Audit Phase: V-DIG
Target Entity: The Kraft Heinz Company (operating brand: Heinz)
Audit Date: 2026-05-01
Evidence Base: Training-data records current to April 2026; live web retrieval was unavailable during research. All findings reflect the public record as known to that date. The Evidence Gaps subsection within each relevant section should be treated as a priority checklist for supplementary live research before any final determination is made.
Kraft Heinz announced a multi-year strategic expansion of its Microsoft partnership in January 2021, designating Microsoft Azure as its primary enterprise cloud platform3. The arrangement covers core workload migration, supply chain systems, and the company’s broader digital transformation programme4. The relationship is confirmed as ongoing through 2024 in the company’s annual regulatory filings1. Microsoft is a US-headquartered corporation; while it maintains Israeli R&D centres and is a joint awardee of Project Nimbus (see Cloud Infrastructure, Data Residency & Sovereign Cloud Participation below), the Kraft Heinz–Azure engagement is a general-purpose commercial enterprise cloud arrangement. No public evidence links this engagement to Israeli-specific data routing, residency configurations, or government programme participation134.
Trade press records from approximately 2022–2023 indicate that Kraft Heinz additionally engaged Google Cloud for data analytics and AI/ML workloads, complementing the Azure primary infrastructure5. Google Cloud is a US-headquartered firm and, like Microsoft, a joint awardee of Project Nimbus. The Kraft Heinz–Google Cloud arrangement appears to be a general commercial data and AI engagement. No public evidence associates it with Israeli government cloud programmes5. The ongoing status of the Google Cloud engagement as of 2024 is noted in training data.
A consistent feature of Kraft Heinz’s regulatory disclosures is that its 10-K filings describe cybersecurity risk management practices at a high level without naming specific vendors12. The following Israeli-origin or Israeli-founded cybersecurity vendors are active in the enterprise market and, in some cases, are among the most widely deployed platforms in the Fortune 500 food and consumer goods sector. Each is assessed individually against available public evidence.
Check Point Software Technologies — Headquartered in Tel Aviv, Israel; one of the world’s most widely deployed network firewall and threat-prevention platforms12. No specific, publicly disclosed contractual or licensing relationship between Kraft Heinz and Check Point has been identified in corporate filings, press releases, or verified trade press. No public evidence identified.
Wiz Inc. — Israeli-founded cloud security firm14. No public evidence of a Kraft Heinz–Wiz relationship has been identified. No public evidence identified.
SentinelOne — Co-founded by Israeli entrepreneurs; maintains significant R&D operations in Israel. No public evidence of a Kraft Heinz–SentinelOne relationship has been identified. No public evidence identified.
CyberArk Software — Headquartered in Newton, MA, with origins and primary R&D in Israel13. CyberArk is among the most widely deployed privileged access management (PAM) platforms in the Fortune 500 consumer goods sector. No specific, publicly disclosed Kraft Heinz–CyberArk relationship has been identified in corporate filings, press releases, or verified trade press. No public evidence identified.
Palo Alto Networks — Co-founded by Israeli entrepreneur Nir Zuk; maintains significant R&D operations in Israel; headquartered in Santa Clara, CA, and publicly listed in the US11. No publicly disclosed Kraft Heinz–Palo Alto Networks relationship has been identified in available sources. No public evidence identified.
Claroty — Israeli-founded OT/ICS cybersecurity platform directly relevant to food and beverage manufacturing environments19. Given Kraft Heinz’s extensive global manufacturing footprint, Claroty is a commercially plausible vendor, but no public evidence of a specific relationship has been identified. No public evidence identified.
NICE Systems (NICE Ltd.) — Headquartered in Ra’anana, Israel; provides workforce management, contact centre analytics, and compliance recording platforms. Kraft Heinz operates global customer service and commercial functions where NICE-class platforms are commonly deployed. No public evidence of a specific Kraft Heinz–NICE relationship has been identified. No public evidence identified.
