Startup Diligence
Diligence report Financial services infrastructure; SaaS cloud banking, core banking, lending, deposits, payments, and banking platform software Private unicorn; public sources reviewed did not show IPO, acquisition, or shutdown

Mambu

Mambu Startup Diligence Report

The central diligence question is whether Mambu can convert composable core-banking and payments platform breadth into durable, high-margin recurring revenue while managing regulated customer implementations, cloud/security obligations, DORA/GDPR outsourcing demands, and strong competition from incumbents and cloud-native challengers.

Company profile

Mambu Startup Diligence Report

Mambu passes the public-source eligibility check as an apparently active private unicorn in financial-services infrastructure, with strong public evidence for product breadth, global customer claims, regulated-bank case studies, leadership, documentation, security posture, and a $5.5B public unicorn valuation. Investment diligence remains data-room dependent because financial quality, cap table, pricing, customer concentration, churn, contracts, and legal schedules are not public.

Website
mambu.com
Sector
Financial services infrastructure; SaaS cloud banking, core banking, lending, deposits, payments, and banking platform software
Geography
Netherlands / Amsterdam with global customers across 65+ countries
Stage
Private unicorn; public sources reviewed did not show IPO, acquisition, or shutdown
Known aliases
Mambu B.V., Mambu Cloud Banking Platform, Mambu Payments
Report version
1.0
Timezone
Europe/Amsterdam

Executive summary

Strengths

  • CB Insights and funding news support Mambu's public $5.5B unicorn valuation anchor.
  • Official product/docs pages support the existence of core banking, lending, deposits, payments, Islamic banking, APIs/webhooks, and Configuration as Code.
  • Official security/privacy pages substantiate public ISO/SOC, penetration testing, AWS processing, and processor/controller privacy posture claims.

Risks

  • Financial statements, ARR, margins, cash, burn, runway, backlog, and AR aging are not public.
  • Customer concentration, churn, live-vs-pilot status, implementation economics, and top-account dependence are not public.
  • Regulated-customer SaaS creates DORA, EBA outsourcing, GDPR, security, audit/access, exit, and subprocessor obligations.

Gaps

  • Audited/reviewed financials, ARR bridge, revenue by product/geography/channel/customer, gross margin, cash, burn, runway, backlog, AR aging, and tax schedules.
  • Current capitalization, option pool, securities, liquidation preferences, debt, investor rights, board rights, and secondary transactions.
  • Top-customer ARR, concentration, churn/NRR/GRR, production status, renewal dates, implementation backlog, SLA credits, and reference calls.
  • MSAs, DPAs, SLAs, cloud/partner contracts, data residency, subprocessor chain, cyber/E&O/D&O insurance, litigation schedule, and IP ownership records.

Recommended next steps

  • Run data-room diligence on financial quality, cap table, unit economics, pricing, customer concentration, and runway before relying on the $5.5B valuation.
  • Interview live regulated customers, recent implementations, churned/lost prospects, implementation partners, and cloud/security owners.
  • Request SOC/ISO reports, DORA/EBA outsourcing package, DPA/subprocessor list, BCP/DR tests, incident history, and cloud architecture.
  • Benchmark Mambu against Thought Machine, Temenos, 10x Banking, Backbase, and other core/engagement banking vendors with win/loss and pricing data.

Risk register

high high likelihood

R-005: Intense competition in cloud core banking and bank transformation

Mambu competes with incumbents and cloud-native challengers that also market modern core banking, engagement, and orchestration capabilities.

Diligence request: Request win/loss analysis, pricing benchmarks, proof-of-concept conversion rates, replacement cycles, and analyst reports.

high medium likelihood

R-002: Valuation and preference-stack risk

Public $5.5B valuation is stale from private funding; current common-equity value depends on preferences, dilution, secondary pricing, and market conditions.

Diligence request: Request full cap table, financing documents, liquidation preferences, option pool, debt/SAFE/warrant schedules, and recent secondary transactions.

high medium likelihood

R-003: Customer concentration and implementation dependency risk

Named customer stories are positive, but top-customer revenue concentration, churn, implementation failures, and customer support economics are not public.

Diligence request: Request top-20 ARR, NRR/GRR, churn/cohort tables, implementation backlog, SLA credits, and reference calls.

high medium likelihood

R-006: Regulatory outsourcing, DORA, GDPR, and operational-resilience burden

As a critical SaaS vendor to financial institutions, Mambu must satisfy customer audit/access, incident, exit, subcontracting, data-protection, and resilience expectations.

Diligence request: Request DORA readiness package, EBA outsourcing questionnaire, DPA/SCCs, subprocessor notices, audit reports, BCP/DR tests, and incident history.

high medium likelihood

R-007: Cloud, security, and third-party concentration risk

Public evidence shows AWS data-centre processing and partner/cloud ecosystem dependencies; detailed region, failover, support, and concentration data are private.

Diligence request: Review cloud architecture, availability history, cloud provider commitments, penetration tests, SOC/ISO scopes, subprocessor list, and disaster-recovery tests.

high unknown likelihood

R-001: Financial quality and runway are not public

No audited statements, net revenue, ARR, gross margin, cash, burn, runway, AR aging, backlog, or tax schedules were publicly verifiable.

Diligence request: Request audited/reviewed financials, monthly management accounts, revenue-recognition memo, cohort gross retention/net retention, cash, debt, and 36-month runway plan.

medium high likelihood

R-008: Pricing, margin, and commercial-contract opacity

Public contact-sales motion gives no visibility into pricing units, minimum commitments, services margins, discounts, SLA credits, or liability caps.

Diligence request: Request standard and top-customer MSAs/order forms, pricing history, discounting, services mix, implementation margin, renewal uplift, and SLA-credit history.

medium medium likelihood

R-004: Product roadmap and payments expansion execution risk

Mambu is expanding beyond core into payments and AI-ready messaging; new modules can increase complexity, support burden, and compliance scope.

