이번 보고서
2026 연차보고서
10-K · 기간 말 2026. 1. 31. · 제출 2026. 3. 11.
비교 기준
2025 연차보고서
10-K · 기간 말 2025. 1. 31.
3
새 리스크 항목
16
신규 문단
43
수정 문단
18
삭제
+5%
분량 변화
AI 한국어 요약
한 줄 요약
MongoDB는 AI를 성장 동력으로 내세우면서도, AI 코딩 도구가 개발자의 데이터베이스 선택 방식을 바꿔 자사 플랫폼 수요를 줄일 수 있다는 점을 새 리스크로 명시했습니다. 아울러 AI 규제·보안, 클라우드 장기 약정, 자사주 매입 관련 리스크를 새로 추가하거나 강화했습니다.
주목할 변화
- 신규AI 개발 도구가 '개발자 선호'라는 핵심 전략을 흔들 가능성생성형·에이전트형 AI가 코딩과 인프라 구성을 자동화하면 개발자가 데이터베이스를 고르는 방식이 바뀔 수 있다고 처음 적었습니다. 그 결과 자사 플랫폼에 대한 선호가 줄 수 있다는 내용입니다. "changes in developer workflows... could affect how developers select databases"
- 신규AI 투자의 성과와 시장 규모 불확실성AI 대응에 큰 비용과 지연이 생겨도 투자수익을 얻지 못할 수 있다고 밝혔습니다. 기업의 AI 도입이 기대에 못 미치면 사업 기회 자체가 예상보다 작을 수 있다는 별도 리스크 항목도 새로 만들었습니다. 핵심 인재 범위에 AI 연구·기술 인력을 추가하고 이들을 둘러싼 경쟁도 강조했습니다. "our opportunity may be smaller than we expect"
- 강화AI 규제·법적 책임 확대EU AI Act에서 '범용 AI 시스템'을 이미 보유하고 있다고 명시했습니다. 미국 주별로 제각각인 AI 법률, 학습 데이터의 지식재산권 침해 가능성, 에이전트형 AI의 위험도 추가했습니다. 규제 때문에 AI 사용을 제한해야 할 수도 있다고 적었습니다. "general purpose, which we currently have"
- 강화보안 리스크: AI로 쉬워진 취약점 공격과 과거 피해 시인AI 덕분에 외부에서 코드 취약점을 찾기 쉬워져, 회사가 고치기 전에 악용될 수 있다는 내용이 새로 들어갔습니다. 보안 사고 뒤 불이익을 "겪을 수 있다"던 표현은 과거에 실제로 겪었다는 문구로 바뀌었습니다. "we previously have, and may in the future, experience adverse consequences"
- 신규클라우드 용량 장기 약정 부담서드파티 클라우드 업체와 맺은 해지 불가 다년 용량 약정을 처음 명시했습니다. 실제 사용량과 무관하게 비용을 내야 한다는 점이 핵심입니다. 분기 실적 변동 요인에도 퍼블릭 클라우드 용량 확대 투자가 추가됐습니다. "require us to pay for such capacity irrespective of actual usage"
- 신규자사주 매입 프로그램 리스크최대 10억 달러 규모의 자사주 매입 프로그램을 새 리스크 항목으로 넣었습니다. 매입은 의무가 아니고 언제든 중단될 수 있으며, 매입에 쓴 만큼 투자·M&A에 쓸 현금이 줄어든다고 밝혔습니다. 이와 함께 2026년 만기 전환사채 상환으로 capped call 관련 항목은 삭제됐습니다. "may be suspended at any time at our discretion"
- 강화소송·조사 비용분기 실적 변동 요인에 소송·정부 및 규제 조사 관련 합의금, 벌금, 법률 비용이 새로 추가됐습니다. 동시에 연차보고서의 '법적 절차(Legal Proceedings)' 섹션을 참조하라는 문구가 들어갔습니다. "governmental investigations or inquiries, regulatory investigations or inquiries"
- 강화무역정책·지정학 불확실성관세와 무역정책을 둘러싼 "significant uncertainty"가 수요 감소로 이어질 수 있다는 문장이 새로 들어갔습니다. 지정학 리스크 사례에는 이란, 멕시코, 베네수엘라가 추가됐습니다. 한편 '거시경제 악화로 Atlas 기존 애플리케이션의 성장이 둔화됐다'는 문장은 삭제됐습니다.
읽는 법
이번 개정의 중심은 AI입니다. 회사는 AI를 기회로 보면서도, AI 도구가 개발자 생태계라는 자사의 핵심 경쟁력을 우회할 수 있다는 구조적 위협을 공식적으로 인정했습니다. 해지 불가 클라우드 약정과 자사주 매입 항목이 새로 들어간 만큼, 앞으로 공시에서 현금 사용처와 고정비 부담이 어떻게 바뀌는지 살펴볼 필요가 있습니다. 소송·조사 관련 문구가 추가된 이유는 같은 보고서의 'Legal Proceedings' 섹션에서 함께 확인하는 것이 좋습니다.
원문 비교
- •timing, amount, and cost of our investments to expand the capacity of our public cloud providers;
- •the amount and timing of legal expenses, including settlements, judgments, fines, legal fees, and other charges associated with litigation, governmental investigations or inquiries, regulatory investigations or inquiries, or other legal proceedings;
- •the amount and timing of costs associated with hiring, training, and integrating new employees and retaining and motivating existing employees;
- •the effects and timing of acquisitions and their integration;
- •changes in regulatory or legal environments, including the interpretation or enforcement of regulatory or legal requirements, that may cause us to incur, among other things, expenses associated with compliance;
- We rely on the performance of highly skilled personnel, including senior management and our engineering, professional services, sales and technology professionals; if we are unable to retain or motivate key personnel or hire, retain and motivate qualified personnel, our business would be harmed.
- On July 4, 2025, the One Big Beautiful Bill ("OBBBA") was signed into law. The OBBBA includes a broad range of U.S. tax reform measures, including, among other provisions, the immediate expensing of U.S. research and development expenditures. In accordance with ASC 740, we have recognized the effects of the new tax law in the period of enactment. As we maintain a full valuation allowance on its U.S. deferred tax assets, the legislation does not have a material impact on its consolidated financial statements.
- The broader adoption, use and commercialization of AI and ML technologies, and the continued rapid pace of developments in the AI and ML field, are inherently uncertain. The use of AI and ML technologies in our product offerings and internal operations may not produce the desired benefits, and may result in increased reputational harm, or other adverse consequences.
- We are increasingly utilizing and building AI and ML capabilities into our business, as well as incorporating AI and ML into our internal operations. We expect AI and ML solutions and features to help drive future growth in our business, but there can be no assurance that we will realize the desired or anticipated benefits from AI and ML. If we are unable to keep up with the changing AI landscape or in developing services to meet our customers’ evolving AI needs, or if the AI landscape does not develop to the extent we or our customers expect, our business, operating results, financial condition and future prospects may be adversely impacted.
- In addition, the rapid adoption of generative and agentic AI tools may change how software developers design, build and deploy applications, including through increased automation of coding, infrastructure configuration and application architecture. Because a significant portion of our strategy is focused on being the database platform of choice for developers, changes in developer workflows, tooling or decision-making processes resulting from the adoption of AI-enabled development tools could affect how developers select databases or other data platforms. If these evolving development patterns reduce developer engagement with, or preference for, our platform or favor alternative technologies or architectures, it could adversely affect demand for our products and services.
- In addition, we may incur significant costs and experience significant delays in developing new solutions and services or supporting or enhancing our product offerings to adapt to the changing AI and ML landscape, and we may not achieve a return on investment or capitalize on the opportunities presented by demand for AI and ML solutions. Moreover, while adoption of AI and ML is likely to continue and may accelerate, the long-term trajectory of this technological trend is uncertain. Further, market acceptance, understanding and valuation of solutions and services that incorporate AI and ML technologies is uncertain, and the perceived value of AI and ML technologies used and provided by our customers could be inaccurate. If AI and ML is not broadly adopted by enterprises to the extent we expect, or if new use cases do not arise, then our opportunity may be smaller than we expect. Such risks and challenges could undermine public confidence in AI and ML, which could slow or even halt their adoption and negatively affect our business. See “—Social, ethical, security and regulatory issues relating to the use of new and evolving technologies, such as AI and ML, in our offerings or partnerships may result in reputational harm and liability.”
