MongoDB, Inc.

Previous wording

•We have a limited operating history, which makes it difficult to predict our future results of operations.

Current wording

•We have a limited operating history at our current scale, which makes it difficult to predict our future results of operations.

Previous wording

Because we derive more than the majority of our revenue from MongoDB Atlas, failure of MongoDB Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict.

Current wording

•Because we derive more than the majority of our revenue from Atlas, failure of Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict.

Previous wording

Geopolitical risks, including those arising from trade tension and/or the imposition of trade tariffs, terrorist activity or acts of civil or international hostility, are increasing. Similarly, the ongoing military conflict between Russia and Ukraine has had negative impacts on the global economy, including by contributing to rapidly rising costs of living (driven largely by higher energy prices) in Europe and creating uncertainty in the global capital markets and is expected to have further global economic consequences, including disruptions of the global supply chain and energy markets. The ongoing military conflict between Israel and Hamas, and any resulting conflicts in the region, may have similar negative impacts. Further, other events outside of our control, including natural disasters, climate change-related events, pandemics (such as the COVID-19 pandemic) or health crises may arise from time to time and be accompanied by governmental actions that may increase international tension. Any such events and responses, including regulatory developments, may cause significant volatility and declines in the global markets, disproportionate impacts to certain industries or sectors, disruptions to commerce (including to economic activity, travel and supply chains), loss of life and property damage, and may materially and adversely affect the global economy or capital markets, as well as our business and results of operations.

Current wording

Our overall performance depends in part on worldwide economic conditions and our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. The revenue growth and potential profitability of our business depend on demand for database software and services generally and for our subscription offering and related services in particular. Current or future economic uncertainties or downturns could materially and adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, labor shortages, supply chain disruptions, inflationary pressures, rising interest rates, financial and credit market fluctuations, changes in trade policies, such as trade wars, tariffs or other trade restrictions or the threat of such actions, international trade relations, political turmoil, natural catastrophes, regional or global outbreaks of contagious diseases, such as the COVID-19 pandemic, volatility in the banking sector, warfare and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, such as the conflict in the Middle East, could cause a decrease in business investments, including spending on information technology, disrupt the timing and cadence of key industry and marketing events and otherwise could materially and adversely affect the growth of our business and results of operations. Geopolitical risks, including those arising from trade tension and/or the imposition of trade tariffs, terrorist activity or acts of civil or international hostility, are increasing. In particular, there is currently significant uncertainty about trade policies, treaties, tariffs and taxes, which may lead to continuing volatility in U.S. and global financial and economic conditions and commodity markets, declining consumer confidence, significant inflation and diminished expectations for the economy, and which may ultimately lead to reduced usage or demand for our products. Similarly, the ongoing military conflict between Russia and Ukraine has had negative impacts on the global economy, including by contributing to rapidly rising costs of living (driven largely by higher energy prices) in Europe and creating uncertainty in the global capital markets and is expected to have further global economic consequences, including disruptions of the global supply chain and energy markets. The geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel and Hamas and recent events in Venezuela, and any resulting conflicts in the respective regions, may have similar negative impacts. Further, other events outside of our control, including natural disasters, climate change-related events, pandemics (such as the COVID-19 pandemic) or health crises may arise from time to time and be accompanied by governmen…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Additionally, the global economy, including credit and financial markets, has experienced extreme volatility and disruptions and may continue to experience such disruptions in the future, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability. As a result of these factors, our revenues may be affected by both decreased customer acquisition and lower than anticipated revenue growth from existing customers. For example, the COVID-19 pandemic resulted in widespread unemployment, economic slowdown and extreme volatility. Similarly, the ongoing military conflict between Russia and Ukraine has created extreme volatility in the global capital markets and has caused and could continue to cause disruptions of the global supply chain and energy markets. The ongoing military conflict between Israel and Hamas, and any resulting conflicts in the region, has caused and may continue to cause similar negative impacts. Any such volatility and disruptions may have material and adverse consequences on us, the third parties on whom we rely or our customers. Increased inflation and/or interest rates can adversely affect us by increasing our costs, including labor and employee benefit costs. Any significant increases in inflation and related increase in interest rates could have a material and adverse effect on our business, financial condition or results of operations.

Current wording

Additionally, the global economy, including credit and financial markets, has experienced extreme volatility and disruptions and may continue to experience such disruptions in the future, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability. As a result of these factors, our revenues may be affected by both decreased customer acquisition and lower than anticipated revenue growth from existing customers. For example, the COVID-19 pandemic resulted in widespread unemployment, economic slowdown and extreme volatility. Similarly, the ongoing military conflict between Russia and Ukraine has created extreme volatility in the global capital markets and has caused and could continue to cause disruptions of the global supply chain and energy markets. The geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel and Hamas and recent events in Venezuela, and any resulting conflicts in the respective regions, has caused and may continue to cause similar negative impacts. Any such volatility and disruptions may have material and adverse consequences on us, the third parties on whom we rely or our customers. Increased inflation and/or interest rates can adversely affect us by increasing our costs, including labor and employee benefit costs. Any significant increases in inflation and related increase in interest rates could have a material and adverse effect on our business, financial condition or results of operations.

Previous wording

We have a limited operating history, which makes it difficult to predict our future results of operations.

Current wording

We have a limited operating history at our current scale, which makes it difficult to predict our future results of operations.

Previous wording

We were incorporated in 2007 and introduced MongoDB Community Server in 2009, MongoDB Enterprise Advanced in 2013 and MongoDB Atlas in 2016. As a result of our limited operating history, our ability to forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to accurately predict future growth. Our historical revenue growth has been inconsistent and should not be considered indicative of our future performance. Further, in future periods, our revenue growth could slow or our revenue could decline for a number of reasons, including slowing adoption or usage of MongoDB or demand for our subscription offerings and related services, reduced conversion of users of our free offerings to paying customers, increasing competition, changes to technology or our intellectual property or our failure, for any reason, to continue to capitalize on growth opportunities. We have also encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described herein. If our assumptions regarding these risks and uncertainties and our future revenue growth are incorrect or change, or if we do not address these risks successfully, our operating and financial results could differ materially from our expectations and our business could suffer.

Current wording

As a result of our limited operating history at our current scale, our ability to forecast our future results of operations is limited and subject to a number of uncertainties, including our ability to accurately predict future growth. Our historical revenue growth has been inconsistent and should not be considered indicative of our future performance. Further, in future periods, our revenue growth could slow or our revenue could decline for a number of reasons, including slowing adoption or usage of MongoDB or demand for our subscription offerings and related services, reduced conversion of users of our free offerings to paying customers, increasing competition, changes to technology or our intellectual property or our failure, for any reason, to continue to capitalize on growth opportunities. We have also encountered and will encounter risks and uncertainties frequently experienced by growing companies in rapidly changing industries, such as the risks and uncertainties described herein. If our assumptions regarding these risks and uncertainties and our future revenue growth are incorrect or change, or if we do not address these risks successfully, our operating and financial results could differ materially from our expectations and our business could suffer.

Previous wording

We have incurred net losses in each period since our inception, including net losses of $129.1 million, $176.6 million and $345.4 million for the fiscal years ended January 31, 2025, 2024 and 2023, respectively. We had an accumulated deficit of $1.8 billion as of January 31, 2025. We expect our operating expenses to increase significantly as we increase our sales and marketing efforts, continue to invest in research and development and expand our operations and infrastructure, both domestically and internationally. In particular, we have entered into non-cancelable multi-year capacity commitments with respect to cloud infrastructure services with certain third-party cloud providers, which require us to pay for such capacity irrespective of actual usage. In addition, we have incurred and expect to continue to incur significant additional legal, accounting and other expenses related to being a public company. While our revenue has grown in recent years, if our revenue declines or fails to grow at a rate faster than these increases in our operating expenses, we will not be able to achieve and maintain profitability in future periods. As a result, we expect to continue to generate losses. We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain profitability.

