Target Company: Next plc (LSE: NXT)
Audit Phase: V-DIG
Audit Date: 2025-05-01
Jurisdiction of Incorporation: England & Wales (Companies House No. 00230233)2
Primary Business: Fashion, homeware, and third-party brand retail (UK-headquartered, Leicester)
Evidential Note: All live web queries returned null results during the research phase. This audit is compiled from training-data knowledge current to April 2026. No real-time procurement records, post-training corporate filings, or live vendor case studies could be retrieved. Structural evidence gaps arising from Next plc’s non-disclosure of named technology vendors are documented throughout and consolidated in the Evidence Gaps subsection of each relevant section.
Next plc operates a largely proprietary technology function centred at its Leicester headquarters. Its annual reports for FY2023 and FY2024 reference sustained technology investment directed at three principal areas: the Next.com e-commerce platform, warehouse and fulfilment automation, and the LABEL platform (a third-party brand aggregator).1 The company has historically emphasised in-house engineering capability over outsourced or packaged enterprise software, a posture consistent with its decision to commercialise that capability through the Total Platform offering — a white-label retail infrastructure product marketed to wholesale brand partners including Reiss, Laura Ashley, and others.111
Next plc publishes no named technology vendor partnerships in its annual reports, ESG disclosures, investor relations materials, or corporate responsibility pages.125 This is consistent with sector norms for UK retailers but constitutes a structural transparency gap for audit purposes. No Israeli-origin software or security vendor — including Check Point Software, Wiz, SentinelOne, CyberArk, NICE Ltd., Verint Systems, or Claroty — is named in any publicly available Next plc document within the training data corpus.151617182324
Technology role listings on LinkedIn and Glassdoor for Next’s engineering division reference cloud-native tooling, in-house platform engineering, and standard UK retail technology patterns, but no Israeli-origin vendor is named in any job description or skills requirement identified in training data.2627
No publicly named systems integrator (e.g., Accenture, Capgemini, TCS, Infosys) engagement specifying the deployment of Israeli-origin technology within Next’s infrastructure has been identified. No IT outsourcing contract involving an Israeli-domiciled subcontractor has been disclosed or reported in trade press within the training data corpus.286
Next’s Total Platform enables third-party retail brands to operate on Next’s logistics, e-commerce, and technology infrastructure. The specific security, analytics, identity management, and middleware vendors embedded in that platform’s back-end are not publicly disclosed at a level that would permit vendor-origin auditing. This creates an indirect exposure pathway that cannot be ruled in or out on currently available evidence.111
Evidence Gaps: Next plc does not publish a vendor register. Trade press sources (RTIH, Retail Gazette) may hold vendor-specific case studies behind registration barriers not reflected in training data.64 Live procurement databases (UK Government Contracts Finder) could not be queried in real time.14
No public evidence has been identified of Next plc deploying facial recognition, biometric identification, gait analysis, or AI-enhanced behavioural analytics from any vendor — Israeli-origin or otherwise. Specifically, no confirmed relationship with Trigo Vision, AnyVision/Oosto, BriefCam, or Trax Retail has been identified in corporate disclosures, trade press, regulatory filings, or civil society reporting.19202122
Next plc operates an extensive CCTV network across its UK retail estate; this is referenced contextually in British Retail Consortium crime survey data for the sector.7 However, no public disclosure by Next plc identifies the technology provider, hardware vendor, or software analytics layer underpinning its in-store CCTV estate. The identity of any video analytics system — and whether it incorporates AI-enhanced capabilities from any vendor — remains undisclosed.725
The Information Commissioner’s Office Data Protection Register confirms Next Retail Ltd holds a data protection registration consistent with CCTV and customer data processing.6 No biometric data processing is specifically disclosed in the ICO registration entry. No special-category biometric data processing notice or Data Protection Impact Assessment outcome has been published by Next plc within the training data horizon.
No public evidence has been identified of Next plc deploying Israeli-origin workforce surveillance, productivity monitoring, predictive policing, sentiment analysis, or social media intelligence tools in relation to its employees, customers, or supply chain workers.1718
No public evidence has been identified of Israeli-origin surveillance technology reaching Next indirectly through bundled enterprise suites, managed security service providers, or facilities management contracts.