- There can be no assurance that we will repurchase shares of our common stock or that we will repurchase shares at favorable prices.
- We have a share repurchase program (the “Share Repurchase Program”) pursuant to which we are authorized to repurchase up to $1,000,000,000 of our common stock from time to time through open market transactions. The amount and timing of our share repurchases, if any, are subject to the availability of capital and our determination that the share repurchases are in the best interest of the Company and our stockholders. Our Share Repurchase Program does not obligate us to repurchase any specific number of shares and may be suspended at any time at our discretion.
- Our ability to make share repurchases, if any, will depend upon market conditions, cash balances and future capital requirements, results of operations, financial condition, compliance with applicable legal requirements and other factors that we may deem relevant and which may be beyond our control. In addition, we can provide no assurance that we will repurchase stock at favorable prices, if at all. As a result, there can be no guarantee around the timing of our share repurchases. Any failure to repurchase stock after we have announced our intention to do so, a reduction in the frequency of repurchases, or the completion of our Share Repurchase Program could have a negative effect on our reputation, investor confidence in us and our stock price.
- The existence of our Share Repurchase Program could cause our stock price to be higher than it otherwise would be and could potentially reduce the market liquidity for our stock. Although our Share Repurchase Program is intended to enhance long-term stockholder value, there is no assurance that it will do so because the market price of our common stock may decline below the levels at which we repurchase shares, and short-term stock price fluctuations could reduce the effectiveness of the program.
- Repurchasing our common stock will reduce the amount of cash we have available to fund working capital, repayment of debt, capital expenditures, strategic acquisitions or business opportunities, and other general corporate purposes, and we may fail to realize the anticipated long-term stockholder value of our share repurchase programs.
- •We have a limited operating
history,history at our current scale, which makes it difficult to predict our future results of operations. - Our overall performance depends in part on worldwide economic conditions and our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. The revenue growth and potential profitability of our business depend on demand for database software and services generally and for our subscription offering and related services in particular. Current or future economic uncertainties or downturns could materially and adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, labor shortages, supply chain disruptions, inflationary pressures, rising interest rates, financial and credit market fluctuations, changes in trade policies, such as trade wars, tariffs or other trade restrictions or the threat of such actions, international trade
relations and/or the imposition of trade tariffs,relations, political turmoil, natural catastrophes, regional or global outbreaks of contagious diseases, such as the COVID-19 pandemic, volatility in the banking sector, warfare and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, such as the conflict in the Middle East, could cause a decrease in business investments, including spending on information technology, disrupt the timing and cadence of key industry and marketing events and otherwise could materially and adversely affect the growth of our business and results of operations. Geopolitical risks, including those arising from trade tension and/or the imposition of trade tariffs, terrorist activity or acts of civil or international hostility, are increasing. In particular, there is currently significant uncertainty about trade policies, treaties, tariffs and taxes, which may lead to continuing volatility in U.S. and global financial and economic conditions and commodity markets, declining consumer confidence, significant inflation and diminished expectations for the economy, and which may ultimately lead to reduced usage or demand for our products. Similarly, the ongoing military conflict between Russia and Ukraine has had negative impacts on the global economy, including by contributing to rapidly rising costs of living (driven largely by higher energy prices) in Europe and creating uncertainty in the global capital markets and is expected to have further global economic consequences, including disruptions of the global supply chain and energy markets. The geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel and Hamas and recent events in Venezuela, and any resulting conflicts in the respective regions, may have similar negative impacts. Further, other events outside of our control, including natural disasters, climate change-related events, pandemics (such as the COVID-19 pandemic) or health crises may arise from time to time and be accompanied by governmental actions that may increase international tension. Any such events and responses, including regulatory developments, may cause significant volatility and declines in the global markets, disproportionate impacts to certain industries or sectors, disruptions to commerce (including to economic activity, travel and supply chains), loss of life and property damage, and may materially and adversely affect the global economy or capital markets, as well as our business and results of operations. - Additionally, the global economy, including credit and financial markets, has experienced extreme volatility and disruptions and may continue to experience such disruptions in the future, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability. As a result of these factors, our revenues may be affected by both decreased customer acquisition and lower than anticipated revenue growth from existing customers. For example, the COVID-19 pandemic resulted in widespread unemployment, economic slowdown and extreme volatility. Similarly, the ongoing military conflict between Russia and Ukraine has created extreme volatility in the global capital markets and has caused and could continue to cause disruptions of the global supply chain and energy markets. The
ongoing militarygeopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel andHamas,Hamas and recent events in Venezuela, and any resulting conflicts in theregion,respective regions, has caused and may continue to cause similar negative impacts. Any such volatility and disruptions may have material and adverse consequences on us, the third parties on whom we rely or our customers. Increased inflation and/or interest rates can adversely affect us by increasing our costs, including labor and employee benefit costs. Any significant increases in inflation and related increase in interest rates could have a material and adverse effect on our business, financial condition or results of operations. - We have a limited operating
history,history at our current scale, which makes it difficult to predict our future results of operations. - As a result of our limited operating
history,history at our current scale, our ability to forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to accurately predict future growth. Our historical revenue growth has been inconsistent and should not be considered indicative of our future performance. Further, in future periods, our revenue growth could slow or our revenue could decline for a number of reasons, including slowing adoption or usage of MongoDB or demand for our subscription offerings and related services, reduced conversion of users of our free offerings to paying customers, increasing competition, changes to technology or our intellectual property or our failure, for any reason, to continue to capitalize on growth opportunities. We have also encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described herein. If our assumptions regarding these risks and uncertainties and our future revenue growth are incorrect or change, or if we do not address these risks successfully, our operating and financial results could differ materially from our expectations and our business could suffer. - We have incurred net losses in each period since our inception, including net losses of
$129.1 million, $176.6$71.2 million,$129.1 million and$345.4$176.6 million for the fiscal years ended January 31,2025, 20242026, 2025 and2023,2024, respectively. We had an accumulated deficit of$1.8$1.9 billion as of January 31,2025.2026. We expect our operating expenses to increase significantly as we increase our sales and marketing efforts, continue to invest in research and development and expand our operations and infrastructure, both domestically and internationally. In particular, we have entered into non-cancelable multi-year capacity commitments with respect to cloud infrastructure services with certain third-party cloud providers, which require us to pay for such capacity irrespective of actual usage. In addition, we have incurred and expect to continue to incur significant additional legal, accounting and other expenses related to being a public company. While our revenue has grown in recent years, if our revenue declines or fails to grow at a rate faster than these increases in our operating expenses, we will not be able to achieve and maintain profitability in future periods. As a result, we expect to continue to generate losses. We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain profitability. - We derive and expect to continue to derive more than the majority of our revenue from
MongoDBAtlas, our database-as-a-service offering, which is primarily recognized on a usage-basis. As such, market adoption and usage ofMongoDBAtlas is critical to our continued success. AlthoughMongoDBAtlas has seen rapid adoption since its commercial launch in June 2016, and though we intend to continue to direct a significant portion of our financial and operating resources to develop and growMongoDBAtlas, including offering a free tier ofMongoDBAtlas to generate developer usage and awareness, we cannot guarantee that rate of adoption will continue at the same pace or at all. Demand forMongoDBAtlas is affected by a number of factors, many of which are beyond our control, including economic downturns, continued market acceptance by developers, the availability of our Community Server offering, the continued volume, variety and velocity of data that is generated, timing of development and release of new offerings by our competitors, technological change and the rate of growth in our market. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results and growth prospects will be materially and adversely affected. In addition, because our customers’ usage ofMongoDBAtlas may vary for a number of reasons, our visibility into the timing of revenue recognition is limited. There is a risk that customers will consume ourMongoDBAtlas offering more slowly than we expect, and our actual results may differ from our forecasts and our future revenue may be less predictable going forward due to, among other things, fluctuations in the rate of customer renewals and expansions and seasonality of, or fluctuations in, usage ofMongoDBAtlas. - Our subscription offerings are term-based and a majority of our subscription contracts
wereare one year induration in fiscal year 2024.duration. In order for us to maintain or improve our results of operations, it is important that our customers renew their subscriptions with us when the existing subscription term expires and renew on the same or more favorable quantity and terms. Our customers have no obligation to renew their subscriptions and we may not be able to accurately predict customer renewal rates. In addition, the growth of our business depends in part on our customers expanding their use of subscription offerings and related services, including increasing their usage and workloads with us. Historically, some of our customers have elected not to renew their subscriptions with us or have not expanded their usage of our services over time for a variety of reasons, including as a result of changes in their strategic IT priorities, budgets, costs and, in some instances, due to competing solutions. Our retention rate and our net ARR expansion rate may also decline or fluctuate as a result of a number of other factors, including our customers’ satisfaction or dissatisfaction with our software, the increase in the contract value of subscription and support contracts from new customers, the effectiveness of our customer support services, our pricing, the prices of competing products or services, mergers and acquisitions affecting our customer base, global economic conditions and the other risk factors described herein. As a result, we cannot assure you that customers will renew subscriptions or increase their usage of our software and related services. If our customers do not renew their subscriptions or renew on less favorable terms, or if we are unable to expand our customers’ usage of our software, our business, results of operations and financial condition could be materially and adversely affected. - On October 16, 2018, we announced that we were changing the license for Community Server from the AGPL to a new software license, the SSPL. The SSPL builds on the spirit of the AGPL, but includes an explicit condition that any organization attempting to exploit MongoDB as a service must open source the software that it uses to offer such service. Since the SSPL is a new license and has not been interpreted by any court, developers and the companies they work for may be hesitant to adopt Community Server because of uncertainty around the provisions of the SSPL and how it will be interpreted and enforced. In addition, the SSPL has not been approved by the Open Source Initiative, nor has it been included in the Free Software Foundation’s list of free software licenses. This may negatively impact the adoption of Community Server, which in turn could lead to reduced brand and product awareness, ultimately leading to a decline in paying customers and our ability to grow our business or achieve profitability may be harmed.
