NATIXIS - Universal registration document and financial report 2019

NON-FINANCIAL PERFORMANCE REPORT Report by one of the Statutory Auditors on the Consolidated Non-Financial Performance Report contained in the management report

Report by one of the Statutory 6.9 Auditors on the Consolidated

Non-Financial Performance Report contained in the management report

Nature and scope of the work We performed our work in accordance with Articles A. 225-1 et seq. of the French Commercial Code setting out how the independent third party should perform its review and in accordance with the professional code of the Compagnie Nationale des Commissaires aux Comptes (France’s National Association of Statutory Auditors) relating to this assignment (and pursuant to the international standard ISAE 3000 "Assurance engagements other than audits or reviews of historical financial information"). We completed the work needed to assess the Report’s compliance with regulatory requirements and the sincerity of the Information reported: We familiarized ourselves with the activity of all the companies V included in the scope of consolidation and the description of the main risks. We assessed the appropriate nature of the Standard in terms V of its relevance, completeness, reliability, objectivity, and comprehensible nature, taking best practices in the sector into consideration, where applicable. We verified that the Report includes each category of information V required under section III of Article L. 225-102-1 regarding social and environmental risks and respect for human rights, and the fight against corruption and tax evasion. We verified that the Report includes the information provided for in V section II of Article R. 225-105, where relevant in terms of the main risks, and includes, where appropriate, an explanation of the reasons for the absence of information required under paragraph 2 of section III of Article L. 225-102-1. We verified that the Report describes the company’s business V model and a description of the main risks arising from the activities of all entities included in the scope of consolidation, including, where relevant and reasonable, the risks created by its business relationships, its products and services and its policies, actions and results, including key performance indicators. We consulted documents and held interviews to: V assess the process for selecting and approving the main risks as V well as the consistency of the results, including the key performance indicators presented, in terms of the main risks and policies described; corroborate the qualitative information (action and results) we V deemed the most important (1) — for qualitative information related to certain risks (corruption and taxation), our review was performed at the level of the consolidating level, and for others at the level of the consolidating entity and on a selection of entities.

Fiscal year ended December 31, 2019 To the General Shareholders’ Meeting of Natixis S.A.,

In our capacity as Statutory Auditor of Natixis S.A., we hereby present our report on the consolidated non-financial performance report for the year ended December 31, 2019 (hereafter referred to as the “Report”), as presented in the management report, and on a voluntary basis, in accordance with the legal and regulatory provisions of Articles L. 225 102-1, R. 225-105 and R. 225-105-1 of the French Commercial Code ( Code de commerce ). Company’s responsibility The Board of Directors decided to prepare a Report in accordance with legal and regulatory requirements, including a presentation of the company’s business model, a description of its main non-financial risks, a presentation of the policies applied with regard to these risks, and the results of these policies, including key performance indicators. The Report was prepared according to the company’s procedures (hereafter referred to as “the Standard”), the material components of which are presented in the Report and available on the website or from the company’s registered office on request. Independence and quality control Our independence is defined in Article L.822-11-3 of the French Commercial Code and in our Code of Ethics. In addition, we have implemented a system of quality control including documented policies and procedures regarding compliance with the ethical requirements, French professional standards and applicable legal and regulatory requirements. Statutory Auditor’s responsibility On the basis of our work, our responsibility is to provide a reasoned opinion and to express a conclusion of limited assurance on: the compliance of the Report with the requirements of Article V R. 225-105 of the French Commercial Code; the sincerity of the information provided in accordance with V paragraph 3 of sections I and II of Article R. 225-105 of the French Commercial Code, namely the results of the policies, including the key performance indicators and the actions taken in respect of the main risks, hereafter referred to as the “Information”. However, it is not our responsibility to express an opinion on the company’s compliance with other applicable legal and regulatory provisions, particularly with regard to the duty of due diligence, anti-corruption measures and taxation, or on the compliance of products and services with the applicable regulations.

6

Selected qualitative information: the fight against tax evasion; number of ESG risk reviews; voting and engagement policy; review of the measurement of the portfolio’s carbon (1) footprint and/or climate trajectory; review of the roll-out of the Green Weighting Factor.

499

www.natixis.com

NATIXIS UNIVERSAL REGISTRATION DOCUMENT 2019