Evidence Gap: The CCTV analytics provider for Next’s retail estate is not publicly disclosed. This gap cannot be resolved without direct vendor disclosure or a regulatory access request. The possibility of indirect deployment of Israeli-origin video analytics (e.g., BriefCam, which is a Canon subsidiary with Israeli engineering roots) via a UK-based managed service provider cannot be excluded on available evidence.21
Next plc’s known data centre footprint is UK-based. Trade press reporting from 2022 noted the company’s plans for expanded UK data centre capacity, specifically to support the scaling of its Total Platform proposition for wholesale brand partners.4 No Israeli co-location, data centre leasing, or cloud peering arrangement has been reported in any source within the training data corpus.
No public evidence has been identified of any participation by Next plc — direct or indirect — in Project Nimbus (the Google–Amazon cloud infrastructure contract with the Israeli government and military)8, or in any comparable Israeli state-backed digital infrastructure programme. Next plc is a private-sector UK retailer; it holds no disclosed government cloud contracting, infrastructure provisioning, or data sovereignty service role in Israel.
Next plc’s annual reports reference cloud-enabled infrastructure investment but do not name specific hyperscaler partners (AWS, Azure, GCP) or confirm whether any workloads run on infrastructure governed by Israeli data residency frameworks or military-accessible sovereign cloud environments.1 No disclosure relevant to Project Nimbus or Israeli data localisation requirements has been identified.
No public evidence has been identified that Next plc markets or contracts data sovereignty, infrastructure resilience, or cloud services to Israeli state institutions, security services, or military bodies. The Total Platform is explicitly marketed to retail brand partners, not government clients.111
Evidence Gap: Next plc does not publicly specify its hyperscaler cloud provider(s) or data residency commitments. Whether any production workloads reside on GCP or AWS infrastructure subject to Project Nimbus access obligations cannot be determined from available public evidence.8
No public evidence has been identified of any contract, partnership, memorandum of understanding, or service agreement between Next plc and the Israeli Ministry of Defence, the Israel Defense Forces (IDF), Shin Bet, Mossad, Unit 8200, or any other Israeli state security or intelligence body. No researcher, official source, or investigative news report in the training data corpus documents any such relationship.1211
No public evidence has been identified of Next plc’s commercial technology — whether its e-commerce platform, logistics systems, Total Platform infrastructure, or any other disclosed product — being deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied Palestinian territories.
Not applicable. Next plc is a fashion and homeware retailer. It has no disclosed cybersecurity product development capability, offensive cyber function, signals intelligence product line, or weapons technology business. No UK export control licence, OGEL, or SIEL relating to Next plc’s technology exports to Israel has been identified in training data.
No public evidence has been identified of Next plc’s technology leadership, advisory board, or vendor partnerships featuring individuals with material ties to Israeli defence intelligence units (e.g., Unit 8200 alumni networks) in a capacity that would constitute an institutional relationship between Next and Israeli state security structures.
Next plc’s publicly disclosed AI and machine learning activity is limited to internal retail operations: e-commerce personalisation and product recommendation, demand forecasting and stock optimisation, and supply chain efficiency modelling.111 These applications are directed at Next’s own commercial operations and — through Total Platform — at its wholesale brand partners. No disclosed AI/ML product is offered to state, security, or military clients.6
No public evidence has been identified of Next plc providing AI models, machine learning infrastructure, computer vision systems, or autonomous decision-support tools to Israeli state, military, or security bodies.
No public evidence has been identified that Next plc’s AI or ML models are trained on, or have been provided access to, civilian population data, intercepted communications, facial recognition datasets, or surveillance-derived data originating from Israel or occupied territories.
