NATIXIS - 2018 Registration document and annual financial report

6 NON-FINANCIAL PERFORMANCE REPORT Report by one of the Statutory Auditors

Report by one of the Statutory Auditor 6.8 on the consolidated Non-Financial Performance Report contained in the Management Report

Nature and scope of the work We performed our work in accordance with Articles A. 225-1 et seq. of the French Commercial Code setting out how the independent third party should perform its review and in accordance with the professional code of the Compagnie Nationale des Commissaires aux Comptes (France’s National Association of Statutory Auditors) relating to this assignment, and pursuant to the international standard ISAE 3000 (Assurance engagements other than audits or reviews of historical financial information). We completed the work needed to assess the Report’s compliance with regulatory requirements and the sincerity of the Information reported: We familiarized ourselves with all the companies included in a the scope of consolidation, the description of the main social and environmental risks relating to these activities and their impact in terms of respect for human rights, and the fight against corruption and tax evasion, as well as the corresponding policies and their effect; We assessed the appropriate nature of the Standard in terms a of its relevance, completeness, reliability, objectivity, and comprehensible nature, taking best practices in the sector into consideration, where applicable; We verified that the Report includes each category of a information required under section III of Article L. 225 102 1 regarding social and environmental risks and respect for human rights, and the fight against corruption and tax evasion; We verified that the Report includes an explanation of reason a justifying the absence of information required under paragraph 2 of section III of Article L. 22-102-1; We verified that the Report describes the company’s business a model and the main risks arising from the activities of all entities included in the scope of consolidation, including, where relevant and reasonable, the risks created by its business relationships, its products and services and its policies, actions and results, including key performance indicators; Where relevant in terms of the main risks or policies a presented, we verified that the Report includes the information required in section II of Article R. 225-105; We assessed the process for selecting and approving the main a risks; We investigated the existence of internal control and risk a management procedures in the company; We reviewed the consistency of the results and key a performance indicators presented in terms of the main risks and policies described;

Fiscal year ended December 31, 2018 To the General Shareholders' Meeting of Natixis S.A., In our capacity as Statutory Auditor of Natixis SA, we hereby present our report on the consolidated Non Financial Performance Report for the year ended December 31, 2018 (hereafter referred to as the “Report”), as presented in the Management Report, on a voluntary basis, pursuant to the legal and regulatory provisions of Articles L. 225 102-1, R. 225-105 and R. 225-105-1 of the French Commercial Code. Company’s responsibility The Board of Directors decided to prepare a Report in accordance with legal and regulatory requirements, including a presentation of the company’s business model, a description of its main non-financial risks, a presentation of the policies applied with regard to these risks and the results of these policies, including key performance indicators. The Report was prepared according to the company’s procedures (hereafter referred to as “the Standard”), the material components of which are presented in the Report and available on the website or from the company’s registered office on request. Independence and quality control Our independence is defined in Article L.822-11-3 of the French Commercial Code and in our Code of Ethics. In addition, we have implemented a system of quality control including documented policies and procedures regarding compliance with the ethical requirements, French professional standards and applicable legal and regulatory requirements. Statutory Auditor’s responsibility On the basis of our work, our responsibility is to provide a reasoned opinion and to express a conclusion of limited assurance on: the compliance of the Report with the requirements of Article a R. 225-105 of the French Commercial Code; the sincerity of the information provided in accordance with a paragraph 3 of sections I and II of Article R. 225-105 of the French Commercial Code, namely the results of the policies, including the key performance indicators and the actions taken in respect of the main risks, hereafter referred to as the “Information”. It is not our responsibility, however, to assess: the company’s observance of other applicable legal and a regulatory provisions, notably in terms of its corporate duty of vigilance, the fight against corruption, or tax evasion; the compliance of its products and services with the applicable a regulations.

508

Natixis Registration Document 2018