Code GRI Disclosure Reference/Location GRI 414: Supplier Social Assessments 2016 414-1 New suppliers that were screened using social criteria 2021–2022 ESG Report: Responsible Sourcing Throughout the Global Supply Chain on page 86, American Express Commitment to Supplier Diversity, Equity, and Inclusion Website GRI 415: Public Policy (2016) 415-1 Political Contributions American Express Company Political Contributions Report GRI 418: Customer Privacy (2016) 418-1 Substantiated complaints concerning breaches of customer privacy and losses of customer data American Express does not report a metric on the bases specified in the standard. Learn more about our customer privacy practices in our 2021–2022 ESG Report: • Protecting Our Customers on page 67 • Data Protection and Privacy on page 84 Financial Services Sector Supplement (2008) FS2 Procedures for assessing and screening environmental and social risks in business lines 2021-2022 ESG Report: Our ESG Governance and Operating Responsibly: Risk Management on page 85 FS6 Percentage of the portfolio for business lines by specific region, size, and by sector Form 10-K Item 1 FS8 Monetary value of products and services designed to deliver a specific environmental benefit for each business line broken down by purpose 2021–2022 ESG Report: • Advancing Climate Solutions: Backing Our Customers and Partners on pages 50-52 • Responsible Lending on page 88 • Investing Activities on pages 88 FS14 Initiatives to improve access to financial services for disadvantaged people 2021–2022 ESG Report: Building Financial Confidence on pages 56-75 FS16 Initiatives to enhance financial literacy by type of beneficiary 2021–2022 ESG Report: Building Financial Confidence on pages 56-75 INTRODUCTION PROMOTING DE&I ADVANCING CLIMATE SOLUTIONS BUILDING FINANCIAL CONFIDENCE OUR ESG GOVERNANCE & OPERATING RESPONSIBLY SUPPORTING DATA OUR COMMITMENT TO ESG 120