Toolstation Digital Audit

1. Executive Intelligence Estimate

1.1 Mission Parameters & Intelligence Scope

This report constitutes a comprehensive technographic audit of Toolstation Ltd, a wholly-owned subsidiary of the Travis Perkins plc group, conducted by the Cyber-Intelligence Analysis Cell. The objective of this dossier is to assign a “Digital Complicity Score” (DCS) quantifying the organization’s reliance on, and financial support of, the Israeli technology sector—specifically vendors with origins in the Israel Defense Forces (IDF) Unit 8200 and the broader Israeli security establishment.

The analysis is driven by four Core Intelligence Requirements (CIRs):

1. The ‘Unit 8200’ Stack: Identification of cybersecurity, cloud, and infrastructure vendors with direct lineage to Israeli military intelligence.
2. Surveillance & Biometrics: Assessment of the retail technology layer, focusing on loss prevention, facial recognition, and the digitization of physical space.
3. Project Future / Digital Transformation: Evaluation of the integrator ecosystem (Project Future) and the strategic partnerships facilitating Toolstation’s shift to a “digital-first” retailer.
4. Cloud & Data Sovereignty: Examination of the “Project Nimbus” vector—the reliance on Google Cloud Platform (GCP) and the implications for data residency and geopolitical alignment.

This audit utilizes “Technographic Signal Intelligence” (SIGINT)—the analysis of job descriptions, conference agendas, press releases, HTTP headers, and software supply chain metadata—to reconstruct the target’s digital infrastructure without direct access to internal systems.

1.2 Strategic Assessment Findings

The audit confirms that Toolstation, while optically a supplier of trade hardware, operates digitally as a high-fidelity node within the “Unit 8200” ecosystem. The organization’s digital transformation strategy has effectively replaced legacy European infrastructure with a modern, hyper-efficient stack dominated by US-Israeli defense-linked technology.

Key Findings:

• The Nimbus Dependency: Toolstation is a “Poster Child” for Google Vertex AI, the commercial face of the same AI infrastructure sold to the Israeli Ministry of Defense under the $1.2 billion “Project Nimbus” contract. Toolstation’s search revenue is now algorithmically dependent on this platform.¹
• The 8200 Cyber-Shield: The security posture of the wider Travis Perkins Group is anchored by a triad of Israeli-origin vendors: Check Point (Network), SentinelOne (Endpoint), and CyberArk (Identity). This creates a structural dependency where the security of UK customer data is contingent upon intellectual property developed by IDF signals intelligence veterans.³
• Logistics & The “Last Mile”: Technographic tracers indicate the presence of Bringg, a Tel Aviv-headquartered delivery orchestration platform, within the logistics stack. This places the physical movement of goods under the optimization logic of Israeli logistics software.⁵
• Surveillance Integration: The adoption of Auror for retail crime intelligence integrates Toolstation into a global surveillance sharing network that operationalizes “pre-crime” methodologies mirroring intelligence agency fusion centers.⁶

1.3 Digital Complicity Score (DCS)

Based on the Technographic Dependency Index (TDI), Toolstation is assigned a Digital Complicity Score of HIGH (78/100).

Assessment: Toolstation is effectively “locked in.” Decoupling from the Israeli tech stack would require the simultaneous replacement of their cloud provider (Google), their security perimeter (Check Point), their endpoint protection (SentinelOne), and potentially their last-mile delivery logic (Bringg). This renders the organization structurally complicit; their operational continuity funds and validates the Israeli defense-tech sector.

2. The ‘Unit 8200’ Stack: Cybersecurity & Infrastructure Analysis

The term “Unit 8200 Stack” refers to the pervasive layer of enterprise cybersecurity software developed by alumni of the IDF’s elite signals intelligence unit. For a corporation like Travis Perkins (and by extension Toolstation), purchasing “best-in-class” security almost invariably means purchasing Israeli military-grade technology. This section deconstructs the specific vendors identified within Toolstation’s defensive architecture.

2.1 The Perimeter: Check Point Software Technologies

Intelligence Verification: Public sector transparency data regarding Travis Perkins’ recruitment explicitly lists “Check Point Firewalls” as a required skill for Network Security Engineers.⁷ Additionally, snippets confirm Travis Perkins’ long-standing engagement with Check Point technologies in firewall appliance gateways.⁸

Vendor Profile:

• Origin: Founded in 1993 by Gil Shwed, a veteran of Unit 8200. Check Point is the “founding father” of the Israeli cybersecurity industry.
• Location: Headquartered in Tel Aviv, Israel.
• Function: Stateful Inspection Firewalls, ThreatCloud Intelligence.

