NOW Q1 FY26 Earnings: Volume Surges on the Day of the UBS Downgrade, and the Bear Thesis Is Declared Wrong

On April 22, 2026, ServiceNow released its Q1 FY26 earnings. Revenue, EPS, and full-year subscription guidance all beat expectations, with cRPO growing +22.5% — surpassing Q4 FY25's +21% cc — and full-year subscription revenue guidance raised. But what makes this earnings report truly interesting isn't just the numbers themselves, it's the timing: 12 days earlier, on 4/10, UBS had just downgraded NOW — rating from Buy to Neutral, price target cut from $170 to $100, and cRPO estimate lowered from 20% to 16%. Twelve trading days later, the actual Q1 FY26 print of +22.5% directly overturned that downgrade.

This isn't simply "earnings beat expectations." This was a 12-day showdown between bearish sell-side thesis and smart money, and the market ultimately delivered a clear verdict via the earnings data. This analysis will take apart every layer of that showdown — from the price action on the day of UBS's 4/10 downgrade, to the institutional accumulation signature over the following 8 days, to why the actual Q1 numbers overturned UBS's model.

🧠 Key Data Points (Q1 FY26 Core Numbers)

The key to reading this data: the first twelve metrics are Q1's actual results and forward guidance, while the last two capture market behavior between the 4/10 UBS downgrade and the 8 days leading up to the 4/22 earnings release. Only by putting the two together can you read the true signal in this report.

I. The 4/10 Pivot Day: UBS Downgrade and Selling Climax Colliding

Let's start with the timeline. On April 10, 2026, UBS published a downgrade report on NOW — rating cut from Buy to Neutral, price target slashed from $170 to $100 (-41%), and its cRPO estimate lowered from 20% to 16%. This was a weighty bearish report from one of the most influential sell-side names covering NOW. Even more notable is what the UBS analyst wrote verbatim: "Up to now, we have believed ServiceNow is better positioned than other application software companies in the AI era... but that conviction has weakened, and we are hearing more and more cases of budget pressure on non-AI application software." This reveals that the essence of UBS's downgrade was a sector-wide concern over "whether application software can still command a premium in the AI era" spilling over onto NOW specifically.

But on that very same day, NOW shares bottomed at $81.40 on volume of 47M shares (2x the average daily volume), closing with a long lower shadow. This combination has a specific term in technical analysis: a selling climax. Its structure consists of concentrated panic selling + heavy turnover + a reversal pattern.

The key is what 2x average daily volume implies. It means that on 4/10, it wasn't just "heavy selling" — it was "heavy selling matched by equally heavy buying." Every share forced out by panicked holders reacting to the UBS downgrade was absorbed in equal measure by another pool of capital. Capital of this scale can't come from retail investors — it can only be one of three types: fundamentals-driven mutual funds (with their own cRPO models that don't buy into UBS's downgrade), activist investors, or ServiceNow management itself (via an accelerated buyback channel).

Whichever it was, the bet placed on 4/10 was singular: that UBS's downgraded 16% cRPO estimate was wrong. Twelve trading days later, that read was confirmed correct by Q1 FY26's actual +22.5% print.

II. The Volume-Price Code Behind the 8-Day Accumulation

The 4/10 selling climax was only the starting point. What truly confirmed the accumulation structure was the internal data over the following 8 trading days (4/13–4/22):

Signal	Retail rebound characteristic	Institutional accumulation characteristic	NOW actual
Up-day to down-day ratio	Alternating up and down	Clearly more up days than down	7:1 ✅
Volume on up days	Rebound on shrinking volume	Rally on rising volume	Up-day volume > average ✅
A/D Rating	Holds at E or declines	Clear improvement	E → D ✅
RS Rating	Minor fluctuation	Clear improvement	5 → 9 ✅

All four metrics matched the institutional accumulation signature. The second row deserves particular emphasis — up-day volume exceeding the average is the most direct signal of "new money entering." Retail rebounds tend to be driven by short covering on shrinking volume; institutional accumulation is the opposite — every rally is accompanied by rising volume.

The most critical point about this 8-day accumulation is that it happened before the earnings release. A post-earnings rally (built on already-published data) and pre-earnings accumulation (a bet placed while the outcome is still uncertain) are signals of completely different order. There are only two motives for accumulating ahead of earnings: one, this capital has its own independent models for cRPO and Now Assist and doesn't buy into UBS's downgrade to 16%; two, it's tracking ServiceNow management's own behavior — and Q1's doubled buyback pace is the strongest leading signal of all.

