Mimecast Limited

Mimecast Limited

MIME
Mimecast LimitedUS flagNASDAQ Global Select
79.92
USD
- -
- -

Q4 2020 · Earnings Call Transcript

May 11, 2020

APIChat

Operator

Ladies and gentlemen, thank you for standing by, and welcome to Fourth Quarter 2020 Mimecast Earnings Conference Call. [Operator Instructions] Please be advised that today's conference maybe recorded.

[Operator Instructions] I'd now like to hand the conference over to your host today, Mr. Robert Sanders, Director of Investor Relations.

Robert Sanders

Good evening. Welcome to Mimecast earnings call for the fiscal fourth quarter of 2020 ended March 31, 2020.

I'm Robert Sanders, Director of Investor Relations. With me on the call tonight are Peter Bauer, our Co-Founder, Chairman and CEO; and Rafe Brown, our CFO.

Tonight's conference call is being broadcast live. A replay of this call will be available after the live call has ended.

We will make forward-looking statements regarding future events and the future financial performance of the company. These forward-looking statements are subject to risks and uncertainties that could cause actual results to differ materially from those in the forward-looking statements.

In particular, we will address the current and anticipated impact of the global COVID-19 pandemic on our business. We caution you to consider the important risk factors that could actual results to differ from those in the forward-looking statements contained in today's press release and on this conference call.

These risk factors are further defined in Mimecast's most recent Form 10-Q filed with the Securities and Exchange Commission and are also discussed in today's press release. Tonight's outlook is being provided under the protections of the Safe Harbor and in consideration of the Securities and Exchange Commission's request, that company has provide a good faith effort to provide investors and other market participants with forward-looking information given the societal and economic uncertainties associated with the pandemic.

During this call, we will present both GAAP and non-GAAP financial measures. These non-GAAP measures are not intended to be considered in isolation from, a substitute for or superior to our GAAP results.

A reconciliation of GAAP to non-GAAP measures and the reasons for our representation of the non-GAAP information is included in today's press release, which can be found in the Investor Relations section of our website. The date of this call is May 11, 2020, any forward-looking statements we make today are based on assumptions that we believe to be reasonable as of this date.

We undertake no obligation to update these statements as the result of new information or future events. Now, I'd like to turn the call over to Peter Bauer.

Peter Bauer

Good evening. And thank you all for joining our fourth quarter fiscal 2020 earnings call.

I'll start tonight's call by highlighting the accomplishments we've achieved in the fourth quarter and milestones we've crossed during fiscal 2020. Next, I'll discuss the company's response to the COVID-19 pandemic as we work to safeguard our employees and our customers.

And then I'll discuss what we're seeing in the marketplace and how Mimecast is adapting to further our cyber resilience mission. Finally, I'll look ahead and share some of our vision for Mimecast in the coming year and beyond, before handing the call over to Rafe Brown, our CFO to look back on 2020, review the quarter, and the impacts of the COVID-19 pandemic in more detail.

Fiscal 2020 was a year that tested our merits, as we faced new digital and of late biological enemies in our midst. Despite the challenges, our teams performed admirably delivering revenue in the fourth quarter that exceeded the high end of our guidance.

Additionally, we continue to operate efficiently and generated $24 million of adjusted EBITDA in the fourth quarter and US$78.1 million of adjusted EBITDA for the full year fiscal 2020, representing an adjusted EBITDA margin of 18.3% or a 240-basis-point improvement over the full year 2019, demonstrating the strength of our model as we scale. We were pleased to see 1,200 net new customers join us in the fourth quarter.

In total, 38,100 customers rely on Mimecast to make their environment safer for business. We continue our success in the larger enterprise segment with several notable engagements, including a U.K.

pharmaceutical company that purchased our Email Security 3.0 suite for 75,000 employees. A U.S.

state agency purchased protection across Zones 1 and 2 for 50,000 employees and in Australia higher education customer that purchased Zone 1 and 2 protection for 140,000 seats. Now the popularity of our multi-service offering continued with several of our large engagements, purchasing our full suite of services that included web and awareness training in addition to email services.

We continue to have success in the large enterprise space and we believe that we have the services and teams in place to further penetrate this opportunity. In spite of challenging business climate in some of our markets this year, we forged ahead with our expansion plans, opening new offices, hiring additional talent and deploying new data centers to capitalize on the large opportunities ahead.

While investing for our future growth, we also delivered positive free cash flow throughout the year, including $12.1 million in the fourth quarter and totaling $37.3 million of free cash flow for the full year. As our facilities' expansion is complete, we anticipate seeing a positive inflection in our free cash flow in fiscal 2021.

This we feel is important to our resilience as we face the public health and associated economic crisis that has been unfolding. While achieving our financial targets, I'm also very pleased with our pace of innovation and let me briefly share some of our achievements on our product rollouts.

We sold our threat research center and our open APIs used by approximately 800 customers in the quarter and launched a new integration with Microsoft Azure Sentinel to share Mimecast threat intelligence across the entire email estate validating Email Security 3.0 on the front lines of our customer cyber defenses. Additionally, we gained traction with Mimecast Web Security and now count over 600 customers using the service as at the end of March, and that's up from the 400 customers we noted at our investor event in February, as organizations are looking to enhance security for remote workers.

Now speaking of working remotely, let's turn and look at some of the steps Mimecast is taking to ensure our employees and customers are fully supported in the current work-from-home situation. Now my priority has been to our staff and their safety as they represent our greatest asset.

