All righty. Jim Fish with Piper Sandler. Good morning, everybody. Thanks again for joining us. With us, we have TJ and Jim from AvePoint. Appreciate you guys joining us here in Nashville.
Thank you for having us.
Thanks for having us.
Maybe just to set the stage, the question we've been asking everybody here is, as we head into year-end, how is IT spending looking? How are sales cycles? What's the impact of AI on budgets, and how does that benefit you guys?
From a demand climate, it continues to be robust. What we see, last year, the theme of the day was token maxing. This year, the theme of the day is agentic AI. Of course, cost is a paramount concern, as well as risks that AI agents are causing. So we see very strong demand around agentic governance, agentic management. From that perspective, I think from an IT budget, these are top of mind for C-levels, so it is almost a separate conversation. We do see enterprises are blowing through their AI budgets fairly quickly in the beginning of the year, but that has required a lot more attention now in outcome-based measurements around AI spend. So there is a fair amount of discipline around that. But overall, the awareness around risk and cost management of AI, it is really top of mind.
Literally was talking to my own CIO last night about agentic governance, so funny you bring that up. I guess, how is AvePoint's platform specifically discovering, controlling, and securing data flows for AI agents compared to traditional human access? As we think about AI use cases, whether it is DSPM, resilience, control, can we rank the priorities here?
The good thing is this has been something we have been doing for a decade plus, coming from an enterprise content management heritage and being able to do this in cloud at scale. Firstly, to help enterprises manage human access of data, so the better curation, classification, and cataloging, and starting in the regulated industry, and then now becoming a very common request in the commercial side in the non-regulated industry, because folks are realizing the quality of the foundational data is super important to drive good refinement training and refinement outcome for AI deployments. So we historically have helped companies manage employee data access, employee sharing and oversharing, IP leakage, and access control, so data security posture management, for example, for all unstructured data in the productivity side, whether it is Office 365 and now, of course, Google Workspace.
But now with AI, it is really employees operating at machine speed almost, because when you buy Copilot, an AI agent, by default, that agent inherits your entire permission structure. And now quickly, folks are realizing that is not a good idea to have something essentially move at machine speed on your behalf and be able to access all the systems and all the data you have access to, but then you have no control over how it has been shared, how it has been acted on. That is becoming a problem. So the top of mind now is to first discover all the agents running in company environment, including shadow AI, by the way. There is a fair amount of that happening, where employees are getting their consumer subscription of cloud, even using open cloud on devices.
Those are effectively unsanctioned use cases where corporate data could be leaked back to the model providers, and that is becoming another serious concern. So effectively, the top of mind today is the risk side of it. First, discover what actual risk exposure you have in the first place, and then bring them under management, bring them under governance. Shut down the shadow AI usage, because the IP leakage consideration as well, and of course, cost management. So security is top of mind, for sure. Then, DSPM, security posture management, that auditability of information access, it is corollary to that. Because what we do also is to recover when AI does do specific damage to the internal environment or shut down AI access or even runtime because of this incurring too much cost.
Got it. So Jim, maybe for you on this in terms of blending what I have asked here together. How quickly can AI governance, DSPM, translate into net new ARR? How is AvePoint selling this in terms of is it an add-on or is budget being created? Can you walk us through that?
Yeah, great question. So specifically about what TJ was just alluding to around agents, we have a product that we recently released for GA back in January, AgentPulse, and we initially monetized it as a bundled strategy in our control suite. So when you think about governance, we added this agentic AI tool, our AgentPulse tool, and included it in the bundles. So it was not sold separately, but really just part of the bundles. It really helped accelerate customer adoption of our bundle strategy. But there was so much demand coming from customers that have a specific agent problem, what TJ just alluded to, in terms of, "I do not even know how many agents are in my environment.
Before I solve my whole control suite environment, my whole governance strategy, can you first help me identify what rogue agents might be running around in my environment?" So we released in July, AgentPulse as a standalone SKU. So that has been really popular right now from customers. So the monetization of that, what we tried to do is keep it very simple. Most licensing for the past 40 years has been seat-based licensing. So what we did is to reduce friction was we did not go consumption for all the reasons we just talked about, in terms of people trying to budget for consumption. We kept it a seat-based license to make it simple, reduce friction, make it easier for procurement departments to get it through. That seems to be really resonating with our customers.
