Skip to main content

MongoDB Inc

For the period ended Jul 31, 2024. Filed Aug 30, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Jul 31, 2024 · Filed Aug 30, 2024

MDB$312.83+2.7%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-04-30; filed 2024-05-31.

0001441816-24-000111

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2024-07-31; filed 2024-08-30.

0001441816-24-000188

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 322 previous paragraphs and 321 current paragraphs.

315 unchanged; 6 reworded; 0 added; 0 removed; 1 previous and 0 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Reworded paragraphs (6)

Previous wording

We derive and expect to continue to derive more than the majority of our revenue from MongoDB Atlas, our database-as-a-service offering, which is primarily recognized on a usage-basis. As such, market adoption and usage of MongoDB Atlas is critical to our continued success. Although MongoDB Atlas has seen rapid adoption since its commercial launch in June 2016, and though we intend to continue to direct a significant portion of our financial and operating resources to develop and grow MongoDB Atlas, including offering a free tier of MongoDB Atlas to generate developer usage and awareness, we cannot guarantee that rate of adoption will continue at the same pace or at all. Demand for MongoDB Atlas is affected by a number of factors, many of which are beyond our control, including economic downturns, continued market acceptance by developers, the availability of our Community Server offering, the continued volume, variety and velocity of data that is generated, timing of development and release of new offerings by our competitors, technological change and the rate of growth in our market. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the three months ended April 30, 2024. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results and growth prospects will be materially and adversely affected. In addition, because our customer’s usage of MongoDB Atlas may vary for a number of reasons, our visibility into the timing of revenue recognition is limited. There is a risk that customers will consume our MongoDB Atlas offering more slowly than we expect, and our actual results may differ from our forecasts and our future revenue may be less predictable going forward due to, among other things, fluctuations in the rate of customer renewals and expansions and seasonality of, or fluctuations in, usage of MongoDB Atlas.

Current wording

We derive and expect to continue to derive more than the majority of our revenue from MongoDB Atlas, our database-as-a-service offering, which is primarily recognized on a usage-basis. As such, market adoption and usage of MongoDB Atlas is critical to our continued success. Although MongoDB Atlas has seen rapid adoption since its commercial launch in June 2016, and though we intend to continue to direct a significant portion of our financial and operating resources to develop and grow MongoDB Atlas, including offering a free tier of MongoDB Atlas to generate developer usage and awareness, we cannot guarantee that rate of adoption will continue at the same pace or at all. Demand for MongoDB Atlas is affected by a number of factors, many of which are beyond our control, including economic downturns, continued market acceptance by developers, the availability of our Community Server offering, the continued volume, variety and velocity of data that is generated, timing of development and release of new offerings by our competitors, technological change and the rate of growth in our market. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the six months ended July 31, 2024. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results and growth prospects will be materially and adversely affected. In addition, because our customer’s usage of MongoDB Atlas may vary for a number of reasons, our visibility into the timing of revenue recognition is limited. There is a risk that customers will consume our MongoDB Atlas offering more slowly than we expect, and our actual results may differ from our forecasts and our future revenue may be less predictable going forward due to, among other things, fluctuations in the rate of customer renewals and expansions and seasonality of, or fluctuations in, usage of MongoDB Atlas.

Previous wording

The occurrence of one or more of the foregoing and other factors may cause our results of operations to vary significantly and be materially and adversely affected. For example, fluctuations in our quarterly operating results and the price of our common stock may be particularly pronounced in the current economic environment due to the ongoing geopolitical instability resulting from the conflicts between Russia and Ukraine and Israel and Hamas, severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, instability in the banking sector, increases in inflation rates, higher interest rates and uncertainty about economic stability. In response to the concerns over inflation risk, the U.S. Federal Reserve has raised interest rates multiple times, and signaled that they will continue to adjust interest rates to stabilize and reduce current levels of inflation. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response to the pandemic and macroeconomic events, and the effectiveness of those actions. Any of these factors or any combination thereof could materially and adversely affect our business, results of operations and financial condition. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the three months ended April 30, 2024. We also intend to continue to invest to grow our business and to take advantage of our market opportunity. Accordingly, historical patterns and our results of operations in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. Additionally, if our quarterly results of operations fall below the expectations of investors or securities analysts who follow our stock, the price of our common stock could decline substantially and we could face costly lawsuits, including securities class action suits.

Current wording

The occurrence of one or more of the foregoing and other factors may cause our results of operations to vary significantly and be materially and adversely affected. For example, fluctuations in our quarterly operating results and the price of our common stock may be particularly pronounced in the current economic environment due to the ongoing geopolitical instability resulting from the conflicts between Russia and Ukraine and Israel and Hamas, severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, instability in the banking sector, increases in inflation rates, higher interest rates and uncertainty about economic stability. In response to the concerns over inflation risk, the U.S. Federal Reserve has raised interest rates multiple times, and signaled that they will continue to adjust interest rates to stabilize and reduce current levels of inflation. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response to the pandemic and macroeconomic events, and the effectiveness of those actions. Any of these factors or any combination thereof could materially and adversely affect our business, results of operations and financial condition. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the six months ended July 31, 2024. We also intend to continue to invest to grow our business and to take advantage of our market opportunity. Accordingly, historical patterns and our results of operations in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. Additionally, if our quarterly results of operations fall below the expectations of investors or securities analysts who follow our stock, the price of our common stock could decline substantially and we could face costly lawsuits, including securities class action suits. See the section titled “Legal Proceedings” included in Part II, Item 1 of this Quarterly Report on Form 10-Q.