As a dynamic global business, our employees are used to working from home and we have deployed tools to connect employees that spread around the world. Things like persistent chat and video conferencing, and of course, email.

As we have moved from a physical workspace to a virtual one, we've leveraged these tools to support all employees working remotely. To further support our staff at home, we've rolled out programs to address our physical and mental health.

We have made direct payments to our lower-wage earners to offset some work from home expenses, as well as the impact the crisis may have on their family finances. The Executive Committee established an Employee Resilience Fund that employees can contribute to or draw from in times of need.

I've also felt a warm reception to my weekly work from home staff video messages and I'm very thankful to all of the Mimecastists who are adapting to this new paradigm despite its challenges. In fact, our teams have been executing quite well while working from home and carrying the business forward.

On the go-to-market side of the house, we've been busy engaging with prospects, conducting engineering demonstrations, and are actively competing in proof-of-concept engagements, more common with larger organizations. Equally important to me is the support of our customers as we engage with them on this new footing and I'm hugely proud of our customer success teams, who have completed over 1,000 new customer and new product connections done entirely remotely with customer satisfaction scores consistently over 90%.

Further evidence came in the form of a number of personal notes I've received from customers in the quarter, including two from our larger new customers expressing their satisfaction with the on-boarding process. Later on in this call Rafe will cover the financial impact of the virus to Mimecast in greater detail, but first I wanted to share some of the ways we're keeping customers safe while working remotely.

Now, attackers responded quickly to the pandemic, as we saw a barrage of new email-borne scams including impersonation of the CDC, The World Health Organization, The U.K. National Health Service to name a few.

As noted in our recent 100 days of coronavirus report from Mimecast Threat Research, impersonation detections increased by 30%, while malware detection increased by 35%, highlighting the persistence and ever-changing tactics that attackers deploy against organizations. In addition to blocking email scans, customers who deploy Mimecast Web Security are protected while working from home also corporate LAN or VPN from web-based threats attempting to capitalize on pandemic fears.

We believe this service is more relevant today, as our Threat Research shows that malicious URLs blocked by Mimecast were up 56% over pre-corona levels. Our browser isolation technology demonstrated at the RSA Conference is one of many recent enhancements to Mimecast Web Security further strengthening customer cyber resilience.

Alongside the protection Mimecast services deliver, our customers also play a key role in keeping their organizations secure. To bolster our customers defenses, Mimecast awareness training solution also includes modules specifically targeted to remote workers and best practices for working from home.

Now taking together, our integrated suite of services provides a comprehensive solution to address many of the cybersecurity challenges our customers face. Today, more than ever, we believe organizations need a cybersecurity partner, who responds in real-time to attackers shifting tactics and clever tricks, and our customers believe it too, as we exit fiscal 2020 with net revenue retention of 107% reflecting industry-leading customer retention and the desire for additional services from our base.

These high retention rates are an illustration of the mission-critical nature of our services, as the businesses of all sizes and across all verticals need protection from cybercriminals. Our balance sheet is strong with approximately $174 million in cash and cash equivalents.

We envision further operating leverage and free cash flow generation in fiscal 2021 and this gives us confidence in our ability to remain resilient and to keep innovating and investing in a disciplined way as we navigate the current crisis and remain focused on the considerable opportunities to serve even more customers with our expanded portfolio. Now, many of you on the call today would have attended our Analyst and Investor Day in February, where we discussed our vision and set new goals for the coming years.

Little that we know at the time, how we would all be impacted by this pandemic, and in spite of the disruption that we have witnessed since then, we remain confident in the long-term outlook we presented and the opportunities ahead to expand to new markets and grow our subscribers. We outlined our plans to further address state and local municipalities, federal customers, and expand our geographic reach with dedicated resources.

We discussed plans to further penetrate the large enterprise segment with services and support tailored to meet their needs. We also described how our integrated platform of services continues to expand and capture share from legacy players with dated technologies.

We are reiterating our long-term goals presented at our Analyst Day and we believe we remain on track to achieve these goals. Before I wrap up my prepared remarks, I want to share one additional observation from the fourth quarter.

In January, we completed the acquisition of Israeli-based Segasec and immediately launched services known as Mimecast Brand Exploit Protection, the cornerstone of our Zone 3 defenses. This new service is meeting an unfold need for many of our customers.

In fact, we closed the largest ever deal in our SMB segment as the customer purchased a broad suite of services that included Brand Exploit Protection. The ability to identify and quickly remove fake websites that attempt to defraud our customers' customers is a key new offering from Mimecast that further expands our ability to enhance cyber resilience.

So in summary, fiscal 2020 was a year of challenges that we met with agility and innovation. We added 3,700 net new customers to the Mimecast platform.

While delighting and retaining our base of subscribers. We exceeded our revenue and profitability targets and we completed on time and on budget with the global expansion that sets us up well for future growth.

Before I conclude, I'd like to again say we are focused on achieving our targeted operating model offered at our recent Investor Day, which notes our commitment to drive towards the Rule of 40. Alongside that commitment, we're also focused on supporting our employees, our customers, and our communities, as this is the foundation on which our business is built.

We believe investments in our key stakeholders during these difficult times will act as a springboard for the growth of our company when we return to more familiar times. Now, I'll hand the call over to Rafe for our financial results and additional details regarding our adjusted FY'21 plan.