Do you see that standalone versus bundled, how does that mix play out over time, do you think?
Yeah, it's a great point. I would say what we see is almost an entry point. Right now, there are problems in companies' environments where there's an agentic or an agent problem, where we know there's agents running around in the environment. But maybe we don't know how many, we don't know who owns them, we don't know what they have access to. We don't know what kind of security risks. So there's an immediate crisis for CIOs, CTOs to get a handle on, "Hey, what's happening with these agents?" Even though they may recognize, I have a bigger governance problem with all of my data, I have an immediate crisis with I may have agents that are really putting me at risk.
The idea of us introducing it as a standalone SKU was to address really that use case, which is how do we affect somebody's immediate problem before trying to solve the bigger problem? They have an immediate problem, and can we address that? And the answer is yes. So we decided, hey, let's reduce the sales cycle, because if you're just addressing one specific use case and a problem, usually the sales cycle is shorter. And that's what we've seen so far. And again, that was the driver for really releasing it in July.
Got it. And look, AvePoint built a great business on the Microsoft ecosystem, SharePoint included. You brought up Google just a few minutes ago. How has that entry, we'll call it's been a few years now, but how has that gone moving beyond the Microsoft ecosystem? What does the exposure look like today? What could it look like a couple of years from now?
Yeah. We have parity now on what we cover for Office Cloud as now on Google Workspace. It is really the go-to-market. We recently now got elevated within Google to be their global ISV partner, so their product partner. That is a big change for us. That is very encouraging. We do have an 8-digit relationship with Google, while we have a nine-digit relationship with Microsoft. But the Google side is equally important. We have seen, first half of the year, Google enterprise business making really meaningful inroads into large commercial accounts as well as public sector accounts, with Gemini, with NotebookLM as hero SKUs. Also, we follow our customers and there is movement in our customer base between the two productivity clouds. That bodes very well for our modernization capabilities and of course then the resiliency and control capabilities for Google Workspace.
We maintain that route today. It is still just under 10% of our overall mix that the opportunity is there. The Office Cloud estimate is just under 500 million user seats. Google Cloud, it is about 300-plus million user seats. It is smaller but sizable. We actually continue to invest into the go-to-market side of it.
Got it. You guys have done a pretty good job around mid-market and enterprise and moving up market.
Yeah.
Are there any common denominators that are driving this increased up-market momentum around the Confidence Platform?
Yeah. We actually started the enterprise, and then we moved down market, effectively. This year we'll exceed half billion ARR. But for a sub-billion ARR company, it's rare to see a company be able to be successful in enterprise as well as SMB. We have achieved that over the last, effectively since we've gone public on Nasdaq. We really invest into channel and be able to change the way we go to market. Same technology, but make it frictionless for SMB to consume our services and products. Specifically for small businesses, with less than 500 employees, we are targeting this specialization called managed service providers. They're analogous for us to be SMB. We never directly touch a two-man or four people company, because that's not cost effective for us.
What we do is we focus on MSPs as our end customers, and these are basically outsourced IT for small businesses. They will be managing hundreds if not thousands of customers. What we did was make it very easy for them to procure our software on a monthly basis, on a pool licensing basis, so they can add and drop users at will. Effectively, they're using our software to scale their business to improve profit margins. One of our top MSP, Crayon, now, of course, SoftwareOne, their head of North America said for every dollar they invest in our software it generates $5 of managed services business for them. For an entity like that, SoftwareOne, managed services is their highest margin business, right? Versus getting 1% or 2% distributing Microsoft software.
They're very excited to expand that, and we have a few very large MSPs in that space that's already in the millions of ARR contribution to us, really expanding the SMB space. Effectively, that's how we unlocked SMB. For Microsoft, SMB is 40% of their overall revenue. For Google, it's even bigger, when we talk about Google productivity suites. For us now, just 20% of our ARR, and it's our fastest-growing segment. We're very excited to be able to continue with the strength that we have in the large enterprise, in the regular industry, but then now really be able to unlock SMB use cases. The fat tail, we used to call that long tail, but the amount of logo and the number of business in that segment is massive. We're able to unlock that with go-to-market through MSPs.
Yeah.
Yeah.
Maybe circling back to, you brought up Microsoft 365 and Google, about 800 million-ish seats, let's call it.
Yeah.