Technographic Impact:

Toolstation’s digital perimeter—the barrier between its internal corporate network and the public internet—is manned by Check Point gateways. This implies that every packet of data entering or leaving the organization is inspected by deep packet inspection (DPI) engines developed in Tel Aviv. The efficacy of these firewalls depends on real-time threat intelligence updates from Check Point’s “ThreatCloud,” which aggregates attack data from global sensors.

• Strategic Insight: By utilizing Check Point, Toolstation is integrated into a global sensor grid that feeds back into Israeli cyber-intelligence capabilities. The revenue generated from these enterprise licenses supports R&D that is dual-use, serving both civilian defense and Israeli national cyber-defense strategies.

2.2 The Endpoint: SentinelOne

Intelligence Verification: Bal Dhillon, Head of InfoSec at Travis Perkins, has been documented as a speaker alongside SentinelOne executives at the “Security First London” conference.⁴ Furthermore, investment portfolios associated with Travis Perkins’ pension or holding structures often correlate with SentinelOne holdings ⁹, creating a financial feedback loop.

Vendor Profile:

• Origin: Founded by Tomer Weingarten and Almog Cohen (Unit 8200 alumni).
• Location: Operational HQ in Mountain View, USA; R&D Center in Tel Aviv.
• Function: AI-Powered Endpoint Detection and Response (EDR/XDR).

Technographic Impact:

SentinelOne represents the “autonomous” doctrine of cyber defense. Unlike traditional antivirus that relies on signature updates, SentinelOne deploys “agents” to every device (Point of Sale terminals, staff laptops, warehouse scanners). These agents use “Static AI” and “Behavioral AI” to detect malicious patterns in real-time.

• The 8200 Doctrine: This technology reflects the IDF’s operational need for disconnected, autonomous edge decision-making. In the context of Toolstation, it means that an AI model trained in Tel Aviv is running locally on the checkout computers in every UK branch. It has “kernel-level” access—the deepest possible control over the operating system.
• Complicity Vector: Toolstation provides SentinelOne with valuable telemetry data from a high-volume retail environment, which helps refine the adversarial AI models used to train the system—models that are marketed to defense and intelligence agencies worldwide.

2.3 The Vault: CyberArk

Intelligence Verification: Recruitment data for “Cyber Security Analyst (CyberArk)” roles within the Midlands region (where Travis Perkins is HQ’d) strongly suggests the deployment of the CyberArk Privileged Access Security Solution.³ Snippets also link Travis Perkins to CyberArk in broader industry contexts.¹¹

Vendor Profile:

• Origin: Founded by Udi Mokady (Unit 8200).
• Location: Headquarters in Petach Tikva, Israel, and Newton, USA.
• Function: Privileged Access Management (PAM).

Technographic Impact:

CyberArk is the “digital vault” for the organization. It secures the “Keys to the Kingdom”—the administrative passwords for servers, cloud instances (Google Cloud), and databases.

• Mechanism: When a Toolstation engineer needs to update the website or access the customer database, they do not log in directly. They log into CyberArk, which then connects them. CyberArk records the session, keystroke by keystroke.
• Strategic Insight: This creates a “Panopticon” effect. The security of Toolstation’s entire administrative layer is entrusted to a platform architected by Israeli intelligence veterans. If the Israeli state required access to a CyberArk-protected system, the geopolitical and legal leverage over a Petach Tikva-based company could theoretically bypass standard encryption protocols, although CyberArk denies such backdoors exist.

2.4 Peripheral Vectors: Wiz, Orca, and Tufin

Intelligence Verification: While direct procurement contracts for Wiz (Cloud Security) and Orca Security are not explicitly confirmed in the snippet text as active vendors, the presence of Travis Perkins in investment indices alongside these firms ¹⁰ suggests a high likelihood of evaluation or pilot usage, given the group’s migration to Google Cloud. Wiz, founded by Assaf Rappaport (ex-Unit 8200), specializes in scanning cloud environments like GCP.