Rafe?

Rafe Brown

Thank you, Peter. I'm pleased to report that for the fourth quarter of fiscal 2020 we exceeded the high end of our guidance for both revenue and adjusted EBITDA.

This achievement was made despite both the impact of the COVID-19 crisis and significant foreign currency headwinds experienced during the quarter. To that point, I will review our Q4 results and then dive into the impact we are seeing and will likely continue to see, as a result of the COVID-19 crisis and resulting economic slowdown.

In the fourth quarter, we generated revenue of $114.2 million, which represents growth of 23.9% over the prior year in absolute dollar terms. Adjusting for the $2.3 million of currency headwind we faced, our constant currency growth rate over the prior year stood at 26.4% for the quarter.

Note, that since providing guidance last quarter foreign currency fluctuations negatively impacted our fourth quarter results by $1.5 million. This has been a leap year, Q4 benefited by approximately $900,000 due to the additional day of amortization.

For the full year, of course, any impact is minimal. Segasec, which we acquired in Q4 and DMARC, which we acquired in Q3 and together complete a Zone 3 offering contributed acquired revenue of approximately $200,000 in the quarter.

For all of fiscal 2020, revenue grew 25.4% in absolute dollar terms and 28.3% in constant currency, net of the $10 million of FX headwind to a total of $427 million. Adjusted EBITDA for the fourth quarter totaled $24 million, representing an adjusted EBITDA margin of 21%, compared to $15.8 million or 17.1% in the same quarter of the prior year.

I would note that Q4 benefited approximately $1 million from one-time savings related to the cancellation of a number of in-person marketing events, travel, and other incidental expenditures. For the full year, our adjusted EBITDA margin was 18.3%, up 240 basis points over the prior year.

On a net customer basis, we added 1,200 customers in the quarter, compared to 1,100 in the prior year. It is exciting to note that approximately 200 of these new customers joined Mimecast by purchasing one of our emerging products on a standalone basis.

These emerging products, which include Web, Brand Exploit Protect, DMARC or Awareness Training, are part of our strategy to create additional customer onboarding routes. Mimecast now serves 38,100 customers worldwide.

Our average order values continue to show improvement over the prior year. Currently, the average order value for all customers stands at $11,900, up approximately 11% over the prior year in constant currency terms.

Average services per customer across our customer base rose to 3.3 services per customer in the quarter, up from 3.1 services last year at this time. As of the end of the year, the proportion of customers using Mimecast in conjunction with Microsoft 365 remains above 50% across our entire customer base, as well as among those new customers who joined Mimecast this quarter.

Down sell and churn measured on a trailing four-quarter basis held steady in the quarter at 7%, upsell of additional services and seat expansion came in at 14% giving us a revenue retention rate of 107%. As we recently discussed in our Analyst Day, our upsell numbers reflect the fact that 74% of our customers now use our TTP solution and that the vast majority of new customers buy TTP in their initial order.

Over time, we anticipate that our emerging products in Zone 2 and Zone 3, as well as our Web Solution have the potential to reach a meaningful proportion of our customers' base, introducing a significant level of upsell opportunity. Turning to gross margin for the fourth quarter, we recognized a 75.9% non-GAAP gross margin, up 160 basis points from Q4 of the prior year, driven by efficiencies in grid infrastructure.

Our non-GAAP operating profit for the fourth quarter was $16 million or 14% of revenue, an improvement of 370 basis points from the prior year, which continues the trend of improved margin that we have seen throughout the year. In bottom-line terms, our fourth quarter GAAP net income was $2.5 million or a profit of $0.04 per diluted share based on 64.4 million fully diluted weighted average shares outstanding.

Our non-GAAP net income for the quarter was $9.7 million or $0.15 per diluted share based on 64.4 million fully diluted weighted average shares outstanding. Turning to cash flows, our fourth quarter operating cash flows totaled $25 million or 21.9% of revenue.

Free cash flow totaled $12.1 million for the quarter. For the year, free cash flow came in at $37.3 million in line with our prior guidance.

Turning to the balance sheet. As a March 31, Mimecast had $174 million of cash on the balance sheet after paying $27 million for the acquisition of Segasec early in the quarter.

We continue to have an undrawn credit facility of approximately $48 million. Now let me discuss the impact we are seeing related to the COVID-19 crisis.

As we think about the impact on our business going forward, I'd like to begin by reminding you that Mimecast has highly diversified business operations across industries, customer segments, and geographies. Perhaps most importantly, the portion of our customers in industries directly and adversely impacted by the current economic crisis comprised only a portion of our total diverse customer base.

At present, we have 14% of our reoccurring revenue base in the hospitality, transportation, retail, or oil and gas sectors. We have an additional 7.5% of our business in the medical sector, so it is less clear how the current crisis will impact their buying behavior over time.

From a customer segment perspective, our enterprise business reflecting customers with more than 5,000 seats has risen to 18% of revenue. Our mid-market business constitutes 73% and smaller customers reflecting customers with fewer than 100 seats stands at 9% of recurring revenue.

With respect to Q4, the primary impact of COVID-19 and the significant shift to work-from-home basis occurred in the back half of March across our major markets. This shift did not significantly impact our Q4 revenue.

In terms of bookings, however, we have calculated an impact to the quarter of approximately $4 million. Unfortunately, the challenges experienced in the last two weeks of March, which are the busiest two weeks of our fiscal year in terms of booking activity will directly impact our FY'21 revenue outlook, when we would otherwise expect to recognize these bookings as revenue.

