Rubrik - Earnings Call - Q4 2025

Executive Summary

• Rubrik delivered a strong Q4 FY25, exceeding all guided metrics with total revenue of $258.1M (+47% YoY), subscription revenue of $243.7M (+54% YoY), and non-GAAP EPS of $(0.18), while reporting $75.2M in free cash flow and a 29% free cash flow margin in the quarter.
• Subscription ARR reached $1.093B (+39% YoY), net new ARR was over $90M (a company record), non-GAAP total gross margin rose to 79.7% (vs 77.7% prior year), and Subscription ARR Contribution Margin turned positive to 2% from (12)% YoY, reflecting improved operating leverage.
• Management guided FY26 ahead of consensus (per call remarks), including revenue of $1.145B–$1.161B (+~30% YoY), Subscription ARR of $1.350B–$1.360B (+~24% YoY), non-GAAP EPS of $(1.23)–$(1.13), and free cash flow of $45M–$65M; Q1 FY26 revenue was guided to $259M–$261M and non-GAAP EPS of $(0.33)–$(0.31).
• Catalysts include accelerating cloud/DSPM adoption, identity recovery innovation (orchestrated Active Directory forest recovery), regulatory tailwinds (e.g., DORA in Europe), and material rights tailwinds to revenue during cloud transformation, offset by billings duration compression and seasonality in contribution margins and free cash flow.

What Went Well and What Went Wrong

What Went Well

• Record net new subscription ARR over $90M in Q4 and Subscription ARR of $1.093B (+39% YoY), driven by strong adoption of Rubrik Security Cloud and expansion across cloud and SaaS protection; subscription NRR remained above 120%.
• Profitability and cash generation improved meaningfully: Subscription ARR Contribution Margin improved >1,400 bps YoY to 2%, non-GAAP gross margin reached ~80%, and Q4 free cash flow was $75.2M with a 29% margin, demonstrating improving operating leverage at scale.
• Strategic product/regulatory milestones: integration of DSPM into RSC, debut of Turbo Threat Hunting, FedRAMP Moderate authorization for RSC-Government, and identity recovery innovation (orchestrated AD forest recovery) supporting faster, trusted recovery and compliance (including DORA-driven wins).

Selected quotes:

• “We once again exceeded all top line and profitability guided metrics.”
• “Subscription ARR contribution margin was positive 2%... an improvement of over 1,400 basis points.”
• “Our orchestrated AD forest recovery... transformed [recovery] into within an hour.”

What Went Wrong

• GAAP metrics remain pressured by elevated stock-based compensation from IPO-related vesting, with FY25 GAAP gross margin at 70.0% (down from 76.9%), GAAP EPS at $(7.48), and GAAP net loss of $(114.9)M in Q4 despite improving non-GAAP results.
• Revenue growth benefitted from nonrecurring material rights tied to the cloud transformation (~4 points in Q4); management expects a “few points” of such tailwinds to continue in FY26—positive for revenue but adds a nonrecurring component to growth quality.
• Billings duration compression (mid- to high-single-digit YoY) and seasonality expected in Subscription ARR Contribution Margin and free cash flow (weaker in Q2–Q3; first-half FCF ~breakeven), tempering steady cash generation through mid-year and introducing intra-year variability.

Transcript

Operator (participant)

Good afternoon, ladies and gentlemen, and welcome to Rubrik Q4 and Fiscal Year 2025 Results Conference Call. At this time, all lines are in listen-only mode. Following the presentation, we will conduct a question-and-answer session. If at any time during this call you require immediate assistance, please press star zero for the operator. This call is being recorded on Thursday, March 13th, 2025. I would now like to turn the conference over to Melissa Franchi. Please go ahead.

Melissa Franchi (VP and Head of Investor Relations)

Hello, everyone. Welcome to Rubrik's Q4 and Fiscal Year 2025 Financial Results Conference Call. On the call with me today are Bipul Sinha, CEO, Chairman, and Co-founder of Rubrik, and Kiran Choudary, Chief Financial Officer. Our earnings press release was issued today after the market closed and may be downloaded from the Investor Relations page at www.ir.rubrik.com.

Also, on this page, you'll be able to find a slide deck with financial highlights that, along with our earnings release, includes a reconciliation of GAAP to non-GAAP financial results. These measures should not be considered in isolation from or as a substitute for financial information prepared in accordance with GAAP.

During this call, we will make forward-looking statements, including statements regarding our financial outlook for the Q1 and full fiscal year 2026, our expectations regarding market trends, our market position, opportunities, including with respect to generative AI, growth strategy, product initiatives, and expectations regarding those initiatives, and our go-to-market motions.

These statements are only predictions that are based on what we believe today, and actual results may differ materially. These forward-looking statements are subject to risks and other factors that could affect our performance and financial results, which we discuss in detail with our filings with the SEC. Rubrik assumes no obligation to update any forward-looking statements we make on today's call. With that, I'll hand the call over to Bipul.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you, Melissa. I want to start by thanking everyone for joining today. The Q4 was an exceptional finish to what has been a milestone year for Rubrik. This quarter, we once again exceeded all top-line and profitability-guided metrics. Here are five key numbers. First, subscription ARR reached $1.93 billion, growing 39% year over year.

Yet again, a clear indication that we are winning the cyber resilience market. Net new subscription ARR reached over $90 million in the Q4, which is a record for us and a standout for a cybersecurity company at our scale. Second, our subscription revenue was $244 million, growing 54% year over year. Third, our subscription NRR remained strong above 120%. Fourth, customers with $100,000 or more in subscription ARR reached 2,246, growing 29% year over year. Customers with $1 million or more in subscription ARR reached 162, growing 64% year over year.