Diligence request: Review roadmap commitments, release notes, defect backlog, product-margin by module, payments scheme certifications, and adoption by module.

Chapter 01

01Financial Information

Public sources verify Mambu's unicorn valuation and financing anchors but do not verify audited financials, ARR, margin, cash, burn, runway, cap table, debt, backlog, AR aging, or tax positions.

I.A Annual and quarterly financial information for the past three years

not publicly verifiable confidence: high

No audited statements or management accounts were public. Public materials disclose customer counts, named logos, and payments-processing growth but not revenue, gross margin, cash, burn, backlog, or AR aging.

Evidence gaps

  • Audited financials, management accounts, revenue by product/channel/geography, backlog, AR aging, deferred revenue, cash, burn, and runway.

Hidden risks

  • Reported customer and payments growth could mask revenue concentration, implementation services losses, discounts, or lower-margin payments volume.

Follow-up questions

  • Provide 2023-2026 monthly P&L, balance sheet, cash flow, ARR bridge, bookings, backlog, AR aging, and revenue-recognition memo.
Public revenue, ARR, and unit-economic signals
metricpublic signalverification statusprivate data request
Customer count/geographyMore than 260 customers in over 65 countries claimed in 2026 Mambu press release.partially_verifiedCustomer list, production status, ARR by customer/geography.
Payments processing growthSevenfold year-on-year payments processed growth in 2025 claimed by Mambu.partially_verifiedPayments volume, take rate, revenue, gross margin, and scheme costs.
ARR/revenue/gross margin/cash/burnNo audited figures found in public sources reviewed.not_publicly_verifiableAudited statements, ARR bridge, cash and burn schedule.
Public valuation trajectory Chart of disclosed valuation anchors, with a gap for undisclosed current valuation.

I.B Financial Projections

not publicly verifiable confidence: medium

No public three-year financial model or forecast assumptions were found. Growth drivers are inferable from cloud-core modernization, payments expansion, global partners, and customer case studies, but predictability is private.

Evidence gaps

  • Three-year model, pipeline conversion, NRR/GRR, implementation backlog, capex/cloud spend, financing plan, and scenario sensitivities.

Hidden risks

  • Enterprise banking implementations may have long sales cycles, professional-services costs, and go-live delays that public growth claims do not reveal.

Follow-up questions

  • Provide board-approved plan, bridge from pipeline to ARR, and downside scenarios for pricing pressure, delayed go-lives, churn, and payments expansion.
Projection and financing-assumption diligence matrix
projection inputpublic evidenceverification statusfollow up request
Core banking growthActive 2026 customer and product pages support market activity.partially_verifiedPipeline, NRR/GRR, win rates, and implementation capacity.
Payments expansionSevenfold 2025 payments processed growth and expansion across EMEA/LATAM/APAC claimed.partially_verifiedPayments revenue, scheme coverage, margin, compliance costs.
External financing and runwayNo current cash, burn, debt, or fundraising plan public.not_publicly_verifiableCash runway, debt, investor support, and downside plan.

I.C Capital Structure

partially verified confidence: medium

Public sources identify investors and valuation anchors, but shares outstanding, option pool, preferences, debt, warrants, notes, and off-balance-sheet liabilities are not public.

Evidence gaps

  • Current cap table, stock ledger, options/warrants, SAFE/notes, debt, investor-rights agreements, liquidation preferences, and board consents.

Hidden risks

  • Private unicorn financing can include preference stacks and protective provisions that materially change common-equity economics.

Follow-up questions

  • Provide fully diluted capitalization and all financing, debt, secondary, and investor-rights documents.
Capital structure and ownership snapshot
stakeholderpublic positionverification statusdiligence caveat
Runa Capital, Acton Capital Partners, Point Nine CapitalListed in CB Insights unicorn table for Mambu.verifiedOwnership percentages and current basis not public.
EQT Growth / late-stage investorsPublic funding reports describe an EQT-led late-2021 financing.verifiedInvestor-rights agreement and liquidation preference required.
Common shareholders, founders, employees, option holders, debt/warrant holdersNot publicly disclosed.not_publicly_verifiableRequest stock ledger, option plan, warrants, notes, and debt instruments.

I.D Other financial information

partially verified confidence: medium

Financing history is partially public; tax positions, accounting policies, warrants/debt terms, and current basis for each investor are private.

Evidence gaps

  • Tax positions, accounting policies, debt/warrants, investor basis, current fair value, and financing documents.

Hidden risks

  • A sharp valuation step-up in 2021 may be exposed to private-market reset risk if growth or margin underperforms.

Follow-up questions

  • Provide tax memos, accounting policy memos, financing schedule, and valuation materials used for fair value or investor reporting.
Public funding-round history
dateroundamountvaluationlead or participantsverification statusdiligence caveat
2019-02-18Growth round€30M publicly reportedNot public in reviewed sourceBessemer Venture Partners reportedpartially_verifiedConfirm security class, ownership, and investor basis.
2021-01-07Series D€110M / about $135M publicly reportedAbout $2.1B publicly reportedTCV and existing investors reportedpartially_verifiedConfirm preferred terms, option pool, and dilution.
2021-12-09Series E€235M / about $266M publicly reported€4.9B / about $5.5B publicly reportedEQT-led; public reports cite existing investorsverifiedConfirm preferences, investor rights, and current fair value.

Public reports do not provide current cap table or preference stack.

Mambu public financing timeline Chronological view of public financing and active-operation evidence.
Chapter 02

02Products

Mambu publicly markets a composable SaaS cloud banking platform spanning core banking, lending, deposits, payments, Islamic banking, APIs, Configuration as Code, and partner ecosystem capabilities.