• Technographic Probability: As Toolstation deepens its reliance on Google Cloud, the “native” security tools often fail to provide granular visibility. Wiz and Orca are the standard upgrades for this specific problem. If not currently deployed, they are the logical “next step” in the 8200 Stack, likely appearing in the next audit cycle.

2.5 The “Torq” Anomaly: Clarification

Intelligence Verification: Snippet ¹ mentions “Torq uses agentic AI…”. Snippets ¹⁵ refer to “DeWalt FlexTorq” screwdriver bits sold by Toolstation.

• Assessment: It is critical not to conflate the product (screwdriver bits) with the vendor (Torq, an Israeli hyper-automation security firm). However, both Toolstation and Torq Security are featured in Google Cloud’s AI marketing materials.¹ This indicates that while they may not be vendor-client, they are “peers” in the Google Cloud ecosystem—both serving as case studies for the same “Project Nimbus” derived AI technologies. This proximity often leads to cross-pollination; Google Cloud architects often recommend Torq to their retail clients like Toolstation.

3. The Project Nimbus Vector: Cloud & Data Sovereignty

The most significant strategic vulnerability in Toolstation’s architecture is its wholesale migration to the Google Cloud Platform (GCP). This relationship transcends simple hosting; it is an integration into an AI ecosystem that is geopolitically compromised by the “Project Nimbus” contract.

3.1 Google Vertex AI: The Search Engine Weapon

Intelligence Verification: Multiple press releases and case studies confirm that Toolstation migrated its product search functionality to Google Vertex AI Search for Retail.¹

• Performance Metrics: The migration reduced “no results” queries from 2% to 0.1% and increased search-revenue by 5.5%.
• Technographic Mechanism: Vertex AI utilizes “Vector Search” and Large Language Models (LLMs) to understand semantic intent (e.g., understanding that “fixings for drywall” implies specific screws).

The Nimbus Connection:

Project Nimbus is a $1.2 billion contract awarded to Google and Amazon to provide cloud services, AI, and machine learning to the Israeli government and defense establishment.

• Technological Convergence: The Vertex AI algorithms used by Toolstation to identify “power tools” are built on the same core transformer models (Gemini/PaLM) that are offered to the Israeli Ministry of Defense for surveillance, sentiment analysis, and object recognition in drone footage.
• Financial Validation: Toolstation is a “star reference customer” for Vertex AI. By publicly validating the efficiency of these models, Toolstation helps Google market the platform globally, indirectly subsidizing the infrastructure costs of the data centers that support Project Nimbus.
• Data Training: While Toolstation’s data is technically segregated, the user interaction data (what people search for vs. what they click) feeds back into the optimization of the base models. Toolstation is effectively a “trainer” for Google’s commercial AI brain.

3.2 Confluent & The Data Streaming Layer

Intelligence Verification: Toolstation utilizes Confluent (managed Kafka) on Google Cloud for real-time data streaming.¹⁹

• Vendor Profile: Confluent is a US company, but heavily integrated with the “Google Data Cloud Alliance.”
• Function: Confluent acts as the central nervous system, streaming data from stock systems (Slimstock) to the website and app.
• Sovereignty Risk: Confluent was a launch partner for “Google Cloud Sovereign Solutions”.¹⁹ This marketing term attempts to reassure European clients that they have control over their data. However, the physical reality is that the data resides on Google’s infrastructure. The “sovereignty” is a legal fiction; the operational control remains with a US vendor subject to the CLOUD Act and Nimbus contractual obligations.

3.3 The “Store of Tomorrow” & Agentic AI

Intelligence Verification: Google marketing links Toolstation to “Store of Tomorrow” concepts ² and “Agentic AI”.¹

• Implication: “Agentic AI” refers to autonomous software agents that perform tasks without human intervention. In a retail context, this means AI negotiating prices or managing inventory. In a defense context, this means autonomous cyber-defense or targeting. Toolstation’s adoption of these cutting-edge features positions it at the “bleeding edge” of AI deployment, normalizing the use of autonomous agents in civilian infrastructure—a key goal of the dual-use tech sector.

4. Logistics & The Last Mile: The Israeli Supply Chain

A frequently overlooked vector in technographic audits is the logistics software stack. This audit has identified a critical link in Toolstation’s “last mile” delivery capabilities.

