MongoDB, Inc.

Previous wording

Our operations and financial results are subject to various risks and uncertainties including those described below. You should consider carefully the risks and uncertainties described below, in addition to other information contained in this Form 10-Q, including our consolidated financial statements and related notes. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, may also become important factors that adversely affect our business. If any of the following risks or others not specified below materialize, our business, financial condition and results of operations could be materially and adversely affected. In that case, the trading price of our common stock could decline.

Current wording

Our operations and financial results are subject to various risks and uncertainties including those described below. You should consider carefully the risks and uncertainties described below, in addition to other information contained in this Form 10-Q, including our condensed consolidated financial statements and related notes. The risks and uncertainties described below are not the only ones we face. Additional risks and uncertainties that we are unaware of, or that we currently believe are not material, may also become important factors that adversely affect our business. If any of the following risks or others not specified below materialize, our business, financial condition and results of operations could be materially and adversely affected. In that case, the trading price of our common stock could decline.

Previous wording

•Because we derive more than the majority of our revenue from MongoDB Atlas, failure of MongoDB Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict.

Current wording

•Because we derive more than the majority of our revenue from Atlas, failure of Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict.

Previous wording

Our overall performance depends in part on worldwide economic conditions and our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. The revenue growth and potential profitability of our business depend on demand for database software and services generally and for our subscription offering and related services in particular. Current or future economic uncertainties or downturns could materially and adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, labor shortages, supply chain disruptions, inflationary pressures, rising interest rates, financial and credit market fluctuations, changes in trade policies, such as trade wars, tariffs or other trade restrictions or the threat of such actions, international trade relations, political turmoil, natural catastrophes, regional or global outbreaks of contagious diseases, such as the COVID-19 pandemic, volatility in the banking sector, warfare and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, such as the conflict in the Middle East, could cause a decrease in business investments, including spending on information technology, disrupt the timing and cadence of key industry and marketing events and otherwise could materially and adversely affect the growth of our business and results of operations. Geopolitical risks, including those arising from trade tension and/or the imposition of trade tariffs, terrorist activity or acts of civil or international hostility, are increasing. In particular, there is currently significant uncertainty about trade policies, treaties, tariffs and taxes, which may lead to continuing volatility in U.S. and global financial and economic conditions and commodity markets, declining consumer confidence, significant inflation and diminished expectations for the economy, and which may ultimately lead to reduced usage or demand for our products. Similarly, the ongoing military conflict between Russia and Ukraine has had negative impacts on the global economy, including by contributing to rapidly rising costs of living (driven largely by higher energy prices) in Europe and creating uncertainty in the global capital markets and is expected to have further global economic consequences, including disruptions of the global supply chain and energy markets. The ongoing military conflict between Israel and Hamas, and any resulting conflicts in the region, may have similar negative impacts. Further, other events outside of our control, including natural disasters, climate change-related events, pandemics (such as the COVID-19 pandemic) or health crises may arise from time to time and be accompanied by governmental actions that may increase international tension. Any such events and responses, including regulatory developme…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Our overall performance depends in part on worldwide economic conditions and our results of operations may vary based on the impact of changes in our industry or the global economy on us or our customers. The revenue growth and potential profitability of our business depend on demand for database software and services generally and for our subscription offering and related services in particular. Current or future economic uncertainties or downturns could materially and adversely affect our business and results of operations. Negative conditions in the general economy both in the United States and abroad, including conditions resulting from changes in gross domestic product growth, labor shortages, supply chain disruptions, inflationary pressures, rising interest rates, financial and credit market fluctuations, changes in trade policies, such as trade wars, tariffs or other trade restrictions or the threat of such actions, international trade relations, political turmoil, natural catastrophes, regional or global outbreaks of contagious diseases, such as the COVID-19 pandemic, volatility in the banking sector, warfare and terrorist attacks on the United States, Europe, the Asia Pacific region or elsewhere, such as the conflict in the Middle East, could cause a decrease in business investments, including spending on information technology, disrupt the timing and cadence of key industry and marketing events and otherwise could materially and adversely affect the growth of our business and results of operations. Geopolitical risks, including those arising from trade tension and/or the imposition of trade tariffs, terrorist activity or acts of civil or international hostility, are increasing. In particular, there is currently significant uncertainty about trade policies, treaties, tariffs and taxes, which may lead to continuing volatility in U.S. and global financial and economic conditions and commodity markets, declining consumer confidence, significant inflation and diminished expectations for the economy, and which may ultimately lead to reduced usage or demand for our products. Similarly, the ongoing military conflict between Russia and Ukraine has had negative impacts on the global economy, including by contributing to rapidly rising costs of living (driven largely by higher energy prices) in Europe and creating uncertainty in the global capital markets and is expected to have further global economic consequences, including disruptions of the global supply chain and energy markets. The geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel and Hamas and recent events in Venezuela, and any resulting conflicts in the respective regions, may have similar negative impacts. Further, other events outside of our control, including natural disasters, climate change-related events, pandemics (such as the COVID-19 pandemic) or health crises may arise from time to time and be accompanied by governmen…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Additionally, the global economy, including credit and financial markets, has experienced extreme volatility and disruptions and may continue to experience such disruptions in the future, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability. As a result of these factors, our revenues may be affected by both decreased customer acquisition and lower than anticipated revenue growth from existing customers. For example, the COVID-19 pandemic resulted in widespread unemployment, economic slowdown and extreme volatility. Similarly, the ongoing military conflict between Russia and Ukraine has created extreme volatility in the global capital markets and has caused and could continue to cause disruptions of the global supply chain and energy markets. The ongoing military conflict between Israel and Hamas, and any resulting conflicts in the region, has caused and may continue to cause similar negative impacts. Any such volatility and disruptions may have material and adverse consequences on us, the third parties on whom we rely or our customers. Increased inflation and/or interest rates can adversely affect us by increasing our costs, including labor and employee benefit costs. Any significant increases in inflation and related increase in interest rates could have a material and adverse effect on our business, financial condition or results of operations.

Current wording

Additionally, the global economy, including credit and financial markets, has experienced extreme volatility and disruptions and may continue to experience such disruptions in the future, including severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, increases in inflation rates, higher interest rates and uncertainty about economic stability. As a result of these factors, our revenues may be affected by both decreased customer acquisition and lower than anticipated revenue growth from existing customers. For example, the COVID-19 pandemic resulted in widespread unemployment, economic slowdown and extreme volatility. Similarly, the ongoing military conflict between Russia and Ukraine has created extreme volatility in the global capital markets and has caused and could continue to cause disruptions of the global supply chain and energy markets. The geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel and Hamas and recent events in Venezuela, and any resulting conflicts in the respective regions, has caused and may continue to cause similar negative impacts. Any such volatility and disruptions may have material and adverse consequences on us, the third parties on whom we rely or our customers. Increased inflation and/or interest rates can adversely affect us by increasing our costs, including labor and employee benefit costs. Any significant increases in inflation and related increase in interest rates could have a material and adverse effect on our business, financial condition or results of operations.

Previous wording

We have incurred net losses in each period since our inception, including net losses of $129.1 million, $176.6 million and $345.4 million for the fiscal years ended January 31, 2025, 2024 and 2023, respectively. We had an accumulated deficit of $1.8 billion as of January 31, 2025. We expect our operating expenses to increase significantly as we increase our sales and marketing efforts, continue to invest in research and development and expand our operations and infrastructure, both domestically and internationally. In particular, we have entered into non-cancelable multi-year capacity commitments with respect to cloud infrastructure services with certain third-party cloud providers, which require us to pay for such capacity irrespective of actual usage. In addition, we have incurred and expect to continue to incur significant additional legal, accounting and other expenses related to being a public company. While our revenue has grown in recent years, if our revenue declines or fails to grow at a rate faster than these increases in our operating expenses, we will not be able to achieve and maintain profitability in future periods. As a result, we expect to continue to generate losses. We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain profitability.