One should note that in many cases, customers stated they were deferring the change to the Email Security providers simply due to strains on the IT team's time and resources in the midst of the crisis. However, it remains to be seen how quickly these customers will be able to return to the initiative to change Email Security providers.

As we model our business going forward, there are four distinct areas on which it is important to focus. First, the new customer business impact; second, our ability to upsell existing customers; third, customer retention and downside rates; and fourth, geographic-specific challenges.

Taking these one at a time, let me share with you what we are seeing and how we are modeling our year. First, from a new customer business perspective, in the last two weeks of March new business pipeline generation slowed as potential customers rapidly shifted to a work-at-home environment.

Throughout the course of April and the first week of May, pipeline build has begun to recover. For modeling purposes, we are assuming that business performance from new customers, which constitutes approximately half of our total bookings remains below our targeted run rate through our first two quarters, which takes us through September 30th and then begins to gradually improve over the second half of our fiscal year.

Second, from an upsell business perspective, we again saw an impact in Q4 from both a push deal perspective and in pipeline build. While we have seen positive engagement in our emerging products, our overall upsell activities facing similar challenges as our customers face tighter budgets and delays significant projects.

As we have discussed in the past, our upsell numbers have traditionally been split between product upsell and seat expansion. Given the slowing economy, seat expansion could be muted for the coming months, if not the entire year, as it often relates to businesses adding employees.

Similar to new business bookings, we are modeling product upsell to be below our original expectations, particularly over the next few quarters. Our seat driven upsell is likely to remain challenged until the broader economy begins to recover.

Third, down-sell and churn. As we discussed, we have made a significant investment in our customer success efforts, which we believe would ordinarily improve down-sell and churn rates from the current 7% to our historic norm of approximately 6%.

However, the broader impact of the recession will most certainly be reflected in down-sell and churn through the majority of fiscal '21. We expect the broader economic challenges may offset the improvements we would have otherwise seen.

We are working closely with our customers as they go through this crisis. There have been a number of requests for shorter billing terms or extended payment terms.

These requests are evaluated on a case-by-case basis, but when granted have a temporary impact on cash flow. I would note that the changes relate to short-term relief related to billings not changes to overall contract durations, which are typically one-year.

Overall, given the macroeconomic uncertainty, we are modeling our revenue retention rate, which is the net of upsell, down-sell, and churn of between 106 to 107% for the duration of fiscal '21. Fourth and finally, the geographic impact of the crisis has thus far been difficult to differentiate beyond the obvious dramatic impact on foreign exchange rates, where we have seen a significant strengthening of the U.S.

dollar since our last earnings call. It is quite likely that the depth of the economic crisis and the timeframe for recovery will differ significantly across our major geographies.

It will be important to remember that the U.K., which comprises 29% of our revenues, will be recovering from the Corona-induced recession at the same time as it negotiates the details of Brexit, which is likely to continue to produce its own economic headwinds. In South Africa, from which we derive 11% of our revenues, the current crisis appears to be significantly impacting this already weakened economy, the clearest measure which is the fact that the rand has devalued 21% in value against the dollar over the past year.

In our model, we anticipate bookings and retention rates will be impacted by these economic challenges and note that we have a small number of larger accounts in South Africa currently going through severe economic challenges. Let me now turn to guidance for fiscal '21.

For the first quarter of 2021, revenues are expected to be in the range of $112.8 million to $113.8 million or 19% to 20% growth in constant currency terms. Our guidance is based on exchange rates as of April 30, 2020, and includes an estimated negative impact of $4.8 million resulting from the strengthening in the U.S.

dollar compared to the prior year. Adjusted EBITDA for the first quarter is expected to be in the range of $23.5 million to $24.5 million, which is the mid-point reflects an adjusted EBITDA margin of 21.1%, up 750 basis points from Q1 of last year.

Given that we are in the early stages of the COVID crisis, it is obviously difficult to forecast full-year results with certainty. However, the recurring nature of our revenue stream and our disciplined approach to expense management gives us a baseline on which we can model our business.

As such, we are updating our guidance to reflect the significant movement in foreign exchange rates, which have adversely impacted our FY'21 guide by $19 million since our initial guidance provided in February, the impact of the current crisis on our recently completed Q4 bookings and the high likelihood that our performance will be impacted by the dramatic changes in the broader economy and our specific selling environment. This said, full year 2021 revenue is expected to be in the range of $475 million to $485 million or 15% to 17% growth in constant currency terms.

Foreign exchange rate fluctuations are negatively impacting this guidance by an estimated $15.5 million compared to the rates in effect in the prior year. Knowing that you'll be trying to reconcile this guidance with figures we discussed a few months back, let me recap.

Our revenue guidance currently stands at $480 million at the midpoint, compared to $510 million in February. $19 million of this change is purely currency headwind related.

On a constant currency basis, the remaining change of approximately $11 million reflects the Q4 booking impact that the COVID-19 slowdown, discussed above of approximately $4 million, and a $7 million change relative to the ongoing economic challenges discussed earlier in this call. From a bottom-line perspective, we are maintaining our estimated adjusted EBITDA margins.

As such, full year 2021 adjusted EBITDA is expected to be in the range of $94 million to $96 million, which at the midpoint, would reflect an adjusted EBITDA margin of 19.8%, up 150 basis points from the prior year. Free cash flow margins for the full year of fiscal ' 21 are expected to be approximately 16% at the midpoint of our guidance range of $76 million to $78 million for the year.