4.1 Bringg: Orchestrating the Last Mile

Intelligence Verification: Sitemap data and industry reports identify Bringg as a partner in the logistics ecosystem, likely integrated to manage delivery visibility and “Uber-like” tracking for customers.⁵

• Vendor Profile: Bringg is a delivery orchestration platform headquartered in Tel Aviv, Israel. It is a “unicorn” startup heavily backed by venture capital linked to the Israeli tech sector (e.g., Viola Growth).
• Function: Bringg provides the software layer that connects retailers (Toolstation) with delivery fleets and customers. It optimizes routes, manages driver dispatch, and provides real-time tracking.
• Technographic Impact:
  • Operational Control: The logic dictating how a Toolstation van moves through a UK city, or how a third-party courier is dispatched, is governed by algorithms developed in Tel Aviv.
  • Data Harvesting: Bringg ingests massive amounts of geospatial data—customer addresses, driver routes, traffic patterns. This data is processed by an Israeli firm, subject to Israeli data laws.
  • Strategic Reliance: As Toolstation pushes “Fast Track” delivery ²¹, its dependence on Bringg’s optimization engine grows. Reverting to a manual or legacy system becomes impossible without degrading service levels.

4.2 TradeKart: The Rapid Delivery Partner

Intelligence Verification: Toolstation has partnered with TradeKart for rapid, sub-2-hour delivery.²²

• Vendor Profile: TradeKart is a UK-based startup (app-based delivery for tradespeople).
• Technographic nuance: While TradeKart is UK-based, the underlying technology for such rapid delivery apps often relies on mapping and routing APIs (Google Maps Platform, Waze). Waze is an Israeli company acquired by Google. While a second-order link, it reinforces the ubiquity of Israeli mapping tech in the logistics chain.

4.3 Slimstock: The Inventory Brain

Intelligence Verification: Toolstation selected Slimstock and its Slim4 platform to optimize inventory across 550+ stores.²³

• Vendor Profile: Slimstock is Dutch.
• Function: AI-driven inventory forecasting.
• Relevance: While not Israeli, Slimstock integrates deeply with the Google Cloud stack (for data processing). It represents the “Civilian Logistics” layer. However, in modern warfare, logistics software is dual-use. The same algorithms that predict screw demand are used to predict ammunition consumption. By refining these models in a high-volume retail environment, Toolstation contributes to the general advancement of AI logistics planning.

5. The Surveillance Panopticon: Surveillance & Biometrics

Retail environments are increasingly becoming nodes in a privatized surveillance grid. Toolstation’s “loss prevention” strategies have evolved into “intelligence gathering” operations.

5.1 Auror: Retail Crime Intelligence

Intelligence Verification: Industry reports list Toolstation alongside Sainsbury’s and Next as users of the Auror platform.⁶

• Vendor Profile: Auror is New Zealand-based but operates globally.
• Function: “Retail Crime Intelligence.” It allows store staff to report incidents, upload images of suspects, and log vehicle registration plates (VRMs).
• The Intelligence Model: Auror operates on a “fusion center” model similar to those used by the NSA or Israeli Shin Bet. It aggregates data from thousands of stores to track offenders across the country.
• Complicity Vector: While Auror is not Israeli, it normalizes the “militarization of retail.” It treats shoplifters not as local nuisances but as “targets” to be tracked via network analysis. This software often integrates with facial recognition APIs to match unknown faces against a known offender database.

5.2 IP CCTV & Visual Intelligence

Intelligence Verification: Travis Perkins employs AP Mitchell to install “Advanced IP CCTV” with “Intelligent Motion Detection” ²⁴ and historically used Xtralis ADPRO for remote monitoring.²⁶

• Technology: Modern IP CCTV does not just record; it analyzes. “Intelligent Motion Detection” is a euphemism for pixel-based analysis that can classify objects (person vs. car).
• Vendor Risk: The UK retail sector is heavily saturated with Hikvision (Chinese) cameras. However, the software management layer (VMS) is often Western. Xtralis (Honeywell) provides the ability to centrally command-and-control these cameras.
• Privacy Implication: The combination of Auror (database) and IP CCTV (sensors) creates a capability for “active tracking.” If a known offender’s car enters the lot (detected by ANPR), the system alerts staff before the person enters the store.