Current wording

We have incurred net losses in each period since our inception, including net losses of $71.2 million,$129.1 million and $176.6 million for the fiscal years ended January 31, 2026, 2025 and 2024, respectively. We had an accumulated deficit of $1.9 billion as of January 31, 2026. We expect our operating expenses to increase significantly as we increase our sales and marketing efforts, continue to invest in research and development and expand our operations and infrastructure, both domestically and internationally. In particular, we have entered into non-cancelable multi-year capacity commitments with respect to cloud infrastructure services with certain third-party cloud providers, which require us to pay for such capacity irrespective of actual usage. In addition, we have incurred and expect to continue to incur significant additional legal, accounting and other expenses related to being a public company. While our revenue has grown in recent years, if our revenue declines or fails to grow at a rate faster than these increases in our operating expenses, we will not be able to achieve and maintain profitability in future periods. As a result, we expect to continue to generate losses. We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain profitability.

Previous wording

•Because we derive more than the majority of our revenue from MongoDB Atlas, failure of MongoDB Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict.

Current wording

Because we derive more than the majority of our revenue from Atlas, failure of MongoDB Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict.

Previous wording

We derive and expect to continue to derive more than the majority of our revenue from MongoDB Atlas, our database-as-a-service offering, which is primarily recognized on a usage-basis. As such, market adoption and usage of MongoDB Atlas is critical to our continued success. Although MongoDB Atlas has seen rapid adoption since its commercial launch in June 2016, and though we intend to continue to direct a significant portion of our financial and operating resources to develop and grow MongoDB Atlas, including offering a free tier of MongoDB Atlas to generate developer usage and awareness, we cannot guarantee that rate of adoption will continue at the same pace or at all. Demand for MongoDB Atlas is affected by a number of factors, many of which are beyond our control, including economic downturns, continued market acceptance by developers, the availability of our Community Server offering, the continued volume, variety and velocity of data that is generated, timing of development and release of new offerings by our competitors, technological change and the rate of growth in our market. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the year ended January 31, 2025. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results and growth prospects will be materially and adversely affected. In addition, because our customers’ usage of MongoDB Atlas may vary for a number of reasons, our visibility into the timing of revenue recognition is limited. There is a risk that customers will consume our MongoDB Atlas offering more slowly than we expect, and our actual results may differ from our forecasts and our future revenue may be less predictable going forward due to, among other things, fluctuations in the rate of customer renewals and expansions and seasonality of, or fluctuations in, usage of MongoDB Atlas.

Current wording

We derive and expect to continue to derive more than the majority of our revenue from Atlas, our database-as-a-service offering, which is primarily recognized on a usage-basis. As such, market adoption and usage of Atlas is critical to our continued success. Although Atlas has seen rapid adoption since its commercial launch in June 2016, and though we intend to continue to direct a significant portion of our financial and operating resources to develop and grow Atlas, including offering a free tier of Atlas to generate developer usage and awareness, we cannot guarantee that rate of adoption will continue at the same pace or at all. Demand for Atlas is affected by a number of factors, many of which are beyond our control, including economic downturns, continued market acceptance by developers, the availability of our Community Server offering, the continued volume, variety and velocity of data that is generated, timing of development and release of new offerings by our competitors, technological change and the rate of growth in our market. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results and growth prospects will be materially and adversely affected. In addition, because our customers’ usage of Atlas may vary for a number of reasons, our visibility into the timing of revenue recognition is limited. There is a risk that customers will consume our Atlas offering more slowly than we expect, and our actual results may differ from our forecasts and our future revenue may be less predictable going forward due to, among other things, fluctuations in the rate of customer renewals and expansions and seasonality of, or fluctuations in, usage of Atlas.

Previous wording

Our subscription offerings are term-based and a majority of our subscription contracts were one year in duration in fiscal year 2024. In order for us to maintain or improve our results of operations, it is important that our customers renew their subscriptions with us when the existing subscription term expires and renew on the same or more favorable quantity and terms. Our customers have no obligation to renew their subscriptions and we may not be able to accurately predict customer renewal rates. In addition, the growth of our business depends in part on our customers expanding their use of subscription offerings and related services, including increasing their usage and workloads with us. Historically, some of our customers have elected not to renew their subscriptions with us or have not expanded their usage of our services over time for a variety of reasons, including as a result of changes in their strategic IT priorities, budgets, costs and, in some instances, due to competing solutions. Our retention rate and our net ARR expansion rate may also decline or fluctuate as a result of a number of other factors, including our customers’ satisfaction or dissatisfaction with our software, the increase in the contract value of subscription and support contracts from new customers, the effectiveness of our customer support services, our pricing, the prices of competing products or services, mergers and acquisitions affecting our customer base, global economic conditions and the other risk factors described herein. As a result, we cannot assure you that customers will renew subscriptions or increase their usage of our software and related services. If our customers do not renew their subscriptions or renew on less favorable terms, or if we are unable to expand our customers’ usage of our software, our business, results of operations and financial condition could be materially and adversely affected.

Current wording

Our subscription offerings are term-based and a majority of our subscription contracts are one year in duration. In order for us to maintain or improve our results of operations, it is important that our customers renew their subscriptions with us when the existing subscription term expires and renew on the same or more favorable quantity and terms. Our customers have no obligation to renew their subscriptions and we may not be able to accurately predict customer renewal rates. In addition, the growth of our business depends in part on our customers expanding their use of subscription offerings and related services, including increasing their usage and workloads with us. Historically, some of our customers have elected not to renew their subscriptions with us or have not expanded their usage of our services over time for a variety of reasons, including as a result of changes in their strategic IT priorities, budgets, costs and, in some instances, due to competing solutions. Our retention rate and our net ARR expansion rate may also decline or fluctuate as a result of a number of other factors, including our customers’ satisfaction or dissatisfaction with our software, the increase in the contract value of subscription and support contracts from new customers, the effectiveness of our customer support services, our pricing, the prices of competing products or services, mergers and acquisitions affecting our customer base, global economic conditions and the other risk factors described herein. As a result, we cannot assure you that customers will renew subscriptions or increase their usage of our software and related services. If our customers do not renew their subscriptions or renew on less favorable terms, or if we are unable to expand our customers’ usage of our software, our business, results of operations and financial condition could be materially and adversely affected.

Previous wording

Increasing our customer base and achieving broader market acceptance of our subscription offerings and related services will depend, to a significant extent, on our ability to timely and effectively expand our sales and marketing operations and activities. We are substantially dependent on our direct sales force and our marketing efforts to obtain new customers. We plan to continue to expand our sales and marketing organization both domestically and internationally. We believe that there is significant competition for experienced sales professionals with the sales skills and technical knowledge that we require, particularly as we continue to target larger enterprises. Our ability to achieve significant revenue growth in the future will depend, in part, on our success in recruiting, training and retaining a sufficient number of experienced sales professionals, especially in highly competitive markets. New hires require significant training and time before they achieve full productivity, particularly in new or developing sales territories. Our recent hires and planned hires may not become as productive as quickly as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals in the future in the markets where we do business. Because of our limited operating history, we cannot predict whether, or to what extent, our sales will increase as we expand our sales and marketing organization or how long it will take for sales personnel to become productive. Our business and results of operations could be harmed if the expansion of our sales and marketing organization does not generate a significant increase in revenue.

