  Richard J Woodman CFO | Richard joined the business in 1989 and has held various senior strategic and financial roles, including Director of Business Analysis and Planning, and Managing Director of Idem Capital.

He has taken a lead role in strategic development and, in particular, in the loan portfolio acquisition programme through Idem Capital and the Group's Mergers and Acquisitions ('M&A') programme.

He is a member of the Chartered Institute of Management Accountants. | • Broad expertise gained from long-term, through-the-cycle, knowledge and understanding of our business, its markets and its operations, in particular its financial management controls and reporting, liquidity, stress testing and capital management
• Executive director responsible for climate change matters and, alongside the Group's CRO, Richard takes a lead on progressing Paragon's IRB accreditation  |
|  Alison C M Morris Chair of the Audit Committee and Senior Independent Director | Alison is a chartered accountant and was a partner in PwC's financial services audit practice until the end of 2019.

She joined PwC in 1982 and spent her career with the organisation in a range of internal and external audit roles across asset and wealth management, as well as banking and capital markets.

She led audit projects for a range of banking clients, as well as other companies across the FTSE-100 and FTSE-250 and held a number of leadership roles within PwC, including sitting on the executive management team which led their audit practice.

Alison was a non-executive director of M&G Group Limited, where she was also audit committee chair, M&G Investment Management Limited and M&G Alternatives Investment Management Limited, all companies within the M&G plc group.

She is currently a non-executive director of Sabre Insurance Group PLC and Sabre Insurance Company Limited, and chair of the Sabre Insurance Group audit committee. She also serves as a non-executive director of Quilter plc and its subsidiaries, Quilter Life & Pensions Limited, Quilter Investment Platform Limited and Quilter Financial Planning Limited, and as a member of the Quilter plc audit, risk and remuneration committees. On 1 October 2025, after the year end, she was appointed chair of the Quilter plc audit committee and joined its governance and nominations committee as a member. | • Recent and relevant experience of the financial services sector
• Detailed and specialist knowledge of accounting and auditing practice as well as of the audit market and accounting regulations  |
|  Hugo R Tudor | Hugo spent 26 years in the fund management industry, originally with Schroders and most recently with BlackRock, covering a wide range of UK equities.

He is a Chartered Financial Analyst and a Chartered Accountant. | • Detailed knowledge of the investor perspective
• A strong understanding of the executive remuneration market  |
|  Peter A Hill Chair of the Risk and Compliance Committee | Peter's career in financial services has spanned over forty years, including eight years as CEO of Leeds Building Society between 2011 and 2019, where he previously held the role of Operations Director.

He is Chair of Mortgage Brain Holdings Limited and was a non-executive director and Chair of the Risk Committee at Pure Retirement from 2019 until 2022.

He was chair of the CML for three years and was a member of the Board of UK Finance.

Peter is a fellow of the Royal Society of Arts and an associate of the CIB. | • Specialist retail banking and mortgage lending expertise
• Detailed knowledge of the financial services sector  |

---

|  Director | Experience | Specific areas of expertise*  |
| --- | --- | --- |
|  Barbara A Ridpath | Barbara has worked in finance for most of her career, in New York, London and Paris at the Federal Reserve Bank of New York, Standard & Poor's and JPMorgan. She was instrumental in the development of UK mortgage securitisation in the late 1980s and went on to lead the Standard & Poor's Ratings Group in Europe, the Middle East and Africa. Barbara is currently a non-executive director of ORX in Switzerland, a trade association for non-financial operational risk professionals (including cyber risk), and a director of ORX UK Limited. She was previously a non-executive director of Open Banking Limited and Change Banking Limited. In addition, she is Chair of the Ethical Investment Group of the Church of England and a member of the International Advisory Council of the Institute of Business Ethics. | • Strong knowledge of the operation and implementation of operational risk management systems • Detailed knowledge of the securitisation market  |
|  Graeme H Yorston | Graeme Yorston was Group Chief Executive of Principality Building Society, the sixth largest mutual in the UK. He has over 50 years' experience in financial services having carried out a number of senior roles at Abbey National (now Santander) including IT Director for the Retail Bank and Regional Director, and ran a number of significant change programmes. Graeme has served on the CBI Council for Wales, the Board of Business in the Community in Wales and was the Prince of Wales's Ambassador for BITC in Wales for two years. He was awarded Director of the Year in Wales by the Institute of Directors in 2016. Graeme is a Fellow of the CIB, holds an MBA from Warwick Business School and was awarded an Honorary Doctorate in Business Administration by Cardiff Metropolitan University in 2017. | • Strong retail banking sector knowledge and experience particularly in marketing, communications and customer service • Detailed experience of overseeing business change and IT systems • Previously Board Champion for Consumer Duty  |
|  Tanvi P Davda Chair of the Remuneration Committee | Tanvi brings a diverse range of skills and knowledge to the Board, built up over an executive career of more than 30 years. She began her career at Credit Suisse as a derivatives trader, then went on to work with IBM as a management consultant before joining ABN AMRO, and then Barclays Wealth, where she was Managing Director of Global Research and Investments. In 2015, Tanvi co-founded the wealth management firm, Saranac Partners, where she was CEO until 2021 and a non-executive director until 2022. Tanvi's non-executive career has also included roles on the Board of Ofqual, the qualifications and examinations regulator, and the Student Loans Company. She is also a non-executive member of the supervisory council of Luminor Bank AS. | • Strong finance, advisory and regulatory experience  |
|  Zoe L Howorth | Zoe's extensive executive career included over sixteen years' experience at the Coca-Cola Company across a variety of roles that culminated in her role as UK Marketing Director. Zoe is a non-executive director at AG Barr PLC, a FTSE-250 consumer goods business, where she is chair of the ESG Committee and member of the Remuneration Committee. She is also a Fellow of Chapter Zero, which works in partnership with the Global Climate Initiative to build a community of non-executive directors equipped to lead crucial UK boardroom discussions on the impact of climate change as organisations transition from ambition to action. Zoe is also a non-executive director of International Schools Partnership Limited. | • Extensive fast-moving consumer goods, consumer brand and digital marketing expertise • ESG strategy and governance  |

*All directors have broad knowledge of all areas of the Group's business, but the 'areas of expertise' highlight specific areas in relation to an individual's contribution to the Group's long-term sustainable success.

Page 30
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(c) Information on the diversity policy with regard of the members of the management body (Point (c) of Article 435(2) CRR)

The Board recognises the importance of diversity, including gender and ethnic diversity, at all levels of the organisation.

In accordance with the UK Listing Rules requirement, the Group was able to confirm that: at least 40% of directors were women; at least one of the senior board positions was held by a woman; and at least one director was from an ethnic minority background.

The Board continues to comply with the FTSE Women Leaders Review target, maintaining a consistent female representation of 40.0% at board level (2024: 40.0%) and achieved its Women in Finance Charter phase 2 target, reaching 40.4% (2024: 37.9%) female representation in senior leadership roles (defined as executive committee members and their direct reports).

The Group has made progress towards its voluntary Parker Review target of 5.0% ethnic minority representation in senior management, using the same definition, by December 2027, recording 3.6% as of 30 September 2025. This was a response to the Parker Review request that all FTSE-250 companies should set their own voluntary target to increase the number of ethnic minority appointments across senior leadership by 31 December 2027. The Committee remains committed to ongoing monitoring and action to further advance diversity and inclusion at all levels of the organisation.

The Group's Equality, Diversity and Inclusion ('EDI') policy, applies to the Board, its committees, the executive committees and senior management and the entire workforce. It addresses such matters as age, gender, ethnicity, sexual orientation, disability and varied educational and socio-economic background ('SEB').

The Group's compliance with the FCA Listing Rule requirement, alongside voluntary targets to meet the expectation of the Parker Review and Women in Finance Charter demonstrate its commitment to achieving a diverse workforce at all levels.

The objective of the EDI policy is to outline the Group's approach and its expectations of employees and, in particular, line managers to ensure that its approach is understood and appropriately managed.

The EDI policy is implemented by the Group through the development and communication of supporting HR processes and procedures which employees across the Group are expected to follow, making this policy and supporting processes available to all employees, and engaging with and supporting employees and managers, including the provision of regular training.

80.9% of employees had provided diversity data for analysis at the beginning of the year and this increased to 83.6% by 30 September 2025. This underpins the Group's culture of commitment to the Group's EDI objectives and has informed targeted activities such as focused communication campaigns to raise awareness, celebrate differences, and expand development opportunities for under-represented groups. The board-level Nomination Committee is responsible for monitoring these activities and the Group's progress in this area and is satisfied with the advances made.

During the year the Nomination Committee reviewed the Group's gender pay report and supporting analysis. It carefully examined changes since the previous report and assessed ongoing challenges posed by reporting requirements, management structure and broader strategic developments that influence efforts to close the gender pay gap, in line with sector trends. Addressing the gender pay gap will continue to be a focus for the Nomination Committee and the Board, as will engaging with any extension of these rules to cover other diversities, as currently proposed by the UK Government.

(d) Information whether or not the institution has set up a separate risk committee and the frequency of the meetings (Point (d) of Article 435(2) CRR)

The Group has an established board-level Risk and Compliance Committee ('RCC') which meets at least four times per year. The RCC met 5 times in the financial year ended 30 September 2025.

In addition, the CEO has established an ERC to oversee day-to-day risk management activity. This committee meets at least quarterly throughout the year, in line with the RCC schedule.

(e) Description on the information flow on risk to the management body (Point (e) of Article 435(2) CRR)

The Board has overall responsibility for oversight of risk management but to ensure independence it delegates certain responsibilities to the RCC and the Audit Committee. For model risk management, the RCC delegates responsibility to the Model Risk Committee, as the Group's IRB designated committee. The board committees report to the Board on their activities.

Executive risk management is undertaken by the ERC, which is chaired by the CRO. The ERC delegates the management of certain risks to its sub-committees, which report to the ERC on their activities. The CEO provides regular updates to the RCC and Audit Committee on risk activities.

Reporting on all principal risks is provided to the RCC at each meeting. The risk appetite framework is constructed to ensure that material risk information is escalated on a timely basis to allow the management body to have a clear view of any change to the risk profile.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Page 32
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

## 4. Scope of application

### This section sets out

- Analysis of differences between accounting and regulatory scopes of consolidation and mapping of financial statement categories with regulatory risk categories
- Sources of differences between regulatory exposure amounts and carrying values in the financial statements
- Differences in scope of consolidation

The Pillar III information includes all of the Group's subsidiary entities, but the Disclosure (CRR) Part requires this information to be shown in a specified line-by-line format. It also requires that a reconciliation of the balances shown in the audited financial statements of the Group for the year to some of the information used in the Pillar III reporting is provided.

---

# 4.1. UK LI1 - Differences between accounting and regulatory scopes of consolidation and mapping of financial statement categories with regulatory risk categories

|   | a | b | c | d | e | f | g  |
| --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  | Carrying value of items  |   |   |   |   |
|   |  Carrying values as reported in published financial statements | Carrying values under scope of regulatory consolidation | Subject to the credit risk framework | Subject to the CCR framework | Subject to the securitisation framework | Subject to the market risk framework | Not subject to own funds requirements or subject to deduction from own funds  |
|   |  £m | £m | £m | £m | £m | £m | £m  |
|  Breakdown by asset class according to the balance sheet in the published financial statements  |   |   |   |   |   |   |   |
|  1 | Cash – central banks | 2,175.7 | 2,175.7 | 2,175.7 | - | - | -  |
|  2 | Cash – retail banks | 213.8 | 213.8 | 213.8 | - | - | -  |
|  3 | Investment securities | 626.2 | 626.2 | 626.2 | - | - | -  |
|  4 | Loans to customers | 16,335.9 | 16,335.9 | 16,341.3
| - | - |
(5.4)  |
|  5 | Derivative financial assets | 275.4 | 275.4 | - | 275.4 | - | -  |
|  6 | Sundry assets | 24.2 | 24.2 | 24.2 | - | - | -  |
|  7 | Current tax assets | 6.2 | 6.2 | 6.2 | - | - | -  |
|  8 | Retirement benefit obligations | 23.5 | 23.5
| - | - | - |
23.5  |
|  9 | Property, plant and equipment | 77.0 | 77.0 | 77.0 | - | - | -  |
|  10 | Intangible assets | 172.1 | 172.1
| - | - | - |
172.1  |
|  11 | Total assets | 19,930.0 | 19,930.0 | 19,464.4 | 275.4 | - | 190.2  |
|  Breakdown by liability classes according to the balance sheet in the published financial statements  |   |   |   |   |   |   |   |
|  1 | Short-term bank borrowings | 0.5 | 0.5
| - | - | - |
0.5  |
|  2 | Retail deposits | 16,270.8 | 16,270.8
| - | - | - |
16,270.8  |
|  3 | Derivative financial liabilities | 68.2 | 68.2 | - | 68.2 | - | -  |
|  4 | Covered bond | 499.2 | 499.2
| - | - | - |
499.2  |
|  5 | Corporate bond issuance | 150.1 | 150.1
| - | - | - |
150.1  |
|  6 | Central bank facilities | 950.0 | 950.0
| - | - | - |
950.0  |
|  7 | Sale and repurchase agreements | 100.0 | 100.0
| - | - | - |
100.0  |
|  8 | Sundry Liabilities | 431.6 | 431.6
| - | - | - |
431.6  |
|  9 | Provisions | 25.5 | 25.5
| - | - | - |
25.5  |
|  10 | Deferred tax liabilities | 13.9 | 13.9
| - | - | - |
13.9  |
|  11 | Total liabilities | 18,509.8 | 18,509.8 | - | 68.2 | - | 18,441.6  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 4.2. UK LI2 - Main sources of differences between regulatory exposure amounts and carrying values in financial statements

|   | a | b | c | d | e  |   |
| --- | --- | --- | --- | --- | --- | --- |
|   |   |   | Items subject to  |   |   |   |
|   |   |  Total1 | Credit risk framework | Securitisation framework | CCR framework | Market risk framework  |
|   |   |  £m | £m | £m | £m | £m  |
|  1 | Assets carrying value amount under the scope of regulatory consolidation (as per template LI1) | 19,739.8 | 19,464.4 | - | 275.4 | -  |
|  2 | Liabilities carrying value amount under the regulatory scope of consolidation (as per template LI1) | (68.2)
| - | - |
(68.2) | -  |
|  3 | Total net amount under the regulatory scope of consolidation | 19,671.6 | 19,464.4 | - | 207.2 | -  |
|  4 | Off-balance-sheet amounts | 1,617.6 | 1,407.6 | - | 210.0 | -  |
|  5 | Differences in valuations | (171.5) | (5.7) | - | (165.8) |   |
|  6 | Differences due to different netting rules, other than those already included in row 2
| - | - | - | - |
|
|  7 | Differences due to consideration of provisions
| - | - | - | - |
|
|  8 | Differences due to the use of credit risk mitigation techniques ('CRM's) | (141.9)
| - | - |
| (141.9) |
|  9 | Differences due to credit conversion factors | (1,222.7) | (1,222.7)
| - | - |
|
|  10 | Differences due to Securitisation with risk transfer
| - | - | - | - |
|
|  11 | Other differences
| - | - | - | - |
|
|  12 | Exposure amounts considered for regulatory purposes | 19,753.1 | 19,643.6 | - | 109.5 | -  |
|   |  |  | See table UKCR4 | See Section 13 | See table UKCCR1 | See Section 14  |

Notes:
1Differences are explained in Section 4.3(b)

# 4.3. UK LIA - Explanations of differences between accounting and regulatory exposure amounts

## (a) Differences between columns (a) and (b) in template UK LI1 (Article 436(b) CRR)

There are no differences between the columns because no entities are derecognised from the accounting balance sheet for regulatory purposes.

## (b) Qualitative information on the main sources of differences between the accounting and regulatory scope of consolidation shown in template UK LI2 (Article 436(d) CRR)

The amounts considered for regulatory reporting purposes shown in template UK LI2 differ to the carrying values under the regulatory scope of consolidation as a result of

- Inclusion of off-balance sheet amounts in respect of lending pipelines in line with UK CRR article 111, as shown in row 4 of UK LI2, reduced by credit conversion factors (row 9)
- Inclusion of Potential Future Exposure ('PFE') on derivative instruments (row 4)
- Valuation of exposures on derivative instruments using the Replacement Cost ('RC') basis rather than at IFRS 9 fair value as required by the Standardised Approach for Counterparty Credit Risk ('SA-CCR') (row 5)
- Valuation of exposures related to operating leases, which are carried within property, plant and equipment for accounting purposes, but valued as lease exposures for capital purposes (row 5)
- Effect of credit risk mitigation techniques (row 8)

Credit risk mitigation techniques primarily relate to government guarantees on BBLS, CBILS and RLS loans within retail exposures and the effect of the consideration of collateral (margining) in the SA-CCR calculation for derivative exposures.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 4.4. UK LI3 - Outline of the differences in the scopes of consolidation (entity by entity)

|  a | b | c | d | e | f | g | h  |
| --- | --- | --- | --- | --- | --- | --- | --- |
|   |   | Method of regulatory consolidation |   |   |   |   |   |
|  Name of the entity | Method of accounting consolidation | Full consolidation | Proportional consolidation | Equity method | Neither consolidated nor deducted | Deducted | Description of the entity  |
|  Paragon Bank PLC | Full consolidation | X |  |  |  |  | Deposit taking, residential mortgages and loan and vehicle finance  |
|  Paragon Car Finance Limited | Full consolidation | X |  |  |  |  | Vehicle finance  |
|  Idem Capital Holdings Limited | Full consolidation | X |  |  |  |  | Intermediate holding company  |
|  Redbrick Survey and Valuation Limited | Full consolidation | X |  |  |  |  | Surveyors and property consulting  |
|  Paragon Mortgages (No. 12) PLC | Full consolidation | X |  |  |  |  | Residential Mortgages  |
|  Colonial Finance (UK) Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Earlswood Finance Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (1) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (2) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (4) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (5) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (6) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (7) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (8) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (9) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Herbert (10) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Moorgate Asset Administration Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Car Finance (1) Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Mortgages (No. 5) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Pension Investments GP Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Pension Plan Trustees Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Personal Finance (1) Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  The Paragon Pension Partnership LP | Full consolidation | X |  |  |  |  | Non-trading  |
|  Universal Credit Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Yorkshire Freeholds Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Yorkshire Leaseholds Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Finance PLC | Full consolidation | X |  |  |  |  | Residential mortgages and asset administration  |
|  Mortgage Trust Limited | Full consolidation | X |  |  |  |  | Residential mortgages  |
|  Paragon Mortgages Limited | Full consolidation | X |  |  |  |  | Residential mortgages  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

|  a | b | c | d | e | f | g | h  |
| --- | --- | --- | --- | --- | --- | --- | --- |
|   |   | Method of regulatory consolidation |   |   |   |   |   |
|  Name of the entity | Method of accounting consolidation | Full consolidation | Proportional consolidation | Equity method | Neither consolidated nor deducted | Deducted | Description of the entity  |
|  Paragon Mortgages (2010) Limited | Full consolidation | X |  |  |  |  | Residential mortgages  |
|  Mortgage Trust Services PLC | Full consolidation | X |  |  |  |  | Residential mortgages and asset administration  |
|  Paragon Asset Finance Limited | Full consolidation | X |  |  |  |  | Holding company and portfolio administration  |
|  Paragon Business Finance PLC | Full consolidation | X |  |  |  |  | Asset finance  |
|  Paragon Development Finance Limited | Full consolidation | X |  |  |  |  | Development Finance  |
|  Paragon Development Finance Services Limited | Full consolidation | X |  |  |  |  | Development Finance  |
|  Paragon Technology Finance Limited | Full consolidation | X |  |  |  |  | Asset finance  |
|  PBAF Acquisitions Limited | Full consolidation | X |  |  |  |  | Residential mortgages and loan finance  |
|  Premier Asset Finance Limited | Full consolidation | X |  |  |  |  | Asset finance broker  |
|  Specialist Fleet Services Limited | Full consolidation | X |  |  |  |  | Asset finance and contract hire  |
|  Collett Transport Services | Full consolidation | X |  |  |  |  | Non-trading  |
|  Homer Management Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Lease Portfolio Management Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Commercial Finance Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Options PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Moorgate Loan Servicing Limited | Full consolidation | X |  |  |  |  | Asset Administration  |
|  Idem Capital Securities Limited | Full consolidation | X |  |  |  |  | Asset Investment  |
|  Paragon Personal Finance Limited | Full consolidation | X |  |  |  |  | Consumer loan finance  |
|  Paragon Seventh Funding Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Mortgages (No. 26) Holdings Limited | Full consolidation | X |  |  |  |  | Holding Company  |
|  Paragon Mortgages (No. 27) Holdings Limited | Full consolidation | X |  |  |  |  | Holding Company  |
|  Paragon Mortgages (No. 27) PLC | Full consolidation | X |  |  |  |  | Residential Mortgages  |
|  Paragon Mortgages (No. 28) Holdings Limited | Full consolidation | X |  |  |  |  | Holding Company  |
|  Paragon Mortgages (No. 28) PLC | Full consolidation | X |  |  |  |  | Residential Mortgages  |
|  Paragon Mortgages (No. 29) Holdings Limited | Full consolidation | X |  |  |  |  | Holding Company  |
|  Paragon Mortgages (No. 29) PLC | Full consolidation | X |  |  |  |  | Residential Mortgages  |
|  Arianty Holdings Limited | Full consolidation | X |  |  |  |  | Holding Company  |
|  Arianty No. 1 PLC | Full consolidation | X |  |  |  |  | Non-trading  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

|  a | b | c | d | e | f | g | h  |
| --- | --- | --- | --- | --- | --- | --- | --- |
|   |   | Method of regulatory consolidation |   |   |   |   |   |
|  Name of the entity | Method of accounting consolidation | Full consolidation | Proportional consolidation | Equity method | Neither consolidated nor deducted | Deducted | Description of the entity  |
|  Paragon Fifth Funding Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Sixth Funding Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Mortgages (No. 25) Holdings Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Mortgages (No. 25) PLC | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Covered Bonds Finance Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Covered Bonds (Holdings) Limited | Full consolidation | X |  |  |  |  | Non-trading  |
|  Paragon Covered Bonds LLP | Full consolidation | X |  |  |  |  | Non-trading  |

## 4.5. UK LIB - Other qualitative information on the scope of application

(a) Impediment to the prompt transfer of own funds or to the repayment of liabilities within the group (Article 436(f) CRR)

The Bank's requirement to maintain regulatory capital and liquid resources above a level determined by the PRA could restrict its ability to make dividend payments or make loan repayments to other group entities. There are no other current or foreseen material practical or legal impediments to the prompt transfer of capital resources or repayments of liabilities between the Company and its subsidiary undertakings.

(b) Subsidiaries not included in the consolidation with own funds less than required (Article 436(g) CRR)

No subsidiaries are excluded from the consolidation.

(c) Use of derogation referred to in Article 7 CRR or individual consolidation method laid down in Article 9 CRR (Article 436(h) CRR)

The Group is regulated by the PRA and the FCA. Following the UK's withdrawal from the European Union the European CRD V / CRR II framework, set out in EU Directive 2019/878 and EU Regulation 2019/876, continues to apply to the Group, as it applied on the Brexit Exit Day (31 January 2022), except as subsequently amended by the UK authorities, with the position overall governed by the PRA Rulebook.

The Group is required to calculate and maintain regulatory capital on both a group basis and on an individual consolidation basis. There are no differences between the basis of consolidation of the Group for accounting and prudential purposes. Full details of the Group's subsidiary undertakings are included in template UKLI3.

The Group has permission to use the individual consolidation method, with approval granted on 2 August 2022 by the PRA.

(d) Aggregate amount by which the actual own funds are less than required in all subsidiaries that are not included in the consolidation (Article 436(g) CRR)

Not applicable to the Group as there are no excluded subsidiaries.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 4.6. UK PV1 - Prudent valuation adjustments ('PVA')

Template UK PV1 has not been presented as, per Annex VI instructions, it is only applicable to those institutions applying the Core Approach for the determination of the additional valuation adjustment for prudent valuation in accordance with Chapter III of the PRA rulebook, Trading Book (CRR) Part, Section 4, whereas the Group utilises the Simplified Approach. Under this approach PVA is calculated as 0.1% of the sum of the absolute value of fair-valued assets and liabilities.

In accordance with Article 436 (e) the breakdown of the Group's PVA has been presented below:

|   | 30 Sept 25 £m  |
| --- | --- |
|  Fair value swap assets | 275.4  |
|  Short-term investments | -  |
|  Contingent consideration | -  |
|  Fair value swap liabilities | 68.2  |
|  Total | 343.6  |
|  Prudent Valuation Adjustment (0.1%) | 0.4  |

The PVA is added to the credit risk framework net amount under the regulatory scope of consolidation in Section 4, template UK LI2, in order to derive the exposure amounts considered for regulatory purposes. It is also deducted from the Group's capital for regulatory purposes (Section 5 – Table UK CC1 (line 7)).

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 5. Own funds

## This section sets out

- Composition of regulatory own funds
- Reconciliation of regulatory own funds to balance sheet in the audited financial statements
- Main features of regulatory own funds instruments and eligible liabilities instruments

Regulatory capital is the amount which the Group has available to meet its regulatory and operational requirements. Its reconciliation to balances in the Group's financial statements is shown in tables UK CC1 and UK CC2, with the instruments comprising that capital described in detail in table UK CAA.

The Group's regulatory capital is calculated on the basis laid out in the Rulebook and set out in the tables below. The capital ratios used by the Group in its public reporting are those defined by the Rulebook, calculated as shown by the tables below.