CapEx for the year is expected to be approximately 7% of revenue. Capital expenditures will be slightly skewed to Q1 estimated to be $10.5 million due to the front-loading of equipment orders to ensure capacity throughout the year.

As a result, we expect Q1 free cash flow to be approximately $9 million. Our GAAP tax expense for fiscal '21 is expected to be approximately $4 million.

Our non-GAAP tax rate is expected to be approximately 30%. Finally, stock-based compensation is projected to be approximately 12.5% of revenue for fiscal '21.

While these are unprecedented times, we are confident that by focusing on our customers and our team, we will emerge from them stronger than ever. The challenges our customers are facing underscore the value Mimecast delivers and product offerings that build organization resiliency through a flexible single-tenant, cloud-based offerings.

Our business model with approximately 98% recurring revenue, likewise, gives us the ability and the visibility to maintain our strength as an organization even in these uncertain times. These factors allow us to remain confident that we will achieve our long-term goals despite near-term challenges.

With that, operator, let us please open the line to questions.

Operator

[Operator Instructions] Our first question comes from Matt Hedberg with RBC Capital Markets. Your line is now open.

Matt Hedberg

Thanks for taking my questions. And Rafe, in particular, your guidance was a super helpful for us kind of think about the mechanics of the model.

I guess I'm wondering you noted down-sell and churn could get a little bit worse this year relative to the plan of improving a little bit. When you think about those two variables, I'm wondering if you can distinguish between them.

Have you seen - and to what extent you've seen customers reducing their - active customers reducing their seat count because of layoffs and things of that nature?

Rafe Brown

Yes. Thank you for the question.

I think we're in very early days in terms of the overall monitoring down-sell and churn, principally what we've had from customers, so thus far are some that have come back and requested things like quarterly billing for a short period of time instead of annual things of that nature. I'm sure, well, I know there's been a couple of corner cases where people are going through reductions and talking about what they - their contract might look like going forward.

But I would say, to be honest, right now we're still very much in the early days of anything so there's no real data points on the Board that are meaningful as of yet.

Matt Hedberg

Got it. That's helpful.

And then maybe on the Symantec replacement cycle or just the broader legacy provider replacement cycle, can you talk about the cadence of that, how you think that might impact this year? Is it more of this year thing or sort of a next year thing, just sort of the willingness for customers to move off the legacy solution in times of economic stress like that that would be helpful too?

Peter Bauer

Yes. Matt, thanks.

I'll take that one. I think we think about that in two ways.

The one is, there's many legacy implementations that they kind of have to get off because they no longer serve customers well in a work-from-home scenario. So appliances for things like Email Security and Web and so really require replacement at this time and so we're seeing an opportunity around that.

Looking at Symantec specifically, obviously, that is a hot area of opportunity for us. And we've been monitoring that closely to see what the impact of customers' willingness to make changes on it.

The picture that's forming is that customers are interested in moving. It was delayed slightly, but in the quarter that we've just reported, we had one of our stronger quarter's ever on displacement with Symantec and we were able to do some, I think, some pretty large Symantec migrations on Email Security, despite the fact that a lot of the work had to be done under the current work-from-home regime.

Operator

Our next question comes from Shaul Eyal with Oppenheimer. Your line is now open.

Shaul Eyal

And Rafe, thank you for this transparency, let me echo Matthews as well. I have two questions.

When we think about some of the challenges you're seeing and putting that versus the breakdown rate you provided us with small customers 9% of recurring revenue, middle customer - middle-market customers 73%, a large enterprise, if I'm not mistaken, 18%. Where do you see the majority of impact to fiscal '21 coming from, is it just one segment or is that all of them?

Rafe Brown

Well, I would say, in the first few weeks that's happened. In late March, we really did see it kind of across the Board.

I will tell you, as the April has ticked by and the first week of May, we are seeing the enterprise come back stronger in terms of pipeline build and by pipeline build that's our day-to-day activity, where we're focused on how we're adding to pipeline. So, perhaps, not surprising, some of the bigger organizations are a little bit more able to get back to work even in a work-from-home environment.

One thing I would add, you are spot on in your customer segment breakdowns. But if you just look at how much of our recurring revenue comes from customers over a 1,000 seats, which speaks to some pretty good-sized organizations.

We now have 47% of our recurring revenue coming from that over 1,000-segment. And I think that we talked a lot about the broad customer base that we have of many different segments and industries, and I think that speaks to it.

So we're encouraged by what we're seeing in some of these bigger accounts. Overall, as I touched on, on the call, we did see things improve from that first couple of weeks of highly disruptive time, as we look kind of to that day-to-day activity and so we're hoping the enterprise, the larger accounts lead the way on that.

Shaul Eyal

Understood. And thank you for that Rafe, again.

Peter on the Office 365, it would appear as if trends, for the most part, are largely intact. But have you seen any change in demand?

And are customers becoming slightly more reluctant to leave the current provider and switch to a new one, probably, just playing it safe for maybe a quarter or so?

Peter Bauer

Yes. Great question, Shaul.

So, yes, I think, the Office 365 trend continues and that's been a tailwind for our business for some time. The percentage of our customer base using Office 365 are using Mimecast to protect Office 365 continues to climb, so that's good.