- Our ability to attract new customers and increase revenue from existing customers depends in part on our ability to enhance and improve our software and to introduce new features and services. To grow our business and remain competitive, we must continue to enhance our software and develop features that reflect the constantly evolving nature of technology and our customers’ needs. For instance, with the development of next-generation solutions that utilize new and advanced features, including artificial intelligence (“AI”) and machine
learning,learning (“ML”), we may be required to commit significant resources to developing new products, enhancements and developments. The success of new products, enhancements and developments depends on several factors: our anticipation of market changes and demands for product features, including timely product introduction and conclusion, sufficient customer demand, cost effectiveness in our product development efforts and the proliferation of new technologies that are able to deliver competitive products and services at lower prices, more efficiently, more conveniently or more securely. In addition, because our software is designed to operate with a variety of systems, applications, data and devices, we will need to continuously modify and enhance our software to keep pace with changes in such systems. We may not be successful in developing these modifications and enhancements. Furthermore, the addition of features and solutions to our software will increase our research and development expenses. Any new features that we develop may not be introduced in a timely or cost-effective manner or may not achieve the market acceptance necessary to generate sufficient revenue to justify the related expenses. It is difficult to predict customer adoption of new features. Such uncertainty limits our ability to forecast our future results of operations and subjects us to a number of challenges, including our ability to plan for and model future growth. If we cannot address such uncertainties and successfully develop new features, enhance our software or otherwise overcome technological challenges and competing technologies, our business and results of operations could be adversely affected. - •general economic conditions, both domestically and internationally, including warfare and terrorist attacks on the United States and other regions in which we or our customers operate, such as the conflict in Iran, the unrest in Mexico, the Russia-Ukraine conflict, the Israel-Hamas conflict and
the Israel-Hamas conflict,recent events in Venezuela, as well as economic conditions specifically affecting industries in which our customers participate; - The occurrence of one or more of the foregoing and other factors may cause our results of operations to vary significantly and be materially and adversely affected. For example, fluctuations in our quarterly operating results and the price of our common stock may be particularly pronounced in the current economic environment due to the ongoing geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflicts between Russia and
Ukraine andUkraine, Israel andHamas, severely diminished liquidityHamas andcredit availability,recent events in Venezuela, continued restrictive monetary policy in certain markets in which we operate, declines in consumer confidence, declines in economic growth,increases in unemployment rates, instability in the banking sector, increases inpersistent inflationrates, higher interest ratesand uncertainty about economic stability. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response tothe pandemic andmacroeconomic events, and the effectiveness of those actions. Any of these factors or any combination thereof could materially and adversely affect our business, results of operations and financial condition. We also intend to continue to invest to grow our business and to take advantage of our market opportunity. Accordingly, historical patterns and our results of operations in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. Additionally, if our quarterly results of operations fall below the expectations of investors or securities analysts who follow our stock, the price of our common stock could decline substantially and we could face costly lawsuits, including securities class action suits. See the section titled “Legal Proceedings” included in Part I, Item 3 of this Annual Report on Form 10-K. - We have experienced rapid growth in our business, operations and employee headcount. For fiscal years
2025, 20242026, 2025 and2023,2024, our total revenue was $2,463.8 million, $2,006.4million, $1,683.0million and$1,284.0$1,683.0 million, respectively, representing a19%23%, 19%, and 31% growth rate, respectively. We have also significantly increased the size of our customer base from over 3,200 customers as of January 31, 2017 to over54,50065,200 customers as of January 31,2025,2026, and we grew from 713 employees as of January 31, 2017 to5,5585,636 employees as of January 31,2025.2026. Our success will depend in part on our ability to continue to grow and to manage this growth, domestically and internationally, effectively. - Ransomware attacks, including by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems (including our products) or the third-party information technology systems that support us and our services. Our software may also contain security flaws or vulnerabilities that expose us and our customers to an increased risk of cyberattack or exploitation.
- The COVID-19 pandemic increased our remote workforce, which increased risks to our information technology systems and data, as more of our employees work from home, utilizing network connections, computers and devices outside our premises or network, including while at home, in transit and in public locations. Additionally, cybersecurity risks may be heightened as a result of the ongoing global conflicts such as the military conflict between Russia and Ukraine and the related sanctions imposed by the United States and other countries or the
ongoing militarygeopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel andHamas.Hamas and recent events in Venezuela. Furthermore, future or past business transactions (such as acquisitions or integrations) could expose us to additional data security risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Risks related to data security will increase as we continue to grow the scale and functionality of our business and collect, store, transmit and otherwise process increasingly large amounts of our and our customers’ information and data, which may include personal, proprietary, confidential or other sensitive data. - While we have implemented security measures designed to protect against security breaches and other security incidents, there can be no assurance that these measures will be effective. We have not always been able in the past and may be unable in the future to detect vulnerabilities in our information technology systems and networks (including our products) because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security breach or other security incident has occurred.
WeFor example, industry publications have reported ransomware attacks on MongoDB instances, some of which we believethese attackswere successful due to the failure by users of our Community Server offering to properly turn on the recommended security settings when running these instances. Despite our efforts to identify and remediate vulnerabilities, if any, in our information technology systems and networks (including our products), our efforts may not be successful. As new technology, particularly AI, makes it easier to detect and understand vulnerabilities in our code, it may become easier for third parties to exploit such vulnerabilities before we can remediate them, which may require us to dedicate greater time and resources to vulnerability detection and remediation than in the past. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities. - If we (or a third party upon whom we rely) experience or are perceived to have experienced a security breach or other security incident, or fail to make adequate or timely disclosures to the public, regulators, law enforcement agencies or affected individuals, as applicable, following any such event, we previously have, and may in the future, experience adverse consequences. These consequences may include: liability under applicable data privacy and security laws, regulations, rules, standards, contractual obligations, policies and other obligations; obligations to notify regulators and affected individuals; government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing personal and other sensitive information; litigation (including class claims); indemnification and other contractual obligations; damages; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security breaches and other security incidents and attendant consequences may cause customers to stop using our platform, products, and services, deter new customers from using our platform, products, and services, and negatively impact our ability to grow and operate our business.