## 5.1. UK CC1 – Composition of regulatory own funds (2025)

References in column (b) below are to table UK CC2 in Section 5.2.

|   | a 30 Sep 25 | b Source based on reference numbers / letters of the balance sheet under the regulatory scope of consolidation  |   |
| --- | --- | --- | --- |
|   |   |  £m |   |
|  Common Equity Tier 1 (CET1) capital: instruments and reserves  |   |   |   |
|  1 | Capital instruments and the related share premium accounts | 268.8 | (a)  |
|   |  of which: ordinary shares | 268.8 | (a)  |
|  2 | Retained earnings | 1,231.2 | (a)  |
|  3 | Accumulated other comprehensive income (and other reserves) | (26.0) | (a)  |
|  UK 3a | Funds for general banking risk | - |   |
|  4 | Amount of qualifying items referred to in Article 484 (3) CRR and the related share premium accounts subject to phase out from CET1 | - |   |
|  5 | Minority interests (amount allowed in consolidated CET1) | - |   |
|  UK 5a | Independently reviewed interim profits net of any foreseeable charge or dividend | (57.7) |   |
|  6 | Common Equity Tier 1 (CET1) capital before regulatory adjustments | 1,416.3 |   |
|  Common Equity Tier 1 (CET1) capital: regulatory adjustments  |   |   |   |
|  7 | Additional value adjustments (negative amount) | (0.4) | Section 4.6  |
|  8 | Intangible assets (net of related tax liability) (negative amount) | (172.1) | (b)  |
|  9 | Empty set in the UK |  |   |
|  10 | Deferred tax assets that rely on future profitability excluding those arising from temporary differences (net of related tax liability where the conditions in Article 38 (3) CRR are met) (negative amount) | - |   |
|  11 | Fair value reserves related to gains or losses on cash flow hedges of financial instruments that are not valued at fair value | - |   |
|  12 | Negative amounts resulting from the calculation of expected loss amounts | - |   |
|  13 | Any increase in equity that results from securitised assets (negative amount) | - |   |
|  14 | Gains or losses on liabilities valued at fair value resulting from changes in own credit standing | - |   |

Page 39
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

|   |  | a 30 Sep 25 £m | b Source based on reference numbers / letters of the balance sheet under the regulatory scope of consolidation  |
| --- | --- | --- | --- |
|  15 | Defined-benefit pension fund assets (negative amount) | (17.6) | (c)  |
|  16 | Direct, indirect and synthetic holdings by an institution of own CET1 instruments (negative amount) | (53.8) | (d)  |
|  17 | Direct, indirect and synthetic holdings of the CET 1 instruments of financial sector entities where those entities have reciprocal cross holdings with the institution designed to inflate artificially the own funds of the institution (negative amount) | - |   |
|  18 | Direct, indirect and synthetic holdings by the institution of the CET1 instruments of financial sector entities where the institution does not have a significant investment in those entities (amount above 10% threshold and net of eligible short positions) (negative amount) | - |   |
|  19 | Direct, indirect and synthetic holdings by the institution of the CET1 instruments of financial sector entities where the institution has a significant investment in those entities (amount above 10% threshold and net of eligible short positions) (negative amount) | - |   |
|  20 | Empty set in the UK |  |   |
|  UK 20a | Exposure amount of the following items which qualify for a RW of 1250%, where the institution opts for the deduction alternative | - |   |
|  UK 20b | of which: qualifying holdings outside the financial sector (negative amount) | - |   |
|  UK 20c | of which: securitisation positions (negative amount) | - |   |
|  UK 20d | of which: free deliveries (negative amount) | - |   |
|  21 | Deferred tax assets arising from temporary differences (amount above 10% threshold, net of related tax liability where the conditions in Article 38 (3) CRR are met) (negative amount) | - |   |
|  22 | Amount exceeding the 17.65% threshold (negative amount) | - |   |
|  23 | of which: direct, indirect and synthetic holdings by the institution of the CET1 instruments of financial sector entities where the institution has a significant investment in those entities | - |   |
|  24 | Empty set in the UK |  |   |
|  25 | of which: deferred tax assets arising from temporary differences | - |   |
|  UK 25a | Losses for the current financial year (negative amount) | - |   |
|  UK 25b | Foreseeable tax charges relating to CET1 items except where the institution suitably adjusts the amount of CET1 items insofar as such tax charges reduce the amount up to which those items may be used to cover risks or losses (negative amount) | - |   |
|  26 | Empty set in the UK | - |   |
|  27 | Qualifying AT1 deductions that exceed the AT1 items of the institution (negative amount) | - |   |
|  UK 27a | Other regulatory adjustments to CET1 capital (including IFRS 9 transitional adjustments when relevant) | 0.0 |   |
|  28 | Total regulatory adjustments to Common Equity Tier 1 ('CET1') | (243.9) |   |
|  29 | Common Equity Tier 1 ('CET1') capital | 1,172.4 |   |
|  Additional Tier 1 (AT1) capital: instruments  |   |   |   |
|  30 | Capital instruments and the related share premium accounts | - |   |
|  31 | of which: classified as equity under applicable accounting standards | - |   |
|  32 | of which: classified as liabilities under applicable accounting standards | - |   |
|  33 | Amount of qualifying items referred to in Article 484 (4) CRR and the related share premium accounts subject to phase out from AT1 as described in Article 486(3) CRR | - |   |
|  UK 33a | Amount of qualifying items referred to in Article 494a (1) CRR subject to phase out from AT1 | - |   |
|  UK 33b | Amount of qualifying items referred to in Article 494b (1) CRR subject to phase out from AT1 | - |   |
|  34 | Qualifying Tier 1 capital included in consolidated AT1 capital (including minority interests not included in row 5) issued by subsidiaries and held by third parties | - |   |
|  35 | of which: instruments issued by subsidiaries subject to phase out | - |   |
|  36 | Additional Tier 1 ('AT1') capital before regulatory adjustments | - |   |

Page 40

---

|   | a 30 Sep 25 | b Source based on reference numbers / letters of the balance sheet under the regulatory scope of consolidation  |   |
| --- | --- | --- | --- |
|   |   |  £m |   |
|  Additional Tier 1 ('AT1') capital: regulatory adjustments  |   |   |   |
|  37 | Direct, indirect and synthetic holdings by an institution of own AT1 instruments (negative amount) | - |   |
|  38 | Direct, indirect and synthetic holdings of the AT1 instruments of financial sector entities where those entities have reciprocal cross holdings with the institution designed to inflate artificially the own funds of the institution (negative amount) | - |   |
|  39 | Direct, indirect and synthetic holdings of the AT1 instruments of financial sector entities where the institution does not have a significant investment in those entities (amount above 10% threshold and net of eligible short positions) (negative amount) | - |   |
|  40 | Direct, indirect and synthetic holdings by the institution of the AT1 instruments of financial sector entities where the institution has a significant investment in those entities (net of eligible short positions) (negative amount) | - |   |
|  41 | Empty set in the UK |  |   |
|  42 | Qualifying T2 deductions that exceed the T2 items of the institution (negative amount) | - |   |
|  42a | Other regulatory adjustments to AT1 capital | - |   |
|  43 | Total regulatory adjustments to Additional Tier 1 ('AT1') capital | - |   |
|  44 | Additional Tier 1 ('AT1') capital | - |   |
|  45 | Tier 1 capital (T1 = CET1 + AT1) | 1,172.4 |   |
|  Tier 2 ('T2') capital: instruments  |   |   |   |
|  46 | Capital instruments and the related share premium accounts | 150.0 | (e)  |
|  47 | Amount of qualifying items referred to in Article 484 (5) CRR and the related share premium accounts subject to phase out from T2 as described in Article 486(4) CRR | - |   |
|  UK 47a | Amount of qualifying items referred to in Article 494a (2) CRR subject to phase out from T2 | - |   |
|  UK 47b | Amount of qualifying items referred to in Article 494b (2) CRR subject to phase out from T2 | - |   |
|  48 | Qualifying own funds instruments included in consolidated T2 capital (including minority interests and AT1 instruments not included in rows 5 or 34) issued by subsidiaries and held by third parties | - |   |
|  49 | of which: instruments issued by subsidiaries subject to phase out | - |   |
|  50 | Credit risk adjustments | - |   |
|  51 | Tier 2 ('T2') capital before regulatory adjustments | 150.0 |   |
|  Tier 2 ('T2') capital: regulatory adjustments  |   |   |   |
|  52 | Direct, indirect and synthetic holdings by an institution of own T2 instruments and subordinated loans (negative amount) | - |   |
|  53 | Direct, indirect and synthetic holdings of the T2 instruments and subordinated loans of financial sector entities where those entities have reciprocal cross holdings with the institution designed to inflate artificially the own funds of the institution (negative amount) | - |   |
|  54 | Direct, indirect and synthetic holdings of the T2 instruments and subordinated loans of financial sector entities where the institution does not have a significant investment in those entities (amount above 10% threshold and net of eligible short positions) (negative amount) | - |   |
|  54a | Empty set in the UK |  |   |
|  55 | Direct, indirect and synthetic holdings by the institution of the T2 instruments and subordinated loans of financial sector entities where the institution has a significant investment in those entities (net of eligible short positions) (negative amount) | - |   |
|  56 | Empty set in the UK |  |   |
|  UK 56a | Qualifying eligible liabilities deductions that exceed the eligible liabilities items of the institution (negative amount) | - |   |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

|   | a 30 Sep 25 | b Source based on reference numbers / letters of the balance sheet under the regulatory scope of consolidation  |   |
| --- | --- | --- | --- |
|   |   |  £m |   |
|  UK 56b | Other regulatory adjustments to T2 capital | - |   |
|  57 | Total regulatory adjustments to Tier 2 ('T2') capital | - |   |
|  58 | Tier 2 ('T2') capital | 150.0 |   |
|  59 | Total capital (TC = T1 + T2) | 1,322.4 |   |
|  60 | Total risk exposure amount | 8,630.7 |   |
|  Capital ratios and buffers  |   |   |   |
|  61 | Common Equity Tier 1 (as a percentage of total risk exposure amount) | 13.6% |   |
|  62 | Tier 1 (as a percentage of total risk exposure amount) | 13.6% |   |
|  63 | Total capital (as a percentage of total risk exposure amount) | 15.3% |   |
|  64 | Institution CET1 overall capital requirement (CET1 requirement in accordance with Article 92 (1) CRR, plus additional CET1 requirement which the institution is required to hold in accordance with point (a) of Article 104(1) CRD, plus combined buffer requirement in accordance with Article 128(6) CRD) expressed as a percentage of risk exposure amount) | 10.9% |   |
|  65 | of which: capital conservation buffer requirement | 2.5% |   |
|  66 | of which: countercyclical buffer requirement | 2.0% |   |
|  67 | of which: systemic risk buffer requirement | 0.0% |   |
|  UK 67a | of which: Global Systemically Important Institution (G-SII) or Other Systemically Important Institution (O-SII) buffer | 0.0% |   |
|  68 | Common Equity Tier 1 available to meet buffers (as a percentage of risk exposure amount) | 7.2% |   |
|  69 | [non relevant in UK] |  |   |
|  70 | [non relevant in UK] |  |   |
|  71 | [non relevant in UK] |  |   |
|  72 | Direct and indirect holdings of own funds and eligible liabilities of financial sector entities where the institution does not have a significant investment in those entities (amount below 10% threshold and net of eligible short positions) | - |   |
|  73 | Direct and indirect holdings by the institution of the CET1 instruments of financial sector entities where the institution has a significant investment in those entities (amount below 17.65% thresholds and net of eligible short positions) | - |   |
|  74 | Empty set in the UK |  |   |
|  75 | Deferred tax assets arising from temporary differences (amount below 17.65% threshold, net of related tax liability where the conditions in Article 38 (3) CRR are met) | - |   |
|  Applicable caps on the inclusion of provisions in Tier 2  |   |   |   |
|  76 | Credit risk adjustments included in T2 in respect of exposures subject to standardised approach (prior to the application of the cap) | - |   |
|  77 | Cap on inclusion of credit risk adjustments in T2 under standardised approach | - |   |
|  78 | Credit risk adjustments included in T2 in respect of exposures subject to internal ratings-based approach (prior to the application of the cap) | - |   |
|  79 | Cap for inclusion of credit risk adjustments in T2 under internal ratings-based approach | - |   |
|  80 | Current cap on CET1 instruments subject to phase out arrangements | - |   |
|  81 | Amount excluded from CET1 due to cap (excess over cap after redemptions and maturities) | - |   |
|  82 | Current cap on AT1 instruments subject to phase out arrangements | - |   |
|  83 | Amount excluded from AT1 due to cap (excess over cap after redemptions and maturities) | - |   |
|  84 | Current cap on T2 instruments subject to phase out arrangements | - |   |
|  85 | Amount excluded from T2 due to cap (excess over cap after redemptions and maturities) | - |   |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 5.2. UK CC2 - reconciliation of regulatory own funds to balance sheet in the audited financial statements

|   |   | a Balance sheet as in published financial statements^{1} 30 Sep 25 £m | c Reference  |
| --- | --- | --- | --- |
|  Assets - Breakdown by asset class according to the balance sheet in the published financial statements  |   |   |   |
|  1 | Cash - central banks | 2,175.7 |   |
|  2 | Cash - retail banks | 213.8 |   |
|  3 | Investment securities | 626.2 |   |
|  4 | Loans to customers | 16,335.9 |   |
|  5 | Derivative financial assets | 275.4 |   |
|  6 | Sundry assets | 24.2 |   |
|  7 | Current tax assets | 6.2 |   |
|  8 | Retirement benefit obligations | 23.5 | (c)  |
|  9 | Property, plant and equipment | 77.0 |   |
|  10 | Intangible assets | 172.1 | (b)  |
|  11 | Total assets | 19,930.0 |   |
|  Liabilities - Breakdown by liability class according to the balance sheet in the published financial statements  |   |   |   |
|  1 | Short-term bank borrowings | 0.5 |   |
|  2 | Retail deposits | 16,270.8 |   |
|  3 | Derivative financial liabilities | 68.2 |   |
|  4 | Covered bonds | 499.2 |   |
|  5 | Corporate bond issuance | 150.1 | (e)  |
|  6 | Central bank facilities | 950.0 |   |
|  7 | Sale and repurchase agreements | 100.0 |   |
|  8 | Sundry liabilities | 431.6 |   |
|  9 | Provisions | 25.5 |   |
|  10 | Deferred tax liabilities | 13.9 |   |
|  11 | Total liabilities | 18,509.8 |   |
|  Shareholders' Equity  |   |   |   |
|  1 | Called up share capital | 197.4 | (a)  |
|  2 | Reserves | 1,276.6 | (a)  |
|  3 | Own Shares | (53.8) | (d)  |
|  4 | Total shareholders' equity | 1,420.2 | (a)  |

# 5.3. Main features of regulatory own funds instruments and eligible liabilities instruments

The 2021 Corporate Bond is shown at reference (e) in table UK CC2

|   |   | 1 Equity | 2 2021 Corporate Bond  |
| --- | --- | --- | --- |
|  1 | Issuer | Paragon Banking Group PLC | Paragon Banking Group PLC  |
|  2 | Unique identifier (eg CUSIP, ISIN or Bloomberg identifier for private placement) | ISIN GB00B2NGPM57 | ISIN XS2312738599  |
|  2a | Public or private placement | Public | Public  |
|  3 | Governing law(s) of the instrument | England and Wales | England and Wales  |
|  3a | Contractual recognition of write down and conversion powers of resolution authorities | N/A | N/A  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

|   |   | 1 Equity | 2 2021 Corporate Bond  |
| --- | --- | --- | --- |
|   | Regulatory treatment |  |   |
|  4 | Current treatment taking into account, where applicable, transitional CRR rules | N/A | N/A  |
|  5 | Post-transitional CRR rules | Common Equity Tier-1 | Tier-2  |
|  6 | Eligible at solo/(sub-)consolidated/ solo&(sub-)consolidated | Solo and (sub) consolidated | Solo and (sub) consolidated  |
|  7 | Instrument type (types to be specified by each jurisdiction) | Ordinary Shares | Corporate Bond  |
|  8 | Amount recognised in regulatory capital or eligible liabilities (Currency in million, as of most recent reporting date) | £268.8m | £150.0m  |
|  9 | Nominal amount of instrument | £197.4m | £150.0m  |
|  UK 9a | Issue price | Nominal value £1' | Par  |
|  UK 9b | Redemption price | N/A | Par  |
|  10 | Accounting classification | Shareholders' Equity | Liability-amortised cost  |
|  11 | Original date of issuance | Original listing date 15 May 1989* | 25 March 2021  |
|  12 | Perpetual or dated | Perpetual | Dated  |
|  13 | Original maturity date | No maturity | 25 September 2031  |
|  14 | Issuer call subject to prior supervisory approval | No | Yes  |
|  15 | Optional call date, contingent call dates and redemption amount | N/A | Redeemable by the Issuer on any day (from and including) 25 June 2026  |
|  16 | Subsequent call dates, if applicable | N/A | Tax and Regulatory calls also N/A  |
|   | Coupons / dividends |  |   |
|  17 | Fixed or floating dividend/coupon | Floating | Fixed²  |
|  18 | Coupon rate and related index | N/A | 4.375%  |
|  19 | Existence of a dividend stopper | N/A | No  |
|  UK 20a | Fully discretionary, partially discretionary or mandatory (in terms of timing) | Fully discretionary | Mandatory  |
|  UK 20b | Fully discretionary, partially discretionary or mandatory (in terms of amount) | Fully discretionary | Mandatory  |
|  21 | Existence of step up or other incentive to redeem | No | No  |
|  22 | Non-cumulative or cumulative | Non-cumulative | Cumulative  |
|  23 | Convertible or non-convertible | Non-convertible | Non-convertible  |
|  24 | If convertible, conversion trigger(s) | N/A | N/A  |
|  25 | If convertible, fully or partially | N/A | N/A  |
|  26 | If convertible, conversion rate | N/A | N/A  |
|  27 | If convertible, mandatory or optional conversion | N/A | N/A  |
|  28 | If convertible, specify instrument type convertible into | N/A | N/A  |
|  29 | If convertible, specify issuer of instrument it converts into | N/A | N/A  |
|  30 | Write-down features | N/A | No  |
|  31 | If write-down, write-down trigger(s) | N/A | N/A  |
|  32 | If write-down, full or partial | N/A | N/A  |
|  33 | If write-down, permanent or temporary | N/A | N/A  |
|  34 | If temporary write-down, description of write-up mechanism | N/A | N/A  |
|  34a | Type of subordination (only for eligible liabilities) | N/A | N/A  |
|  UK 34b | Ranking of the instrument in normal insolvency proceedings | 2 | 1  |
|  35 | Position in subordination hierarchy in liquidation (specify instrument type immediately senior to instrument) | 2 | N/A  |
|  36 | Non-compliant transitioned features | No | No  |
|  37 | If yes, specify non-compliant features | N/A | N/A  |
|  37a | Link to the full term and conditions of the instrument (signposting) | Web Link | Web Link  |

*Shares have been issued at various different premiums from time-to-time. *This is the date of the first listing of the Company's ordinary shares. There have been restructurings since that date and further shares have been issued from time-to-time. Subject to market-based repricing five years after issue.

Full terms of business for the Group's Common Equity Tier-1 and Tier-2 instruments are provided on the Investor Relations section of its corporate website www.paragonbankinggroup.co.uk.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 6. Countercyclical capital buffer

## This section sets out

- Geographical distribution of credit exposures relevant for the calculation of the countercyclical buffer
- Amount of institution specific countercyclical buffer

The Countercyclical capital Buffer ('CCyB') is set on a nation-by-nation basis and applies to a firm based on the location of the relevant assets. However all of the Group's assets are located in the UK, and hence only the UK CCyB rate, set by the Financial Policy Committee of the Bank of England, applies.

## 6.1. UK CCyB1 - Geographical distribution of credit exposures relevant for the calculation of the countercyclical buffer

|   | a | b | c | d | e | f | g | h | i | j | k | l | m  |   |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  General credit exposures |   | Relevant credit exposures – Market risk |   | Securitisation exposures | Total exposure value | Own fund requirements |   |   |   | Risk-weighted exposure amounts | Own fund requirements weights (%) | Countercyclical buffer rate (%)  |
|   |   |  Exposure value under the standardised approach | Exposure value under the IRB approach | Sum of long and short positions of trading book exposures for SA | Value of trading book exposures for internal models | Exposure value for non-trading book |   | Relevant credit risk exposures - Credit risk | Relevant credit exposures – Market risk | Relevant credit exposures – Securitisation positions in the non-trading book | Total  |   |   |   |
|  010 | Breakdown by country  |   |   |   |   |   |   |   |   |   |   |   |   |   |
|   | United Kingdom | 16,576.0
| - | - | - | - |
16,576.0 | 607.4 | - | - | 607.4 | 7,593.1 | 100% | 2.00%  |
|  020 | Total | 16,576.0
| - | - | - | - |
16,576.0 | 607.4 | - | - | 607.4 | 7,593.1 | 100% | 2.00%  |

Credit exposures relevant for the calculation of the countercyclical buffer is defined as excluding exposures to central banks, financial institutions, governments and local authorities. The totals shown above do not, therefore, agree to totals presented in other tables.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 6.2. UK CCyB2 - Amount of institution-specific countercyclical capital buffer

This table shows the derivation of the Group's countercyclical capital buffer requirement, based on the total risk exposure amount shown in table UK OV1 in Section 2, and the institution-specific CCyB rate derived in table UK CCyB1 above.

|   |   | a  |
| --- | --- | --- |
|  1 | Total risk exposure amount (£m) | 8,630.7  |
|  2 | Institution specific countercyclical capital buffer rate | 2.5%  |
|  3 | Institution specific countercyclical capital buffer requirement (£m) | 172.6  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 7. Leverage ratio

## This section sets out

- Summary reconciliation of accounting assets and leverage ratio exposures
- Leverage ratio disclosure
- On-balance sheet exposures
- Leverage qualitative information

Leverage is the relationship of a firm's capital to its total balance sheet assets (not adjusted for risk), both adjusted to a regulatory basis. The Group's calculation of its leverage measures, in accordance with the requirements of the Rulebook is set out in the tables below.

## 7.1. UK LR1 - LRSum: Summary reconciliation of accounting assets and leverage ratio exposures

|   |   | a Applicable amount £m  |
| --- | --- | --- |
|  1 | Total assets as per published financial statements | 19,930.0  |
|  2 | Adjustment for entities which are consolidated for accounting purposes but are outside the scope of prudential consolidation | -  |
|  3 | (Adjustment for securitised exposures that meet the operational requirements for the recognition of risk transference) | -  |
|  4 | (Adjustment for exemption of exposures to central banks) | (2,178.7)  |
|  5 | (Adjustment for fiduciary assets recognised on the balance sheet pursuant to the applicable accounting framework but excluded from the total exposure measure in accordance with point (i) of Article 429a(1) of the CRR) | -  |
|  6 | Adjustment for regular-way purchases and sales of financial assets subject to trade date accounting | -  |
|  7 | Adjustment for eligible cash pooling transactions | -  |
|  8 | Adjustment for derivative financial instruments | (165.9)  |
|  9 | Adjustment for securities financing transactions (SFTs) | -  |
|  10 | Adjustment for off-balance sheet items (i.e. conversion to credit equivalent amounts of off-balance sheet exposures) | 255.8  |
|  11 | (Adjustment for prudent valuation adjustments and specific and general provisions which have reduced tier 1 capital (leverage)) | -  |
|  UK-11a | (Adjustment for exposures excluded from the total exposure measure in accordance with point (c) of Article 429a(1) of the CRR) | -  |
|  UK-11b | (Adjustment for exposures excluded from the total exposure measure in accordance with point (j) of Article 429a(1) of the CRR) | -  |
|  12 | Other adjustments | (190.2)  |
|  13 | Total exposure measure | 17,651.0  |

Page 47
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

7.2. UK LR2 - LRCom: Leverage ratio common disclosure

|   | Leverage ratio exposures  |   |   |
| --- | --- | --- | --- |
|   |   |  a 30 Sep 25 £m | b 30 Sep 24 £m  |
|  On-balance sheet exposures (excluding derivatives and SFTs)  |   |   |   |
|  1 | On-balance sheet items (excluding derivatives, SFTs, but including collateral)² | 19,660.0 | 18,953.4  |
|  2 | Gross-up for derivatives collateral provided, where deducted from the balance sheet assets pursuant to the applicable accounting framework | - | -  |
|  3 | (Deductions of receivables assets for cash variation margin provided in derivatives transactions) | - | -  |
|  4 | (Adjustment for securities received under securities financing transactions that are recognised as an asset) | - | -  |
|  5 | (General credit risk adjustments to on-balance sheet items) | - | -  |
|  6 | (Asset amounts deducted in determining tier 1 capital (leverage)) | (195.6) | (191.0)  |
|  7 | Total on-balance sheet exposures (excluding derivatives and SFTs) | 19,464.4 | 18,762.4  |
|  Derivative exposures  |   |   |   |
|  8 | Replacement cost associated with SA-CCR derivatives transactions (i.e. net of eligible cash variation margin) | 46.7 | 90.2  |
|  UK-8a | Derogation for derivatives: replacement costs contribution under the simplified standardised approach | - | -  |
|  9 | Add-on amounts for potential future exposure associated with SA-CCR derivatives transactions | 62.8 | 64.5  |
|  UK-9a | Derogation for derivatives: potential future exposure contribution under the simplified standardised approach | - | -  |
|  UK-9b | Exposure determined under the original exposure method | - | -  |
|  10 | (Exempted CCP leg of client-cleared trade exposures) (SA-CCR) | - | -  |
|  UK-10a | (Exempted CCP leg of client-cleared trade exposures) (simplified standardised approach) | - | -  |
|  UK-10b | (Exempted CCP leg of client-cleared trade exposures) (original exposure method) | - | -  |
|  11 | Adjusted effective notional amount of written credit derivatives | - | -  |
|  12 | (Adjusted effective notional offsets and add-on deductions for written credit derivatives) | - | -  |
|  13 | Total derivatives exposures | 109.5 | 154.7  |
|  Securities financing transaction ('SFT') exposures  |   |   |   |
|  14 | Gross SFT assets (with no recognition of netting), after adjustment for sales accounting transactions | - | -  |
|  15 | (Netted amounts of cash payables and cash receivables of gross SFT assets) | - | -  |
|  16 | Counterparty credit risk exposure for SFT assets | - | -  |
|  UK-16a | Derogation for SFTs: counterparty credit risk exposure in accordance with Articles 429e(5) and 222 of the CRR | - | -  |
|  17 | Agent transaction exposures | - | -  |
|  UK-17a | (Exempted CCP leg of client-cleared SFT exposures) | - | -  |
|  18 | Total securities financing transaction exposures | - | -  |
|  Other off-balance sheet exposures  |   |   |   |
|  19 | Off-balance sheet exposures at gross notional amount | 1,407.6 | 1,210.2  |
|  20 | (Adjustments for conversion to credit equivalent amounts) | (1,151.8) | (1,000.1)  |
|  21 | (General provisions deducted in determining tier 1 capital (leverage) and specific provisions associated with off-balance sheet exposures) | - | -  |
|  22 | Off-balance sheet exposures | 255.8 | 210.1  |
|  Excluded exposures  |   |   |   |
|  UK-22a | (Exposures excluded from the total exposure measure in accordance with point (c) of Article 429a(1) of the CRR) | - | -  |
|  UK-22b | (Exposures exempted in accordance with point (j) of Article 429a(1) of the CRR (on- and off-balance sheet)) | - | -  |
|  UK-22g | (Excluded excess collateral deposited at triparty agents) | - | -  |
|  UK-22k | (Total exempted exposures) | - | -  |