Current wording

Increasing our customer base and achieving broader market acceptance of our subscription offerings and related services will depend, to a significant extent, on our ability to timely and effectively expand our sales and marketing operations and activities. We are substantially dependent on our direct sales force and our marketing efforts to obtain new customers. We believe that there is significant competition for experienced sales professionals with the sales skills and technical knowledge that we require, particularly as we continue to target larger enterprises. Our ability to achieve significant revenue growth in the future will depend, in part, on our success in recruiting, training and retaining a sufficient number of experienced sales professionals, especially in highly competitive markets. New hires require significant training and time before they achieve full productivity, particularly in new or developing sales territories. Our recent hires and planned hires may not become as productive as quickly as we expect, and we may be unable to hire or retain sufficient numbers of qualified individuals in the future in the markets where we do business. Because of our limited operating history, we cannot predict whether, or to what extent, our sales will increase as we expand our sales and marketing organization or how long it will take for sales personnel to become productive. Our business and results of operations could be harmed if the expansion of our sales and marketing organization does not generate a significant increase in revenue.

Previous wording

Our adoption strategies include offering Community Server and a free tier of MongoDB Atlas and we may not be able to realize the intended benefits of these strategies.

Current wording

Our adoption strategies include offering Community Server and a free tier of Atlas and we may not be able to realize the intended benefits of these strategies.

Previous wording

To encourage developer usage, familiarity and adoption of our platform, we offer Community Server as a “freemium” offering. Community Server is a free-to-download version of our database that does not include all of the features of our commercial platform. We also offer a free tier of MongoDB Atlas in order to accelerate adoption, promote usage and drive brand and product awareness. We do not know if we will be able to convert these users to paying customers of our platform. Our marketing strategy also depends in part on persuading users who use one of these free versions to convince others within their organization to purchase and deploy our platform. To the extent that users of Community Server or our free tier of MongoDB Atlas do not become, or lead others to become, paying customers, we will not realize the intended benefits of these strategies and our ability to grow our business or achieve profitability may be harmed.

Current wording

To encourage developer usage, familiarity and adoption of our platform, we offer Community Server as a “freemium” offering. Community Server is a free-to-download version of our database that does not include all of the features of our commercial platform. We also offer a free tier of Atlas in order to accelerate adoption, promote usage and drive brand and product awareness. We do not know if we will be able to convert these users to paying customers of our platform. Our marketing strategy also depends in part on persuading users who use one of these free versions to convince others within their organization to purchase and deploy our platform. To the extent that users of Community Server or our free tier of Atlas do not become, or lead others to become, paying customers, we will not realize the intended benefits of these strategies and our ability to grow our business or achieve profitability may be harmed.

Previous wording

On October 16, 2018, we announced that we were changing the license for Community Server from the AGPL to a new software license, the SSPL. The SSPL builds on the spirit of the AGPL, but includes an explicit condition that any organization attempting to exploit MongoDB as a service must open source the software that it uses to offer such service. Since the SSPL is a new license and has not been interpreted by any court, developers and the companies they work for may be hesitant to adopt Community Server because of uncertainty around the provisions of the SSPL and how it will be interpreted and enforced. In addition, the SSPL has not been approved by the Open Source Initiative, nor has it been included in the Free Software Foundation’s list of free software licenses. This may negatively impact the adoption of Community

Current wording

On October 16, 2018, we announced that we were changing the license for Community Server from the AGPL to a new software license, the SSPL. The SSPL builds on the spirit of the AGPL, but includes an explicit condition that any organization attempting to exploit MongoDB as a service must open source the software that it uses to offer such service. Since the SSPL is a new license and has not been interpreted by any court, developers and the companies they work for may be hesitant to adopt Community Server because of uncertainty around the provisions of the SSPL and how it will be interpreted and enforced. In addition, the SSPL has not been approved by the Open Source Initiative, nor has it been included in the Free Software Foundation’s list of free software licenses. This may negatively impact the adoption of Community Server, which in turn could lead to reduced brand and product awareness, ultimately leading to a decline in paying customers and our ability to grow our business or achieve profitability may be harmed.

Previous wording

We track certain operational metrics, including annualized recurring revenue (“ARR”), annualized monthly recurring revenue (“MRR”), ARR expansion rate, total customers, direct sales customers, MongoDB Atlas customers, customers over 100K and downloads of our platform and non-GAAP metrics such as non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP income (loss) from operations, non-GAAP net income (loss), non-GAAP net income (loss) per share and free cash flow. These operational metrics are tracked with internal systems and tools that are not independently verified by any third party and which may differ from estimates or similar metrics published by third parties due to differences in sources, methodologies, or the assumptions on which we rely. Our internal systems and tools have a number of limitations, and our methodologies for tracking these metrics may change over time, which could result in unexpected changes to our metrics, including the metrics we publicly disclose. If the internal systems and tools we use to track these metrics undercount or overcount performance or contain algorithmic or other technical errors, the data we report may not be accurate. While these numbers are based on what we believe to be reasonable estimates of our metrics for the applicable period of measurement, there are inherent challenges in measuring how our platform is used across large populations. In addition, limitations or errors with respect to how we measure data or with respect to the data that we measure may affect our understanding of certain details of our business, which could affect our long-term strategies. If our operating metrics are not accurate representations of our business, if investors do not perceive our operating metrics to be accurate, or if we discover material inaccuracies with respect to these figures, we expect that our business, reputation, financial condition, and results of operations would be adversely affected.

Current wording

We track certain operational metrics, including annualized recurring revenue (“ARR”), annualized monthly recurring revenue (“MRR”), ARR expansion rate, total customers, direct sales customers, Atlas customers, customers over 100K and downloads of our platform and non-GAAP metrics such as non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP income (loss) from operations, non-GAAP net income (loss), non-GAAP net income (loss) per share and free cash flow. These operational metrics are tracked with internal systems and tools that are not independently verified by any third party and which may differ from estimates or similar metrics published by third parties due to differences in sources, methodologies, or the assumptions on which we rely. Our internal systems and tools have a number of limitations, and our methodologies for tracking these metrics may change over time, which could result in unexpected changes to our metrics, including the metrics we publicly disclose. If the internal systems and tools we use to track these metrics undercount or overcount performance or contain algorithmic or other technical errors, the data we report may not be accurate. While these numbers are based on what we believe to be reasonable estimates of our metrics for the applicable period of measurement, there are inherent challenges in measuring how our platform is used across large populations. In addition, limitations or errors with respect to how we measure data or with respect to the data that we measure may affect our understanding of certain details of our business, which could affect our long-term strategies. If our operating metrics are not accurate representations of our business, if investors do not perceive our operating metrics to be accurate, or if we discover material inaccuracies with respect to these figures, we expect that our business, reputation, financial condition, and results of operations would be adversely affected.

Previous wording

Our ability to attract new customers and increase revenue from existing customers depends in part on our ability to enhance and improve our software and to introduce new features and services. To grow our business and remain competitive, we must continue to enhance our software and develop features that reflect the constantly evolving nature of technology and our customers’ needs. For instance, with the development of next-generation solutions that utilize new and advanced features, including artificial intelligence (“AI”) and machine learning, we may be required to commit significant resources to developing new products, enhancements and developments. The success of new products, enhancements and developments depends on several factors: our anticipation of market changes and demands for product features, including timely product introduction and conclusion, sufficient customer demand, cost effectiveness in our product development efforts and the proliferation of new technologies that are able to deliver competitive products and services at lower prices, more efficiently, more conveniently or more securely. In addition, because our software is designed to operate with a variety of systems, applications, data and devices, we will need to continuously modify and enhance our software to keep pace with changes in such systems. We may not be successful in developing these modifications and enhancements. Furthermore, the addition of features and solutions to our software will increase our research and development expenses. Any new features that we develop may not be introduced in a timely or cost-effective manner or may not achieve the market acceptance necessary to generate sufficient revenue to justify the related expenses. It is difficult to predict customer adoption of new features. Such uncertainty limits our ability to forecast our future results of operations and subjects us to a number of challenges, including our ability to plan for and model future growth. If we cannot address such uncertainties and successfully develop new features, enhance our software or otherwise overcome technological challenges and competing technologies, our business and results of operations could be adversely affected.

