Good afternoon, ladies and gentlemen. And welcome to the Rubrik Second Quarter Fiscal Year 2026 Results Conference Call. At this time, all lines are in a listen-only mode. If at any time during this call, you require immediate assistance, please press 0 for the operator. This call is being recorded on Tuesday, September 9, 2025. I would now like to turn the conference over to Melissa Franchi, Vice President, Head of Investor Relations. Please go ahead. Hello, everyone. Welcome to Rubrik's Second Quarter Fiscal Year 2026 Financial Results Conference Call.

On the call with me today are Bipul Sinha, CEO, Chairman, and Co-founder of Rubrik, and Kiran Chaudhry, Chief Financial Officer. Our earnings press release was issued today after the market closed and may be downloaded from the Investor Relations page at www.ir.rubrik.com. Also on this page, you'll be able to find a slide deck with financial highlights that, along with our press release, includes a reconciliation of GAAP to non-GAAP financial results. These measures should not be considered in isolation from, or as a substitute for, financial information prepared in accordance with GAAP. During this call, we will make forward-looking statements including statements regarding our financial outlook for the third quarter and full fiscal year 2026. Our expectations regarding market trends, our market position, opportunities, including with respect to generative AI, growth strategy, product initiatives, and expectations regarding those initiatives, and our go-to-market motion. These statements are only predictions that are based on what we believe today and actual results may differ materially. These forward-looking statements are subject to risks, and other factors that could affect our performance and financial results which we discuss in detail in our filings with the SEC. Rubrik assumes no obligation to update any forward-looking statements we may make on today's call. With that, I'll hand the call over to Bipul.

Thank you, Melissa. I want to start by thanking everyone for joining us today. We are pleased with our second quarter results that once again exceeded all guided metrics across top line and profitability. Here are five key numbers. First, subscription ARR surpassed $1.25 billion, growing 36% year over year. Net new subscription ARR reached $71 million in the second quarter. Second, our subscription revenue was $297 million, growing 55% year over year. Third, our subscription NRR remained strong once again, above 120%. Fourth, customers with $100,000 or more in subscription ARR crossed 2,500, growing 27% year over year. Finally, on profitability, we once again made material improvement in subscription ARR contribution margin, up about 1,800 basis points year over year. On cash generation, we are very happy to report we generated over $57 million in free cash flow this quarter. This combination of top line growth and cash flow margin at our scale is rare. We remain confident about the opportunity ahead, and thus, we are raising our outlook for the year. Let me first give you some context on where we are focused. Rubrik is evolving into the security and AI company. In the last several quarters, it is clear to us that as we continue to focus on and win the past cyber resilience market, we also have a tremendous opportunity in the enterprise AI acceleration. Let's start with cyber resilience. And the broader context of the market opportunity. From our inception, Rubrik was designed to help customers achieve the fastest cyber recovery time. To deliver this, we uniquely combine data security posture management, identity resilience, and cyber recovery natively on our Rubrik Security Cloud or RFC platform to achieve complete cyber resilience. And at the center of our differentiated architecture is the Rubrik preemptive recovery engine.…

Thank you, Bipul. Good afternoon, everyone, and thank you for joining us today. We had a strong Q2, which was highlighted by solid growth at scale and continued improvement in profitability. We continue to benefit from our leadership in the growing market for cyber resilience, and we are pleased to raise our outlook for the year. Let me start by briefly recapping our second quarter fiscal 2026 financial results and key operating metrics and then I'll provide guidance for the third quarter and full year fiscal 2026. All comparisons, unless otherwise noted, are on a year-over-year basis. We are very pleased to have ended Q2 with subscription ARR of over $1.25 billion, growing 36%. We added $71 million in net new subscription ARR. We continue to drive adoption of our Rubrik Security Cloud which resulted in $1.1 billion of Cloud ARR up 57%. Our differentiated land and expand model benefits from multiple avenues to gain new customers and grow our footprint after the initial contract. Expansion occurs through increased data existing applications, securing more applications or identities, or adding more security functionality. As a result, we continue to see a strong subscription net retention rate which remained over 120% in the second quarter. All vectors of expansion are healthy contributors to our NRR. Highlighting the meaningful runway we have to more deeply penetrate our customer base. Adoption of additional security functionality contributed approximately 35% of our subscription net retention rate in the quarter. We ended the second quarter with 2,505 customers with subscription ARR of $100,000 or more up 27%. These larger customers now contribute 85% of our subscription ARR up from 82% in the year-ago period as we become an increasingly strategic partner to our enterprise customers. For our second quarter, subscription revenue was $297 million up 55%. Total…