Page 48
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

|   | Leverage ratio exposures  |   |   |
| --- | --- | --- | --- |
|   |   |  a30 Sep 25£m | b30 Sep 24£m  |
|  Capital and total exposure measure  |   |   |   |
|  23 | Tier 1 capital (leverage) | 1,172.4 | 1,177.9  |
|  24 | Total exposure measure including claims on central banks | 19,829.7 | 19,127.2  |
|  UK-24a | (-) Claims on central banks excluded | (2,178.7) | (2,319.3)  |
|  UK-24b | Total exposure measure excluding claims on central banks | 17,651.0 | 16,807.9  |
|  Leverage ratio  |   |   |   |
|  25 | Leverage ratio excluding claims on central banks (%) | 6.6% | 7.0%  |
|  UK-25a | Fully loaded ECL accounting model leverage ratio excluding claims on central banks (%) | 6.6% | 7.0%  |
|  UK-25b | Leverage ratio excluding central bank reserves as if the temporary treatment of unrealised gains and losses measured at fair value through other comprehensive income had not been applied (%) | 6.6% | 7.0%  |
|  UK-25c | Leverage ratio including claims on central banks (%) | 5.9% | 6.2%  |
|  26 | Regulatory minimum leverage ratio requirement (%) | N/A1 | N/A1  |
|  Additional leverage ratio disclosure requirements - leverage ratio buffers  |   |   |   |
|  27 | Leverage ratio buffer (%) | N/A1 | N/A1  |
|  UK-27a | Of which: G-SII or O-SII additional leverage ratio buffer (%) | N/A1 | N/A1  |
|  UK-27b | Of which: countercyclical leverage ratio buffer (%) | N/A1 | N/A1  |
|  Additional leverage ratio disclosure requirements - disclosure of mean values  |   |   |   |
|  28 | Mean of daily values of gross SFT assets, after adjustment for sale accounting transactions and netted of amounts of associated cash payables and cash receivable | N/A1 | N/A1  |
|  29 | Quarter-end value of gross SFT assets, after adjustment for sale accounting transactions and netted off amounts of associated cash payables and cash receivables | N/A1 | N/A1  |
|  UK-31 | Average total exposure measure including claims on central banks | N/A1 | N/A1  |
|  UK-32 | Average total exposure measure excluding claims on central banks | N/A1 | N/A1  |
|  UK-33 | Average leverage ratio including claims on central banks | N/A1 | N/A1  |
|  UK-34 | Average leverage ratio excluding claims on central banks | N/A1 | N/A1  |

Notes:
1Annex XII 4a in the Disclosure (CRR) Part, requires only LREQ firms to disclose the lines marked UK LR2 26 and UK LR2 27 to 34. The Group is not large enough to qualify as an LREQ firm.
2On-balance sheet items (excluding derivatives, SFTs, but including collateral) is calculated by taking the total balance sheet assets (£19,930.0m) adjusting for fair value adjustments on loans to customers (£5.4m) and deducting derivative assets (£275.4m).

# 7.3. UK LR3 - LRSpl: Split-up of on balance sheet exposures (excluding derivatives, SFTs and exempted exposures

|   |   | a Leverage ratio exposure £m  |
| --- | --- | --- |
|  UK-1 | Total on-balance sheet exposures (excluding derivatives, SFTs, and exempted exposures), of which: | 19,458.6  |
|  UK-2 | Trading book exposures | -  |
|  UK-3 | Banking book exposures, of which: | 19,458.6  |
|  UK-4 | Covered bonds | 116.8  |
|  UK-5 | Exposures treated as sovereigns | 2,782.9  |
|  UK-6 | Exposures to regional governments, MDB, international organisations and PSE not treated as sovereigns | 55.9  |
|  UK-7 | Institutions | 215.3  |
|  UK-8 | Secured by mortgages of immovable properties | 13,680.8  |
|  UK-9 | Retail exposures | 937.2  |
|  UK-10 | Corporates | 1,293.6  |
|  UK-11 | Exposures in default | 307.8  |
|  UK-12 | Other exposures (e.g. equity, securitisations, and other non-credit obligation assets) | 68.3  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

7.4. UK LRA: Disclosure of LR qualitative information

(a) processes used to manage the risk of excessive leverage

The Group is not subject to the leverage ratio capital requirements. However, following the implementation of PS21/21: The UK leverage ratio framework, the PRA has confirmed that all firms not in scope of the leverage ratio capital requirements should manage their leverage risk such that their leverage ratio does not fall below 3.25%.

The Board recognises the importance of managing leverage which forms an essential part of capital planning and risk management. The Group's risk appetite statements set out the internal leverage ratio limits, targets and trigger points. The Group manages and plans to maintain capital in excess of the 3.25% minimum requirement throughout the forecast horizon in its baseline and stress scenarios.

The Group monitors its leverage ratio relative to its regulatory and internal requirements, alongside a comparison to peer organisations and the broader financial sector.

The current structure of the balance sheet returns a high leverage ratio. The Group's leverage ratio has remained well in excess of the 3.25% PRA guideline since the Bank's authorisation. This positive position will be maintained during the period covered by the business planning process, which will take account of stress testing impacts on the ratio.

(b) factors that had an impact on the leverage ratio during the period

The Group's leverage ratio, both including and excluding central bank claims, continued to show a reversion to more normal levels over the year. This reflects the inclusion in trading profits, and hence CET1, of the unwind of fair value hedge accounting gains recognised in the year ended 30 September 2022, which had temporarily inflated CET1 at that date. As the IFRS 9 reliefs have now been phased out, the fully loaded and regulatory bases have converged.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 8. Liquidity requirements

## This section sets out

- Liquidity risk management
- Liquidity Coverage Ratio ('LCR')
- Net Stable Funding Ratio ('NSFR')

Liquidity and funding risk is the risk that Paragon has insufficient financial resources to enable it to meet its obligations as they fall due or cannot raise or maintain sufficient funds to finance its future plans.

The Group holds liquid assets to meet cash requirements in the short and long term, as well as to provide a buffer under stress. There is also a regulatory requirement to hold liquidity in Paragon Bank. The Group's policy is to maintain strong levels of liquidity cover, and this policy impacts operational capital and funding requirements. The Group's liquidity is principally held in the form of deposits at the Bank of England, with diversification towards highly-rated UK gilts and UK AAA-rated covered bonds continuing in the year with additional purchases.

The two key regulatory measures of liquidity are the Liquidity Coverage Ratio ('LCR') which measures resilience over a 30-day horizon and the Net Stable Funding Ratio ('NSFR'), which is a longer-term measure with a one-year horizon. Both are calculated on a common basis across the banking sector.

Liquidity is regulated at the level of Paragon Bank PLC, rather than at group level and liquidity measures for the Bank are presented below.

## 8.1. UK LIQA – Liquidity risk management

### (a) Strategies and processes in the management of the liquidity risk, including policies on diversification in the sources and tenor of planned funding

The Group manages its liquidity in line with the Board's risk appetite and the requirements of the PRA, which are formally documented in the ILAAP. The ILAAP is updated and approved by the Board annually, but it may be reviewed more frequently if there are material changes in the Group's business. Comprehensive treasury policies and risk limits are in place to ensure sufficient liquidity is maintained, funding concentration risk is managed appropriately and that all financial obligations can be met as they fall due, even under stressed conditions. Liquidity risk is designated as a principal risk within the Group's overall ERMF and therefore subject to structured review and governance processes, as described in template UK OVA in Section 3.1.

The Group maintains a diversified range of both retail and wholesale funding sources to cover current and future business requirements. It remains well placed to access funding from a wide range of sources, with access to the retail savings market having been effective during the year through both direct and intermediated deposit platform distribution channels. Further diversification has been achieved with the launch of the Group's app-based Spring savings proposition. To supplement the Group's existing RMBS issuance platform, during the last year the Group established an FCA-regulated covered bond programme, further enhancing the Group's access to wholesale funding markets, with initial issuance of £500.0 million in the year.

### (b) Structure and organisation of the liquidity risk management function

The day-to-day management of the Group's liquidity is delegated by the ERC to ALCO, and is implemented by the Group's Treasury function.

The Board, through the delegated authority provided to ALCO, sets limits on the minimum amount and composition of liquidity resources and on funding concentrations by channel, product type and maturity. Liquidity risk management is addressed by the ERMF, in the same way as the management of other principal risks, and is subject to the 'three lines of defence' model with Second Line oversight undertaken by the Prudential Risk function, and assurance provided by Third Line (Internal Audit), in addition to the controls operated in the Treasury function itself.

### (c) A description of the degree of centralisation of liquidity management and interaction between the Group's units

The Group has a centralised Treasury function which is responsible for the day-to-day management of liquidity risk at the Bank level and for the Group as a whole. It is also responsible for the management of wholesale and contingent funding arrangements.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(d) Scope and nature of liquidity risk reporting and measurement systems

The Group's management information process includes the monitoring and reporting of liquidity and funding risk metrics. These include Key Risk Indicators ('KRIs'), lead indicators, and projected liquidity and funding requirements with the frequency of reporting depending on the materiality of the exposure in the context of the Group's liquidity risk appetite.

Daily monitoring and reporting of exposures is undertaken using the Group's liquidity and planning system, supplemented with information from the Treasury Management System. Liquidity forecasts are produced weekly and are reviewed by the Group's Liquidity Outlook Committee ('LOC'). Key information is presented in the Treasury ALCO Report, which is reviewed by ALCO on a monthly basis.

(e) Policies for hedging and mitigating the liquidity risk and strategies and processes for monitoring their effectiveness

The Board, through the delegated authority provided to the ALCO, sets limits for the level, composition and maturity of funding and liquidity resources.

To mitigate liquidity risk the Group maintains a buffer of High-Quality Liquid Assets ('HQLA') and non-HQLA resources that is sufficient to withstand a severe, sustained outflow of funds in a combined idiosyncratic and market-wide stress, while maintaining access to a range of on balance sheet and contingent funding sources.

The Group has a dedicated Treasury function, which is responsible for the day-to-day management of overall liquidity and wholesale funding. Treasury operations are managed within an appropriately segregated structure with oversight from the second line Risk function.

Comprehensive treasury policies are in place to ensure sufficient liquid assets are maintained and that all financial obligations can be met as they fall due, even under stressed conditions. These treasury policies, which are approved by the RCC annually, detail the Board and ALCO limits in place to mitigate liquidity and funding risk.

The weekly LOC reviews key funding and liquidity data and a rolling liquidity forecast, ensuring that action is taken as appropriate. ALCO reviews key data on a monthly basis.

(f) An outline of contingency funding plans

The Group maintains a diversified range of both retail and wholesale funding sources to cover current and future business requirements. Its holdings of its own retained mortgage-backed securities, together with its holdings of gilts and covered bonds and assets pre-positioned with the Bank of England, provide ready access to additional funding or liquidity if required.

The Group's contingency funding plan is fully integrated into the Recovery Plan ('RP') which in turn is integrated into the wider governance and risk management framework and is approved by the Board. The RP sets out indicators and trigger points that are used to identify early signs of a liquidity or funding stress, and the subsequent escalation process. The RP details a range of credible and viable recovery options which the Group could use to maintain and restore liquidity resources and considers their financial impact if implemented.

(g) An explanation of how stress testing is used

Stress testing is a risk management tool used to evaluate the potential impact of changes to liquidity risk drivers (amongst other factors) on the financial strength and operational resilience of the Group, including its capital and liquidity positions. Stress testing exercises are conducted as part of the ILAAP, the corporate planning process, and the assessment of going concern in support of statutory reporting requirements. Stress testing is also conducted on an ad hoc basis in response to emerging or potential risks.

Liquidity stress testing is used to demonstrate overall liquidity adequacy by considering the impact of a range of severe but plausible stress scenarios on cash flows, liquidity resources, profitability, solvency, asset encumbrance and the funding profile. Scenarios are selected both in order to meet regulatory requirements and to address factors specific to the Group's business model.

(h) A declaration approved by the management body on the adequacy of liquidity risk management arrangements

The ILAAP is approved by the Board on an annual basis and is the key document in demonstrating that the adequacy of liquidity risk management arrangements, liquidity resources and funding profile prudency, enables the Group to meet the threshold condition: business to be conducted in a prudent manner.

This threshold condition summarises the liquidity and funding risk appetite statement and risk strategy statement which are approved by the Board annually.

(i) A concise liquidity risk statement approved by the management body

In the view of the Board, the key ratios and figures included in the UK LIQ1 template are sufficient to provide external stakeholders with a comprehensive view of the Group's management of liquidity risk.

The Group will manage liquidity and funding risk generated by business operations in an efficient and controlled manner, ensuring a buffer above regulatory minima is maintained at all times.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 8.2. UK LIQ1 – Quantitative information of LCR

The LCR is a measure of short-term resilience and compares available highly liquid assets to forecast short-term cashflows. It is calculated on a standard basis, prescribed by the regulator, with a 30-day horizon. LCR is monitored internally on a point-in-time basis, but the Rulebook requires disclosure on a 12-month rolling average basis. The nature of the inflows and outflows considered in the LCR are set out in the table below. The weightings applied are derived from regulatory requirements.

The LIQ1 data in the table below is calculated for Paragon Bank PLC on a rolling 12-month average basis.

|  £m | a | b | c | d | e | f | g | h  |   |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  Total unweighted value (average) |   |   |   | Total weighted value (average)  |   |   |   |
|  UK 1a | Quarter ending on (DD Month YYY) | 30 Sep 25 | 30 Jun 25 | 31 Mar 25 | 31 Dec 24 | 30 Sep 25 | 30 Jun 25 | 31 Mar 25 | 31 Dec 24  |
|  UK 1b | Number of data points used in the calculation of averages | 12 | 12 | 12 | 12 | 12 | 12 | 12 | 12  |
|  HIGH-QUALITY LIQUID ASSETS  |   |   |   |   |   |   |   |   |   |
|  1 | Total high-quality liquid assets ('HQLA') |  |  |  |  | 2,439.5 | 2,578.4 | 2,924.8 | 3,030.3  |
|  |   |   |   |   |   |   |   |   |   |
|  2 | Retail deposits and deposits from small business customers, of which: | 16,231.4 | 16,314.6 | 16,330.7 | 15,954.7 | 1,508.1 | 1,496.4 | 1,459.0 | 1,381.7  |
|  3 | Stable deposits | 1,500.2 | 1,457.5 | 1,354.6 | 1,208.0 | 75.0 | 72.9 | 67.7 | 60.4  |
|  4 | Less stable deposits | 10,886.3 | 10,681.7 | 10,430.6 | 9,837.0 | 1,433.1 | 1,423.6 | 1,391.2 | 1,321.3  |
|  5 | Unsecured wholesale funding | 0.5 | 0.6 | 0.6 | 0.6 | 0.5 | 0.6 | 0.6 | 0.6  |
|  6 | Operational deposits (all counterparties) and deposits in networks of cooperative banks | - | - | - | - | - | - | - | -  |
|  7 | Non-operational deposits (all counterparties) | - | - | - | - | - | - | - | -  |
|  8 | Unsecured debt | 0.5 | 0.6 | 0.6 | 0.6 | 0.5 | 0.6 | 0.6 | 0.6  |
|  9 | Secured wholesale funding |  |  |  |  | 33.8 | 33.9 | 33.9 | 25.4  |
|  10 | Additional requirements | 189.4 | 211.2 | 234.5 | 256.6 | 159.7 | 179.4 | 200.9 | 221.9  |
|  11 | Outflows related to derivative exposures and other collateral requirements | 150.8 | 168.9 | 189.6 | 211.0 | 150.8 | 168.9 | 189.6 | 211.0  |
|  12 | Outflows related to loss of funding on debt products | - | - | - | - | - | - | - | -  |
|  13 | Credit and liquidity facilities | 38.6 | 42.3 | 44.9 | 45.6 | 8.8 | 10.6 | 11.2 | 10.9  |
|  14 | Other contractual funding obligations | 1,137.3 | 1,113.0 | 1,106.2 | 1,089.9 | 216.3 | 219.0 | 224.0 | 224.5  |
|  15 | Other contingent funding obligations | 36.3 | 38.2 | 41.9 | 42.9 | 13.3 | 14.9 | 18.9 | 19.7  |
|  16 | TOTAL CASH OUTFLOWS |  |  |  |  | 1,931.2 | 1,943.6 | 1,936.6 | 1,873.3  |
|  CASH - INFLOWS  |   |   |   |   |   |   |   |   |   |
|  17 | Secured lending (e.g. reverse repos) | 0.3 | 0.2 | 0.1 | - | 0.3 | 0.2 | 0.1 | -  |
|  18 | Inflows from fully performing exposures | 153.1 | 159.5 | 155.1 | 156.6 | 78.2 | 81.6 | 79.8 | 82.1  |
|  19 | Other cash inflows | 289.4 | 288.5 | 277.0 | 265.8 | 269.3 | 271.0 | 262.1 | 252.7  |
|  UK-19a | (Difference between total weighted inflows and total weighted outflows arising from transactions in third countries where there are transfer restrictions or which are denominated in non-convertible currencies) |  |  |  |  | - | - | - | -  |
|  UK-19b | (Excess inflows from a related specialised credit institution) |  |  |  |  | - | - | - | -  |
|  20 | TOTAL CASH INFLOWS | 442.8 | 448.2 | 432.2 | 422.4 | 347.8 | 352.7 | 342.0 | 334.8  |
|  UK-20a | Fully exempt inflows | - | - | - | - | - | - | - | -  |
|  UK-20b | Inflows subject to 90% cap | - | - | - | - | - | - | - | -  |
|  UK-20c | Inflows subject to 75% cap | 442.8 | 448.2 | 432.2 | 422.4 | 347.8 | 352.7 | 342.0 | 334.8  |
|  TOTAL ADJUSTED VALUE  |   |   |   |   |   |   |   |   |   |
|  UK-21 | LIQUIDITY BUFFER |  |  |  |  | 2,439.5 | 2,578.4 | 2,924.8 | 3,030.3  |
|  22 | TOTAL NET CASH OUTFLOWS |  |  |  |  | 1,583.5 | 1,590.9 | 1,594.5 | 1,538.5  |
|  23 | LIQUIDITY COVERAGE RATIO |  |  |  |  | 154.0% | 161.5% | 183.2% | 198.7%  |
|   |  |  |  |  |  | Table UK KML Section 2 |  | Table UK KML Section 2 |   |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

8.3. UK LIQB - Qualitative information on LCR, which complements template UK LIQ1

(a) Main drivers of LCR results

The principal drivers underlying the LCR calculation are a combination of the amount of High-Quality Liquid Assets ('HQLA'), stressed deposit outflows, wholesale funding maturities, pipeline lending commitments and swap collateral outflows that could arise in a stress. As the Group is predominantly retail deposit funded, deposit outflows are the largest contributor to net outflows in the LCR.

The appropriate level of cash reserves is monitored on an ongoing basis as part of the capital and liquidity strategy, while allowing for the developing needs of the business.

(b) Explanations on the changes in the LCR over time

The Group's twelve-month average LCR of 154.0% for the year (2024: 211.5%) reflects both the refinement of our liquidity policy as our deposit book matures, releasing excess amounts, and the utilisation of liquidity to facilitate debt repayments over the past two years, in particular, on our TFSME borrowings. We saw the continued repayment of the Group's TFSME drawings which reduced from an initial total of £750.0 million to £250.0 million as of 30 September 2025.

The average LCR has been managed on a downward path for some time and the 2025 year end level should be regarded as being closer to the long-term norm than that at the previous year end.

(c) Explanations on the actual concentration of funding sources

The Group's primary source of funding is retail deposits, sourced both from its in-house operations, and through a presence on third party savings and wealth management platforms, providing access to a wider range of customers. Additional diversity will be generated through the Group's digital savings operation, Spring, which was launched during the year, targeting a different type of customer to its established Paragon-branded offering. This range of alternative routes to market optimises the Group's access to liquidity and is an important aspect of its diversified funding mix. Risk appetite limits are in place to manage funding concentrations by channel, customer, maturity and product type. Around 95% of the Group's savings deposits are FSCS covered.

Retail funding is supplemented with secured wholesale funding, with a new covered bond programme, launched in the year, now accompanying the existing established RMBS platform. Use is also made of short term sale and repurchase ('repo') facilities with a variety of banks.

The Group's contingent funding sources form part of its overall liquidity strategy. Holdings of our own securities, investment securities issued by others and loans pre-positioned with the Bank of England provide access to central bank facilities, if required, without incurring the carry cost of additional borrowings and provide a mitigant to any potential concentration risk.

(d) High-level description of the composition of the institution's liquidity buffer

The Bank's HQLA comprise cash held in the Bank's Bank of England Reserves Account, UK Government securities ('gilts') and AAA-rated covered bonds issued by UK financial institutions. The Bank's HQLA are all LCR Level 1 eligible and are under the day-to-day control of the Treasury function.

(e) Derivative exposures and potential collateral calls

The Group uses derivatives such as interest rate swaps for risk management purposes only. The Group does not operate a trading book. The LCR net cash outflows related to derivative transactions reflect the risk of potential additional collateral outflows due to adverse changes in market rates.

The Bank's internal assessment of liquidity requirements includes potential collateral calls which exceed the LCR's Historical Look-Back Approach for quantifying collateral outflow risk.

(f) Currency mismatch in the LCR

The vast majority of the Group's retail funding and lending business is denominated in UK pounds sterling, as is its HQLA balance. Therefore, the Group's currency mismatch risk for LCR purposes is immaterial.

(g) Other items in the LCR calculation that are not captured in the LCR disclosure template

There are no other relevant items.

Page 54
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 8.4. UK LIQ2 – Net Stable Funding Ratio ('NSFR')

The NSFR, which is calculated for the Bank on a standardised basis, is a measure of long-term liquidity, with a one-year horizon, and is used to monitor the Bank's strategic funding requirements. It represents the proportion of long-term assets funded by stable funding. At 30 September 2025 the Bank's NSFR stood at 135.0% (30 September 2024: 139.5%), broadly similar to its position twelve months earlier.