- Furthermore, from time to time, U.S. presidential administrations have issued, and may in the future issue, Executive Orders related to cybersecurity practices that may affect our
business.business.For example, while the Biden administration’s Executive Order 14208 (2021) established a framework for federal cybersecurity, the current administration has shifted toward a more decentralized, risk-based approach. In June 2025, the Trump administration issued Executive Order 14306, which amended prior orders and increased private-sector flexibility. The transition to this decentralized model may lead to inconsistent or fragmented cybersecurity requirements across various federal agencies, complicating our compliance efforts, - Following the exit of the U.K. from the European Union (“E.U.”), the GDPR was transposed into U.K. law (the “U.K. GDPR”) as supplemented by the U.K. Data Protection Act 2018, which currently imposes the same obligations as the GDPR in most material respects. Failure to comply with the U.K. GDPR can result in fines up to a maximum of £17.5 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. However, the U.K. GDPR will not automatically incorporate changes made to the GDPR going forward (which would need to be specifically incorporated by the U.K. government). Moreover, the U.K. government has adopted reforms to its data privacy and cybersecurity legal framework in its Data (Use and Access) Act 2025, which became law on June 19, 2025 (phasing in between June 2025 and June 2026) and which will introduce significant changes from the GDPR, all of which creates a risk of divergent parallel regimes and related uncertainty, along with the potential for increased compliance costs and risks for affected businesses.
- The European Commission also revised its Cybersecurity Directive (“NIS2”), which came into force in January 2023 and applies extraterritorially similar to the GDPR. Among other things, NIS2 requires companies providing essential and digital services across key sectors in the EU economy, including cloud services providers, to adopt or update policies and procedures on issues such as incident handling and supply chain security. However, EU Member States have flexibility in identifying the types of entities considered “essential,” and many EU Member States have not yet fully transposed NIS2 into national law, creating ongoing uncertainty around how NIS2 will impact our business. Moreover, in January 2026, the European Commission proposed amendments to NIS2, which are still being finalized. In addition, the EU’s Digital Operational Resiliency Act (“DORA”) for the financial sector took effect in January 2025. DORA standardizes how financial entities report cybersecurity incidents, test their digital operational resilience, and manage ICT third-party risk across the financial services sector and EU member states. We have taken steps to ensure our contracts with EU financial sector customers are DORA-compliant, however we cannot assure you that such steps are complete or effective.
- Some foreign data privacy and security laws, including, without limitation, the GDPR, the U.K. GDPR, and the Swiss Federal Act on Data Protection may restrict the cross-border transfer of personal data, such as transfers of data to the United States from the E.E.A., Switzerland or U.K. These laws may require data exporters and data importers - as a condition of cross-border data transfers - to implement specific safeguards to protect the transferred personal data. Existing mechanisms that facilitate cross-border personal data transfers may change or be invalidated. For example, the GDPR generally restricts the transfer of personal data to countries outside of the E.E.A. that the European Commission does not consider to provide an adequate level of data privacy and security, such as the United States, unless the parties to the transfer have implemented specific safeguards to protect the transferred personal data, such as, most commonly, the “Standard Contractual Clauses” (“SCCs”) released by the European Commission. Use of the SCCs imposes additional compliance burdens, such as conducting transfer impact assessments to determine whether additional security measures are necessary to protect the at-issue personal data. Although the U.K. currently has an adequacy decision from the European Commission, such that SCCs are not required for the transfer of personal data from the E.E.A. to the U.K., that decision will sunset in
June 2025 unless extendedDecember 2031 and it may be revoked in the future by the European Commission if the U.K. data protection regime is reformed in ways that deviate substantially from the GDPR. Adding further complexity for international data transfers, in March 2022, the U.K. Adding further complexity for international data transfers, in March 2022, the U.K.adopted its own International Data Transfer Agreement for transfers of personal data out of the U.K. to so-called third countries, as well as an international data transfer addendum that can be used with the SCCs for the same purpose. Moreover, on July 10, 2023 the European Commission adopted an adequacy decision concluding that the United States ensures an adequate level of protection for personal data transferred from the E.U. to the U.S. under the EU-U.S. Data Privacy Framework.- In addition to the GDPR, other European legislative proposals and present laws and regulations apply to cookies and similar tracking technologies, electronic communications, and marketing. In the E.E.A. and the U.K., regulators are increasingly focusing on compliance with requirements related to the online behavioral advertising ecosystem. Although the European Commission officially withdrew the long-stalled ePrivacy Regulation in February 2025, they immediately replaced that effort with a new reform package in late 2025 called the “Digital Omnibus”. Compliance with these laws and regulations may require us to make significant operational changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to liabilities.
- We believe our success has depended, and continues to depend, on the efforts and talents of our senior management team, particularly our Chief Executive Officer, and our highly skilled team members, including our sales personnel, customer-facing technical
personnelpersonnel, software engineers, andsoftware engineers.AI-researchers or AI-skilled personnel. - Our ability to successfully pursue our growth strategy and compete effectively also depends on our ability to attract, motivate and retain our personnel. Competition for well-qualified employees in all aspects of our business, including sales personnel, customer-facing technical
personnel andpersonnel, software engineers, and AI-researchers or AI-skilled personnel, is intense, and it may be even more challenging to retain qualified personnel as many companies have moved to offer a remote or hybrid work environment. Our recruiting efforts focus on elite organizations and our primary recruiting competition are well-known, high-paying technology companies. In response to competition, rising inflation rates and labor shortages, we may need to adjust employee compensation, which could affect our operating costs and margins, as well as potentially cause dilution to existing stockholders. We may also lose new employees to our competitors or other technology companies before we realize the benefit of our investment in recruiting and training them. If we do not succeed in attracting well-qualified employees or retaining and motivating existing employees, our business would be adversely affected. - We believe that our culture has been and will continue to be a key contributor to our success. Our workforce has increased significantly
from January 31,since our initial public offering in 2017 and we expect to continue to hire as we expand, especially among research and development and sales and marketing personnel. Such headcount growth may result in a change to our corporate culture. - •political instability, including any escalation in the geopolitical tensions between China and Taiwan, social unrest, terrorist activities, acts of civil or international hostility, such as the
current militaryconflict in Iran, the unrest in Mexico, the Russia-Ukraine conflict, the Israel-Hamas conflict andescalating tensions between Russia and Ukraine,recent events in Venezuela, natural disasters or regional or global outbreaks of contagious diseases, such as the COVID-19 pandemic; - The United States or foreign governments may take administrative, legislative or regulatory action that could materially interfere with our ability to sell our offerings in certain countries. For instance, there is currently significant uncertainty about the future relationship between the United States and China with respect to trade policies, treaties, tariffs and taxes. If tariffs or other trade barriers are placed on offerings such as ours, this could have a direct or indirect adverse effect on our business. Even in the absence of tariffs or other trade barriers, the related uncertainty and the market's fears relating to international trade
mightmay lead to continuing volatility in U.S. and global financial and economic conditions and commodity markets, declining consumer confidence, significant inflation and diminished expectations for the economy, and may ultimately result in lower demand for our offerings, which could adversely affect our business, financial condition and results of operations. - Potential tax reform globally and in the United States may result in significant changes to U.S. federal income tax law, including changes to the U.S. federal income taxation of corporations (including ours) and/or changes to the U.S. federal income taxation of stockholders in U.S. corporations, including investors in our common stock. For example, the U.S. Tax Cuts and Jobs Act of 2017 (the “Act”) was enacted on December 22, 2017 and significantly revised the U.S. corporate income tax law. Additional significant changes to U.S. federal corporate tax law were made by the Coronavirus Aid, Relief, and Economic Security Act, and the
recently enactedInflation Reduction Act (“IRA”). The Company has determined that it is not currently subject to the tax effects of the IRA, which includes a corporate alternative minimum tax and an excise tax on stock buybacks. In addition, many jurisdictions have enacted legislation and adopted policies resulting from the Organization for Economic Cooperation and Development’s (“OECD”) Anti-Base Erosion and Profit Shifting Pillar Two Model Rules (“Pillar Two”). Rules adopted in response to the initiative establish a global per-country minimum tax of 15%. Many countries have enacted legislation, or have indicated their intent to adopt legislation, to implement these rules. The OECD and implementing countries are expected to continue to make further revisions to their legislation and release additional guidance. Pillar Two became effective for the Company in the first quarter of its fiscal year ending January 31, 2025. While the Company does not anticipate that Pillar Two will have a material impact on its tax provision or effective tax rate in the short-term, the Company continues to monitor evolving tax legislation in the jurisdictions in which it operates. - In addition, there is an increasing focus from regulators, certain investors, customers and other stakeholders concerning ESG matters, both in the United States and internationally. Some investors may use these non-financial performance factors to guide their investment strategies and, in some cases, may choose not to invest in us if they believe our ESG-related policies and actions are inadequate. The growing investor demand for measurement of non-financial performance is addressed by third-party providers of sustainability assessment and ESG ratings on companies. The criteria by which our ESG practices are assessed may change due to the constant evolution of the sustainability landscape, which could result in greater expectations of us and cause us to undertake costly initiatives to satisfy such new criteria. If we elect not to or are unable to satisfy such new criteria, investors and other stakeholders may conclude that our ESG-related policies and/or actions with respect to corporate social responsibility are inadequate. There have also been increasing allegations of greenwashing against companies making significant ESG claims due to a variety of perceived deficiencies in performance. As stakeholder perceptions of sustainability continue to evolve, we may face reputational damage and potential stakeholder engagement and/or litigation in the event that we do not meet the ESG standards set by various constituencies. In addition, there exists certain “anti-ESG” sentiment among some individuals and government institutions, and we may also face scrutiny, reputational risk, lawsuits, or market access restrictions from these parties regarding our ESG initiatives.