Okay. Great. Hey, guys. Thanks for taking my question here and another nice job this quarter. Absolutely. You know, guys, the number that really jumped out to me the most of all was the free cash flow margin at 19% in the quarter. I think that's now four consecutive quarters of positive free cash flow. Bipul, maybe the question is, what's changed strategically in driving that type of profitability? And, Kiran, is there anything that we should think about in the second half on free cash flow as we fine-tune our models?

Thanks, Saket. As I've said before, I'm a capitalist. And I love profitability and cash flow. But, look, we are in a very large and an expanding market of cyber resilience. And as customers are looking to transform their businesses into AI enterprises, they are doing multiple transformations around cloud, around infrastructure, and cyber resiliency is the number one topic for them because if your data doesn't have integrity or availability, none of the AI will be useful. Or helpful. So we are helping do that cyber resilience transformation for our customers. Giving them like, AI-based ransomware detection, fast recovery, capabilities like that. And that's what is helping us win in this large market. And as we are scaling our business, the efficiencies are kicking in. I would love to have Kiran add some more from a finance perspective.

Sure, Bipul. And hi, Saket. I'll just give you a little bit more context both for the cash flow in the quarter and assumptions on the guide. So super pleased with the $58 million we generated in free cash flow this quarter. As you said, 19%. It was 3,500 basis points improvement year over year. And then from 700 basis points from last quarter Q1. A few reasons for that. Starting off with stronger ARR performance, than anticipated, and then the margin improvement as well, 9% sub AR margin. That was a key driver for the cash flow. In addition to that, you'd have seen we made some capital structure optimization in the quarter. We settled our private company debt, which has a higher interest coupon with a 0% convertible. So we had more cash on the balance sheet and less interest expense, which we sometimes pay out in cash. So that helped as well. And then on the duration front, we saw favorable duration this quarter. As you know, we increasingly sell cloud-native products, which tend to have a shorter contract length as well as shorter payment terms, and we didn't see that compression duration this quarter. And the last thing I'll say is that there's probably more timing related, but we saw more early renewals. Related to the usual trend and some of which was multiyear as well. This was in the context mostly of customers co-terming renewals with active expansion. So all of that really drove the cash flow outperformance to 19% margin this quarter. I look at the guide, we are happy to raise the guidance for the year. We previously had guided around 6% margin and we're guiding to 12%. And that's a thousand basis point or 10 percentage points improvement year over year. Some of the trends continue. Obviously, it's based on our ARR guide as well as the higher investments we are making in the second half from an OpEx perspective. Obviously, the capital structure portion will continue. But specifically in the duration, we are not assuming the compression continues. We are modeling in a little bit more compression. Would say low to mid-single digits through the rest of the year, and that is all the assumptions. We have made in the guidance.

Super helpful, guys. Thank you.

Thank you, Saket.

Your next question comes from the line of Andrew Nowinski from Wells Fargo. Your line is now open.

Good afternoon. I just wanted to say, I think the net new ARR in Q2 is really impressive. Considering you went through a sales comp change, moving to annual sales comp plans this year. And so I know the change really didn't have an impact on your year-over-year growth in Q2, but I was wondering if you could just talk about whether you saw any impact from that and whether you're expecting higher seasonality in Q4 because of that change? Thank you.

Let me give you some qualitative perspective on it, and I'll let Kiran provide some more details. Look. We have been running our business on a per-year net ARR basis. And it jumps this quarter, that quarter, depending upon the deal timing and deal closure. But we run our business on a full-year new ARR. We used to do a quota compensation for the sales team on a half-yearly basis. So starting this fiscal year, fiscal year 2026, we decided to align how we run the business with how we compensate our sales team. And that change in the first half so far has not brought out any material impact to how we see our business or their achievement. Obviously, we have the rest of the year in front of us and we'll know more about the impact by the end of this year. But so far, it has gone well. Kiran?