Finally, on profitability, we once again made material improvement in subscription ARR contribution margin, up over 1,400 basis points year over year. On cash generation, we are very happy to report that we had over $75 million in free cash flow this quarter and approximately $22 million in free cash flow for the full fiscal year.

Overall, our total revenue grew 47% year over year, and we generated 29% free cash flow margin in the quarter. We believe this combination of top-line growth and free cash flow margin at this scale is rare, which is truly a tremendous achievement. We continue to be very confident about our business and our leadership of the cyber resilience market. Therefore, we are guiding fiscal 2026 numbers ahead of the consensus. Now, let me unpack what is fueling the strong performance of our business.

I spend significant time meeting with CIOs and CISOs around the world. In fact, I had over 400 customer meetings last fiscal year. What is clear is that companies are undergoing multiple technology transformations to find success in the AI era. As organizations prepare their infrastructure for generative AI and re-platform to accelerate cloud adoption, they quickly realize the need for a modern data security strategy that provides robust cyber resilience.

This is why we continue to win significantly against all our competitors who struggle to deliver cyber resilience across the full breadth of customer transformation initiatives. What we see is that customers turn to Rubrik to provide cyber resilience as they re-platform across data centers and pivot to multiple clouds. As they deepen their cloud and SaaS investments, we help them orchestrate uniform and consistent data security controls through a single policy engine.

When a customer's identity service is compromised, we help them quickly recover by automating a painfully manual recovery process, all while avoiding malware infection. As our customers look to modernize how they manage their unstructured data for GenAI readiness, we help them securely mobilize their unstructured data to the cloud.

When our customers halt their GenAI deployments due to overexposed sensitive data, we help them strengthen their data security posture so that they can confidently deliver GenAI services. Our unique platform allows us to solve all these problems and more. First, our differentiated architecture positions us at the nexus of data, security, and AI. While other players are forced to consolidate, we continue to take market share away from the competition.

Second, as companies shift deeper into cloud and GenAI, they choose Rubrik to deliver comprehensive cyber resilience and quicker recovery times across their data from enterprise to cloud to SaaS applications. These are the key contributors to our exceptional growth at this scale. Now, let me highlight a few customer wins with cloud and SaaS protection.

This quarter, a European insurance company selected Rubrik to provide complete cyber resilience for its critical cloud workloads. Rubrik aligned with its key CEO initiatives to reduce the risk of downtime from a cyber attack, ensure DORA compliance, and reduce IT spend. Through a comprehensive proof of concept, Rubrik provided a single pane of glass to manage data security across AWS and Azure, as well as demonstrated a 24% total cost of ownership reduction, plus savings of over $400,000 per year by reducing infrastructure and storage costs.

A Fortune 50 organization selected Rubrik Security Cloud, or RSC, to protect M365, one of its most critical SaaS applications with tens of thousands of users. Rubrik has stood above other new-gen backup and recovery providers because of our demonstrated expertise in protecting the world's largest M365 environments and our strategic partnership with Microsoft. We also demonstrated an ability to recover 98% faster than native recovery tools, avoiding billions in potential losses upon a successful cyber attack.

In the words of the customer, "This is about the survival of our company." A U.S. business conglomerate bought our RSC Enterprise Edition, including Rubrik's Universal Cloud License, SaaS data protection for M365, and unstructured data protection. This organization's CIO and CISO selected Rubrik due to our superior capabilities, such as threat hunting and faster recovery times compared to legacy and new-gen alternatives.

With this purchase, the company was also able to consolidate nine backup and recovery tools into a single platform for complete cyber resilience. The move to public cloud infrastructure and greater adoption of SaaS applications is also driving strength in Rubrik's data security posture management, or DSPM, business. This quarter, we announced the full integration of our DSPM into Rubrik Security Cloud, allowing customers to rapidly enable DSPM for increased data visibility and sensitive data control from their existing RSC instance.

Our integrated DSPM solution empowers organizations to proactively reduce data risks across fragmented cloud, SaaS, and enterprise environments and ensures their sensitive data remain protected regardless of where it lives. Rubrik DSPM plus Rubrik Cyber Recovery offers complete cyber resilience, and this makes us unique in the marketplace. Let me give you an example.

This quarter, an existing large financial services customer upgraded their highest RSC edition for access to Rubrik DSPM and enhanced protection for their cloud and enterprise workloads. This customer also expanded Rubrik data protection to include critical structured and unstructured workloads in their AWS environment. With this purchase, this customer addressed a key business challenge of identifying where sensitive data lives on-premises and in the cloud.

The customer was also able to retire several legacy backup tools. CIOs look to Rubrik as a trusted partner in their journey to secure their critical enterprise databases and modernize their data centers with re-platformization initiatives. Along these lines, we recently announced our expanded support for Red Hat OpenShift virtualization and PostgreSQL databases. We'll continue to expand our capabilities to cover critical platforms across traditional and modern infrastructures.

Companies are also turning to Rubrik to secure their massive unstructured data estates, a trend we believe will continue as enterprise AI initiatives gain more speed. In Q4, a U.S. airline expanded their Rubrik footprint by adding unstructured data protection. We demonstrated a 65% reduction in operating expense over 36 months by freeing up data center capacity while enhancing the protection of their critical data sets. This quarter, we also added a lighthouse government organization in Southeast Asia.

This customer elected to replace their legacy backup vendor with Rubrik across structured and unstructured data in their data center as well as their cloud. Our functionality was unmatched by legacy incumbent and new-gen competition. Additionally, this customer noted our robust and built-in security features, including threat monitoring and anomaly detection. This purchase also included Rubrik DSPM for complete cyber resilience and cyber preparedness.