II.A Description of each product

partially verified confidence: high

Product evidence is strong for public SKU existence and platform positioning. Major customers and applications are partially public, while SKU revenue, profitability, adoption, defect rates, market share, and cost structure are not public.

Evidence gaps

  • SKU-level ARR/margin, attach rates, implementation times, support tickets, uptime, roadmap commitments, customer-specific regulatory certifications, and pricing history.

Hidden risks

  • Expanding from core into payments and AI-ready messaging can increase product complexity and operational-regulatory scope.
  • Composable partner architectures can create support-boundary ambiguity when third-party integrations fail.

Follow-up questions

  • Provide product P&L by module, API uptime/SLA history, defect backlog, roadmap, deprecation policy, sandbox access, and implementation reference calls.
Product and SKU matrix
productaudiencepublic evidenceverification statusdiligence focus
Cloud core banking platformBanks, lenders, fintechsConfigurable API-first core, 15+ years live production claimed.verifiedLedger controls, scalability, release/change management.
LendingBanks, lenders, fintechs, embedded financeConfigurable product rules, pricing, terms, workflows.verifiedLoan types, delinquency, collections, reporting.
DepositsBanks, wallets, embedded bankingTransactional accounts, savings, wallets, term deposits.verifiedInterest, statements, holds, deposit compliance.
PaymentsBanks and fintechs operating across schemesCloud-native payments stack with partner banks/schemes and single API.partially_verifiedConnectivity, scheme certification, reconciliation, margin.
Islamic bankingIslamic and dual-banking institutionsShari'ah-based products, profit sharing, fund segregation.verifiedShari'ah governance and local regulatory fit.
Pricing and packaging public evidence
itempublic evidenceverification statusdiligence request
Self-serve price cardNo public price card found in reviewed sources.not_publicly_verifiableModule pricing, usage units, minimums, discounts, and overages.
Demo/contact-salesContact page invites prospects to speak with an expert.partially_verifiedSales process, sales cycle, and conversion rates.
Implementation/professional servicesPartner ecosystem suggests implementation support but no pricing.not_publicly_verifiableServices mix, margin, partner economics, and backlog.
Composable banking platform architecture High-level architecture inferred from public product, docs, partner, cloud, and security pages.
Chapter 03

03Customer Information

Mambu discloses more than 260 customers in 65+ countries and several named regulated/customer stories, but revenue concentration, churn, top-customer lists, severed relationships, and supplier spend are private.

III.A Top customers by application

partially verified confidence: medium

Public customer evidence includes named logos and case studies such as Good Money, Allica Bank, Akbank AG, Western Union, Commonwealth Bank of Australia, N26, BancoEstado, Raiffeisen Bank, ABN AMRO, and Bank Islam, but not top-15 revenue rankings.

Evidence gaps

  • Top-15 customers by ARR/GMV/payment volume, implementation stage, renewal dates, NPS, support burden, and contract terms.

Hidden risks

  • Customer logos may include pilots, legacy customers, or small deployments; public sources do not reveal ARR concentration or production depth.

Follow-up questions

  • Provide customer ARR schedule, production-vs-pilot status, renewal/churn history, and permissioned reference calls.
Publicly known customers and case studies
customeruse casepublic evidenceverification statusfollow up
Good Money by GSB / Money DDDigital lending / nano finance in Thailand8-month go-live; >100K loans in pilot; 30K clients and THB 500M loan value in result section.partially_verifiedReference call; reconcile 10K vs 30K client-count language; ARR and support economics.
Allica BankUK SME lending and loan-portfolio migrationMambu used as ledger solution for AIB GB SME portfolio migration; go-live in 2022.partially_verifiedReference call, implementation timeline, SLA history, and renewal status.
Akbank AGGerman regulated-bank core migrationRetail and Private segments live on Mambu SaaS core; Corporate Banking/Lending underway.partially_verifiedReference call, BaFin-related vendor requirements, implementation costs.
Western Union, Commonwealth Bank of Australia, N26, BancoEstado, Raiffeisen Bank, ABN AMRO, Bank IslamNamed customer/logo setListed as examples among >260 customers in >65 countries.partially_verifiedConfirm production status, modules used, ARR, and renewal dates.
Public customer proof-point chart Bar chart of public customer proof points, not revenue concentration.

III.B Strategic relationships

partially verified confidence: medium

Mambu publicly describes a global partner ecosystem with system integrators, consultants, technology partners, cloud providers, and named Akbank/Innovance and Good Money/GCP examples.

Evidence gaps

  • Partner tiers, certifications, marketing agreements, referral economics, support obligations, and partner-related customer satisfaction.

Hidden risks

  • Partner-led implementations can create delivery quality, accountability, and margin risks.

Follow-up questions

  • Provide partner contracts, certification criteria, deal registration data, and partner-sourced ARR by region.
Strategic relationships and partner evidence
partner or relationshipnaturepublic evidencegap
InnovanceStrategic technology / implementation partnerDelivered Akbank AG transformation in close partnership with Mambu.Partner economics, certification, support responsibilities.
Google Cloud PlatformCloud/customer implementation supportGood Money app was supported by GCP in customer story.Architecture, region, contract, data residency.
System integrators, consultants, technology partners, cloud providersGlobal partner ecosystemMambu says ecosystem covers these partner types.Partner-sourced revenue and delivery quality.
Public GTM channel evidence mix Qualitative bar chart of public GTM surfaces found.

III.C Revenue by customer

not publicly verifiable confidence: high

Revenue by customer and any customer accounting for 5% or more of revenue are not publicly verifiable.

Evidence gaps

  • Revenue by customer, customer concentration, contract duration, renewal dates, payment volume by customer, and margin by customer.

Hidden risks

  • A small number of regulated-bank customers or payments accounts could dominate ARR or margin.

Follow-up questions

  • Provide top-20 customer ARR and gross margin, renewal schedules, concentration thresholds, and customer health scores.

