MDB

•We have a limited operating history, history at our current scale, which makes it difficult to predict our future results of operations.

We have a limited operating history, history at our current scale, which makes it difficult to predict our future results of operations.

As a result of our limited operating history, history at our current scale, our ability to forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to accurately predict future growth. Our historical revenue growth has been inconsistent and should not be considered indicative of our future performance. Further, in future periods, our revenue growth could slow or our revenue could decline for a number of reasons, including slowing adoption or usage of MongoDB or demand for our subscription offerings and related services, reduced conversion of users of our free offerings to paying customers, increasing competition, changes to technology or our intellectual property or our failure, for any reason, to continue to capitalize on growth opportunities. We have also encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described herein. If our assumptions regarding these risks and uncertainties and our future revenue growth are incorrect or change, or if we do not address these risks successfully, our operating and financial results could differ materially from our expectations and our business could suffer.

We derive and expect to continue to derive more than the majority of our revenue from MongoDB Atlas, our database-as-a-service offering, which is primarily recognized on a usage-basis. As such, market adoption and usage of MongoDB Atlas is critical to our continued success. Although MongoDB Atlas has seen rapid adoption since its commercial launch in June 2016, and though we intend to continue to direct a significant portion of our financial and operating resources to develop and grow MongoDB Atlas, including offering a free tier of MongoDB Atlas to generate developer usage and awareness, we cannot guarantee that rate of adoption will continue at the same pace or at all. Demand for MongoDB Atlas is affected by a number of factors, many of which are beyond our control, including economic downturns, continued market acceptance by developers, the availability of our Community Server offering, the continued volume, variety and velocity of data that is generated, timing of development and release of new offerings by our competitors, technological change and the rate of growth in our market. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the six nine months ended July October 31, 2025. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results and growth prospects will be materially and adversely affected. In addition, because our customers’ usage of MongoDB Atlas may vary for a number of reasons, our visibility into the timing of revenue recognition is limited. There is a risk that customers will consume our MongoDB Atlas offering more slowly than we expect, and our actual results may differ from our forecasts and our future revenue may be less predictable going forward due to, among other things, fluctuations in the rate of customer renewals and expansions and seasonality of, or fluctuations in, usage of MongoDB Atlas.

The occurrence of one or more of the foregoing and other factors may cause our results of operations to vary significantly and be materially and adversely affected. For example, fluctuations in our quarterly operating results and the price of our common stock may be particularly pronounced in the current economic environment due to the ongoing geopolitical instability resulting from the conflicts between Russia and Ukraine and Israel and Hamas, severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, instability in the banking sector, increases in inflation rates, higher interest rates and uncertainty about economic stability. In response to the concerns over inflation risk, the U.S. Federal Reserve has raised interest rates multiple times, and signaled that they will continue to adjust interest rates to stabilize and reduce current levels of inflation. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response to the pandemic and macroeconomic events, and the effectiveness of those actions. Any of these factors or any combination thereof could materially and adversely affect our business, results of operations and financial condition. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the six nine months ended July October 31, 2025. We also intend to continue to invest to grow our business and to take advantage of our market opportunity. Accordingly, historical patterns and our results of operations in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. Additionally, if our quarterly results of operations fall below the expectations of investors or securities analysts who follow our stock, the price of our common stock could decline substantially and we could face costly lawsuits, including securities class action suits. See the section titled “Legal Proceedings” included in Part II, Item 1 of this Quarterly Report on Form 10-Q.

Following the exit of the U.K. from the European Union (“E.U.”), the GDPR was transposed into U.K. law (the “U.K. GDPR”) as supplemented by the U.K. Data Protection Act 2018, which currently imposes the same obligations as the GDPR in most material respects. Failure to comply with the U.K. GDPR can result in fines up to a maximum of £17.5 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. However, the U.K. GDPR will not automatically incorporate changes made to the GDPR going forward (which would need to be specifically incorporated by the U.K. government). Moreover, the U.K. government has adopted reforms to its data privacy and cybersecurity legal framework in its Data Use and Access Act 2025, which became law on June 19, 2025 (phasing in between June 2025 and June 2026) and which will introduce significant changes from the GDPR, all of which creates a risk of divergent parallel regimes and related uncertainty, along with the potential for increased compliance costs and risks for affected businesses.