And I think customers using Office 365 are having a better time of it, because of the way that it fits a remote worker scenario better. So we think that's good.

Sorry, Shaul, just repeat the second part of your question. Willingness to migrate - to change provider, sorry.

Shaul Eyal

Exactly. Thank you, Peter.

Peter Bauer

Yes. So we've seen - obviously, we saw a slowdown at the end of Q4 in terms of decision-making.

We're not certain that that was necessarily based on a reticence to change providers. I think it was more the disruption and the uncertainty around the pandemic and how it is going to impact and a lot of distraction with IT and security teams focused on work-from-home situations.

What we have seen is that those customers that did continue with these migrations is that we've been able to very successfully and, on a cost-neutral basis move them to a better stronger Email Security platform. And in fact, in many cases, we expect that, that IT organizations will start to get back sometime some productivity as they settle into this and quite possibly have scope to do these projects more successfully with us as we settle down.

Operator

Our next question comes from Brian Essex with Goldman Sachs. Your line is now open.

Brian Essex

Rafe, maybe one quick one for you, just on the guidance and the margin expansion. As we've kind of brought down the top-line guide from February.

Maybe just some thoughts on how you're thinking about spending for fiscal '21 and where any kind of, I guess, that's expense control came from to maintain some better margin expansion, I think, like, 250 basis points at this point of the mid-range?

Rafe Brown

As you can imagine, as you're going through this crisis, we're monitoring headcount very closely. Look, we have recast our plan and we've really said in a tightly controlled system where we'll look at a number of indicators and then release head - headcount as the year progresses.

Just to make sure we're really working in concert with the business as it develops because I think as everybody knows, yeah, this is proved hard to predict. So I think that's the first element where we've been able to really focus on it is along the headcount side.

Obviously, right now we're traveling a lot less than normal so there is a couple of million of savings in Q1. That is coming from travel reductions and event reductions.

That said in our plan, we are anticipating that we will get back to work as the year goes on and there's very likely some pent-up demand certainly, for some in-person events and things like that. We've shifted everything we can to virtual.

But as the year goes on that has a lot to do with our general approach to pipeline generation. So there is some savings, I would say early on, related to travel, but then there is some planned investment later on in the year goes - goes on for travel and events really.

Brian Essex

Got it. That's helpful.

And maybe one quick follow-up on, I think, maybe to Matt's question, where - but I wanted to kind of get your thoughts in terms of your outlook and assumptions embedded in your outlook with regard to seat count reduction.

Rafe Brown

Yes.

Brian Essex

I guess, how - what are your assumptions? Do you kind of a sign it to one of the - any particular cohort or customers.

And then if we were to see kind of unemployment or seat count reductions meaningfully impact your installed base. How that manifest itself, would have come in through on renewals or would you have interim conversations with your customers on a quarterly basis to adjust on that front?

Rafe Brown

I think, when we talk about that revenue retention rate, which I - as I mentioned, we're modeling between 106% and 107% and we kind of bring together a number of scenarios here as we're working through that, that is obviously, net of a few numbers, the upsell, the down-sell and the churn. As we think about it, we're kind of - we're solving for this end numbers.

So we have gone through a number of scenarios. Frankly, the - it's hard to say until it actually happens, I guess, the lower end of the market.

You can see some of those companies struggling as we go through tough times like this. They're generally smaller dollars in terms of recurring revenue from any one of them.

But I think that's the running hypothesis that a lot of people are using that there could be some elements there and we're excited about the activity that's going on that market. I think it's also important to think about and we touched on it briefly, just our exposure in certain verticals, we tried to put together a group of those verticals, which we think are most likely to be impacted by this and that's our retail, hospitality, transportation and then even oil and gas.

And together it's 14% of our total recurring revenue base. You really do each of that great diversity that we have and that we rely on.

So it gives us some variant of where kind of the hotspots could be. Your last question on when do these changes happen.

As a general rule that the - any kind of changes like that usually happen at the contract renewal time. They are in dire circumstances in very unique situations, perhaps, there could be an exception to that.

But the general rule is that any kind of down-sell, if you will, reduce seat counts or things like that happens at renewal time.

Operator

Our next question comes from Keith Bachman with Bank of Montreal. Your line is now open.

Keith Bachman

I wanted to ask my first question around customer adds, despite the backdrop, the customer adds in this quarter were actually reasonable. How are you thinking about customer adds fueling the model over the next couple of quarters?

And I wanted to add one particular dimension to that, one of the previous questions was around switching vendors. That's not the way I was thinking about it from a competitive dynamic standpoint for the situation but in particular consolidation.

What I mean by that is, if Office 365 continues to get rolled out, particularly at the low end. Does that create a higher propensity to go with Microsoft solution in this case given the weak backdrop of the economy?

So really new customer adds with the competitive twist and then I had a follow.

Rafe Brown

Sure. I'll start off on the new customer adds.

As we're looking forward to the year, remember the number we quote is a net customer add numbers.

Keith Bachman

Yes.

Rafe Brown

So small and larger number of small companies if they struggled during this period that could obviously impact that statistic even if it's a relative small number of dollars. But let me tell you, we think about it has, it's very important for us to be bringing on new customers onto our platform, right?

It sets us up for additional sales and our - kind of our longstanding proven ability to upsell those customers. So it is absolutely a focus of the organization.