Verint Systems — Headquartered in Melville, NY, with origins and substantial operations in Israel; provides customer engagement and intelligence platforms. No public evidence of a specific Kraft Heinz–Verint relationship has been identified. No public evidence identified.
Kraft Heinz’s 2021 Azure digital transformation programme involved Accenture and other global systems integrators as implementation partners, per trade press records4. No public evidence has been identified that these integrators mandated or deployed Israeli-origin technology as part of the Kraft Heinz engagement specifically. No public evidence identified of integrator-mediated Israeli-origin technology deployment within the Kraft Heinz programme.
Kraft Heinz is a consumer packaged goods (CPG) manufacturer and brand owner, not a retailer. It does not operate consumer-facing retail stores. The primary deployment contexts for in-store facial recognition, frictionless checkout, shelf-analytics biometrics, and customer-facing video surveillance do not apply to Kraft Heinz’s direct operations. This structural distinction is material to assessing the relevance of Israeli-origin retail and surveillance technology vendors.
The following Israeli-founded vendors are active in the retail and CPG sector and have been assessed against available evidence:
Trigo Vision — Israeli-founded; provides frictionless checkout and store analytics to supermarket and grocery retail operators. As Kraft Heinz does not operate retail stores, the primary deployment context is inapplicable. No public evidence of a Kraft Heinz–Trigo Vision relationship has been identified. No public evidence identified.
AnyVision / Oosto — Israeli-founded; provides facial recognition and biometric retail security platforms. No public evidence of a Kraft Heinz–AnyVision relationship has been identified. No public evidence identified.
BriefCam — Israeli-founded; provides video analytics and surveillance platforms. No public evidence of a Kraft Heinz–BriefCam relationship has been identified. No public evidence identified.
Trax Retail — Israeli-founded; provides image-recognition shelf analytics and on-shelf availability platforms sold directly to CPG brands, not only to retailers18. This is the highest-plausibility Israeli-origin technology relationship in this section, as Trax’s commercial model specifically targets food and beverage manufacturers such as Kraft Heinz to monitor shelf compliance and distribution execution in third-party stores. Despite this commercial plausibility, no specific, publicly disclosed Kraft Heinz–Trax Retail relationship has been identified in corporate filings, press releases, or verified trade press. No public evidence identified of a confirmed relationship; the possibility cannot be excluded and warrants targeted follow-up.
No public evidence has been identified of Kraft Heinz deploying Israeli-origin predictive analytics, social media sentiment monitoring, or workforce surveillance platforms. No public evidence identified.
No public evidence has been identified of Israeli-origin surveillance or biometric technologies reaching Kraft Heinz indirectly via managed services or bundled enterprise suites. No public evidence identified.
No public evidence has been identified that Kraft Heinz operates, leases, or co-locates data centre infrastructure within Israel. The company’s disclosed cloud infrastructure relies primarily on Microsoft Azure and Google Cloud commercial regions; no Israel-specific regional deployment has been publicly documented in SEC filings, press releases, ESG reports, or trade press accessible through training data1245. No public evidence identified.
Project Nimbus is a USD 1.2 billion Israeli government cloud contract, awarded jointly to Google Cloud and Microsoft Azure in 2021, to provide cloud computing, AI, and digital infrastructure services to the Israeli government and military15. The significance of this contract for V-DIG analysis lies in the fact that Kraft Heinz is a confirmed customer of both Microsoft Azure34 and Google Cloud5 — the two direct awardees of Project Nimbus.
No public evidence has been identified that Kraft Heinz has any direct participation in, subcontracting role within, financial relationship tied to, or commercial arrangement specifically connected to Project Nimbus. Kraft Heinz’s use of Azure and Google Cloud is as a general commercial enterprise customer. The company’s cloud workloads are not publicly identified as being routed through Israeli government cloud infrastructure. No public evidence identified of Kraft Heinz participation in Project Nimbus or comparable state-backed Israeli digital infrastructure programmes134515.
