OneSpan Q3 2026 Earnings Call - ONESPAN INC

Financial Performance:

• Q3 2026 total revenue reached $63.9 million, up 12% year-over-year; subscription revenue grew 16% to $51.5 million (81% of total mix), while hardware revenue rose 7% to $10.5 million.
• Full-year 2026 ARR increased 8.5% year-over-year to $195.5 million, with sequential growth of $5.9 million driven by contract expansions and new logos.
• Net retention rate (NRR) improved to 105% from 103% in the prior quarter; Gross Retention Rate (GRR) stood at 91%.
• Gross margin expanded to 76.3% from 73.6% in Q3 2025, driven by favorable subscription mix and cloud infrastructure efficiencies.
• Non-GAAP operating income rose to $9.2 million (vs. $8.2 million prior year), while Non-GAAP net income per share was $0.35 (vs. $0.33).
• Operating cash flow generated was $16.5 million; balance sheet ended with $51.4 million in cash and cash equivalents, with a $5 million credit facility balance repaid post-quarter.

Guidance and Future Outlook:

• Full-year 2026 revenue guidance increased to $254–$258 million (previously $248–$252 million); software and services revenue guidance raised to $208–$210 million.
• Hardware revenue guidance remains unchanged at $46–$48 million, though Q4 hardware contribution is expected to decline due to shipment timing shifts from Q3.
• Updated full-year 2026 non-GAAP adjusted EBITDA guidance increased to $72–$76 million (previously $67–$71 million).
• Full-year 2026 ARR guidance raised to $197–$201 million; full-year gross margin expected slightly above 74% due to higher software mix.
• Management does not yet provide 2027 specific guidance, citing incomplete planning but expressing confidence in acceleration driven by new product launches.

Business Segments and Product Lines:

• Cybersecurity: Revenue up 11.3% to $44.9 million; subscription revenue surged 17.4%. Gross margin reached 77%, and operating income was 41% of revenue. New DigiPass One platform launched, including DigiPass One Authenticate and Protect; "Verify" and "Insights" components scheduled for early 2027.
• Digital Agreements: Revenue grew 13.5% to $19.0 million, driven by overage volumes and contract expansions. A major banking customer transitioned from overage-based revenue to a larger multi-year term contract.
• Product Innovations: Launched AI-assisted features for OneSpan Sign (automatic document validation, enhanced identity verification). DigiPass One Verify is being developed to support European Digital Identity Regulation mandates for digital wallets by Dec 2027.
• M&A Integration: Bill 38 acquisition contributed ~1.5 percentage points to ARR growth; expanded in-app protection capabilities now include SDK and post-compilation approaches.

Market and Competitive Landscape:

• Geographic revenue split: Americas (43%), EMEA (37%), APAC (20%); APAC showed the highest growth rate, followed by EMEA and Americas.
• Strategy focuses on "land and expand" model within a deep base of 60 of the world's top 100 banks; new logos represent a lower portion of growth compared to expansion of existing contracts.
• Market trends highlight increased demand for mobile app protection and regulatory-driven demand for digital wallet verification, particularly in Europe.
• Management notes a shift from legacy hardware tokens to FIDO2 security keys, with hardware business stabilizing at a sustainable level.

Risks and Challenges:

• Q4 hardware revenue is expected to be lower than Q3 due to the timing of specific token deliveries, impacting Q4 gross margin mix despite higher software revenue.
• Overage revenue is non-recurring by nature; a large customer's shift to a term contract led to sequential overage declines expected to continue into Q4.
• Perpetual maintenance revenue continues to decline as the customer base migrates to term licenses and SaaS models.
• Sales cycles for large banking institutions remain lengthy, delaying revenue recognition for new product introductions.

Management Commentary and Tone:

• Tone is confident and optimistic, emphasizing a "Rule of 42" performance (Revenue Growth + Operating Margin > 42) in Q3, up from a "Rule of 12" in 2023.
• Management highlighted significant progress in strategic positioning, citing improved customer engagement, higher retention metrics, and successful new product launches.
• Focus remains on delivering solid profitability while investing in long-term growth opportunities, including capital returns via a $0.13 quarterly dividend ($55M returned to shareholders YTD).
• Executives expressed strong pride in the team's execution and the successful integration of the Bill 38 acquisition.

Analyst Questions and Answers:

• Hardware Sustainability: Confirmed hardware business is stabilizing; FIDO2 tokens expected to offset legacy declines, though 2027 guidance is not yet available.
• ARR Growth Drivers: Q3 ARR growth was driven primarily by expansion of existing customers across both segments, with limited immediate contribution from new Bill 38 products.
• Growth Trajectory: While Q3 showed strong momentum, management cautioned that new product revenue impact takes time due to long enterprise sales cycles; 2027 is anticipated to see acceleration but specific targets are not yet set.
• New vs. Existing Customer Mix: Security ARR growth is predominantly expansion (existing logos) due to high market saturation; Digital Agreements has a slightly higher new logo contribution (20-30%) but remains land-and-expand focused.
• Product Strategy: PassKeys will coexist with hardware tokens in a hybrid model depending on geography and use case; AI features in OneSpan Sign are currently bundled to enhance differentiation.

Other Key Points:

• OneSpan Sign innovations focus on speed, identity assurance, and workflow integration via AI and UX redesigns.
• The European Digital Identity Regulation creates a specific tailwind for the upcoming DigiPass One Verify launch.
• Capital allocation includes a quarterly dividend of $0.13 per share, with continued evaluation of share repurchase opportunities.
• Q3 seasonality remains a factor for hardware, though Q3 deliveries exceeded expectations this year due to early customer requests.