III.D Significant relationships severed within the last two years

not publicly verifiable confidence: low

No public list of severed customers, partners, or suppliers was found.

Evidence gaps

  • Churned customers, failed proofs of concept, terminated partners, customer disputes, and SLA-credit history.

Hidden risks

  • Churned regulated-bank implementations may indicate product gaps or support shortcomings hidden by public logo pages.

Follow-up questions

  • Provide churned/lost customer schedule, reason codes, exit interviews, and any material disputes or SLA credits.

III.E Top suppliers

partially verified confidence: medium

Public evidence identifies AWS for customer-data processing, GCP in a customer implementation, and cloud providers as ecosystem participants, but supplier spend and concentration are private.

Evidence gaps

  • Supplier spend, cloud commitments, cloud regions, failover design, subcontractor list, support SLAs, and exit/portability plans.

Hidden risks

  • Cloud concentration, subprocessor chain changes, region availability, and support-boundary failures can affect regulated customers.

Follow-up questions

  • Provide top suppliers for FY2024-FY2026 YTD, cloud contracts, subprocessor notices, BCP/DR tests, and exit plans.
Top supplier / cloud and infrastructure dependency matrix
supplier or dependencyrolepublic evidenceverification statusrisk note
AWSCloud/data centresSecurity page says customer data is processed in AWS data centres and references AWS partner/audit practices.partially_verifiedNeed region, failover, contract, and concentration details.
Google Cloud PlatformCustomer implementation support in Good Money caseGood Money app was supported by GCP.partially_verifiedCould be customer-specific rather than Mambu core hosting.
Implementation and technology partnersDelivery/integration ecosystemPartner page describes system integrators, consultants, technology partners.partially_verifiedSupport-boundary and delivery-quality risk.
Chapter 04

04Competition

Mambu competes in a crowded cloud core banking and bank transformation market against cloud-native challengers and incumbents, with competition based on implementation speed, configurability, API depth, regulatory credibility, partner ecosystem, and price.

IV.A Competitive landscape by market segment

partially verified confidence: medium

Public competitor pages confirm direct or adjacent overlap with Thought Machine, Temenos, 10x Banking, and Backbase. Mambu's position cannot be ranked from public sources without win/loss data and analyst reports.

Evidence gaps

  • Win/loss data, pricing benchmarks, market share, analyst quadrant reports, proof-of-concept conversion, and churn reasons.

Hidden risks

  • Incumbents may bundle aggressively; challengers may win with developer-centric architectures; banks can delay core replacement due to migration risk.

Follow-up questions

  • Provide competitive pipeline, lost deals, replacement reasons, technical bake-off results, and analyst/customer reference materials.
Competitor comparison matrix
competitorsegmentproduct overlappublic evidencedifferentiation question
Thought MachineCloud-native core bankingDirect core banking/product engine overlapVault Core Universal Product Engine and smart-contract-based financial products.Which architectures win on speed, control, and migration reliability?
TemenosIncumbent core bankingCore banking modernization for banks of all sizesTemenos Core Banking page markets modern flexible core.Can Mambu displace incumbent suites or win greenfield only?
10x BankingCloud-native core bankingCloud-native core, retail/personal banking, embedded finance10x page markets cloud-native core banking.How do proof-of-concept win rates compare?
BackbaseBanking OS / engagement/orchestrationAdjacent transformation/orchestration budgetsBackbase Banking OS includes interaction, orchestration, and intelligence layers.Partner vs competitor role in digital transformations.
Basis-of-competition scoring
axismambu public positioncompetitor pressureverification statusevidence
Configurability/API-firstStrong public claims: API-first, composable, Configuration as Code.Thought Machine and 10x also emphasize programmable/cloud-native cores.partially_verifiedMambu product/docs and competitor pages.
Regulated implementation credibilityAkbank AG, Allica, and named global logos support credibility.Temenos has incumbent scale; others market bank customers.partially_verifiedCustomer stories and competitor pages.
Pricing/TCONo public price card; public commercial motion is contact-sales.Incumbents can bundle; challengers can discount.not_publicly_verifiableContact-sales evidence only.

Scores are qualitative and require win/loss data.

Cloud banking competitive market map Position Mambu and selected competitors by product overlap and incumbent/challenger orientation.
Chapter 05

05Marketing, Sales, and Distribution

Mambu's public GTM appears enterprise, demo-led, partner-supported, and content/customer-story driven. Budgets, sales productivity, quota, pipeline, CAC, payback, and channel revenue are not public.

V.A Strategy and implementation

partially verified confidence: medium

Public materials show positioning around composable cloud banking, customer stories, product updates, and a partner ecosystem. There is no public sales budget or conversion data.

Evidence gaps

  • Marketing spend, CAC, pipeline by source, win rates, channel mix, regional sales capacity, and partner-sourced revenue.

Hidden risks

  • Enterprise marketing may generate long-cycle pipeline that is hard to convert; partner channels may dilute control and margin.

Follow-up questions

  • Provide GTM model, pipeline by region/channel, funnel conversion, CAC/payback, sales cycle, and marketing budget.
Distribution channels and GTM motions
channelpublic signalverification statusdiligence gap
Direct enterprise sales / expert contactContact page offers expert conversations and demo path.partially_verifiedSales cycle, win rates, quota, CAC.
Partner ecosystemMambu partner page names system integrators, consultants, technology and cloud partners.partially_verifiedPartner-sourced ARR and referral economics.
Customer stories / public proofGood Money, Allica, and Akbank public materials.partially_verifiedConversion contribution and reference quality.
Product/content marketingProduct updates and 2026 product keynote.partially_verifiedContent-sourced pipeline and ROI.
Public marketing-signal summary
signalpublic evidenceimplicationgap
Product update hubLatest releases and 2026 what's-next messaging.Active roadmap marketing.Release-to-revenue conversion.
Payments expansion PRSevenfold 2025 payments processed growth and expansion across EMEA/LATAM/APAC.New module growth narrative.Payments revenue and margin.
Customer proof storiesGood Money, Allica, Akbank.Supports credibility with regulated customers.Independent reference and ARR by account.