Current wording

We have generated net income of $4.4 million for the three months ended April 30, 2026 and net losses of $71.2 million, $129.1 million, and $176.6 million for the fiscal years ended January 31, 2026, 2025 and 2024, respectively. We had an accumulated deficit of $1,907.4 million as of April 30, 2026. While we have experienced significant growth in revenue in recent periods, and have achieved profitability during certain periods, we cannot assure you when or whether we will reach sustained profitability. We expect our operating expenses to increase significantly as we increase our sales and marketing efforts, continue to invest in research and development and expand our operations and infrastructure, both domestically and internationally. In particular, we have entered into non-cancelable multi-year capacity commitments with respect to cloud infrastructure services with certain third-party cloud providers, which require us to pay for such capacity irrespective of actual usage. In addition, we have incurred and expect to continue to incur significant additional legal, accounting and other expenses related to being a public company. While our revenue has grown in recent years, if our revenue declines or fails to grow at a rate faster than these increases in our operating expenses, we will not be able to achieve and maintain profitability in future periods. As a result, we expect to continue to generate losses. We cannot assure you that we will achieve profitability in the future or that, if we do become profitable, we will be able to sustain profitability.

Previous wording

Because we derive more than the majority of our revenue from MongoDB Atlas, failure of MongoDB Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict.

Current wording

Because we derive more than the majority of our revenue from Atlas, failure of Atlas to satisfy customer demands could adversely affect our business, results of operations, financial condition and growth prospects and our future revenue may be more difficult to predict.

Previous wording

We derive and expect to continue to derive more than the majority of our revenue from MongoDB Atlas, our database-as-a-service offering, which is primarily recognized on a usage-basis. As such, market adoption and usage of MongoDB Atlas is critical to our continued success. Although MongoDB Atlas has seen rapid adoption since its commercial launch in June 2016, and though we intend to continue to direct a significant portion of our financial and operating resources to develop and grow MongoDB Atlas, including offering a free tier of MongoDB Atlas to generate developer usage and awareness, we cannot guarantee that rate of adoption will continue at the same pace or at all. Demand for MongoDB Atlas is affected by a number of factors, many of which are beyond our control, including economic downturns, continued market acceptance by developers, the availability of our Community Server offering, the continued volume, variety and velocity of data that is generated, timing of development and release of new offerings by our competitors, technological change and the rate of growth in our market. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the nine months ended October 31, 2025. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results and growth prospects will be materially and adversely affected. In addition, because our customers’ usage of MongoDB Atlas may vary for a number of reasons, our visibility into the timing of revenue recognition is limited. There is a risk that customers will consume our MongoDB Atlas offering more slowly than we expect, and our actual results may differ from our forecasts and our future revenue may be less predictable going forward due to, among other things, fluctuations in the rate of customer renewals and expansions and seasonality of, or fluctuations in, usage of MongoDB Atlas.

Current wording

We derive and expect to continue to derive more than the majority of our revenue from Atlas, our database-as-a-service offering, which is primarily recognized on a usage-basis. As such, market adoption and usage of Atlas is critical to our continued success. Although Atlas has seen rapid adoption since its commercial launch in June 2016, and though we intend to continue to direct a significant portion of our financial and operating resources to develop and grow Atlas, including offering a free tier of Atlas to generate developer usage and awareness, we cannot guarantee that rate of adoption will continue at the same pace or at all. Demand for Atlas is affected by a number of factors, many of which are beyond our control, including economic downturns, continued market acceptance by developers, the availability of our Community Server offering, the continued volume, variety and velocity of data that is generated, timing of development and release of new offerings by our competitors, technological change and the rate of growth in our market. If we are unable to continue to meet the demands of our customers and the developer community, our business operations, financial results and growth prospects will be materially and adversely affected. In addition, because our customers’ usage of Atlas may vary for a number of reasons, our visibility into the timing of revenue recognition is limited. There is a risk that customers will consume our Atlas offering more slowly than we expect, and our actual results may differ from our forecasts and our future revenue may be less predictable going forward due to, among other things, fluctuations in the rate of customer renewals and expansions and seasonality of, or fluctuations in, usage of Atlas.

Previous wording

Our adoption strategies include offering Community Server and a free tier of MongoDB Atlas and we may not be able to realize the intended benefits of these strategies.

Current wording

Our adoption strategies include offering Community Server and a free tier of Atlas and we may not be able to realize the intended benefits of these strategies.

Previous wording

To encourage developer usage, familiarity and adoption of our platform, we offer Community Server as a “freemium” offering. Community Server is a free-to-download version of our database that does not include all of the features of our commercial platform. We also offer a free tier of MongoDB Atlas in order to accelerate adoption, promote usage and drive brand and product awareness. We do not know if we will be able to convert these users to paying customers of our platform. Our marketing strategy also depends in part on persuading users who use one of these free versions to convince others within their organization to purchase and deploy our platform. To the extent that users of Community Server or our free tier of MongoDB Atlas do not become, or lead others to become, paying customers, we will not realize the intended benefits of these strategies and our ability to grow our business or achieve profitability may be harmed.

Current wording

To encourage developer usage, familiarity and adoption of our platform, we offer Community Server as a “freemium” offering. Community Server is a free-to-download version of our database that does not include all of the features of our commercial platform. We also offer a free tier of Atlas in order to accelerate adoption, promote usage and drive brand and product awareness. We do not know if we will be able to convert these users to paying customers of our platform. Our marketing strategy also depends in part on persuading users who use one of these free versions to convince others within their organization to purchase and deploy our platform. To the extent that users of Community Server or our free tier of Atlas do not become, or lead others to become, paying customers, we will not realize the intended benefits of these strategies and our ability to grow our business or achieve profitability may be harmed.

Previous wording

We track certain operational metrics, including annualized recurring revenue (“ARR”), annualized monthly recurring revenue (“MRR”), ARR expansion rate, total customers, direct sales customers, MongoDB Atlas customers, customers over 100K and downloads of our platform and non-GAAP metrics such as non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP income (loss) from operations, non-GAAP net income (loss), non-GAAP net income (loss) per share and free cash flow. These operational metrics are tracked with internal systems and tools that are not independently verified by any third party and which may differ from estimates or similar metrics published by third parties due to differences in sources, methodologies, or the assumptions on which we rely. Our internal systems and tools have a number of limitations, and our methodologies for tracking these metrics may change over time, which could result in unexpected changes to our metrics, including the metrics we publicly disclose. If the internal systems and tools we use to track these metrics undercount or overcount performance or contain algorithmic or other technical errors, the data we report may not be accurate. While these numbers are based on what we believe to be reasonable estimates of our metrics for the applicable period of measurement, there are inherent challenges in measuring how our platform is used across large populations. In addition, limitations or errors with respect to how we measure data or with respect to the data that we measure may affect our understanding of certain details of our business, which could affect our long-term strategies. If our operating metrics are not accurate representations of our business, if investors do not perceive our operating metrics to be accurate, or if we discover material inaccuracies with respect to these figures, we expect that our business, reputation, financial condition, and results of operations would be adversely affected.