We are currently self-certified under the EU-U.S. Data Privacy Framework, however such adequacy decision is likely to face challenge at the Court of Justice of the European Union. While the EU-U.S. Data Privacy Framework does not apply to the U.K., on October 12, 2023, the U.K. government adopted an adequacy decision concluding that the United States ensures an adequate level of protection transferred from the U.K. to the United States under the U.K. Extension to the EU-U.S. Data Privacy Framework (“U.K. Data Privacy Framework”). We are currently self-certified under the U.K. Data Privacy Framework, and have also self-certified under the Swiss Data Privacy Framework. Both the U.K. and Swiss Data Privacy

Both the U.K. and Swiss Data Privacy Frameworks could also be contested or otherwise affected by any challenges to the EU-U.S. Data Privacy Framework. Certain countries outside Europe (including Russia, China and Brazil) have also passed or are considering laws requiring local data residency or otherwise impeding the transfer of personal data across borders, any of which could increase the cost and complexity of doing business. If we cannot implement a valid compliance mechanism for cross-border data transfers, we may face increased exposure to regulatory actions, substantial fines, and injunctions against processing or transferring personal data from Europe or other foreign jurisdictions. The inability to import personal data to the United States could significantly and negatively impact our business operations; limit our ability to collaborate with parties that are subject to such cross-border data transfer or localization laws; or require us to increase our personal data processing capabilities and infrastructure in foreign jurisdictions at significant expense.

We believe our success has depended, and continues to depend, on the efforts and talents of our senior management team, particularly our Chief Executive Officer, and our highly skilled team members, including our sales personnel, customer-facing technical personnel personnel, software engineers and software engineers. AI-researchers or AI-skilled personnel.

Our ability to successfully pursue our growth strategy and compete effectively also depends on our ability to attract, motivate and retain our personnel. Competition for well-qualified employees in all aspects of our business, including sales personnel, customer-facing technical personnel personnel, software engineers and software engineers, AI-researchers or AI-skilled personnel, is intense, and it may be even more challenging to retain qualified personnel as many companies have moved to offer a remote or hybrid work environment. Our recruiting efforts focus on elite organizations and our primary recruiting competition are well-known, high-paying technology companies. In response to competition, rising inflation rates and labor shortages, we may need to adjust employee compensation, which could affect our operating costs and margins, as well as potentially cause dilution to existing stockholders. We may also lose new employees to our competitors or other technology companies before we realize the benefit of our investment in recruiting and training them. If we do not succeed in attracting well-qualified employees or retaining and motivating existing employees, our business would be adversely affected.

As of July October 31, 2025, we have customers in over 100 countries and employees in over 25 countries. A significant natural disaster or man-made problem, such as an earthquake, fire, flood, an act of terrorism, the regional or global outbreak of a contagious disease, such as the COVID-19 pandemic, or other catastrophic event occurring in any of these locations, could adversely affect our business, results of operations and financial condition. Further, if a natural disaster or man-made problem were to affect data centers used by our cloud infrastructure service providers this could adversely affect the ability of our customers to use our products. In addition, natural disasters, regional or global outbreaks of contagious diseases and acts of terrorism could cause disruptions in our or our customers’ businesses, national economies or the world economy as a whole. Moreover, these types of events could negatively impact consumer and business spending in the impacted regions or depending upon the severity, globally, which could adversely impact our operating results. For example, the COVID-19 pandemic and/or the precautionary measures that we, our customers, and the governmental authorities adopted resulted in operational challenges, including, among other things, adapting to new work-from-home arrangements. More generally, a catastrophic event could adversely affect economies and financial markets globally and lead to an economic downturn, which could decrease technology spending and adversely affect demand for our products and services. Any prolonged economic downturn or a recession could materially harm our business and operating results and those of our customers, could result in business closures, layoffs, or furloughs of, or reductions in the number of hours worked by, our and our customer's employees, and a significant increase in unemployment in the United States and elsewhere. Such events may also lead to a reduction in the capital and operating budgets that we or our customers have available, which could harm our business, financial condition, and operating results. As we experienced during the COVID-19 pandemic, the trading prices for our and other technology companies' common stock may be highly volatile as a result of a catastrophic event, which may reduce our ability to access capital on favorable terms or at all. In the event of a major disruption caused by a natural disaster or man-made problem, we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in our development activities, lengthy interruptions in service, data breaches or other security incidents and loss of critical data, any of which could adversely affect our business, results of operations and financial condition.

Social, ethical, security and regulatory issues relating to the use of new and evolving technologies such as AI and ML, including generative AI and AI models, in our offerings, internal operations or partnerships, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. As with many innovations, AI and ML presents risks and challenges that could affect its adoption, and therefore our business. Additionally, our Our offerings based on AI and ML may expose us to additional claims, demands and proceedings by private parties and regulatory authorities and subject us to legal liability as well as brand and reputational harm.

