What changed in this filing

/stocks — the workspaceLOADING

Item 1. Business

2026-02-26 compared with 2025-02-28 · 202 added, 166 removed, 201 unchanged (65% of the section changed)

Company Overview

AvePoint empowers organizations of all sizes, industries, and regions with its cloud-native data management software platform, enabling them to prepare, secure, and optimize their critical data.

The AvePoint Confidence Platform unifies data security, governance, and business continuity into a seamless, resilient experience, addressing the most pressing challenges in today’s complex digital landscape.

In a world where data is sprawling across hybrid work environments and generative artificial intelligence (“ AI ”) technologies are rapidly emerging, AvePoint stands out with its platform-first strategy.

By integrating features and solutions to optimize operations, AvePoint delivers more than basic security controls—it redefines how businesses manage their most sensitive data and critical assets.

This holistic and automated approach enables organizations to secure the perimeter for sensitive data, strategically govern digital workspaces, and ensure compliance with evolving regulatory requirements.

Organizations today face a host of challenges that make a robust data management strategy indispensable, including:

Optimizing data for AI:

As organizations modernize their data ecosystems, the complexities of leveraging generative AI technologies require proper governance, security, and lifecycle management.

With AvePoint, companies can extract more value from complex datasets, make informed decisions, reduce workloads, and enhance customer experiences.

Explosive data growth:

The hybrid work model and software-as-a-service (“ SaaS ”) proliferation have led to a surge in unstructured, sensitive data.

AvePoint’s solutions tackle the sprawl with robust control and protection measures to manage this growth.

A dangerous threat landscape and complex regulations:

Companies are navigating increasing cyber threats and global regulatory demands.

AvePoint ensures data is protected, secure, and compliant, helping mitigate financial, operational, and reputational risks.

The need for automation:

To monitor, govern, and respond to threats efficiently, organizations require streamlined, automated platforms that deliver rapid value.

AvePoint’s automation layer integrates seamlessly to achieve this efficiency.

Guided by its Beyond Secure philosophy, AvePoint goes beyond traditional boundaries to inspire trust, enabling organizations to focus on innovation while protecting against data breaches and unauthorized access.

For over 20 years, AvePoint has continually innovated to provide solutions that meet the demands of modern data management, empowering businesses to overcome challenges and unlock new possibilities in an ever-evolving landscape.

Platform Overview

The AvePoint Confidence Platform delivers a comprehensive and integrated set of SaaS solutions, empowering users in a variety of technology roles—including IT operations, development operations, and cybersecurity—to govern and secure the digital workplace.

Built on a Platform-as-a-Service (PaaS) architecture, it combines modularity with tailored, industry-specific functionality to address critical operational challenges and manage data effectively across third-party cloud vendors like Microsoft, Salesforce, Google, AWS, Box, and Dropbox.

With extensions to existing cloud services and new applications leveraging common underlying SaaS services, the platform provides superior flexibility, and presents a compelling solution for organizations seeking efficient, consolidated solutions amidst budget uncertainty and the demand for faster ROI.

With these capabilities, the Confidence Platform allows organizations to move forward confidently, thriving within a sustainable security framework.

It stands out from competitors through three key differentiators:

A Complete, Actionable Picture of Your Data Estate:

The platform’s Command Centers enable organizations to establish a comprehensive view of pressing business issues and implement scalable, automated remediation, ensuring seamless governance and management of vast amounts of critical information.

Shared Accountability:

Scalable security requires a culture of responsibility.

The Confidence Platform empowers data leaders to operationalize digital workspace security, promoting accountability from data owners and streamlining governance across multiple collaboration platforms.

Programmatic Protection:

The platform employs a tiered data protection strategy to minimize attack surfaces and compliance risks while delivering exceptional data security.

Its integrated approach to data security and governance provides risk management, audit, and regulatory teams with the assurance they need to meet compliance obligations efficiently.

The AvePoint Confidence Platform is organized into three interconnected suites, each addressing specific business drivers and customer needs:

The Control Suite:

Focused on automating data governance and proactively enforcing policies to reduce security risks.

Infrastructure and operations teams can oversee and protect business-critical data across multiple collaboration tools.

The Resilience Suite:

Designed to ensure business continuity, preserve critical records, and facilitate compliance with regulations.

It provides risk management and regulatory teams with the tools to navigate the complex compliance landscape effectively.

The Modernization Suite:

Focused on transforming legacy data and processes for modern SaaS platforms.

It empowers change management teams to drive digital transformation with AI-ready solutions, enhancing employee engagement and productivity while accelerating the impact of these changes.

Built with security and scale in mind, the AvePoint Confidence Platform operates across 14 global data centers, adhering to rigorous industry standards, including ISO certifications, HITRUST CSF, SOC 2 Type II accreditation, and FedRAMP (Moderate) Authorization.

This ensures that customers benefit from continuous upgrades, enhanced security, and the ability to meet evolving data management challenges.

As a result, the AvePoint Confidence Platform stands out as a true platform offering, delivering spend consolidation, efficiency gains, and immediate value for customers.

It doesn’t just solve problems—it redefines how businesses secure, govern, and optimize their most critical data assets, empowering them to thrive in the transformative era of AI-driven innovation.