The LIQ2 data in the table below is calculated for Paragon Bank PLC on a rolling 12-month average basis.

|  £m | a | b | c | d | e  |   |
| --- | --- | --- | --- | --- | --- | --- |
|   |   |  Unweighted value by residual maturity |   |   |   | Weighted value  |
|   |   |  No maturity | < 6 months | 6 months to < 1yr | ≥ 1yr  |   |
|  Available stable funding ('ASF') Items  |   |   |   |   |   |   |
|  1 | Capital items and instruments | 1,292.7
| - | - |
112.4 | 1,405.1  |
|  2 | Own funds | 1,292.7
| - | - |
112.4 | 1,405.1  |
|  3 | Other capital instruments |  | - | - | - | -  |
|  4 | Retail deposits |  | 11,704.6 | 2,977.8 | 1,628.8 | 14,918.3  |
|  5 | Stable deposits |  | 1,507.0
| - | - |
1,431.7  |
|  6 | Less stable deposits |  | 10,197.6 | 2,977.8 | 1,628.8 | 13,486.6  |
|  7 | Wholesale funding: |  | 635.1 | 247.4 | 5.2 | 128.9  |
|  8 | Operational deposits |  | - | - | - | -  |
|  9 | Other wholesale funding |  | 635.1 | 247.4 | 5.2 | 128.9  |
|  10 | Interdependent liabilities |  | - | - | - | -  |
|  11 | Other liabilities: | - | 1,275.7 | 500.4 | 1,702.6 | 1,584.5  |
|  12 | NSFR derivative liabilities | - |  |  |  |   |
|  13 | All other liabilities and capital instruments not included in the above categories |  | 968.9 | 596.6 | 1,286.2 | 1,584.5  |
|  14 | Total available stable funding ('ASF') |  |  |  |  | 18,036.8  |
|  Required stable funding ('RSF') Items  |   |   |   |   |   |   |
|  15 | Total high-quality liquid assets ('HQLA') |  |  |  |  | 5.5  |
|  UK-15a | Assets encumbered for more than 12m in cover pool |  | 0.2 | 0.8 | 505.5 | 430.6  |
|  16 | Deposits held at other financial institutions for operational purposes |  | - | - | - | -  |
|  17 | Performing loans and securities: |  | 1,230.5 | 1,004.8 | 15,251.3 | 11,595.9  |
|  18 | Performing securities financing transactions with financial customers collateralised by Level 1 HQLA subject to 0% haircut |  | - | - | - | -  |
|  19 | Performing securities financing transactions with financial customers collateralised by other assets and loans and advances to financial institutions |  | 210.8 | 54.9 | 202.6 | 251.1  |
|  20 | Performing loans to non- financial corporate clients, loans to retail and small business customers, and loans to sovereigns, and PSEs, of which: |  | 482.4 | 353.0 | 14,078.0 | 10,118.9  |
|  21 | With a risk weight of less than or equal to 35% under the Basel II Standardised Approach for credit risk |  | 63.7 | 67.2 | 12,882.5 | 8,750.5  |
|  22 | Performing residential mortgages, of which: |  | 3.6 | 0.2 | 57.9 | 39.6  |
|  23 | With a risk weight of less than or equal to 35% under the Basel II Standardised Approach for credit risk |  | 0.1 | 0.2 | 57.9 | 37.8  |
|  24 | Other loans and securities that are not in default and do not qualify as HQLA, including exchange-traded equities and trade finance on-balance sheet products |  | 533.8 | 596.8 | 912.8 | 1,186.3  |
|  25 | Interdependent assets |  | - | - | - | -  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

|  £m | a | b | c | d | e  |   |
| --- | --- | --- | --- | --- | --- | --- |
|   |   |  Unweighted value by residual maturity |   |   |   | Weighted value  |
|   |   |  No maturity | < 6 months | 6 months to < 1yr | ≥ 1yr  |   |
|  26 | Other assets: | - | 191.8 | 15.4 | 741.0 | 910.7  |
|  27 | Physical traded commodities |  |  |  | - | -  |
|  28 | Assets posted as initial margin for derivative contracts and contributions to default funds of CCPs |  |  |  | 116.7 | 99.2  |
|  29 | NSFR derivative assets |  |  |  | 157.7 | 157.7  |
|  30 | NSFR derivative liabilities before deduction of variation margin posted |  |  |  | 4.8 | 0.2  |
|  31 | All other assets not included in the above categories |  | 191.8 | 15.4 | 461.8 | 653.6  |
|  32 | Off-balance sheet items |  | 1,300.8
| - | - |
65.0  |
|  33 | Total RSF |  |  |  |  | 13,007.8  |
|  34 | Net Stable Funding Ratio (%) |  |  |  |  | 138.7%  |
|   |  |  |  |  |  | Table OK KMT Section 2  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Page 57
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

# 9. Exposures to credit risk and credit quality

## This section sets out

- Risk management objectives and policies for credit risk
- Credit quality of assets
- Performing and non-performing exposures and related provisions
- Maturity of exposures
- Changes in stock of non-performing loans and advances and related net accumulated recoveries
- Credit quality of forborne exposures
- Collateral

This section provides information on the amounts and nature of the Group's credit risk exposures, which principally arise from its lending activities, but also include institutional exposures (to other banks and the Bank of England) relating to cash balances and exposures in respect of investment securities.

Assets below are classified according to regulatory categories, which differ from those which the Group uses to describe these balances in other external reporting.

## 9.1. UK CRA: General qualitative information about credit risk

### (a) How the business model translates into the components of the Group's credit risk profile (in accordance with point (f) of Article 435(1) CRR)

Credit risk is a fundamental risk that is inherent to the business model of the Group. The credit risk strategy is based on the management of that risk to support maximum value generation. The Group's credit risk strategy is to ensure that business growth is actively encouraged to achieve profit expansion, focussing on sectors where credit risk can be managed to a stable, low cost level. Growth is maximised within credit criteria that are consistent with minimal earnings' volatility. In order to achieve these aims, the Group focuses on business streams where it has specific expertise in order to control and mitigate its exposure to credit risk.

The Group Credit Risk Principal Risk Policy provides a structured and disciplined approach to the management of risk within agreed board risk appetites. The framework:

- establishes standards for the consistent identification, measurement, monitoring, management and reporting of credit risk exposure and loss experience
- outlines the approach that will be taken in respect of setting and defining risk appetite and risk tolerances
- promotes effective credit risk management across the Group, thereby supporting the delivery of credit performance within risk appetite

Risk appetite is described at a granular level, with policies aligning to that risk appetite. Risk appetite is expressed both qualitatively and quantitatively, with stated tolerances within which the business must operate.

---

(b) Strategies and processes to manage credit risk and the policies for hedging and mitigating that risk, including the criteria and approach used for defining the credit risk management policy and for setting credit risk limits (in accordance with points (a) and (d) of Article 435(1) CRR)

The Group controls and mitigates credit risk by focussing on business streams where it has specific expertise. The Group has a robust limit framework supported by comprehensive policies that set out detailed criteria which must be met before loans are approved. A suite of scorecards and statistical models are utilised to measure and grade credit risk at both origination and throughout the customer life cycle.

Originated loan assets are subject to individual underwriting approval with robust control and support provided in most areas by well-established decision tools. Complementing these controls is an established quality assurance framework ensuring that underwriting standards are maintained.

Credit risks are managed effectively within the appetite set by the Board through:

- The evaluation of the credit risk exhibited by potential borrowers using a combination of lending policy criteria, credit assessment, policy rules and underwriting. Whilst the specific factors considered vary depending on the product line, these include borrower affordability, credit history and loan-to-value. In addition, confirmation of borrower identity is obtained. When considering applications, the primary focus is always placed on the individual or business's willingness and ability to repay
- The taking of security against the loan. For example, all mortgages are secured by way of a first legal charge against UK residential property
- On-going monitoring of account performance. Loans which show signs of adverse performance are typically managed by specialist areas which manage collections and recovery processes

In terms of supporting collateral, the majority of the Group's loans by value continue to be secured against residential property in England and Wales at conservative loan-to-value levels.

Collections and arrears management processes are in place which are consistent with the Group's principle of treating customers in vulnerable circumstances fairly and supportively. These processes benefit from specialist staff.

The Group uses a range of sources to inform expectations of key external factors such as interest rate movements and house price inflation which are in turn used to guide policy and underwriting.

The Group applies maximum limits to risk concentrations, such as geographical spread and maximum exposure to individual customers. These limits are numerous and are tracked on a monthly basis by the Group's Credit Risk function, and reported monthly through the Credit Committee. Board and Executive Committee level metrics are then reported onwards. Potential areas of concentration relating not just to loan products but also covering borrower, asset, region, or large exposure risk for example, are therefore managed within defined limits.

The Group's largest portfolio concentration is that of buy-to-let mortgages. The Group has a very deep understanding of the private rented sector built up over many years of successful operations in the buy-to-let market. This includes a long history of performance data through the economic cycle together with regular independently conducted research commissioned over many years.

All buy-to-let mortgages and development finance loans are secured by way of a first legal charge on UK property or land, with additional charges and guarantees related to the build generally also required for development finance cases.

The primary collateral therefore benefits from the features of UK property which forms part of a highly mature, liquid, sustainable market demonstrated over many decades of operation.

The Group conducts valuations of properties given as security at the inception of loans and updates the valuations from time-to-time as part of its account management and arrears processes, typically conducting drive-by or full valuations as accounts move through arrears stages. All initial buy-to-let mortgage and development finance valuations, which form part of the underwriting process, are provided by Royal Institution of Chartered Surveyors ('RICS') qualified surveyors who undertake their assessment through an on-site, physical inspection of each property or site as appropriate.

Overall 99.3% of the Group's loan portfolio enjoys some form of security (2024: 99.4%), including 90.8% which is secured on property (2024: 91.0%).

## Wholesale counterparty risk

Exposure to wholesale counterparty credit risk is limited to counterparties that meet specific credit rating criteria per the Group's comprehensive treasury policies.

Exposure to approved counterparties is monitored daily by senior management within the Group's Treasury function with all exposure managed within approved limits. The credit rating of all treasury counterparties and the Group's exposure to them is reported monthly to ALCO.

Treasury counterparties are typically highly rated banks, including the Bank of England. All cash deposits and derivative positions held within the Group's securitisation structures must comply with criteria set out in the financing arrangements.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(c) The structure and organisation of the credit risk management and control function (in accordance with point (b) of Article 435(1) CRR)

A clear risk governance structure, as detailed in the ERMF, is in place to facilitate the oversight of credit risk and the broader requirements which underpin the identification, assessment, and management of risks across the Group.

The Board is the key governance body and is responsible for the Group's strategy, performance and for ensuring appropriate and effective risk management. The Board delegates the responsibility of risk management oversight across the Group to the RCC.

The Board has delegated responsibility for the day-to-day running of the business to the CEO. The CEO is supported in performing these day-to-day activities through designated executive sub-committees, one of which, the ERC, is responsible for adherence to board and executive risk appetites, risk appetite statements, risk triggers and thresholds, risk profile and risk strategy.

Established under the authority of the ERC is the Credit Committee. The Credit Committee is the primary management committee responsible for the management of credit risk and credit risk related issues. The Credit Committee is authorised by the ERC to oversee the management of credit risk within the Board's risk appetite. The committee is responsible for oversight and advice to the ERC covering areas of credit policy, analytics, credit risk monitoring, credit risk quality, and risk oversight throughout the customer life cycle.

The Credit Committee is chaired by the Credit Risk Director, who is the head of the second line Credit Risk function. This division supports the Credit Committee in its work and monitors and analyses the Group's credit performance independently of the business areas.

(d) The relationships between credit risk management, risk control, compliance and internal audit functions (in accordance with point (b) of Article 435(1) CRR)

The 'Three Lines of Defence' model (Detailed in Section 3.1, template UK OVA (b)) has been adopted as the overarching approach to risk management within the Group. The model ensures appropriate responsibility is allocated for the management, reporting and escalation of risk. Allocation of clear responsibilities for credit risk management ensures risks are identified, monitored, managed, and mitigated where required in order that they remain within the Board's risk appetite.

The first line of defence is represented by the business divisions who are responsible for the initial assessment and management of credit risk. These responsibilities include measuring and managing the business in accordance with credit risk appetite as well as identifying and reviewing all material and emerging credit risks. The first lines operate within delegated mandate authorities and are responsible for reporting any breach of credit policy.

The second line Credit Risk function provides oversight and challenge to the first line's management of credit risk. The team provides day-to-day control and oversight of the risks associated with lending through a combination of standard risk management principles and modelling technology. This includes assessment of new business quality, monitoring lending performance and developing and maintaining application processing decision systems. Quality assurance is provided through an extensive and mature framework, complementing the quantitative elements of credit risk management. Outputs from quality assurance assessments are reported through the Credit Committee. The Credit Risk team also monitors the lending control structures to ensure compliance with the Group's Credit Policies.

Internal Audit acts as the third line of defence. It independently challenges the overall management of credit risk including assessing the adequacy and effectiveness of the Group Credit Risk Policy and key credit risk controls. It is responsible for assurance in respect of control monitoring and testing whilst also independently assessing all aspects of the rating systems, including model components (such as Probability of Default ('PD'), loss given default ('LGD') and exposure at default ('EAD')), data integrity, model lifecycle processes and credit approval processes.

Internal and external audit provide assurance to the Audit Committee and senior management on the adequacy of both the first and second lines.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

## 9.2. UK CRB: Additional disclosure related to the credit quality of assets

### (a) The scope and definitions of ‘past-due’ and ‘impaired’ exposures used for accounting purposes and the differences, if any, between the definitions of past due and default for accounting and regulatory purposes (in accordance with Article 178 CRR)

IFRS 9 defines a credit impaired account as one where an account has suffered one or more events which have had a detrimental effect on future cash flows. It is thus a backward-looking definition, rather than one based on future expectations. Such accounts are referred to, in the context of IFRS 9, as ‘Stage 3’ accounts.

Credit impaired assets are identified either through quantitative measures or by operational status. Designations of accounts for regulatory capital purposes are also taken into account. Assets may also be assigned to Stage 3 if they are identified as credit impaired as a result of management review processes.

All loans which are in the process of enforcement, from the point where this becomes the administration strategy, are classified as credit impaired.

Loans are retained in Stage 3 for three months after the point where they cease to exhibit the characteristics of default. After this point, they may move to Stage 2 or Stage 1 depending on whether a trigger indicating a Significant Increase in Credit Risk (‘SICR’) remains.

All default cases are considered to be credit impaired, including all receiver of rent cases and all cases with at least one payment more than 90 days overdue, even where such cases are being managed in the expectation of realising all of the carrying balance. The definition of default used for accounting purposes is materially aligned to that used for regulatory purposes.

For the majority of its portfolios the Group uses arrears multiples as a proxy for days past due, with the arrears multiple defined as the overdue balance outstanding divided by the expected monthly payment. A loan will therefore generally be considered one month past due from the point at which a full payment is one day overdue until it is 30 days overdue. For some portfolios, including the Group’s development finance book, regular payments are not required, therefore the past due test is less relevant in managing credit.

### (b) The extent of past-due exposures (more than 90 days) that are not considered to be impaired and the reasons for this

All assets more than 90 days past due are treated as impaired, even where cases are being managed in the expectation of realising all of the carrying value.

### (c) Description of methods used for determining general and specific credit risk adjustments

Specific credit risk adjustments represent loan-by-loan impairments determined using an expected credit loss basis in accordance with IFRS 9. All loans are considered for provision, and an impairment amount calculated based on each account’s probability of default. The expected credit loss represents the probability weighted exposure at default reduced by the value of any security.

For the Group’s largest portfolios statistical models form the basis of the expected loss calculation. However where the number of accounts in a portfolio is smaller, as is the case in the development finance business, loss expectations will be formed on the basis of the Group’s internal monitoring for each account.

The Group does not have any general credit risk adjustments; therefore all provisions are considered specific credit risk adjustments.

### (d) Definition of a restructured exposure (point (d) of Article 178(3) CRR)

The Group does not at present have a formalised definition of a restructured exposure and a definition will be formalised as part of the IRB application process.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 9.3. UK CR1: Performing and non-performing exposures and related provisions

The asset classes used in template CR1 below are regulatory classes prescribed in the template by the PRA and therefore will not reconcile to the accounting disclosures line by line. They do, however, reconcile to the balance sheet in total, as set out at the foot of the table.

|  £m | a | b | c | d | e | f | g | h | i | j | k | l | m | n | o  |   |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  Gross carrying amount/nominal amount |   |   |   |   |   | Accumulated impairment, accumulated negative changes in fair value due to credit risk and provisions |   |   |   |   |   | Accumulated partial write-off | Collateral and financial guarantees received²  |   |
|   |   |  Performing exposures |   |   | Non-performing exposures¹ |   |   | Performing exposures – accumulated impairment and provisions |   |   | Non-performing exposures – accumulated impairment, accumulated negative changes in fair value due to credit risk and provisions |   |   |   | On performing exposures | On non-performing exposures  |
|   |   |   | Of which stage 1 | Of which stage 2 |  | Of which stage 2 | Of which stage 3 |  | Of which stage 1 | Of which stage 2 |  | Of which stage 2 | Of which stage 3  |   |   |   |
|  005 | Cash balances at central banks and other demand deposits | 2,389.5 | 2,389.5 | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  010 | Loans and advances | 16,084.3 | 15,364.8 | 719.5 | 344.8 | - | 344.8 | 16.9 | 12.4 | 4.5 | 70.9 | - | 70.9 | - | 14,028.0 | 148.0  |
|  020 | Central banks | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  030 | General governments | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  040 | Credit institutions | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  050 | Other financial corporations | 267.9 | 267.9 | - | - | - | - | 1.1 | 1.1 | - | - | - | - | - | - | -  |
|  060 | Non-financial corporations | 10,499.8 | 10,089.3 | 410.5 | 208.8 | - | 208.8 | 12.2 | 9.4 | 2.8 | 55.7 | - | 55.7 | - | 8,741.6 | 39.5  |
|  070 | Of which SMEs | 8,763.7 | 8,485.4 | 278.3 | 56.5 | - | 56.5 | 2.3 | 1.4 | 0.9 | 14.7 | - | 14.7 | - | 8,741.6 | 39.5  |
|  080 | Households | 5,316.6 | 5,007.6 | 309.0 | 136.0 | - | 136.0 | 3.6 | 1.9 | 1.7 | 15.2 | - | 15.2 | - | 5,286.4 | 108.5  |
|  090 | Debt securities | 626.2 | 626.2 | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  100 | Central banks | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  110 | General governments | 509.4 | 509.4 | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  120 | Credit institutions | 116.8 | 116.8 | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  130 | Other financial corporations | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  140 | Non-financial corporations | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  150 | Off-balance-sheet exposures | 1,406.7 | 1,406.7 | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  160 | Central banks | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  170 | General governments | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  180 | Credit institutions | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  190 | Other financial corporations | 131.5 | 131.5 | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  200 | Non-financial corporations | 1,116.9 | 1,116.9 | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  210 | Households | 159.3 | 159.3 | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  220 | Total | 20,506.7 | 19,787.2 | 719.5 | 344.8 | - | 344.8 | 16.9 | 12.4 | 4.5 | 70.9 | - | 70.9 | - | 14,028.0 | 148.0  |

# Notes:

¹Non-performing exposures are those accounts classified as stage 3, principally those over 90 days in arrears and those in receiver of rent. ²Collateral has been disclosed as the maximum amount of the collateral or guarantee that can be considered, being the lower of security value or balance, primarily disclosed for mortgages, asset finance loans and motor accounts.

Paragon Banking Group PLC • Pillar III Disclosures • 30 September 2025

---

The amounts above reconcile to the Group balance sheet at 30 September 2025 as shown below.

|  £m | Gross carrying amount |   | Accumulated impairment |   | Net carrying amount | Balance sheet  |
| --- | --- | --- | --- | --- | --- | --- |
|   |  Performing exposures | Non-performing exposures | Performing exposures | Non-performing exposures |   | UK L11 Section 4.1  |
|  Cash balances (line 005) | 2,389.5
| - | - | - |
2,389.5 | [Line 1 + Line 2]  |
|  Loans to customers (line 010) | 16,088.7 | 340.4 | (16.9) | (70.9) | 16,341.3 | [Line 4]  |
|  Debt securities (line 090) | 626.2
| - | - | - |
626.2 | [Line 3]  |

## 9.4. UK CR1-A: Maturity of exposures

|  £m | a | b | c | d | e | f  |   |
| --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  Net exposure value  |   |   |   |   |   |
|   |   |  On demand | <= 1 year | >1 year <= 5 years | >5 years | No stated maturity | Total  |
|  1 | Loans and advances | - | 1,224.8 | 2,433.4 | 12,683.1 | - | 16,341.3  |
|  2 | Debt securities
| - | - |
116.8 | 509.4 | - | 626.2  |
|  3 | Total | - | 1,224.8 | 2,550.2 | 13,192.5 | - | 16,967.5  |

## 9.5. UK CR2: Changes in the stock of non-performing loans and advances

|  £m | a  |   |
| --- | --- | --- |
|   |   |  Gross carrying amount  |
|  010 | Initial stock of non-performing loans and advances | 300.7  |
|  020 | Inflows to non-performing portfolios | 163.7  |
|  030 | Outflows from non-performing portfolios | (16.7)  |
|  040 | Outflows due to write-offs | (30.8)  |
|  050 | Outflow due to other situations^{1} | (76.5)  |
|  060 | Final stock of non-performing loans and advances | 340.4  |

Notes:
1. Outflows due to other situations includes repayments of £107.5m.

Page 62
Paragon Banking Group PLC • Pillar III Disclosures • 30 September 2025

---

9.6. UK CR2a: Changes in the stock of non-performing loans and advances and related net accumulated recoveries

Template CR2a is applicable to large institutions only. As the Group does not qualify as large, this template has not been presented.

9.7. UK CQ1: Credit quality of forborne exposures

The Group does not apply a regulatory definition of forbearance and therefore template CQ1 has not been presented.

9.8. UK CQ2: Quality of forbearance

Template CQ2 is applicable to large institutions only. As the Group does not qualify as large, this template has not been presented.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

9.9. UK CQ3: Credit quality of performing and non-performing exposures by past due days

|  £m | a | b | c | d | e | f | g | h | i | j | k | l  |   |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  Gross carrying amount/nominal amount  |   |   |   |   |   |   |   |   |   |   |   |
|   |   |  Performing exposures |   |   | Non-performing exposures  |   |   |   |   |   |   |   |   |
|   |   |  Not past due or past due ≤ 30 days | Past due > 30 days ≤ 90 days |  | Unlikely to pay that are not past due or are past due ≤ 90 days | Past due > 90 days ≤ 180 days | Past due > 180 days ≤ 1 year | Past due > 1 year ≤ 2 years | Past due > 2 years ≤ 5 years | Past due > 5 years ≤ 7 years | Past due > 7 years | Of which defaulted |   |
|  005 | Cash balances at central banks and other demand deposits | 2,389.5 | 2,389.5 | - | - | - | - | - | - | - | - | - | -  |
|  010 | Loans and advances | 16,084.3 | 16,007.4 | 76.9 | 344.8 | 208.7 | 52.4 | 35.7 | 19.8 | 13.5 | 1.8 | 12.9 | 344.8  |
|  020 | Central banks | - | - | - | - | - | - | - | - | - | - | - | -  |
|  030 | General governments | - | - | - | - | - | - | - | - | - | - | - | -  |
|  040 | Credit institutions | - | - | - | - | - | - | - | - | - | - | - | -  |
|  050 | Other financial corporations | 267.9 | 267.9 | - | - | - | - | - | - | - | - | - | -  |
|  060 | Non-financial corporations | 10,499.8 | 10,467.4 | 32.4 | 208.8 | 178.8 | 10.4 | 10.9 | 4.3 | 4.4
| - | - |
208.8  |
|  070 | Of which SMEs | 8,763.7 | 8,733.2 | 30.5 | 56.5 | 29.3 | 8.4 | 10.7 | 3.9 | 4.2
| - | - |
56.5  |
|  080 | Households | 5,316.6 | 5,272.1 | 44.5 | 136.0 | 29.9 | 42.0 | 24.8 | 15.5 | 9.1 | 1.8 | 12.9 | 136.0  |
|  090 | Debt securities | 626.2 | 626.2 | - | - | - | - | - | - | - | - | - | -  |
|  100 | Central banks | - | - | - | - | - | - | - | - | - | - | - | -  |
|  110 | General governments | 509.4 | 509.4 | - | - | - | - | - | - | - | - | - | -  |
|  120 | Credit institutions | 116.8 | 116.8 | - | - | - | - | - | - | - | - | - | -  |
|  130 | Other financial corporations | - | - | - | - | - | - | - | - | - | - | - | -  |
|  140 | Non-financial corporations | - | - | - | - | - | - | - | - | - | - | - | -  |
|  150 | Off-balance-sheet exposures | 1,406.7 |  |  |  |  |  |  |  |  |  |  |   |
|  160 | Central banks | - |  |  |  |  |  |  |  |  |  |  |   |
|  170 | General governments | - |  |  |  |  |  |  |  |  |  |  |   |
|  180 | Credit institutions | - |  |  |  |  |  |  |  |  |  |  |   |
|  190 | Other financial corporations | 131.5 |  |  |  |  |  |  |  |  |  |  |   |
|  200 | Non-financial corporations | 1,116.9 |  |  |  |  |  |  |  |  |  |  |   |
|  210 | Households | 159.3 |  |  |  |  |  |  |  |  |  |  |   |
|  220 | Total | 20,506.7 | 19,023.1 | 76.9 | 344.8 | 208.7 | 52.4 | 35.7 | 19.8 | 13.5 | 1.8 | 12.9 | 344.8  |

Paragon Banking Group PLC • Pillar III Disclosures • 30 September 2025

---

# 9.10. UK CQ4: Quality of non-performing exposures by geography

This template is subject to a 10% threshold (non-domestic exposures divided by total exposures) set out in the Disclosure (CRR) Part. The Group has no non-domestic exposures (exposures outside the UK) and therefore UKCQ4 has not been presented.

# 9.11. UK CQ5: Credit quality of loans and advances to non-financial corporations by industry

|  £m | a | b¹ | c | d¹ | e | f  |   |
| --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  Gross carrying amount |   |   |   | Accumulated impairment | Accumulated negative changes in fair value due to credit risk on non-performing exposures  |
|   |   |  Of which non-performing |   | Of which loans and advances subject to impairment  |   |   |   |
|   |   |  Of which defaulted |   |  |   |   |   |
|  010 | Agriculture, forestry and fishing | 0.8 |  | - |  | - | -  |
|  020 | Mining and quarrying | 0.3 |  | - |  | - | -  |
|  030 | Manufacturing | 13.4 |  | - |  | 0.1 | -  |
|  040 | Electricity, gas, steam and air conditioning supply | 0.2 |  | - |  | - | -  |
|  050 | Water supply | 2.7 |  | - |  | 0.1 | -  |
|  060 | Construction | 1,019.1 |  | 147.6 |  | 43.3 | -  |
|  070 | Wholesale and retail trade | 9.8 |  | - |  | 0.1 | -  |
|  080 | Transport and storage | 82.0 |  | 0.4 |  | 0.6 | -  |
|  090 | Accommodation and food service activities | 3.4 |  | - |  | - | -  |
|  100 | Information and communication | 1.6 |  | - |  | - | -  |
|  110 | Financial and insurance activities | 659.6 |  | 4.1 |  | 4.2 | -  |
|  120 | Real estate activities | 8,751.6 |  | 56.0 |  | 16.6 | -  |
|  130 | Professional, scientific and technical activities | 42.9 |  | - |  | 0.9 | -  |
|  140 | Administrative and support service activities | 54.1 |  | 0.7 |  | 1.9 | -  |
|  150 | Public administration and defence, compulsory social security | 36.2 |  | - |  | - | -  |
|  160 | Education | 11.7 |  | - |  | 0.1 | -  |
|  170 | Human health services and social work activities | 9.3 |  | - |  | - | -  |
|  180 | Arts, entertainment and recreation | 1.7 |  | - |  | - | -  |
|  190 | Other services | 7.9 |  | - |  | 0.1 | -  |
|  200 | Total | 10,708.6 |  | 208.0 |  | 68.0 | -  |

¹Columns b and d are not applicable under Article 442 as they are only applicable to large institutions. The Group does not meet the size criteria for a large institution.