- Social, ethical, security and regulatory issues relating to the use of new and evolving technologies, such as
AI,AI and ML, in our offerings or partnerships may result in reputational harm and liability. - Social, ethical, security and regulatory issues relating to the use of new and evolving technologies such as
AI,AI and ML, including generativeAI,AI and AI models, in ourofferingsofferings, internal operations or partnerships, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. The use of generative and agentic AI, relatively new and emerging technologies in the early stages of commercial use, exposes us to additional risks, such as damage to our reputation, competitive position, and business, legal and regulatory risks and additional costs. For example, generative AI has been known to produce false or “hallucinatory” inferences or output, and certain generative AI uses machine learning and predictive analytics, which can create inaccurate, incomplete, or misleading content, unintended biases, and other discriminatory or unexpected results, errors or inadequacies, any of which may not be easily detectable by us or any of our related service providers. As with many innovations, AI and ML presents risks and challenges that could affect its adoption, and therefore our business. Our offerings based on AI and ML may expose us to additional claims, demands and proceedings by private parties and regulatory authorities and subject us to legal liability as well as brand and reputational harm. - If we enable or offer solutions that draw controversy due to their perceived or actual impact on society or if the content, analyses or recommendations that
AI-poweredAI and ML-powered solutions assist in producing in our products and services are, or are perceived to be, deficient, insufficient, inaccurate, biased, unethical or otherwise flawed, we may experience brand or reputational harm, competitive harm or legal liability. Potential government regulation related to AI and ML use and ethics may also increase the burden and cost of research and development in this area, and failure to properly remediate AI and ML usage or ethics issues may cause public confidence in AI and ML to be undermined. The rapid evolution of AI and ML will require the application of resources to develop, test and maintain any potential offerings or partnerships to help ensure that AIisand ML are implemented ethically in order to minimize unintended, harmful impact. - In addition, the use of AI and ML may enhance intellectual property, cybersecurity, operational and technological risks. Examples of heightened cybersecurity threats emerging from the rise of generative AI include the use of deepfake technologies in phishing and social engineering attacks, and more sophisticated malware that can evade conventional detection tools. AI and ML also
makesmake it cheaper for attackers to create malware, phishing, code reviews, or other tools at a high volume. AI andmachine learningML may change the way our industry identifies and responds to cybersecurity threats, and businesses that are slow to adopt or fail to adopt such new technologies may face a competitive disadvantage.In addition, theThe use of AI also has resulted in, and may in the future result in, security breaches or other security incidents that implicate the personal data of users of AI-powered applications. If we experience security breaches or incidents in connection with our use ofAI,AI and ML, it could adversely affect our reputation and expose us to legal liability or regulatory risk. - As the regulatory framework for
AIAI, ML and related technologies evolves, it is possible that new laws and regulations will be adopted, or that existing laws and regulations, including intellectual property, privacy, data protection and cybersecurity, consumer protection, competition and equal opportunity laws and regulations, may be interpreted in ways that would affect our business and the ways in which we or our partners useAIAI, ML or related technologies, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. - For example, if we or our third-party AI providers do not have sufficient rights to use the data or other material or content on which AI tools rely, or the output generated by our use of such AI tools, we may incur liability through the violation of such laws, third-party intellectual property, privacy or other rights, or contracts to which we are a party. Moreover, use of generative AI in our code development process, while offering various potential benefits, could also pose certain ownership and security risks with respect to our codebase, given the current legal uncertainties relating to ownership of
AI-generatedAI- or ML-generated works and the potential for security flaws in output code. If any of our employees, contractors, vendors or service providers use any third-partyAI- poweredAI-powered software in connection with our business or the services they provide to us, it may lead to the inadvertent disclosure of our confidential information, including inadvertent disclosure of our confidential information into publicly available third-party training sets, which may impact our ability to realize the benefit of, or adequately maintain, protect and enforce our intellectual property or confidential information, harming our competitive position and business. Our ability to mitigate risks associated with disclosure of our confidential information, including in connection withAI-poweredAI and ML-powered software, will depend on our implementation, maintenance, monitoring and enforcement of appropriate technical and administrative safeguards, policies and procedures governing the use of AI and ML in our business. - Moreover, any content created by us using generative AI tools may not be subject to copyright protection which may adversely affect our intellectual property rights in, or ability to commercialize or use, any such content. In the United States, a number of civil lawsuits have been initiated related to the foregoing and other concerns, the outcome of any one of which may, amongst other things, require us to limit the ways in which we use AI in our business. For example, the output produced by generative AI tools may include information subject to certain rights of publicity or privacy laws or constitute an unauthorized derivative work of the copyrighted material used in training the underlying AI model, any of which could also create a risk of liability for us, or adversely affect our business or operations. Our business, financial condition and results of operations may be adversely affected if content, recommendations, solutions or features or their development or deployment (including the collection, use, or other processing of data used to train or create such AI and ML solutions or features) are found to have or alleged to have infringed upon or misappropriated third-party intellectual property rights or violate applicable laws, regulations, or other actual or asserted legal obligations to which we are or may become subject.