Within each suite are a number of capabilities addressing critical customer needs.

The products are typically licensed according to the number of users within the organization, while some include a consumption-based component.

Lastly, because the AvePoint Confidence Platform is built upon a common data engine and common data layer, the purchase of products from multiple suites provides an incremental benefit to customers in the form of more intelligent and relevant data insights and automation.

The Control Suite offers the following capabilities:

Operationalize collaborative workspaces :

centralize the management of SaaS solutions and productivity applications, with the flexibility to configure and delegate control for different end-users;

Regulatory compliance automation :

Implement, enforce, and prove that access and configuration policies across collaborative workspaces comply with internal or regulatory requirements;

Access and risk management :

gain insight into who has access to critical data and where the company is at risk;

Cost optimization :

maximize the return on SaaS subscription investments through real-time management and allocation of entitlements;

The Resilience Suite offers the following capabilities:

Backup-as-a-Service :

support workloads in cloud Infrastructure-as-a-Service and PaaS, including protection against and recovery from ransomware attacks, accidental deletions and user error in a variety of SaaS applications, as well as support for a range of on-premises workloads;

Data classification :

automate data tagging, classification and protection to prevent loss;

Storage optimization :

archive stale content from active systems to reduce cloud storage costs and improve data quality;

Information lifecycle management :

manage information and ensure compliance, optimize cloud storage, streamline processes, and unlock data driven insights.

The Modernization Suite offers the following capabilities:

Data modernization and restructuring:

seamlessly move and transform legacy data for use by modern SaaS platforms;

Process modernization:

transform manual processes with built-in data insights and process automation for Line of Business and role-based applications;

Workforce transformation measurement:

enable employees to thrive through AI-powered insights into employee engagement and sentiment.

AvePoint is a global provider of modern data protection, enabling organizations to secure, govern, and operationalize data at scale across major cloud ecosystems.

Customers rely on the AvePoint Confidence Platform to reduce risk, improve operational efficiency, and accelerate digital transformation as they adopt cloud collaboration and artificial intelligence (" AI ")-driven advanced tools and workflows.

As organizations embed AI into core business processes, data becomes both a strategic asset and a growing source of risk.

AI can amplify the impact of poor data hygiene, including sensitive data exposure, compliance failures, and operational disruption.

Enterprises increasingly require a modern data foundation where data is discoverable, classified, governed, protected, and recoverable by design.

The Enterprise Challenges We Address

Our solutions are designed to address four pervasive and interconnected enterprise data challenges:

Legacy and fragmented data that limits visibility, governance, and AI readiness;

Overexposed data that increases security, privacy, and regulatory risk;

Digital sprawl that drives operational complexity and rising total cost of ownership;

Data loss and interruption, which threaten business continuity and organizational resilience.

By addressing these challenges through an integrated platform, we enable organizations to reduce risk, lower complexity, and accelerate time-to-value from their data.

Platform Model and Recurring Revenue Dynamics

Our platform model is designed to deliver compounding customer value over time, which supports durable recurring revenue.

As customers increase adoption across workloads, users, geographies, and use cases, they gain improved visibility, cleaner data, stronger governance, and enhanced resilience outcomes and capabilities that become more valuable as data volumes and AI usage grow.

This dynamic supports a reinforcing model:

broader platform adoption improves data trust and control, which increases platform utility and drives additional use cases and module adoption over time.

And in turn, this improved platform penetration increases switching costs and supports ongoing improvements in gross and net retention metrics, as AvePoint becomes more strategic and embedded within our customers.

AvePoint Confidence Platform

The AvePoint Confidence Platform is a comprehensive and integrated set of solutions that empowers technology teams including:

IT operations, development operations, and cybersecurity to govern and secure the digital workplace.

Built on a Platform-as-a-Service (PaaS) architecture, the platform combines modularity with tailored functionality to address operational challenges and manage data effectively across a broad set of cloud and content ecosystems.

These include major hyperscalers and enterprise applications such as Microsoft, Salesforce, Google, AWS, Box, and Dropbox, as well as other collaboration, identity and developer platforms such as Docusign, Confluence, GitHub, Jira, Okta, Bitbucket, Smartsheet and Monday.com.

Through connections and extensions to existing cloud services, the platform is designed to provide flexibility, consolidate point solutions, and accelerate customer return on investment.

The AvePoint Confidence Platform consists of three interconnected suites:

Control Suite :

Automates data governance, enforces policies, and optimizes SaaS investments, enables expense management and reduction, and provides insight into access, risk, and entitlements across collaborative platforms.

Resilience Suite:

Supports business continuity and compliance through Backup-as-a-Service, ransomware recovery, lifecycle management, and classification-driven protection.

Modernization Suite:

Modernizes legacy systems and processes into AI-ready, SaaS-based experiences to accelerate employee engagement, digital transformation, and productivity.

We deliver our capabilities through modular suites designed to meet customers at their maturity level and expand over time.

We have begun packaging the suite capabilities of the AvePoint Confidence Platform into tiered bundles to simplify selling and adoption using a "good-better-best" model aligned to customer profiles and a clear growth path.

