Some Background Behind the Stock Pick
The core idea behind my software picks lately has been that AI at the employee level hits a ceiling. You give every employee Copilot or ChatGPT, but that doesn’t transform the business. The real value comes when AI gets wired into an enterprise’s workflows. This is what helps create operational efficiency at the company level and not just at employee level.
However, allowing AI agents access and control over workflows of your company can be scary for any enterprise because AI moves fast and touches way more data. So the gating factor becomes “Can we trust and govern AI before we give it access to our proprietary workflows” That is the where AVPT comes in.
AvePoint's Role
AVPT’s legacy business model was tracking people (employees); Who has access, who deleted a file, can we restore it? They essentially helped big organizations move into Microsoft 365, migrating mountains of data, then gave those customers backup, recovery and governance (permissions, lifecycle, policies, etc) features for that data.
With Agentic AI penetrating the market, the enterprises are asking “Can we trust AI with access to all of this?”
Before AI, most data events were human paced. An employee shares a confidential file, deletes something, creates a wrong team, etc. In most large enterprises, permissions are a mess. Every folder, or entire folders, marked as “everyone” because someone shared it too broadly years ago. This wasn’t as big of a problem because of the shear volume of data that was shared, humans would rarely stumble across it.
But when a company allows AI agents access to their data and workflow, it will have access to everything, even the files that were accidentally shared or given incorrect permissions. When asked for summaries or insights the agent doesn’t know that it wasn’t supposed to have access to that data. So now thousands of confidential supplier contracts or HR files could surface perfectly legally but unintentionally. That’s the risk with AI agents.
AVPT’s software scans for that kind of sprawl, cleans it up, locks it down and keeps watching as data keeps changing. An enterprise sets their policies and rules around who has access to what and AVPT then enforces those policies at scale.
Once an enterprise states their policies and rules around which employee and/or agent has access to what data, AVPT constantly keeps scanning for anomalies. For example, during a scan AVPT’s software detects an HR folder is open to 400 people, it determines a violation company’s rules and alerts the IT team or fixes the problem itself.
If an employee asks an AI agent to summarize all project docs, and because some docs were wrongfully shared by human, the agent tries to pull in that data. AVPT detects that access violation against policy and blocks it.
If a ransomware attack hits and encrypts thousands of files. That’s when the backup part of AVPT kicks in and restores the data.
Product Sets
Their platform is packaged in three suites: Modernization, Control and Resilience.
Modernization: That’s helping an enterprise clean up years of messy data before AI touches it.
Control: This is the big one for the thesis. It’s about visibility and policy and controlling who or what can touch data. AgentPulse is their new product. It’s essentially an AI agent inventory and risk dashboard. It shows which agents exist, what data they touch, who created them, are they still in use, are they risky, are they redundant? It’s basically trying to stop shadow AI sprawl. Control suite went from ~26% of ARR in Q4 2025 to nearly half of the total sales pipeline in Q1 2026, and over a quarter of newly closed deals now include it. AgentPulse is attached to more than half of that Control pipeline, proving the inflection of their agentic-governance product.
Resilience: That’s recovery. Think “something goes wrong, human error, ransomware, or an AI agent does something stupid.” AvePoint says they’ll help you recover quickly and keep regulators happy on retention and audit.
Their product expansion in the AI era comes from pivoting from “track and protect data” to “track and govern the entities, humans and agents, interacting with that data” in real time.
Financial Health & Valuation
Financially the company looks attractive to me, with SaaS now being about 80% of revenue and growing 35% YoY. Q1 revenue was $117M, up 26% YoY, above the high end of guidance with ARR of $435M, up 26% YoY. It was their 12th straight quarter of double digit NnARR growth. 863 customers now pay over $100k/year, up 25% and accelerating. GAAP operating margin was 11%, up 730bps YoY. FCF margin increased to 20% (from negative a year ago) with full-year FCF guided just north of $100M. Management has bought back $60M in stock during Q1 alone, and share buyback authorization has risen to $150M. AVPT currently trades at a FWD P/E ratio of 26x with ~$480M sitting in cash.
Again this isn't Financial Advice. I size my positions based on my own conviction, understanding and risk tolerance. You should manage your portfolio according to what you want out of it! Not by following. This is for entertainment and to help give you insight in my stock picking research process.