III. The cRPO Beat as Tailwind: Why This Is the Most Underappreciated Highlight

cRPO is one of the hardest-to-manipulate forward-looking metrics in SaaS — it represents contracted-but-not-yet-recognized revenue obligations, where the contract is already locked in and simply awaits monthly recognition. UBS's cut to its cRPO estimate to 16% (from 20%) on 4/10 was the hardest blow in the entire bearish report — if cRPO really had fallen to 16%, the entire NOW valuation model would need to be redrawn.

The actual Q1 FY26 cRPO figure was $12.64B, up +22.5% YoY (+21% cc), not only overturning UBS's downgraded 16% estimate but also surpassing Q4 FY25's +21% cc. This isn't "meeting expectations" or "slightly beating expectations" — this is a number that "completely overturns the core premise of the bearish model."

The cRPO beat doesn't mean AI monetization has already succeeded — it only means enterprises are still willing to sign subscription contracts of 12+ months. It answers the v2.0 bear thesis that "the SaaS subscription base is being dismantled by AI" — and the answer, for now, is no. But it doesn't answer whether Hybrid Pricing has taken off, which remains the key unresolved question.

Preemptively Addressing the Q2 cRPO Guide of Only 19%

Given such a strong Q1 cRPO print of +22.5%, the obvious next question is: why is management only guiding Q2 cRPO to 19% (19.5% cc)? At first glance it looks like decelerating momentum, but it's actually the layering of three technical factors: one, the Armis contract includes a termination-for-convenience clause that limits how much of it can be recognized in cRPO; two, the 75bps Middle East headwind is being carried through the full year; three, CFO Mastantuono has historically guided conservatively and beaten every quarter. The real counterargument isn't in the Q2 guide number — it's in the full-year subscription revenue guidance being raised from $15.53–15.57B to $15.74–15.78B. If the fundamentals were weakening, the full-year guide wouldn't have been raised.

IV. The Early Armis Close and the Middle East 75bps

Closing Armis Early: Strategic Acceleration, Not Management Panic

Under the v2.0 thesis, the Armis deal was expected to close in the second half of 2026. The Q1 earnings report disclosed that Armis closed early, on 4/20/2026. The short-term cost: Q2 operating margin faces approximately 125bps of pressure (Q2 Adj OM guide cut to 26.5%, 550bps below Q1's actual 32%), and FCF margin faces about 200bps of pressure. But from a capital-allocation standpoint, the two plausible motives behind an early close are: one, Armis integration is going more smoothly than expected; two, demand for Mythos-tier AI governance is more urgent than expected. Either way, this is not a signal of deteriorating operations.

More importantly: Armis simultaneously contributes roughly 125bps of tailwind each to Q2 cRPO, Q2 subscription revenue, and FY26 subscription revenue — the flip side of the 125bps cost headwind is a 125bps revenue tailwind. Management's willingness to close early despite short-term margin pressure suggests confidence in Armis's ARR contribution. FY26 full-year Adj OM guidance was maintained at 31.5%, implying management expects Q3/Q4 to recover the Q2 margin dip.

The "management is panicking" interpretation is refuted by the scale of Q1 buybacks. Total Q1 buybacks were 20.1M shares, roughly $2.225B, of which $2B came from the previously-announced accelerated share repurchase (ASR) covering 18.5M shares, plus open-market purchases of 1.6M shares for $225M. The CFO stated plainly that the main purpose of the buyback is "managing the impact of dilution" — a neutral statement, not a vote of "management is strongly bullish" confidence, but hardly a sign of "panic" either. $4.2B remained in the buyback authorization at quarter-end.

Middle East 75bps: Deferred, Not Gone — With cRPO as the Counter-Evidence

CFO Gina Mastantuono's exact words are worth reading closely: Q1 subscription revenue faced approximately 75bps of headwind from the delayed closing of several large on-premise deals in the Middle East. Three key phrases: on-premise is a legacy deployment, not a cloud subscription; deferred is not gone; and cRPO still growing +22.5% is the counter-evidence.