While we expect these bundles will continue to evolve as they become more popular in the market, today they are focused primarily on the capabilities of the Control and Resilience suites, and are offered as follows:

"Essentials" bundle (Tier 1):

Establishes the baseline for data security, compliance, productivity, and AI readiness with tools to streamline data governance, simplify data management, and enhance security.

■ Resilience:

Protects cloud data from external attacks and insider threats with better visibility into data being backed up to recover faster.

"Plus" bundle (Tier 2):

Supports proactive and persistent data security measures by automating governance, delegating administration and reducing costs.

■ Resilience:

Provides comprehensive, automated backup with granular recovery capabilities for the most crucial customer workloads.

"Complete" bundle (Tier 3):

Offers the most strategic approach to data security aimed at mitigating risks and driving AI transformation.

■ Resilience:

Provides complete protection of the entire cloud estate with data optimization capabilities to more effectively manage data risk.

Strategic Use Cases

Customers typically begin with one strategic use case and expand across additional capabilities as requirements mature.

Key use cases include:

AI Confidence and Readiness :

Improve data quality, security, governance, and adoption to accelerate AI-driven innovation while reducing exposure, regulatory, and integrity risks.

Ransomware Protection and Disaster Recovery :

Protect and rapidly recover critical workloads across major ecosystems to reduce downtime and limit the operational and financial impact of cyber incidents.

Cloud ROI and Optimization :

Reduce waste by rightsizing licenses, reclaiming redundant storage, consolidating solutions/vendors, and automating workflows.

Operational Governance :

Operationalize governance through automated provisioning, lifecycle management, and policy enforcement across clouds.

Security Posture Management :

Discover, monitor, and control AI agents to strengthen compliance, security, and trust as organizations scale AI.

Agentic AI Governance :

Discover, monitor, and control AI agents to strengthen compliance, security, and trust as organizations scale AI.

Regulatory Compliance and Information Lifecycle :

Automate information lifecycle management - from classification to retention and disposition - while maintaining auditable controls and reducing data bloat.

Cloud Transformation and Modernization :

Execute secure, high-fidelity migrations with permission mapping and in-flight clean-up.

Surface user analytics to drive adoption post-cutover, rationalize legacy data, and unlock the full value of cloud investments.

Multi-Tenant Management :

Manage multiple tenants at scale with consistent baselines, cross-tenant policy automation, and unified reporting.

Reduce tickets, prove value with measurable outcomes, and deliver repeatable, profitable managed services.

Our Technology and Architecture

We believe platform architecture matters because it determines how effectively organizations can discover, govern, protect, and recover data across distributed, multi-cloud environments.

We believe the following attributes and characteristics of our platform architecture allow us to offer a differentiated approach to modern data security and business intelligence.

Rich Inventory of Data Characteristics

Rather than merely storing logs, our platform creates a dynamic inventory of data characteristics synthesized from unstructured data streams.

In the modern enterprise, data is rarely static, it flows from business applications and generative AI tools in high-volume, unstructured formats such as collaborative communications, automated agent outputs, and complex document metadata.

Defining Unstructured Data :

This includes the high-volume, diverse outputs of modern work:

emails, chat logs, call transcriptions, sensor data, digital workspace, access controls, productivity cloud services documents (i.e.

M365 files, Google Workspace files, Adobe files, Docusign, GitHub, Atlassian, etc.), and AI-generated outputs.

The Evolution of Attributes :

As this data is processed, its attributes (such as sensitivity, intent, and lineage) change in real-time.

The Governance Imperative :

Because unstructured data is often the first place sensitive information or threats appear, it must be governed and managed in near real-time.

By capturing how the business environment operates on corporate data as it happens, our platform provides superior insights into business outcomes that traditional, static databases often miss.

Modern Data Protection Architecture & Interoperability

The AvePoint Confidence Platform serves as a foundational layer within any data protection framework.

We do not just reside within the network;

we act as the authoritative control plane for policy management and real-time remediation.

By maintaining interoperability across hybrid-cloud environments, we enforce strict identity verification and "least privilege" access at the data layer.

If a data characteristic shifts - signaling a potential breach or policy violation - the platform is designed to trigger immediate remediation, ensuring that trust is never assumed and always verified.

Elastic Data Engine & AI Threat Layer

We have engineered a layered architecture designed for massive scale and proactive defense.

This engine is specifically tuned to identify and neutralize threats inherent to the AI era:

Business Logic Layer :

Defines the specific security and operational rules required by the organization.

Elastic Scaling Data Abstraction Layer :

Decouples logic from physical storage, allowing the system to expand instantly to meet massive data surges without performance degradation.

AI-Specific Remediation :

Our proprietary algorithms are designed to catch emergent threats including:

The "Zero-Trust" AI Foundation :

Neutralizing the existential risk of AI-driven data leaks by enforcing automated, real-time "Least-Privilege" security.

Autonomous Agent Governance :

Preventing "Shadow AI" through a centralized command-and-control layer for autonomous agents and Copilots.

AI Data Integrity & Hallucination Defense :

Maximizing AI ROI by purging the "Data Debt" that causes model inaccuracy and corporate liability.

Unified Multi-SaaS AI Guardrails :

Harmonizing security and compliance across the fragmented, multi-vendor AI landscape.

Mission-Critical AI Resilience :

Guaranteeing the uptime integrity of AI-integrated business processes through ultra-high-speed recovery.

