Audit Phase: V-DIG (Vendor, Digital Infrastructure & Government) Audit
Target Company: PeoplePerHour (People Per Hour Ltd; Companies House No. 06369697)
Audit Date: May 2026
Jurisdiction of Incorporation: England & Wales
PeoplePerHour’s publicly documented internal engineering stack references PHP, Laravel, MySQL, and React — commodity, non-Israeli-origin frameworks with no material nexus to Israeli state or military technology ecosystems.2 No public evidence identifies any direct licensing, subscription, or integration relationship between PeoplePerHour and Israeli-origin cybersecurity or enterprise software vendors — including Check Point Software Technologies17, Wiz12, SentinelOne15, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks — for its own internal infrastructure. The prior research available to this audit explicitly concedes that “there is no definitive open-source evidence confirming that PPH uses Check Point, Palo Alto Networks, or CyberArk for its internal network.”2
The most significant documented vendor relationship with Israeli-origin corporate roots is PeoplePerHour’s payout partnership with Payoneer. PeoplePerHour selected Payoneer as its payouts services provider for its global freelance network, as reported in trade press and confirmed by a PeoplePerHour support article.678 The PRWeb press release URL slug (prweb12713427) is consistent with a mid-2015 publication date, indicating this is a long-standing operational dependency rather than a recent procurement decision.8
Payoneer’s corporate profile is relevant to this audit:
The PeoplePerHour Terms and Conditions reference data sharing with third-party payment service providers.5 Whether Payoneer is specifically named in current Terms has not been live-verified for this audit. A prior research claim that PPH issued a co-branded “PeoplePerHour Payoneer Prepaid MasterCard” has not been independently confirmed and is treated as unverified pending live check.6
Freelance job postings on the PeoplePerHour marketplace have referenced Snyk code-security tooling.23 Snyk was co-founded by Guy Podjarny (Israeli-born) and others, incorporated in the UK.16 However, the evidence — job postings by third-party buyers seeking freelancers with Snyk skills — reflects buyer demand on the marketplace, not internal PPH procurement. No public evidence establishes that PeoplePerHour itself uses Snyk for its own code security. This conflation of platform-hosted postings with internal vendor selection is a material analytical error and this finding is accordingly discarded pending live verification.
No public evidence identified of PeoplePerHour engaging Publicis Sapient, Wipro, Infosys, Accenture, or any comparable large systems integrator known to mandate Israeli-origin technology in its delivery stacks. PeoplePerHour appears to have relied on internal engineering teams and its own marketplace for development work.210
PeoplePerHour operates a Know Your Customer (KYC) / identity verification (IDV) workflow requiring users to submit government-issued identification and, in some implementations, a biometric liveness check (selfie or live video capture).21 User community posts and platform support documentation confirm that IDV is a standard part of the account verification process.2122
The specific third-party IDV vendor contracted by PeoplePerHour is not publicly disclosed. The PeoplePerHour Privacy Policy references “Third Party Due Diligence Providers” without naming them.4 This gap is material: the identity of the IDV vendor determines whether any Israeli-origin facial recognition, biometric matching, or document authentication technology is embedded in the user onboarding flow.
Freelance job postings on the PeoplePerHour marketplace reference IDV tools including Veriff (Estonian) and Onfido (UK, acquired by Entrust).22 As with the Snyk finding above, this reflects buyer demand for freelancers with expertise in these tools and does not establish internal PPH procurement of any specific IDV vendor.
No public evidence identified of PeoplePerHour using Israeli-origin predictive analytics, sentiment analysis, social media monitoring (e.g., Verint, NICE systems), or workforce surveillance tools internally. No public evidence identified of Israeli-origin surveillance or biometric technology reaching PeoplePerHour indirectly via managed security services or bundled enterprise suites.