The indirect relationship — whereby Kraft Heinz commercial revenues flow to Microsoft and Google, both of which derive revenue from Project Nimbus — is a structural feature of being a customer of these hyperscalers and is not specific to Kraft Heinz.
No public evidence has been identified that Kraft Heinz provides services marketed or contracted specifically to ensure digital sovereignty, data residency, or infrastructure resilience for Israeli state institutions or military bodies. Kraft Heinz is a consumer food and beverage company with no publicly disclosed defence or government IT services division126. No public evidence identified.
No public evidence has been identified of any contract, partnership, service agreement, or memorandum of understanding between Kraft Heinz and the Israeli Ministry of Defence, the Israel Defence Forces, any branch of Israeli military intelligence (including Unit 8200, Mossad, or Shin Bet), or affiliated entities. Kraft Heinz is a consumer packaged goods company. Its disclosed revenue streams relate entirely to food and beverage manufacturing and sales12. No public evidence identified.
No public evidence has been identified of Kraft Heinz’s commercially available technology being deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied Palestinian territories. Kraft Heinz does not develop enterprise technology products for external sale; its internal digital infrastructure is operational, not commercial12. No public evidence identified.
Kraft Heinz does not develop, sell, licence, or maintain cybersecurity products, offensive cyber capabilities, or weapons technology. The company’s technology footprint is entirely that of an end-user/customer, not a vendor or developer. No public evidence identified.
A cybersecurity breach affecting Kraft Heinz was publicly disclosed in December 2019, attributed to the Clop ransomware group’s exploitation of a vendor file-transfer platform20. This incident is relevant as context for assessing the company’s subsequent investment in cybersecurity architecture (including the zero-trust and cloud security posture noted in trade press1) but has no bearing on defence or intelligence sector technology relationships. No Israeli-origin vendor was implicated in the incident response or remediation based on available information.
Kraft Heinz has publicly disclosed the use of artificial intelligence and machine learning for internal operational purposes, principally in supply chain optimisation, demand forecasting, and product development145. These capabilities are delivered primarily through its Microsoft Azure and Google Cloud partnerships45. The company’s ESG reporting references data-driven decision-making in manufacturing and logistics contexts7.
No public evidence has been identified that any of Kraft Heinz’s AI or ML capabilities — whether proprietary models, licensed platforms, or cloud-delivered AI services — have been provided to Israeli state, military, or security bodies. Kraft Heinz is an end-user of AI tools, not an AI vendor or service provider12. No public evidence identified.
No public evidence has been identified that Kraft Heinz’s AI models have been trained on, or provided access to, surveillance-derived data, civilian population data, or intercepted communications originating from Israel or the occupied Palestinian territories. Kraft Heinz’s disclosed AI use cases relate to commercial and operational functions (demand sensing, recipe development, supply chain)1457. No public evidence identified.
Kraft Heinz does not produce or develop autonomous targeting, weapons-effect, or militarily applicable autonomous systems. No public evidence identified.
UN Special Rapporteur reports on digital surveillance and privacy16, and Amnesty International’s research on generative AI and human rights17, do not reference Kraft Heinz in any publicly available report accessible through training data. The company’s AI posture has not attracted scrutiny under international human rights frameworks in the context of Israeli state or military applications. No public evidence identified.
No public evidence has been identified that Kraft Heinz operates research and development facilities, engineering offices, innovation laboratories, or accelerator programmes within Israel. Kraft Heinz’s disclosed R&D operations are centred in the United States (Pittsburgh, PA headquarters; Glenview, IL) and in European markets17. The company’s corporate governance and ESG disclosures make no reference to Israeli-based R&D infrastructure67. No public evidence identified.
No public evidence has been identified of Kraft Heinz acquiring Israeli-origin technology companies or making strategic investments in Israeli technology startups, venture funds, or innovation ecosystems. Kraft Heinz’s documented M&A activity, as reflected in SEC filings, covers consumer food brand acquisitions and divestitures, not technology firm acquisitions18. No public evidence identified.