At the same time, the CFO raised full-year guidance while retaining a "conservative stance on the geopolitical environment" as a buffer. The hidden message in this two-layer signal is: the Middle East conflict may continue to cause deal delays in Q2 and Q3, and management has already factored this in. If similar language appears again over the next two quarters, it shouldn't come as a surprise — it's already written into the script.

V. Q&A: The Five Most Critical Market Concerns

❓ Q1: Is Now Assist's performance actually strong? Why won't management disclose the specific ACV?

Market concern: In Q4 FY25, Now Assist ACV was $600M+. In Q1 FY26, management only said the "overall AI product portfolio is moving toward the $1B target," without giving a specific Now Assist number. Are they hiding bad news?

My read: Management isn't hiding bad news, but they have shifted lanes. Starting in Q1, the disclosure focus shifted from "a single Now Assist ACV figure" to "the number of Now Assist customers at $1M+ ACV (up +130% YoY)." This is a more meaningful metric — it reveals "how many large enterprises are already treating Now Assist as a seven-figure purchase," rather than "how large the total dollar figure has grown." That said, it must be acknowledged that in the pricing-power war, the share of subscription revenue coming from Hybrid Pricing is the hardest metric of all, and that remains undisclosed. If it's still not disclosed next quarter, the market will begin to grow suspicious.

❓ Q2: Was the selling climax on the day of the UBS downgrade actually a valid signal?

Market concern: Heavy-volume long lower-shadow signals are commonly used by analysts, but they're also often misread. Was the signal on 4/10 actually valid?

My read: A plain heavy-volume long lower shadow does indeed carry a risk of false signals. But the 4/10 setup had three reinforcing conditions: one, volume was 2x the daily average, not 1.2x or 1.5x; two, it occurred on the exact same day as the downgrade from one of the largest sell-side firms, meaning "the worst news is already out"; three, the volume-price structure over the following 8 days confirmed continued accumulation. Taken together, the signal strength is far stronger than a standalone candlestick pattern. Q1 FY26's cRPO +22.5% is the final verdict — if the signal had been false, cRPO wouldn't have beaten.

❓ Q3: Armis and Veza together total over $8.5B in acquisitions — what's the long-term impact on profitability?

Market concern: Will two consecutive large acquisitions drag down the long-term margin-expansion trajectory? Could ServiceNow's traditional "expanding margins while growing" narrative break down?

My read: Yes in the short term, no in the long term. In the short term (the remaining three quarters of FY26), operating margin will run roughly 100–150bps below original guidance. But management has explicitly said this will normalize by FY27, for three reasons: one, the costs from Armis and Veza are concentrated in the integration period and will roll off once one-time expenses are absorbed; two, both acquisitions' ARR carries a high degree of subscription character with high incremental profitability; three, integration into the Now Platform will drive upsell. This logic aligns fully with the fourth layer of the moat framework — "Bundling Power."

❓ Q4: The 8-day accumulation structure has already formed — what does that mean?

Market concern: Now that the accumulation structure has formed and fundamental signals have strengthened, what does this setup imply?

My read: Under the Discipline of Options Three-Stage Framework, NOW's current structure matches the third stage's characteristics — "higher lows, trend reverting." But note — a setup determination is not an entry order. A formed accumulation structure doesn't mean zero risk; it could still see a retest, a false breakout, or a larger-scale market risk (macro, geopolitical). Every investor must decide for themselves, based on their own portfolio, risk tolerance, and risk-management discipline, whether to act, how much to act, and what conditions would trigger a stop. For the specific methodology framework (how to set a single-position cap, how to design scaling-in tranches, how to design stop conditions), see "NOW Systematic Position-Building Framework v2.1."

❓ Q5: Q2 cRPO guide of only 19% and Q2 Adj OM guide of only 26.5% — is this a momentum-deceleration signal?

Market concern: Q1's actual cRPO print of +22.5% was so strong — why is management only guiding Q2 to 19% (19.5% cc)? And Q2's Adj OM guide of only 26.5% is 550bps below Q1's actual 32% — isn't that a harbinger of decelerating momentum? This was also the primary reason for the negative reaction in extended trading after hours on 4/22.

My read: Both numbers "look like" deceleration, but once broken down, each has a clear accounting or technical driver — not a warning sign of weakening underlying momentum.