Page 65
Paragon Banking Group PLC • Pillar III Disclosures • 30 September 2025

---

9.12. UK CQ6: Collateral valuation - loans and advances

This template applies to large institutions only. As the Group does not meet the criteria for a large institution, template UK CQ6 has not been presented.

9.13. UK CQ7: Collateral obtained by taking possession and execution processes

No collateral taken into possession is recognised on the balance sheet and therefore template UK CQ7 has not been presented.

9.14. UK CQ8: Collateral obtained by taking possession and execution processes – vintage breakdown

This template applies to large institutions only. As the Group does not meet the criteria for a large institution, template UK CQ6 has not been presented.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 10. Credit risk mitigation

## This section sets out

- Credit Risk Mitigation ('CRM') techniques

Credit risk mitigation, for regulatory capital purposes, relates to financial arrangements to reduce risk exposure for which a benefit can be received in the calculation of capital requirements.

Economically, the Group's principal sources of mitigation against credit loss, other than the quality of its underwriting and account management processes, is the value of assets securing loan accounts, such as properties securing mortgages and assets financed by finance leases. However, this security is not included as CRM for the purposes of calculating capital requirements.

For certain authorised loan schemes within the SME lending operation, the Group has access to guarantees from the UK Government, initially offered as a response to the Covid pandemic in 2020, and continued in various forms since then. These guarantees apply to all live loans made under those schemes.

## 10.1. UK CRC – Qualitative disclosure requirements related to CRM techniques

### (a) Core policies and processes for on- and off-balance sheet netting and the extent to which they are used (Article 453 (a) CRR);

The Group does not utilise either on- or off-balance sheet netting.

### (b) The core features of policies and processes for eligible collateral evaluation and management (Article 453 (b) CRR);

All collateral allowed for in the Group's capital calculations is in the form of either cash or guarantees from the UK Government and is provided on the basis of standard contractual arrangements for the financial assets involved. It is used for credit mitigation in the calculation of collateral and financial guarantees received in table UK CR1.

The form of credit risk mitigation employed for treasury transactions is determined by the nature of the instrument. ISDA (International Swaps and Derivatives Association) Master Agreements are in place with each derivative counterparty, including a Credit Support Annex ('CSA'), allowing for the exchange of collateral to mitigate the credit risk of the derivatives portfolio. This includes exposures to LCH Limited ('LCH'), the central counterparty with which the Group has cleared derivatives since 2019.

Under ISDA Master Agreements the derivatives portfolio is typically valued using discounted cash flow and options pricing models as appropriate. The CSA allows for collateral to be passed between parties to mitigate the counterparty credit risk inherent in the outstanding positions. The Group's CSAs are two-way agreements where both parties can be required to post collateral dependent on the exposure of the derivative. Collateral in the form of cash is paid or received on a regular basis (typically daily) to mitigate the mark-to-market exposures.

CSAs grant legal rights of set-off for transactions with the same counterparty. Accordingly, the credit risk associated with such positions is reduced to the extent that negative mark-to-market values offset positive mark-to-market values in the calculation of credit risk within each netting agreement.

The Group has also posted assets with LCH to cover initial margin on centrally cleared derivatives. Further details of these amounts are shown in table UK CCR8 in Section 12.9.

### (c) Main types of collateral taken to mitigate credit risk (Article 453 (c) CRR);

The Group typically posts and receives cash to mitigate credit risk arising from derivatives; however the Group's securitisation documentation allows for other types of collateral, including bonds issued by governments (including those of the UK, USA and EU member states), to be received in place of cash.

The Group's first and second mortgage assets, car and asset lease finance accounts, development finance accounts, structured lending facilities and invoice finance accounts are all secured on the value of the assets financed, but these do not qualify as CRM for capital calculations.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(d) Guarantees and credit derivatives used as credit protection (Article 453 (d) CRR);

The Group does not utilise credit derivatives and the only guarantees used as credit protection are those provided by the UK Government relating to loans made under the Coronavirus Business Interruption Loans Scheme ('CBILS'), Bounce-back Loan Scheme ('BBLS'), Recovery Loan Scheme ('RLS') and Growth Guarantee Scheme ('GGS'). The impact of this guarantee on the Group's capital position is shown in table UK CR4 in Section 11.2.

(e) Information about market or credit risk concentrations within the credit mitigation taken (Article 453 (e) CRR);

No significant concentrations noted.

10.2. UK CR3 – CRM techniques overview: Disclosure of the use of credit risk mitigation techniques

This table includes all amounts shown as 'Loans and advances' and 'debt securities' in table UK CR1.

|  £m | a | b | c | d | e  |   |
| --- | --- | --- | --- | --- | --- | --- |
|   |   |  Unsecured carrying amount |  | Secured carrying amount  |   |   |
|   |   |   |   |  Of which secured by collateral¹ | Of which secured by financial guarantees  |   |
|  1 | Loans and advances | 1,537.6 | 14,803.7 | 14,803.7 | - | -  |
|  2 | Debt securities | 509.4 | 116.8 | 116.8 | - |   |
|  3 | Total | 2,047.0 | 14,920.5 | 14,920.5 | - | -  |
|  4 | Of which non-performing exposures | 125.9 | 148.0 | 148.0 | - | -  |
|  5 | Of which defaulted | 125.9 | 148.0 |  |  |   |

Notes:

¹Collateral for loans and advances has been disclosed as the maximum amount of collateral or guarantee that can be considered, being the lower of security value or balance, primarily disclosed for mortgages, SME lending and motor finance accounts, although such amounts do not qualify as CRM for regulatory purposes. Covered bonds included in debt securities are considered to be fully collateralised.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 11. Standardised approach to credit risk

## This section sets out

- Qualitative disclosure requirements
- Credit risk exposure and CRM effects
- Exposure by risk weighting

The Group evaluates the RWEAs in respect of credit risk for its assets, excluding derivatives, using the Standardised Approach ('SA') set out in the Rulebook. Permission is being sought to use an Internal Ratings Based ('IRB') approach for some asset classes, but this has not yet been granted.

The tables in this section explain how those RWEAs are derived.

## 11.1. UK CRD – Qualitative disclosure requirements related to standardised model

(a) Names of the external credit assessment institutions ('ECAI's) and export credit agencies ('ECA's) used (Article 444 (a) CRR)

ECAIs used by the Group are Fitch, Standard and Poor's and Moody's. There have been no changes to these over the disclosure period.

The Group has not made use of ECAs.

(b) The exposure classes for which each ECAI or ECA is used (Article 444 (b) CRR)

Ratings issued by the ECAIs listed above are used to attributed risk weightings to institutional exposures in both the SA for bank deposits and in the SA-CCR for derivative exposures (see Section 12 – Exposure to Counter-party Credit Risk). For debt securities issued by institutions the Group uses publicly available ratings for the particular instrument issued by ECAIs to attribute risk weightings.

The Group does not use ECAIs for other credit risk exposure classes under the standardised approach.

(c) The process used to transfer the issuer and issue credit ratings onto comparable assets items not included in the trading book (Article 444 (c) CRR);

The Group does not operate a trading book.

(d) The association of the external rating of each nominated ECAI or ECA with the risk weights that correspond with the credit quality steps (Article 444 (d) CRR).

The ratings from the ECAIs are mapped across to the Credit Quality Step requirements in the UK CRR using PRA rulebook mappings.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 11.2. UK CR4 – standardised approach – Credit risk exposure and CRM effects

This table summarises the RWA treatment for all balance sheet assets subject to the Credit Risk Framework. All of the Group's assets to which the Credit Risk Framework applies are currently subject to the Standardised Approach and therefore the total of column a is equal to the amount shown in line 3 of table UK LI2 in Section 4.2 (£19,464.4 million) adjusted for the lease valuation adjustment shown on line 5 of the same table (£5.7 million). Table UK LI2, together with table UK LI1, therefore reconciles the disclosures given below to the Group's reported balance sheet.

|  £m | a | b | c | d | e | f  |   |
| --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  Exposures before CCF and before CRM |   | Exposures post CCF¹ and post CRM² |   | RWAs and RWAs density  |   |
|   |   |  On-balance-sheet exposures | Off-balance-sheet exposures | On-balance-sheet exposures | Off-balance-sheet amount | RWAs | RWAs density (%)³  |
|  1 | Central governments or central banks | 2,688.2 | - | 2,776.6 | 5.7 | - | -  |
|  2 | Regional government or local authorities | 39.6 | 5.1 | 39.6 | 1.0 | 8.1 | 20.0%  |
|  3 | Public sector entities | 16.3 | 1.1 | 16.3 | 0.2 | 3.3 | 20.0%  |
|  4 | Multilateral development banks | - | - | - | - | - | -  |
|  5 | International organisations | - | - | - | - | - | -  |
|  6 | Institutions | 215.3 | - | 215.3 | - | 43.3 | 20.1%  |
|  7 | Corporates | 484.5 | 151.8 | 441.8 | 65.7 | 437.3 | 86.2%  |
|  8 | Retail | 982.8 | 114.1 | 937.1 | 22.0 | 600.5 | 62.6%  |
|  9 | Secured by mortgages on immovable property | 13,671.1 | 409.9 | 13,671.1 | 82.0 | 4,823.0 | 35.1%  |
|  10 | Exposures in default | 307.8 | - | 307.8 | - | 363.4 | 118.1%  |
|  11 | Exposures associated with particularly high risk | 851.9 | 725.6 | 851.9 | 8.3 | 1,290.2 | 150.0%  |
|  12 | Covered bonds | 116.8 | - | 116.8 | - | 11.7 | 10.0%  |
|  13 | Institutions and corporates with a short-term credit assessment | - | - | - | - | - | -  |
|  14 | Collective investment undertakings | - | - | - | - | - | -  |
|  15 | Equity | - | - | - | - | - | -  |
|  16 | Other items | 84.4 | - | 84.4 | - | 78.1 | 92.5%  |
|  17 | TOTAL | 19,458.7 | 1,407.6 | 19,458.7 | 184.9 | 7,658.9 | 39.0%  |
|   | Total on and off balance sheet |  | 20,866.3 |  | 19,643.6 |  |   |
|   |  |  |  | New Table UK LI2 | New Table UK CR4 | New Table UK CR2 |   |

# Notes:

¹Credit Conversion Factor ('CCF'). This represents the proportion of that part of the off-balance sheet exposures representing lending pipelines which are expected to complete as advances, for capital purposes.

²The only form of Credit Risk Mitigation ('CRM') applied in this table is the availability of UK Government guarantees on certain SME lending exposures. In the table this has the effect of moving the exposure from the 'corporate' and 'retail' lines (lines 7 and 8) to the 'Central governments or central banks' line (line 1).

³RWAs density % is calculated as RWA as a percentage of the sum of on-balance-sheet and off-balance-sheet amounts (e / (c + d)).

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 11.3. UK CR5 – standardised approach

Exposures analysed in this table are post-CCF and post-CRM and include both on and off balance sheet amounts (the sum of the amounts shown in columns c and d in table UK CR4 above). In allocating exposures to risk weights, no account is taken of the SME supporting factor.

|   | a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q  |   |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  Risk Weight |   |   |   |   |   |   |   |   |   |   |   |   |   |   | Total | Of which unrated¹  |
|   |   |  0% | 2% | 4% | 10% | 20% | 35% | 50% | 70% | 75% | 100% | 150% | 250% | 370% | 1,250% | Others  |   |   |
|  1 | Central governments or central banks | 2,788.6
| - | - | - | - | - | - | - | - | - | - | - | - | - | - |
2,788.6 | -  |
|  2 | Regional government or local authorities | - | - | - | - | 40.6 | - | - | - | - | - | - | - | - | - | - | 40.6 | 40.6  |
|  3 | Public sector entities | - | - | - | - | 16.5 | - | - | - | - | - | - | - | - | - | - | 16.5 | 16.5  |
|  4 | Multilateral development banks | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  5 | International organisations | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  6 | Institutions | - | - | - | - | 214.4 | - | 0.9 | - | - | - | - | - | - | - | - | 215.3 | -  |
|  7 | Corporates
| - | - | - | - | - | - | - | - | - |
507.6 | - | - | - | - | - | 507.6 | 507.6  |
|  8 | Retail exposures
| - | - | - | - | - | - | - | - |
959.1 | - | - | - | - | - | - | 959.1 | 959.1  |
|  9 | Exposures secured by mortgages on immovable property | - | - | - | - | - | 13,735.0 | - | - | 9.7 | 18.3 | - | - | - | - | - | 13,763.0 | 13,763.0  |
|  10 | Exposures in default | (0.4)
| - | - | - | - | - | - | - | - |
197.9 | 110.3 | - | - | - | - | 307.8 | 307.8  |
|  11 | Exposures associated with particularly high risk
| - | - | - | - | - | - | - | - | - | - |
860.1 | - | - | - | - | 860.1 | 860.1  |
|  12 | Covered bonds | - | - | - | 116.8 | - | - | - | - | - | - | - | - | - | - | - | 116.8 | -  |
|  13 | Exposures to institutions and corporates with a short-term credit assessment | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  14 | Units or shares in collective investment undertakings | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  15 | Equity exposures | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | - | -  |
|  16 | Other items2
| - | - | - | - | - | - | - | - | - |
68.3 | - | - | - | - | - | 68.3 | 68.3  |
|  17 | Total | 2,788.2 | - | - | 116.8 | 271.5 | 13,735.0 | 0.9 | - | 968.8 | 792.0 | 970.4 | - | - | - | - | 19,643.6 | 16,522.9  |
|   |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  | Total UK CR4 |   |

¹ Of which unrated are those exposures for which a credit assessment by a nominated ECAI is not available and that are applied specific risk weights depending on their exposure class, as specified in Article 113 to Article 134 CRR.
² Other items risk weighted at 0% are principally current tax assets and credit balances within the exposures in default line.

Notes:

Paragon Banking Group PLC • Pillar III Disclosures • 30 September 2025

---

# 12. Exposures to counterparty credit risk

## This section sets out

- Counterparty credit risk ('CCR') methodology and policies
- CCR exposure by approach
- Transactions subject to own funds requirements for CVA risk
- CCR exposures by regulatory exposure class and risk weights
- Composition of collateral for CCR exposures
- Credit derivative exposures
- Exposures to CCPs

The Group's policies for counterparty credit risk, which are described below, relate to all central bank and institutional exposures. Such exposures are subject to different management and control processes to those governing its lending to customers.

However, the definition in the Rulebook relates to derivative assets and liabilities only, which are subject to special rules for the calculation of RWEA. The tables in this section relate only to items considered to represent exposure to counterparty credit risk according to the Rulebook.

## 12.1. UK CCRA – Qualitative disclosure related to CCR

### (a) Methodology used to assign internal capital and credit limits for counterparty credit exposures (Article 439 (a) CRR)

Wholesale counterparty credit risk arises in the normal course of business primarily from investment of surplus cash, collateral and executing hedging derivatives with wholesale counterparties. The Group's cash balances are held in sterling at the Bank of England and at a small number of highly rated banks in current accounts, and, from time-to-time, as short fixed-term money market deposits. The Group also invests in UK Government securities ('gifts') and covered bonds issued by UK financial institutions.

Exposures to derivatives counterparties are calculated using the Standardised Approach for Counterparty Credit Risk ('SA-CCR'), which includes exposures to central counterparties ('CCP's). The Group has been centrally clearing certain eligible derivatives with a CCP since 2019.

The SA-CCR methodology considers the fair value and collateral held in the calculation of 'Replacement cost'. The exposure value to the counterparty is multiplied by a counterparty risk-weight based on its external credit assessment (Section 11.1, UK CRD) to determine the total Risk Weighted Exposure Amount ('RWEA'), which determines the level of capital required for counterparty credit risk.

In order to adhere to the Large Exposures regulatory requirements, a firm's exposures to a counterparty or connected counterparties must not exceed 25% of its eligible capital. To provide a buffer against the regulatory limit, the Group's counterparty credit limits for its exposures (including connected counterparties) are set within this. Credit risk limits are determined by a combination of factors including the counterparty's credit rating and its balance sheet size.

Credit risk limits for all counterparties are reviewed at least annually and any changes in credit rating or outlook are provided to ALCO monthly. There are minimum credit rating requirements for wholesale counterparty exposures.

The Group does not assign internal capital, therefore methodology to assign is not applicable.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(b) Policies related to guarantees and other credit risk mitigants (Article 439 (b) CRR)

The Group uses derivatives to reduce exposure to market risks, which creates counterparty credit risk. These instruments are transacted with institutions which meet a minimum credit rating criteria and are subject to collateral provisions under market standard documentation.

The majority of new derivatives are centrally cleared through a Central Counterparty ('CCP'), LCH Limited ('LCH'), for which the Group posts variation and initial margin. For any uncleared derivatives, principally those linked to securitisation transactions, the Group's method of documenting derivative activity is the International Swaps and Derivatives Association ('ISDA') Master Agreement. In all such cases a Credit Support Annex ('CSA') is executed in conjunction with the ISDA Master Agreement to mitigate credit risk.

Collateralisation of derivatives introduces the following material change in credit exposure:

- The posting of collateral reduces the impact of the current market value to the difference between the market value of the derivatives and the value of the collateral. This difference is limited by the operational use of 'thresholds' and 'minimum transfer amounts', which set criteria to avoid the movement of small amounts of collateral. For derivatives in certain funding structures, the swap counterparties are only required to post collateral if they do not meet minimum credit rating criteria.

Derivative positions and collateral are valued daily and compared with counterparty valuations to agree collateral settlement. Market standard CSA collateral allows UK pounds sterling cash or gilts to be held as collateral by the Group.

Guarantees are not used to mitigate counterparty credit risk.

(c) Description of policies with respect to Wrong-Way risk (Article 439 (c) CRR)

"Wrong-way risk" is defined by CRR Article 291 and may occur when:

(a) the likelihood of default by a counterparty is positively correlated with general market risk factors; or
(b) future exposure to a specific counterparty is positively correlated with the counterparty's probability of default.

The structure of the relationships with the Group's counterparties does not generate material wrong-way risk.

(d) Any other risk management objectives and relevant policies related to CCR (Article 431 (3) and (4) CRR)

The Group enters into repurchase agreements under the terms of the Global Master Repurchase Agreements with its counterparties. These transactions demonstrate the Group's ability to raise additional funding or monetise the Liquid Asset Buffer and have primarily been used to exchange retained securitisation notes in exchange for cash or gilts.

(e) The amount of collateral the Group would have to provide if its credit rating was downgraded (Article 439 (d) CRR)

There are no agreements which would require the Group to post collateral based on changes to the credit rating of either the Bank or the Group.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 12.2. UK CCR1 – Analysis of CCR exposure by approach

|  £m | a | b | c | d | e | f | g | h  |   |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |  Replacement cost ('RC') | Potential future exposure ('PFE') | EEPE | Alpha used for computing regulatory exposure value | Exposure value pre-CRM² | Exposure value post-CRM | Exposure value | RWEA  |
|  UK1 | Original Exposure Method (for derivatives) | - | - |  | - | - | - | - | -  |
|  UK2 | Simplified SA-CCR (for derivatives) | - | - |  | - | - | - | - | -  |
|  1 | SA-CCR (for derivatives)¹ | 112.8 | 44.8 |  | 1.4 | 220.6 | 109.5 | 109.5 | 26.8  |
|  2 | IMM (for derivatives and SFTs) | - | - | - | - | - | - | - | -  |
|  2a | Of which securities financing transactions netting sets | - | - | - | - | - | - | - | -  |
|  2b | Of which derivatives and long settlement transactions netting sets | - | - | - | - | - | - | - | -  |
|  2c | Of which from contractual cross-product netting sets | - | - | - | - | - | - | - | -  |
|  3 | Financial collateral simple method (for SFTs) | - | - | - | - | - | - | - | -  |
|  4 | Financial collateral comprehensive method (for SFTs) |  |  |  |  | - | - | - | -  |
|  5 | VaR for SFTs |  |  |  |  | - | - | - | -  |
|  6 | Total |  |  |  |  | 220.6 | 109.5 | 109.5 | 26.8  |
|   |  |  |  |  |  |  | See table UK LIC |  | See table UK OVI  |

# Notes:

¹Under SA-CCR, exposure value post-CRM, being the exposure value adjusted for CRM techniques (the impact of collateral), is the sum of RC (a) and PFE (b) multiplied by alpha of 1.4 (d) as prescribed by the PRA Rulebook. RWEA is the sum of the risk weighted counterparty exposures, which are weighted at either 50% or 20% dependent on PRA Rulebook ECAI mapping credit quality steps ('CQS') for uncleared balances or 4% for those cleared through the QCCP (Section 12.8 UK CCR8).

²Exposure value Pre-CRM is the exposure value calculated without the effect of CRM techniques, being the consideration of collateral ('margining').

# 12.3. UK CCR2 – Transactions subject to own funds requirements for CVA risk

|  £m | a | b  |   |
| --- | --- | --- | --- |
|   |   |  Exposure value | RWEA  |
|  1 | Total transactions subject to the Advanced method | - | -  |
|  2 | (i) VaR component (including the 3× multiplier) |  | -  |
|  3 | (ii) stressed VaR component (including the 3× multiplier) |  | -  |
|  4 | Transactions subject to the Standardised method | 16.7 | 1.3  |
|  UK4 | Transactions subject to the Alternative approach (Based on the Original Exposure Method) | - | -  |
|  5 | Total transactions subject to own funds requirements for CVA risk | 16.7 | 1.3  |
|   |  |  | See table UK OVI  |

# Notes:

¹Credit valuation adjustment applied to calculate total risk weighted exposure amounts in Section 2.1, template UK OVI.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 12.4. UK CCR3 – Standardised approach – CCR exposures by regulatory exposure class and risk weights

This table shows the various risk weights applied to the exposures shown in table CCR1 to derive the appropriate RWEA.

|   | £m | a | b | c | d | e | f | g | h | i | j | k | l  |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|   |   | Risk Weight |   |   |   |   |   |   |   |   |   |   | Total exposure value  |
|   |  Exposure Classes | 0% | 2% | 4% | 10% | 20% | 50% | 70% | 75% | 100% | 150% | Others  |   |
|  1 | Central governments or central banks | - | - | - | - | - | - | - | - | - | - | - | -  |
|  2 | Regional government or local authorities | - | - | - | - | - | - | - | - | - | - | - | -  |
|  3 | Public sector entities | - | - | - | - | - | - | - | - | - | - | - | -  |
|  4 | Multilateral development banks | - | - | - | - | - | - | - | - | - | - | - | -  |
|  5 | International organisations | - | - | - | - | - | - | - | - | - | - | - | -  |
|  6 | Institutions | - | - | 2.4 | - | - | 24.4 | - | - | - | - | - | 26.8  |
|  7 | Corporates | - | - | - | - | - | - | - | - | - | - | - | -  |
|  8 | Retail | - | - | - | - | - | - | - | - | - | - | - | -  |
|  9 | Institutions and corporates with a short-term credit assessment | - | - | - | - | - | - | - | - | - | - | - | -  |
|  10 | Other items | - | - | - | - | - | - | - | - | - | - | - | -  |
|  11 | Total exposure value | - | - | 2.4 | - | - | 24.4 | - | - | - | - | - | 26.8  |
|   |  |  |  |  |  |  |  |  |  |  |  |  | Table UK CCR1  |

# 12.5. UK CCR4 – IRB approach – CCR exposures by exposure class and PD scale

This template applies to institutions that calculate their risk-weighted exposure amounts under the IRB approach. The Group does not use IRB and therefore UK CCR4 has not been presented.

# 12.6. UK CCR5 – Composition of collateral for CCR exposures

Template CCR5 disclosure is only required under Article 438 (e) if both the fair value of collateral posted in the form of debt securities and the fair value of collateral received in that form exceed £125.0 billion. The Group does not exceed this threshold and therefore this template has not been presented.

Paragon Banking Group PLC • Pillar III Disclosures • 30 September 2025

---

# 12.7. UK CCR6 – Credit derivatives exposures

The Group does not use credit derivatives to mitigate credit risk and therefore template UK CCR6 has not been presented.

# 12.8. UK CCR7 – RWEA flow statements of CCR exposures under the IMM

The Group does not use the Internal Model Method ('IMM') for CCR exposures and therefore template UK CCR7 has not been presented.

# 12.9. UK CCR8 – Exposures to CCPs

|  Em | a | b |   |   |
| --- | --- | --- | --- | --- |
|   |   |  Exposure value | RWEA |   |
|  1 | Exposures to QCCPs¹ (total) |  | 2.4 | See table UK CV1  |
|  2 | Exposures for trades at QCCPs (excluding initial margin and default fund contributions); of which | 60.7 | 2.4 |   |
|  3 | (i) OTC derivatives | 60.7 | 2.4 |   |
|  4 | (ii) Exchange-traded derivatives
| - | - |
|
|  5 | (iii) SFTs
| - | - |
|
|  6 | (iv) Netting sets where cross-product netting has been approved
| - | - |
|
|  7 | Segregated initial margin | 110.5 |  |   |
|  8 | Non-segregated initial margin
| - | - |
|
|  9 | Prefunded default fund contributions
| - | - |
|
|  10 | Unfunded default fund contributions
| - | - |
|
|  11 | Exposures to non-QCCPs (total) |  | - |   |
|  12 | Exposures for trades at non-QCCPs (excluding initial margin and default fund contributions); of which
| - | - |
|
|  13 | (i) OTC derivatives
| - | - |
|
|  14 | (ii) Exchange-traded derivatives
| - | - |
|
|  15 | (iii) SFTs
| - | - |
|
|  16 | (iv) Netting sets where cross-product netting has been approved
| - | - |
|
|  17 | Segregated initial margin | - |  |   |
|  18 | Non-segregated initial margin
| - | - |
|
|  19 | Prefunded default fund contributions
| - | - |
|
|  20 | Unfunded default fund contributions
| - | - |
|

# Notes:

¹ QCCP: 'qualifying central counterparty' or 'QCCP' means a central counterparty that has been authorised or recognised in accordance with the relevant regulation. The Group uses LCH for this purpose.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 13. Exposures to securitisation positions

## This section sets out

- Information related to securitisation exposures
- Securitisation exposures in the non-trading book
- Exposures in default and specific credit risk adjustments

Securitisation positions, for capital purposes, are investments and other interests in securitisation transactions carried on an entity's balance sheet, which are subject to a specific capital regime. While the Group has been an active issuer of securitisation funding, these transactions have generally not resulted in the underlying assets being derecognised by the Group, which still includes their full exposure amount for capital purposes.