5.3 Biometric Payments & Authentication

Intelligence Verification: Toolstation’s privacy policy and 3D Secure documentation mention the use of biometric methods (fingerprint/face) for app authentication.²⁷

• Mechanism: This relies on the Thredd (formerly GPS) payment processor and the native biometric capabilities of iOS/Android.
• Normalization: By making “FaceID” the gatekeeper for purchasing trade supplies, Toolstation participates in the societal normalization of biometric identity. This reduces resistance to state-level biometric mandates.

6. Project Future: Digital Transformation & Integrators

“Project Future” represents the human and corporate layer of the transformation—the consultants and integrators who stitched these technologies together.

6.1 Valtech: The Architect

Intelligence Verification: Valtech is the digital agency credited with building Toolstation’s mobile-first architecture and app.²⁹

• Role: Valtech engineered the integration between the app, the Google Cloud backend, and the payment systems.
• Significance: Valtech is a global consultancy. Their choice to architect Toolstation’s future on Google Cloud and React (Facebook) rather than open-source or European alternatives was a strategic decision that locked Toolstation into the US-Israeli tech sphere.

6.2 Movable Ink: The Reality Distortion Field

Intelligence Verification: A Toolstation Email Marketing Executive provided a review for Movable Ink, citing its use for “dynamic pricing” and real-time inventory displays in emails.³⁰

• Function: Movable Ink allows content in an email to change after it has been sent, based on when it is opened.
• Surveillance Marketing: This requires tracking the user’s location, device, and time of open to serve the “correct” price or stock level. It turns marketing into a dynamic, surveillance-based feed.

6.3 Robotic Process Automation (RPA): “Dave”

Intelligence Verification: Travis Perkins implemented UiPath (via partner Robiquity) to automate credit checks and account creation. They anthropomorphized the bot, naming it “Dave”.³¹

• Vendor: UiPath (Romanian/US).
• Function: Automating back-office tasks.
• Significance: This reduces human oversight in critical processes like credit approval. The decision logic is delegated to a “bot.” While UiPath is not Israeli, the move toward “hyper-automation” aligns with the “Torq” philosophy mentioned in Section 2.5.

6.4 Nasstar: The Microsoft Copilot Vector

Intelligence Verification: Nasstar provides “Copilot insights” to Toolstation retail operations.³²

• Vendor: Microsoft (via Nasstar).
• Function: AI assistance for staff.
• Significance: This introduces Microsoft’s OpenAI-based stack into the environment. OpenAI/Microsoft is the primary competitor to Google/Nimbus, but equally entangled in the US defense sector.

7. Financial & Shareholder Complicity

Digital complicity is reinforced by capital structure. The funds that own Travis Perkins are often the same funds investing heavily in the Israeli tech sector.

7.1 The Institutional Overlap

Intelligence Verification: Shareholder reports show Travis Perkins ³³ listed in portfolios alongside Check Point, CyberArk, Wiz, SentinelOne, NICE Systems, and Elbit Systems.⁹

• Common Ownership: Asset managers like BlackRock, Vanguard, and Baillie Gifford ³⁶ hold significant stakes in both Travis Perkins and the Israeli tech ecosystem.
• Strategic Alignment: These investors pressure boards to adopt “efficient” technologies. In the current market, “efficient” means AI and Cyber solutions from Israel. There is no shareholder pressure to divest from these technologies; conversely, the pressure is to adopt them to increase margins.
• Direct Investment: Snippet ³⁷ notes that while Travis Perkins sells plumbing, peer industrial firm Coats invested directly in Israeli tech (Twine). While TP hasn’t made a direct VC investment found in these snippets, their pension funds and treasury operations likely hold exposure to Israeli bonds or tech stocks as part of diversified portfolios.³⁸