Previous wording

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, and consumer protection laws For example, at the federal level, Section 5 of the Federal Trade Commission Act prohibits unfair or deceptive acts or practices in or affecting commerce (which extends to data privacy and security practices), and the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”), imposes specific requirements relating to the privacy, security, and transmission of individually identifiable health information. At the state level, the California Consumer Privacy Act, as modified by the California Privacy Rights Act (collectively, the “CCPA”) gives California residents the right to, among other things, request disclosure of personal information collected about them and whether that information has been sold to others, request deletion of personal information (subject to certain exceptions), opt out of sales of their personal information, and not be discriminated against for exercising these rights. The CCPA also authorizes private lawsuits to recover statutory damages for certain data breaches. The effects of the CCPA are potentially significant and may require us to modify our data collection or processing practices and policies and increase our compliance costs and potential liability with respect to personal information we collect about California residents. For example, in August 2022 California’s Attorney General reached a settlement with Sephora, Inc. (“Sephora”) for failing to satisfy certain obligations under the CCPA, including the disclosure and processing of opt-out requests, with respect to using third-party tracking software on Sephora's website that could, among other things, create profiles about website visitors that the California Attorney General interpreted as a "sale" of customer information given the benefits that both the software provider and Sephora received from the relationship. This action may signal a priority of enforcement and interpretation that such use of analytics products on the internet may introduce new web-based marketing complexities and compliance challenges under the CCPA.

Current wording

In the United States, federal, state, and local governments have enacted numerous data privacy and security laws, including data breach notification laws, personal data privacy laws, and consumer protection laws For example, at the federal level, Section 5 of the Federal Trade Commission Act prohibits unfair or deceptive acts or practices in or affecting commerce (which extends to data privacy and security practices), and the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health Act (“HITECH”), imposes specific requirements relating to the privacy, security, and transmission of individually identifiable health information. At the state level, the California Consumer Privacy Act, as modified by the California Privacy Rights Act (collectively, the “CCPA”) gives California residents the right to, among other things, request disclosure of personal information collected about them and whether that information has been sold to others, request deletion of personal information (subject to certain exceptions), opt out of sales of their personal information, and not be discriminated against for exercising these rights. The CCPA also authorizes private lawsuits to recover statutory damages for certain data breaches. The effects of the CCPA are potentially significant and may require us to modify our data collection or processing practices and policies and increase our compliance costs and potential liability with respect to personal information we collect about California residents.

Previous wording

We are currently self-certified under the EU-U.S. Data Privacy Framework, however such new adequacy decision is likely to face challenge at the Court of Justice of the European Union. While the EU-U.S. Data Privacy Framework does not apply to the U.K., on October 12, 2023, the U.K. government adopted an adequacy decision concluding that the United States ensures an adequate level of protection transferred from the U.K. to the United States under the U.K. Extension to the EU-U.S. Data Privacy Framework (“U.K. Data Privacy Framework”). We are currently self-certified under the U.K. Data Privacy Framework, and have also self-certified under the Swiss Data Privacy Framework in anticipation of a similar adequacy decision from the Swiss government. Both the U.K. and Swiss Data Privacy Frameworks could also be contested or otherwise affected by any challenges to the EU-U.S. Data Privacy Framework. Certain countries outside Europe (including Russia, China and Brazil) have also passed or are considering laws requiring local data residency or otherwise impeding the transfer of personal data across borders, any of which could increase the cost and complexity of doing business. If we cannot implement a valid compliance mechanism for cross-border data transfers, we may face increased exposure to regulatory actions, substantial fines, and injunctions against processing or transferring personal data from Europe or other foreign jurisdictions. The inability to import personal data to the United States could significantly and negatively impact our business operations; limit our ability to collaborate with parties that are subject to such cross-border data transfer or localization laws;