That's why we kept very well pleased to see the activity we had of that 200 customers coming on where we think of that as new on-ramps on to the Mimecast platform. Now those are coming from some very brand new solutions, but there are things that now standalone apart from our typical and traditional security approach - Email Security approach, whether it's our Web Solution, which had a nice quarter, DMARC - as if products that came out of the DMARC acquisition and the Segasec acquisition.

Those set us up we think over the long-term to keep bringing customers onto the platform, and then, obviously, our hope is that we can sell those customers more over time. So I think that's probably the right way to think about that.

Peter Bauer

Yes. Keith.

Keith Bachman

Okay. Go ahead, Peter.

Peter Bauer

Just to answer your question around sort of economic pressure and smaller customers on Office 365. It was interesting I was looking the other day what our - how the company grew during the financial crisis of '08 and '09 and I'm just looking back at those numbers.

We grew incredibly strongly during that time and we were selling to a lot of smaller organizations during that period. And I think that the formula that we had been is very similar to the formula that we have now, albeit that the product portfolio is considerably richer.

So we're able to say to a smaller company on Office 365. Here is a very economically compelling suite, a combination of capabilities that is kind of unmatched in a single integrated suite in the industry that combines Email Security, Web Security, user awareness training, and data protection.

All in one very affordable, very easy to manage package. Given the increased cyber risks that we're seeing around this pandemic and given the dynamics of the work-from-home situation, these are really important things that companies of all sizes, but certainly smaller companies cannot simply ignore.

So we think we have a very strong opportunity to compete for that business, given the economics and the form factor that we can deliver to them.

Operator

Our next question comes from Brent Thill with Jefferies. Your line is now open.

Brent Thill

Just on the guidance, obviously, 26% growth, 19% to 20% this quarter, and then down to mid-teens, is a pretty sharp fall off. And I guess, many are asking, is this just you being a little more conservative based on assumptions or are you actually seeing this impact already in the close rates you mentioned the pipelines up, that would I guess imply that your close rates are down.

So I am just curious if you could just put a little more color around the decele that you're planning for the rest of the year? Thank you.

Peter Bauer

Yes. And the first thing I would just - on the pipeline just to be abundantly clear.

I was speaking to pipeline build, which is really look into the daily activity of the pipeline, the day-to-day generation that we track quite closely that's that where we saw that fall off the day-to-day build in late March, early April. Now, we've seen that activity climbing back up so just to be really clear on that point.

But your broader question about the guidance. The guidance as we tried to layout reflects a number of things we're seeing in the business across the Board, as well as in the activity we already saw in late in the quarter.

So, for example, that first one where we called out, in Q4, we can identify right around $4 million of business that we felt was on track to close that really got pushed hard by the COVID crisis and everybody shifting to home, right? Obviously, that translates straight into revenue for the very next year.

Things like that and - have an impact on FY'21. Also in our assumptions, it - as we've tried to layout, we - obviously, the crisis is hitting us hard now in this first quarter of the year and in a model where we have approximately 98% of our revenue recognized on a ratable basis because it's recurring that's the quarter that impacts is very significantly.

What happened in Q1, Q2 hits revenue a lot harder than the same booking that happens later in the year. So even in our assumptions that the business starts to return to a more normalized place later in the year, a lot of those bookings might come along late enough that it doesn't really have a chance to directly translate into FY'21 revenue.

Operator

Our next question comes from Saket Kalia with Barclays. Your line is now open.

Saket Kalia

Thanks for taking my questions here guys. Hi, Peter, maybe first for you.

I'd love to touch on the Web Security part of the business, realizing that's still a developing offering. Clearly, it sounds like you benefited from that since as early as February back to Analyst Day.

Can you just talk a little bit about why that is and why you feel like you're maybe differentiating here?

Peter Bauer

Yes. Thanks, Saket.

So, yeah, I agree with you, I think, Web Security is - it's a big opportunity for us, it's a very big market. We introduced the Version 1 of our product, I think, it's about 18 months ago and we've continued to incrementally innovate in that product to make it more and more competitive and to attract more customers as we go.

And remember our position on this is that we want to be the most compelling Web Security alternative to Mimecast customers. So customers that have already chosen us as the Email Security partner to give us a very serious look as being their Web Security partner.

And if we just look at it in the context of that, it's a significant opportunity. What we've started to see at the same time, and perhaps, capitalized by the COVID situation is, as Rafe mentioned, we've seen customers joining the platform with non-email security products as they first on rent on to Mimecast.

So that's pretty exciting. I mean, we'll have to see a few more data points before we call it a trend, but I think it's a good validation of the increasing maturity of our web offering.

So 600 customers now, and I think, as you mentioned at the Analyst Day, we called out I think, about 400 customers back in February. So, in a fairly short space of time, we onboarded a several more about 200 more customers onto Mimecast web security.

We did also at the start of the crisis launch a free 90-day production service of web security for customers. And we saw really good interest in that, obviously none of those accounted in the 600, those are all paying customers.

And that has allowed us to expose more of the web security capabilities to more of our customer base that we are excited about. And I think frankly, on-premise web security and appliances don't serve customers particularly well in the work-from-home situation.

So, the power of our integrated suite and our ability to very quickly onboard customers on web security I think, has paid off nicely and we will continue to grow that piece of the business.

Saket Kalia

Got it, that makes sense. Maybe for my follow-up for you Rafe and somewhat related, can you just give some broad brush on sort of how you're thinking about new product contribution in fiscal 2021, specifically, sort of that Zone 2 and Zone 3 portfolio.