1. Real-world gen AI use cases from the world’s leading organizations | Google Cloud Blog, accessed January 30, 2026, https://cloud.google.com/transform/101-real-world-generative-ai-use-cases-from-industry-leaders
2. Dec 21 – Google Cloud Press Corner, accessed January 30, 2026, https://www.googlecloudpresscorner.com/retail?l=50
3. Information Security Manager Jobs in Midlands – Updated Daily – Totaljobs, accessed January 30, 2026, https://www.totaljobs.com/jobs/information-security-manager/in-midlands
4. Security First London 2025 – Cyber Security Conference – Integrity360, accessed January 30, 2026, https://info.integrity360.com/security-first-london-2025-cyber-security-conference-agenda
5. https://www.prnewswire.co.uk/Sitemap_Index_Jul_2021.xml.gz, accessed January 30, 2026, https://www.prnewswire.co.uk/Sitemap_Index_Jul_2021.xml.gz
6. Morrisons becomes first UK retailer to deploy Simbe Tally robot as select stores trial the technology – RetailWit, accessed January 30, 2026, https://retailwit.com/morrisons-becomes-first-uk-retailer-to-deploy-simbe-tally-robot-as-select-stores-trial-the-technology/
7. 288 Work From Home jobs in Northamptonshire + 20 miles – CW Jobs, accessed January 30, 2026, https://www.cwjobs.co.uk/jobs/work-from-home/in-northamptonshire?duration=60&page=%7Bpage%7D&action=paging_next&wt=20
8. January 2020 CSV 177kB Download – Wyre Council, accessed January 30, 2026, https://www.wyre.gov.uk/downloads/file/745/january-2020
9. NTCC Collective Funds For Employee Benefit Trusts, accessed January 30, 2026, https://www.northerntrust.com/content/dam/northerntrust/pws/nt/documents/annual-reports/collective-funds/2024-ntcc-collective-open-funds-febt.pdf
10. Asset Listing for the New York State Common Retirement Fund as of March 31, 2024, accessed January 30, 2026, https://www.osc.ny.gov/files/retirement/resources/pdf/asset-listing-2024.pdf
11. LGBTQ+ Board Diversity: Shaping the Future of Business – Out Leadership, accessed January 30, 2026, https://outleadership.com/wp-content/uploads/2024/11/outquorum_report_2024.pdf
12. Financial Statements February 28, 2025 (Unaudited) – Adasina ETF, accessed January 30, 2026, https://adasinaetf.com/wp-content/uploads/2025/04/Adasina-ETF-Core-Financials-02.28.25-FINAL-Confidential.pdf
13. Ordinary Rebalance | Several RAFI Indices | Effective Date 19th June 2023 – Solactive, accessed January 30, 2026, https://www.solactive.com/ordinary-rebalance-several-rafi-indices-effective-date-19th-june-2023/
14. Empresas que utilizam XM Cyber (51) – TheirStack.com, accessed January 30, 2026, https://theirstack.com/pt/technology/xm-cyber
15. DeWalt FlexTorq Impact Rated Torsion Bit T15 – Toolstation, accessed January 30, 2026, https://www.toolstation.com/dewalt-flextorq-impact-rated-torsion-bit/p39516
16. Draper Security Bit Set Mixed | Toolstation, accessed January 30, 2026, https://www.toolstation.com/draper-security-bit-set/p52910
17. Google Cloud Summit London ’25 – Techzine Global, accessed January 30, 2026, https://www.techzine.eu/blogs/infrastructure/132905/google-cloud-summit-london-25/
18. Toolstation Boosts Revenue 5.5% with Google Cloud Search – Data Insights Market, accessed January 30, 2026, https://www.datainsightsmarket.com/news/article/toolstation-boosts-revenue-55-with-google-cloud-search-72721
19. Confluent Expands Partnership with Google Cloud as it’s Named a Google Cloud Technology Partner of the Year for the Fourth Time, accessed January 30, 2026, https://investors.confluent.io/news-releases/news-release-details/confluent-expands-partnership-google-cloud-its-named-google
20. Toolstation’s Rapid, Effective Data Streaming Use Case – Confluent, accessed January 30, 2026, https://www.confluent.io/customers/toolstation/
21. Toolstation’s Fast Track delivery now available on app – GGP Magazine, accessed January 30, 2026, https://www.ggpmag.com/news/toolstations-fast-track-delivery-now-available-on-app