Current wording

Our ability to attract new customers and increase revenue from existing customers depends in part on our ability to enhance and improve our software and to introduce new features and services. To grow our business and remain competitive, we must continue to enhance our software and develop features that reflect the constantly evolving nature of technology and our customers’ needs. For instance, with the development of next-generation solutions that utilize new and advanced features, including artificial intelligence (“AI”) and machine learning (“ML”), we may be required to commit significant resources to developing new products, enhancements and developments. The success of new products, enhancements and developments depends on several factors: our anticipation of market changes and demands for product features, including timely product introduction and conclusion, sufficient customer demand, cost effectiveness in our product development efforts and the proliferation of new technologies that are able to deliver competitive products and services at lower prices, more efficiently, more conveniently or more securely. In addition, because our software is designed to operate with a variety of systems, applications, data and devices, we will need to continuously modify and enhance our software to keep pace with changes in such systems. We may not be successful in developing these modifications and enhancements. Furthermore, the addition of features and solutions to our software will increase our research and development expenses. Any new features that we develop may not be introduced in a timely or cost-effective manner or may not achieve the market acceptance necessary to generate sufficient revenue to justify the related expenses. It is difficult to predict customer adoption of new features. Such uncertainty limits our ability to forecast our future results of operations and subjects us to a number of challenges, including our ability to plan for and model future growth. If we cannot address such uncertainties and successfully develop new features, enhance our software or otherwise overcome technological challenges and competing technologies, our business and results of operations could be adversely affected.

Previous wording

•the mix of revenue and associated costs attributable to subscriptions for our MongoDB Atlas and MongoDB Enterprise Advanced offerings (such as our non-cancelable multi-year cloud infrastructure capacity commitments, which require us to pay for such capacity irrespective of actual usage) and professional services, as such relative mix may impact our gross margins and operating income;

Current wording

•the mix of revenue and associated costs attributable to subscriptions for our Atlas and MongoDB Enterprise Advanced offerings (such as our non-cancelable multi-year cloud infrastructure capacity commitments, which require us to pay for such capacity irrespective of actual usage) and professional services, as such relative mix may impact our gross margins and operating income;

Previous wording

•significant security breaches or other security incidents, technical difficulties, or interruptions with respect to the delivery and use of our software;

Current wording

•significant security breaches or other security vulnerabilities, incidents, technical difficulties, or interruptions with respect to the delivery and use of our software;

Previous wording

•general economic conditions, both domestically and internationally, including warfare and terrorist attacks on the United States and other regions in which we or our customers operate, such as the Russia-Ukraine conflict and the Israel-Hamas conflict, as well as economic conditions specifically affecting industries in which our customers participate;

Current wording

•general economic conditions, both domestically and internationally, including warfare and terrorist attacks on the United States and other regions in which we or our customers operate, such as the conflict in Iran, the unrest in Mexico, the Russia-Ukraine conflict, the Israel-Hamas conflict and recent events in Venezuela, as well as economic conditions specifically affecting industries in which our customers participate;

Previous wording

The occurrence of one or more of the foregoing and other factors may cause our results of operations to vary significantly and be materially and adversely affected. For example, fluctuations in our quarterly operating results and the price of our common stock may be particularly pronounced in the current economic environment due to the ongoing geopolitical instability resulting from the conflicts between Russia and Ukraine and Israel and Hamas, severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, instability in the banking sector, increases in inflation rates, higher interest rates and uncertainty about economic stability. In response to the concerns over inflation risk, the U.S. Federal Reserve has raised interest rates multiple times, and signaled that they will continue to adjust interest rates to stabilize and reduce current levels of inflation. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response to the pandemic and macroeconomic events, and the effectiveness of those actions. Any of these factors or any combination thereof could materially and adversely affect our business, results of operations and financial condition. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the year ended January 31, 2025. We also intend to continue to invest to grow our business and to take advantage of our market opportunity. Accordingly, historical patterns and our results of operations in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. Additionally, if our quarterly results of operations fall below the expectations of investors or securities analysts who follow our stock, the price of our common stock could decline substantially and we could face costly lawsuits, including securities class action suits.

Current wording

The occurrence of one or more of the foregoing and other factors may cause our results of operations to vary significantly and be materially and adversely affected. For example, fluctuations in our quarterly operating results and the price of our common stock may be particularly pronounced in the current economic environment due to the ongoing geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflicts between Russia and Ukraine, Israel and Hamas and recent events in Venezuela, continued restrictive monetary policy in certain markets in which we operate, declines in consumer confidence, declines in economic growth, persistent inflation and uncertainty about economic stability. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response to macroeconomic events, and the effectiveness of those actions. Any of these factors or any combination thereof could materially and adversely affect our business, results of operations and financial condition. We also intend to continue to invest to grow our business and to take advantage of our market opportunity. Accordingly, historical patterns and our results of operations in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. Additionally, if our quarterly results of operations fall below the expectations of investors or securities analysts who follow our stock, the price of our common stock could decline substantially and we could face costly lawsuits, including securities class action suits. See the section titled “Legal Proceedings” included in Part I, Item 3 of this Annual Report on Form 10-K.

Previous wording

We have experienced rapid growth in our business, operations and employee headcount. For fiscal years 2025, 2024 and 2023, our total revenue was $2,006.4 million, $1,683.0 million and $1,284.0 million, respectively, representing a 19% and 31% growth rate, respectively. We have also significantly increased the size of our customer base from over 3,200 customers as of January 31, 2017 to over 54,500 customers as of January 31, 2025, and we grew from 713 employees as of January 31, 2017 to 5,558 employees as of January 31, 2025. We expect to continue to expand our operations and employee headcount in the near term. Our success will depend in part on our ability to continue to grow and to manage this growth, domestically and internationally, effectively.

Current wording

We have experienced rapid growth in our business, operations and employee headcount. For fiscal years 2026, 2025 and 2024, our total revenue was $2,463.8 million, $2,006.4 million and $1,683.0 million, respectively, representing a 23%, 19%, and 31% growth rate, respectively. We have also significantly increased the size of our customer base from over 3,200 customers as of January 31, 2017 to over 65,200 customers as of January 31, 2026, and we grew from 713 employees as of January 31, 2017 to 5,636 employees as of January 31, 2026. Our success will depend in part on our ability to continue to grow and to manage this growth, domestically and internationally, effectively.

Previous wording

Ransomware attacks, including by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems (including our products) or the third-party information technology systems that support us and our services.

Current wording

Ransomware attacks, including by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems (including our products) or the third-party information technology systems that support us and our services. Our software may also contain security flaws or vulnerabilities that expose us and our customers to an increased risk of cyberattack or exploitation.