- Further, potential government regulation related to AI and ML use and ethics may also increase the burden and cost of research and development in this area, and failure to properly remediate AI and ML usage or ethics issues may cause public confidence in AI and ML to be undermined, which could slow adoption of AI and ML in our products and services. For example, the European Union’s Artificial Intelligence Act (the “EU AI Act”) entered into force on August 1, 2024, with the first set of provisions taking effect on February 2, 2025. The EU AI Act establishes, among other things, a risk-based governance framework for regulating AI systems operating in the EU. This framework categorizes AI systems, based on the risks associated with such AI systems’ intended purposes, as creating unacceptable or high risks, with all other AI systems being considered low risk. The EU AI Act prohibits certain uses of AI systems and places numerous obligations on providers and deployers of permitted AI systems, with heightened requirements based on AI systems that are general purpose, which we currently have, or considered high risk. In addition, a patchwork of state-level AI-related legislation continues to emerge in the United States. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our operations or offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI and ML technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of
AI.AI and ML. These and other developments may require us to make significant changes to our use of AI and ML, including by limiting or restricting our use of AI and ML, which may require us to make significant changes to our policies and practices. The cost to comply with such laws or regulations could be significant and would increase our operating expenses, which could adversely affect our business, financial condition and results of operations. - As the utilization of AI and ML becomes more prevalent, we anticipate that it will continue to present new or unanticipated ethical, reputational, technical, operational, legal, competitive and regulatory issues, among others. We expect that our incorporation of AI and ML in our business will require additional resources, including the incurrence of additional costs, to develop and maintain our products and solutions and features to minimize potentially harmful or unintended consequences, to comply with applicable and emerging laws and regulations, to maintain or extend our competitive position, and to address any ethical, reputational, technical, operational, legal, competitive or regulatory issues which may arise as a result of any of the foregoing. As a result, the challenges presented with our use of AI and ML could adversely affect our business, financial condition and results of operations.
- We may fail to properly implement or market our AI and ML solutions and features. Our competitors or other third parties may incorporate AI and ML into their
productsproducts, offerings, and solutions more quickly or more successfully than us, which could impair our ability to competeeffectively.effectively and adversely affect our results of operations. Our ability to effectively implement and market our AI and ML solutions and features will depend, in part, on our ability to attract and retain employees with AI and ML expertise, and we expect significant competition for professionals with the skills and technical knowledge that we will require. - •regulatory developments or changes in government trade policy in the United States, foreign countries or both;
- We release earnings guidance in our quarterly and annual earnings conference calls, quarterly and annual earnings releases, or otherwise, regarding our future performance that represents our management’s estimates as of the date of release. This guidance includes forward-looking statements based on projections prepared by our management. Projections are based upon a number of assumptions and estimates that, while presented with numerical specificity, are inherently subject to significant business, economic and competitive uncertainties and contingencies on our business, many of which are beyond our control and are based upon specific assumptions with respect to future business decisions, some of which will change. Some of those key assumptions relate to the macroeconomic environment, including inflation and interest rates, which are inherently difficult to predict. We intend to state possible outcomes as high and low ranges which are intended to provide a sensitivity analysis as variables are changed but are not intended to imply that actual results could not fall outside of the suggested ranges. The principal reason that we release guidance is to provide a basis for our management to discuss our business outlook with analysts and investors. Furthermore, analysts and investors may develop and publish their own projections of our business, which may form a consensus about our future performance. Our actual business results may vary significantly from such guidance or that consensus due to a number of factors, many of which are outside of our control, including due to the global economic uncertainty and financial market volatility, instability in the banking sector, the ongoing geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflicts between Russia and Ukraine and Israel and
Hamas,Hamas and recent events in Venezuela, severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability, any of which or combination thereof could materially and adversely affect our business and future operating results. Furthermore, if we make downward revisions of our previously announced guidance, if we withdraw our previously announced guidance, or if our publicly announced guidance of future operating results fails to meet expectations of securities analysts, investors or other interested parties, the price of our common stock would decline. - We and our subsidiaries may incur substantial additional debt in the future, subject to the restrictions contained in our future debt agreements, some of which may be secured debt. In addition to any future indebtedness, we have entered into long-term contractual commitments, including non-cancelable multi-year capacity commitments with respect to cloud infrastructure services with certain third-party cloud providers, which require us to pay for such capacity irrespective of actual usage, as well as non-cancelable operating and finance lease agreements, principally for office space globally, with lease terms generally ranging from one to twelve years. We may be required to use a substantial portion of our cash flows from operations to pay interest and principal on our indebtedness. Our ability to make scheduled payments of the principal of, to pay interest on or to refinance our indebtedness, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. Such payments will reduce the funds available to us for working capital, capital expenditures and other corporate purposes and limit our ability to obtain additional financing for working capital, capital expenditures, expansion plans and other investments, which may in turn limit our ability to implement our business strategy, heighten our vulnerability to downturns in our business, the industry, or in the general economy, limit our flexibility in planning for, or reacting to, changes in our business and the industry and prevent us from taking advantage of business opportunities as they arise. Our business may not be able to generate cash flow from operations in the future sufficient to service our debt and make necessary capital expenditures. If we are unable to generate such cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt or obtaining additional equity capital on terms that may be onerous or highly dilutive. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations. Additionally, weakness and volatility in capital markets and the economy, in general or as a result of macroeconomic conditions such as rising inflation, could limit our access to capital markets and increase our costs of borrowing.
- The ongoing military conflict between Israel and Hamas, and any resulting conflicts in the region, may have similar negative impacts.
- We were incorporated in 2007 and introduced MongoDB Community Server in 2009, MongoDB Enterprise Advanced in 2013 and MongoDB Atlas in 2016.
- For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the year ended January 31, 2025.
- We plan to continue to expand our sales and marketing organization both domestically and internationally.
- This may negatively impact the adoption of Community
- In response to the concerns over inflation risk, the U.S. Federal Reserve has raised interest rates multiple times, and signaled that they will continue to adjust interest rates to stabilize and reduce current levels of inflation. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the year ended January 31, 2025.
- We expect to continue to expand our operations and employee headcount in the near term.
- For example, on May 12, 2021, the Biden administration issued an Executive Order requiring federal agencies to implement additional IT security measures, including, among other things, requiring agencies to adopt multifactor authentication and encryption for data at rest and in transit, to the maximum extent consistent with federal records laws and other applicable laws. Additionally, the Executive Order called for the development of secure software development practices or criteria for a consumer software labeling program reflecting a baseline level of secure practices for development of software sold to the U.S. federal government. Due to the Executive Order, federal agencies may require us to modify our cybersecurity practices and policies and increase our compliance costs and, if we are unable to meet the requirements of the Executive Order, it could impede our ability to work with the U.S. government and result in a loss of revenue.
- Moreover, the U.K. government has publicly announced plans to reform the U.K. GDPR in ways that, if formalized, are likely to deviate from the GDPR, all of which creates a risk of divergent parallel regimes and related uncertainty, along with the potential for increased compliance costs and risks for affected businesses.
- EU Member States have flexibility in identifying the types of entities considered “essential.” The deadline for EU Member States to transpose NIS2 into national law was October 17, 2024. However only a small number of Member States have met that deadline, creating ongoing uncertainty around how NIS2 will impact our business.
- For example, it is anticipated that the ePrivacy Regulation, which is still being negotiated, and national implementing laws will replace the current national laws implementing the ePrivacy Directive.
- For example, industry publications have reported ransomware attacks on MongoDB instances.
- ESG-related policies and actions are inadequate.
- No assurance can be provided that our use of AI will enhance our products or services or produce the intended results. For example, AI algorithms may be flawed, insufficient, of poor quality, reflect unwanted forms of bias, or contain other errors or inadequacies, any of which may not be easily detectable and AI, particularly generative AI, has been known to produce false or “hallucinatory” inferences or outputs.
- For example, the EU AI Act was published in the Official Journal of the EU on July 12, 2024 and entered into force on August 1, 2024.
- The capped call transactions may affect the value of our common stock.
- In connection with the pricing of the 2026 Notes, all of which were redeemed in December 2024, we entered into privately negotiated capped call transactions with certain counterparties. The capped call transactions cover, subject to customary adjustments, the number of shares of our common stock initially underlying the 2026 Notes. In connection with establishing their initial hedges of the capped call transactions, the counterparties or their respective affiliates entered into various derivative transactions with respect to our common stock concurrently with or shortly after the pricing of the 2026 Notes.
- The counterparties or their respective affiliates may modify their hedge positions by entering into or unwinding various derivatives with respect to our common stock and/or purchasing or selling our common stock or other securities of ours in secondary market transactions prior to the expiration of the capped call transactions (and are likely to do so on each exercise date of the capped call transactions, which are scheduled to occur during a 40 day trading day period prior to expiration of the capped call transactions). This activity could also cause or avoid an increase or a decrease in the market price of our common stock. We do not make any representation or prediction as to the direction or magnitude of any potential effect that the transactions described above may have on the price of shares of our common stock.