Current wording

We track certain operational metrics, including annualized recurring revenue (“ARR”), net ARR expansion rate, total customers, direct sales customers, Atlas customers, customers over 100K and downloads of our platform and non-GAAP metrics such as non-GAAP gross profit, non-GAAP gross margin, non-GAAP operating expenses, non-GAAP income (loss) from operations, non-GAAP net income (loss), non-GAAP net income (loss) per share and free cash flow. These operational metrics are tracked with internal systems and tools that are not independently verified by any third party and which may differ from estimates or similar metrics published by third parties due to differences in sources, methodologies, or the assumptions on which we rely. Our internal systems and tools have a number of limitations, and our methodologies for tracking these metrics may change over time, which could result in unexpected changes to our metrics, including the metrics we publicly disclose. If the internal systems and tools we use to track these metrics undercount or overcount performance or contain algorithmic or other technical errors, the data we report may not be accurate. While these numbers are based on what we believe to be reasonable estimates of our metrics for the applicable period of measurement, there are inherent challenges in measuring how our platform is used across large populations. In addition, limitations or errors with respect to how we measure data or with respect to the data that we measure may affect our understanding of certain details of our business, which could affect our long-term strategies. If our operating metrics are not accurate representations of our business, if investors do not perceive our operating metrics to be accurate, or if we discover material inaccuracies with respect to these figures, we expect that our business, reputation, financial condition, and results of operations would be adversely affected.

Previous wording

•the mix of revenue and associated costs attributable to subscriptions for our MongoDB Atlas and MongoDB Enterprise Advanced offerings (such as our non-cancelable multi-year cloud infrastructure capacity commitments, which require us to pay for such capacity irrespective of actual usage) and professional services, as such relative mix may impact our gross margins and operating income;

Current wording

•the mix of revenue and associated costs attributable to subscriptions for our Atlas and MongoDB Enterprise Advanced offerings (such as our non-cancelable multi-year cloud infrastructure capacity commitments, which require us to pay for such capacity irrespective of actual usage) and professional services, as such relative mix may impact our gross margins and operating income;

Previous wording

•significant security breaches or other security incidents, technical difficulties, or interruptions with respect to the delivery and use of our software;

Current wording

•significant security breaches or other security vulnerabilities, incidents, technical difficulties, or interruptions with respect to the delivery and use of our software;

Previous wording

•general economic conditions, both domestically and internationally, including warfare and terrorist attacks on the United States and other regions in which we or our customers operate, such as the Russia-Ukraine conflict and the Israel-Hamas conflict, as well as economic conditions specifically affecting industries in which our customers participate;

Current wording

•general economic conditions, both domestically and internationally, including warfare and terrorist attacks on the United States and other regions in which we or our customers operate, such as the conflict in Iran, the unrest in Mexico, the Russia-Ukraine conflict, the Israel-Hamas conflict and recent events in Venezuela, as well as economic conditions specifically affecting industries in which our customers participate;

Previous wording

The occurrence of one or more of the foregoing and other factors may cause our results of operations to vary significantly and be materially and adversely affected. For example, fluctuations in our quarterly operating results and the price of our common stock may be particularly pronounced in the current economic environment due to the ongoing geopolitical instability resulting from the conflicts between Russia and Ukraine and Israel and Hamas, severely diminished liquidity and credit availability, declines in consumer confidence, declines in economic growth, increases in unemployment rates, instability in the banking sector, increases in inflation rates, higher interest rates and uncertainty about economic stability. In response to the concerns over inflation risk, the U.S. Federal Reserve has raised interest rates multiple times, and signaled that they will continue to adjust interest rates to stabilize and reduce current levels of inflation. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response to the pandemic and macroeconomic events, and the effectiveness of those actions. Any of these factors or any combination thereof could materially and adversely affect our business, results of operations and financial condition. For instance, among other factors, the adverse macroeconomic conditions resulted in slower than historical growth of our existing Atlas applications for the nine months ended October 31, 2025. We also intend to continue to invest to grow our business and to take advantage of our market opportunity. Accordingly, historical patterns and our results of operations in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. Additionally, if our quarterly results of operations fall below the expectations of investors or securities analysts who follow our stock, the price of our common stock could decline substantially and we could face costly lawsuits, including securities class action suits. See the section titled “Legal Proceedings” included in Part II, Item 1 of this Quarterly Report on Form 10-Q.

Current wording

The occurrence of one or more of the foregoing and other factors may cause our results of operations to vary significantly and be materially and adversely affected. For example, fluctuations in our quarterly operating results and the price of our common stock may be particularly pronounced in the current economic environment due to the ongoing geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflicts between Russia and Ukraine, Israel and Hamas and recent events in Venezuela, continued restrictive monetary policy in certain markets in which we operate, declines in consumer confidence, declines in economic growth, persistent inflation, and uncertainty about economic stability. It is especially difficult to predict the impact of such events on the global economic markets, which have been and will continue to be highly dependent upon the actions of governments, businesses, and other enterprises in response to macroeconomic events, and the effectiveness of those actions. Any of these factors or any combination thereof could materially and adversely affect our business, results of operations and financial condition. We also intend to continue to invest to grow our business and to take advantage of our market opportunity. Accordingly, historical patterns and our results of operations in any one quarter may not be meaningful and should not be relied upon as indicative of future performance. Additionally, if our quarterly results of operations fall below the expectations of investors or securities analysts who follow our stock, the price of our common stock could decline substantially and we could face costly lawsuits, including securities class action suits. See the section titled “Legal Proceedings” included in Part II, Item 1 of this Quarterly Report on Form 10-Q.

Previous wording

We have experienced rapid growth in our business, operations and employee headcount. For fiscal years 2025, 2024 and 2023, our total revenue was $2,006.4 million, $1,683.0 million, and $1,284.0 million, respectively, representing a 19% and 31% growth rate, respectively. We have also significantly increased the size of our customer base from over 3,200 customers as of January 31, 2017 to over 54,500 customers as of January 31, 2025, and we grew from 713 employees as of January 31, 2017 to 5,558 employees as of January 31, 2025. Our success will depend in part on our ability to continue to grow and to manage this growth, domestically and internationally, effectively.

Current wording

We have experienced rapid growth in our business, operations and employee headcount. For fiscal years 2026, 2025 and 2024, our total revenue was $2,463.8 million, $2,006.4 million, and $1,683.0 million, respectively, representing a 23%, 19%, and 31% growth rate, respectively. In addition, for the three months ended April 30, 2026 and 2025, our total revenue was $687.6 million and $549.0 million, respectively, representing a 25% growth rate. We have also significantly increased the size of our customer base from over 3,200 customers as of January 31, 2017, the year we began operating as a public company, to over 67,700 customers as of April 30, 2026, and we grew from 713 employees as of January 31, 2017 to 5,695 employees as of April 30, 2026. Our success will depend in part on our ability to continue to grow and to manage this growth, domestically and internationally, effectively.

Previous wording

Cyberattacks, malicious internet-based activity, and online and offline fraud, and other similar activities threaten the confidentiality, integrity and availability of our personal, proprietary, confidential and other sensitive data and our information technology systems and networks, and those of the third parties upon which we rely to help deliver services to our customers. Such threats are prevalent, increasing in frequency, evolving in nature and becoming increasingly difficult to detect and their frequency may be increased, and effectiveness enhanced, by the use of AI. These threats come from a variety of sources, including traditional computer “hackers,” threat actors (including organized criminal threat actors), “hacktivists,” personnel (such as through theft or misuse), sophisticated nation-states, and nation-state-supported actors. In addition, some actors, such as sophisticated nation-states and nation-state supported actors now engage and are expected to continue to engage in cyberattacks, including without limitation for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon whom we rely may be vulnerable to a heightened risk of these attacks, including retaliatory cyberattacks, that could materially disrupt our systems and networks, operations and supply chain. We and the third parties upon which we rely may be subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), credential harvesting, account takeovers, personnel misconduct or error, fraud, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss or theft of data or other information technology assets, adware, telecommunications failures, pandemics, earthquakes, fires, floods, and other similar threats.