I know you talked about some of the puts and takes of 106% to 107%. Clearly new products are going to be a part of that, but can you just go one level deeper in terms of how you plan for some of the Zone 2 and Zone 3 products?

Rafe Brown

Yes happy too. At the Analyst Day, we put up a chart that showed our emerging products, Zone 2 and Zone 3, and then you would add web to that to kind of get the full group of the emerging products.

And I think at the Analyst Day, it was 8% of our recurring revenue. It still remains below 10%.

So a lot of these products they are in the earlier days as we roll into the year. We obviously see that starting to build as we move through the year.

But it's still going to be a relative minority. I think the key for us is, is opening up those avenues both for up-sell to our existing customer base and as these products have gotten stronger and stronger and the team is getting ramped-up on and being able to push that out to hit that up-sell number that we talked about.

As well as the on-boarding activity to let that be the lead product in a lot of cases and then we come back around on them and try and sell them the product portfolio. So I think there is a very nice energy around those emerging products that can be helpful as it plays out over the longer term.

It's clearly - those emerging products are clearly very much part of our long-term strategy.

Operator

Our next question comes from Daniel Bartus with Bank of America. Your line is now open.

Daniel Bartus

I'm curious first Peter, if you - could talk about how the current environment might change demand per product. And are there certain products that you see are feeling the pain much more right now because maybe they're not as mission-critical or maybe there a little bit more complex?

Peter Bauer

Yes great questions. So I think, what we're finding is that there is demand - there is strong demand for each of the aspects of what we do.

The number one attack factor continues to be email, followed by web and then of course, the human factor which spans both of those as users of email and web. And so this tri-factor of capabilities that we offer in that regard is compelling in all cases.

It's also - it's a mission-critical capability. So you have to have an email gateway type solution.

You've got to have a web DNS resolver and web proxy environment and those capabilities tend to be pretty sticky and required. There is - it's more on the continuum of sort of oxygen or jewelry, it's much more on the oxygen end of the spectrum as a requirement.

I think they all aspects of cybersecurity that are more emerging themes that are perhaps people are less inclined to adopt during this time. But our focus has really been on taking things that have really established use cases and drivers of demand, doing them better, doing them as an integrated suite and giving customers the greater than the sum of the parts value of having an integrated cloud suite that solves a collection of mission-critical problem.

So we feel pretty good about that.

Daniel Bartus

Thanks, that's helpful, Peter. And then quickly for Rafe, just a clarification on your revenue retention assumption for fiscal 2021 are you assuming that the down-sell and churn stays at roughly 7% each quarter through the year?

Rafe Brown

So, I didn't break that out in large part because as we've gone through that number of scenarios whether it hits up-sell or down-sell or churn, you get back to the same point, right? And so, we haven't broken that out because, in our own scenarios, we've modeled it out in many different ways.

And so, that's why I think that net number where you net all of that off is probably the best measure of exactly how we're modeling it, the 106% to 107% net revenue retention.

Operator

Our next question comes from Sterling Auty with JPMorgan. Your line is now open.

Unidentified Analyst

This is [indiscernible] on for Sterling tonight. Just a quick one on maybe the initial deal size of what you're seeing during - kind of the slowdown, the number of services per deal either in March or here in April, have you seen any material change on the initial land?

Peter Bauer

I'm not sure we have - we haven't broken that out specifically. I think we did note that our - and it's kind of too early to tell I think as well.

What we did note was an increase in the number of products per customer across our base up to 3.3 which I believe is up from 3.1 a year ago. So, we continuing to drive an increase in the number of products within our base.

Operator

Our next question comes from Catharine Trebnick with Dougherty. Your line is now open.

Catharine Trebnick

Can you describe how the go-to-market sales motion has changed before the pandemic and now into the pandemic, because I think that would really give us some good color into your guide and how you're actually approaching it? So that's what I'm really looking at?

Thank you.

Rafe Brown

Yes, sure I'll start it off and then Pete can jump in. So Catharine - to a great extent look, we are fortunate in that, a very large portion of our business has traditionally always been done remotely to a lot of our customers.

The way they are marketed to, the way they're sold to all of that has been remote, if you will. Clearly, as you move up the stack towards the enterprise side, as you get bigger and bigger customers, there is this expectation of customer visits and what have you.

So I think the real change certainly in the enterprise side, which obviously everything is remote now versus kind of the traditional way where there would be a lot more kind of client visits, that piece has changed. But even if you go one step further on what about after a customer joins that has always been remote.

So there are subtle shifts with the bigger customers, but beyond that, we're well-trained and well-practiced at doing this remotely. So I think that piece is going quite well.

I think there is one shift further up the pipeline build, which is around events. We've obviously, a number of events have been canceled everywhere around the world they used to be in person.

So we are going very hard at making - virtual events. Pipeline generation is obviously very important because that pipeline we generate right now is impacting Q2 and Q3.

And so, we're hustling as hard as we can on that even though - the way those are being conducted has changed dramatically. Pete anything to add there?

Peter Bauer

Yes, I would say, across the stack our promotional marketing mix, we’re shifting more towards the digital type opportunities. There are a number of new products and digital marketing opportunities that are literally coming to life every day from creative providers.

So, we're looking at. We've also [technical difficulty]

Operator

Ladies and gentlemen, this concludes today's conference call. Thank you for participating.

You may now disconnect.