V.B Major Customers

not publicly verifiable confidence: medium

Major-customer status and growth prospects are not public beyond selected logos and case studies.

Evidence gaps

  • Account plans, upsell pipeline, usage expansion, renewal risk, and customer health.

Hidden risks

  • Expansion bookings may depend on multi-year regulated migrations and partner performance.

Follow-up questions

  • Provide top-account expansion plans, pipeline, renewal schedule, and executive sponsor map.

V.C Principal avenues for generating new business

partially verified confidence: medium

Public avenues include direct expert/demo contact, partner ecosystem, customer stories, product updates, and thought leadership/events.

Evidence gaps

  • Lead source attribution, partner-sourced ARR, direct-vs-partner win rates, and regional channel economics.

Hidden risks

  • Channel attribution and partner economics are not public.

Follow-up questions

  • Provide funnel metrics by channel and partner tier.

V.D Sales force productivity model

not publicly verifiable confidence: low

Sales compensation, quota, sales cycle, capacity plan, and new-hire ramp are not publicly verifiable.

Evidence gaps

  • Sales compensation, average quota, attainment, ramp, sales cycle, and coverage model.

Hidden risks

  • Long core-banking sales cycles can cause forecast slippage and high CAC.

Follow-up questions

  • Provide quota attainment, ramp cohorts, coverage plan, and sales-compensation documents.

V.E Ability to implement marketing plan with current and projected budgets

not publicly verifiable confidence: low

Budget adequacy is not public.

Evidence gaps

  • Budget, CAC, payback, marketing ROI, event spend, partner MDF, and headcount plan.

Hidden risks

  • Underfunded GTM or inefficient spend could reduce growth needed to support the valuation.

Follow-up questions

  • Provide marketing budget, ROI dashboard, and board-approved hiring plan.
Chapter 06

06Research and Development

Mambu publishes APIs, webhooks, documentation, ecosystem docs, product updates, and product enhancements such as Configuration as Code and payments expansion, but R&D budget, team size, roadmap, technical debt, and defect data are private.

VI.A Description of R&D organization

partially verified confidence: medium

Public docs and careers pages show product, engineering, legal, customer success, and API/documentation functions, but no R&D org chart, budget, or headcount by function.

Evidence gaps

  • R&D headcount, org chart, roadmap governance, tech debt, incident postmortems, engineering productivity, and support escalation data.

Hidden risks

  • Regulated core-banking R&D requires high reliability; public sources do not disclose defect backlog, security debt, or on-call load.

Follow-up questions

  • Provide R&D org chart, roadmap, sprint/release metrics, defect backlog, incident history, and engineering retention.
R&D organization and technical operating signals
areapublic signalverification statusfollow up
API and developer documentationDocs list API Reference, APIs/Webhooks, ecosystem docs, changelog.verifiedAPI uptime, backward compatibility, sandbox and rate limits.
Product/engineering functionsCareers page describes product and software-development teams.partially_verifiedR&D headcount, org chart, attrition, and roadmap governance.
Security/compliance engineeringSecurity page describes ISO/SOC, tests, incident plans.partially_verifiedSecurity staffing, incident history, pen-test remediation.
R&D and product delivery architecture Public technical delivery and release ecosystem based on docs, product updates, CasC, and security page.

VI.B New Product Pipeline

partially verified confidence: medium

Public pipeline signals include product update hub, 2025 releases/2026 priorities, Configuration as Code, and payments expansion. Specific delivery commitments, cost, and critical dependencies are private.

Evidence gaps

  • Product roadmap, release commitments, R&D spend, development cost, dependencies, and customer adoption forecasts.

Hidden risks

  • Payments expansion and AI-ready positioning could require new compliance, connectivity, and support investments.

Follow-up questions

  • Provide roadmap with dates, committed customer features, R&D budget, payments scheme certifications, and deprecation policy.
Public product / R&D pipeline signals
project or signalstatuspublic evidenceverification statusdiligence request
Configuration as CodeGenerally available in 2023YAML API batch configuration for loan/deposit products and other elements.verifiedUsage metrics, customer adoption, defects, and security review.
Payments hub expansionExpanded in 2026 press releaseExpansion beyond Europe across EMEA/LATAM/APAC; sevenfold 2025 growth claimed.partially_verifiedScheme connectivity, certifications, volumes, margins.
2026 product prioritiesPublic update hub / webinarPage references 2025 releases and priorities shaping 2026.partially_verifiedCustomer-committed roadmap and R&D cost.
Chapter 07

07Management and Personnel

Mambu publishes current executive and board/advisor names and careers/function signals, but compensation, stock plans, turnover, employee-relations issues, and projected headcount are private.

VII.A Organization Chart

partially verified confidence: medium

A complete organization chart is not public, but the leadership page provides executive and board/advisor roles.

Evidence gaps

  • Full org chart, reporting lines, board committees, investor rights, and succession plan.

Hidden risks

  • Investor-affiliated board members may have rights that are not visible in public materials.

Follow-up questions

  • Provide current org chart, board composition, committee charters, and management succession plan.
Senior management and board/advisor roster
namerolepublic background signalsource
Fernando ZandonaChief Executive OfficerTechnology/engineering leader with experience at Amazon and Microsoft.Mambu leadership page
Jesper Hybholt SorensenChief Financial OfficerFinance leader; prior roles at Oracle, DuPont, IBM, Avaloq.Mambu leadership page
Mark GenesteChief Revenue OfficerFormer Backbase Chief Commercial Officer; banking/digital-transformation background.Mambu leadership page
Semhal Tarekegn O'GormanChief Customer Success Officer20+ years SaaS customer retention/adoption/account management.Mambu leadership page
Ellie HeathChief People Officer15+ years people operations; prior WorldRemit/eBay/BBC references.Mambu leadership page
Eugene DanilkisCo-founder & former Chief Executive OfficerCredited with positioning Mambu in cloud banking.Mambu leadership page
Public management org chart High-level management chart from public leadership page.