- •Because we derive more than the majority of our revenue from
MongoDBAtlas, failure ofMongoDBAtlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict. - Because we derive more than the majority of our revenue from
MongoDBAtlas, failure of MongoDB Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict. - The database software market, for both relational and non-relational database products, is highly competitive and rapidly evolving, and others may put out competing databases or sell services in connection with existing open source or source available databases, including ours. The principal competitive factors in our market include: mindshare with software developers and information technology (“IT”) executives; product capabilities, including flexibility, scalability, performance, security and reliability; flexible deployment options, including fully managed as a service or self-managed in the cloud,
on-premiseson- premises or in a hybrid environment and ease of deployment; breadth of use cases supported; ease of integration with existing IT infrastructure; robustness of professional services and customer support; price and total cost of ownership; adherence to industry standards and certifications, including cybersecurity standards and certifications; size of customer base and level of user adoption; strength of sales and marketing efforts; and brand awareness and reputation. If we fail to compete effectively with respect to any of these competitive factors, we may fail to attract new customers or lose or fail to renew existing customers, which would cause our business and results of operations to suffer. - Our adoption strategies include offering Community Server and a free tier of
MongoDBAtlas and we may not be able to realize the intended benefits of these strategies. - To encourage developer usage, familiarity and adoption of our platform, we offer Community Server as a “freemium” offering. Community Server is a free-to-download version of our database that does not include all of the features of our commercial platform. We also offer a free tier of
MongoDBAtlas in order to accelerate adoption, promote usage and drive brand and product awareness. We do not know if we will be able to convert these users to paying customers of our platform. Our marketing strategy also depends in part on persuading users who use one of these free versions to convince others within their organization to purchase and deploy our platform. To the extent that users of Community Server or our free tier ofMongoDBAtlas do not become, or lead others to become, paying customers, we will not realize the intended benefits of these strategies and our ability to grow our business or achieve profitability may be harmed. - We track certain operational metrics, including annualized recurring revenue (“ARR”), annualized monthly recurring revenue (“MRR”), ARR expansion rate, total customers, direct sales customers,
MongoDBAtlas customers, customers over 100K and downloads of our platform and non-GAAP metrics such as non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP income (loss) from operations, non-GAAP net income (loss), non-GAAP net income (loss) per share and free cash flow. These operational metrics are tracked with internal systems and tools that are not independently verified by any third party and which may differ from estimates or similar metrics published by third parties due to differences in sources, methodologies, or the assumptions on which we rely. Our internal systems and tools have a number of limitations, and our methodologies for tracking these metrics may change over time, which could result in unexpected changes to our metrics, including the metrics we publicly disclose. If the internal systems and tools we use to track these metrics undercount or overcount performance or contain algorithmic or other technical errors, the data we report may not be accurate. While these numbers are based on what we believe to be reasonable estimates of our metrics for the applicable period of measurement, there are inherent challenges in measuring how our platform is used across large populations. In addition, limitations or errors with respect to how we measure data or with respect to the data that we measure may affect our understanding of certain details of our business, which could affect our long-term strategies. If our operating metrics are not accurate representations of our business, if investors do not perceive our operating metrics to be accurate, or if we discover material inaccuracies with respect to these figures, we expect that our business, reputation, financial condition, and results of operations would be adversely affected. - •the mix of revenue and associated costs attributable to subscriptions for our
MongoDBAtlas and MongoDB Enterprise Advanced offerings (such as our non-cancelable multi-year cloud infrastructure capacity commitments, which require us to pay for such capacity irrespective of actual usage) and professional services, as such relative mix may impact our gross margins and operating income; - •significant security breaches or other security vulnerabilities, incidents, technical difficulties, or interruptions with respect to the delivery and use of our software;
- Any of the above identified or similar threats could cause a security breach or other security incident that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure, transfer, use or other processing of, or access to our information technology systems and networks or personal, proprietary, confidential or other sensitive information, or those of the third parties upon whom we rely. For example, in December 2023 we discovered that a previously unknown flaw in a third-party application used by MongoDB enabled an unauthorized third party to successfully phish and to gain access to certain corporate applications, including applications that we use to provide support services to MongoDB customers, which include customer contact information and related account metadata. In an effort to contain the impact of this security incident, we immediately activated our incident response process, promptly published an alert on our website and emailed customers notifying them of the situation and reminding them to stay vigilant. The investigation led by MongoDB into this incident uncovered no evidence of unauthorized access to
MongoDBAtlas clusters, a finding that has been verified by our third-party forensic experts. To date, we have not experienced a cybersecurity event that had a material impact on our financial performance or operations, but it is possible that we might experience such an attack in the future. A security breach or other security incident could disrupt our ability (and that of third parties upon whom we rely) to provide our platform, products, and services. - Even if we do attract new customers, the cost of new customer acquisition, product implementation and ongoing customer support may prove so high as to prevent us from achieving or sustaining profitability. For example, in fiscal years
2025, 20242026, 2025 and2023,2024, total sales and marketing expense represented43%,38%, 43% and 47%and 54%of revenue, respectively. We intend to continue to hire additional sales personnel, increase our marketing activities to help educate the market about the benefits of our platform and services, grow our domestic and international operations and build brand awareness. We also intend to continue to cultivate our relationships with developers through continued investment in our MongoDB.local events, MongoDB Advocacy Hub, User Groups, MongoDB University and our partner ecosystem of global system integrators, value-added resellers and independent software vendors. If the costs of these sales and marketing efforts increase dramatically, if we do not experience a substantial increase in leverage from our partner ecosystem, or if our sales and marketing efforts do not result in substantial increases in revenue, our business, results of operations and financial condition may be adversely affected. In addition, while we expect to continue to invest in our professional services organization to accelerate our customers’ ability to adopt our products and ultimately create and expand their use of our products over time, we cannot assure you that any of these investments will lead to the cost-effective acquisition of additional customers. - Internationally, virtually every jurisdiction in which we operate has established its own data privacy and security legal framework with which we or our customers must comply, including, but not limited to, the European Economic Area (“E.E.A.”), Switzerland, the United Kingdom (“U.K.”), Canada, Brazil and other countries. The collection, use, disclosure, transfer, or other processing of personal data regarding individuals in the E.E.A. is subject to the General Data Protection Regulation (the “GDPR”), and other European laws governing the processing of personal data. Data protection authorities in the E.E.A. have the power to impose administrative fines for violations of the GDPR of up to a maximum of €20 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. Further, the GDPR provides for private litigation related to the processing of personal data that can be brought by classes of data subjects or consumer protection organizations authorized at law to represent the data subjects’ interests. Since we act as a data processor for our
MongoDBAtlas customers, we have taken steps to cause our processes to be compliant with applicable portions of the GDPR, but because of the ambiguities in the GDPR and the evolving interpretation of the GDPR by data protection authorities, we cannot assure you that such steps are complete or effective. - Countries outside Europe are implementing significant limitations on the processing of personal data, similar to those in the GDPR. For example, Brazil has enacted the General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018). In addition, on June 5, 2020, Japan passed amendments to its Act on the Protection of Personal data, or APPI, which entered into force on April 1, 2022. Both of these laws broadly regulate the processing of personal data in a manner comparable to the GDPR, and violators of the LGPD and APPI face substantial penalties.