No public evidence has been identified of patent portfolios, licensing agreements, sponsored research, or co-development arrangements between Kraft Heinz and Israeli-domiciled research institutions such as the Technion – Israel Institute of Technology, the Hebrew University of Jerusalem (Yissum technology transfer office), or the Weizmann Institute of Science. Kraft Heinz’s disclosed patent portfolio relates primarily to food processing, packaging materials, flavour science, and manufacturing processes — domains in which none of the named Israeli institutions are prominently active as Kraft Heinz IP partners based on available public records. No public evidence identified.
Kraft Heinz sells products in the Israeli consumer market, and limited trade press suggests a commercial presence. The scope of any local IT infrastructure, data handling agreements, or vendor relationships for Israeli commercial operations is not publicly documented in filings, press releases, or ESG disclosures accessible through training data. This gap is noted without factual inference.
The BDS Movement’s published target lists, as accessible through training data, do not include Kraft Heinz as a primary or featured campaign target in the context of technology provision to Israeli state or military bodies8. The Who Profits Research Center database, which documents corporate involvement in Israeli settlements and occupation-related commerce, does not contain a prominently documented entry for Kraft Heinz in the technology supply chain context9. The AFSC Investigate database similarly does not list Kraft Heinz as a flagged entity for Israeli military technology relationships10. Amnesty International’s technology accountability work — covering surveillance, AI, and facial recognition — does not reference Kraft Heinz in publicly available reports accessible through training data17.
No NGO, academic, or UN reports have been identified that specifically address Kraft Heinz’s technology relationships with the Israeli state or operations in occupied territories.
No organised BDS or divestment campaign specifically targeting Kraft Heinz on grounds of technology provision to Israeli state or military entities has been identified in training data8910. Historical consumer boycotts of Heinz-branded products have existed in certain markets for corporate or political reasons unrelated to technology-sector concerns; these fall outside V-DIG scope and are not further assessed here. No public evidence identified of a technology-sector BDS campaign against Kraft Heinz.
No regulatory inquiries, legal challenges, export control actions, or sanctions-related investigations involving Kraft Heinz’s technology sales or services to Israeli state entities have been identified in available public records. Kraft Heinz’s disclosed regulatory and legal proceedings in its 10-K filings relate to food safety, consumer protection, antitrust, and financial reporting matters, not technology export controls or dual-use trade compliance12. No public evidence identified.
Kraft Heinz’s most recent proxy statement (DEF 14A, 2024) addresses board oversight of cybersecurity risk, but contains no disclosures pertaining to Israeli government relationships, technology exports, or geopolitically sensitive vendor arrangements6. No public evidence identified of governance-level disclosures relevant to V-DIG scope.
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001637459&type=10-K&dateb=&owner=include&count=10 ↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩
https://ir.kraftheinzcompany.com/financial-information/annual-reports ↩↩↩↩↩↩↩↩
https://news.microsoft.com/2021/01/12/kraft-heinz-and-microsoft-expand-strategic-partnership/ ↩↩↩↩
https://customers.microsoft.com/en-us/story/kraft-heinz-consumer-goods-azure ↩↩↩↩↩↩↩↩↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001637459&type=DEF+14A&dateb=&owner=include&count=10 ↩↩↩
https://en.wikipedia.org/wiki/Palo_Alto_Networks ↩
https://en.wikipedia.org/wiki/Check_Point ↩
https://en.wikipedia.org/wiki/CyberArk ↩
https://en.wikipedia.org/wiki/Wiz_(company) ↩
https://www.ohchr.org/en/special-procedures/sr-privacy/annual-reports ↩
https://www.amnesty.org/en/latest/research/2023/05/generative-ai-a-human-rights-approach/ ↩↩
https://traxretail.com/solutions/ ↩
https://claroty.com/resources/case-studies ↩
https://www.zdnet.com/article/kraft-heinz-discloses-data-breach/ ↩