Exact reporting lines, board committees, and investor rights are not public.

VII.B Historical and projected headcount by function and location

partially verified confidence: low

Public careers page describes functions and six-continent growth, but historical/projected headcount by function and location is not public. Historical press coverage around 2021 cited approximately 800 employees but should be confirmed.

Evidence gaps

  • Employee counts by month, function, country, location, open roles, and hiring plan.

Hidden risks

  • Headcount may have shifted materially since the 2021 funding environment.

Follow-up questions

  • Provide headcount history, hiring plan, location mix, attrition, and span-of-control analysis.
Headcount, hiring, turnover, compensation, and incentive-plan signals
topicpublic signalverification statusdiligence request
Headcount/geographyCareers page says global team growing across six continents; historical news cited ~800 employees around 2021 financing but not re-verified here.partially_verifiedMonthly headcount by function/location and hiring plan.
Functional coverageCareers page describes customer success, finance, product, marketing, people, engineering, and legal.verifiedOrg chart, spans/layers, open role aging.
Compensation, options, turnover, employee relationsNot publicly disclosed.not_publicly_verifiableComp plans, option grants, attrition, claims, engagement surveys.
Public headcount anchor and hiring-signal chart Sparse chart of public workforce anchors and gaps.

VII.C Senior management biographies

verified confidence: high

Senior management biographies are partially public via Mambu's leadership page.

Evidence gaps

  • Employment agreements, references, background checks, board evaluations, and founder role documentation.

Hidden risks

  • Public bios do not show employment agreements, incentives, or actual time allocation.

Follow-up questions

  • Provide executive agreements, resumes/CVs, references, compensation, and founder vesting documents.

VII.D Compensation arrangements

not publicly verifiable confidence: low

Key employment agreements, compensation, and benefit plans are not public.

Evidence gaps

  • Executive compensation, severance, change-of-control, benefits, bonus plans, and retention grants.

Hidden risks

  • Retention or severance obligations could materially affect costs and key-person risk.

Follow-up questions

  • Provide compensation schedules, benefit plans, and change-of-control terms.

VII.E Incentive stock plans

not publicly verifiable confidence: low

Incentive stock plans and option grants are not public.

Evidence gaps

  • Option plan, grant schedule, exercise prices, vesting, refresh plan, and tender/secondary policy.

Hidden risks

  • Large option refresh needs or underwater options may affect dilution and retention.

Follow-up questions

  • Provide option plan, board approvals, grant ledger, and valuation reports.

VII.F Significant employee relations problems, past or present

unverified confidence: low

No reliable public evidence of significant employee-relations problems was identified, but no comprehensive employment legal search was performed.

Evidence gaps

  • Employee-relations claims, investigations, litigation, engagement survey results, and HR policies.

Hidden risks

  • Private complaints, litigation, engagement issues, or culture risks may be undisclosed.

Follow-up questions

  • Provide employee-relations schedule, claims/litigation, HR policies, and engagement/attrition data.

VII.G Personnel Turnover

not publicly verifiable confidence: low

Turnover data for the last two years and retention benefits are not public.

Evidence gaps

  • Monthly attrition by function/location, regretted attrition, exit reasons, retention programs, and open role aging.

Hidden risks

  • Executive turnover or high engineering/customer-success attrition could disrupt regulated implementations.

Follow-up questions

  • Provide turnover dashboard, exit-interview themes, retention programs, and workforce plan.
Chapter 08

08Legal and Related Matters

Public legal evidence supports privacy/security posture, SaaS processor role, and regulatory exposure. Litigation, full IP ownership, insurance, material contracts, and regulatory problem history require counsel and data-room review.

VIII.A Pending lawsuits against the Company

unverified confidence: low

No reliable public evidence of material pending lawsuits against Mambu was found in limited public searches, but this is not a legal opinion.

Evidence gaps

  • Counsel-led docket searches in Netherlands, EU, U.S., UK, and arbitration/settlement schedules.

Hidden risks

  • Dutch/EU litigation, arbitration, customer disputes, and confidential settlements may not appear in public U.S. searches.

Follow-up questions

  • Provide litigation schedule, demand letters, threatened claims, settlements, and counsel letters.
Public litigation and regulatory-action search summary
matter typepublic resultverification statusfollow up
Pending lawsuits against MambuNo reliable material public lawsuit identified in limited public searches.unverifiedCounsel-led docket searches in Netherlands/EU/UK/U.S. and arbitration.
Lawsuits initiated by MambuNo public schedule found.unverifiedCompany litigation schedule and counsel letters.
Regulatory agency problemsNo public enforcement matter found; DORA/EBA/GDPR obligations are structurally relevant.partially_verifiedRegulatory correspondence, customer regulator requests, incident/breach logs.

One row is a negative-search finding and must be verified by counsel.

Legal and regulatory timeline Timeline of legal/regulatory and compliance-relevant public events.

VIII.B Pending lawsuits initiated by Company

unverified confidence: low

No public list of lawsuits initiated by Mambu was found.

Evidence gaps

  • Company-initiated litigation, collections, IP disputes, and arbitration files.

Hidden risks

  • Supplier/customer disputes or IP enforcement actions could affect relationships or costs.

Follow-up questions

  • Provide complete litigation docket and counsel summary.

