NATIXIS -2020 Universal Registration Document

6 2020 NON-FINANCIAL PERFORMANCE REPORT

Report by one of the Statutory Auditors on the consolidated non-financial performance

Report by one of the Statutory 6.10

Auditors, appointed independent third party, on the consolidated non-financial performance report

Year ended December 31, 2020 To the General Shareholders’ Meeting of Natixis S.A.,

Nature and scope of the work Our work described below was carried out in accordance with the provisions of Articles A. 225-1 et seq. of the French Commercial Code setting out how the independent third party should perform its review and in accordance with the professional code of the Compagnie Nationale des Commissaires aux Comptes (France's National Association of Statutory Auditors) relating to this assignment (and pursuant to international standard ISAE 3000 "Assurance engagements other than audits or reviews of historical financial information"). We completed the work needed to assess the Report’s compliance with regulatory requirements and the sincerity of the Information reported: we familiarized ourselves with the activity of all the companies V included in the scope of consolidation and the description of the main risks; we assessed the appropriatenature of the Standard in terms of its V relevance, completeness,reliability, objectivity, and comprehensible nature, taking best practices in the sector into consideration,where applicable; we verified that the Report includes each category of information V required under section III of Article L.225-102-1 regarding social and environmental risks as well as paragraph 2 of Article L.22-10-36 on respect for human rights and the fight against corruption and tax evasion; we verified that the Report includes the informationprovided for in V section II of Article R.225-105, where relevant in terms of the main risks, and includes, where appropriate, an explanation of the reasons for the absence of informationrequired under paragraph2 of section III of Article L.225-102-1; we verified that the Report describes the company’s business V model and a description of the main risks arising from the activities of all entities included in the scope of consolidation, including, where relevant and reasonable, the risks created by its business relationships, its products and services and its policies, actions and results, including key performance indicators;

In our capacity as Statutory Auditor of Natixis S.A., we hereby present our report on the consolidated Non-Financial Performance Report for the year ended December 31, 2020 (hereafter referred to as the “Report”), as presented in the Universal RegistrationDocument which includes the Group'smanagementreport, on a voluntarybasis, in accordance with the legal and regulatory provisions of Articles L.225 102-1, R.225-105 and R.225-105-1 of the French Commercial The Board of Directors decided to prepare a Report in accordance with legal and regulatoryrequirements,includinga presentationof the company’s business model, a description of its main non-financial risks, a presentationof the policies appliedwith regard to these risks, and the results of these policies, including key performance indicators. The Report was prepared according to the company’s procedures (hereafter referred to as “the Standard”), the material components of which are presented in the Report and available on the website or from the company’s registered office on request. Independence and quality control Our independenceis defined in the provisionsof Article L.822-11-3of the French Commercial Code and in our Code of Ethics. In addition, we have implemented a system of quality control including documented policies and procedures regarding compliancewith the ethical requirements, French professional standards and applicable legal and regulatory requirements. Statutory Auditor’s responsibility On the basis of our work, our responsibility is to provide a reasoned opinion and to express a conclusion of limited assurance on: the compliance of the Report with the requirements of Article V R.225-105 of the French Commercial Code; the sincerity of the information provided in accordance with V paragraph 3 of sections I and II of Article R.225-105 of the French Commercial Code, namely the results of the policies, including the key performance indicators and the actions taken in respect of the main risks, hereafter referred to as the “Information”. However, it is not our responsibility to express an opinion on the company’s compliance with other applicable legal and regulatory provisions, particularly with regard to the duty of due diligence, anti-corruption measures and taxation, or on the compliance of products and services with the applicable regulations. Code (Code de commerce) . Company’s responsibility

538

NATIXIS UNIVERSAL REGISTRATION DOCUMENT 2020