Current wording

Cyberattacks, malicious internet-based activity, and online and offline fraud, and other similar activities threaten the confidentiality, integrity and availability of our personal, proprietary, confidential and other sensitive data and our information technology systems and networks, and those of the third parties upon which we rely to help deliver services to our customers. Such threats are prevalent, increasing in frequency, evolving in nature and becoming increasingly difficult to detect and their frequency may be increased, and effectiveness enhanced, by the use of AI. These threats come from a variety of sources, including traditional computer “hackers,” threat actors (including organized criminal threat actors), “hacktivists,” personnel (such as through theft or misuse), sophisticated nation-states, and nation-state-supported actors. In addition, some actors, such as sophisticated nation-states and nation-state supported actors now engage and are expected to continue to engage in cyberattacks, including without limitation for geopolitical reasons and in conjunction with military conflicts and defense activities. During times of war and other major conflicts, we and the third parties upon whom we rely may be vulnerable to a heightened risk of these attacks, including retaliatory cyberattacks and physical attacks on critical infrastructure, that could materially disrupt our systems and networks, operations and supply chain. We and the third parties upon which we rely may be subject to a variety of evolving threats, including but not limited to social-engineering attacks (including through phishing attacks), malicious code (such as viruses and worms), malware (including as a result of advanced persistent threat intrusions), denial-of-service attacks (such as credential stuffing), credential harvesting, account takeovers, personnel misconduct or error, fraud, ransomware attacks, supply-chain attacks, software bugs, server malfunctions, software or hardware failures, loss or theft of data or other information technology assets, adware, telecommunications failures, pandemics, earthquakes, fires, floods, and other similar threats.

Previous wording

Ransomware attacks, including by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems (including our products) or the third-party information technology systems that support us and our services.

Current wording

Ransomware attacks, including by organized criminal threat actors, nation-states, and nation-state-supported actors, are becoming increasingly prevalent and severe and can lead to significant interruptions in our operations, loss of data and income, reputational harm, and diversion of funds. Extortion payments may alleviate the negative impact of a ransomware attack, but we may be unwilling or unable to make such payments due to, for example, applicable laws or regulations prohibiting such payments. Similarly, supply-chain attacks have increased in frequency and severity, and we cannot guarantee that third parties and infrastructure in our supply chain or our third-party partners’ supply chains have not been compromised or that they do not contain exploitable defects or bugs that could result in a breach of or disruption to our information technology systems (including our products) or the third-party information technology systems that support us and our services. Our software may also contain security flaws or vulnerabilities that expose us and our customers to an increased risk of cyberattack or exploitation.

Previous wording

The COVID-19 pandemic increased our remote workforce, which increased risks to our information technology systems and data, as more of our employees work from home, utilizing network connections, computers and devices outside our premises or network, including while at home, in transit and in public locations. Additionally, cybersecurity risks may be heightened as a result of the ongoing global conflicts such as the military conflict between Russia and Ukraine and the related sanctions imposed by the United States and other countries or the ongoing military conflict between Israel and Hamas. Furthermore, future or past business transactions (such as acquisitions or integrations) could expose us to additional data security risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Risks related to data security will increase as we continue to grow the scale and functionality of our business and collect, store, transmit and otherwise process increasingly large amounts of our and our customers’ information and data, which may include personal, proprietary, confidential or other sensitive data.

Current wording

The COVID-19 pandemic increased our remote workforce, which increased risks to our information technology systems and data, as more of our employees work from home, utilizing network connections, computers and devices outside our premises or network, including while at home, in transit and in public locations. Additionally, cybersecurity risks may be heightened as a result of the ongoing global conflicts such as the military conflict between Russia and Ukraine and the related sanctions imposed by the United States and other countries or the geopolitical instability resulting from the conflict in Iran, the unrest in Mexico, the conflict between Israel and Hamas, and recent events in Venezuela. Furthermore, future or past business transactions (such as acquisitions or integrations) could expose us to additional data security risks and vulnerabilities, as our systems could be negatively affected by vulnerabilities present in acquired or integrated entities’ systems and technologies. Risks related to data security will increase as we continue to grow the scale and functionality of our business and collect, store, transmit and otherwise process increasingly large amounts of our and our customers’ information and data, which may include personal, proprietary, confidential or other sensitive data.

Previous wording

Any of the above identified or similar threats could cause a security breach or other security incident that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure, transfer, use or other processing of, or access to our information technology systems and networks or personal, proprietary, confidential or other sensitive information, or those of the third parties upon whom we rely. For example, in December 2023 we discovered that a previously unknown flaw in a third-party application used by MongoDB enabled an unauthorized third party to successfully phish and to gain access to certain corporate applications, including applications that we use to provide support services to MongoDB customers, which include customer contact information and related account metadata. In an effort to contain the impact of this security incident, we immediately activated our incident response process, promptly published an alert on our website and emailed customers notifying them of the situation and reminding them to stay vigilant. The investigation led by MongoDB into this incident uncovered no evidence of unauthorized access to MongoDB Atlas clusters, a finding that has been verified by our third-party forensic experts. To date, we have not experienced a cybersecurity event that had a material impact on our financial performance or operations, but it is possible that we might experience such an attack in the future. A security breach or other security incident could disrupt our ability (and that of third parties upon whom we rely) to provide our platform, products, and services.

Current wording

Any of the above identified or similar threats could cause a security breach or other security incident that could result in unauthorized, unlawful, or accidental acquisition, modification, destruction, loss, alteration, encryption, disclosure, transfer, use or other processing of, or access to our information technology systems and networks or personal, proprietary, confidential or other sensitive information, or those of the third parties upon whom we rely. For example, in December 2023 we discovered that a previously unknown flaw in a third-party application used by MongoDB enabled an unauthorized third party to successfully phish and to gain access to certain corporate applications, including applications that we use to provide support services to MongoDB customers, which include customer contact information and related account metadata. In an effort to contain the impact of this security incident, we immediately activated our incident response process, promptly published an alert on our website and emailed customers notifying them of the situation and reminding them to stay vigilant. The investigation led by MongoDB into this incident uncovered no evidence of unauthorized access to Atlas clusters, a finding that has been verified by our third-party forensic experts. To date, we have not experienced a cybersecurity event that had a material impact on our financial performance or operations, but it is possible that we might experience such an attack in the future. A security breach or other security incident could disrupt our ability (and that of third parties upon whom we rely) to provide our platform, products, and services.

Previous wording

While we have implemented security measures designed to protect against security breaches and other security incidents, there can be no assurance that these measures will be effective. We have not always been able in the past and may be unable in the future to detect vulnerabilities in our information technology systems and networks (including our products) because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security breach or other security incident has occurred. For example, industry publications have reported ransomware attacks on MongoDB instances. We believe these attacks were successful due to the failure by users of our Community Server offering to properly turn on the recommended security settings when running these instances. Despite our efforts to identify and remediate vulnerabilities, if any, in our information technology systems and networks (including our products), our efforts may not be successful. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities.

Current wording

While we have implemented security measures designed to protect against security breaches and other security incidents, there can be no assurance that these measures will be effective. We have not always been able in the past and may be unable in the future to detect vulnerabilities in our information technology systems and networks (including our products) because such threats and techniques change frequently, are often sophisticated in nature, and may not be detected until after a security breach or other security incident has occurred. For example, industry publications have reported ransomware attacks on MongoDB instances, some of which we believe were successful due to the failure by users of our Community Server offering to properly turn on the recommended security settings when running these instances. Despite our efforts to identify and remediate vulnerabilities, if any, in our information technology systems and networks (including our products), our efforts may not be successful. As new technology, particularly AI, makes it easier to detect and understand vulnerabilities in our code, it may become easier for third parties to exploit such vulnerabilities before we can remediate them, which may require us to dedicate greater time and resources to vulnerability detection and remediation than in the past. Further, we may experience delays in developing and deploying remedial measures designed to address any such identified vulnerabilities.