VIII.C Environmental and employee safety issues and liabilities

not publicly verifiable confidence: low

As a SaaS software company, environmental/safety exposure appears lower than industrial businesses, but workplace, data-centre, office, travel, and cloud ESG exposures are not public.

Evidence gaps

  • Workplace safety claims, office leases, environmental policies, data-centre ESG commitments, and insurance coverage.

Hidden risks

  • Cloud/data-centre footprint and office safety liabilities are outsourced or not disclosed.

Follow-up questions

  • Provide ESG/safety policies, office lease liabilities, insurance certificates, and claim history.
Material contracts, insurance, environmental/safety, and outsourcing gaps
topicpublic evidenceverification statusrequest
Customer MSAs / DPAs / SLAsPrivacy notice and contact page confirm SaaS/commercial posture but not negotiated terms.not_publicly_verifiableTop customer contracts, standard MSA/DPA, SLA credits, audit/access, exit rights.
Cloud/provider and partner contractsAWS/GCP/partner dependencies visible but contracts not public.not_publicly_verifiableCloud agreements, partner agreements, subprocessor terms, data-residency commitments.
Insurance and safety/environmental claimsNo insurance or material safety/environmental schedules public.not_publicly_verifiableCyber/E&O/D&O policies, loss runs, office leases, safety claims, ESG/cloud commitments.
Risk heatmap Heatmap of top diligence risks across the report.

VIII.D Material patents, copyrights, licenses, and trademarks

inconclusive confidence: low

Trademark and patent searches were inconclusive; material IP likely includes software, APIs, documentation, know-how, trade secrets, and brand, all requiring company schedules.

Evidence gaps

  • IP schedule, trademark registrations, patents, copyright registrations, open-source SBOM, inbound/outbound licenses, invention assignments, and escrow.

Hidden risks

  • Unassigned inventions, open-source license issues, or trademark opposition could create diligence risk.

Follow-up questions

  • Provide IP ownership schedule, open-source scan, contractor assignments, trademark records, and material license agreements.
Material IP, privacy, security, and regulatory obligations
areapublic evidenceverification statusdiligence request
Trademarks/brandWIPO Global Brand Database search available for MAMBU; detailed records not extracted.inconclusiveTrademark schedule, ownership, oppositions, renewals.
PatentsBasic Google Patents assignee search did not produce material extracted records.inconclusivePatent schedule and invention assignments.
Security certificationsISO 27001 and SOC I/SOC II compliance claimed.verifiedCurrent reports, scope, bridge letters, remediation.
Privacy/GDPR processor rolePrivacy notice identifies Mambu B.V. and typical controller/processor roles.verifiedDPA, SCCs, subprocessors, DPIAs, breach history.

VIII.E Insurance coverage and material exposures

not publicly verifiable confidence: low

Insurance coverage is not public.

Evidence gaps

  • Cyber, technology E&O, D&O, general liability, crime/fidelity, claims history, exclusions, and limits.

Hidden risks

  • Insufficient cyber/E&O coverage could expose the company to regulated-customer outage or data-loss claims.

Follow-up questions

  • Provide insurance policies, loss runs, claims history, and broker summary.

VIII.F Material contracts

not publicly verifiable confidence: medium

MSAs, DPAs, order forms, cloud contracts, partner contracts, SLAs, liability caps, data-residency commitments, and termination rights are not public.

Evidence gaps

  • Top customer contracts, MSA/DPA templates, SLAs, partner contracts, cloud contracts, data residency, and exit/termination clauses.

Hidden risks

  • Customer-specific liability caps, audit rights, exit rights, and SLA credits can materially change risk.

Follow-up questions

  • Provide top-20 customer contracts, standard MSA/DPA, SLA credit history, cloud agreements, and partner agreements.

VIII.G Regulatory agency problems

partially verified confidence: medium

No public regulatory agency problems were found, but Mambu's regulated-customer profile creates structural DORA, EBA outsourcing, GDPR, security, and third-party-risk obligations.

Evidence gaps

  • Regulatory inquiries, customer regulator correspondence, DORA readiness, EBA outsourcing responses, GDPR DPIAs, and incident/breach history.

Hidden risks

  • Regulated customers may require audit/access, exit, resilience, incident, data-residency, and subcontractor controls that are costly to support.

Follow-up questions

  • Provide regulatory correspondence, DORA readiness package, EBA outsourcing questionnaire, privacy impact assessments, and breach/incident logs.

