AvePoint, Inc. (AVPT)

How it makes money

Revenue comes from four sources that AvePoint reports separately: SaaS subscriptions to its cloud platform; term licences with a distinct support component for on-premise or hybrid deployments; professional services (implementation, training, consulting, customisation and managed services); and maintenance on legacy perpetual licences. SaaS, term licence and support, and maintenance are all treated as recurring. SaaS and term licences are usually billed annually and priced per user seat or by the volume of data protected, with SaaS recognised rateably over the contract term while the licence part of a term contract is recognised up front. In fiscal 2025 SaaS revenue grew 38% and represented 76% of total revenue, up from 70% in 2024, while the legacy maintenance line shrank; total annual recurring revenue reached $416.8 million, up 27%. Selling is split between a direct sales force aimed at large accounts and an indirect, two-tier channel of roughly 6,000 managed service providers, resellers and system integrators, plus listings on the Google Cloud, Azure and AWS marketplaces; managed service providers get a dedicated 'Elements' edition. By customer size, enterprises with more than 5,000 seats generated 52% of annual recurring revenue, mid-market 28% and small business 20%. The first quarter is historically the weakest and the fourth the strongest.

AvePoint's own filing describes a reinforcing dynamic in which broader platform adoption across workloads, users and geographies increases switching costs and supports retention, as the platform becomes embedded in how a customer governs and recovers its data. Backup and governance sit close to the customer's compliance obligations, so ripping the platform out means re-establishing policies, permission maps and recoverable archives — real friction. Certifications that are slow and costly to obtain, notably FedRAMP Moderate, Japan's ISMAP and IRAP, also gate access to government and regulated buyers. The advantage is narrow rather than wide, however: the company itself lists three competitor groups — legacy backup vendors, data security and posture management specialists, and smaller cloud data management vendors — and much of the platform's value depends on integrations with third-party ecosystems it does not control, most of all Microsoft, whose own product decisions can absorb or displace adjacent functionality.

Demand rests on structural forces rather than on the economic cycle: growth in unstructured enterprise data, which AvePoint says is roughly 80% of all data, tightening privacy and data protection regulation, ransomware and business continuity requirements, and the push to make data governed and clean enough for AI and autonomous agents to work on. Backup, compliance retention and access governance are close to obligatory once adopted, which makes the recurring base fairly sticky, and 2025 annual recurring revenue rose 27%. The company nevertheless discloses that reductions in IT spending or a weaker global economy could limit growth, that customers may delay or downsize purchases if the platform is perceived as costly or hard to migrate to, and that the licence-and-support and legacy maintenance lines are already shrinking as the mix moves to SaaS. Revenue is also seasonal, with the first quarter historically the lowest and the fourth the highest, so single quarters do not read as a trend.

Key risks

• Dependence on technology partners whose platforms AvePoint plugs into — The company states that most of its customers integrate its products with, or as an enhancement of, third-party solutions, so the usefulness of the platform depends on its ability to keep integrating with them. If those providers change the features of their solutions, suffer outages, performance problems or security incidents, or if AvePoint fails to retain the relationships, customer satisfaction, reputation, revenue and results could be harmed.
• Recent growth may not continue and renewals are hard to predict — AvePoint warns that the strong growth of recent periods may not be sustained, and that its ability to predict the rate of customer renewals — and the effect of those renewals on revenue and operating results — is limited, since customers have no obligation to renew. It also notes that if consumption-based pricing spreads, revenue will become harder to forecast.
• Reliance on resellers and distributors, especially for small business customers — The filing states that success with small business customers depends in part on resale and distribution partnerships, and that the business would be harmed if AvePoint fails to maintain or expand those partner relationships. Partner performance also affects the AvePoint brand, because a poor customer experience with a partner reflects back on the company.
• Cuts to IT spending and weakness in the wider economy — The company says unfavourable conditions in its industry or the global economy, or reductions in IT spending, could limit growth and hurt results, since its revenue depends on customers' willingness to spend on information technology. It adds that revenue may be disproportionately affected if customers come to see its products as costly or too difficult to launch or migrate to.
• Dependence on third-party hyperscaler hosting, and on its cost — The Confidence Platform is delivered through cloud infrastructure operated by third-party hyperscalers across geographically distributed data centres. A significant portion of operating costs consists of third-party data hosting and transmission services; if those costs rise because of vendor consolidation, regulation or contract renegotiation, AvePoint may not be able to pass the increase on. Interruptions, latency or poor service from those providers would impair delivery of the platform.
• A breach of AvePoint's own security would undercut the product it sells — The company processes and stores customer data, including backups customers create with its products, and personal information of customers and employees. It states that if its security measures are compromised, its products may be perceived as not secure, customers may curtail or stop using them, its reputation may be harmed, and it may face fines, penalties and claims. It seeks to cap its contractual liability but cannot be certain those caps will hold, and insurers could deny coverage.
• Global operations and currency exposure — Being a global company creates operational challenges the filing lists at length, including compliance with foreign privacy rules such as the GDPR, the EU Data Act and the EU AI Act, differing labour regulations, anti-corruption exposure under the FCPA and equivalent laws, and export control and sanctions rules. Only about 36% of fiscal 2025 revenue was denominated in US dollars against roughly 50% of expenses, so movements in exchange rates can significantly affect reported revenue, results and cash flows. The company also flags that tariffs, sanctions and trade barriers may weigh on the business.
• Acquisitions may distract management and dilute shareholders — AvePoint has completed six acquisitions since 2022 and expects deals to remain an important growth driver. It warns that acquisitions and investments may divert management attention, result in additional dilution to stockholders, and that it may be unable to integrate acquired businesses and technologies successfully or achieve the expected benefits.
• Rapid technology change could leave the products behind — The company operates in a market characterised by exponential growth in enterprise data, rapid technological advance and shifting customer requirements. It states that if it fails to adapt to changing technology, evolving industry standards and changing customer preferences, its products and services may become less competitive, and that it cannot guarantee it will anticipate future market needs.

The customer base is highly fragmented. As of 31 December 2025 AvePoint served more than 28,000 end customers across more than 100 countries, and the filing states that no customer accounted for more than 10% of revenue in 2025, 2024 or 2023, nor for more than 10% of billings or of accounts receivable. The 10-K does not disclose a combined share for the largest customers, so no figure can be given. Concentration sits elsewhere: revenue leans on a channel of roughly 6,000 managed service providers, resellers and system integrators — the main route to small and mid-sized customers — and on integrations with a handful of large cloud ecosystems, Microsoft above all. By geography, three countries each exceeded 10% of consolidated revenue in fiscal 2025: the United States, Germany and Singapore.