We continue to accelerate innovation to keep ahead of the threat landscape. Over a year ago, we launched our capabilities to secure Microsoft Active Directory, or AD, and Entra ID. These identity services are universally used and are primary targets for attackers. In fact, 90% of global 1,000 use AD to authenticate and authorize users. Over the past year, we have seen significant customer adoption of our immutable access control backups for Active Directory and Entra ID.

Our customers can leverage their existing Rubrik Security Cloud platform to restore their AD and Entra ID services without reintroducing malware or misconfiguration. This quarter, we deepened our innovation in identity with the general availability of Orchestrated Active Directory Forest Recovery. When an attack compromises Active Directory domain controllers, recovering the entire AD forest becomes an administrative nightmare, particularly for large organizations.

Our orchestrated AD forest recovery allows enterprises to rapidly and automatically recover entire AD forests to desired points in time while avoiding malware reintroduction. What once was a manual recovery that can span weeks is now transformed into recovery within an hour. We have already seen a number of wins across orchestrated AD forest recovery, which is currently sold as a standalone offering.

One highlight is with a state lottery organization that standardized on Rubrik Security Cloud this quarter, adding Rubrik orchestrated AD forest recovery. Already protecting enterprise data, they also added cloud-native workloads for Azure, SaaS data protection for M365, and Rubrik DSPM to enhance cyber preparedness. In addition, a global investment bank purchased Rubrik orchestrated AD forest recovery this quarter to shorten the recovery of Active Directory to just a few hours versus five days previously.

In closing, I'm proud of our unwavering customer focus and relentless execution as we create a new vision for the cybersecurity industry based on cyber resilience. However, we are still early in Rubrik's journey to realize the company's full potential. In calendar 2025, we aim to accelerate our product innovation, generate groundbreaking ideas, and lay foundations for continued future growth.

I'm confident that what is ahead of us is even more important and exciting than what we have previously achieved. Thank you to all our , as well as our customers and partners around the world. The best is yet to come. With that, I'm pleased to pass it over to our Chief Financial Officer, Kiran Choudary.

Kiran Choudary (CFO)

Thank you, Bipul. Good afternoon, everyone, and thank you for joining us today. Q4 was a record quarter to date. It was highlighted by solid top-line growth at scale, driven by our leadership in the growing market for cyber resilience and significant expansions within our customer base. It was also marked by strong and continued improvement in profitability.

Let me start by briefly recapping our Q4 and full-year fiscal 2025 financial results and key operating metrics, and then I'll provide guidance for the Q1 and full-year fiscal 2026. All comparisons, unless otherwise noted, are on a year-over-year basis. Subscription ARR best illustrates the momentum of our business, and we are very pleased to have ended Q4 with subscription ARR of $1 billion and $93 million, growing 39%. We added $90 million in net new subscription ARR. We continue to drive adoption of our Rubrik Security Cloud, which resulted in $876 million of cloud ARR, up 67%.

Our subscription ARR growth benefited approximately 2 percentage points from transitioning or declining maintenance base to subscription. We have a differentiated land and expand model, where we have multiple avenues to acquire new customers and expand the relationship with our customers after the initial contract. We can expand through the growth of data in applications already secured by Rubrik to the expansion of our footprint of applications secured and/or by the addition of more security functionality.

As a result, we continue to see a strong subscription net retention rate, which remained over 120% in the Q4. All vectors of expansion are healthy contributors to our NRR, highlighting the meaningful runway we have to more deeply penetrate our customer base. Adoption of additional security functionality is slightly over a third of our subscription net retention rate, up from approximately 29% in the year-ago period.

We ended the Q4 with 2,246 customers with subscription ARR of $100,000 or more, up 29%. These larger customers now contribute 84% of our subscription ARR, up from 80% in the year-ago period, as we become an increasingly strategic partner to our enterprise customers. For our Q4 and fiscal 2025, subscription revenue was $244 million, up 54%.

Total revenue was $258 million, up 47%. Revenue in Q4 benefited from our strong ARR growth and tailwinds as we progressed through our cloud transformation journey. We also saw higher non-recurring revenue, which was accounted for as material rights related to our cloud transformation, which contributed a few points of growth this quarter. Turning to the geographic mix of revenue, revenue from the Americas grew 48% to $185 million. Revenue from outside the Americas grew 47% to $73 million.

Before turning to gross margins, expenses, and profitability, I would like to note that I'll be discussing non-GAAP results going forward. Our non-GAAP gross margin was 80% in the Q4 compared to 78% in the year-ago period. Our gross margin benefited from the revenue outperformance, including higher non-recurring revenue.

Our gross margin also benefited from improved efficiency of our customer support organization, offset by continued investments in our cloud hosting infrastructure. We anticipate total gross margin to remain within our long-term target of 75%-80% in fiscal 2026. As a reminder, we look at subscription ARR contribution margin as a key measure of operating leverage supporting our path to profitability. We believe the improvement in our subscription ARR contribution margin demonstrates our ability to drive operating leverage and profitability at scale.

Subscription ARR contribution margin was positive 2% in the last 12 months ended January 31, compared to negative 12% in the year-ago period, an improvement of over 1,400 basis points. The improvement in subscription ARR contribution margin was driven by higher sales, the benefits of scale, and improving efficiencies and management of costs across the business.

Free cash flow was $75 million compared to $9 million in the Q4 of fiscal 2024. For the full year, free cash flow was $22 million compared to negative $25 million for fiscal 2024. This increase was primarily driven by higher sales and improved operating leverage, offset by higher expenses and increasing mix of annual and monthly consumption payments and shorter contract terms related to the year-ago period.

Turning to our balance sheet, we ended the Q4 in a strong cash position with $705 million in cash, cash equivalents, restricted cash, and marketable securities, and $322 million in debt. Let me now provide some context on our outlook for fiscal 2026. We remain confident about the strength of the cyber resilience market and demand for our differentiated offerings.