I'll just add a few more thoughts here. So there are, of course, some shifts in seasonality. But it's only the first half. So we can give you a full update on our first year with this sales compliant change at the end of the year. But so far, it's been smooth and there's been no disruption. But from a modeling perspective, since we don't have a Q2 accelerator as we had in the previous half-year plans, Q2 and Q3 will look somewhat similar. That is reflecting our guidance, but Q4 will be seasonally strong. And this is reflected both in our subscription ARR guidance as well as the margins and free cash flow.

Thank you very much.

Thank you, Andy.

Your next question comes from the line of John DiFucci from Guggenheim.

Great. Thank you. This is Howard Ma on for John. I guess either for Bipul or Kiran, can you help us better understand how you're levered to data growth? So for instance, there's an aspect to your pricing model that's based on volume tiers. Which you could argue is directly tied to data growth. And then there's a user-based element especially with securing SaaS apps, So what is the mix today, and is there an opportunity for a purely consumption-driven component that gets bigger over time?

So Rubrik's products are a combination of data volume, and data security features and capability that we attach to it. And the combination of the two is the pricing for our different editions like enterprise edition, foundation edition, So we don't separate the two. And we help our customers identify all of the critical data and deliver all our security capabilities on those critical data. And as their data grows, as their applications or number of users grow, as they adopt more workload for Rubrik, we grow. So we have multiple growth vectors in Rubrik. One vector is organic data growth within a workload and applications that we are already securing. The new workloads that are coming to Rubrik, or existing applications, which are moving to Rubrik. And then the third piece is attaching the data security products. For products such as M365, which is tied to the number of users, We have a licensing model that aligns to that SaaS program. So we'll make it easy for our customers to adopt Rubrik and for them to understand the pricing model and expense based on how they pay for their core platform.

Does it answer your question?

Yes. That does. Thank you so much.

Thank you, Howard.

Your next question comes from the line of Eric Heath from KeyBanc. Your line is now open.

Hey, guys. Thanks for taking the question and congrats on the results again. Kiran, I want to ask a few different questions on the model if I could. Could you just help us understand maybe what drove some of that early renewal activity given some of the sales comp structure changes to make it more year-end? I would have thought the opposite would have happened given the comp structure change. And if you could just speak to what's driving the decline in non-cloud ARR quarter over quarter is a little bit bigger than normal one. And lastly, if I could, if I could push it. But on the material rights, just what's driving that higher material rights activity that you're not necessarily expecting or you weren't expecting? Thanks.

Sure. I'll take them in order. So from a renewal perspective, we always see some early renewals every quarter. I mean, some of this is timing. Right? We have some on-time renewals, which is the majority. And some early and some late. But the renewals which occurred this time were more related to our expansion deals, which were in process with the same customers. And, typically, customers' core term the renewal activity with the expansion itself. So that was really the driver of the early renewals. And I also pointed out that some of those renewals are multiyear in nature. So that obviously impacted cash flow because of the higher billings. And just to add one more point, that is not related to the comp structure changes because that is tied to expansions, which is occurring along with renewals. So I wouldn't relate those two activities. And the second question, the non-cloud ARR, most of our since we're about 85% cloud right now, most of the cloud ARR is net new in the sense either coming from new customers or expansion with current customers. But there's still a small element of migrations which are happening from the non-cloud part. So you still see that declining a little bit. And at some point, we're getting towards the, I would say, point where it optimizes to a more steady rate it's a few points more than 80%, after which you'll see the non-cloud ARR grow as well. And then on the last point on the material rights, just to give some context, these are related to some qualified customers who had gotten some credits at the time we start our cloud transformation and those credits are beginning to expire. In some cases, where the qualification is possible, the customers use the credits to purchase some newer expanded products. In other cases, they expire. So the accountant treatment is slightly different. When those credits are used to purchase something versus when it expires. So that drives variability as well, and there's some timing element to that. Too, which we saw outperformance this quarter.

Thanks, Kiran. I threw a lot at you, but appreciate that. Thank you.

Thank you. Yep. Thank you, Eric.

Your next question comes from the line of Kash Rangan from Goldman Sachs. Your line is now open.

Hey, guys. This is Matt Martino on for Kash. Thanks for taking my question. Bipul, Rubrik's brought to market a slew of new innovations across identity AI and data security. As you expand from a core product to a multiproduct platform, how do you see your go-to-market and sales motion evolving to effectively sell this broader, more complex vision to the C-suite? Thanks.