Previous wording

Even if we do attract new customers, the cost of new customer acquisition, product implementation and ongoing customer support may prove so high as to prevent us from achieving or sustaining profitability. For example, in fiscal years 2025, 2024 and 2023, total sales and marketing expense represented 43% , 47% and 54% of revenue, respectively. We intend to continue to hire additional sales personnel, increase our marketing activities to help educate the market about the benefits of our platform and services, grow our domestic and international operations and build brand awareness. We also intend to continue to cultivate our relationships with developers through continued investment in our MongoDB.local events, MongoDB Advocacy Hub, User Groups, MongoDB University and our partner ecosystem of global system integrators, value-added resellers and independent software vendors. If the costs of these sales and marketing efforts increase dramatically, if we do not experience a substantial increase in leverage from our partner ecosystem, or if our sales and marketing efforts do not result in substantial increases in revenue, our business, results of operations and financial condition may be adversely affected. In addition, while we expect to continue to invest in our professional services organization to accelerate our customers’ ability to adopt our products and ultimately create and expand their use of our products over time, we cannot assure you that any of these investments will lead to the cost-effective acquisition of additional customers.

Current wording

Even if we do attract new customers, the cost of new customer acquisition, product implementation and ongoing customer support may prove so high as to prevent us from achieving or sustaining profitability. For example, in fiscal years 2026, 2025 and 2024, total sales and marketing expense represented 38%, 43%, and 47% of revenue, respectively. We intend to continue to hire additional sales personnel, increase our marketing activities to help educate the market about the benefits of our platform and services, grow our domestic and international operations and build brand awareness. We also intend to continue to cultivate our relationships with developers through continued investment in our MongoDB.local events, MongoDB Advocacy Hub, User Groups, MongoDB University and our partner ecosystem of global system integrators, value-added resellers and independent software vendors. If the costs of these sales and marketing efforts increase dramatically, if we do not experience a substantial increase in leverage from our partner ecosystem, or if our sales and marketing efforts do not result in substantial increases in revenue, our business, results of operations and financial condition may be adversely affected. In addition, while we expect to continue to invest in our professional services organization to accelerate our customers’ ability to adopt our products and ultimately create and expand their use of our products over time, we cannot assure you that any of these investments will lead to the cost-effective acquisition of additional customers.

Previous wording

Internationally, virtually every jurisdiction in which we operate has established its own data privacy and security legal framework with which we or our customers must comply, including, but not limited to, the European Economic Area (“E.E.A.”), Switzerland, the United Kingdom (“U.K.”), Canada, Brazil and other countries. The collection, use, disclosure, transfer, or other processing of personal data regarding individuals in the E.E.A. is subject to the General Data Protection Regulation (the “GDPR”), and other European laws governing the processing of personal data. Data protection authorities in the E.E.A. have the power to impose administrative fines for violations of the GDPR of up to a maximum of €20 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. Further, the GDPR provides for private litigation related to the processing of personal data that can be brought by classes of data subjects or consumer protection organizations authorized at law to represent the data subjects’ interests. Since we act as a data processor for our MongoDB Atlas customers, we have taken steps to cause our processes to be compliant with applicable portions of the GDPR, but because of the ambiguities in the GDPR and the evolving interpretation of the GDPR by data protection authorities, we cannot assure you that such steps are complete or effective.

Current wording

Internationally, virtually every jurisdiction in which we operate has established its own data privacy and security legal framework with which we or our customers must comply, including, but not limited to, the European Economic Area (“E.E.A.”), Switzerland, the United Kingdom (“U.K.”), Canada, Brazil and other countries. The collection, use, disclosure, transfer, or other processing of personal data regarding individuals in the E.E.A. is subject to the General Data Protection Regulation (the “GDPR”), and other European laws governing the processing of personal data. Data protection authorities in the E.E.A. have the power to impose administrative fines for violations of the GDPR of up to a maximum of €20 million or 4% of the entity’s total worldwide global turnover for the preceding financial year, whichever is higher. Further, the GDPR provides for private litigation related to the processing of personal data that can be brought by classes of data subjects or consumer protection organizations authorized at law to represent the data subjects’ interests. Since we act as a data processor for our Atlas customers, we have taken steps to cause our processes to be compliant with applicable portions of the GDPR, but because of the ambiguities in the GDPR and the evolving interpretation of the GDPR by data protection authorities, we cannot assure you that such steps are complete or effective.

Previous wording

The European Commission also revised its Cybersecurity Directive (“NIS2”), which came into force in January 2023 and applies extraterritorially similar to the GDPR. Among other things, NIS2 requires companies providing essential and digital services across key sectors in the EU economy, including cloud services providers, to adopt or update policies and procedures on issues such as incident handling and supply chain security. EU Member States have flexibility in identifying the types of entities considered “essential.” The deadline for EU Member States to transpose NIS2 into national law was October 17, 2024. However, only a small number of Member States have met that deadline, creating ongoing uncertainty around how NIS2 will impact our business. In addition, the EU’s Digital Operational Resiliency Act (“DORA”) for the financial sector took effect in January 2025. DORA standardizes how financial entities report cybersecurity incidents, test their digital operational resilience, and manage ICT third-party risk across the financial services sector and EU member states. We have taken steps to ensure our contracts with EU financial sector customers are DORA-compliant, however we cannot assure you that such steps are complete or effective.

Current wording

The European Commission also revised its Cybersecurity Directive (“NIS2”), which came into force in January 2023 and applies extraterritorially similar to the GDPR. Among other things, NIS2 requires companies providing essential and digital services across key sectors in the EU economy, including cloud services providers, to adopt or update policies and procedures on issues such as incident handling and supply chain security. However, EU Member States have flexibility in identifying the types of entities considered “essential” and many EU Member States have not yet fully transposed NIS2 into national law, creating ongoing uncertainty around how NIS2 will impact our business. Moreover, in January 2026, the European Commission proposed amendments to NIS2, which are still being finalized. In addition, the EU’s Digital Operational Resiliency Act (“DORA”) for the financial sector took effect in January 2025. DORA standardizes how financial entities report cybersecurity incidents, test their digital operational resilience, and manage ICT third-party risk across the financial services sector and EU member states. We have taken steps to ensure our contracts with EU financial sector customers are DORA-compliant, however we cannot assure you that such steps are complete or effective.

Previous wording

Countries outside Europe are implementing significant limitations on the processing of personal data, similar to those in the GDPR. For example, Brazil has enacted the General Data Protection Law (Lei Geral Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018). In addition, on June 5, 2020, Japan passed amendments to its Act on the Protection of Personal data, or APPI, which entered into force on April 1, 2022. Both of these laws broadly regulate the processing of personal data in a manner comparable to the GDPR, and violators of the LGPD and APPI face substantial penalties.

Current wording

Countries outside Europe are implementing significant limitations on the processing of personal data, similar to those in the GDPR. For example, Brazil has enacted the General Data Protection Law (Lei Geral de Proteção de Dados Pessoais, or “LGPD”) (Law No. 13,709/2018). In addition, on June 5, 2020, Japan passed amendments to its Act on the Protection of Personal data, or APPI, which entered into force on April 1, 2022. Both of these laws broadly regulate the processing of personal data in a manner comparable to the GDPR, and violators of the LGPD and APPI face substantial penalties.

Previous wording

Frameworks could also be contested or otherwise affected by any challenges to the EU-U.S. Data Privacy Framework. Certain countries outside Europe (including Russia, China and Brazil) have also passed or are considering laws requiring local data residency or otherwise impeding the transfer of personal data across borders, any of which could increase the cost and complexity of doing business. If we cannot implement a valid compliance mechanism for cross-border data transfers, we may face increased exposure to regulatory actions, substantial fines, and injunctions against processing or transferring personal data from Europe or other foreign jurisdictions. The inability to import personal data to the United States could significantly and negatively impact our business operations; limit our ability to collaborate with parties that are subject to such cross-border data transfer or localization laws; or require us to increase our personal data processing capabilities and infrastructure in foreign jurisdictions at significant expense.