We believe these drivers, alongside our strong and consistent execution, will deliver strong subscription ARR growth ahead. As a reminder, we run our business on annual net new subscription ARR, but I'd like to give some guideposts on our current perspective on quarterly seasonality. We continue to expect higher net new subscription ARR in the second half of the year versus the first half.

While this is relatively in line with normal seasonality, this is also reflective of a shift to the annual sales comp plan this year versus semi-annual previously. Currently, we expect the first half to comprise approximately 40% of the full-year net new subscription ARR, with Q1 specifically contributing approximately 24% of full-year net new subscription ARR.

As we have mentioned before, revenue and revenue growth can fluctuate due to a number of variables. In fiscal 2026, we expect revenue will continue to see tailwinds from our cloud transformation, including a few points of growth from non-recurring revenue due to material rights. In terms of operating expenses, we expect to maintain a disciplined approach to investing across our business in order to drive future growth as we continue to scale globally.

Innovation remains a top priority for us, and we'll continue to invest in R&D while driving modest leverage in sales and marketing and G&A. I'd also like to note some seasonality in subscription ARR contribution margin due to the quarterly timing of net new subscription ARR and operating expenses. Specifically, we expect Q1 contribution margins to be up from Q4 before moving lower in Q2 and Q3, then proceeding higher in the Q4.

For free cash flow, we expect Q1 and Q4 to be our seasonally strongest quarters and the first half to be approximately break-even. Now, turning to our guidance for the Q1 and full-year fiscal 2026. In Q1, we expect revenue of $259 to 261 million, up 38%-39%. We expect non-GAAP subscription ARR contribution margins between 4%-5%.

We expect non-GAAP earnings per share of negative $0.33 to negative $0.31 based on approximately 192 million weighted average shares outstanding. For the full-year fiscal 2026, we expect subscription ARR in the range of $1,350 to 1,360 million, reflecting a year-over-year growth rate of approximately 24%. We expect total revenue for the full-year fiscal 2026 in the range of $1,145 to 1,161 million, implying approximately 30% growth.

We expect non-GAAP subscription ARR contribution margins between 4.5% and 5.5%. We expect non-GAAP earnings per share of negative $1.23 to negative $1.13 based on approximately 198 million weighted average shares outstanding for the full year. We expect earnings per share to decline from Q1 to Q2 and increase in Q3 and Q4. We expect free cash flow of $45 to 65 million.

In closing, we are pleased with our performance in the Q4 and in our first year as a publicly traded company. Looking forward, we believe we are well positioned to continue to deliver efficient and durable growth, given our leadership and innovation in the large and growing opportunity for cyber resilience. With that, we'd like to open up the call for any questions.

Operator (participant)

Thank you. Ladies and gentlemen, we will now begin the question and answer session. Should you have a question, please press star one on your touch-tone phone. You will hear a prompt that your hand has been raised. Should you wish to decline from the polling process, please press star two. If you're using a speakerphone, please lift the handset before pressing any keys. Please be reminded that everybody is limited to one question only. One moment, please, for your first question. Your first question comes from Saket Kalia of Barclays. Your line is already open.

Saket Kalia (Equity Research Analyst and Managing Director)

Okay, great. Hey, guys. Thanks for taking my question here, and nice finish to the year.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you.

Kiran Choudary (CFO)

Thank you.

Saket Kalia (Equity Research Analyst and Managing Director)

Absolutely. Bipul, I'll keep it to one question, and Bipul, maybe it's for you. You spend a lot of time with customers. How are you feeling about the TAM here for data protection? You talked about how customers need a more modern data protection tool as they move to the cloud and deliver GenAI. I think we see the share shift in numbers, but curious if you feel the TAM here is expanding through that sort of cloud and GenAI transition as well.

Bipul Sinha (CEO, Chairman and Co Founder)

Thanks, Saket. As you might recall, during IPO Roadshow and in our subsequent quarterly updates, we have done a fundamental transformation of the traditional data protection market. We brought DSPM and cyber recovery together to create a new platform to deliver cyber resilience. This platform, Rubrik Security Cloud, is a true data security platform.

By bringing this idea of data risk, data threat, and cyber recovery on a single platform, we massively expanded the TAM for our market. As we had mentioned in our IPO prospectus, it is over $50 billion market. What is exciting is that as customers are taking a GenAI journey and preparing for GenAI, as well as doing cloud transformation, the need for cyber resilience and data security is only increasing as they are adopting more SaaS platforms, they need to secure that data they need to ensure that the right data is available to the right user on the right platform at the right time for the right duration. All of it is expanding the TAM for us.

From where we sit, and as you can see this quarter results, we are not opportunity constrained. We are the only cybersecurity company that sits at the intersection of data security and AI. It is on us going forward is how do we prioritize our product development as well as inorganic tokens to really accelerate our journey to the AI future.

Saket Kalia (Equity Research Analyst and Managing Director)

Very helpful. Thanks, guys.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you, Saket.

Operator (participant)

Your next question comes from Kash Rangan of Goldman Sachs. Your line is already open.

Kash Rangan (Managing Director)

Hi. Thank you very much. Congratulations on the end of the fiscal year. Spectacular finish. Or a year it's been you went public you've put up a few quarters. Nice performance. As you, Bipul and team, as you look into the next fiscal year and beyond, there is a core thesis of why Rubrik has worked so well for your customers.

You've been at least two to three years ahead of your industry, and I hope you continue to be that way. As you look at customers' evolving requirements, what are the new battles to be fought and won? As you look to your most cutting-edge customers that are leading the company into your next two to three years of strategy, what are your leading-edge customers telling you as to what the leading-edge requirements are?