Evidence

Evidence claims
IDClaimStatusSources
EC-001 CB Insights lists Mambu as a Netherlands-based financial-services unicorn valued at $5.50 billion. verified high SRC-001
EC-002 Mambu appears to remain an operating private company, with no public IPO/acquisition/shutdown evidence found in sources reviewed. partially verified medium SRC-001SRC-002SRC-009SRC-016SRC-017SRC-035
EC-003 Mambu's late-2021 Series E was publicly reported at approximately €235 million / $266 million and a €4.9 billion / $5.5 billion valuation. verified high SRC-001SRC-021SRC-022
EC-004 Earlier public funding reports include a January 2021 Series D around €110 million / $135 million at $2.1 billion and a 2019 €30 million round. partially verified medium SRC-023SRC-024
EC-005 Audited financial statements, ARR/revenue, gross margin, cash, burn, runway, cap table, debt, tax positions, backlog, and AR aging were not publicly verifiable. not publicly verifiable high SRC-001SRC-002SRC-009SRC-021SRC-022
EC-006 Mambu publicly positions itself as a composable SaaS cloud banking platform for deposits, lending, payments, Islamic banking, and core banking. verified high SRC-002
EC-007 Mambu claims a cloud-native, API-first core banking foundation with 15+ years in live production environments. verified medium SRC-003
EC-008 Mambu markets lending, deposits, and Islamic banking modules with configurable product rules and specialized banking use cases. verified medium SRC-004SRC-005SRC-007
EC-009 Mambu does not publish a public price card in sources reviewed; public commercial motion is contact-sales / demo-led. partially verified medium SRC-008SRC-002
EC-010 Mambu Payments is an API-first payments hub, and a 2026 press release claims sevenfold 2025 payments-processing growth and more than 260 customers in 65+ countries. partially verified medium SRC-006SRC-009
EC-011 The Good Money customer story reports an 8-month go-live, more than 100,000 loans processed in pilot, 30,000 clients, and THB 500 million managed. partially verified medium SRC-018
EC-012 Allica Bank and Akbank AG provide public regulated-bank implementation evidence for Mambu. partially verified medium SRC-019SRC-020
EC-013 Mambu's partner ecosystem includes system integrators, consultants, technology partners, and cloud service providers; public evidence identifies AWS/GCP-related dependencies. partially verified medium SRC-010SRC-012SRC-018
EC-014 Mambu states it is ISO 27001 certified, SOC I & SOC II compliant, conducts repeated penetration tests, and processes customer data in AWS data centres. verified medium SRC-010
EC-015 Mambu's privacy notice identifies Mambu B.V. and describes Mambu as a SaaS cloud banking platform where customers typically act as controllers and Mambu typically acts as processor. verified high SRC-011
EC-016 Mambu publishes user documentation, API reference, APIs/webhooks documentation, ecosystem docs, product updates, and Configuration as Code. verified high SRC-013SRC-015
EC-017 Mambu's official leadership page lists current executives and board/advisors including CEO Fernando Zandona and co-founder/former CEO Eugene Danilkis. verified high SRC-016
EC-018 Mambu's careers page describes a global team across six continents and public functions including customer success, finance, product, marketing, people, engineering, and legal. verified medium SRC-017
EC-019 Mambu faces direct and adjacent competition from cloud-native core and banking platform vendors such as Thought Machine, Temenos, 10x Banking, and Backbase. verified high SRC-025SRC-026SRC-027SRC-028
EC-020 Mambu customers in EU-regulated financial services face DORA, EBA outsourcing, and GDPR obligations that create vendor-risk, audit/access, exit, incident, and processor/subprocessor requirements. verified high SRC-029SRC-030SRC-031
EC-021 Public IP and litigation diligence was inconclusive; no reliable public material litigation or patent portfolio was established from limited public searches. inconclusive low SRC-032SRC-033SRC-034SRC-035
EC-022 Revenue by customer, top-customer concentration, churn, severed relationships, backlog, and supplier spend are not publicly verifiable. not publicly verifiable high SRC-009SRC-018SRC-019SRC-020
EC-023 Mambu maintains public product updates and active product expansion signals, including payments expansion and 2026 product priorities. verified medium SRC-009SRC-014SRC-015
EC-024 Management/personnel details such as compensation, option plans, turnover, employee-relations problems, and projected headcount are not public. not publicly verifiable high SRC-016SRC-017SRC-021SRC-022
Sources
IDPublisherTitleAccessed
SRC-001 CB Insights CB Insights Global Unicorn Club - Mambu row 2026-06-14
SRC-002 Mambu Mambu homepage 2026-06-14
SRC-003 Mambu Mambu Cloud Banking Platform 2026-06-14
SRC-004 Mambu Mambu Lending 2026-06-14
SRC-005 Mambu Mambu Deposits 2026-06-14
SRC-006 Mambu Mambu Payments 2026-06-14
SRC-007 Mambu Mambu Islamic Banking 2026-06-14
SRC-008 Mambu Mambu contact page 2026-06-14
SRC-009 Mambu Mambu Payments scales beyond Europe 2026-06-14
SRC-010 Mambu Security & compliance at Mambu 2026-06-14
SRC-011 Mambu Mambu Privacy Notice 2026-06-14
SRC-012 Mambu Mambu Partner Ecosystem 2026-06-14
SRC-013 Mambu Mambu Documentation home 2026-06-14
SRC-014 Mambu What's new at Mambu 2026-06-14
SRC-015 Mambu Configuration as Code is now generally available 2026-06-14
SRC-016 Mambu Mambu Leadership 2026-06-14
SRC-017 Mambu Mambu Careers 2026-06-14
SRC-018 Mambu Good Money by GSB and Mambu customer story 2026-06-14
SRC-019 Mambu Allica Bank - Supercharging UK SMEs 2026-06-14
SRC-020 Mambu Germany's Akbank AG completes first phase of core banking migration 2026-06-14
SRC-021 Reuters Banking software firm Mambu valued at $5.5 bln after EQT-led funding 2026-06-14
SRC-022 CNBC Mambu raises $266 million at a $5.5 billion valuation 2026-06-14
SRC-023 TechCrunch Mambu raises $135M at a $2.1B valuation for its banking-as-a-service platform 2026-06-14
SRC-024 TechCrunch Mambu raises €30M for its cloud banking platform 2026-06-14
SRC-025 Thought Machine Thought Machine Vault Core 2026-06-14
SRC-026 Temenos Temenos Core Banking 2026-06-14
SRC-027 10x Banking 10x Banking core banking platform 2026-06-14
SRC-028 Backbase Backbase Banking OS 2026-06-14
SRC-029 EUR-Lex Regulation (EU) 2022/2554 - DORA 2026-06-14
SRC-030 European Banking Authority EBA Guidelines on outsourcing arrangements 2026-06-14
SRC-031 EUR-Lex Regulation (EU) 2016/679 - GDPR 2026-06-14
SRC-032 WIPO WIPO Global Brand Database search for MAMBU 2026-06-14
SRC-033 Google Patents Google Patents assignee search for Mambu 2026-06-14
SRC-034 Free Law Project CourtListener search for Mambu 2026-06-14
SRC-035 U.S. Securities and Exchange Commission SEC EDGAR company search for Mambu 2026-06-14

Disclaimer

This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.