Previous wording

The COVID-19 pandemic increased our remote workforce, which increased risks to our information technology systems and data, as more of our employees work from home, utilizing network connections, computers and devices outside our premises or network, including while at home, in transit and in public locations. Additionally, cybersecurity risks may be heightened as a result of the ongoing global conflicts such as the military conflict between Russia and Ukraine and the related sanctions imposed by the United States and other countries or the ongoing military conflict between Israel and Hamas. Furthermore, future or past business transactions (such as acquisitions or integrations) could expose us to additional data security risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Risks related to data security will increase as we continue to grow the scale and functionality of our business and collect, store, transmit and otherwise process increasingly large amounts of our and our customers’ information and data, which may include personal, proprietary, confidential or other sensitive data.

Current wording

The COVID-19 pandemic increased our remote workforce, which increased risks to our information technology systems and data, as more of our employees work from home, utilizing network connections, computers and devices outside our premises or network, including while at home, in transit and in public locations. Additionally, cybersecurity risks may be heightened as a result of the ongoing global conflicts such as the military conflict between Russia and Ukraine and the related sanctions imposed by the United States and other countries or the geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel and Hamas and recent events in Venezuela. Furthermore, future or past business transactions (such as acquisitions or integrations) could expose us to additional data security risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Risks related to data security will increase as we continue to grow the scale and functionality of our business and collect, store, transmit and otherwise process increasingly large amounts of our and our customers’ information and data, which may include personal, proprietary, confidential or other sensitive data.

Previous wording

Any of the above identified or similar threats could cause a security breach or other security incident that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure, transfer, use or other processing of, or access to our information technology systems and networks or personal, proprietary, confidential or other sensitive information, or those of the third parties upon whom we rely. For example, in December 2023 we discovered that a previously unknown flaw in a third-party application used by MongoDB enabled an unauthorized third party to successfully phish and to gain access to certain corporate applications, including applications that we use to provide support services to MongoDB customers, which include customer contact information and related account metadata. In an effort to contain the impact of this security incident, we immediately activated our incident response process, promptly published an alert on our website and emailed customers notifying them of the situation and reminding them to stay vigilant. The investigation led by MongoDB into this incident uncovered no evidence of unauthorized access to MongoDB Atlas clusters, a finding that has been verified by our third-party forensic experts. To date, we have not experienced a cybersecurity event that had a material impact on our financial performance or operations, but it is possible that we might experience such an attack in the future. A security breach or other security incident could disrupt our ability (and that of third parties upon whom we rely) to provide our platform, products, and services.

Current wording

Any of the above identified or similar threats could cause a security breach or other security incident that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure, transfer, use or other processing of, or access to our information technology systems and networks or personal, proprietary, confidential or other sensitive information, or those of the third parties upon whom we rely. For example, in December 2023 we discovered that a previously unknown flaw in a third-party application used by MongoDB enabled an unauthorized third party to successfully phish and to gain access to certain corporate applications, including applications that we use to provide support services to MongoDB customers, which include customer contact information and related account metadata. In an effort to contain the impact of this security incident, we immediately activated our incident response process, promptly published an alert on our website and emailed customers notifying them of the situation and reminding them to stay vigilant. The investigation led by MongoDB into this incident uncovered no evidence of unauthorized access to Atlas clusters, a finding that has been verified by our third-party forensic experts. To date, we have not experienced a cybersecurity event that had a material impact on our financial performance or operations, but it is possible that we might experience such an attack in the future. A security breach or other security incident could disrupt our ability (and that of third parties upon whom we rely) to provide our platform, products, and services.

Previous wording

While we have implemented security measures designed to protect against security breaches and other security incidents, there can be no assurance that these measures will be effective. We have not always been able in the past and may be unable in the future to detect vulnerabilities in our information technology systems and networks (including our products) because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security breach or other security incident has occurred. For example, industry publications have reported ransomware attacks on MongoDB instances. We believe these attacks were successful due to the failure by users of our Community Server offering to properly turn on the recommended security settings when running these instances. Despite our efforts to identify and remediate vulnerabilities, if any, in our information technology systems and networks (including our products), our efforts may not be successful. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities.

Current wording

While we have implemented security measures designed to protect against security breaches and other security incidents, there can be no assurance that these measures will be effective. We have not always been able in the past and may be unable in the future to detect vulnerabilities in our information technology systems and networks (including our products) because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security breach or other security incident has occurred. For example, industry publications have reported ransomware attacks on MongoDB instances, some of which we believe were successful due to the failure by users of our Community Server offering to properly turn on the recommended security settings when running these instances. Despite our efforts to identify and remediate vulnerabilities, if any, in our information technology systems and networks (including our products), our efforts may not be successful. As new technology, particularly AI, makes it easier to detect and understand vulnerabilities in our code, it may become easier for third parties to exploit such vulnerabilities before we can remediate them, which may require us to dedicate greater time and resources to vulnerability detection and remediation than in the past. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities.

Previous wording

If we (or a third party upon whom we rely) experience or are perceived to have experienced a security breach or other security incident, or fail to make adequate or timely disclosures to the public, regulators, law enforcement agencies or affected individuals, as applicable, following any such event, we may experience adverse consequences. These consequences may include: liability under applicable data privacy and security laws, regulations, rules, standards, contractual obligations, policies and other obligations; obligations to notify regulators and affected individuals; government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing personal and other sensitive information; litigation (including class claims); indemnification and other contractual obligations; damages; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security breaches and other security incidents and attendant consequences may cause customers to stop using our platform, products, and services, deter new customers from using our platform, products, and services, and negatively impact our ability to grow and operate our business.

Current wording

If we (or a third party upon whom we rely) experience or are perceived to have experienced a security breach or other security incident, or fail to make adequate or timely disclosures to the public, regulators, law enforcement agencies or affected individuals, as applicable, following any such event, we previously have, and may in the future, experience adverse consequences. These consequences may include: liability under applicable data privacy and security laws, regulations, rules, standards, contractual obligations, policies and other obligations; obligations to notify regulators and affected individuals; government enforcement actions (for example, investigations, fines, penalties, audits, and inspections); additional reporting requirements and/or oversight; restrictions on processing personal and other sensitive information; litigation (including class claims); indemnification and other contractual obligations; damages; negative publicity; reputational harm; monetary fund diversions; interruptions in our operations (including availability of data); financial loss; and other similar harms. Security breaches and other security incidents and attendant consequences may cause customers to stop using our platform, products, and services, deter new customers from using our platform, products, and services, and negatively impact our ability to grow and operate our business.

Previous wording

Even if we do attract new customers, the cost of new customer acquisition, product implementation and ongoing customer support may prove so high as to prevent us from achieving or sustaining profitability. For example, in fiscal years 2025, 2024 and 2023, total sales and marketing expense represented 43%, 47% and 54% of revenue, respectively. We intend to continue to hire additional sales personnel, increase our marketing activities to help educate the market about the benefits of our platform and services, grow our domestic and international operations and build brand awareness. We also intend to continue to cultivate our relationships with developers through continued investment in our MongoDB.local events, MongoDB Advocacy Hub, User Groups, MongoDB University and our partner ecosystem of global system integrators, value-added resellers and independent software vendors. If the costs of these sales and marketing efforts increase dramatically, if we do not experience a substantial increase in leverage from our partner ecosystem, or if our sales and marketing efforts do not result in substantial increases in revenue, our business, results of operations and financial condition may be adversely affected. In addition, while we expect to continue to invest in our professional services organization to accelerate our customers’ ability to adopt our products and ultimately create and expand their use of our products over time, we cannot assure you that any of these investments will lead to the cost-effective acquisition of additional customers.