Current wording

We are currently self-certified under the EU-U.S. Data Privacy Framework, however such adequacy decision is likely to face challenge at the Court of Justice of the European Union. While the EU-U.S. Data Privacy Framework does not apply to the U.K., on October 12, 2023, the U.K. government adopted an adequacy decision concluding that the United States ensures an adequate level of protection transferred from the U.K. to the United States under the U.K. Extension to the EU-U.S. Data Privacy Framework (“U.K. Data Privacy Framework”). We are currently self-certified under the U.K. Data Privacy Framework, and have also self-certified under the Swiss Data Privacy Framework. Both the U.K. and Swiss Data Privacy Frameworks could also be contested or otherwise affected by any challenges to the EU-U.S. Data Privacy Framework. Certain countries outside Europe (including Russia, China and Brazil) have also passed or are considering laws requiring local data residency or otherwise impeding the transfer of personal data across borders, any of which could increase the cost and complexity of doing business. If we cannot implement a valid compliance mechanism for cross-border data transfers, we may face increased exposure to regulatory actions, substantial fines, and injunctions against processing or transferring personal data from Europe or other foreign jurisdictions. The inability to import personal data to the United States could significantly and negatively impact our business operations; limit our ability to collaborate with parties that are subject to such cross-border data transfer or localization laws; or require us to increase our personal data processing capabilities and infrastructure in foreign jurisdictions at significant expense.

Previous wording

In addition to the GDPR, other European legislative proposals and present laws and regulations apply to cookies and similar tracking technologies, electronic communications, and marketing. In the E.E.A. and the U.K., regulators are increasingly focusing on compliance with requirements related to the online behavioral advertising ecosystem. For example, it is anticipated that the ePrivacy Regulation, which is still being negotiated, and national implementing laws will replace the current national laws implementing the ePrivacy Directive. Compliance with these laws and regulations may require us to make significant operational changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to liabilities.

Current wording

In addition to the GDPR, other European legislative proposals and present laws and regulations apply to cookies and similar tracking technologies, electronic communications, and marketing. In the E.E.A. and the U.K., regulators are increasingly focusing on compliance with requirements related to the online behavioral advertising ecosystem. Although the European Commission officially withdrew the long-stalled ePrivacy Regulation in February 2025, they immediately replaced that effort with a new reform package in late 2025 called the “Digital Omnibus”. Compliance with these laws and regulations may require us to make significant operational changes, limit the effectiveness of our marketing activities, divert the attention of our technology personnel, adversely affect our margins, and subject us to liabilities.

Previous wording

Our success and ability to compete depend in part upon our intellectual property rights. As of January 31, 2025, we had 84 issued patents and 47 pending patent applications in the United States. Patent applications may not result in issued patents and even if a patent issues, we cannot assure you that such patent will be adequate to protect our business. In addition to patent protection, we primarily rely on copyright and trademark laws, trade secret protection and confidentiality or other contractual arrangements with our employees, customers, partners and others to protect our intellectual property rights. However, the steps we take to protect our intellectual property rights may not be adequate and we may be unable to detect the unauthorized use of, or prevent third parties from infringing, misappropriating or otherwise violating, our intellectual property rights. In order to protect our intellectual property rights, we may be required to spend significant resources to establish, monitor and enforce such rights. Litigation brought to enforce our intellectual property rights could be costly, time-consuming and distracting to management and could be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Additionally, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential information could be compromised by disclosure during this type of litigation. An adverse determination of any litigation proceedings could put our intellectual property at risk of being invalidated, interpreted narrowly or held unenforceable and could put our related intellectual property at risk of not issuing or being canceled. The local laws of some foreign countries do not protect our intellectual property rights to the same extent as the laws of the United States and effective intellectual property protection and mechanisms may not be available in those jurisdictions. We may need to expend additional resources to defend our intellectual property in these countries and our inability to do so could impair our business or adversely affect our international expansion. Our patent applications and patents arising from any patent applications we may file in the future may never be granted and, even if we are successful in obtaining effective protection, it is expensive to maintain these rights, both in terms of application and maintenance costs, and the time and cost required to defend our rights could be substantial. Additionally, the process of obtaining patent protection is expensive and time-consuming, and we may be unable to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Even if we are able to secure our intellectual property rights, there can be no assurances that such rights will provide us with competitive advantages or distinguish our products and…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Our success and ability to compete depend in part upon our intellectual property rights. As of April 30, 2026, we had 103 issued patents and 44 pending patent applications in the United States. Patent applications may not result in issued patents and even if a patent issues, we cannot assure you that such patent will be adequate to protect our business. In addition to patent protection, we primarily rely on copyright and trademark laws, trade secret protection and confidentiality or other contractual arrangements with our employees, customers, partners and others to protect our intellectual property rights. However, the steps we take to protect our intellectual property rights may not be adequate and we may be unable to detect the unauthorized use of, or prevent third parties from infringing, misappropriating or otherwise violating, our intellectual property rights. In order to protect our intellectual property rights, we may be required to spend significant resources to establish, monitor and enforce such rights. Litigation brought to enforce our intellectual property rights could be costly, time-consuming and distracting to management and could be met with defenses, counterclaims and countersuits attacking the validity and enforceability of our intellectual property rights. Additionally, because of the substantial amount of discovery required in connection with intellectual property litigation, there is a risk that some of our confidential information could be compromised by disclosure during this type of litigation. An adverse determination of any litigation proceedings could put our intellectual property at risk of being invalidated, interpreted narrowly or held unenforceable and could put our related intellectual property at risk of not issuing or being canceled. The local laws of some foreign countries do not protect our intellectual property rights to the same extent as the laws of the United States and effective intellectual property protection and mechanisms may not be available in those jurisdictions. We may need to expend additional resources to defend our intellectual property in these countries and our inability to do so could impair our business or adversely affect our international expansion. Our patent applications and patents arising from any patent applications we may file in the future may never be granted and, even if we are successful in obtaining effective protection, it is expensive to maintain these rights, both in terms of application and maintenance costs, and the time and cost required to defend our rights could be substantial. Additionally, the process of obtaining patent protection is expensive and time-consuming, and we may be unable to prosecute all necessary or desirable patent applications at a reasonable cost or in a timely manner. Even if we are able to secure our intellectual property rights, there can be no assurances that such rights will provide us with competitive advantages or distinguish our products and …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

We outsource substantially all of the infrastructure relating to MongoDB Atlas across AWS, Microsoft Azure and GCP to host our cloud offering. If the hosting of MongoDB Atlas is disrupted or interfered with for any reason, our business would be negatively impacted. Customers of MongoDB Atlas need to be able to access our platform at any time, without interruption or degradation of performance and we provide them with service level commitments with respect to uptime. Third-party cloud providers run their own platforms that we access and we are, therefore, vulnerable to their service interruptions. We may experience interruptions, delays and outages in service and availability from time to time as a result of problems with our third-party cloud providers’ infrastructure. Lack of availability of this infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud, cyberattacks, or security breaches or other security incidents that we cannot predict or prevent. Such interruptions, delays or outages could lead to the triggering of our service level agreements and the issuance of credits to our cloud offering customers, which may impact our business, results of operations and financial condition. In addition, if we or any of these third-party cloud providers, experience a security breach or other security incident, our software is unavailable or our customers are unable to use our software within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected. In some instances, we may not be able to identify the cause or causes of these performance problems within a period of time acceptable to our customers. It is possible that our customers and potential customers would hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability from those customers and from third parties with respect to any breach affecting these systems. We may not be able to recover a material portion of our liabilities to our customers and third parties from a third-party cloud provider. It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Any of the above circumstances or events may harm our business, results of operations and financial condition.