We all know that one way to look at this market is it's merely a replacement market of old technology being replaced with new. That is not always right. There are things that you've been doing with your DSPM, etc., to extend the frontiers. What are your best customers telling you as to what you need to be doing for the next two to three years?

Finally, if you can, if you have the time to comment, your take on the tariffs, etc., impacting the economy, and what are your customers saying about their spending priorities with RSC? Thank you so much.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you, Kash. Let me focus on the first question first. If you look at Rubrik, again, our core focus is cyber resilience. If you look at cyber resilience, what we are telling our customer is that assumed breaches will happen to you. If you have to have an assumed breach posture, how do you ensure that you understand the risk in your most critical asset as well as your services? How do you ensure that your services are up and running even when confronted with cyber attacks? This is where we are doubling down, building our data security platform to deliver cyber resilience across cloud, across SaaS.

If you think about the fundamental risk to the data, it comes from the user interaction with the data both users could be human or non-human identities. That is why we are also focused on building the next S-curve around identity-related threat and whether it is Active Directory or Entra ID. We are seeing interesting momentum in that market. We launched the first identity recovery product about a year ago, and it had very significant traction. Our recent forest recovery release has really proven that we are on the right track with respect to the identity.

Around cyber resilience, we continue to focus on data security, identity security, and delivering cyber recovery and the risk posture. We also have this other unique opportunity because we have all of the customer data and plus the governance and security and integrity on the data. Our platform is that how do we leverage this data lake, the next-gen data lake that we are naturally creating to deliver cyber recovery because we have the source of truth for the data to power customers' AI applications.

That is where we are actually iterating and figuring out what is the product-market fit. If you look at our success today, as you said, Kash, our success today is the result of the work that we did four or five years ago where we built a platform that was futuristic, where we took the market risk and built a purpose-built platform for cyber resilience. We are thinking about what do we do on Annapurna and all of these other new vectors of growth so that four or five years from today, we still have a high growth curve.

That is how we want to build a generational company. A lot of opportunities, as I said before, for us, we are not opportunity constrained. We need to ensure that we invest in the right market focus and continue to drive, again, a very profitable growth business.

In terms of tariffs and macro, we continue to see a very strong secular demand for our product because cyber does not care about market cycles, Cyber does not care about what is happening in terms of the public markets because on a down market, the customers get more worried about protecting their business, and they want to ensure that their businesses are continuing operation.

Again, we are not seeing any demand shift for our product. Cyber resilience continues to be the number one topic for cybersecurity, and our customers are investing to ensure that they are continuing operation even when they are confronted with a successful cyber attack.

Kash Rangan (Managing Director)

Terrific. Very clear answers. Thank you so much, Bipul.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you, Kash.

Operator (participant)

Your next question comes from Fatima Boolani of Citigroup. Your line is already open.

Fatima Boolani (Managing Director and Head US Software Equity Research)

Good afternoon thank you so much for taking my questions. Kiran, this one's for you. I wanted to drill in on the very substantial improvements in subscription ARR contribution margin, both in period over the course of last year in this period and what you're contemplating in the outlook. I know you did discuss a lot of the high-level drivers, and it seems like the confluence of the business hitting a bigger scale, more rigorous expense management are contributing factors.

I was hoping you could drill in on maybe some micro-level factors with respect to sales efficiency potentially being an area where you're seeing some outsized or better leverage, as well as just maybe the inference that your deal sizes are getting bigger, your average transaction sizes i was hoping you could add a little bit more color outside of just some of those other broader stars aligning and just more disciplined expense management if there's anything intrinsically inflecting in the business from a deal size perspective. Thank you.

Kiran Choudary (CFO)

Sure, Fatima. Thanks for your question. We are really pleased with the progression we've had on profitability. As you know, from the results, we are subscription ARR contribution margin positive as of the reported quarter, as well as cash flow positive for the full year. We have been hard at work on a number of fronts to achieve that. We have accelerated our path to profitability over the past year. We improved our subscription ARR contribution margin 1,400 basis points year over year. The guide for fiscal 2026 will indicate further improvement.

I think you addressed the broader areas in setting up the question the key leverage areas of efficiency came from our big investment areas in sales and marketing and R&D. Out of the 1,400 basis points in margin, 1,200 basis points approximately came just from sales and marketing. There are a number of drivers there. One is productivity. I think you mentioned sales efficiency. Productivity is a key driver of sales efficiency. As Bipul has talked about, we are investing in multiple different levers from a product perspective. More products to sell drives greater productivity.

We're also investing in enablement to make our reps and sales team more productive in the messaging around cyber resilience. I will also add that there's a natural leverage we're getting in our model at scale, which is the growth and renewals. It's still a minority of our revenue and ARR base, but it's fairly efficient from an investment perspective in renewing in our market and our product areas.

That is giving us quite a bit of efficiency as well. The last point I would say in R&D, we've talked about previously as well. We hire from a global talent pool. In addition to being able to attract great talent outside the HQ, we're also able to get more cost leverage as well by leveraging our presence in India and Israel. I think you had a point, your question around deal sizes and ASPs as well.

The one metric I'd point to is we reported in our earnings transcript that the contribution from $100,000 plus customers is actually growing year over year. It's now 84%. And that just implies that we are becoming more strategic to customers and we are able to do larger transactions, both land and expand.

Fatima Boolani (Managing Director and Head US Software Equity Research)

Very helpful. Thank you.

Kiran Choudary (CFO)

Thank you, Fatima.

Operator (participant)

Your next question comes from John DiFucci of Guggenheim Securities. Please go ahead.

John Difucci (Senior Managing Director)

Thank you. Thank you. My question, I think, is for Kiran. Kiran, the top line was really impressive, as you guys have pointed out, but also the other questions on the call. I think I want to lean a little bit more into Fatima's question. By the way, the top line was actually the best we've seen across our entire coverage universe this period. But cash flow was also impressive. I mean, you're a year ahead of what you thought you'd be at perhaps a year ago.