Why is it now. Why aren't we getting. We're only at, I think, tens of millions up to $100 million maybe if you look at some of the estimates out there in terms of penetration around governance behind it. What's the catalyst that moves us from 10%, 20% penetration rate to
Yeah
50%, 100%? Why aren't we getting there faster?
That's a great question. I think the number one reason was it used to be customer think that the hyperscalers solve all their problems. When you go to cloud, the cloud vendor is supposed to provide everything for you, but in reality, they don't. Even this morning, The Wall Street Journal reported that when the AWS data center got taken out during the beginning of the Middle East conflict, they had permanent data loss. But when you talk to hyperscalers, they're supposed to have real-time synchronization, real-time failover among regional data centers. That's actually not happening. So that's shocking to customers. When they're actually using these hyperscaler offers and they realize that the baseline coverage is very thin. So when you actually need to have the proper governance and control, it's very severely lacking.
Fundamentally, the value we provide to the market, it's also orthogonal to what hyperscalers interest almost. First and foremost is we actually help customers maximize their investment into their cloud. If you leave it to hyperscalers, they will want you to buy the most expensive licensing for every type of SKU you have. Shocking, right? But most customers, of course, are smarter than that. They have a blend licensing. For example, in Office 365 context, there's E1, E3, E5, now E7. Most customers, E5 SKU has been out for a number of years. The penetration is still just 20%. So vast majority of customers have E3 and E1 licenses. E1 is basically a kiosk license. The worker doesn't even have a laptop. It's just a mobile device. The E7, of course, your C-suites can use it.
How do you actually have the consistent data governance and control and resiliency across all these license types? It is a problem that we solve. Hyperscaler is not in their interest to solve. Secondly, customers are multi-cloud today by definition. Because of that, we also support multi-cloud. That is also not in hyperscalers' interest is for other hyperscalers. That competitive dynamic always exists. Google will not help Microsoft will not help Amazon. There lies the opportunity for us to be a value-added provider for our customers to make sure that it does not matter where their data applications and agents reside, in which cloud infrastructure they are covered. Have that consistency. This is why there is always space for a third-party ecosystem player like us to provide a better value for the customer.
Yeah. You brought up where I want to take the conversation next, which was competition and there has been a lot of moving pieces in the space between governance, backup, resiliency, those kinds of things.
Yeah.
What is going on competitively and why is AvePoint growing the rate it is versus the others out there?
Yeah. Firstly, we focus on very much profitable growth. We feel that we need to be disciplined as we grow and still maintain very healthy and expanding margins to be cash-generating, to be ready for anything that the market may bring. The market is quite volatile. Making sure that we have profitable growth is key to us. Secondly, we do not have a holistic competitor. We come from an enterprise content management background. We view information management from birth to retirement as a continuation of a problem set. It is not just a resiliency or backup problem. It is not just a governance problem. It is not just an integration, migration problem that historically industry is set up to do. There are these industry silos. There are also different players in enterprise versus SMB and different players in different regions.
Because where we came from, we went target large enterprise, and we went global because of the high touch requirement, and then we went to cloud the earliest in the Microsoft Cloud space, and now we're multi-cloud. We feel that we have the end-to-end story. We do see that our competitors start to map that way. You see a lot of the backup vendors start to gravitate towards the security side, and most recently, because it's very topical, start to gravitate towards the governance side. Even governance players, I think yesterday, Varonis came out with a storage solution. They were never in storage ever before, so now they're in. It's good to see that these, what we call them, point competitors are recognizing the importance of the end-to-end information management story to better enable AI. Because your AI is only as good as your data.
That's how we felt we have always been different, that we have a singular cloud-based platform that does all of it. It's more of a holistic approach. We do have point competitors, and different point competitor in different space also, enterprise versus SMB. We feel that we're uniquely positioned now that we're public, we're very profitable, strong balance sheet, we can scale. The next iteration of our evolution is to really scale globally, be successful at large enterprise as well as SMB, and handling the whole end-to-end information management problem set, of course, AI management problem set for our customers.
Yeah.
Yeah.
Obviously, you brought up Microsoft's own E1, E3, E5, E7, but you guys have your own kind of upsell iteration as well with Plus and Complete. How is that upsell motion working out for you guys, and what features or functions are really resonating with customers to move them off the Essentials package?