Current wording

We outsource substantially all of the infrastructure relating to Atlas across AWS, Microsoft Azure and GCP to host our cloud offering. If the hosting of Atlas is disrupted or interfered with for any reason, our business would be negatively impacted. Customers of Atlas need to be able to access our platform at any time, without interruption or degradation of performance and we provide them with service level commitments with respect to uptime. Third-party cloud providers run their own platforms that we access and we are, therefore, vulnerable to their service interruptions. We may experience interruptions, delays and outages in service and availability from time to time as a result of problems with our third-party cloud providers’ infrastructure. Lack of availability of this infrastructure could be due to a number of potential causes including technical failures, natural disasters, fraud, cyberattacks, or security breaches or other security incidents that we cannot predict or prevent. Such interruptions, delays or outages could lead to the triggering of our service level agreements and the issuance of credits to our cloud offering customers, which may impact our business, results of operations and financial condition. In addition, if we or any of these third-party cloud providers, experience a security breach or other security incident, our software is unavailable or our customers are unable to use our software within a reasonable amount of time or at all, then our business, results of operations and financial condition could be adversely affected. In some instances, we may not be able to identify the cause or causes of these performance problems within a period of time acceptable to our customers. It is possible that our customers and potential customers would hold us accountable for any breach of security affecting a third-party cloud provider’s infrastructure and we may incur significant liability from those customers and from third parties with respect to any breach affecting these systems. We may not be able to recover a material portion of our liabilities to our customers and third parties from a third-party cloud provider. It may also become increasingly difficult to maintain and improve our performance, especially during peak usage times, as our software becomes more complex and the usage of our software increases. Any of the above circumstances or events may harm our business, results of operations and financial condition.

Previous wording

Our agreements with customers typically provide for service level commitments. Our MongoDB Enterprise Advanced customers typically get service level commitments with certain guaranteed response times and comprehensive 24x365 coverage. Our MongoDB Atlas customers typically get monthly uptime service level commitments, where we are required to provide a service credit for any extended periods of downtime. The complexity and quality of our customer’s implementation and the performance and availability of cloud services and cloud infrastructure are outside our control and, therefore, we are not in full control of whether we can meet these service level commitments. Our business, results of operations and financial condition could be adversely affected if we fail to meet our service level commitments for any reason. Any extended service outages could adversely affect our business, reputation and brand.

Current wording

Our agreements with customers typically provide for service level commitments. Our MongoDB Enterprise Advanced customers typically get service level commitments with certain guaranteed response times and comprehensive 24x365 coverage. Our Atlas customers typically get monthly uptime service level commitments, where we are required to provide a service credit for any extended periods of downtime. The complexity and quality of our customer’s implementation and the performance and availability of cloud services and cloud infrastructure are outside our control and, therefore, we are not in full control of whether we can meet these service level commitments. Our business, results of operations and financial condition could be adversely affected if we fail to meet our service level commitments for any reason. Any extended service outages could adversely affect our business, reputation and brand.

Previous wording

We believe that our culture has been and will continue to be a key contributor to our success. Our workforce has increased significantly from January 31, 2017 and we expect to continue to hire as we expand, especially among research and development and sales and marketing personnel. Such headcount growth may result in a change to our corporate culture.

Current wording

We believe that our culture has been and will continue to be a key contributor to our success. Our workforce has increased significantly since our initial public offering in 2017 and we expect to continue to hire as we expand, especially among research and development and sales and marketing personnel. Such headcount growth may result in a change to our corporate culture.

Previous wording

A significant portion of our revenue is derived internationally and we are susceptible to risks related to our international operations. In the fiscal years ended January 31, 2025, 2024 and 2023, total revenue generated from customers outside the United States was 46%, 46% and 45%, respectively, of our total revenue. We currently have international offices outside of North America in Europe, the Middle East and Africa (“EMEA”), the Asia-Pacific region and South America, focusing primarily on selling our products and services in those regions. In addition, we expanded our reach in China in February 2021 when we announced a global partnership with Tencent Cloud that allows customers to easily adopt and use MongoDB-as-a-Service across Tencent’s global cloud infrastructure. In the future, we may continue to expand our presence in these regions or expand into other international locations. Our current international operations and future initiatives involve a variety of risks, including risks associated with:

Current wording

A significant portion of our revenue is derived internationally and we are susceptible to risks related to our international operations. In the fiscal years ended January 31, 2026, 2025 and 2024, total revenue generated from customers outside the United States was 46%, 46%, and 46%, respectively, of our total revenue. We currently have international offices outside of North America in Europe, the Middle East and Africa (“EMEA”), the Asia-Pacific region and South America, focusing primarily on selling our products and services in those regions. In addition, we expanded our reach in China in February 2021 when we announced a global partnership with Tencent Cloud that allows customers to easily adopt and use MongoDB-as-a-Service across Tencent’s global cloud infrastructure. In the future, we may continue to expand our presence in these regions or expand into other international locations. Our current international operations and future initiatives involve a variety of risks, including risks associated with:

Previous wording

•political instability, including any escalation in the geopolitical tensions between China and Taiwan, social unrest, terrorist activities, acts of civil or international hostility, such as the current military conflict and escalating tensions between Russia and Ukraine, natural disasters or regional or global outbreaks of contagious diseases, such as the COVID-19 pandemic;

Current wording

•political instability, including any escalation in the geopolitical tensions between China and Taiwan, social unrest, terrorist activities, acts of civil or international hostility, such as the conflict in Iran, the unrest in Mexico, the Russia-Ukraine conflict, the Israel-Hamas conflict and recent events in Venezuela, natural disasters or regional or global outbreaks of contagious diseases, such as the COVID-19 pandemic;

Previous wording

The future success of our business and particularly our cloud offerings, such as MongoDB Atlas, depends upon the continued use of the internet as a primary medium for commerce, communication and business applications. Federal, state or foreign government bodies or agencies have in the past adopted, and may in the future adopt, laws or regulations affecting the use of the internet as a commercial medium. Changes in these laws or regulations could require us to modify our software in order to comply with these changes. In addition, government agencies or private organizations may begin to impose taxes, fees or other charges for accessing the internet or commerce conducted via the internet. These laws or charges could limit the growth of internet-related commerce or communications generally, resulting in reductions in the demand for internet-based solutions such as ours.

Current wording

The future success of our business and particularly our cloud offerings, such as Atlas, depends upon the continued use of the internet as a primary medium for commerce, communication and business applications. Federal, state or foreign government bodies or agencies have in the past adopted, and may in the future adopt, laws or regulations affecting the use of the internet as a commercial medium. Changes in these laws or regulations could require us to modify our software in order to comply with these changes. In addition, government agencies or private organizations may begin to impose taxes, fees or other charges for accessing the internet or commerce conducted via the internet. These laws or charges could limit the growth of internet-related commerce or communications generally, resulting in reductions in the demand for internet-based solutions such as ours.

Previous wording

•if we issue a significant amount of equity securities in connection with future acquisitions, existing stockholders may be diluted and earnings per share may decrease; and

Current wording

•if we issue a significant amount of equity securities in connection with future acquisitions, existing stockholders may be diluted and earnings per share may decrease;

Previous wording

•unforeseen legal liability arising from prior or ongoing acts or omissions by the acquired businesses which are not discovered by due diligence during the acquisition process or that prove to have a greater than anticipated adverse impact. There is no assurance that acquired businesses will have invested sufficient efforts in their own regulatory compliance, and we may need to invest in and seek to improve the regulatory compliance controls and systems of such businesses. Generally, if an acquired business fails to meet our expectations, or if we are unable to establish effective regulatory compliance controls with respect to an acquired business, our operating results, business, and financial condition may suffer.