I know the top line and bottom line are sort of related because we know the greatest expense in any software company is sales and marketing, and that's all spent on new business. Your new business is really what stood out this quarter.

At the same time, when you look at your balance sheet, you see accounts receivables up by much more sequentially than they have been in the last two Q4s i was kind of glad it made sense that you said the Q1 and the Q4 would be the strongest for cash flow and feel good about that for next quarter. How should we be thinking about that, especially in the context of your annual guide for moderation of cash flow in fiscal 2026? Is that just sort of a place to start? It's the beginning of the fiscal year, or is it just is it prudence, or there's something else we should be thinking about when it comes to cash expenses?

Kiran Choudary (CFO)

Sure. Thanks for the question, John. So very pleased with the progression on cash flow for the past year. It was a meaningful year-on-year improvement, 600 basis points of improvement. The guide would imply another couple of hundred basis points or a little higher improvement as well.

The key drivers in our business for cash flow is scale of the top line, leverage, best indicated by margin, subscription contribution margin, and then timing of collections. As you know, timing of collections, we largely still majority of our contracts are multi-year and multi-year collections upfront. We have been experiencing over the past couple of years a billings duration compression gradually. I would say high single digits compression, mid to high single digits compression year over year. We are assuming that continues.

Obviously, that varies quarter to quarter. We have assumed some further compression as we look to the guide. Now, it's early in the year. We're just starting our first full-year guidance as a public company. We want to be really thoughtful, and that's where we wanted to start.

John Difucci (Senior Managing Director)

Makes total sense. Thank you very much. Nice job, guys.

Kiran Choudary (CFO)

Thank you.

John Difucci (Senior Managing Director)

Thank you.

Operator (participant)

Your next question comes from Andrew Nowinski of Wells Fargo. Your line is already open.

Andrew Nowinski (Senior Research Analyst)

Okay thank you for the question this afternoon, and congrats on good results. I wanted to ask about the divergence between revenue growth and ARR, It looks like you guided to about 30% revenue growth for this coming year and 24% ARR growth. I was thinking maybe it's related to the mix of on-prem and cloud and how that revenue is recognized. I'm just wondering if you could provide any more color on what might be driving that divergence between the two growth rates. Thank you.

Kiran Choudary (CFO)

Sure, Andrew. I'll take that one. As you're familiar with our business, we are progressing through a cloud transformation, which we started about two years back we're in the third year of it. In the early part of the transformation, revenue growth lagged subscription ARR. That's why we run our business on subscription ARR because it truly represents the momentum of the business. Now, as we progress towards the latter half of the transformation, revenue growth is catching up, and it's actually benefiting now. That's what you see. Even in this quarter, total revenue growth of 47% versus ARR of 39%.

That is what is represented in the guide as well. We're guiding to the midpoint of about 30% revenue versus ARR of 24%. There was one point I made in the prepared remarks as well. The Q4 revenue growth benefited for about four points of non-recurring upfront revenue from material rights related to the cloud transformation. We expect that to continue in fiscal 2026 as well, a few points of growth. That is adding further tailwinds to revenue.

Andrew Nowinski (Senior Research Analyst)

Thank you very much.

Kiran Choudary (CFO)

Thank you, Andrew.

Operator (participant)

Your next question comes from Brad Zelnick of Deutsche Bank. Your line is already open.

Brad Zelnick (Managing Director and Software Equity Research)

Congrats. What an amazing end to a great year. My question is, I guess, for Bipul and Kiran, we'd love to hear whoever wants to speak to it. I'm curious why now is the right time to move from six-month comp plans to 12-month comp plans? What behavior are you incentivizing this year? What impact do you expect that these changes might have beyond the seasonality impact that you have called out? Thanks.

Kiran Choudary (CFO)

Hi, Brad. Thanks for the question. Let's get on. I'll address it. As you know, we run our business on annual net new ARR. That is what we have been focused on for a few years now as we move to a subscription model. Having an annual comp plan best aligns the sales team and execution in the field to how we run the business, how we plan, and how we invest that is a goal we had in mind for some time. We are basically transitioning to that in terms of this change we are making in the company.

When you look at it, and we did benchmark as well, when you look at companies of our size, a billion ARR plus, this is more common. We feel good about making the decision It obviously has some impact on seasonality, which we have factored into our guidance on the top line as well as free cash flow that is really the driver, to align it with the way we run the business.

Bipul Sinha (CEO, Chairman and Co Founder)

Brad, in terms of our sales team, our sales leader has come from at-scale companies where they have run the business on the annual basis. We are essentially following large-scale software SaaS companies, how they align their yearly net new ARR number with the sales team quota and how they proceed through the year.

Brad Zelnick (Managing Director and Software Equity Research)

No, that makes perfect sense i appreciate it. We have seen it as companies mature any company of your scale would typically do this. I was also asking beyond that, at the beginning of a fiscal year is often when we see companies make changes to go to market, other changes to the comp plan, and was just asking if there were any other behaviors that also you were looking to incent. That was very clear. Thank you.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you.

Kiran Choudary (CFO)

Thank you, Brad.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you

Operator (participant)

.Your next question comes from Eric Heath of KeyBanc Capital Markets. Your line is already open.

Eric Heath (CFA and Equity Research Analyst)

Hey, thanks for taking the question. I thought it was interesting in terms of the announcement you made with DSPM and making it native inside the RSC console. I was just curious if you could talk about the benefit you expect to see and how maybe this could accelerate adoption now that it's native into the console and users could probably more easily pivot and explore and tinker with that new capability.