- Our success and ability to compete depend in part upon our intellectual property rights. As of January 31,
2025,2026, we had84101 issued patents and4744 pending patent applications in the United States. Patent applications may not result in issued patents and even if a patent issues, we cannot assure you that such patent will be adequate to protect our business. In addition to patent protection, we primarily rely on copyright and trademark laws, trade secret protection and confidentiality or other contractual arrangements with our employees, customers, partners and others to protect our intellectual property rights. However, the steps we take to protect our intellectual property rights may not be adequate and we may be unable to detect the unauthorized use of, or prevent third parties from infringing, misappropriating or otherwise violating, our intellectual property rights. In order to protect our intellectual property rights, we may be required to spend significant resources to establish, monitor and enforce such rights. Litigation brought to enforce our intellectual property rights could be costly, time-consuming and distracting to management and could be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Additionally, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential information could be compromised by disclosure during this type of litigation. An adverse determination of any litigation proceedings could put our intellectual property at risk of being invalidated, interpreted narrowly or held unenforceable and could put our related intellectual property at risk of not issuing or being canceled. The local laws of some foreign countries do not protect our intellectual property rights to the same extent as the laws of the United States and effective intellectual property protection and mechanisms may not be available in those jurisdictions. We may need to expend additional resources to defend our intellectual property in these countries and our inability to do so could impair our business or adversely affect our international expansion. Our patent applications and patents arising from any patent applications we may file in the future may never be granted and, even if we are successful in obtaining effective protection, it is expensive to maintain these rights, both in terms of application and maintenance costs, and the time and cost required to defend our rights could be substantial. Additionally, the process of obtaining patent protection is expensive and time-consuming, and we may be unable to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Even if we are able to secure our intellectual property rights, there can be no assurances that such rights will provide us with competitive advantages or distinguish our products and services from those of our competitors or that our competitors will not independently develop similar technology. - We outsource substantially all of the infrastructure relating to
MongoDBAtlas across AWS, Microsoft Azure and GCP to host our cloud offering. If the hosting ofMongoDBAtlas is disrupted or interfered with for any reason, our business would be negatively impacted. Customers ofMongoDBAtlas need to be able to access our platform at any time, without interruption or degradation of performance and we provide them with service level commitments with respect to uptime. Third-party cloud providers run their own platforms that we access and we are, therefore, vulnerable to their service interruptions. We may experience interruptions, delays and outages in service and availability from time to time as a result of problems with our third-party cloud providers’ infrastructure. Lack of availability of this infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud, cyberattacks, or security breaches or other security incidents that we cannot predict or prevent. Such interruptions, delays or outages could lead to the triggering of our service level agreements and the issuance of credits to our cloud offering customers, which may impact our business, results of operations and financial condition. In addition, if we or any of these third-party cloud providers, experience a security breach or other security incident, our software is unavailable or our customers are unable to use our software within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected. In some instances, we may not be able to identify the cause or causes of these performance problems within a period of time acceptable to our customers. It is possible that our customers and potential customers would hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability from those customers and from third parties with respect to any breach affecting these systems. We may not be able to recover a material portion of our liabilities to our customers and third parties from a third-party cloud provider. It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Any of the above circumstances or events may harm our business, results of operations and financial condition. - Our agreements with customers typically provide for service level commitments. Our MongoDB Enterprise Advanced customers typically get service level commitments with certain guaranteed response times and comprehensive 24x365 coverage. Our
MongoDBAtlas customers typically get monthly uptime service level commitments, where we are required to provide a service credit for any extended periods of downtime. The complexity and quality of our customer’s implementation and the performance and availability of cloud services and cloud infrastructure are outside our control and, therefore, we are not in full control of whether we can meet these service level commitments. Our business, results of operations and financial condition could be adversely affected if we fail to meet our service level commitments for any reason. Any extended service outages could adversely affect our business, reputation and brand. - A significant portion of our revenue is derived internationally and we are susceptible to risks related to our international operations. In the fiscal years ended January 31,
2025, 20242026, 2025 and2023,2024, total revenue generated from customers outside the United States was 46%, 46% and45%,46%, respectively, of our total revenue. We currently have international offices outside of North America in Europe, the Middle East and Africa (“EMEA”), the Asia-Pacific region and South America, focusing primarily on selling our products and services in those regions. In addition, we expanded our reach in China in February 2021 when we announced a global partnership with Tencent Cloud that allows customers to easily adopt and use MongoDB-as-a-Service across Tencent’s global cloud infrastructure. In the future, we may continue to expand our presence in these regions or expand into other international locations. Our current international operations and future initiatives involve a variety of risks, including risks associated with: - The future success of our business and particularly our cloud offerings, such as
MongoDBAtlas, depends upon the continued use of the internet as a primary medium for commerce, communication and business applications. Federal, state or foreign government bodies or agencies have in the past adopted, and may in the future adopt, laws or regulations affecting the use of the internet as a commercial medium. Changes in these laws or regulations could require us to modify our software in order to comply with these changes. In addition, government agencies or private organizations may begin to impose taxes, fees or other charges for accessing the internet or commerce conducted via the internet. These laws or charges could limit the growth of internet-related commerce or communications generally, resulting in reductions in the demand for internet-based solutions such as ours. - As of January 31,
2025,2026, we had net operating loss (“NOL”) carryforwards for U.S. federal and state, Irish and U.K. income tax purposes. A lack of future taxable income would adversely affect our ability to utilize these NOLs before they expire. In general, under Section 382 of the Code, a corporation that undergoes an “ownership change” (as defined under Section 382 of the Code and applicable Treasury Regulations) is subject to limitations on its ability to utilize its pre-change NOLs to offset future taxable income. We may experience a future ownership change under Section 382 of the Code that could affect our ability to utilize the NOLs to offset our income. Furthermore, our ability to utilize NOLs of companies that we have acquired or may acquire in the future may be subject to limitations. There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to reduce future income tax liabilities, including for state tax purposes. - As of January 31,
2025,2026, we have customers in over 100 countries and employees in over 25 countries. A significant natural disaster or man-made problem, such as an earthquake, fire, flood, an act of terrorism, the regional or global outbreak of a contagious disease, such as the COVID-19 pandemic, or other catastrophic event occurring in any of these locations, could adversely affect our business, results of operations and financial condition. Further, if a natural disaster or man-made problem were to affect data centers used by our cloud infrastructure service providers this could adversely affect the ability of our customers to use our products. In addition, natural disasters, regional or global outbreaks of contagious diseases and acts of terrorism could cause disruptions in our or our customers’ businesses, national economies or the world economy as a whole. Moreover, these types of events could negatively impact consumer and business spending in the impacted regions or depending upon the severity, globally, which could adversely impact our operating results. For example, the COVID-19 pandemic and/or the precautionary measures that we, our customers, and the governmental authorities adopted resulted in operational challenges, including, among other things, adapting to new work-from-home arrangements. More generally, a catastrophic event could adversely affect economies and financial markets globally and lead to an economic downturn, which could decrease technology spending and adversely affect demand for our products and services. Any prolonged economic downturn or a recession could materially harm our business and operating results and those of our customers, could result in business closures, layoffs, or furloughs of, or reductions in the number of hours worked by, our and our customer's employees, and a significant increase in unemployment in the United States and elsewhere. Such events may also lead to a reduction in the capital and operating budgets that we or our customers have available, which could harm our business, financial condition, and operating results. As we experienced during the COVID-19 pandemic, the trading prices for our and other technology companies' common stock may be highly volatile as a result of a catastrophic event, which may reduce our ability to access capital on favorable terms or at all. In the event of a major disruption caused by a natural disaster or man-made problem, we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in our development activities, lengthy interruptions in service, data breaches or other security incidents and loss of critical data, any of which could adversely affect our business, results of operations and financial condition. - We communicate certain environmental, social and governance (“ESG”) related initiatives and goals regarding environmental matters, diversity and other matters in our
annually releasedESG Report (formerly known as the Corporate Sustainability Report), on our website and elsewhere. The implementation of any of our current or future initiatives, goals and commitments may be difficult to achieve and may require considerable investment. Additionally, if these initiatives are not perceived to be adequate, or if the positions we take (or choose not to take) on social and ethical issues are unpopular with some of our employees, partners, or with our customers or potential customers, our reputation could be harmed, which could negatively impact our ability to attract or retain employees, partners or customers. If we fail to satisfy the expectations of investors, regulators, customers and other stakeholders, if our initiatives are not executed as planned, or if we fail to implement sufficient oversight or accurately capture and disclose ESG matters, our reputation and business, operating results and financial condition could be adversely impacted.