Three drivers behind Q2 cRPO of 19%: one, some Armis contracts include termination-for-convenience clauses that limit how much of that value flows into cRPO recognition; two, management chose to carry the 75bps Middle East on-premise deferral headwind through the entire FY26 assumption (a conservative approach) rather than assuming it resolves by Q2; three, CFO Mastantuono's historical guidance has always been conservative, with Q1–Q3 typically beating. These three factors stack up to create the appearance of deceleration in the Q2 guide.

The single driver behind Q2 Adj OM of 26.5%: the Armis integration period brings roughly 125bps of OM headwind. This is an accounting-driven cause that management itself disclosed verbatim on the earnings call — not a demand-side issue. FY26 full-year Adj OM guidance was maintained at 31.5% (only 50bps below Q1's actual 32%), implying management expects Q3/Q4 to recover the Q2 dip.

The real validation point for momentum isn't the Q2 guide — it's the full-year subscription revenue guidance being raised from $15.53–15.57B to $15.74–15.78B (+$162M, +1%). If fundamentals were weakening, full-year guidance wouldn't have been raised. Q2's noise is explainable noise, and that's the basis on which this setup determination still holds. But if these explanations don't hold up when Q2's actual results come in (for example, if actual cRPO falls meaningfully short of guide, or OM pressure proves larger than expected), the setup determination should be reassessed.

Conclusion: What Q1 FY26 Changed, and What It Didn't

The most important thing about the Q1 FY26 earnings report is that it delivered the first real-world test of the four theses laid out in the v2.0 Mythos chapter. Three of them were reinforced (compressed deployment timelines, urgent need for an AI Control Tower, the Armis/Veza acquisition logic), and one remains undetermined (whether the SaaS multiple-repricing cycle has ended). More importantly, large enterprises are accelerating purchases because of urgency around AI governance, not delaying them — this is the single most important bearish v2.0 thesis to be disproven.

The market behavior across these 12 days from 4/10 to 4/22 makes one thing clearer than the Q1 numbers themselves — traditional sell-side research and smart-money positioning can take opposite sides of the same stock on the very same day, and the market will ultimately hand down a verdict using the earnings data. This time, UBS's downgrade to 16% was overruled by smart money absorbing shares at 2x volume, and Q1's +22.5% cashed in that bet. This doesn't mean UBS was wrong, nor that the bear thesis is invalid — it means the same data can lead to different conclusions depending on how it's read, and the market ultimately answers who was right with cash flow.

What changed: the setup was upgraded directly from cautious watching to a Stage 3 core position-building determination. The "trial-position detector stage" that was originally expected to play out was leapfrogged entirely by the combination of the 4/10 selling climax and the 8-day accumulation structure.

What didn't change: the share of ACV coming from Hybrid Pricing remains undisclosed, seat compression vs. ACV expansion still needs more quarters of validation, and the strength of independent purchasing for the security-governance module still needs FY27 numbers to confirm. And the negative reaction in extended trading after hours on 4/22 to the Q2 cRPO guide of 19% and Q2 Adj OM guide of 26.5% — while after-hours extended trading isn't the same as a formal session signal — does reflect that some market participants still harbor doubts about decelerating momentum. The regular session on 4/23 will be the first validation window for this setup determination.

The first round of the pricing-power war is over, and ServiceNow didn't lose. But the second round hasn't started yet.

One-line summary: Q1 FY26 shows ServiceNow's moat hasn't broken, and 4/10 through 4/22 shows smart money has already begun repositioning — but neither proves the pricing-power premium can return to the $200 highs. These are three separate propositions. The first two support upgrading the setup from cautious watching to a Stage 3 core position-building determination; the third remains the key unresolved variable.

Where the traffic is, the profit is — but in the age of the AI pricing-power war, watching traffic alone is no longer enough. You also have to ask: who can still command a premium. The capital that absorbed 2x volume under the UBS downgrade on 4/10 has already given its first answer: ServiceNow, for now, still can.

▸ Companion reading: the v2.1 flagship research piece (rerunning the 4/10 pivot day and the Four-Layer Defensive Screen) | NOW Systematic Position-Building Framework v2.1 (methodology framework and daily tracking template)　▸ Next earnings: Q2 FY26 (late July 2026)

ProfitVision LAB · Shiba the Disciplined | I teach you how to think, not just what to do