Current wording

Even if we do attract new customers, the cost of new customer acquisition, product implementation and ongoing customer support may prove so high as to prevent us from achieving or sustaining profitability. For example, in fiscal years 2026, 2025 and 2024, total sales and marketing expense represented 38%, 43% and 47% of revenue, respectively. We intend to continue to hire additional sales personnel, increase our marketing activities to help educate the market about the benefits of our platform and services, grow our domestic and international operations and build brand awareness. We also intend to continue to cultivate our relationships with developers through continued investment in our MongoDB.local events, MongoDB Advocacy Hub, User Groups, MongoDB University and our partner ecosystem of global system integrators, value-added resellers and independent software vendors. If the costs of these sales and marketing efforts increase dramatically, if we do not experience a substantial increase in leverage from our partner ecosystem, or if our sales and marketing efforts do not result in substantial increases in revenue, our business, results of operations and financial condition may be adversely affected. In addition, while we expect to continue to invest in our professional services organization to accelerate our customers’ ability to adopt our products and ultimately create and expand their use of our products over time, we cannot assure you that any of these investments will lead to the cost-effective acquisition of additional customers.

Previous wording

Internationally, virtually every jurisdiction in which we operate has established its own data privacy and security legal framework with which we or our customers must comply, including, but not limited to, the European Economic Area (“E.E.A.”), Switzerland, the United Kingdom (“U.K.”), Canada, Brazil and other countries. The collection, use, disclosure, transfer, or other processing of personal data regarding individuals in the E.E.A. is subject to the General Data Protection Regulation (the “GDPR”), and other European laws governing the processing of personal data. Data protection authorities in the E.E.A. have the power to impose administrative fines for violations of the GDPR of up to a maximum of €20 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. Further, the GDPR provides for private litigation related to the processing of personal data that can be brought by classes of data subjects or consumer protection organizations authorized at law to represent the data subjects’ interests. Since we act as a data processor for our MongoDB Atlas customers, we have taken steps to cause our processes to be compliant with applicable portions of the GDPR, but because of the ambiguities in the GDPR and the evolving interpretation of the GDPR by data protection authorities, we cannot assure you that such steps are complete or effective.

Current wording

Internationally, virtually every jurisdiction in which we operate has established its own data privacy and security legal framework with which we or our customers must comply, including, but not limited to, the European Economic Area (“E.E.A.”), Switzerland, the United Kingdom (“U.K.”), Canada, Brazil and other countries. The collection, use, disclosure, transfer, or other processing of personal data regarding individuals in the E.E.A. is subject to the General Data Protection Regulation (the “GDPR”), and other European laws governing the processing of personal data. Data protection authorities in the E.E.A. have the power to impose administrative fines for violations of the GDPR of up to a maximum of €20 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. Further, the GDPR provides for private litigation related to the processing of personal data that can be brought by classes of data subjects or consumer protection organizations authorized at law to represent the data subjects’ interests. Since we act as a data processor for our Atlas customers, we have taken steps to cause our processes to be compliant with applicable portions of the GDPR, but because of the ambiguities in the GDPR and the evolving interpretation of the GDPR by data protection authorities, we cannot assure you that such steps are complete or effective.

Previous wording

Following the exit of the U.K. from the European Union (“E.U.”), the GDPR was transposed into U.K. law (the “U.K. GDPR”) as supplemented by the U.K. Data Protection Act 2018, which currently imposes the same obligations as the GDPR in most material respects. Failure to comply with the U.K. GDPR can result in fines up to a maximum of £17.5 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. However, the U.K. GDPR will not automatically incorporate changes made to the GDPR going forward (which would need to be specifically incorporated by the U.K. government). Moreover, the U.K. government has publicly announced plans to reform the U.K. GDPR in ways that, if formalized, are likely to deviate from the GDPR, all of which creates a risk of divergent parallel regimes and related uncertainty, along with the potential for increased compliance costs and risks for affected businesses.

Current wording

Following the exit of the U.K. from the European Union (“E.U.”), the GDPR was transposed into U.K. law (the “U.K. GDPR”) as supplemented by the U.K. Data Protection Act 2018, which currently imposes the same obligations as the GDPR in most material respects. Failure to comply with the U.K. GDPR can result in fines up to a maximum of £17.5 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. However, the U.K. GDPR will not automatically incorporate changes made to the GDPR going forward (which would need to be specifically incorporated by the U.K. government). Moreover, the U.K. government has adopted reforms to its data privacy and cybersecurity legal framework in its Data (Use and Access) Act 2025, which became law on June 19, 2025 (phasing in between June 2025 and June 2026) and which will introduce significant changes from the GDPR, all of which creates a risk of divergent parallel regimes and related uncertainty, along with the potential for increased compliance costs and risks for affected businesses.

Previous wording

The European Commission also revised its Cybersecurity Directive (“NIS2”), which came into force in January 2023 and applies extraterritorially similar to the GDPR. Among other things, NIS2 requires companies providing essential and digital services across key sectors in the EU economy, including cloud services providers, to adopt or update policies and procedures on issues such as incident handling and supply chain security. EU Member States have flexibility in identifying the types of entities considered “essential.” The deadline for EU Member States to transpose NIS2 into national law was October 17, 2024. However only a small number of Member States have met that deadline, creating ongoing uncertainty around how NIS2 will impact our business. In addition, the EU’s Digital Operational Resiliency Act (“DORA”) for the financial sector took effect in January 2025. DORA standardizes how financial entities report cybersecurity incidents, test their digital operational resilience, and manage ICT third-party risk across the financial services sector and EU member states. We have taken steps to ensure our contracts with EU financial sector customers are DORA-compliant, however we cannot assure you that such steps are complete or effective.

Current wording

The European Commission also revised its Cybersecurity Directive (“NIS2”), which came into force in January 2023 and applies extraterritorially similar to the GDPR. Among other things, NIS2 requires companies providing essential and digital services across key sectors in the EU economy, including cloud services providers, to adopt or update policies and procedures on issues such as incident handling and supply chain security. However, EU Member States have flexibility in identifying the types of entities considered “essential,” and many EU Member States have not yet fully transposed NIS2 into national law, creating ongoing uncertainty around how NIS2 will impact our business. Moreover, in January 2026, the European Commission proposed amendments to NIS2, which are still being finalized. In addition, the EU’s Digital Operational Resiliency Act (“DORA”) for the financial sector took effect in January 2025. DORA standardizes how financial entities report cybersecurity incidents, test their digital operational resilience, and manage ICT third-party risk across the financial services sector and EU member states. We have taken steps to ensure our contracts with EU financial sector customers are DORA-compliant, however we cannot assure you that such steps are complete or effective.

Previous wording

Countries outside Europe are implementing significant limitations on the processing of personal data, similar to those in the GDPR. For example, Brazil has enacted the General Data Protection Law (Lei Geral Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018). In addition, on June 5, 2020, Japan passed amendments to its Act on the Protection of Personal data, or APPI, which entered into force on April 1, 2022. Both of these laws broadly regulate the processing of personal data in a manner comparable to the GDPR, and violators of the LGPD and APPI face substantial penalties.

Current wording

Countries outside Europe are implementing significant limitations on the processing of personal data, similar to those in the GDPR. For example, Brazil has enacted the General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018). In addition, on June 5, 2020, Japan passed amendments to its Act on the Protection of Personal data, or APPI, which entered into force on April 1, 2022. Both of these laws broadly regulate the processing of personal data in a manner comparable to the GDPR, and violators of the LGPD and APPI face substantial penalties.