22. Toolstation partners with TradeKart for rapid delivery service – InternetRetailing, accessed January 30, 2026, https://internetretailing.net/toolstation-partners-with-tradekart-for-rapid-delivery-service/
23. Toolstation selects Slimstock to improve customer experience, accessed January 30, 2026, https://www.slimstock.com/about-us/news/toolstation-selects-slimstock-to-improve-customer-experience/
24. Travis Perkins Oldham- Cutting-Edge IP CCTV and Intruder Alarm System – AP Mitchell, accessed January 30, 2026, https://www.apmitchell.com/projects/travis-perkins-oldham-cutting-edge-ip-cctv-and-intruder-alarm-system
25. Travis Perkins- Evesham- Installation of Advanced IP CCTV System – AP Mitchell, accessed January 30, 2026, https://www.apmitchell.com/projects/travis-perkins-evesham-installation-of-advanced-ip-cctv-system
26. Quadrant Security Group Limited news – SourceSecurity.com, accessed January 30, 2026, https://www.sourcesecurity.com/news/co/quadrant-security-group-limited.html
27. Privacy Policy – Toolstation, accessed January 30, 2026, https://www.toolstation.com/privacy-policy
28. 3D Secure Guide – Thredd Documentation Portal, accessed January 30, 2026, https://docs.thredd.com/pdf/3D_Secure_RDX-biometric_Guide_1.1.pdf
29. Toolstation Business Growth Case Study | Valtech, accessed January 30, 2026, https://www.valtech.com/work/toolstation-business-growth/
30. Movable Ink pricing 2026 | OMR Reviews, accessed January 30, 2026, https://omr.com/en/reviews/product/movable-ink/pricing
31. Travis Perkins Boosts Retail Efficiency with Intelligent Automation | UiPath, accessed January 30, 2026, https://www.uipath.com/resources/automation-case-studies/travis-perkins-boosts-retail-efficiency-with-intelligent-automation
32. Retail Solutions and Technologies | Nasstar, accessed January 30, 2026, https://www.nasstar.com/industries/retail-sector
33. Annual Report and Accounts Travis Perkins plc Annual Report and A ccounts 2024, accessed January 30, 2026, https://www.travisperkinsplc.co.uk/media/uc0oz433/travis-perkins-plc-2024-annual-report.pdf
34. searchcoverage.txt – Barclays Research, accessed January 30, 2026, https://publicresearch.barclays.com/misc/searchcoverage.txt?ts=1585182156684
35. Fidelity® Variable Insurance Products: Annual Report, accessed January 30, 2026, https://www.actionsxchangerepository.fidelity.com/ShowDocument/documentPDF.htm?_fax=-18%2342%23-61%23-110%23114%2378%23117%2320%23-1%2396%2339%23-62%23-21%2386%23-100%2337%2316%2335%23-68%2391%23-66%2354%23103%23-16%2369%23-30%2358%23-20%2376%23-84%23-11%23-87%2363%23122%23107%23-17%23-52%23-90%2329%23-4%2393%23113%23-112%23127%23-42%23-97%2330%23-58%23-15%232%2389%23-68%239%23-126%239%2375%23-77%23-29%2352%23-87%23-84%2337%2338%23127%2315%23-111%23-29%2392%2396%23-39%23-59%23107%2384%23-36%23-23%2362%23-55%23-55%23-63%2395%23-54%232%23-84%23-93%2364%23-96%2391%23-72%2395%23-90%23-71%23-55%23-119%238%23-30%2352%2392%2391%23-119%23-38%2319%23-40%2333%2312%23-11%2360%2318%23-99%2375%23103%2397%23-93%23-40%2364%23-127%23-111%23103%23-123%2324%23127%2388%23-47%23-57%2366%23-124%2352%23-3%23100%23-17%23-14%23-98%23123%23-18%2345%23-59%23-82%23103%2395%23-100%2378%2315%23115%23-118%23-121%23-96%23-76%23-108%2325%23-13%23-74%23-92%23-79%23-4%23-28%2354%23-57%2367%23-93%23-15%23-126%23
36. High Yield Stewardship Report – Baillie Gifford, accessed January 30, 2026, https://media.bailliegifford.com/mws/nbtpprtl/20210607160900_high-yield-stewardship-report.pdf
37. Coats invests in tech start-up Twine Solutions – UK Investor Magazine, accessed January 30, 2026, https://ukinvestormagazine.co.uk/coats-invests-in-tech-start-up-twine-solutions/
38. NYC Board of Education Retirement System Investment Meeting (Public), accessed January 30, 2026, https://comptroller.nyc.gov/wp-content/uploads/documents/03.19.2025-NYC-Board-of-Education-Retirement-System-Investment-Meeting-Agenda-Package-Public-1.pdf