The single exception is Paragon Mortgages (No. 12) PLC, a legacy transaction, where the Group has no ongoing exposure.

## 13.1. UK-SECA - Qualitative disclosure requirements related to securitisation exposures

### (a) Description of securitisation and re-securitisation activities (Article 449(a) CRR)

One of the Group's principal sources of funding has historically been asset securitisation. The largest part of this funding relates to securitisations issued under the 'Paragon Mortgages' programme but other issues have been made from time to time to support other parts of the business. In each of these transactions a group company acts as issuer of the securitised debt and group companies act as administrator of the assets after the completion of the deal.

The strategy underlying the Group's securitisation activities is to gain access to attractive funding rates for its lending activities and to mitigate liquidity risk by match funding the underlying loan assets. The structures are not intended to achieve significant transfer of credit risk away from the Group. The risk relating to the underlying assets therefore remains with the Group and is included in the credit risk analyses in Sections 9, 10 and 11 of this document.

In recent years the Group has retained a significant proportion of its securitisation note issuance, beyond the levels of retention required by regulation, and in 2020 all of the notes in the Paragon Mortgages (No. 27) PLC securitisation were retained. In November 2020 a further fully-retained transaction, Paragon Mortgages (No. 28) PLC was completed, and, in November 2023, the Paragon Mortgages (No. 29) PLC securitisation was launched, with the notes also being retained. All these notes have the benefit of the credit enhancement structure of the securitisation and are externally rated, with the AAA rated notes being particularly well-suited to being pledged as security to access other funding or liquidity sources.

During the year such notes have been used to support Bank of England TFSME drawings, sale and repurchase ('repo') and other funding transactions and represent access to a significant amount of contingent liquidity at the year end.

For accounting purposes the Group's securitisation transactions are treated as financing transactions and any externally issued notes are included in balance sheet liabilities. The underlying assets are not derecognised, and no profit or loss is recognised at the time of the transaction. Retained notes are eliminated on consolidation and no amounts are included in either assets or liabilities for accounting purposes.

For regulatory capital purposes the securitisation transactions do not meet the threshold for significant risk transfer and no securitisation exposures are included in RWEA, whether for simple, transparent and standardised ('STS') securitisation transactions or for any other kind of securitisation.

There are no specific capital requirements for the Group's securitisation vehicle companies.

The Group has no exposures to purchased securitisation positions.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(b) The type of risk the Group is exposed to in securitisation and re-securitisation activities (Article 449(b) CRR)

i) risk retained in own-originated transactions;

The Group has no additional risk from its securitisation transactions, over and above that inherent in the assets funded by the arrangement.

The Group does not undertake re-securitisation activities.

ii) risk incurred in relation to transactions originated by third parties

The Group has no interests in securitisation transactions originated by third parties.

(c) Approaches to calculating the risk-weighted exposure amounts (Article 449(c) CRR)

Not applicable as the Group has no assets required to be risk weighted under the securitisation regime.

(d) A list of Securitisation Special Purpose Entities ('SSPEs') related to the Group (Article 449(d) CRR)):

(i) SSPEs which acquire exposures originated by the Group;

There are no SSPEs which have been set up to acquire securitisation exposures originated by the Group.

(ii) SSPEs sponsored by the Group;

The Group does not act as sponsor, as defined in the CRR, in any securitisation transaction where it is not the originator.

(iii) SSPEs and other legal entities for which the Group provides securitisation-related services;

Apart from SSPE entities which are fully consolidated by the Group, it provides asset servicing and administration services for Paragon Mortgages (No. 12) PLC.

(iv) SSPEs included in the Group's regulatory scope of consolidation

The following SSPEs form part of the Group as at 30 September 2025 (and are listed in Section 4.4, template UK LI3) and are fully consolidated for the purpose of capital calculations:

- Paragon Mortgages (No. 27) PLC
- Paragon Mortgages (No. 28) PLC
- Paragon Mortgages (No. 29) PLC

After the year end Paragon Mortgages (No. 27) PLC and Paragon Mortgages (No. 28) PLC, included in the list above, repaid all their funding.

(e) Legal entities that the Group has disclosed that it has provided support in accordance with Chapter 5 of Title II of Part Three CRR (Article 449(e) CRR)

There are no legal entities which the Group has disclosed that it has provided support to.

(f) A list of legal entities affiliated with the Group that invest in securitisations originated by the Group (Article 449(f) CRR)

There are no affiliated legal entities outside the Group which invest in securitisations originated by the Group.

(g) A summary of the Group's accounting policies for securitisation activity (Article 449(g) CRR)

Under IFRS 9, where an entity transfers a financial asset, it must evaluate the extent to which it retains the risks and rewards of ownership in order to determine whether it may be derecognised. In the case of its securitisation transactions, the Group retains substantially all of the risks and rewards of ownership of the financial assets and therefore the assets are not derecognised.

Securitisation liabilities are only recognised to the extent that they are acquired by a third party.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(h) The names of the ECAIs used for securitisations and the types of exposure for which each agency is used (Article 499(h) CRR)

Not applicable as the Group has no securitisation exposures falling to be risk weighted under the securitisation regime.

(i) A description of any Internal Assessment Approach used (Article 449(i) CRR)

Not applicable because the Group has not adopted the Internal Assessment Approach and there are no applicable securitisation exposures.

## 13.2. UK-SEC1 - Securitisation exposures in the non-trading book

The Group does not have securitisation exposures in the non-trading book and therefore template UK SEC1 has not been presented.

## 13.3. UK-SEC2 - Securitisation exposures in the trading book

The Group does not have a trading book and therefore template UK SEC2 has not been presented.

## 13.4. UK-SEC3 - Securitisation exposures in the non-trading book and associated regulatory capital requirements - institution acting as originator or as sponsor

The Group has no such exposure therefore this template has not been presented.

## 13.5. UK-SEC4 - Securitisation exposures in the non-trading book and associated regulatory capital requirements - institution acting as investor

The Group does not have any securitisation exposures in which the Group acts as an investor.

## 13.6. UK-SEC5 - Exposures securitised by the institution - Exposures in default and specific credit risk adjustments

This table includes assets of the Paragon Mortgages (No. 12) PLC transaction. This is the only transaction where the Group has acted as originator, but has derecognised the assets.

|  Em | a | b | c  |   |
| --- | --- | --- | --- | --- |
|   |   |  Exposures securitised by the institution – institution acts as originator or as sponsor  |   |   |
|   |   |  Total outstanding nominal amount |   | Total amount of specific credit risk adjustments made during the period  |
|   |   |   | Of which exposures in default  |   |
|  1 | Total exposures | 239.2 | 6.8 | (2.0)  |
|  2 | Retail (total) | 239.2 | 6.8 | (2.0)  |
|  3 | residential mortgage | 239.2 | 6.8 | (2.0)  |
|  4 | credit card | - | - | -  |
|  5 | other retail exposures | - | - | -  |
|  6 | re-securitisation | - | - | -  |
|  7 | Wholesale (total) | - | - | -  |
|  8 | loans to corporates | - | - | -  |
|  9 | commercial mortgage | - | - | -  |
|  10 | lease and receivables | - | - | -  |
|  11 | other wholesale | - | - | -  |
|  12 | re-securitisation | - | - | -  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 14. Standardised approach and internal model approach for market risk

## This section sets out

- Strategies and processes to manage market risk

Market risk is the risk that the fair value or future cash flows of a financial instrument will fluctuate because of changes in market prices. The Group's exposure to market risk is mainly through interest rate risk, though the Group is also subject to credit spread risk in the banking book ('CSRBB') and there is minor exposure to currency risk. No speculative trading in financial instruments is undertaken.

In some cases, where a bank undertakes trading in financial instruments, the PRA Rulebook requires the calculation of RWEAs in respect of market risk (such as interest rate risk or foreign exchange risk). The Group is exposed to market risk but, as this is only ancillary to its lending and deposit taking activities, it is not required to calculate an amount for market risk in its capital assessment.

Additional disclosures in respect of interest rate risk in the banking book ('IRRBB'), which forms the principal part of the Group's market risk exposure, are set out in Section 15.

## 14.1. UK MRA: Qualitative disclosure requirements related to market risk

### (a) Strategies and processes to monitor, manage, control and hedge market risk (points (a) and (d) of Article 435 (1) CRR)

The Board is responsible for setting market risk appetite and ALCO is responsible for managing the Group's market risk profile within this defined risk appetite. The Group's Principal Risk Policy for Market Risk is reviewed and approved annually by the RCC with review provided by ALCO. Day-to-day management of market risk is the responsibility of the Group Treasury function.

The Group does not seek to generate income from taking market risk. It therefore minimises its exposures by matching the repricing basis and repricing tenor of assets and liabilities or by hedging with derivatives. The capital required to cover any residual exposure is examined annually as part of the ICAAP and monitored on an ongoing basis against risk appetite.

The Group's market risk principally arises from IRRBB, as it does not have a trading book. Most of the exposure to market risk arises from fixed-rate mortgages and savings products and fixed rate gilts in its liquidity portfolio. To reduce the impact of interest rate movements, hedging activities are undertaken by the Group's Treasury function.

The key market risk measures utilised by the Group include economic value ('EV') and earnings-based measures. These metrics are monitored frequently and reported weekly.

A fuller description of the Group's IRRBB profile and how it arises is set out in Section 15. That section also includes further disclosure on strategies and processes to manage IRRBB.

CSRBB is the risk resulting from fluctuations in the market price of securities driven by factors including liquidity, swap spreads or potentially other characteristics of credit-risk bearing instruments, and which is not captured by another existing prudential framework such as IRRBB or by expected credit default risk. In the Group's case, CSRBB applies to its non-cash HQLA holdings of gilts (with matching interest rate swaps) and covered bonds. The Group has limited appetite for material amounts of CSRBB.

Currency risk, also referred to as foreign exchange or forex risk, is the risk that the fair value or future cash flows of a financial instrument will fluctuate because of changes in foreign exchange rates. The Group has little appetite for material amounts of exposure to currency risk and applies a hedging strategy for any material open positions through the use of spot or forward contracts or derivatives. As a result of these arrangements, the Group has no material exposure to foreign currency risk.

### (b) Structure and organisation of the market risk management function (point (b) of Article 435 (1) CRR)

The Board is responsible for setting the Group's market risk strategy which is outlined in the Market Risk - Principal Risk Policy. ALCO, to which the Board has delegated the day-to-day supervision of market risk, performs its duties in accordance with board risk appetite, its Terms of Reference and regulatory requirements.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Market risk is managed on a first line basis within the Treasury function. As the principal focus of market risk activity within the function relates to IRRBB, a fuller description is given in Section 15.

## (c) Scope and nature of market risk reporting and measurement systems (point (c) of Article 435 (1) CRR)

The principal market risk that affects the Group is IRRBB. The main components of IRRBB are listed below, together with the types of risk reporting measures used to manage them:

|  Interest Rate Risk Exposure | Definition | Reporting Measure  |
| --- | --- | --- |
|  Duration risk | The risk created when interest rates on assets, liabilities and off-balance sheet items reprice at different times causing them to move by different amounts | EV sensitivity / Net interest income sensitivity / PV01 gaps  |
|  Basis risk | The risk arising where assets and liabilities re-price with reference to different reference interest rates, for example rates set by the Group and market rates, such as Bank of England base rate or SONIA. Relative changes in the difference between the reference rates over time may impact earnings | Net interest income sensitivity  |
|  Optionality risk | The risk that settlement of asset and liability balances at different times from those forecast due to economic conditions or customer behaviour may create a mismatch in future periods | EV sensitivity / Net interest income sensitivity  |

The process by which these IRRBB metrics are measured and monitored is described in more detail in Section 15.

The value and nature of the Group's exposure to CSRBB is reviewed by ALCO on a monthly basis.

The Group has a capital requirement for market risk, forming part of its Pillar 2a capital, set at a Bank level and separately at a Group level. Neither the Group nor the Bank is required to include an amount for market risk in RWEA.

## 14.2. UK MR1 - Market risk under the standardised approach

The Group is not required to calculate an exposure amount for market risk and therefore template UK MR1 has not been presented.

## 14.3. UK MRB: Qualitative disclosure requirements for institutions using the Internal Market Risk Models

The Group does not use an Internal Market Risk Model for market risk and therefore template UK MRB has not been presented.

## 14.4. UK MR2-A - Market risk under the Internal Model Approach ('IMA')

The Group does not use an IMA for market risk and therefore template UK MR2-A has not been presented.

## 14.5. UK MR2-B - RWA flow statements of market risk exposures under the IMA

The Group does not use an IMA for market risk and therefore this template has not been presented.

## 14.6. UK MR3 - IMA values for trading portfolios

The Group does not have any trading portfolios and therefore this template has not been presented.

## 14.7. UK MR4 - Comparison of VaR estimates with gains / losses

The Group does not use an IMA for market risk and therefore this template has not been presented.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 15. Exposures to interest rate risk on positions not held in the trading book

## This section sets out

- Risk management objectives and policies
- Quantitative information on IRRBB

Interest rate risk arises from the Group's banking book activities, such as lending, deposit-taking and other borrowing activities. Movements in market interest rates can change the earnings from, and/or the economic value of the Group's financial assets and liabilities, some of which bear interest at rates which are linked to a variety of reference rates and often re-price at different times and others of which bear interest at fixed rates. Such risk is referred to as Interest Rate Risk in the Banking Book ('IRRBB'). The Group does not seek to generate income from taking interest rate risk and aims to minimise exposures that occur as a natural consequence of carrying out its normal business activities.

This section describes the Group's IRRBB position, which arises from the interaction between fixed and floating interest rates on the Group's lending and liquidity portfolios, customer deposits and borrowings, together with derivative positions established to hedge against those risks. The Group balance sheet also includes assets, liabilities and equity which, by their nature, do not attract interest. IRRBB is managed through board-approved risk appetite limits and policies. The Group seeks to match the structure of assets and liabilities naturally where possible or by using appropriate financial instruments, such as interest rate swaps.

Derivative assets and liabilities continue to be used to hedge interest rate risk arising from fixed rate loans and deposits. The Group pre-hedges a proportion of its lending pipeline, from time to time, which results in derivative positions being established before loans are completed. This can lead to significant profit and loss account impacts if market rates are volatile, depending on the size of any pipeline derivative hedging at the time. However, any such gains or losses, which tend to zero over time, are ancillary to the Group's lending and deposit-taking activities and we undertake no trading in derivatives.

Additionally, the Group has also hedged its tier-2 fixed interest rate bond, and has also hedged the interest rate risk on its investments in gilts acquired as part of the liquidity buffer.

To protect net interest margins from the impact of future falls in interest rates on equity, which would otherwise cause a fixed / floating mismatch between the asset and liability sides of the balance sheet, an amount of fixed rate buy-to-let mortgage lending has been attributed to provide natural equity hedging. This net free reserve hedge ('NFRH') totalled £1,352.0 million at 30 September 2025 (2024: £1,200.0 million). However, this form of hedging has no accounting impact. The year-end hedge represents the current target hedging level, covering the majority of the equity balance. The year-on-year increase reflected the accumulation of additional free reserves.

## 15.1. UK IRRBBA - IRRBB risk management objectives and policies

### (a) A description of how the Group defines, measures, mitigates and controls IRRBB for the purposes of risk control and measurement

The Group's interest rate risk arises in the banking book; it does not have a trading book. Interest rate risk, which is defined as the risk of changes in the net value of, or net income arising from, the Group's assets and liabilities from adverse movements in market prices, is a key component of the Group's market risk framework.

The Board is responsible for setting market risk appetite and ALCO is responsible for managing the Group's market risk profile, including interest rate risk, within this defined risk appetite.

IRRBB is managed within board-approved risk appetite limits with comprehensive treasury policies in place to ensure that the risks posed by changes and mismatches in interest rates are effectively managed. Day-to-day management of interest rate risk is the responsibility of Treasury, with control and oversight provided by ALCO.

Consistent with other risk categories, IRRBB is subject to the Group's 'three lines of defence model' with oversight undertaken by the Second Line (Prudential Risk) and assurance provided by the Third Line (Internal Audit).

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

The key elements of IRRBB to which the Group is exposed are:

- Duration or re-pricing risk. The risk created when interest rates on assets, liabilities and off-balance sheet items reprice at different times causing them to move by different amounts
- Basis risk. The risk that arises where the interest rates on assets and liabilities are linked to different reference interest rates, for instance rates set by the Group and market rates, such as the Bank of England base rate and SONIA. Changes in the difference between the reference rates over time may impact earnings
- Optionality or prepayment risk. The risk that settlement of asset and liability balances at different times from those forecast due to economic conditions or customer behaviour may create a re-pricing mismatch in future periods

To mitigate duration risk, the Group seeks to match assets and liabilities naturally where possible, and where not by using appropriate financial instruments, such as interest rate swaps.

The principal metrics by which the Group monitors interest rate risk are discussed in Section 14.1.

## (b) A description of the Group's overall IRRBB management and mitigation strategies

IRRBB is managed and mitigated through a combination of:

- monitoring and reporting risk exposures
- matching or offsetting exposures
- use of derivatives for hedging
- the design of appropriate product features, such as early repayment charges
- the use of the NFRH, described above

## (c) The periodicity of the calculation of the Group's IRRBB measures, and a description of the specific risk measures that the institution uses to gauge its sensitivity to IRRBB, including changes to its economic value and earnings

Economic Value ('EV') and Net Interest Income ('NII') sensitivities to various changes in the yield curve are used to measure IRRBB. EV and NII sensitivities are measured on a weekly basis but are often assessed more frequently in the event of changes to the run rate of loan originations and deposit flows, or when market conditions change significantly. EV sensitivity takes into consideration embedded customer optionality. Internal risk limits are set for these metrics.

Metrics showing the change in economic value and the change in net interest income are complemented by more granular metrics, such as PV01 risk with limits for various tenors.

## (d) A description of the interest rate shock and stress scenarios that the Group uses to estimate changes in its economic value and in earnings

For internal monitoring purposes, the impact on the Group's EV and NII under a set of severe but plausible interest rate shocks are evaluated. The types of yield curve shift modelled consider the main repricing gaps evident in the Group's balance sheet in order to understand the type of stressed interest rate shift that would be most impactful for the Group. These include:

- +150 basis points parallel shock up
- -150 basis points parallel shock down
- Short rates shock up followed by long rates shock down ('SULD')
- Short rates shock down followed by long rates shock up ('LUSD')

In addition, the Group calculates EVE and NII sensitivities in accordance with six prescribed interest rate shocks in the PRA's Supervisory Outlier Test ('SOT'), set out in Section 9.7 of the Internal Capital Adequacy Assessment Part of the PRA Rulebook. The impacts of these scenarios at 30 September 2025 are shown in template UK IRRBB1 in Section 15.2.

- Parallel shock up (250 basis points)
- Parallel shock down (250 basis points)
- Steepener shock
- Flattener shock
- Short rates shock up (300 basis points)
- Short rates shock down (300 basis points)

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(e) A high-level description of key modelling and parametric assumptions used in calculating change in economic value of equity ('ΔEVE') and change in net interest income ('ΔNII') in template UK IRRBB1

## EVE sensitivity

The key assumptions used in calculating the EVE sensitivity shown in template UK IRRBB1 are as follows:

- The yield curve at the report date is instantaneously shocked in line with the six prescribed scenarios, which are the same as those specified for the SOT. The sensitivity shown against each scenario represents the difference between the present value of assets and liabilities in a baseline scenario and the shock scenario
- The balance sheet at the report date is run off over its expected residual duration
- The Group's own equity is excluded
- Commercial margins are included with cash flows but excluded from discount rates
- Contractual repricing maturities are used except for motor finance loans which are adjusted to reflect prepayment behaviour
- Non-maturing deposits ('NMDs') are assumed to reprice overnight

## NII sensitivity

The key assumptions used in calculating the NII sensitivity shown in template UK IRRBB1 are as follows:

- Static balance sheet over a one-year horizon, with all assets and liabilities maturing within the year reinvesting in like-for-like products
- The prevailing interest rates at the report date are held constant over the one-year horizon to which instantaneous + / - 250 basis points parallel interest rate shocks are applied.
- It is assumed that changes in interest rates are fully passed through to retail products, which includes managed variable rate products
- The sensitivities do not include any management actions which could be taken in response to a change in interest rates
- The values are reported on a pre-tax basis

The results of these tests, as at 30 September 2025 and 30 September 2024, are set out in Section 15.2.

(f) A description of significant modelling assumptions used in the Group's internal measurement systems ('IMS') for purposes other than disclosure that differ from the modelling assumptions prescribed for the disclosure in template UK IRRBB1, including their directional implications and the rationale for those differences

For internal reporting, EV and NII sensitivities are calculated according to stressed yield curve shifts that would be most impactful for the Group (as outlined in (d) above), rather than the prescribed scenarios. These stresses are based on the evaluation of the Group's risks. In addition, a rate floor of minus 10 basis points is assumed for both EV and NII sensitivity calculations to allow for non-linear behaviours around the 0% interest level.

For regulatory purposes, the impact of a parallel shock of 200 basis points up or down is also monitored and reported.

(g) A high-level description of how the Group hedges its IRRBB, as well as the associated accounting treatment

The Group seeks to minimise its exposures to interest rate risk by matching the repricing basis and repricing tenor of assets and liabilities. Where the tenor of fixed rate deposits does not broadly match the maturity profile of fixed rate loans, the deposits and loans will generally be hedged with interest rate swaps through which exposure to fixed rates will be converted to SONIA. The Group has also taken out swaps to effectively convert its fixed-rate Tier-2 bond and its investments in fixed rate gilts to a SONIA-linked floating basis.

The Group uses the portfolio ('macro') fair value hedging approach set out in IAS 39 to account for interest rate hedging activities related to lending and deposit taking, while the swaps relating to the Tier-2 bond and investments in gilts are accounted for as one-to-one ('micro') hedges of interest rate risk.

Additionally, the Group considers the impact of its effectively fixed rate equity base and maintains an NFRH, matching the equity balance with fixed rate buy-to-let mortgages.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(h) Any other information which the Group wishes to disclose regarding its interpretation of the significance and sensitivity of the IRRBB measures disclosed and/or an explanation of any significant variations in the level of the reported IRRBB since previous disclosures

EVE sensitivity

EVE sensitivity measures the change in the economic value of the Group's assets and liabilities, excluding equity, arising from a change in interest rates.

Of the IRRBB measures disclosed in template IRRBB1 (Section 15.2), the Group's most severe EVE sensitivity is the 250bps upward parallel yield curve shock which would result in a decline in EVE of £132.4 million. This represents an SOT result of (11.3)% (ΔEVE as a percentage of Tier 1 capital) which is within the regulatory 15% threshold.

The relatively small increase from 30 September 2024, when the maximum outlier was 11.1% of Tier-1, is due to the upward adjustment in the size of the NFRH, described above, which resulted in a lesser amount of fixed rate mortgage exposure being hedged with derivatives. The NFRH was implemented to reduce the Group's exposure to reductions in market interest rates, but this also has the effect of increasing the EVE sensitivity in rising rate scenarios.

NII sensitivity

NII sensitivity measures the change in NII arising from a change in interest rates.

NII sensitivities will vary over time due to several factors, such as the timing of maturing assets and liabilities, product pricing, market conditions, and strategic changes to the balance mix. As such, they should not be considered as a guide to future performance.

The Group's most severe NII sensitivity of those disclosed in IRRBB1 is the 250bps upward parallel yield curve shock, which would result in a reduction in NII of £5.6 million. This is calculated over a one-year time horizon and considers mismatches between the repricing of assets and liabilities.

At 30 September 2024 the Group's most severe NII sensitivity was to a 250bps upward parallel yield curve shock (which would have resulted in a reduction in NII of £10.2 million).

(i) Average repricing maturity assigned to non-maturing deposits ('NMDs')

The average repricing maturity assigned to NMDs is 1 day.

(j) Longest repricing maturity assigned to NMDs

The longest repricing maturity assigned is 1 day.

15.2. UK IRRBB1 - Quantitative information on IRRBB (2025)

The outputs of the stress tests described in part (e) of template UK IRRBBA above are presented in the table below. Commentary on the results is provided in part (h) of template UK IRRBBA.

|   |  | a | b | c | d | e | f  |
| --- | --- | --- | --- | --- | --- | --- | --- |
|   |  £m | ΔEVE |   | ΔNII |   | Tier 1 capital  |   |
|   |  Period | 30 Sep 25 | 30 Sep 24 | 30 Sep 25 | 30 Sep 24 | 30 Sep 25 | 30 Sep 24  |
|  010 | Parallel shock up | (132.4) | (130.3) | (5.6) | (10.2) |  |   |
|  020 | Parallel shock down | 150.1 | 147.7 | 5.6 | 10.2 |  |   |
|  030 | Steepener shock | (5.9) | (4.1) |  |  |  |   |
|  040 | Flattener shock | (18.9) | (20.2) |  |  |  |   |
|  050 | Short rates shock up | (61.9) | (62.5) |  |  |  |   |
|  060 | Short rates shock down | 65.1 | 65.5 |  |  |  |   |
|  070 | Maximum | (132.4) | (130.3) | (5.6) | (10.2) |  |   |
|  080 | Tier 1 capital |  |  |  |  | 1,172.4 | 1,177.9  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 16. Operational risk

## This section sets out

- Risk management
- Operational risk own funds requirements and risk-weighted exposures

Banks are required to carry capital against the risk of losses being incurred through operational risk incidents, which might deplete the strength of the organisation's balance sheet. This section discusses the Group's exposure to, and approach to managing, operational risk, and how the capital requirement is calculated.