Bipul Sinha (CEO, Chairman and Co Founder)

Thanks, Eric. Rubrik always had this platform strategy. We want to give a single platform for all the data security capabilities to deliver complete cyber resilience and now AI through Annapurna. Our idea is that our customers can easily enable DSPM directly on their existing RSC instance to be able to secure and understand the risk in their data.

If you combine the DSPM plus cyber recovery, Rubrik Security Cloud is unique in terms of delivering complete cyber resilience, As GenAI acceleration is happening within the enterprise, we believe that DSPM is a critical piece of that puzzle to be able to secure the data before the data is fed into models or RAG and an enterprise deliver responsible AI.

Just to give you an example, a financial services organization added DSPM this quarter for Microsoft Copilot. Essentially, our DSPM empowered them to quickly and securely adopt Copilot and realize the full productivity gains that they anticipated from Copilot that is the story that we believe is going to be critical. As businesses adopt AI, they need to understand security of the data they need to understand sensitivity of the data and ensure that only the right data is delivered to the right user.

Eric Heath (CFA and Equity Research Analyst)

Thanks, Bipul. Good.

Operator (participant)

Your next question comes from Gregg Moskowitz of Mizuho. Your line is already open.

Gregg Moskowitz (Managing Director)

Okay. Thank you. I'll add my congratulations on a very good Q4 and a terrific year. Bipul, you alluded to this briefly, I think, in your script, but what are you hearing or seeing so far from your European customers following the implementation of DORA, the Digital Operational Resilience Act? What do you think the impact of DORA will be on Rubrik going forward? Thanks.

Bipul Sinha (CEO, Chairman and Co Founder)

If you think about regulatory tailwinds, data compliance and resilience requirements are very, very important to every business with any data or application of any significance CISOs have this as high priority because it concerns the, obviously, continuing operation of the business as well as having the regulatory audit pass the regulatory audit. We believe that this is a secular tailwind for our business from a variety of drivers, including financial regulations such as DORA.

Just to illustrate, a European insurance company, we had a win there this quarter, and DORA was a key factor for that deal. Obviously, regulation is an aspect of the cyber attack and cyber resiliency and recovery in addition to the business imperative of being an ongoing operation. We feel very good about how we have created our offering, and our customers have easier time passing the DORA audit because of the cyber resiliency, including cyber recovery capabilities that we are driving.

Gregg Moskowitz (Managing Director)

Great. Thank you.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you, Gregg.

Operator (participant)

Your next question comes from Joel Fishbein of Truist. Your line is already open.

Joel Fishbein (Managing Director)

Thank you. Congrats on a great quarter and solid execution. My question's around sales capacity and traction with the channel partners. If you could just give us an update there on how you're thinking about your coverage for 2026 and 2027 from a sales capacity perspective, that would be great. Thank you.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you, Joel. In terms of the sales capacity, we believe that we have the right capacity on the ground to execute to the opportunity. At the same time, as any prudent business would, we always look for fast ROI market pockets where we can make an investment and take advantage of the growth opportunity that could be in front of us.

We continue to kind of make sure that we look at the market and we are appropriately investing in the GTM capacity. In terms of our channel partners, we have the right number of channel partners in every major market we operate in. We have the right routes to market identified. We want to kind of double, triple down on our existing partners to ensure that they continue to build a big business around Rubrik and drive an ecosystem.

Joel Fishbein (Managing Director)

Great. Thank you.

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you, Joel.

Operator (participant)

Your next question comes from Keith Bachman of BMO. Your line is already open.

Keith Bachman (Analyst)

Yes. Thank you very much for taking the question. Kiran, I think this is for you. I wanted to understand a little bit of context around the guidance. In this past year, you did $309 million of net new, two really strong quarters to end the year, not just Q4. Q3 was very strong. You are guiding the $255 million call of net new at the midpoint, so lower year over year. We have gone through quite a few things on this call, including DSPM and how it is adding to the capability and sales capacity.

I'm just wondering if there's anything you wanted to call out about why net new would be lower year over year in 2026 versus 2025, given all the tailwinds that seem to be at your back. For example, was there any deals that may have closed early in the January quarter or anything you want to call out about why net new would be down year over year? Many thanks.

Kiran Choudary (CFO)

Sure, Keith. Let me give you some thoughts on that. Really pleased with the growth we witnessed in fiscal 2025. Obviously, as I said earlier, we planned the business on net new ARR, and it has strong growth and delivered ahead of our expectations. A few things to call out to give context on the guidance. One, we've talked about earlier as well, and I mentioned that in the script, we got about two percentage points of benefit to our ARR growth in fiscal 2025 from the remaining part of the maintenance to subscription transition. That impact on net new ARR is higher than the ARR base.

I'll also say that we are early in the year. We are giving our first annual guide as a public company we want to be really thoughtful. As Bipul has talked about, we see strong demand, continued demand for cyber resilience. I also want to put numbers we feel really confident about and look forward to finishing the year strong.

Keith Bachman (Analyst)

Okay. Many thanks.

Melissa Franchi (VP and Head of Investor Relations)

Thank you, Keith.

Operator (participant)

Your next question comes from James Fish of Piper Sandler. Your line is already open.

James Fish (Research Analyst)

Hey, guys. Nice way to finish the year. First, just wanted to understand what you're seeing on the competitive landscape in DSPM, given competitors and, in some case, your partners are more like data in motion players than sort of data at rest. Second, any way to think about the penetration of DSPM either into the entire install base or even just the greater than $100,000 ARR customer cut, especially as you guys think about that Enterprise Plus edition being bundled?