So multiproduct sales for some time now. Because we started with our core data protection business for data center as well as cloud, then we added M365. Then we added like, Salesforce, then we added now identity recovery, identity resilience, We are now building solutions for AI. So we have a kind of, like, a pipeline of three stages. So the stage number one is what we call RubrikX. That actually is the incubation phase of new products and go-to-market. And then the next phase is PLS, which is our product line sales team. That takes the early majority of product to scale it to be ready for the core sales team, and then we've transferred it to the core sales team. That's how we kind of scale our multiproduct go-to-market strategy. Obviously, we are doing all our product in a single platform. Rubrik Security Cloud. So that when our customers adopt more of Rubik's solution, our platforms get smarter and smarter and deliver more value. For example, if our customers have M365, as well as on-premises data center solutions. If there is a threat actor on both sides, we will be smart. We'll be giving our customers a smarter information about the complete picture of their data security and cyber resilience. As opposed to dumping logs and having them analyzed separately. So that's the platform strategy that we have taken from day one. And that's how we are building a multiproduct portfolio, but driving the value from a single platform.

Very helpful. Thank you, Bipul.

Your next question comes from the line of Gregg Moskowitz from Mizuho. Your line is now open.

Great. Thank you for taking the question, and very nice quarter, guys. I wanted to ask about the DSPM. First of all, how it did in Q2? But more broadly, because it remains a hot area within cybersecurity, But, you know, these days, almost all the larger vendors have some sort of offering. Clearly, a significant majority of enterprises have yet to implement DSPM, When I think about Rubrik, I know you have a differentiated position here, but is there a point at which you think we'll see an inflection in DSPM market adoption? How do you think this will all evolve?

We have a belief that cyber resilience requires both resilience and identity resilience. And combining DSPM, is the data portion with identity information is needed to provide complete cyber resilience. Because when a privilege gets escalated for a user, inside your active directory, you may want to understand what new sensitive data is now being exposed to this customer and what is the blast radius for the customer credential get compromised. So bringing the identity intelligence and data security intelligence in a single platform is differentiated. We have this new unique vision in this market, and we believe that the future is going to be a holistic view for the customers from data identity and cyber recovery to be able to drive complete cyber resilience. And that's what we are driving for.

Okay. That's helpful. Thank you.

Thanks, Gregg.

Your next question comes from the line of Todd Coupland from CIBC.

Great. Good evening, everyone. You Bipul, you gave a number of examples on competitive wins this quarter. Could you just talk about the environment and your major sources of share and update us on your deal win rate? Thanks a lot.

As far as we are concerned, there is no change in the competitive environment for us. We still win the vast, vast, vast majority of deals against all competition legacy as well as new gen vendors. And it is due to our unique platform Rubrik Security Cloud, it is underpinned by a preemptive recovery engine that pre-calculates a clean data state even before the cyber attack happens. So that our customers are ready to recover as soon as they have a successful cyber attack. As a result, many of our customers are not in the news even when they are confronted with significant cyber attacks and they are not disrupted. And that's what is differentiated about Rubrik. And, again, we are equal opportunity replacers. For both legacy solutions as well as new gen solutions because they lack cyber resilience. Capabilities in a way of preemptive recovery engine. Just to give you an example, a European multinational industrial company replaced the legacy backup vendor with Rubrik's cyber resilience platform because a third-party audit found that they were not ready to recover upon a cyber attack, and they needed to upgrade their resilience posture. And they chose Rubrik for fast recovery for a simplified software platform for cyber resilience. So that's what we see in the marketplace. Again, our win rate comes from a very differentiated platform that we envision and built in the last ten years.

Great. Thanks for the color.

As a reminder, if you wish to ask a question, please press 1. Your next question comes from the line of Junaid Shah Siddiqui from Truist. Your line is now open.

Great. Thanks for taking my question. Bipul, as the MCP protocol adoption gains traction across the cybersecurity ecosystem, do you view it as a strategic growth lever that could expand Rubrik's role from, you know, data protection into a broader security orchestration platform?