## 16.1. UK ORA - Qualitative information on operational risk

### (a) Risk management objectives and policies (points (a), (b), (c) and (d) of Article 435(1) CRR)

#### Strategies and Processes

Operational risk is defined by the Group as the risk of financial and non-financial detriment resulting from inadequate or failed internal procedures, people and systems or from external events. Operational risk within the Group is further broken down into a number of sub-categories which facilitates accountability, day-to-day management and appropriate analysis and reporting. These include Business Continuity, People, Third Party, Information Technology, Information Security, Financial Crime, Data Security and Data Management.

Understanding the Group's operational risks enables the business to make informed decisions, and ultimately creates added value for stakeholders. The overarching strategy in respect of operational risk is to:

- Embed sound management practices for operational risk within the overall risk culture of the Group
- Ensure that the Group has robust processes in place to identify, assess, treat, monitor and report on its significant operational risks
- Ensure that an appropriate and proportionate system of internal control is in place to manage operational risks
- Provide independent oversight and challenge to the business units in the first line of defence to ensure all key risks are identified, assessed, managed, monitored, and reported on in a timely manner
- Work with business units to ensure minimal losses are suffered
- Collaborate and align with other principal risks where necessary, as well as other risk disciplines such as operational resilience, to drive a consistent approach to managing risk

Operational risk is governed by the Operational Risk Management Framework ('ORMF') which is designed to support the achievement of the Group's strategic objectives within the Board's risk appetite whilst complying with regulatory requirements. The ORMF comprises of several interlinked components which support the Group's effective identification, assessment, management, monitoring and reporting of its operational risks. These components have key roles to play within the risk management lifecycle, all working together to improve upon the risk and control landscape. These components include Risk and Control Self-Assessment ('RCSA'), Internal Controls, Key Indicators, Risk Events, Action Plans and Scenario Analysis.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# Structure and organisation of risk management function for operational risk

The 'Three Lines of Defence' model has been adopted as the overarching approach to risk management within the Group. This is a governance model which ensures appropriate responsibility is allocated for the management, reporting and escalation of risk. Allocation of clear responsibilities for risk management ensures risks are identified, monitored, managed and mitigated where required in order that they remain within the Board's risk appetite.

The Second Line of Defence has a dedicated Operational Risk team which is specifically responsible for:

- Ownership and management of the ORMF and the policies and policy standards that fit within this framework
- Oversight and challenge of the adequacy and effectiveness of the risk and control processes operating within the business in respect of the operational risk categories
- Oversight and challenge of business adherence to the ORMF
- Undertaking targeted operational risk and control reviews where appropriate

The Operational Risk Committee ('ORC') is the primary oversight committee for operational risk. This committee feeds into the ERC which supports the RCC and ultimately the Board in executing its risk responsibilities.

# Risk measurements and control

Identification and assessment of risks is undertaken across the organisation and relies on input from all levels of management. Across the Group risks are considered from both a "top down" approach, which includes scenario analysis, and a "bottom up" perspective through RCSA to ensure full coverage of the risks the Group faces. These approaches enable appropriate analysis, review and challenge.

The components of the ORMF all play a role in supporting the Group's effective identification, assessment and management of its operational risks, and all support risk and capital management and assessment. These components work together to form a toolkit for the management of operational risk.

Given the disparate nature of risks that are classified within the operational risk category in the Group's taxonomy, considerable effort has been, and continues to be, made to ensure that operational risks are consistently understood and defined across the Group. A programme of continuous improvement is in place to embed understanding and ensure that all material operational risks are fully articulated within the policy framework and have appropriate appetites and measures in place to ensure ongoing tracking. This includes ongoing refinement to the risk and control self-assessment process reflecting deepening maturity across the Group in risk management. Dedicated policies are in place for each subcategory of operational risk, and these are subject to ongoing review and refinement.

The policies all articulate minimum controls required to manage the risk type and include risk and control indicators that allow management to monitor the risk and control environment on an ongoing basis. These continue to be refined to ensure they remain relevant and are calibrated appropriately to provide timely and meaningful reporting to the ORC. The importance of the policy framework in underpinning the risk and control assessment process remains a priority under the ERMF.

The Group continues to maintain a strong control environment and is committed to enhancing and refining its controls to ensure they remain appropriate and reflect the evolving nature of operational risk. Whilst the external environment remains challenging, the levels of residual risk assessed by the Group have remained relatively constant throughout the period and not resulted in any significant adverse trend in operational risk losses. The operational risk framework continues to enable the Group to monitor and respond to any changes quickly and effectively.

The Group has particularly focussed on meeting the threats posed by cyber activity during the year in light of certain notable attacks on high profile targets that were well-publicised causing significant disruption to the affected entities. The Group does not consider it has a higher than average likelihood of being subject to a cyber threat and the perceived threat level remains elevated which is unchanged year-on-year. However, the Group proactively monitors the cyber landscape and considers the likelihood and potential impact of both a direct attack on the Group and a more systemic industry-wide issue. Consequently, the Group continues to invest heavily in this area, particularly in key controls around data loss prevention and vulnerability management. Ongoing cyber risk assessment is undertaken and is fully embedded in all transformation activity, with cyber risk mitigation remaining a key driver of activities such as technology strategy including extending the use of AI-enabled applications and the corporate insurance programme.

The ongoing pressures on the cost of living and doing business in the UK from the inflationary environment of recent periods still remain a consideration in the risk landscape. The Group remains committed to achieving good outcomes for its customers and ensuring customers in financial difficulties receive appropriate and tailored support. More generally, regulatory compliance expectations continue to rise, and the Group is committed to ensuring that it remains compliant in all operational activities. Specifically, the recent legal judgements in respect of motor commissions and the FCA proposals on its intended redress scheme remain a priority for the Group. Regular engagement on this topic and other areas of regulatory focus is undertaken on an ongoing basis with the relevant regulators and wider industry groups to ensure the Group is well placed operationally to address any requirements that may arise.

Strategic transformation remains a priority focus for the Group, and the Change Framework ensures that such change is undertaken in a considered and risk-aware way. The automation and efficiencies that these initiatives bring will support more effective operational risk management in the longer term. However, it is recognised that significant change can exacerbate operational strains in the short term and may bring additional threats given new product offerings and technologies, for example, through the launch of our digitally-enabled Spring savings operation. The potential for such issues is carefully managed through robust governance and oversight. Continued investment in areas such as financial crime risk controls and technology is key to ensuring that the volume of transformative activity does not adversely affect the Group's assessment of its operational risk profile

Page 87
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# Operational risk reporting

The structure, content, and presentation of Management Information ('MI'), including the supporting reporting processes required, is a key component of the ERMF and informs decision-making at all levels across the organisation.

Detailed operational risk MI is presented at the ORC. This includes information supplied from various areas of the Group, including:

- Risk appetite metrics reflecting how the various categories of operational risk are tracking against board and executive-level risk appetites
- Key indicator breaches and associated action plans to address any risk exposure
- New and emerging external trends in order to identify any potential read-across for the Group
- Any major risk events that have occurred since the previous reporting period and updates on previous periods, to ensure appropriate remedial actions are being implemented
- An overview of risk events and our losses position, highlighting the movement of losses and actual losses suffered in the current month, and risk event volumes and emerging or ongoing trends
- Individual updates from across the business, to cover all operational risk categories included in the risk taxonomy
- Any risk acceptances being proposed, or policy waivers required

The Group maintains a central risk system which contains the source operational risk data. All data is mapped against our operational risk categories and risk events are mapped against causal categories, as well as being reported against the operational risk categories defined by the BCBS in the Basel III framework – allowing comparison with peer organisations.

Ongoing review and analysis is undertaken to ensure that reporting consistently aligns to the Group's risk universe, facilitating enhanced understanding of any systemic operational risk issues in order to promptly address any perceived weaknesses.

# Policies for hedging and mitigating operational risk

Ensuring the adoption of a consistent approach to the creation, ongoing management and closure of action plans forms part of a strong ORMF, one that ensures risks and controls are being managed within risk appetite and are aligned with the Group's strategic objectives. Business areas are required to capture and address actions in a timely manner. Actions articulate the appropriate risk treatment, as defined under the Group's ERMF, which include the following:

- Mitigate – enhance controls to bring the risk down to an acceptable level which can be tracked through the ORC
- Accept – accept that, due to time or resource constraints, a risk cannot be brought down to within appetite. This is supported by a formal Risk Acceptance process with individual acceptances reviewed on a regular basis to ensure ongoing appropriateness
- Transfer – put in place measures to transfer the impact of the risk to a third party, for instance, by taking out insurance under the Group's corporate insurance framework which ensures that appropriate insurance policies are in place against key operational risk exposures, such as cyber and fraud risks
- Avoid – cease the activity that gives rise to the risk, for example, by withdrawing a product or removing a distribution channel

Minimum controls in managing individual operational risks are documented within the respective policy to ensure operational risks are managed and mitigated consistently across all areas of the Group.

## (b) Approaches for the assessment of minimum own funds requirements (Article 446 CRR)

The Basic Indicator Approach ('BIA') is used to calculate RWAE for operational risk and hence Pillar 1 operational risk minimum funds requirements for the Group as a whole.

## (c) Description of the AMA methodology approach used (Article 446 CRR)

This is not applicable to the Group as no Advanced Measurement Approach ('AMA') is used.

## (d) Use of insurance for risk mitigation in the Advanced Measurement Approach (Article 454 CRR)

This is not applicable to the Group as an AMA is not used.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 16.2. UK OR1 - Operational risk own funds requirements and risk-weighted exposure amounts

For organisations of the Group's size the BIA own funds requirement is calculated as 15% of the average relevant income for the past three financial years. RWAE is derived from the own funds requirement.

|   |  | a | b | c | d | e  |
| --- | --- | --- | --- | --- | --- | --- |
|   |  Banking activities | Relevant Indicator |   |   | Own Funds Requirements | Risk Weighted Exposure Amount  |
|   |  £m | Year-3 | Year-2 | Last Year |  |   |
|  1 | Banking activities subject to basic indicator approach ('BIA') | 468.1 | 498.4 | 518.8 | 74.3 | 928.3  |
|  2 | Banking activities subject to standardised ('TSA') / alternative standardised ('ASA') approaches | - | - | - | - | -  |
|  3 | Subject to TSA: |  |  |  |  |   |
|  4 | Subject to ASA: |  |  |  |  |   |
|  5 | Banking activities subject to advanced measurement approaches ('AMA') | - | - | - | - | -  |
|   |  |  |  |  |  | See table UK OV1  |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 17. Remuneration policy

## This section sets out

- Remuneration policy
- Remuneration awarded for the financial year

The section sets out matters relating to the Group's remuneration policies, particularly those relating to Material Risk Takers ('MRTs') including senior management. MRTs are those employees who fall within the scope of the Remuneration part of the PRA Rulebook and SYSC 19D of the FCA Handbook. This disclosure is required to be made for Paragon Bank PLC, but all of the people involved also exercise their roles at a group level.

## 17.1. UK REMA - Remuneration policy

### (a) Information relating to the bodies that oversee remuneration:

#### i. Name, composition and mandate of the main body overseeing remuneration

The Company and the Bank's Remuneration Committee ('RemCo') is responsible for determining and agreeing the remuneration strategy, how the strategy is reflected in the remuneration policy and the specific remuneration packages for the Group's Chair, the executive directors and other members of the Executive Committee and the Company Secretary. Additionally, it is also responsible for the remuneration of all other MRTs.

RemCo also oversees how the remuneration policy is applied across the wider employee base, with a specific focus on the risks posed by remuneration policies and practices.

Six scheduled RemCo meetings were held during the financial year ended 30 September 2025.

The terms of reference for the RemCo have been approved by the Company and Bank's Board of Directors (and are available on the Group's corporate website www.paragonbankinggroup.co.uk).

#### Remuneration Committee composition

The Committee during the year comprised the following independent non-executive directors (the Chair of the Board being considered independent on appointment): Robert East (Chair of the Board), Tanvi Davda (Chair of the Committee), Zoe Howorth, Alison Morris and Graeme Yorston.

#### ii. External consultants whose advice has been sought, the body by which they were commissioned, and in which areas of the remuneration framework

PricewaterhouseCoopers LLP ('PwC') are the Committee's independent external remuneration consultants. Their advice was sought across the whole spectrum of the Committee's mandate including executive directors' remuneration, remuneration for the Chair of the Board and the wider MRT population as well as the regulatory landscape more generally.

PwC were appointed by the Committee following a tender process in the financial year ended 30 September 2021. They are members of the Remuneration Consultants Group and as such voluntarily operate under its Code of Conduct in relation to executive remuneration in the UK.

#### iii. The scope of the institution's remuneration policy

The Group's remuneration policy comprises:

- The Directors' Remuneration Policy, which applies to the executive directors of the Company and the Bank only
- The Internal Remuneration Policy (for all employees and which is reflective of the Directors' Remuneration Policy). The Internal Remuneration Policy provides no greater level of benefit nor any lower level of risk tolerance than the Directors' Remuneration Policy
- Various related sub-policies on specific matters such as Malus and Clawback

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Both the Directors' Remuneration Policy and the Internal Remuneration Policy are reviewed by RemCo on at least an annual basis.

Additionally, an annual review of the implementation of remuneration policies is undertaken by the Group's Internal Audit function. This review assesses the compliance level of the Group's remuneration policy against the remuneration regulations of the PRA and FCA. The outcome of the review is considered by RemCo, which ensures that any steps necessary to maintain compliance are taken.

The Group does not have any subsidiaries or branches outside of the UK.

## iv. Staff or categories of staff whose professional activities have a material impact on institutions' risk profile

MRTs identified for the financial year ended 30 September 2025 are those individuals whose professional activities have a material impact on the Group's risk profile, based on, but not limited to, the qualitative and quantitative criteria as required by relevant regulations. MRTs are identified by reviewing individual responsibilities within a role and assessing the materiality of the impact the role could have on the risk profile of the Group.

During the 2025 financial year there were 54 MRTs. Those identified as MRTs include, but are not limited to:

- Executive and non-executive directors of the Group
- Senior management, which includes other members of the Group's Executive Committee who are not directors of the Group and other staff with key functional or managerial responsibility. This includes senior managers of control functions such as Internal Audit and Risk
- Other risk takers, including those identified against the Group's internally developed criteria, whose professional activities could have a material impact on the Group's risk profile

## (b) Information relating to the design and structure of the remuneration system for identified staff

### i. An overview of the key features and objectives of remuneration policy and the decision making process

#### Objectives

The key objectives of the remuneration policies are to reward all of the Group's employees fairly for their contribution, whilst ensuring they are motivated to always deliver the best outcomes for customers. This approach to remuneration reflects the Group's purpose, culture and values whilst being aligned to its long-term strategy and helping to deliver good customer outcomes.

#### Structure

The main elements for employees (including MRTs) are:

- Fixed pay, comprising:
- Base salary
- Benefits (including pension, car benefits and healthcare)
- Variable pay

#### Fixed pay

All employees receive salary, or in the case of non-executive directors, fees. Salary levels are reviewed annually in line with performance, skills and experience and considering market data. Pension and other benefits are provided as part of a competitive reward package. Fixed pay may also include cash in lieu of pension and other cash allowances, such as car allowance, in accordance with market practice.

A proportion of salary for a small number of MRTs, including the executive directors, is delivered in shares, released over five years. Salary in shares is not pensionable. It forms part of total salary for the purposes of determining bonus and long-term incentive award levels.

Non-executive directors do not benefit from any performance awards or from any pension arrangements. Non-executive directors are paid a basic fee, with an additional supplement paid for additional roles or responsibilities, including acting as Senior Independent Director, or for serving on, or chairing, a board committee.

Fees are set considering practice at other organisations as well as the time commitment required for the specific role. The Chair of the Board's fee is normally reviewed and approved by the Committee on an annual basis. The fees paid to non-executive directors are normally reviewed and approved by the Board (excluding the non-executive directors) annually. Non-executive directors receive reimbursement for any reasonable expenses.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Variable pay for MRTs comprises principally annual bonus awards and / or share-based awards under the Paragon Performance Share Plan ('PSP') and the Deferred Share Bonus Plan. The deferral of variable pay applies as required by the Remuneration Part of the Rulebook. For the majority of MRTs the principal means of meeting the deferral requirements is through PSP awards, which are not accessible for at least three years in normal circumstances.

Variable pay for the year ended 30 September 2025 was delivered in accordance with the Group's Directors' Remuneration Policy and its Internal Remuneration Policy. Consideration is given to individual performance against objectives which are agreed through annual financial and non-financial targets. Bonus awards are based on a combination of group performance, business lines' performance and personal performance, including adherence to the Group's ERMF. The Committee will only approve performance related pay if it is sure the Group is financially secure. During 2025, all variable pay operated within the policy framework.

RemCo is responsible for determining and agreeing the remuneration strategy and the remuneration policy for all MRTs. This includes approving the design of, and determining the performance targets for, any discretionary performance bonus operated by the Group for the benefit of these employees. RemCo also approves the outcomes of any performance award and reviews the year-end pay outcomes for all these employees. RemCo is supported by the Chair of the RCC, and the CRO, on risk-related matters including pay plan design, the assessment of specific performance measures, and wider issues relating to risk and controls. RemCo is also supported by and receives input from its independent external consultants, PwC.

## Stakeholders

The Chair of RemCo and the Chair of the Board met with a number of shareholders and proxy agencies during the year as part of RemCo's regular and ongoing engagement with stakeholders. Discussions with shareholders on the AGM voting also took place during the year and have been considered as part of RemCo's deliberations.

The Directors' Remuneration Policy is usually put to the AGM on a triennial basis and will next be put in 2026. The Directors' Remuneration Report is put to the AGM on an annual basis as required by the Companies Act 2006.

The People Forum, the Group's workforce engagement forum, provides an arena for discussion and feedback on executive and all-employee remuneration structures including the Directors' Remuneration Policy and the Internal Remuneration Policy. Meetings between the Forum and the Chair of RemCo to engage on executive remuneration, explain its operation and to discuss remuneration across the wider workforce, form a regular part of the Forum's annual calendar and took place in November 2025.

## ii. Information on the criteria used for performance measurement and ex ante and ex post risk adjustment

The Group uses variable pay to align reward with performance. Measurement is designed to encourage high performance whilst supporting effective risk management. Individuals are only rewarded for the achievement of challenging objectives in line with the corporate plan and the extent to which their individual performance and behaviours are in line with the Group's culture and values. Objectives are reviewed on an annual basis. Awards reflect the measures that apply to all employees: displaying the competency behaviours set out in the person's Purpose and Performance Plan ('PPP'), demonstrating the values of the Group, and acting in accordance with relevant risk management and risk appetite requirements.

The Group's approach to risk adjustment provides for a discretionary assessment of both 'ex-ante' and 'ex-post' risk adjustments, based on performance against risk appetite as set out in the ERMF and taking into account any risk events during the year from a conduct, reputational, financial or operational perspective.

Ex-ante risk adjustments are made in two ways. The first of these involves an assessment of the Group's performance against its established risk appetites during the period. This is relevant as forming the basis for the in-year assessment of the risk performance element of the Executive Director and Senior Manager annual bonus scheme and forming half of the risk element of the long-term incentive award assessment. The second method involves a strategic assessment of the Group's risk performance. This is relevant as forming the basis for the assessment of the other half of the risk element of the long-term incentive award. The long-term incentive award assessments are measured over three years.

All variable remuneration for MRTs is subject to risk adjustment. When reaching its determination of an appropriate level of risk adjustment, RemCo considers a range of factors, with input from the CRO and Chair of the RCC, as well as the output from the Risk Adjustment Review Group, a working group of RemCo consisting of the CRO, CPO and the Conduct and Compliance Director.

Ex-post risk adjustment applies to annual bonus awards for MRTs and long-term incentive awards for all employees which are subject to malus and clawback provisions relating to circumstances including the following:

- A higher payment than would otherwise have been the case being paid as a result of a material misstatement of a group company's results
- Any error or inaccurate, misleading information or assumptions relating to a financial year
- Being party to behaviour that resulted in serious reputational damage to a group company or a relevant business unit
- Reasonable evidence of employee misbehaviour or material error
- Material failure of risk management within a group company or relevant business unit, taking account of the individual's proximity to and / or responsibility for the event
- Material downturn in the financial performance of a group company or relevant business unit

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

- Failure to meet appropriate standards of fitness and propriety
- Participation in or responsibility for conduct which resulted in significant losses to the Group
- Situations where there is a significant increase in the Group's or business unit's economic or regulatory capital base
- Regulatory sanctions where the conduct of the participant contributed to the sanction

Any variable awards may be reduced or cancelled before vesting or clawed back for a period of up to seven years from the grant date. For certain senior MRTs this may be extended to ten years in the event of ongoing internal / regulatory investigation at the end of the seven-year period.

iii. Whether the management body or the remuneration committee where established reviewed the Group's remuneration policy during the past year, and if so, an overview of any changes that were made, the reasons for those changes and their impact on remuneration

The RemCo reviewed the Group's Internal Remuneration Policy (applicable to all employees) during the year ended 30 September 2025.

The main changes were as follows:

- a revised maximum bonus cap of 5:1 following the removal of the regulatory mandated cap of 2:1 for MRTs (excluding the executive directors) at the AGM in 2025 was introduced
- for variable pay awards made in the year ending 30 September 2026, risk would not be a specific metric but an underpin to reflect the proposed changes to the executive directors' remuneration policy discussed below
- to note that regulatory remuneration rules for a non-small CRR firm were intended to be applied at Paragon, despite the Bank being a small CRR firm

Other minor changes of a non-substantive nature were also made. The changes made do not impact on risk appetite levels.

The Directors' Remuneration Policy, which is only applicable to the Board of the Company and the Bank (Chair, NEDs and the two executive directors), was reviewed in the year ended 30 September 2025 ahead of the triennial policy vote which will be put to the Company's AGM in March 2026. Details of the Directors' Remuneration Policy applying in the year can be found in Section B7.3 of the Company's Annual Report and Accounts for the year ended 30 September 2022. The proposed new policy is set out in B7.2 of the Annual Report and Accounts for the year ended 30 September 2025, together with a detailed description of the proposed changes and explanation of their rationale.

In outline, the changes are being proposed to increase simplification and market alignment; strengthen shareholder alignment; and recognise the sustained outperformance of our long-standing executive directors. Broadly the changes proposed are as follows:

- reduction in fixed pay of 16.5%, including removal of the salary in shares element
- variable pay incentive to become 200% of salary for both bonus and PSP
- increase in the weighting of financial metrics in the bonus and PSP to 75% and replacement of the risk elements of each scorecard with overall risk underpins
- increase in the executive director shareholding requirement to 300% of salary
- introduction of mandatory deferral of 50% of annual bonus, reducing to 20% if the shareholding requirement is met

## Information of how the Group ensures that staff in internal control functions are remunerated independently of the businesses they oversee

For control functions, as for all central functions and business units, remuneration is determined by the CEO, CFO and CPO in order to avoid conflicts of interest. When an employee is an MRT, the remuneration proposal will be independently reviewed and approved by RemCo. Remuneration is determined to ensure it adequately attracts qualified and experienced employees. The level of any bonus awards and / or pay increases considers individual talent ratings. Individual ratings relate to achievement of objectives tailored to control function roles, with no link to group performance.

For senior officers within control functions (who are MRTs) annual bonus awards are determined based on individual (including functional) performance only. RemCo is responsible for setting and overseeing the remuneration for senior officers in control functions with specific input from the Chair of the RCC and the Chair of the Audit Committee.

## iv. Policies and criteria applied for the award of guaranteed variable remuneration and severance payments

The Group will consider a guaranteed variable payment only where it is exceptional, and it occurs in the context of hiring new MRTs or specific specialist roles critical to the delivery of the Group's strategy. Guaranteed variable remuneration will be rare, limited to an employee's first year of service, and will only be agreed if the Group has a sound and strong capital base. In addition, the Group may buy out contractual terms forfeited, for example previous relocation arrangements. Where it is deemed appropriate to grant a guaranteed variable payment, this will be subject to the RemCo's approval and in line with regulatory requirements.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

The Group's approach to retention awards is in line with the principles set out in the remuneration regulations. Retention awards are granted only in exceptional circumstances, such as a major corporate restructuring, where a strong case can be made for retention of particular key staff members on prudential grounds. Where it is deemed appropriate to make a retention award, this will be subject to the RemCo's approval and in line with regulatory requirements.

Any termination payments made to employees will reflect the terms of the contracts of employment or service contracts in place as well as the relevant incentive plan rules. There is no automatic or contractual right to incentive payments upon termination of employment.

In exceptional circumstances, the Group reserves the right to consider the payment of additional termination payments provided such payments conform with any legal, statutory or regulatory requirements. Such payments will be structured so as to reflect performance achieved over time and to avoid rewarding failure or misconduct. Any such award for an MRT will be subject to RemCo approval.

No termination payment, above contractual entitlements, will normally be awarded to any employee resigning to take up alternative employment and / or where there is an obvious failure which allows for the immediate cancellation of the contract or the dismissal of the employee.