Application Programming Interface (" API ")-Driven Automation and Orchestration

The AvePoint Confidence Platform provides a robust API framework that functions as the connective tissue for security operations.

Integration :

Seamlessly connects with existing IT stacks, SIEMs, and SOAR platforms.

Orchestration :

Automatically triggers the response mechanism for incident and problem resolution systems.

By orchestrating the end-to-end lifecycle of a security event, we reduce "Mean Time to Repair" (MTTR) and ensure consistent policy enforcement at a scale human operators cannot achieve manually.

Integration layer :

Primary connectors (e.g., M365, Salesforce, Google, AWS, Box/Dropbox) and what "deep integration" means in practice.

Discovery/classification layer :

Metadata, labeling/sensitivity, ownership/lineage, scanning approach.

Policy and automation engine :

Access governance, lifecycle actions, retention/disposition, workflow automation.

Protection and recovery services :

Backup architecture, recovery workflows, ransomware recovery/testing (where applicable).

Analytics/insights :

Risk posture, usage optimization, compliance reporting.

Security, Compliance, and Trust

We support customer requirements for security and compliance through our operational controls, certifications, and global service delivery footprint.

Encryption and Key Management :

All customer data is encrypted both in transit (using TLS 1.2 or greater) and at rest (using AES-256).

We support advanced key management strategies, including Bring Your Own Key (BYOK) for enterprise customers requiring granular control over data access.

Global Sovereignty :

To comply with increasingly fragmented data privacy laws (such as the General Data Protection Regulation (“ GDPR ”)), we offer multi-geo tenancy, allowing customers to specify exactly which regional data centers house their data and metadata.

Certifications and Authorization :

We maintain a comprehensive compliance portfolio, including SOC 2 Type II attestation, ISO 27001/27017/27018 certifications, and compliance with HITRUST CSF v11.0.1., CSA STAR, and IRAP.

Furthermore, our authorization under FedRAMP (moderate) validates our ability to serve U.S.

federal agencies, serving as a strong proxy for security maturity to the broader market.

Lastly, in 2025 we achieved Information System Security Management and Assessment Program (ISMAP) certification in Japan, one of the most comprehensive government security standards in the world.

Operational Controls :

We employ strict Role-Based Access Control (RBAC), continuous vulnerability scanning, and a secure software development lifecycle (SDLC) to minimize risk and ensure auditability across all platform operations.

Customer Support and Success

Our customer success approach is proactive and relationship-focused, designed to help customers rapidly deploy and realize value from the AvePoint Confidence Platform and ensure strong customer retention and expansion.

This includes:

onboarding and enablement model, adoption reviews, technical success coverage

support tiers and escalation/incident response posture

premium unified support services, which provide technical on-site support to optimize and allow for tight integration of our solutions to our customers' expansive multi-cloud infrastructure

We maintain a Net Promoter Score above 50, an elite benchmark in B2B SaaS and at a level typically associated with best-in-class customer satisfaction and loyalty, per CustomerGauge benchmarking data.

Market Opportunity

Global data volumes continue to grow rapidly, with unstructured data representing approximately 80% of all data, as well as a significant portion of the increase.

Enterprises face rising regulatory pressure, expanding cybersecurity threats, and, more recently, ongoing operational complexity from multi-cloud environments and SaaS business application and AI agent sprawl.

These trends create a large and rapidly growing market for secure, automated, and AI-ready data governance and resilience solutions.

Historically, the most significant shifts in software came from how business applications were built and delivered.

This trend continues today with advanced AI, where instead of manually building every workflow and interface, organizations increasingly use agentic tools to translate business requirements and policies into working software components and automated processes.

This shift makes the data and policy layers, on which those AI tools rely to reason and act safely, even more critical.

And in turn, modern data platforms like the AvePoint Confidence Platform become structurally even more important, because they provide the governance framework classification, access controls, retention, auditability, and resilience that transforms enterprise data into a secure, high-quality signal for AI.

Furthermore, as organizations seek to leverage AI to reduce expenses and optimize performance, agentic architectures only deliver real efficiency when they operate on trusted data and enforce consistent rules.

The result is a durable foundation for modern data protection – the more software becomes AI-assisted and automated, the more valuable a holistic governance and resilience platform becomes, because it serves as the central command for enterprise data performance.

While today our focus is primarily on the data governance and security categories, we expect to capture spend from other areas of the broader data management opportunity, including data integration and intelligence, identity and access management, security analytics, cloud application protection and advanced AI tooling.

We are also seeing growing instances of these spend categories beginning to converge, which we believe positions us well as a platform offering for managing critical data.

Our Growth Strategy

1 unchanged sentence

Accelerate Customer Adoption and Retention .

Given the importance of the data we protect, the workloads we service, and the cost and functionality benefits we offer, customers quickly find our solutions to be mission critical.

Nevertheless, we constantly seek to increase customer satisfaction, decrease time to value, reduce customer churn and set up successful land and expand opportunities.

To do so, we have made significant investments in our customer success program and in technology which provides additional telemetry to enhance our understanding of how customers use our solutions, which we believe will deepen our relationships with existing customers.

We constantly seek to increase customer satisfaction, decrease time to value, reduce customer churn and set up successful land and expand opportunities.