Current wording

We are currently self-certified under the EU-U.S. Data Privacy Framework, however such adequacy decision is likely to face challenge at the Court of Justice of the European Union. While the EU-U.S. Data Privacy Framework does not apply to the U.K., on October 12, 2023, the U.K. government adopted an adequacy decision concluding that the United States ensures an adequate level of protection transferred from the U.K. to the United States under the U.K. Extension to the EU-U.S. Data Privacy Framework (“U.K. Data Privacy Framework”). We are currently self-certified under the U.K. Data Privacy Framework, and have also self-certified under the Swiss Data Privacy Framework in anticipation of a similar adequacy decision from the Swiss government. Both the U.K. and Swiss Data Privacy Frameworks could also be contested or otherwise affected by any challenges to the EU-U.S. Data Privacy Framework. Certain countries outside Europe (including Russia, China and Brazil) have also passed or are considering laws requiring local data residency or otherwise impeding the transfer of personal data across borders, any of which could increase the cost and complexity of doing business. If we cannot implement a valid compliance mechanism for cross-border data transfers, we may face increased exposure to regulatory actions, substantial fines, and injunctions against processing or transferring personal data from Europe or other foreign jurisdictions. The inability to import personal data to the United States could significantly and negatively impact our business operations; limit our ability to collaborate with parties that are subject to such cross-border data transfer or localization laws; or require us to increase our personal data processing capabilities and infrastructure in foreign jurisdictions at significant expense.

Previous wording

In addition, the use of AI may enhance intellectual property, cybersecurity, operational and technological risks. As the regulatory framework for AI and related technologies evolves, it is possible that new laws and regulations will be adopted, or that existing laws and regulations, including intellectual property, privacy, data protection and cybersecurity, consumer protection, competition and equal opportunity laws and regulations, may be interpreted in ways that would affect our business and the ways in which we or our partners use AI or related technologies, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. For example, if we or our third-party AI providers do not have sufficient rights to use the data or other material or content on which AI tools rely, or the output generated by our use of such AI tools, we may incur liability through the violation of such laws, third-party intellectual property, privacy or other rights, or contracts to which we are a party. Moreover, use of generative AI in our code development process, while offering various potential benefits, could also pose certain ownership and security risks with respect to our codebase, given the current legal uncertainties relating to ownership of AI-generated works and the potential for security flaws in output code. Further, potential government regulation related to AI use and ethics may also increase the burden and cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services. In particular, we are monitoring the development of EU AI Act, which was approved in a political agreement in December 2023. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our operations or offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI.

Current wording

In addition, the use of AI may enhance intellectual property, cybersecurity, operational and technological risks. As the regulatory framework for AI and related technologies evolves, it is possible that new laws and regulations will be adopted, or that existing laws and regulations, including intellectual property, privacy, data protection and cybersecurity, consumer protection, competition and equal opportunity laws and regulations, may be interpreted in ways that would affect our business and the ways in which we or our partners use AI or related technologies, our financial condition and our results of operations, including as a result of the cost to comply with such laws or regulations. For example, if we or our third-party AI providers do not have sufficient rights to use the data or other material or content on which AI tools rely, or the output generated by our use of such AI tools, we may incur liability through the violation of such laws, third-party intellectual property, privacy or other rights, or contracts to which we are a party. Moreover, use of generative AI in our code development process, while offering various potential benefits, could also pose certain ownership and security risks with respect to our codebase, given the current legal uncertainties relating to ownership of AI-generated works and the potential for security flaws in output code. Further, potential government regulation related to AI use and ethics may also increase the burden and cost of research and development in this area, and failure to properly remediate AI usage or ethics issues may cause public confidence in AI to be undermined, which could slow adoption of AI in our products and services. For example, the EU AI Act was published in the Official Journal of the EU on July 12, 2024 and entered into force on August 1, 2024. The EU AI Act establishes, among other things, a risk-based governance framework for regulating AI systems operating in the EU. This framework categorizes AI systems, based on the risks associated with such AI systems’ intended purposes, as creating unacceptable or high risks, with all other AI systems being considered low risk. The EU AI Act prohibits certain uses of AI systems and places numerous obligations on providers and deployers of permitted AI systems, with heightened requirements based on AI systems that are considered high risk. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our operations or offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational or technological risks that may arise relating to the use of AI.

Previous wording

The conditional conversion feature of the 2026 Notes was triggered during the three months ended April 30, 2024, as the last reported sale price of our common stock was more than or equal to 130% of the applicable conversion price for at least 20 trading days in the period of 30 consecutive trading days ending on April 30, 2024 (the last trading day of the fiscal quarter). Therefore, the 2026 Notes are currently convertible at the option of the holders thereof, in whole or in part, from May 1, 2024 through July 31, 2024. Whether the 2026 Notes will be convertible following such fiscal quarter will depend on the continued satisfaction of this condition or another conversion condition in the future.

Current wording

The conditional conversion feature of the 2026 Notes was not triggered as of July 31, 2024, as the last reported sale price of our common stock was not more than or equal to 130% of the applicable conversion price for at least 20 trading days in the period of 30 consecutive trading days. Therefore, the 2026 Notes are not currently convertible at the option of the holders thereof, in whole or in part, from August 1, 2024 through October 31, 2024. Whether the 2026 Notes will be convertible following such fiscal quarter will depend on the satisfaction of this condition or another conversion condition in the future.
Rearranged previous paragraphs (1)

Previous report — wording carried elsewhere

or require us to increase our personal data processing capabilities and infrastructure in foreign jurisdictions at significant expense.