PeoplePerHour has been reported to use Amazon Web Services (AWS) and Google Cloud Platform (GCP) for its infrastructure.10 This claim has not been live-verified for this audit via infrastructure scanning tools (BuiltWith, Wappalyzer, Shodan); the cited secondary source (Tracxn) is a data aggregator that may carry stale information.10
If the AWS and GCP relationship is accurate, the Project Nimbus context is relevant:
il-central-1 (Israel) region or equivalent Google Cloud Israel region for any workload. Given UK incorporation and GDPR obligations, EU/UK regions (eu-west-2 London, eu-west-1 Ireland) are the structurally expected data residency locations for PeoplePerHour’s user data.45No public evidence identified of PeoplePerHour operating, leasing, or co-locating data centre infrastructure within Israel.2
No public evidence identified of PeoplePerHour participating in Project Nimbus or any Israeli state-backed digital infrastructure programme. PeoplePerHour is not a cloud services provider; it is a marketplace platform and commercial cloud customer. It does not market, contract, or deliver data sovereignty, data residency, or infrastructure resilience services to any state institution.25
No public evidence identified of any contract, partnership, or service agreement between PeoplePerHour and the Israeli Ministry of Defence, Israel Defence Forces (IDF), any Israeli intelligence agency (including Unit 8200, Mossad, Shin Bet), or other Israeli state security body.2
No public evidence identified of PeoplePerHour’s commercially available technology — its freelance marketplace platform, matching algorithms, or payment infrastructure — being deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied Palestinian territories.
No public evidence identified. PeoplePerHour is a freelance labour marketplace; it does not develop, sell, license, or maintain offensive cyber capabilities, zero-day exploit tools, digital weapons systems, or signals intelligence infrastructure.25
The prior research available to this audit speculated that a potential acquisition of PeoplePerHour by Toptal (see Technology Ecosystem section below) would introduce “Unit 8200 software” into PeoplePerHour’s stack. This inference has no evidentiary basis: no public documentation of Toptal’s internal security vendor choices is available,19 and extrapolation from a prospective corporate restructuring to a specific intelligence-origin software deployment is speculative. This claim is discarded as analytical overreach unsupported by evidence.
PeoplePerHour has developed and deployed AI-assisted matching and search features within its marketplace platform, consistent with industry norms for freelance and gig-economy platforms.2 These are standard commercial recommender and ranking systems designed to match freelancers to job postings. No Israeli state or military application has been identified or documented.2
No public evidence identified of PeoplePerHour providing AI, machine learning, computer vision, or autonomous decision-support systems to Israeli state, military, or security bodies.2
No public evidence identified of PeoplePerHour’s AI models being trained on civilian population data, intercepted communications, surveillance-derived datasets, or data originating from Israeli military or intelligence operations, occupied territories, or Israeli state surveillance infrastructure.4
No public evidence identified. Not applicable to PeoplePerHour’s business domain. PeoplePerHour operates exclusively as a digital labour marketplace and has no product line, subsidiary, or joint venture with any nexus to autonomous weapons, drone technology, or lethal decision-support systems.2
No public evidence identified of PeoplePerHour operating any research and development facility, engineering office, innovation lab, or accelerator programme within Israel.2 PeoplePerHour’s primary engineering and development hub is documented as Athens, Greece.2
No public evidence identified of PeoplePerHour acquiring any Israeli-origin technology company or making strategic investments in Israeli technology startups or venture funds.2 PeoplePerHour has historically been the target of investment rather than an acquirer.910
Index Ventures led or participated in PeoplePerHour’s funding rounds, including a Series A in approximately 2012 (~£2 million / ~$3.2 million).9 As of the 2024–2025 period, Index Ventures remained listed as an institutional investor in PeoplePerHour alongside FJ Labs.10
Index Ventures is a European and US venture capital firm headquartered in London and San Francisco.11 Its portfolio includes Israeli-founded or Israeli-rooted companies of note in the cybersecurity and cloud security space:
Critical analytical distinction: Receiving investment capital from Index Ventures does not constitute a technology licensing, procurement, integration, or operational relationship with any Israeli firm in the Index Ventures portfolio. Index Ventures is a financial intermediary. Shared investors do not create technology dependencies, data flows, or operational linkages between portfolio companies. No evidence establishes that PeoplePerHour has any commercial, technical, or contractual relationship with Wiz, Adallom, SentinelOne, or any other Israeli-origin firm in the Index Ventures portfolio.11
The prior research available to this audit references Companies House filings from November 2025 indicating a significant corporate restructuring:1
These filings are structurally plausible and verifiable at the Companies House filing history URL.1 However, they were not live-retrieved during this audit session. The reference to Taso Du Val specifically links the restructuring to Toptal, a US-headquartered freelance platform. Toptal’s internal technology stack and vendor relationships are not publicly documented in sufficient detail to confirm or deny use of Israeli-origin security tools.19 No inference regarding technology transfer or vendor adoption arising from this restructuring is supported by available evidence.