To do so, we have made significant investments in our customer success program and in technology which provides additional telemetry to enhance our understanding of how customers use our solutions.

We are also adding AI-enhanced customer interactions and tailored usage across all personas of the organization.

We believe these investments will deepen our relationships with existing customers.

Expand the AvePoint Confidence Platform Offerings .

We have built a differentiated platform that addresses a number of strategic use cases, and we plan to introduce new and adjacent products to extend our current operational and data management value proposition and to improve the functionality of existing products and features, with a particular focus on AI ready solutions that transform and enrich data.

We will also continue investing to support Microsoft, Salesforce, Google, AWS, Box, DropBox and other ecosystems for our customers, many of whom leverage multiple cloud vendors.

We have built a differentiated platform that addresses a number of strategic use cases, and we plan to introduce new and adjacent products to extend our data management value proposition and to improve the functionality of existing products and features, with a particular focus on AI ready solutions that transform and enrich data and span multiple cloud vendors.

Broaden our Market Presence .

The market we are targeting is rapidly growing and largely unpenetrated.

We sell to organizations of all sizes, in all regions of the world, and across a broad array of industries.

2 unchanged sentences

The ongoing cultivation of our strategic relationships with partners will support the continued penetration of markets in which we previously lacked presence, and those in which we have a presence that can be expanded.

Our partner network today offers particular value in our pursuit of small and mid-sized customers and prospects, and we continue to invest here to accelerate our market growth.

We expect that the continued scaling of this ecosystem will be a critical component of our ability to drive profitable growth going forward.

The continued scaling of this ecosystem, especially our focus on Managed Service Providers (“ MSPs ”), offers particular value in our pursuit of small and mid-sized customers and will be a critical component of our ability to continue driving profitable growth going forward.

Opportunistically Pursue Strategic Acquisitions and Investments .

While the large majority of our current offerings were built organically, we frequently evaluate whether it is more efficient to build solutions or pursue acquisitions that accelerate our product roadmap.

Since 2022, we have completed six small acquisitions, and we expect that strategic acquisitions and investments will be an important growth driver for our business.

While the large majority of our current offerings were built organically, we have completed six acquisitions since 2022, and we expect that strategic acquisitions and investments will be an important growth driver for our business.

This may include acquiring or investing in businesses or products with complementary technologies and/or functionality to our existing product offerings, or that reduce the time or costs required to develop new technologies, augment our engineering workforce, improve our internal business and operating systems, and enhance our technological capabilities.

Sales, Marketing and Customers

Our global go-to-market strategy allows us to efficiently sell to and serve the needs of organizations across market segments and geographies.

This strategy, which combines the expertise of our highly-trained direct sales force with the leverage of valuable indirect routes to market, including our strong and growing partner ecosystem, has created a powerful and differentiated go-to-market approach.

In addition, our increased investment in our customer success program, which reflects our strategy of improving both customer adoption and retention, positions us to continue expanding within our existing customer base, which we believe remains a significant growth opportunity.

This team employs a proactive, relationship-focused approach, designed to ensure that our valued customers get the care they need to rapidly deploy, and receive value from, their investment in the AvePoint Confidence Platform and the AvePoint Elements Platform.

Our direct sales force is organized by geography and customer size, as discussed further below.

In addition, we employ a number of indirect routes to market, which include the following:

Channel Ecosystem .

We leverage our partner and distribution channel network across customers of all sizes, especially those in the small business and mid-market segments.

As of December 31, 2024, our global channel partner program includes approximately 5,000 managed service providers, value added resellers, and systems integrators.

Partner Marketplaces .

Our solutions are available in more than 100 software marketplaces around the world through our distribution and marketplace partners.

We leverage marketplaces to create operational efficiencies with automation in procurement and provisioning, and to grow and scale our acquisition of the small business market, primarily through managed service providers (“ MSPs ”).

Our AvePoint Elements Platform, which is aimed specifically at enabling MSPs to seamlessly manage multiple clients, clouds and tenants, reflects our ongoing focus on and investment in this important route to market, as further discussed below.

Strategic Partnerships .

Hyperscalers serve as important supply chain partners to AvePoint and provide the opportunity to scale our technology across global data centers.

Today, we are a top global partner of Microsoft with a holistic alliance that incorporates technology, sales, and marketing initiatives to ensure that we enable organizations worldwide to maximize their Microsoft Cloud investments.

Our partnership offers several strategic advantages, including early access to Microsoft’s product roadmap, as well as Microsoft’s President, Collaborative Apps and Platforms, serving on our Board of Directors (the “ Board ”) since 2014.

We have been named a global Microsoft Partner of the Year six times, most recently in 2024, which recognizes partners that have developed and delivered outstanding Microsoft Cloud solutions and innovation.

In addition, our strategic partnership with Google is aimed at accelerating product adoption and growth from net new customers currently using Google Workspace, by driving greater awareness of our solutions.

AvePoint has a product line designed specifically for the indirect route to market.

The AvePoint Elements Platform is designed to drive significant growth by empowering MSPs to serve clients more efficiently while offering better services.

In this selling motion, AvePoint enables channel partners to focus on maximizing margins through streamlined operations that are powered with the AvePoint Elements Platform.