Previous wording

Some foreign data privacy and security laws, including, without limitation, the GDPR, the U.K. GDPR, and the Swiss Federal Act on Data Protection may restrict the cross-border transfer of personal data, such as transfers of data to the United States from the E.E.A., Switzerland or U.K. These laws may require data exporters and data importers - as a condition of cross-border data transfers - to implement specific safeguards to protect the transferred personal data. Existing mechanisms that facilitate cross-border personal data transfers may change or be invalidated. For example, the GDPR generally restricts the transfer of personal data to countries outside of the E.E.A. that the European Commission does not consider to provide an adequate level of data privacy and security, such as the United States, unless the parties to the transfer have implemented specific safeguards to protect the transferred personal data, such as, most commonly, the “Standard Contractual Clauses” (“SCCs”) released by the European Commission. Use of the SCCs imposes additional compliance burdens, such as conducting transfer impact assessments to determine whether additional security measures are necessary to protect the at-issue personal data. Although the U.K. currently has an adequacy decision from the European Commission, such that SCCs are not required for the transfer of personal data from the E.E.A. to the U.K., that decision will sunset in June 2025 unless extended and it may be revoked in the future by the European Commission if the U.K. data protection regime is reformed in ways that deviate substantially from the GDPR. Adding further complexity for international data transfers, in March 2022, the U.K. adopted its own International Data Transfer Agreement for transfers of personal data out of the U.K. to so-called third countries, as well as an international data transfer addendum that can be used with the SCCs for the same purpose. Moreover, on July 10, 2023 the European Commission adopted an adequacy decision concluding that the United States ensures an adequate level of protection for personal data transferred from the E.U. to the U.S. under the EU-U.S. Data Privacy Framework.

Current wording

Some foreign data privacy and security laws, including, without limitation, the GDPR, the U.K. GDPR, and the Swiss Federal Act on Data Protection may restrict the cross-border transfer of personal data, such as transfers of data to the United States from the E.E.A., Switzerland or U.K. These laws may require data exporters and data importers - as a condition of cross-border data transfers - to implement specific safeguards to protect the transferred personal data. Existing mechanisms that facilitate cross-border personal data transfers may change or be invalidated. For example, the GDPR generally restricts the transfer of personal data to countries outside of the E.E.A. that the European Commission does not consider to provide an adequate level of data privacy and security, such as the United States, unless the parties to the transfer have implemented specific safeguards to protect the transferred personal data, such as, most commonly, the “Standard Contractual Clauses” (“SCCs”) released by the European Commission. Use of the SCCs imposes additional compliance burdens, such as conducting transfer impact assessments to determine whether additional security measures are necessary to protect the at-issue personal data. Although the U.K. currently has an adequacy decision from the European Commission, such that SCCs are not required for the transfer of personal data from the E.E.A. to the U.K., that decision will sunset in December 2031 and it may be revoked in the future by the European Commission if the U.K. data protection regime is reformed in ways that deviate substantially from the GDPR. Adding further complexity for international data transfers, in March 2022, the U.K.

Previous wording

In addition to the GDPR, other European legislative proposals and present laws and regulations apply to cookies and similar tracking technologies, electronic communications, and marketing. In the E.E.A. and the U.K., regulators are increasingly focusing on compliance with requirements related to the online behavioral advertising ecosystem. For example, it is anticipated that the ePrivacy Regulation, which is still being negotiated, and national implementing laws will replace the current national laws implementing the ePrivacy Directive. Compliance with these laws and regulations may require us to make significant operational changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to liabilities.

Current wording

In addition to the GDPR, other European legislative proposals and present laws and regulations apply to cookies and similar tracking technologies, electronic communications, and marketing. In the E.E.A. and the U.K., regulators are increasingly focusing on compliance with requirements related to the online behavioral advertising ecosystem. Although the European Commission officially withdrew the long-stalled ePrivacy Regulation in February 2025, they immediately replaced that effort with a new reform package in late 2025 called the “Digital Omnibus”. Compliance with these laws and regulations may require us to make significant operational changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to liabilities.

Previous wording

Our success and ability to compete depend in part upon our intellectual property rights. As of January 31, 2025, we had 84 issued patents and 47 pending patent applications in the United States. Patent applications may not result in issued patents and even if a patent issues, we cannot assure you that such patent will be adequate to protect our business. In addition to patent protection, we primarily rely on copyright and trademark laws, trade secret protection and confidentiality or other contractual arrangements with our employees, customers, partners and others to protect our intellectual property rights. However, the steps we take to protect our intellectual property rights may not be adequate and we may be unable to detect the unauthorized use of, or prevent third parties from infringing, misappropriating or otherwise violating, our intellectual property rights. In order to protect our intellectual property rights, we may be required to spend significant resources to establish, monitor and enforce such rights. Litigation brought to enforce our intellectual property rights could be costly, time-consuming and distracting to management and could be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Additionally, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential information could be compromised by disclosure during this type of litigation. An adverse determination of any litigation proceedings could put our intellectual property at risk of being invalidated, interpreted narrowly or held unenforceable and could put our related intellectual property at risk of not issuing or being canceled. The local laws of some foreign countries do not protect our intellectual property rights to the same extent as the laws of the United States and effective intellectual property protection and mechanisms may not be available in those jurisdictions. We may need to expend additional resources to defend our intellectual property in these countries and our inability to do so could impair our business or adversely affect our international expansion. Our patent applications and patents arising from any patent applications we may file in the future may never be granted and, even if we are successful in obtaining effective protection, it is expensive to maintain these rights, both in terms of application and maintenance costs, and the time and cost required to defend our rights could be substantial. Additionally, the process of obtaining patent protection is expensive and time-consuming, and we may be unable to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Even if we are able to secure our intellectual property rights, there can be no assurances that such rights will provide us with competitive advantages or distinguish our products and…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Our success and ability to compete depend in part upon our intellectual property rights. As of January 31, 2026, we had 101 issued patents and 44 pending patent applications in the United States. Patent applications may not result in issued patents and even if a patent issues, we cannot assure you that such patent will be adequate to protect our business. In addition to patent protection, we primarily rely on copyright and trademark laws, trade secret protection and confidentiality or other contractual arrangements with our employees, customers, partners and others to protect our intellectual property rights. However, the steps we take to protect our intellectual property rights may not be adequate and we may be unable to detect the unauthorized use of, or prevent third parties from infringing, misappropriating or otherwise violating, our intellectual property rights. In order to protect our intellectual property rights, we may be required to spend significant resources to establish, monitor and enforce such rights. Litigation brought to enforce our intellectual property rights could be costly, time-consuming and distracting to management and could be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Additionally, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential information could be compromised by disclosure during this type of litigation. An adverse determination of any litigation proceedings could put our intellectual property at risk of being invalidated, interpreted narrowly or held unenforceable and could put our related intellectual property at risk of not issuing or being canceled. The local laws of some foreign countries do not protect our intellectual property rights to the same extent as the laws of the United States and effective intellectual property protection and mechanisms may not be available in those jurisdictions. We may need to expend additional resources to defend our intellectual property in these countries and our inability to do so could impair our business or adversely affect our international expansion. Our patent applications and patents arising from any patent applications we may file in the future may never be granted and, even if we are successful in obtaining effective protection, it is expensive to maintain these rights, both in terms of application and maintenance costs, and the time and cost required to defend our rights could be substantial. Additionally, the process of obtaining patent protection is expensive and time-consuming, and we may be unable to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Even if we are able to secure our intellectual property rights, there can be no assurances that such rights will provide us with competitive advantages or distinguish our products an…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We outsource substantially all of the infrastructure relating to MongoDB Atlas across AWS, Microsoft Azure and GCP to host our cloud offering. If the hosting of MongoDB Atlas is disrupted or interfered with for any reason, our business would be negatively impacted. Customers of MongoDB Atlas need to be able to access our platform at any time, without interruption or degradation of performance and we provide them with service level commitments with respect to uptime. Third-party cloud providers run their own platforms that we access and we are, therefore, vulnerable to their service interruptions. We may experience interruptions, delays and outages in service and availability from time to time as a result of problems with our third-party cloud providers’ infrastructure. Lack of availability of this infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud, cyberattacks, or security breaches or other security incidents that we cannot predict or prevent. Such interruptions, delays or outages could lead to the triggering of our service level agreements and the issuance of credits to our cloud offering customers, which may impact our business, results of operations and financial condition. In addition, if we or any of these third-party cloud providers, experience a security breach or other security incident, our software is unavailable or our customers are unable to use our software within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected. In some instances, we may not be able to identify the cause or causes of these performance problems within a period of time acceptable to our customers. It is possible that our customers and potential customers would hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability from those customers and from third parties with respect to any breach affecting these systems. We may not be able to recover a material portion of our liabilities to our customers and third parties from a third-party cloud provider. It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Any of the above circumstances or events may harm our business, results of operations and financial condition.