Bipul Sinha (CEO, Chairman and Co Founder)

Thank you, Jim. In terms of the DSPM, I would say it's still very early market. The awareness of this market is building, and now people are realizing that they need to understand the data risk, data being the core asset of the business. Our strategy was to combine DSPM with cyber recovery to create a true cyber resiliency platform where a customer can assume breach and understand what risk that entails and to be able to deliver a complete cyber preparedness and cyber recovery.

That is the angle we are taking. We are not competing with infrastructure security players who have DSPM solutions because their use case is different. If you look at this reason for success for Rubrik, the reason for success for Rubrik is around driving this complete cyber resilience and combining of DSPM and data and cyber recovery on a single platform. That is what is driving our success in the marketplace.

If you look at the displacement of what we are doing for the legacy platform as well as the new-gen vendor, a lot of it is because of this complete cyber resiliency that we are driving to be able to give them peace of mind that their business will be up and running no matter what attack happens.

Operator (participant)

Your next question comes from Shrenik Kothari of Baird. Your line is already open.

Shrenik Kothari (Sector Head Director of Cybersecurity and Infrastructure Software Equities)

Hey, yeah. I will echo my congrats on the great quarter and execution, Bipul, Kiran. Thanks for taking my question. Bipul, you mentioned about Microsoft-related developments, the 365 Copilot data protection and Active Directory recovery. Can you elaborate on how Rubrik's strategic partnership with Microsoft has evolved in strengthening your position, and how do you see it evolve further to address the emerging challenges, opportunities in Azure environments and Microsoft environments? Thanks.

Bipul Sinha (CEO, Chairman and Co Founder)

We have a very strong partnership with Microsoft. In fact, Microsoft is one of our strongest partners. This partnership is based on complementary offering that both Microsoft and Rubrik has. Microsoft is focused on cloud security, and Rubrik is focused on data security and delivering cyber resilience, including cyber recovery.

As a result, Microsoft, we are driving a lot of workload on Azure-native applications and 365. We also, at Ignite, showcased Rubrik as one of the four or five key partners that is building Security Graph at Microsoft you might have noticed that. Microsoft gave Rubrik Partner of the Year in the U.S. and U.K. in 2023, and last year, they gave us the Healthcare Partner of the Year.

We continue to have a, again, deep partnership with Microsoft, co-engineered products both on M365 as well as on Azure native, and we continue to build solutions for our customers in fact, last quarter, we had one of the very large wins for M365, again, delivering cyber resilience to M365 for one of the largest Microsoft customers, leveraging the Microsoft infrastructure.

Shrenik Kothari (Sector Head Director of Cybersecurity and Infrastructure Software Equities)

Congrats, again.

Operator (participant)

Your next question comes from Paramveer Singh of Oppenheimer. Your line is already open.

Paramveer Singh (Research Analyst)

Yeah. Hi. Yeah. Hi. Thank you for taking my question. And it's always good to see a company execute well in a tough environment. Now, my question was, as you look to your quarter and towards 2026 fiscal, what part of your ARR do you think is coming from greenfield versus brownfield opportunities where you're taking share? In that vein, have you seen any change in the competitor environment as Veeam is trying to push more upstream, and now that Cohesity has closed the acquisition of Veritas? Thank you.

Bipul Sinha (CEO, Chairman and Co Founder)

Rubrik is an equal opportunity, as I said in the past, replacer of all technologies, including legacy and new-gen vendors. In fact, if you look at the legacy environment, Fortune 500 biotech went all in with Rubrik, replacing a 20-year foothold by a legacy vendor, and they wanted a single pane of glass for faster cyber recovery. There are so many examples of it another example is a Fortune 500 logistics company replaced, again, a legacy provider that you mentioned with RSC as they shift workload to Google Cloud. Also selected Rubrik for enterprise apps, M365, and Google Cloud protection.

In terms of legacy versus replacement versus new workload, obviously, as the customer takes the cloud transformation journey, we are securing their cloud as they adopt more SaaS platforms, As SaaS platforms become more mission-critical, we are expanding those horizons and delivering data security, at the same time transforming their enterprise workload landscape to ensure that they can deliver complete cyber resilience, including cyber recovery when confronted with successful cyber attacks.

Paramveer Singh (Research Analyst)

Got it. Thank you so much for that, Bipul. If I could really squeeze in one on Annapurna, I wanted to get a sense of what early conversations have you had around that, and would you need to expand Annapurna's capabilities beyond Bedrock to see more meaningful adoption across LLMs? Thank you.

Bipul Sinha (CEO, Chairman and Co Founder)

We are early in Annapurna. We are still doing market discovery discussions, figuring things out. As I said before, Annapurna is the next three, five-year strategy for us, and it is one of those initiatives that we do to ensure that we have continued growth and success in the next horizon as we create the next S-curve. We see opportunity for Annapurna all across multiple clouds, including Azure and GCP, as we continue to kind of build out the capabilities and figure out the product-market fit.

Paramveer Singh (Research Analyst)

Got it. Thank you so much for sharing, Bipul.

Bipul Sinha (CEO, Chairman and Co Founder)

Appreciate it.

Melissa Franchi (VP and Head of Investor Relations)

Thank you.

Operator (participant)

There are no further questions at this time. I'll hand over the call to Bipul Sinha for closing remarks. Please go ahead. I wanted to thank everyone on this call, including our analyst friends who cover us, plus Rubrik customers, partners, and Rubrikans all around the world for their relentless focus and diligence to help Rubrik realize its full potential.

Bipul Sinha (CEO, Chairman and Co Founder)

Again, I'll repeat, since these early days for the company, our ambitions are very, very large. We have a unique opportunity to continue to build out the company and build out the platform at the intersection of data security and AI. I'll repeat, the best is yet to come. Stay tuned. Thank you for your continued support, and talk to you in next quarter.

Operator (participant)

Ladies and gentlemen, this concludes today's conference call. Thank you for your participation, and you may now disconnect.