The AvePoint Elements Platform makes it easy for MSPs to consolidate security, data protection policies, archiving, user management, workspace management and more into a single, streamlined platform.

This empowers MSPs to deliver more services and drive more efficient revenue growth, and enables them to stand out in a competitive market by excelling in key areas like end-user management, data security, Azure DevOps, and Entra ID.

In addition, the platform’s advanced features further enhance its value by addressing critical operational needs:

Baseline Management simplifies multi-tenant security and compliance settings by enabling MSPs to create and customize baseline analyses for their customers that use Microsoft 365 services.

This centralized approach ensures streamlined management, proactively addresses configuration drift to maintain consistency, and allows for point-in-time backup and restoration of tenant configurations and settings.

Workspace Governance equips MSPs to manage security, access, data management, and Copilot reporting, allowing MSPs to efficiently scale governance models so their customers can streamline their use of the tools they need to power their business.

Risk Monitoring protects client environments with proactive tenant security monitoring.

The platform enforces security rules, identifies and addresses potential risks, and ensures rapid resolution of issues, allowing MSPs to prevent data security breaches and ransomware attacks for their customers.

Our global marketing organization is built on the foundation that our brand is our most valuable asset, shaping trust, differentiation, and long-term customer loyalty.

We prioritize brand strength as the engine of demand and revenue growth, ensuring that our presence in the market is not only recognized but also deeply trusted.

Through multi-platform campaigns that leverage our expertise, content, technical resources, and customer success stories, we capture mindshare, establish thought leadership, and drive demand generation.

These campaigns are designed to meet customers at every stage of their journey—whether they are exploring industry trends, evaluating solutions, or expanding their existing investments with us.

By integrating brand-building with demand generation, we seek to drive higher engagement, improve conversion efficiency, and reduce customer acquisition costs, ensuring that marketing execution is both scalable and impactful.

We utilize a robust mix of marketing and sales automation tools, as well as product- and industry-specific criteria, to efficiently reach decision-makers across all customer segments.

This approach is continuously refined through performance analytics, sales feedback, and customer insights, reinforcing our belief that a strong brand accelerates growth and maximizes long-term revenue outcomes.

We sell to organizations of all sizes, in all regions of the world, and across a broad array of industries.

Our customers are located in more than 100 countries and, as of December 31, 2024, numbered more than 25,000.

Additionally, no customer accounted for more than 10% of billings for the years ended December 31, 2024 and 2023, and no customer made up more than 10% of accounts receivable for the years ended December 31, 2024 and 2023.

Go-to-Market Strategy

We sell to organizations of all sizes and across geographies and industries.

Our go-to-market strategy combines a direct sales force with indirect routes to market, including a broad partner ecosystem.

We sell subscriptions to customers through our channel partners primarily using a two-tier, indirect fulfillment model.

We also offer our SaaS products via the marketplaces of our technology alliance partners, including Google Cloud Platform (" GCP "), Microsoft Azure, (" Azure ") and Amazon Web Services (" AWS ").

As of December 31, 2025, we served more than 28,000 end customers across more than 100 countries, with no customer representing more than 10% of billings or accounts receivable for the years ended December 31, 2025 and 2024.

We classify our customer base by size and geography:

Small Business (“SMB”) segment.

Companies with fewer than 500 user seats that we serve entirely through channel partners, especially MSPs.

The typical buyer in this segment is the partner.

Companies with fewer than 500 user seats that we serve primarily through channel partners, especially MSPs, as discussed below.

As of December 31, 2025, the SMB segment accounted for 20% of our total annual recurring revenue.

Mid-Market segment.

Companies with greater than 500 but fewer than 5,000 user seats that we serve through a combination of channel partners and our direct sales teams.

The typical buyer in this segment is the CISO, CTO or the CIO for direct sales, and the channel partner for indirect sales.

Companies with greater than 500 but fewer than 5,000 user seats that we increasingly serve through channel partners.

As of December 31, 2025, the Mid-market segment accounted for 28% of our total annual recurring revenue.

1 unchanged sentence

Companies with greater than 5,000 user seats that we primarily serve through our direct sales teams.

The typical buyer in this segment is the CISO, CTO or the CIO.

As of December 31, 2025, the Enterprise segment accounted for 52% of our total annual recurring revenue.

Classification is based on the customer’s billing address and is divided into (1) North America;

(2) Europe, the Middle East, and Africa (“ EMEA ”);

and (3) Asia-Pacific (“ APAC ”).

As of December 31, 2024, North America represented 44% of our total annual recurring revenue, EMEA represented 35% of our total annual recurring revenue, and APAC represented 21% of our total annual recurring revenue.

Indirect Routes to Market and Partner Ecosystem

We leverage a global channel partner program that includes approximately 6,000 managed service providers, value added resellers, and system integrators.

Our solutions are available in more than 100 software marketplaces globally and our technology alliance partners, including GCP Marketplace, Azure Marketplace, and AWS Marketplace, support procurement and provisioning efficiencies and enabling scalable distribution, particularly through MSPs.

We provide MSPs with a special edition of the Confidence Platform called the Elements edition, tailored for their unique needs.