Current wording

We outsource substantially all of the infrastructure relating to Atlas across AWS, Microsoft Azure and GCP to host our cloud offering. If the hosting of Atlas is disrupted or interfered with for any reason, our business would be negatively impacted. Customers of Atlas need to be able to access our platform at any time, without interruption or degradation of performance and we provide them with service level commitments with respect to uptime. Third-party cloud providers run their own platforms that we access and we are, therefore, vulnerable to their service interruptions. We may experience interruptions, delays and outages in service and availability from time to time as a result of problems with our third-party cloud providers’ infrastructure. Lack of availability of this infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud, cyberattacks, or security breaches or other security incidents that we cannot predict or prevent. Such interruptions, delays or outages could lead to the triggering of our service level agreements and the issuance of credits to our cloud offering customers, which may impact our business, results of operations and financial condition. In addition, if we or any of these third-party cloud providers, experience a security breach or other security incident, our software is unavailable or our customers are unable to use our software within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected. In some instances, we may not be able to identify the cause or causes of these performance problems within a period of time acceptable to our customers. It is possible that our customers and potential customers would hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability from those customers and from third parties with respect to any breach affecting these systems. We may not be able to recover a material portion of our liabilities to our customers and third parties from a third-party cloud provider. It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Any of the above circumstances or events may harm our business, results of operations and financial condition.

Previous wording

Our agreements with customers typically provide for service level commitments. Our MongoDB Enterprise Advanced customers typically get service level commitments with certain guaranteed response times and comprehensive 24x365 coverage. Our MongoDB Atlas customers typically get monthly uptime service level commitments, where we are required to provide a service credit for any extended periods of downtime. The complexity and quality of our customer’s implementation and the performance and availability of cloud services and cloud infrastructure are outside our control and, therefore, we are not in full control of whether we can meet these service level commitments. Our business, results of operations and financial condition could be adversely affected if we fail to meet our service level commitments for any reason. Any extended service outages could adversely affect our business, reputation and brand.

Current wording

Our agreements with customers typically provide for service level commitments. Our MongoDB Enterprise Advanced customers typically get service level commitments with certain guaranteed response times and comprehensive 24x365 coverage. Our Atlas customers typically get monthly uptime service level commitments, where we are required to provide a service credit for any extended periods of downtime. The complexity and quality of our customer’s implementation and the performance and availability of cloud services and cloud infrastructure are outside our control and, therefore, we are not in full control of whether we can meet these service level commitments. Our business, results of operations and financial condition could be adversely affected if we fail to meet our service level commitments for any reason. Any extended service outages could adversely affect our business, reputation and brand.

Previous wording

We believe our success has depended, and continues to depend, on the efforts and talents of our senior management team, particularly our Chief Executive Officer, and our highly skilled team members, including our sales personnel, customer-facing technical personnel and software engineers.

Current wording

We believe our success has depended, and continues to depend, on the efforts and talents of our senior management team, particularly our Chief Executive Officer, and our highly skilled team members, including our sales personnel, customer-facing technical personnel, software engineers, and AI-researchers or AI-skilled personnel.

Previous wording

Our ability to successfully pursue our growth strategy and compete effectively also depends on our ability to attract, motivate and retain our personnel. Competition for well-qualified employees in all aspects of our business, including sales personnel, customer-facing technical personnel and software engineers, is intense, and it may be even more challenging to retain qualified personnel as many companies have moved to offer a remote or hybrid work environment. Our recruiting efforts focus on elite organizations and our primary recruiting competition are well-known, high-paying technology companies. In response to competition, rising inflation rates and labor shortages, we may need to adjust employee compensation, which could affect our operating costs and margins, as well as potentially cause dilution to existing stockholders. We may also lose new employees to our competitors or other technology companies before we realize the benefit of our investment in recruiting and training them. If we do not succeed in attracting well-qualified employees or retaining and motivating existing employees, our business would be adversely affected.

Current wording

Our ability to successfully pursue our growth strategy and compete effectively also depends on our ability to attract, motivate and retain our personnel. Competition for well-qualified employees in all aspects of our business, including sales personnel, customer-facing technical personnel, software engineers, and AI-researchers or AI-skilled personnel, is intense, and it may be even more challenging to retain qualified personnel as many companies have moved to offer a remote or hybrid work environment. Our recruiting efforts focus on elite organizations and our primary recruiting competition are well-known, high-paying technology companies. In response to competition, rising inflation rates and labor shortages, we may need to adjust employee compensation, which could affect our operating costs and margins, as well as potentially cause dilution to existing stockholders. We may also lose new employees to our competitors or other technology companies before we realize the benefit of our investment in recruiting and training them. If we do not succeed in attracting well-qualified employees or retaining and motivating existing employees, our business would be adversely affected.

Previous wording

We believe that our culture has been and will continue to be a key contributor to our success. Our workforce has increased significantly from January 31, 2017 and we expect to continue to hire as we expand, especially among research and development and sales and marketing personnel. Such headcount growth may result in a change to our corporate culture.

Current wording

We believe that our culture has been and will continue to be a key contributor to our success. Our workforce has increased significantly since our initial public offering in 2017 and we expect to continue to hire as we expand, especially among research and development and sales and marketing personnel. Such headcount growth may result in a change to our corporate culture.

Previous wording

A significant portion of our revenue is derived internationally and we are susceptible to risks related to our international operations. In the fiscal years ended January 31, 2025, 2024 and 2023, total revenue generated from customers outside the United States was 46%, 46% and 45%, respectively, of our total revenue. We currently have international offices outside of North America in Europe, the Middle East and Africa (“EMEA”), the Asia-Pacific region and South America, focusing primarily on selling our products and services in those regions. In addition, we expanded our reach in China in February 2021 when we announced a global partnership with Tencent Cloud that allows customers to easily adopt and use MongoDB-as-a-Service across Tencent’s global cloud infrastructure. In the future, we may continue to expand our presence in these regions or expand into other international locations. Our current international operations and future initiatives involve a variety of risks, including risks associated with:

Current wording

A significant portion of our revenue is derived internationally and we are susceptible to risks related to our international operations. In the fiscal years ended January 31, 2026, 2025 and 2024, total revenue generated from customers outside the United States was 46%, 46% and 46%, respectively, of our total revenue. We currently have international offices outside of North America in Europe, the Middle East and Africa (“EMEA”), the Asia-Pacific region and South America, focusing primarily on selling our products and services in those regions. In addition, we expanded our reach in China in February 2021 when we announced a global partnership with Tencent Cloud that allows customers to easily adopt and use MongoDB-as-a-Service across Tencent’s global cloud infrastructure. In the future, we may continue to expand our presence in these regions or expand into other international locations. Our current international operations and future initiatives involve a variety of risks, including risks associated with: