New analysis

Iron Mountain Inc IRM

Iron Mountain is a fine business priced like a software company.
12-year-old test
Iron Mountain stores companies' old paper records in giant warehouses, charging rent forever because moving the boxes would cost more than just paying. They use that steady cash to build computer-data warehouses too. The storage business is great but slowly shrinking as people throw out paper. The company borrowed a lot of money to grow. The stock costs about $127 today, but a careful look says it's really worth $50-$70. So the business is fine — the price is way too high. Wait for it to drop a lot before buying.
Composite Score
49
/ 100
Below median
Recommendation
Avoid
Add only below $58
Trim above $73.
Intrinsic Value (Base)
$31 · $57 · $73
Px $128 · 121% above IV (no margin of safety)

Quantitative scorecard

/100 · weighted equally across four pillars
Profitability quality
11/25
ROIC 10y avg5.7%
ROIIC 5y0.4%
FCF / NI (5y)-59.0%
Gross margin trendflat
Op-margin stability17.9%
Balance sheet
17/25
Net debt / EBITDA8.68x
Interest coverage
Current ratio0.77x
Goodwill / equity
Off-balanceClean
Capital allocation
11/25
Share count Δ 10y2.0%
Buyback timingMixed
Dividend payout663.3%
M&A track recordOrganic
CEO communicationDefault
Valuation
10/25
P/E vs 10y avg4.13x
EV/FCF vs 10y avg
Reverse-DCF growth20.3%
Px / Base IV2.21x
Margin of safetyAbsent
Owner Earnings (TTM)
USD
Net income (TTM)$122.87M
+ Depreciation & amortization+ derived
+ Stock-based compensation+ derived
− Maintenance capexmedian of Greenwald / D&A / capex-rev− $815.81M
− Δ Working capital− derived
= Owner Earnings$451.68M
For comparison: GAAP FCF (TTM)$-821.22M

Thesis

Iron Mountain (IRM) operates the world's largest physical records-storage business — roughly 240,000 customers, 95% of the Fortune 1000, billions of cartons sitting in warehouses on multi-decade contracts — and is layering data-center colocation, asset lifecycle management (ALM), and digital-services revenue on top. The business has genuine compounder DNA: storage rental is recurring, customer churn is famously low (~2% annually for records), and every box that comes in is more profitable than the last because incremental boxes use existing rack space. As a REIT the right cash metric is AFFO, not raw DCF/owner-earnings; the deterministic owner-earnings of $452M TTM understates true distributable cash because real-estate depreciation is non-cash. So the scorecard's DCF-anchored IV range ($31 low / $57 base / $73 high) is conservative for a REIT — but even on AFFO multiples (industry uses ~18-22x AFFO), IRM trades at a premium to peers and the data-center growth narrative is now fully priced.

What the scorecard is telling us is unambiguous: ROIC 10y avg of 5.74% sits below any plausible cost of capital; ROIIC 5y of 0.35% says the marginal dollar reinvested has earned essentially nothing; net debt/EBITDA is 8.68x; P/E TTM is 307.7x; reverse-DCF implied growth is 20.3% in perpetuity. At $127.19 versus IV-high $72.84, px/IV is 2.21. Even crediting AFFO accounting fully, you are paying 2x intrinsic value for a 5.7%-ROIC business levered nearly 9 turns. The thesis is therefore not 'avoid the company' — it is 'avoid the price.' Owning IRM makes sense only at a price where AFFO yield approaches the cost of debt plus a real equity premium, roughly $55-65. Until then, watch and wait.

Moat

Pricing power. Iron Mountain has demonstrable pricing power in its core records-storage book. Storage rental revenue per cubic foot has risen at low-to-mid-single-digit rates almost every year for two decades, even as physical box volume has been flat to slightly declining. Why? Because customers who store records under retention schedules cannot economically remove them — the incremental cost of one more year of storage is far below the cost of retrieval, indexing, and destruction. This is classic 'sticky byproduct' pricing — Damodaran's framework for licensed/franchise advantages [2] applies imperfectly here: IRM has no legal monopoly, but it does have what amounts to a contractual and operational one. Verdict: real, narrow.

Switching costs. This is IRM's strongest moat type and the closest analogue to what Munger described and what Damodaran captured in his Microsoft example [3] — the cost to a customer of leaving is dramatically higher than the annual fee of staying. To switch providers a Fortune 500 legal department must (a) physically truck millions of boxes across the country, (b) re-index every carton in a new system, (c) re-train compliance staff, (d) accept the regulatory risk of a chain-of-custody break. The math almost never works. Annual customer churn is ~2%; many contracts have run continuously for 30+ years. Stress test the $10B/5-year hostile-entrant scenario: a private-equity-funded competitor with $10B and five years could not pry meaningful share from IRM, because the binding constraint isn't capital — it is customer inertia and audit risk. Verdict: WIDE on the records book; absent in newer segments.

Network effects. Weak. There is mild density economics — more customers in a metro means more efficient pickup/delivery routes — but this is a cost-side benefit, not a true network effect. New entrants in a single metro can replicate it. Verdict: NONE.

Intangibles. The Iron Mountain brand carries real weight in records compliance — corporate counsel and CIOs trust it. But this is downstream of the switching-cost moat, not independent of it. The brand alone would not save the business if switching costs collapsed. The data-center business has no brand moat at all (Equinix, Digital Realty are stronger). Verdict: NARROW.

Cost advantages. IRM owns rather than leases ~36% of its records facilities, giving it lower marginal costs per cubic foot than smaller competitors who lease. Density advantages compound over time: a fully-utilized warehouse generates 3-4x the EBITDA per square foot of a half-full one, and IRM's facilities are mostly full. However, in the data-center segment IRM is sub-scale versus Equinix, Digital Realty, CoreSite — capex per MW is roughly comparable, but customer relationships and ecosystem density are inferior. Verdict: NARROW (records), NONE (data-center).

Competitor stress test. Buffett's framework on durable advantage [1] [4] asks: would $10B and five years let a competitor reproduce this? For records storage: no — physical inertia and contractual lock-in make it nearly impossible to dislodge installed customers. For data centers: yes — capital is the binding constraint and IRM is a price-taker. For ALM (asset lifecycle / e-waste): emphatically yes; this is a fragmented market with low barriers.

Erosion risk. The records moat is wide but the addressable market is shrinking ~1-3% per year as customers digitize and destroy old physical records. The moat is therefore narrowing not because competitors are penetrating it but because the moated castle itself is contracting. This is the central tension: a wide moat around a slowly-evaporating pond.

Moat verdict: NARROW (blended). The records-storage core is genuinely WIDE but represents a declining asset; the growth segments (data center, ALM, digital) are NARROW-to-NONE. The blended moat is real but not the kind of durable, expanding advantage Buffett looks for [1] [4].

L
Learning Note
Moat durability — the Munger filter
The test: if a well-funded competitor had $10B and 5 years, could they meaningfully damage this business? If yes, the moat is narrower than it looks.
Used in Step 5 — Moat Assessment

Management & Capital Allocation

Iron Mountain's senior leadership — CEO Bill Meaney since 2013, CFO Barry Hytinen — has executed a clear strategy: harvest cash from the legacy records book, reinvest aggressively into data centers and digital services, lever the balance sheet to fund the transition, and use the REIT structure to push out a high dividend. Whether that strategy creates per-share value is the question.

Reinvestment. Capex has run roughly $1.5-2.0B per year recently, with the bulk going to data-center construction. The numbers in the scorecard are the verdict on whether reinvestment is working: ROIIC over the last five years is 0.35%. That is not a typo — for every dollar of incremental capital management has put back into the business, they have produced essentially zero incremental owner earnings. Bulls will argue this is timing — data centers take years to lease up — and there is some truth to that. But five years is long enough to start seeing results, and ROIC 10y avg at 5.74% is consistent with a business that earns less than its cost of capital on the marginal dollar. Grade: D.

Acquisitions. IRM has been an active acquirer — Recall Holdings ($2.0B in 2016), various data-center deals, the Regency acquisition in ALM. Recall was strategically defensible (consolidated the records industry) but priced at the top of the cycle. The data-center M&A has been mixed. The discipline question Buffett would ask [4] — are these tuck-ins at value prices or empire-building at any price? — leans toward the latter. Grade: C.

Debt. Net debt/EBITDA at 8.68x is the most alarming number in the scorecard. For context, blue-chip REITs typically run 5-6x; IRM is operating closer to the leverage of a private-equity-owned business. Interest coverage is unreported in the scorecard (null), which itself is a yellow flag — when leverage is this high, refinancing risk in a sustained higher-rate environment is real. The company has done a competent job laddering maturities, but a 200bp rise in their blended cost of debt would consume a meaningful slice of AFFO. Grade: D.

Buybacks. Effectively none. Share count is up 2.03% over ten years — modest dilution, mostly from equity-funded acquisitions and stock comp. Management has not used buybacks as a capital-allocation lever, which makes some sense given the leverage and the dividend obligation, but it also means there has been no countercyclical signaling about whether management thinks the stock is cheap. Average P/IV at which they have bought is therefore not measurable. Grade: C.

Dividends. As a REIT, IRM is required to distribute ~90% of taxable income. The dividend has grown steadily and is well-covered on an AFFO basis. This is the one capital-allocation lever where IRM gets a genuine A — they have respected the implicit shareholder contract that a REIT pays its owners.

Communication. Investor materials are professional and informative. Management talks openly about the legacy-to-growth transition. The pivot in narrative — from 'records are stable' to 'we're a data infrastructure company' — has been executed with discipline. However, the AFFO definitions IRM uses are aggressive (they add back several items peer REITs would not), and the heavy use of 'adjusted EBITDA' obscures the leverage picture for casual readers. Grade: B-.

Compensation. Tied largely to adjusted EBITDA growth and revenue growth — both metrics that incentivize empire-building over per-share value. There is no ROIC or ROIIC component visible in the proxy, which is a structural problem: management's incentives are misaligned with what the scorecard says is the actual problem (poor incremental returns).

Overall. Management is competent and communicative but is running a strategy — lever up, build data centers, harvest records — that the numbers say is not generating per-share value. Capital allocator: C-.

Industry Structure

Iron Mountain operates in three overlapping industries with very different structures. The blended industry verdict requires looking at each.

Records storage and information management (≈55% of revenue). This is an oligopoly that consolidated when IRM acquired Recall in 2016. IRM and a long tail of regional operators serve the market.

  • Threat of new entrants: Low. Capital costs to build warehouses are modest, but customer acquisition is nearly impossible because of switching costs. New entrants cannot break in.
  • Threat of substitutes: HIGH. Digitization is the existential substitute. Every year a percentage of physical records get digitized and destroyed, shrinking the underlying market 1-3% annually.
  • Bargaining power of buyers: Low for incumbents (locked in by switching costs); high for new RFPs (rare).
  • Bargaining power of suppliers: Low. Real-estate suppliers are commoditized; labor is non-specialized.
  • Rivalry: Low. The market structure rewards incumbency.

Value pool: shrinking but profitable. Verdict on this segment: Good (high margin, durable, but contracting).

Data center colocation (≈15-20% of revenue, growing). This is a competitive industry with strong demand from AI/cloud workloads but with capital-intensive economics.

  • New entrants: HIGH. Capital is abundant (Blackstone, KKR, sovereign wealth all funding new builds).
  • Substitutes: Hyperscaler-built capacity (Microsoft, Google, Amazon increasingly self-build).
  • Buyer power: Very high. Hyperscalers and large enterprises negotiate aggressively; switching costs are real but not absolute.
  • Supplier power: Rising. Power, land near grid capacity, GPUs, and specialized cooling are constrained.
  • Rivalry: High. Equinix, Digital Realty, CyrusOne, and well-funded private players compete on price and ecosystem.

Value pool: large and growing, but the spoils accrue disproportionately to scale leaders. IRM is sub-scale. Verdict on this segment: Average.

Asset lifecycle management / digital services (≈10-15% of revenue). Fragmented industry — IRM is rolling up regional ALM players. Margins lower, returns on capital uncertain. Verdict: Poor-to-Average.

Value pool trajectory. The classic Damodaran framing [2] [3] would note that IRM's strongest moat is in the segment whose value pool is shrinking, and its weakest competitive position is in the segment whose value pool is growing. This is the core industry-level problem.

Blended view. Take the records-business cash flows, decay them at 1-3% a year, layer on data-center growth at industry rates discounted for IRM's sub-scale position, and the resulting business is a 3-5% organic-growth-rate enterprise with mid-teens AFFO yields available only at much lower prices than today.

Industry Verdict: Average. The records segment is Good but contracting; the data-center segment is structurally Average and IRM is a sub-scale player; ALM is Poor. The blended industry attractiveness is Average.

Mandatory Inversion
Inversion: the analysis below is intentionally adversarial. It is the strongest credible bear case, written without deference to the bull thesis. Weight it equally.

Inversion (Bear Case)

I am now playing the short-seller. I have no position; my job is to write the strongest credible bear case.

1. The single event that kills this. A coordinated digitization mandate — either regulatory (e.g., a federal digital-records-retention rule for healthcare or financial services) or competitive (a cloud-vendor offering free physical-to-digital migration as a customer acquisition tool) — would compress the records-book decay rate from 1-3%/year to 8-12%/year. At that pace, the runway of legacy cash flows that funds the data-center pivot collapses inside three years. IRM's leverage at 8.68x net debt/EBITDA leaves no cushion for a step-down in the legacy cash flows. A second kill scenario: a credit-spread regime change. IRM has roughly $14B of debt; a 250bp rise in their blended refinancing rate would consume ~$350M of annual AFFO — roughly a third of current distributable cash. In that world the dividend gets cut, REIT investors flee, and the multiple collapses to peer-leveraged-yield-vehicle levels (~10x AFFO).

2. Why the moat is narrower than bulls think. Bulls describe IRM as 'a digital infrastructure compounder' with the records book as a steady annuity. The truth is the opposite. The moat sits inside the segment that is shrinking; the growth is in segments where IRM is sub-scale and earns commodity returns. Bulls confuse 'durable' with 'expanding.' The records moat is durable; it is also a moat around a contracting castle. The data-center segment has no moat — it is a capex contest among Equinix, Digital Realty, hyperscalers' self-builds, and well-capitalized private operators. Five years and $10B [Buffett framework, 1] [4] would absolutely let a competitor build comparable data-center capacity; the test fails decisively in IRM's growth segment.

3. Why management is worse than it appears. Management speaks fluently and presents well, but their actual capital-allocation track record over the past decade is brutal: ROIC 10y avg 5.74%, ROIIC 5y of 0.35%. They have invested billions and produced essentially no incremental owner earnings. Their compensation structure rewards adjusted EBITDA and revenue growth — which incentivizes building more data centers regardless of returns. They have leveraged the balance sheet to 8.68x net debt/EBITDA, a level that resembles a private-equity-sponsored business more than a blue-chip REIT. They use AFFO definitions that are looser than peers'. Buffett would describe this management style as the one he warned against in 1984 [Buffett 1984] — running a slowly-failing business by financial engineering rather than fixing the operating economics.

4. What bulls are extrapolating that won't hold. The $127 stock price implies a reverse-DCF growth rate of 20.3% in perpetuity. That number is from the scorecard and it is the single most important sentence in this analysis. There is no scenario in which a sub-scale data-center operator, levered 8.7x, in a fragmented ALM business, with a contracting records core, compounds owner earnings at 20%/year forever. The bull narrative requires (a) data-center revenue growing 25-30%/year for a decade AND (b) data-center margins expanding to Equinix-like levels AND (c) records cash flow holding flat AND (d) interest expense not exploding on refinancing AND (e) no equity dilution. Take any one of those assumptions and stress it 20%, and the IV doesn't move from $73 to $130 — it goes the other way.

5. Valuation trap (multiple compression / regime change). P/E TTM of 307.7 and P/E 10y avg of 74.5 mean IRM has been priced as a high-growth secular winner for years. The IV-high of $72.84 is generated by a defensible AFFO-multiple framework. Going from $127 to $73 is not a tail risk — it is a base case if any single bull assumption fails. The path lower has three triggers: (i) a recession that compresses commercial real-estate multiples generally, (ii) a credit event that exposes the leverage, (iii) a data-center capacity glut that compresses leasing economics. All three are historically common; one of them is happening at any given time. The asymmetry is wrong: limited upside (you are paying for it), real downside (you are unprotected).

If I am right, the stock could be worth $55-70 within 2-3 years.

Lollapalooza Bias Check

Examining my own biases as I write this analysis:

Authority bias (active). Iron Mountain has been a public company since 1996, has 25,000 customers, lives in the S&P 500, and gets favorable sell-side coverage. The company speaks the language of 'digital infrastructure' fluently, and everyone respects digital infrastructure right now. I have to actively resist letting that institutional polish translate into 'they must be earning good returns' — the scorecard says they aren't.

Recency bias (active). Data-center stocks have been one of the best-performing equity themes of the past three years. AI, cloud, hyperscaler capex — every news cycle reinforces the idea that data-center capacity is gold. My instinct on first pass was 'IRM has data centers, that's a tailwind.' I have to remember that being in a hot industry says nothing about whether IRM specifically earns a return on incremental capital. The 0.35% ROIIC says they don't.

Anchoring bias (active). The scorecard reports ROIC, ROIIC, and net debt/EBITDA as ground truth. I am tempted to anchor on those and produce a 'Sell' recommendation mechanically. The user explicitly noted REIT — AFFO > DCF, signaling that pure DCF understates true REIT cash. That is a fair caveat. But I must not overweight it: even on AFFO-multiple analysis, IRM trades at a premium to peer REITs (Equinix, Digital Realty) that have wider moats and lower leverage. The anchor on the scorecard numbers is mostly correct; the AFFO adjustment is real but small.

Confirmation bias (active). Once I formed the view 'overpriced,' I found myself unconsciously seeking more reasons IRM is overpriced and fewer reasons it might be cheap. The genuine bull cases I should have engaged more deeply: (a) data-center backlog is at record highs and lease-up may accelerate, (b) ALM is a real growth business with secular e-waste tailwinds, (c) the records book has surprised on durability for 20 years and may continue.

Social proof (mild). Many high-quality investors own IRM (Vanguard, BlackRock as index holders; some active REIT specialists). I have to remind myself that REIT-specialist funds are mandate-constrained — they own IRM because they have to own data-center REITs, not because IRM is the best one.

Deprival super-reaction (active in customers, not in me). This is the bias that creates IRM's moat — customers fear the deprivation of breaking their archive contract more than they value the savings of switching. Recognizing this bias is real (and creates the moat) is different from being subject to it.

Net effect of my biases. They cancel out roughly evenly. The anchoring on scorecard numbers and the confirmation toward 'overpriced' push the recommendation harder than it should be; the authority and recency biases push it softer. I land at 'Avoid' with medium conviction — not 'Strong Sell' (which the scorecard alone would suggest) and not 'Hold' (which the institutional polish would suggest).

10-Year Outlook

Same fundamental business model in 10 years? Mostly yes. IRM will still store records, operate data centers, and recycle assets. The mix will shift — records as a percentage of revenue will drop from ~55% to perhaps 35-40%; data centers and digital services will grow to 50%+. The shape of the business is recognizable.

Customer base larger? Modestly. IRM serves 240,000 customers today. In ten years it will likely serve a similar count in records (some attrition offset by emerging-market growth) and significantly more in data centers and ALM. Net: customer count probably 10-25% higher.

Profit per customer higher? Uncertain and probably no, on a real basis. Records customers are paying more per cubic foot but storing fewer cubic feet, so revenue per records customer is roughly flat. Data-center customers generate higher absolute revenue but at lower margins than records storage. ALM customers are low-margin. Mix shift is dilutive to per-customer profitability.

Moat wider? No. The records moat narrows mechanically as the records book contracts. The data-center moat does not exist meaningfully today and will not exist meaningfully in 10 years; the segment is a capex contest in which IRM lacks scale advantage. ALM has no moat. Net: blended moat narrower in 10 years than today.

Single biggest threat? Refinancing risk in a structurally higher-rate world. IRM's $14B+ debt was largely issued in the 2015-2021 era at very low rates. As that debt rolls, blended cost of debt rises. At current AFFO levels and an 8.68x leverage ratio, a 200-300bp rise in the blended rate consumes ~30-40% of distributable cash — which forces dividend cuts or asset sales or equity issuance. Any of those triggers a multiple compression.

Secondary threat: A digitization-acceleration event (regulatory or technological) that compresses the records-book half-life from 25 years to 10 years.

Confidence in the 10-year picture? I can describe the business in 10 years with reasonable specificity — same operations, slowly mix-shifting, leverage either resolved or destructive depending on rates. What I cannot predict with confidence is the price at which it trades, because that depends on (a) macro rates, (b) data-center cycle position, (c) AI capex sustainability — none of which are in my circle of competence to forecast.

CONFIDENCE: medium

Position guidance

- **Recommendation:** Avoid (at current price). The business is real and the records-storage moat is genuinely durable, but at $127.19 versus an IV-high of $72.84 (px/IV = 2.21), there is no margin of safety on any defensible framework — DCF, AFFO multiple, or replacement cost.
- **Conviction:** Medium. The scorecard inputs (ROIC 5.74%, ROIIC 0.35%, net debt/EBITDA 8.68x, reverse-DCF implied growth 20.3%) are unambiguous. The medium (not high) conviction reflects (a) genuine REIT-AFFO accounting differences that make pure DCF conservative, (b) the possibility that data-center demand stays unusually strong for several more years, (c) management's competence in narrative execution.
- **Target buy price:** $58. This is roughly the IV-base of $57.49. Below this price, the AFFO yield approaches a level competitive with investment-grade corporate yields plus a real equity premium, and the leverage becomes defensible.
- **Target trim price:** N/A (not currently held). For modeling purposes: above $73 (IV-high), even a generous bull-case intrinsic value is exceeded.
- **Position sizing:** 0% today. If the stock reaches the target buy zone of $55-65, an initial 1.5-2.5% position is appropriate, with a willingness to add to 4-5% on further weakness toward $40-45 (IV-low region). Never more than 5% given the leverage and the contraction risk in the records core.
- **Catalysts to watch:** (1) Refinancing announcements and blended cost-of-debt disclosures, (2) data-center leasing rate trends and same-store revenue, (3) records-book volume decline rate disclosed in 10-K, (4) any regulatory or hyperscaler move that accelerates digitization, (5) credit spreads on BB-rated REIT paper.