The Elements edition of the Confidence Platform enables MSPs to seamlessly manage multiple clients, clouds and tenants to drive more efficient revenue growth, and reflects our ongoing focus on this important route to market.

Our channel partners collectively help maximize our technological expertise and, importantly, our geographic coverage, by building awareness of our products and brand, generating customer leads, implementing our solutions, and providing critical value-added services.

They are especially critical in our focus on the small business and mid-market customers who collectively represent an enormous market opportunity for us.

Strategic Partnerships

Hyperscalers and ecosystem providers are important partners and provide an opportunity to scale across global data centers.

We maintain strategic partnerships with Microsoft, Google, and AWS that incorporate technology, sales, and marketing initiatives.

Research And Development

We constantly seek to develop new offerings, drive improvements to our existing offerings, and enhance support of our existing customer deployments.

We leverage agile development methodologies and work with the latest technologies, resulting in a dynamic, state of the art, software development process that has allowed us to quickly deliver high-quality products and services and adapt to market changes and new requirements.

We believe delivering and expanding product functionality is critical to enhancing the success of new and existing customers while new product development further reinforces our breadth of solutions.

We continuously seek to develop new offerings and enhance existing offerings and support customer deployments.

We use agile development methodologies and focus on delivering high-quality products and adapting to evolving market requirements.

We believe expanding functionality and introducing adjacent products is critical to customer success and reinforces the breadth of our solutions.

Intellectual Property

7 unchanged sentences

In addition, we generally enter into confidentiality agreements with our vendors and customers.

While certain companies offer products with features similar to those embedded in our individual solutions and with which we compete in certain tactical use cases, we do not believe that any company offers the same breadth of functionalities that we offer in a single integrated platform.

Our competition is primarily from standalone point solutions that aim to replicate the value provided by our suites or one of the products contained therein.

We believe our platform offering provides a meaningful competitive advantage, due to breadth of functionality, ease of use, scalability, rigor of security protocols, integration with third-party applications and data sources, time to value and total cost of ownership.

We primarily face competition according to the use cases we target.

Our main competitors fall into the following categories:

Data protection and legacy backup vendors;

Vendors primarily focused on cybersecurity, data security posture management, threat detection, data classification, and other data security subcategories;

Smaller cloud and data management vendors that offer products that compete with some of our capabilities.

However, we believe that our platform architecture and approach to modern data protection make us unique among companies offering overlapping point solutions.

These advantages include the breadth of functionality offered in a single integrated platform, ease of use, scalability, security protocols, integration breadth, time-to-value, and total cost of ownership.

Our quarterly revenue can fluctuate and does not necessarily grow sequentially when measuring any one fiscal quarter’s revenue against another.

35 unchanged sentences

In addition, we believe that strong ESG programs and practices are critical to attracting the best talent, executing on our corporate strategies, maintaining a robust supplier and channel partner base, and innovating to meet our consumers’ evolving expectations.

In 2024, extensive internal research was conducted to determine AvePoint’s objectives pursuant to the Corporate Sustainability Reporting Directive (CSRD).

AvePoint has appropriated funding to conduct its first dual-materiality assessment and is on track for full compliance with CSRD as required in 2026.

The disclosure below describes the goals of our ESG program to allow our stakeholders to be informed about our progress and future direction.

Environmental

Across our twenty-eight offices, we strive to reduce our environmental footprint, operate more efficiently, and engage our personnel in social initiatives that directly impact their lives.

Across our 32 offices, we strive to reduce our environmental footprint, operate more efficiently, and engage our personnel in social initiatives that directly impact their lives.

To fulfill our aim of integrating environmental sustainability into everything we do, we have implemented numerous projects across our operations to limit our environmental impact, such as implementing paperless campaigns, the encouragement of recycling and elimination of paper products, the sourcing of office resources from sustainable sources, and the recycling of physical IT assets.

10 unchanged sentences

Through our employee resource groups, internal mobility opportunities across the countries in which we operate, and external partnerships with underrepresented minority networks, we continue to work toward creating a workforce that represents the diversity of our customers and communities.

AvePoint employee resource groups (“ ERGs ”) regularly host events for our people to connect and engage with each other, learn from experts and support diverse communities throughout the year.

During the month of June, our Women in Technology and Queers and Allies ERGs hosted a guest speaker to discuss the history and importance of Pride, and how to foster inclusivity and authenticity.

Similarly, our Black AvePoint Excellence ERG hosted its 4th Annual Juneteenth Charity Gala raising over $10,000 for the African Diaspora College Access Program (ADC), a nonprofit dedicated to providing students with access to some of the nation’s top educational institutions.

Supporting Agents of Change:

8 unchanged sentences

Through internal governance and external collaboration, we aim to set the standard for acceptable and responsible use of AI.

In December 2024, AvePoint implemented a board-approved Responsible AI Charter, to establish a set of guidelines and principles for the responsible and ethical use, development, and deployment of AI within our organization, and to ensure consistency with similar company AI policies and practices, particularly data privacy and confidentiality protections.

In 2024, AvePoint implemented a board-approved Responsible AI Charter, to establish a set of guidelines and principles for the responsible and ethical use, development, and deployment of AI within our organization, and to ensure consistency with similar company AI policies and practices, particularly data privacy and confidentiality protections.