Well, and it's not just Essentials too, like it's across suites too, is really where we see the movement. Many customers start with us. The beauty of where we sit right now in providing a platform is there are many entry points for a customer to join the family. They can maybe start with a migration product if that's the issue they're dealing with, or it may start with AgentPulse. Maybe they're dealing with a specific agent issue that they're trying to wrap their head around. Or it may be backup, maybe something as simple as they need to back up their environment in the example that TJ gave earlier. That for us has been really the beauty of being able to solve multiple problems across the dynamic. For us, our upsell motion doesn't come from selling more seats.
It's coming from that cross-sell motion in terms of providing additional solutions. The biggest avenue comes from multiple products. I'm selling you something today, maybe in the backup environment, and tomorrow I'm selling you the governance solution that goes hand in hand with that backup. Maybe now it's agents being involved. So how are you governing those agents? That's really been a really solid motion in terms of what we're seeing in terms of growth for existing customers. As you would expect, we have customers that have been with us for a long time, and if they spend more time with us, they consume more products, they grow with us. We like those cohorts. We're seeing significant improvement when we look at a customer who stays with us.
I just want to highlight that, again, playing to our strength. This entire information management story is a singular story. For example, now in Microsoft Cloud, they have this new agent capabilities, Copilot. Every time it touches a file, it creates a new version of that file. Agents will touch files at machine speed. You also have 1,000 version of the same file. The storage in Microsoft 365 is actually very expensive. It's not the same cost as Azure storage. So we actually have already solutions that help customers in real-time optimize storage cost by removing older versions, out-of-date, based on policies, content, in real time. So we actually have a basically storage ROI for our customers. Of course, we also have a license management ROI for our customers. These problems are also related.
It's not just the backup conversation or archiving conversation or storage optimization conversation, it's also risk management. When AI does some damage, you'd be able to recover very quickly either the entire cloud environment or down to a singular file, granular level or permission structure level. We think that because these are very much interrelated problem sets now, exacerbated by AI, it positions us very well as a singular end-to-end platform provider.
Yeah. Maybe just around customer expansion. Look, you guys have been doing a phenomenal job on churn, and right now your net expansion rates of around 110%. What gets it to 115%? How do we think about that 110% breakdown between data growth, cross-sell versus upsell at this stage?
Yeah, it's a great point. When you think NRR, you think of that existing customer growth. It starts with your gross retention. Right now, our gross retention is standing around 89%. We think with some of the measures we have in place, that continues to grow and gets into the low 90s. We think there's at least another 2 points here over the next year or two where we can get that 89% to 91%. That includes our migration products, which as you would imagine, if you're doing migration, it generally has a start and an end. We include that in our GRR. If we excluded that, we pick up another 2 points just by excluding migration. But including it, we think we go from 89% to 91%. Those incremental 2 points flow into your NRR.
Immediately, we think the 110 goes to 112, really without doing anything else other than retaining the existing customers there, improving that retention. Then some of the things you talked about in terms of our cross-sell motion, across these platform, this platform that we have, we think there's a great opportunity to continue the motion. It's not really going to come from an increase in seats. That's not where we see most of the expansion, even today, or even for the past several years. Most of our expansion is coming from incremental products consuming more of the platform as opposed to more of one SKU. We would expect that to continue, particularly with the number of products we see coming to market today and also what we're expecting to deliver in the future.
The other thing we're doing a better job of today than we did 5 years ago is bundling. We used to essentially sell products as individual SKUs within the control suite. We're doing a much better job today of bundling solutions so that you're buying not just a single product, you're buying a solution which includes several products. That really resonates not only our own salespeople being able to sell it, but customers being able to consume it, because the end result for them isn't buying a product, it's buying a solution. I have a problem I'm trying to solve. How do you best solve it? What we're finding more and more, it's a bundled solution. Those bundles have higher price points, which are then generating more profitability, more NRR for our existing customer base.
Those are the key drivers that are going to move us to that 115, our longer term target.
Literally, I'm going to have to call you Steph Curry here as you hit the shot clock here as it ticked down to zero on the nose. Awesome insights, guys. Good luck on the billion-dollar ARR goal.
Thank you.
and 27.5% margin target that you just outlined.
There you go.
Guys, thanks for joining us, everybody.
Great. Thank you.
Thanks, everybody.