No public evidence identified of significant patent portfolios, licensing agreements, or co-development arrangements between PeoplePerHour and Israeli-domiciled entities, Israeli universities (Technion, Hebrew University, Weizmann Institute), or Israeli government research institutions.2
No public evidence identified of any published NGO investigation, academic study, or United Nations report specifically addressing PeoplePerHour’s technology relationships with the Israeli state, its operations in or proximate to occupied Palestinian territories, or the use of its platform as labour infrastructure by Israeli state entities. Source classes examined: BDS Movement published reports, Who Profits Research Center database, Amnesty International technology investigations, Human Rights Watch technology reports.2
No public evidence identified of PeoplePerHour being the subject of any organised boycott, divestment, or sanctions (BDS) campaign specifically related to technology provision to Israeli state entities or corporate relationships with the Israeli defence sector.2
PeoplePerHour does not appear in the Who Profits Research Center’s database of companies documented as profiting from Israeli settlements or the military occupation of Palestinian territories, based on training knowledge of that database’s documented scope and major entries. Live verification of current database listings would be required to confirm this absence with certainty.
No public evidence identified of regulatory inquiries, legal challenges, export control actions, or sanctions-related investigations involving PeoplePerHour’s technology sales or services to Israeli state entities.2
PeoplePerHour has received regulatory attention in the UK in the context of platform worker classification and gig economy labour law — specifically around the employment status of freelancers using its platform. This regulatory history is outside the V-DIG domain and does not implicate technology transfer, surveillance infrastructure, or defence sector relationships.2
The absence of public disclosure of PeoplePerHour’s KYC/IDV vendor represents a genuine transparency gap with civil society relevance.4 KYC/IDV platforms — depending on vendor selection — may involve biometric data processing, facial geometry extraction, and document data retention by third parties with their own data-sharing and law enforcement disclosure frameworks. The Privacy Policy’s reference to unnamed “Third Party Due Diligence Providers”4 does not enable civil society, regulators, or users to assess whether any Israeli-origin biometric technology processes the personal data of PeoplePerHour’s freelance workforce, which the prior research notes includes significant populations in jurisdictions subject to Israeli military operations and occupation. This gap is an evidence gap, not an affirmative finding of problematic vendor selection.
https://find-and-update.company-information.service.gov.uk/company/06369697/filing-history ↩↩
https://en.wikipedia.org/wiki/PeoplePerHour ↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩
https://support.peopleperhour.com/hc/en-us/articles/205601177-PPH-partners-with-Payoneer ↩↩
https://thepaypers.com/payments/news/peopleperhour-selects-payoneer-for-payouts-services-to-freelancers ↩
https://www.prweb.com/releases/peopleperhour_selects_payoneer_for_quick_and_cost_efficient_payouts_to_their_global_freelance_network/prweb12713427.htm ↩↩
https://growthbusiness.co.uk/peopleperhour-gets-index-ventures-topup-and-hires-former-skype-and-gumtree-heads-8913/ ↩↩
https://tracxn.com/d/companies/peopleperhour/__XGmGvM6LDC48D18u8fuF8sXDeFckOQGTmCSZo8PRXfQ ↩↩↩↩↩
https://en.wikipedia.org/wiki/Adallom ↩
https://blogs.microsoft.com/blog/2015/09/08/microsoft-acquires-adallom-to-advance-identity-and-access-management-to-the-cloud/ ↩
https://snyk.io/about/ ↩
https://en.wikipedia.org/wiki/Check_Point ↩
https://regulaforensics.com/blog/freelancer-id-verification/ ↩
https://support.peopleperhour.com/hc/en-us/community/posts/215675567-Identity-verification ↩↩
https://www.peopleperhour.com/freelance-cyber-security-jobs ↩