This Responsible AI Charter is a key component of AvePoint’s commitment to ensuring that AI is developed and deployed in a way that respects human values, rights, and dignity.

12 unchanged sentences

Management of Corporate Governance Resources

In 2024, we took significant steps to reinforce our commitment to corporate governance and ethical practices, aligning with our strategic priorities.

We completed our yearly review of all corporate governance policies, ensuring they were in line with current industry standards and regulatory requirements and introduced several new policies aimed at addressing emerging issues and reflecting our values.

These included a Responsible AI Charter, an ESG Policy, a Grant Policy and a Supplier Code of Conduct.

Each of these policies underscored our commitment to responsible business practices, social responsibility, and environmental stewardship.

In 2025, we continued taking significant steps to reinforce our commitment to corporate governance and ethical practices, aligning with our strategic priorities.

We completed our yearly review of all corporate governance policies, seeking to ensure they are in line with current industry standards, regulatory requirements and our values, and address emerging issues.

Our extensive list of corporate policies is publicly available on our website at the following web address, https://www.avepoint.com/ir/governance/governance-documents.

We strive to continue to demonstrate transparency and accountability, fostering trust and confidence among investors, customers, and the broader community.

As a result of our improved processes, we received an ESG Prime Label from Institutional Shareholder Services (ISS) meaning our common stock will qualify for responsible investment based on our improved score on their ESG Corporate Rating Report.

We were also awarded a Fast Mover Badge by EcoVadis in recognition of our significant improvement in our annual assessment.

Our initiatives in 2024 underscored our commitment to robust corporate governance, ethical business practices, and employee empowerment.

Our ongoing initiatives in 2025 underscored our commitment to robust corporate governance, ethical business practices, and employee empowerment.

As a result of our continued process improvements, we again received an ESG Prime Label from Institutional Shareholder Services (ISS), meaning our common stock will qualify for responsible investment based on our improved score on their ESG Corporate Rating Report.

By proactively reviewing, updating, and communicating our policies, we demonstrated our dedication to transparency, accountability, and responsible stewardship in pursuit of its strategic objectives.

37 unchanged sentences

We are subject to certain U.S.

federal, state, local and foreign laws and regulations regarding data privacy and the collection, storage, sharing, use, processing, disclosure and protection of personal information and other data from users, employees or business partners, including the GDPR, CCPA, and VCDPA.

These laws expand the rights of individuals to control how their personal data is processed, collected, used and shared, create new regulatory and operational requirements for processing personal data, increase requirements for security and confidentiality and provide for significant penalties for non-compliance.

37 unchanged sentences

Caci holds a bachelor’s degree from Montclair State University and is a certified public accountant.

Additional information regarding our Executive Officers is set forth in the Proxy Statement to be filed in connection with our 2025 Annual Meeting of Stockholders within 120 days after the end of the fiscal year ended December 31, 2024.

Additional information regarding our executive officers is set forth in the Proxy Statement to be filed in connection with our 2026 Annual Meeting of Stockholders within 120 days of the end of the fiscal year ended December 31, 2025.

Corporate Information

2 unchanged sentences

All correspondence should be directed to our principal operating offices in Richmond, Virginia.

“AvePoint,” the “A” logo, the “Pyramid” logo, “DocAve,” “MaivenPoint,” and all other names, logos, and icons identifying AvePoint and/or AvePoint’s products and services and our other registered and common law trade names, trademarks, and service marks are property of AvePoint, Inc.

This Annual Report contains additional trade names, trademarks, and service marks of others, which are the property of their respective owners.

Solely for convenience, trademarks and trade names referred to in this Annual Report may appear without the ® or ™ symbols but those references are not intended to indicate that AvePoint will not assert, to the fullest extent under the applicable law, our rights to these trademarks, service marks, and trade names.

Available Information

10 unchanged sentences

The information found on our main website or our Investor Relations website is not part of this or any other report we file with, or furnish to, the SEC, for the purposes of Section 18 of the Exchange Act or otherwise subject to the liabilities of that section, nor shall it be deemed incorporated by reference in any filing under the Securities Act except as shall be expressly set forth by specific reference in such filing, and you should not consider any information contained on, or that can be accessed through, our website as part of this Annual Report or in deciding whether to purchase our common stock.

2021 Consummation of the Apex Business Combination

AvePoint, Inc., incorporated as a New Jersey corporation on July 24, 2001 (“ Legacy AvePoint ”), was redomiciled as a Delaware corporation in 2006, and changed its name to “AvePoint Operations, Inc.” in June 2021.

On July 1, 2021, Legacy AvePoint and certain members of Apex Technology Acquisition Corporation (“ Apex ”) consummated the transactions contemplated by a business combination agreement (the “ Apex Business Combination ”) and a number of qualified institutional buyers and accredited investors consummated their respective purchases of shares as contemplated by related subscription agreements, with Apex being renamed “AvePoint, Inc.” On July 2, 2021, shares of common stock were officially listed under the ticker “AVPT” on the Nasdaq Global Select Market.

Subsequent to the consummation of the Apex Business Combination, on July 26, 2021, Legacy AvePoint’s successor by merger AvePoint US LLC merged with and into AvePoint, Inc.

with AvePoint surviving.

Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.

What changed 10-K

Item 1. Business