Current wording

•unforeseen legal liability arising from prior or ongoing acts or omissions by the acquired businesses which are not discovered by due diligence during the acquisition process or that prove to have a greater than anticipated adverse impact. There is no assurance that acquired businesses will have invested sufficient efforts in their own regulatory compliance, and we may need to invest in and seek to improve the regulatory compliance controls and systems of such businesses. Generally, if an acquired business fails to meet our expectations, or if we are unable to establish effective regulatory compliance controls with respect to an acquired business, our operating results, business, and financial condition may suffer; and

Previous wording

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as described in Note 2, Summary of Significant Accounting Policies, in the Notes to Unaudited Condensed Consolidated Financial Statements included in Part I, Item 1 of this Quarterly Report on Form 10-Q. The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities and equity and the amount of revenue and expenses that are not readily apparent from other sources. Significant assumptions and estimates used in preparing our Consolidated Financial Statements and Unaudited Condensed Consolidated Financial Statements include those related to revenue recognition, allowances for doubtful accounts, the period of benefit for deferred contract acquisition costs, the incremental borrowing rate related to the Company’s lease liabilities, stock-based compensation, legal contingencies, fair value of acquired intangible assets and goodwill, useful lives and carrying values of intangible assets and property and equipment, fair value of non-marketable securities and accounting for income taxes. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our common stock.

Current wording

The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in the consolidated financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances, as described in Note 2, Summary of Significant Accounting Policies, in the Notes to Condensed Consolidated Financial Statements included in Part I, Item 1 of this Quarterly Report on Form 10-Q. The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities and equity and the amount of revenue and expenses that are not readily apparent from other sources. Significant assumptions and estimates used in preparing our Consolidated Financial Statements and Condensed Consolidated Financial Statements include those related to revenue recognition, allowances for doubtful accounts, the period of benefit for deferred contract acquisition costs, the incremental borrowing rate related to the Company’s lease liabilities, stock-based compensation, legal contingencies, fair value of acquired intangible assets and goodwill, useful lives and carrying values of intangible assets and property and equipment, fair value of non-marketable securities and accounting for income taxes. Our results of operations may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our results of operations to fall below the expectations of securities analysts and investors, resulting in a decline in the trading price of our common stock.

Previous wording

We continue to monitor the progression of new global and U.S. legislation impact on our effective tax rate. We are currently unable to predict whether any future changes will occur and, if so, the impact of such changes, including on the U.S. federal income tax considerations relating to the purchase, ownership and disposition of our common stock.

Current wording

We continue to monitor the impact of new global and U.S. tax legislation and reform measures, including its potential to impact on our effective tax rate and income tax expense. We may in the future experience an increase in our income tax expense, especially if we are not able to maintain a full valuation allowance on our U.S. deferred tax assets or utilize a material portion of the NOLs reflected on our balance sheet. See “—Our ability to use our net operating losses to offset future taxable income may be subject to certain limitations.” Any increase in our income tax expense could have a negative effect on our financial condition and results of operations. Changes in global and U.S. tax legislation which may lead to other impacts, including on the U.S. federal income tax considerations relating to the purchase, ownership and disposition of our common stock.

Previous wording

As of January 31, 2025, we had net operating loss (“NOL”) carryforwards for U.S. federal and state, Irish and U.K. income tax purposes. A lack of future taxable income would adversely affect our ability to utilize these NOLs before they expire. In general, under Section 382 of the Code, a corporation that undergoes an “ownership change” (as defined under Section 382 of the Code and applicable Treasury Regulations) is subject to limitations on its ability to utilize its pre-change NOLs to offset future taxable income. We may experience a future ownership change under Section 382 of the Code that could affect our ability to utilize the NOLs to offset our income. Furthermore, our ability to utilize NOLs of companies that we have acquired or may acquire in the future may be subject to limitations. There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to reduce future income tax liabilities, including for state tax purposes.

Current wording

As of January 31, 2026, we had NOL carryforwards for U.S. federal and state, Irish and U.K. income tax purposes. A lack of future taxable income would adversely affect our ability to utilize these NOLs before they expire. In general, under Section 382 of the Code, a corporation that undergoes an “ownership change” (as defined under Section 382 of the Code and applicable Treasury Regulations) is subject to limitations on its ability to utilize its pre-change NOLs to offset future taxable income. We may experience a future ownership change under Section 382 of the Code that could affect our ability to utilize the NOLs to offset our income. Furthermore, our ability to utilize NOLs of companies that we have acquired or may acquire in the future may be subject to limitations. There is also a risk that due to regulatory changes, such as suspensions on the use of NOLs or other unforeseen reasons, our existing NOLs could expire or otherwise be unavailable to reduce future income tax liabilities, including for state tax purposes.

Previous wording

We communicate certain environmental, social and governance (“ESG”) related initiatives and goals regarding environmental matters, diversity and other matters in our annually released ESG Report (formerly known as the Corporate Sustainability Report), on our website and elsewhere. The implementation of any of our current or future initiatives, goals and commitments may be difficult to achieve and may require considerable investment. Additionally, if these initiatives are not perceived to be adequate, or if the positions we take (or choose not to take) on social and ethical issues are unpopular with some of our employees, partners, or with our customers or potential customers, our reputation could be harmed, which could negatively impact our ability to attract or retain employees, partners or customers. If we fail to satisfy the expectations of investors, regulators, customers and other stakeholders, if our initiatives are not executed as planned, or if we fail to implement sufficient oversight or accurately capture and disclose ESG matters, our reputation and business, operating results and financial condition could be adversely impacted.

Current wording

We communicate certain environmental, social and governance (“ESG”) related initiatives and goals regarding environmental matters, diversity and other matters in our ESG Report (formerly known as the Corporate Sustainability Report), on our website and elsewhere. The implementation of any of our current or future initiatives, goals and commitments may be difficult to achieve and may require considerable investment. Additionally, if these initiatives are not perceived to be adequate, or if the positions we take (or choose not to take) on social and ethical issues are unpopular with some of our employees, partners, or with our customers or potential customers, our reputation could be harmed, which could negatively impact our ability to attract or retain employees, partners or customers. If we fail to satisfy the expectations of investors, regulators, customers and other stakeholders, if our initiatives are not executed as planned, or if we fail to implement sufficient oversight or accurately capture and disclose ESG matters, our reputation and business, operating results and financial condition could be adversely impacted.

Previous wording

Social, ethical, security and regulatory issues relating to the use of new and evolving technologies such as AI and ML, including generative AI and AI models, in our offerings, internal operations or partnerships, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. As with many innovations, AI and ML presents risks and challenges that could affect its adoption, and therefore our business. Our offerings based on AI and ML may expose us to additional claims, demands and proceedings by private parties and regulatory authorities and subject us to legal liability as well as brand and reputational harm.

Current wording

Social, ethical, security and regulatory issues relating to the use of new and evolving technologies such as AI and ML, including generative AI and AI models, in our offerings, internal operations or partnerships, may result in reputational harm and liability, and may cause us to incur additional research and development costs to resolve such issues. The use of generative and agentic AI, relatively new and emerging technologies in the early stages of commercial use, exposes us to additional risks, such as damage to our reputation, competitive position, and business, legal and regulatory risks and additional costs. For example, generative AI has been known to produce false or “hallucinatory” inferences or output, and certain generative AI uses machine learning and predictive analytics, which can create inaccurate, incomplete, or misleading content, unintended biases, and other discriminatory or unexpected results, errors or inadequacies, any of which may not be easily detectable by us or any of our related service providers. As with many innovations, AI and ML presents risks and challenges that could affect its adoption, and therefore our business. Our offerings based on AI and ML may expose us to additional claims, demands and proceedings by private parties and regulatory authorities and subject us to legal liability as well as brand and reputational harm.