In addition, the use of AI and ML may enhance intellectual property, cybersecurity, operational and technological risks. Examples of heightened cybersecurity threats emerging from the rise of generative AI include the use of deepfake technologies in phishing and social engineering attacks, and more sophisticated malware that can evade conventional detection tools. AI and ML also make it cheaper for attackers to create malware, phishing, code reviews, or other tools at a high volume. AI and ML may change the way our industry identifies and responds to cybersecurity threats, and businesses that are slow to adopt or fail to adopt such new technologies may face a competitive disadvantage. In addition, the The use of AI also has resulted in, and may in the future result in, security breaches or other security incidents that implicate the personal data of users of AI-powered applications. If we experience security breaches or incidents in connection with our use of AI and ML, it could adversely affect our reputation and expose us to legal liability or regulatory risk.

Moreover, any content created by us using generative AI tools may not be subject to copyright protection which may adversely affect our intellectual property rights in, or ability to commercialize or use, any such content. In the United States, a number of civil lawsuits have been initiated related to the foregoing and other concerns, the outcome of any one of which may, amongst other things, require us to limit the ways in which we use AI in our business. For example, the output produced by generative AI tools may include information subject to certain rights of publicity or privacy laws or constitute an unauthorized derivative work of the copyrighted material used in training the underlying AI model, any of which could also create a risk of liability for us, or adversely affect our business or operations. For example, our Our business, financial condition and results of operations may be adversely affected if content or recommendations that AI and ML solutions or features assist in producing are or are alleged to be deficient, insufficient, of poor quality, inaccurate, or biased, or if such content, recommendations, solutions or features or their development or deployment (including the collection, use, or other processing of data used to train or create such AI and ML solutions or features) are found to have or alleged to have infringed upon or misappropriated third-party intellectual property rights or violate applicable laws, regulations, or other actual or asserted legal obligations to which we are or may become subject.

Further, potential government regulation related to AI and ML use and ethics may also increase the burden and cost of research and development in this area, and failure to properly remediate AI and ML usage or ethics issues may cause public confidence in AI and ML to be undermined, which could slow adoption of AI and ML in our products and services. For example, the European Union’s Artificial Intelligence Act (the “EU AI Act”) entered into force on August 1, 2024, with the first set of provisions thereunder becoming effective on February 2, 2025. The EU AI Act establishes, among other things, a risk-based governance framework for regulating AI systems operating in the EU. This framework categorizes AI systems, based on the risks associated with such AI systems’ intended purposes, as creating unacceptable or high risks, with all other AI systems being considered low risk. The EU AI Act prohibits certain uses of AI systems and places numerous obligations on providers and deployers of permitted AI systems, with heightened requirements based on AI systems that are general purpose, which we currently have, or considered high risk. In addition, a patchwork of state-level AI-related legislation continues to emerge in the United States. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our operations or offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI and ML technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI and ML. These and other developments may require us to make significant changes to our use of AI and ML, including by limiting or restricting our use of AI and ML, and which may require us to make significant changes to our policies and practices, which may necessitate expenditure of significant time, expense, and other resources. practices. The cost to comply with such laws or regulations could be significant and would increase our operating expenses, which could adversely affect our business, financial condition and results of operations.

The broader adoption, use and commercialization of AI and ML technologies, and the continued rapid pace of developments in the AI and ML field, are inherently uncertain. The use of AI and ML technologies in our product offerings and internal operations may not produce the desired benefits, and may result in increased liability, reputational harm, or other adverse consequences.

We are increasingly utilizing and building AI and ML capabilities into our business, as well as incorporating AI and ML into our internal operations. We expect AI and ML solutions and features to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI and ML. If we are unable to keep up with the changing AI landscape or in developing services to meet our customers’ evolving AI needs, or if the AI landscape does not develop to the extent we or our customers expect, our business, operating results, financial condition and future prospects may be adversely impacted

In addition, we may incur significant costs and experience significant delays in developing new solutions and services or supporting or enhancing our product offerings to adapt to the changing AI and ML landscape, and we may not achieve a return on investment or capitalize on the opportunities presented by demand for AI and ML solutions. Moreover, while adoption of AI and ML is likely to continue and may accelerate, the long-term trajectory of this technological trend is uncertain. Further, market acceptance, understanding and valuation of solutions and services that incorporate AI and ML technologies is uncertain, and the perceived value of AI and ML technologies used and provided by our customers could be inaccurate. If AI and ML is not broadly adopted by enterprises to the extent we expect, or if new use cases do not arise, then our opportunity may be smaller than we expect. Such risks and challenges could undermine public confidence in AI and ML, which could slow or even halt their adoption and negatively affect our business. See “—Social, ethical, security and regulatory issues relating to the use of new and evolving technologies, such as AI and ML, in our offerings or partnerships may result in reputational harm and liability.”