The way we see Rubrik is not in the prevention and detection business. We are in the cyber resilience business. Because we have a fundamental belief you can't prevent the unpreventable. And the world requires cyber resiliency and cyber recovery capabilities, and that's what we are focused on. Having said that, if you take a step back, Rubik is really a secure data lake. And we use that data lake data to recover applications. And recover your system. And this data is governed and secured and classified. And with Anapurna platform, we built vectorized search to deliver embeddings directly into GenAI applications. And now Predibase which is the fine-tuning and serving platform, And now we are building AgenTeq Rewind that combines our core cyber resilience plus the AI platform technology to really deliver capabilities around undoing the action bad actions of agents. So we are looking at AI in a holistic way. But we are not just focused on securing the AI. What we are focused on security, which is the cyber resilience business, as well as AI operations business, which is about agent fine-tuning, serving, agent rewind plus plus. So that's why we are defining ourselves Rubrik is the security and AI company.

Thank you.

Thank you. Yeah.

Your next question comes from the line of James Fish from Piper Sandler. Your line is now open.

Hey, guys. Sorry for any background noise here. Just wanna go back to the DSPM side. Any way to think about the updated penetration here? What you're seeing competitively just within this part of the market? And then additionally, what are you guys assuming you're thinking about for Fed here heading into, you know, the big Fed? And understanding it's been a small part historically, you know, what do you actually see for maybe some disruption there? Thanks, guys.

Sorry. Did you say Fed? Fed. Okay. As I said, we see the opportunity in the data security market around combining data and identity together. Because I don't believe just the data classification itself is a long-term sustainable business or a platform. So our vision is that how do we combine identity and data together to give a full picture of not just the posture of the data and identity, access to the data, but at runtime understanding what is really happening to the data and should anything bad happen. How do we do data recovery or identity remediation? And it's all data is the underpinning technology or the platform across all three. And that's the vision that we are driving. In terms of the again, this is still in the investment phase for us. And we are continuing to kind of build the cyber resilience transformation for our fed customers. It is high priority for fed organization given the nation-state actor and the fed that they face. It is we continue to invest in the growth and develop the Fed market for ourselves. We recently received Fed RAMP Moderate, For example, this quarter, a Fed agency had a challenge of deployment of a new gen vendor that they had bought a couple of years ago. So they are replacing that new gen vendor with Rubrik to protect their mission-critical databases. Which is required for their cyber resilience. And they picked Rubrik for our ability to deliver faster recovery times on the data. So fed again, we continue to win in the fed. It's still a developing market for us. Continue to invest. And we believe that Fed will continue to be a significant opportunity for us given how important cyber resilience and cyber recovery is for this market.

Thank you, James.

Your last question comes from the line of Shrenik Kothari from Baird. Your line is now open.

Great. Hey, guys. This is Zach Schneider on for Shrenik. Thanks for taking our question. So I believe nearly half of new deals are landing in the enterprise tier with foundation still key entry point for budget-constrained customers, and please correct me if that number is wrong, But could you just walk us through how deal sizes, renewal patterns are subsequent expansions differ across the tiers? Especially over multiyear contracts? Thanks.

Hi, Shrenik. So this is Kiran. I'll take your question. So on the first part, it's generally the trend has been similar. Close to half of our lands are coming from the enterprise edition. And then a mix of both the business and foundation with foundation being the larger of those two. And the enterprise the expansion path can vary. As you know, we are a multiproduct company. So customers start with one of these editions and maybe a couple of one or two of these workloads, and then they can expand by either expanding to a higher tier edition if they start with foundation or business, or if they already start with enterprise, they could expand to other workloads as well. And start with Microsoft 365, go to a native cloud workload or an Oracle workload, or database workload. So the expansion paths are not limited just because you started in a higher edition because you can always add more workloads as well.

Great. Thanks a lot.

Thank you.

This concludes our Q&A session. I would now like to turn the call over to Bipul Sinha for closing remarks.

Thank you. Thank you, everyone, for joining us today. We remain very excited about the cyber resilience opportunity as we build the future of AI transformation in terms of the enterprise AI acceleration. Much appreciate your support and trust. Again, very early days for Rubrik. We are in the first decade of our multi-multi-decade story. Thank you so much for your time. Talk to you three months from today.

Ladies and gentlemen, this concludes today's conference call. Thank you for your participation. You may now disconnect.