(c) Description of the ways in which current and future risks are taken into account in the remuneration processes

Risk analyses are included within both the annual bonus considerations for MRTs and in the long-term incentive plans for those in receipt of such awards (including MRTs).

In order to assist RemCo in its review of current and future risk matters the CRO will collate performance into a report summarising outcomes across a range of the Group's key risk areas. For the 2025 financial year these were capital, liquidity, operational risk events, conduct, credit losses and any regulatory breaches. The assessment will include a 'score' for each element of risk, combined into a total score which will then be reflected in a proposed adjustment to the maximum allowable risk element of any variable pay award. The RemCo (including where possible the Chair of the RCC) will consider this report and use it to inform its determination of the appropriate level of adjustment to any variable pay award. The RemCo may reduce or cancel the payment of variable remuneration where it deems appropriate in light of any emerging or potential risks.

For the 2026 financial year risk will not be a specific condition within either the annual bonus or long-term incentive plan awards to be granted in the year. Instead, risk will become an underpin which will consider the items noted above or other relevant risk-related matters that RemCo considers appropriate from time to time.

Details of the approach to ex-post risk adjustment are included under (b)(ii) above.

(d) The ratios between fixed and variable remuneration

In accordance with relevant regulatory requirements at the time, in 2021 the shareholders of the Company authorised it and its subsidiaries to apply a ratio of the variable to fixed components of remuneration for those individuals who are classified as MRTs of up to 2:1 (such that the variable component of total remuneration for each such individual shall not exceed 200% of the fixed component of total remuneration for that individual). This ratio was removed at the AGM in March 2025 for MRTs other than the executive directors. The ratio subsequently set by the Remuneration Committee is 5:1 but in practice it is expected that all MRTs will have a ratio between fixed and variable pay below this level. For the executive directors their proposed ratio of 4:1 is to being put to the AGM in March 2026.

(e) Description of the ways in which the Group seeks to link performance during a performance measurement period with levels of remuneration

This disclosure addresses Article 450 1(e) of the Disclosure Part, which is not required for Small CRR Firms, such as the Group, under Article 433c (3). Therefore, this has not been presented.

(f) Description of the ways in which the Group seeks to adjust remuneration to take account of long-term performance

This disclosure addresses Article 450 1(e) of the Disclosure Part, which is not required for Small CRR Firms, such as the Group, under Article 433c (3). Therefore, this has not been presented.

(g) The description of the main parameters and rationale for any variable components scheme and any other non-cash benefit in accordance with point (f) of Article 450(1) CRR

This disclosure addresses Article 450 1(f) of the Disclosure Part, which is not required for Small CRR Firms, such as the Group, under Article 433c (3). Therefore, this has not been presented.

(h) Total remuneration for each member of the management body

Only required if requested by the regulatory authorities. No such request has been made.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

(i) Information on whether Paragon benefits from a derogation laid down in Article 94(3) CRD in accordance with point (k) of Article 450(1) CRR

This disclosure addresses Article 450 1(k) of the Disclosure Part, which is not required for Small CRR Firms, such as the Group, under Article 433c (3). Therefore, this has not been presented.

(j) Large institutions shall disclose the quantitative information on the remuneration of their collective management body, differentiating between executive and non-executive members in accordance with Article 450(2) CRR

The Group does not meet the criteria of a large institution and therefore this disclosure is not required.

17.2. UK REM1 - Remuneration awarded for the financial year

|  Em | a | b | c | d  |   |   |
| --- | --- | --- | --- | --- | --- | --- |
|   |   |   |  MB² Supervisory function | MB² Management function | Other senior management | Other identified staff  |
|  1 | Fixed remuneration | Number of identified staff | 8 | 2 | 11 | 33  |
|  2 |   | Total fixed remuneration | 1.0 | 1.8 | 3.9 | 5.0  |
|  3 |   | Of which: cash-based | 1.0 | 1.4 | 3.8 | 5.0  |
|  4 |   | (Not applicable in the UK) | - | - | - | -  |
|  UK-4a |   | Of which: shares or equivalent ownership interests | - | 0.4 | 0.1 | -  |
|  5 |   | Of which: share-linked instruments or equivalent non-cash instruments | - | - | - | -  |
|  UK-5x |   | Of which: other instruments | - | - | - | -  |
|  6 |   | (Not applicable in the UK) | - | - | - | -  |
|  7 |   | Of which: other forms | - | - | - | -  |
|  8 |   | (Not applicable in the UK) | - | - | - | -  |
|  9 |   | Number of identified staff | - | 2 | 11 | 31  |
|  10 |   | Total variable remuneration | - | 4.1 | 5.8 | 3.2  |
|  11 |   | Of which: cash-based | - | 0.7 | 2.5 | 1.4  |
|  12 |   | Of which: deferred | - | - | - | -  |
|  UK-13a |   | Of which: shares or equivalent ownership interests | - | 3.4 | 3.3 | 1.8  |
|  UK-14a |   | Of which: deferred | - | 3.4 | 3.3 | 1.8  |
|  UK-13b |   | Of which: share-linked instruments or equivalent non-cash instruments | N/A¹ | N/A¹ | N/A¹ | N/A¹  |
|  UK-14b |   | Of which: deferred | N/A¹ | N/A¹ | N/A¹ | N/A¹  |
|  UK-14x |   | Of which: other instruments | N/A¹ | N/A¹ | N/A¹ | N/A¹  |
|  UK-14y | Of which: deferred | N/A¹ | N/A¹ | N/A¹ | N/A¹  |   |
|  15 | Of which: other forms | N/A¹ | N/A¹ | N/A¹ | N/A¹  |   |
|  16 | Of which: deferred | N/A¹ | N/A¹ | N/A¹ | N/A¹  |   |
|  17 | Total remuneration (2 + 10) |   | 1.0 | 5.9 | 9.7 | 8.3  |

¹Certain rows of the template relating to variable remuneration are only applicable to Level 1 banks and therefore these have not been presented.
²MB refers to the Management Body, in the Group's case, its Board of Directors. 'Supervisory function' relates to the Chair of the Board and the non-executive directors, 'management function' to the executive directors.

Notes:

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Page 96
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

## 17.3. UK REM2 - Special payments to staff whose professional activities have a material impact on institutions' risk profile

No special payments have been made to staff whose professional activities have a material impact on the Group's risk profile and therefore template UK REM2 has not been presented.

## 17.4. UK REM3 - Deferred remuneration

Template UK REM3 addresses Article 450 (1)(h) (iii) and (iv) and Article 450 1(j) of the Disclosure Part, which are not required for Small CRR Firms, such as the Group, under Article 433c (3). Therefore, this has not been presented.

## 17.5. UK REM4 - Remuneration of 1 million EUR or more per year

Template UK REM3 addresses Article 450 (1)(j) of the Disclosure Part, which is not required for Small CRR Firms, such as the Group, under Article 433c (3). Therefore, this has not been presented.

## 17.6. UK REM5 - Information on remuneration of staff whose professional activities have a material impact on institutions' risk profile

Template UK REM5 addresses Article 450 (1)(g) of the Disclosure Part, which is not required for Small CRR Firms, such as the Group, under Article 433c (3). Therefore, this has not been presented.

---

# 18. Encumbered and unencumbered assets

## This section sets out

- Encumbered and unencumbered assets
- Collateral received and own debt securities issued
- Sources of encumbrance

Encumbrance is the process of pledging assets to support a firm's borrowings and disclosures of encumbered and unencumbered assets are required by the Pillar III rules to enable readers to evaluate a firm's potential access to future funding.

## 18.1. UK AE4 - Accompanying narrative information

### (a) General narrative information on asset encumbrance (Article 443 CRR)

Asset encumbrance is the process by which assets are pledged in order to secure, collateralise or credit-enhance a financial transaction from which they cannot be freely withdrawn. The Group maintains a level of encumbrance commensurate with the scale and scope of its business operations, within the context of a robust and diversified funding capability.

Responsibility for monitoring the Group's use of asset encumbrance in financial transactions lies with ALCO.

Accounting values are used in all tables, the disclosures reflect the median of the four quarterly end-of-period values over the previous 12 months as prescribed by regulatory requirements.

The consolidation scope applied for the purposes of asset encumbrance disclosures is consistent with that applied for liquidity requirements.

There are also no differences between the treatment of transactions which have been deemed to have been pledged or transferred compared to their encumbrance status.

### (b) Narrative information on the impact of the business model on assets encumbrance and the importance of encumbrance to the Group's business model, which provides users with the context of the disclosures required in Template UK AE1 and UK AE2 (Article 443 CRR)

#### i. the main sources and types of encumbrance

The majority of the Group's encumbrance arises from its covered bond and securitisation transactions and from activity in connection with Bank of England facilities intended to support lending. Assets are encumbered in accordance with the contractual requirements of these transactions.

The Group has also issued asset backed loan notes in securitisations where some or all of the rated notes have been retained in order to be used as security in other funding transactions. Such notes are not shown on the group balance sheet but where they are pledged as security, the appropriate proportion of the underlying assets are considered to be encumbered.

The Group was approved to participate in the Bank of England SME Term Funding Scheme ('TFSME'), which was launched in the year ended 30 September 2020 in response to the Covid pandemic. Drawings under the scheme are secured on mortgages pools or retained securitisation notes, subject, where necessary, to a haircut. The Group had drawn £250.0m under TFSME by 30 September 2025 (2024: £750.0m). The Group also participates in the Bank of England ILTR, which creates encumbrance in the same way. At 30 September 2025, £700.0m of ILTR drawings were outstanding (2024: £5.0m).

The TFSME provides access to funding appropriate for the Group's operations having a four-year term with interest payable at the Bank of England base rate, using either mortgage assets or mortgage securities as collateral, while the ILTR provides short-term funding on a similar basis. This makes these borrowings readily accessible and cost-effective for the Group.

Further mortgage assets of the Bank have been pre-positioned with the Bank of England for use in the ILTR and other funding schemes.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

During the year the Group initiated an FCA-regulated covered bond programme and made its first issue of notes in March 2025. At the year end £500.0m of covered bonds were in issue (2024: nil). These bonds are secured on a pool of the Group's buy-to-let mortgage assets, which are therefore considered to be encumbered.

The Group also enters into sale and repurchase ('repo') transactions with UK financial institutions, from time to time. These transactions give rise to encumbrance, generally of the Group's retained securitisation notes, although investment securities may also be used. At 30 September 2025, the Group had outstanding indebtedness under repo arrangements of £100.0m (2024: £100.0m).

The Group has also given an effective charge over its head office building as a guarantee for contributions payable to its defined benefit pension plan, encumbering the asset. Assets relating to collateral paid to third parties under financial derivative contracts are treated as encumbered for the purposes of the disclosures below.

## ii. the structure of encumbrance between entities within a group

There is no material difference in the level of encumbrance on a group or individual basis other than the encumbrance created in individual companies by securitisation arrangements which relate to securities held by other group entities.

## iii. information on over-collateralisation

In the Group's borrowing arrangements overcollateralisation arises as a result of requirements to provide first loss funds, or similar support, or from any requirement for a 'haircut' to asset values before they can be used as security, as is the case with the various central bank funding schemes. A similar over-collateralisation requirement applies in respect of the Group's covered bond arrangements.

## iv. additional information on encumbrance of assets

All encumbered assets are denominated in UK pounds sterling.

## v. proportion of items included in column 060 'Carrying amount of unencumbered assets' in template UK AE1 that the Group would not deem available for encumbrance in the normal course of its business

In the normal course of business the Group would only encumber loan assets or investment securities and, by encumbering retained notes, the cash, derivatives and sundry balances of retained securitisations.

Other unencumbered assets include cash-in-hand, derivative assets, pension surplus, property, plant and other fixed assets and intangible assets including goodwill. These would not generally be deemed available for encumbrance in the normal course of business, except as part of a retained securitisation or similar structure, as described above.

## vi. the amount of underlying assets and of cover pool assets of retained securitisations and retained covered bonds

The Group has assets totalling £2,008.4m underlying retained securitisation issuance included as unencumbered in table UK AE1 (interpolated median basis). The Group issued £500.0 million of covered bonds in the year, and none were retained.

## vii. the impact of the Group's business model on their level of encumbrance

The Group manages its level of encumbrance in accordance with the approved limits within its liquidity and funding risk strategies, and endeavours to ensure that a ratio covering depositor liabilities with unencumbered assets is maintained during normal business conditions. It continues to work closely with its regulators to ensure that its encumbrance profile remains transparent, proportionate and relevant to the business model.

## viii. additional information on the breakdown of rows in the templates UK AE1, UK AE2 and UK AE3

Templates UK AE1, UK AE2 and UK AE3 are required to present interpolated median figures for the four quarter ends in the year ended 30 September 2025, on a line by line basis, and therefore may not cast.

Additional lines have been added to the tables UK AE1, UK AE2 and UK AE3 to present additional detail on the Group's position. The encumbered assets comprise the Group's loans pledged under TFSME, loans held within the covered bond pool, CSA collateral received, the Homer Road building which is encumbered to the Pension fund under the PFP and assets in the Group's securitisations including the cash, derivatives and sundry assets in the SPV companies, in so far as the securities issued in these transactions were externally held or pledged.

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

18.2. UK AE1 - Encumbered and unencumbered assets

|  £m | Carrying amount of encumbered assets |   | Fair value of encumbered assets |   | Carrying amount of unencumbered assets |   | Fair value of unencumbered assets  |   |   |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
|   |   |   | of which notionally eligible EHQLA and HQLA |  | of which notionally eligible EHQLA and HQLA |  | of which EHQLA and HQLA |  | of which EHQLA and HQLA  |
|   |   |  010 | 030 | 040 | 050 | 060 | 080 | 090 | 100  |
|  010 | Assets of the reporting institution, | 3,075.1 | N/A¹ |  |  | 16,589.2 | N/A¹ |  |   |
|  030 | Equity instruments | - | N/A¹ | - | N/A¹ | - | N/A¹ | - | N/A¹  |
|  040 | Debt securities | - | N/A¹ | - | N/A¹ | 463.1 | N/A¹ | 373.8 | N/A¹  |
|  050 | of which: covered bonds | - | N/A¹ | - | N/A¹ | 88.0 | N/A¹ | - | N/A¹  |
|  060 | of which: securitisations | - | N/A¹ | - | N/A¹ | - | N/A¹ | - | N/A¹  |
|  070 | of which: issued by general governments | - | N/A¹ | - | N/A¹ | 373.8 | N/A¹ | 373.8 | N/A¹  |
|  080 | of which: issued by financial corporations | - | N/A¹ | - | N/A¹ | - | N/A¹ | - | N/A¹  |
|  090 | of which: issued by non-financial corporations | - | N/A¹ | - | N/A¹ | - | N/A¹ | - | N/A¹  |
|  120 | Other assets | 3,057.1 | N/A¹ |  |  | 16,107.2 | N/A¹ |  |   |
|   | of which: mortgage loans | 2,951.1 | N/A¹ |  |  | 10,821.2 | N/A¹ |  |   |
|   | of which: other loans to customers | - | N/A¹ |  |  | 2,480.1 | N/A¹ |  |   |
|   | of which: cash balances | 24.6 | N/A¹ |  |  | 2,244.5 | N/A¹ |  |   |

¹Annex XXXVI specifies that asset quality indicators by asset type in columns C030, C050, C080 and C100 of template UK AE1 only applies to credit institutions with total assets amounting to more than EUR 30 billion and as the Group's assets do not exceed this threshold, these columns have not been disclosed.

Notes:

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 18.3. UK AE2 - Collateral received and own debt securities issued

|  £m | Fair value of encumbered collateral received or own debt securities issued | Unencumbered  |   |   |   |
| --- | --- | --- | --- | --- | --- |
|   |   |   |  Fair value of collateral received or own debt securities issued available for encumbrance  |   |   |
|   |   |   | of which notionally eligible EHQLA and HQLA |  | of which EHQLA and HQLA  |
|   |   |  010 | 030 | 040 | 060  |
|  130 | Collateral received by the reporting institution | - | N/A¹ | - | N/A¹  |
|  140 | Loans on demand | - | N/A¹ | - | N/A¹  |
|  150 | Equity instruments | - | N/A¹ | - | N/A¹  |
|  160 | Debt securities | - | N/A¹ | - | N/A¹  |
|  170 | of which: covered bonds | - | N/A² | - | N/A²  |
|  180 | of which: securitisations | - | N/A¹ | - | N/A¹  |
|  190 | of which: issued by general governments | - | N/A¹ | - | N/A¹  |
|  200 | of which: issued by financial corporations | - | N/A¹ | - | N/A¹  |
|  210 | of which: issued by non-financial corporations | - | N/A¹ | - | N/A¹  |
|  220 | Loans and advances other than loans on demand | - | N/A¹ | - | N/A¹  |
|  230 | Other collateral received | - | N/A¹ | - | N/A¹  |
|  240 | Own debt securities issued other than own covered bonds or securitisations | - | N/A¹ | - | N/A¹  |
|  241 | Own covered bonds and asset-backed securities issued and not yet pledged |  |  | 1,896.7 | N/A¹  |
|  250 | TOTAL ASSETS, COLLATERAL RECEIVED AND OWN DEBT SECURITIES ISSUED | 3,057.1 | N/A¹ |  |   |

¹Annex XXXVI specifies that asset quality indicators by asset type in columns C030 and C060 of template UK AE2 only applies to credit institutions with total assets amounting to more than EUR 30 billion and as the Group's assets do not exceed this threshold, these columns have not been disclosed.

## Notes:

# 18.4. UK AE3 - Sources of encumbrance

|  £m | Matching liabilities, contingent liabilities or securities lent | Assets, collateral received and own debt securities issued other than covered bonds and securitisations encumbered  |   |
| --- | --- | --- | --- |
|   |   |  010 | 030  |
|  010 | Carrying amount of selected financial liabilities | 1,324.5 | 3,057.1  |
|   |  Asset backed securities | - | -  |
|   |  Secured bank borrowings | 100.4 | 142.4  |
|   |  Central bank borrowings | 750.0 | 2,137.3  |
|   |  Covered bond | 499.1 | 675.3  |
|   |  Other sources of encumbrance | - | 45.2  |

Page 100
Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

# 19. IRB approach for credit risk

The following templates have not been presented as they apply to institutions that calculate the risk-weighted exposure amounts for credit risk under the IRB approach. As the Group does not currently have any IRB approvals, these are not currently applicable.

- UK CRE – Qualitative disclosure requirements related to IRB approach
- UK CR6 – IRB approach – Credit risk exposures by exposure class and PD range
- UK CR6-A – Scope of the use of IRB and SA approaches
- UK CR7 – IRB approach – Effect on the RWEAs of credit derivatives used as CRM techniques
- UK CR7-A – IRB approach – Disclosure of the extent of the use of CRM techniques
- UK CR8 – RWEA flow statements of credit risk exposures under the IRB approach
- UK CR9 – IRB approach – Back-testing of PD per exposure class (fixed PD scale)
- UK CR9.1 – IRB approach – Back-testing of PD per exposure class (only for PD estimates according to point (f) of Article 180(1) CRR)
- UK CR10 – Specialised lending and equity exposures under the simple risk weighted approach (IRB – Slotting Model)

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

20.Glossary

# This section sets out

- A listing of defined terms used in the document

|  AIRB | Advanced IRB | CRR | Capital Requirements Regulation (EU Regulation 575 / 2013)  |
| --- | --- | --- | --- |
|  ALCO | Asset and Liability Committee | CSA | Credit Support Annex  |
|  AMA | Advanced Measurement Approach (for operational risk) | CSRBB | Credit Spread Risk in the Banking Book  |
|  ASA | Alternative Standardised Approach (for operational risk) | CVA | Credit Valuation Adjustment  |
|  ASF | Available Stable Funding | EAD | Exposure at Default  |
|  AT1 | Additional Tier-1 | ECA | Export Credit Agency  |
|  Bank | Paragon Bank PLC | ECAI | External Credit Assessment Institution(s)  |
|  BBLS | Bounce Back Loan Scheme | ECL | Expected Credit Loss  |
|  BCBS | Basel Committee on Banking Supervision | EDI | Equality, Diversity and Inclusion  |
|  BIA | Basic Indicator Approach (for operational risk) | ERC | Executive Risk Committee  |
|  B4NZ | Bankers for Net Zero | ERMF | Enterprise-wide Risk Management Framework  |
|  CBILS | Coronavirus Business Interruption Loan Scheme | EU | European Union  |
|  CC | Credit Committee | EV | Economic Value  |
|  CCC | Customer and Conduct Committee | EVE | Economic Value of Equity  |
|  CCF | Credit Conversion Factor | FCA | Financial Conduct Authority  |
|  CCP | Central Counterparty | FIRB | Foundation IRB  |
|  CCR | Counterparty Credit Risk | FLA | Finance and Leasing Association  |
|  CCyB | CounterCyclical capital Buffer | Framework | Group Corporate Governance Policy Framework  |
|  CEO | Chief Executive Officer | Fully Loaded | Calculated as if the IFRS 9 transition relief were not available  |
|  CET1 | Common Equity Tier-1 | GGS | Growth Guarantee Scheme  |
|  CFO | Chief Financial Officer | Group | Paragon Banking Group PLC and all its subsidiaries  |
|  CIB | Chartered Institute of Bankers | Group Accounts | Annual Report and Accounts of Paragon Banking Group PLC for the year ended 30 September 2025  |
|  CML | Council of Mortgage Lenders | G-SII | Global Systemically Important Institution  |
|  Company | Paragon Banking Group PLC | HQLA | High Quality Liquid Assets  |
|  CPO | Chief People Officer | IAS | International Accounting Standard(s)  |
|  CQS | Credit Quality Step | ICAAP | Internal Capital Adequacy Assessment Process  |
|  CRD | Capital Requirements Directive | ICR | Individual Capital Requirement  |
|  CRD IV | Fourth EU Capital Requirements Directive | IFRS | International Financial Reporting Standard(s)  |
|  CRM | Credit Risk Mitigation | ILAAP | Internal Liquidity Adequacy Assessment Process  |
|  CRO | Chief Risk Officer |  |   |

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

---

Paragon Banking Group PLC • Pillar III Disclosures - 30 September 2025

|  ILTR | Bank of England Indexed Long-Term Repo scheme | RCSA | Risk and Control Self-Assessment  |
| --- | --- | --- | --- |
|  IMA | Internal Model Approach | RemCo | Remuneration Committee  |
|  IMLA | Intermediary Mortgage Lenders Association | Repo | Sale and Repurchase  |
|  IMM | Internal Model Method (for market risk) | RICS | Royal Institution of Chartered Surveyors  |
|  IRB | Internal Ratings Based (approach to credit risk) | RLS | Recovery Loan Scheme  |
|  IRRBB | Interest Rate Risk in the Banking Book | RP | Recovery Plan  |
|  ISDA | International Swaps and Derivatives Association | RSF | Required Stable Funding  |
|  KRI | Key Risk Indicators | Rulebook | The PRA Rulebook  |
|  LCH | LCH Limited | RWA | Risk Weighted Assets  |
|  LCR | Liquidity Coverage Ratio | RWEA | Risk Weighted Exposure Amount  |
|  LGD | Loss Given Default | SA | Standardised Approach (to credit risk)  |
|  Line 1 | The First Line of Defence | SA-CCR | Standardised Approach for Counterparty Credit Risk  |
|  Line 2 | The Second Line of Defence | SDDT | Small Domestic Deposit Takers  |
|  Line 3 | The Third Line of Defence | SEB | Socio-Economic Background  |
|  LOC | Liquidity Outlook Committee | SEC-ERBA | Securitisation External Ratings Based Approach  |
|  LREQ | Liquidity Requirement (rules) | SEC-IRBA | Securitisation Internal Ratings Based Approach  |
|  LUSD | Short rates shock down followed by long rates shock up | SFT | Securities Financing Transactions  |
|  MB | Management Body (in the Group's case, the Board of Directors) | SICR | Significant Increase in Credit Risk  |
|  MCR | Minimum Capital Requirement | SM&CR | Senior Manager and Certification Regime  |
|  MI | Management Information | SME | Small and / or Medium Sized Enterprise  |
|  MRC | Model Risk Committee | SONIA | Sterling Overnight Index Average  |
|  MRT | Material Risk Taker | SOT | Supervisory Outlier Test  |
|  M&A | the Group's Mergers and Acquisitions programme | SREP | Supervisory Review and Evaluation Process  |
|  NII | Net Interest Income | SSPE | Securitisation Special Purpose Entity  |
|  NMD | Non-maturing Deposit | STS | Simple, transparent and standardised securitisation  |
|  NFRH | Net Free Reserves Hedge | SULD | Short rates shock up followed by long rates shock down  |
|  NSFR | Net Stable Funding Ratio | T1 | Tier-1 (capital)  |
|  OCI | Other Comprehensive Income | T2 | Tier-2 (capital)  |
|  ORC | Operational Risk Committee | TCR | Total Capital Requirement  |
|  ORMF | Operational Risk Management Framework | TFSME | Term Funding Scheme with additional incentives for SMEs  |
|  O-SII | Other Systemically Important Institution | TSA | The Standardised Approach (for operational risk)  |
|  PD | Probability of Default | UK | United Kingdom  |
|  PFE | Potential Future Exposure | VAR | Value at risk  |
|  PRA | Prudential Regulation Authority |  |   |
|  PSP | Performance Share Plan |  |   |
|  PVA | Prudent Valuation Adjustment |  |   |
|  PwC | PricewaterhouseCoopers |  |   |
|  QCCP | Qualifying Central Counterparty |  |   |
|  RC | Replacement Cost |  |   |
|  RCC | Risk and Compliance Committee |  |   |

---

GRP0014-006 (01/2026)

paragon

PARAGON BANKING GROUP PLC
51 Homer Road, Solihull, West Midlands B91 3QJ
Telephone: 0345 849 4000
www.paragonbankinggroup.co.uk
Registered No. 02336032