Not applicable. Next plc’s disclosed autonomous systems activity is limited to warehouse robotics and logistics automation for retail fulfilment. No lethal autonomous systems, drone technology, or weapons-guidance AI development has been identified or is consistent with Next plc’s disclosed business activities.1
No ICO enforcement action, algorithmic impact assessment publication, or civil society challenge relating to Next plc’s use of AI/ML systems in ways that engage Israeli state interests has been identified.6 Next plc’s Modern Slavery Act statement addresses supply chain labour risks but does not address algorithmic systems.3
No public evidence has been identified of Next plc operating research and development facilities, engineering offices, innovation labs, startup accelerator programmes, or co-working arrangements within Israel. Next plc’s technology and engineering functions are based at its Leicester head office and distributed UK locations, as confirmed by recruitment activity and corporate reporting.12627
No public evidence has been identified of Next plc acquiring an Israeli-origin technology company or making a strategic venture investment in an Israeli technology startup, fund-of-funds, or innovation programme. Next plc’s disclosed acquisitions within the training data period are UK fashion brands: a Reiss brand equity stake, an interest in FatFace, and the Joules brand acquisition in 2022.12 None of these involve Israeli-domiciled technology assets.
No co-filings or licensing arrangements between Next plc and Israeli-domiciled entities — including Technion – Israel Institute of Technology, Hebrew University of Jerusalem, the Weizmann Institute of Science, or Israeli defence-adjacent research institutes — have been identified across EPO Espacenet, USPTO public database, or UK IPO register records within the training data corpus.13
No participation by Next plc in Israel Innovation Authority export schemes, bilateral UK–Israel tech partnership programmes, or BIRD Foundation (Binational Industrial Research and Development) grants has been identified.13
No public evidence has been identified of Next plc participating in the UK–Israel Tech Hub or analogous bilateral innovation initiatives operated through the British Embassy in Tel Aviv or the Department for Business and Trade.
Evidence Gap: Patent co-filing relationships and minority venture investments are not verifiable through live EPO, USPTO, or UK IPO registry search under current research conditions. Pre-seed or angel-level investments by Next corporate ventures would not necessarily appear in public filings at this stage.
No NGO investigation, academic study, UN Special Rapporteur report, or investigative journalism piece specifically addressing Next plc’s technology relationships with the Israeli state, Israeli technology vendors, or operations in occupied territories has been identified in the training data corpus.109
War on Want and similar UK civil society organisations have published retail sector reports addressing Palestinian solidarity campaigns; however, these focus on goods sourcing, brand presence, and financial relationships rather than technology vendor relationships, and Next plc is not identified as a primary technology-sector target in any such publication.10
No organised BDS campaign specifically targeting Next plc on grounds of technology provision to Israeli state entities has been identified in training data.9 Next plc has been mentioned in broader UK consumer boycott discussions relating to product sourcing, but no campaign citing Israeli technology vendor relationships, data infrastructure participation, or AI system provision has been documented. No company response to technology-specific BDS pressure has been identified.10
No regulatory inquiries, legal challenges, export control actions, sanctions-related investigations, or enforcement proceedings involving Next plc’s technology sales, services, or vendor relationships with Israeli state entities have been identified across the following source classes reviewed within training data2614:
DCMS/NCSC joint guidance for the UK retail sector addresses cybersecurity resilience as a sector-wide concern but identifies no Next plc-specific incident, vulnerability disclosure, or vendor-related security event involving Israeli-origin technology.5
Next Retail Ltd’s ICO registration confirms standard data processing activities consistent with a major UK retailer.6 No enforcement notice, monetary penalty, or enforcement undertaking relating to surveillance technology, biometric processing, or cross-border data transfer to Israeli-jurisdiction entities has been identified in ICO public records within training data.
https://www.nextplc.co.uk/investors/annual-reports ↩↩↩↩↩↩↩↩↩↩↩
https://find-and-update.company-information.service.gov.uk/company/00230233 ↩↩↩↩
https://www.nextplc.co.uk/corporate-responsibility/modern-slavery ↩
https://www.retailgazette.co.uk/blog/2022/09/next-plots-major-data-centre-investment/ ↩↩
https://www.ncsc.gov.uk/collection/retail-sector-cyber-guidance ↩
https://www.theguardian.com/technology/2021/oct/12/google-amazon-israel-project-nimbus-military-contract ↩↩
https://waronwant.org/resources/palestinesolidarity-retail ↩↩↩
https://www.londonstockexchange.com/news-article/NXT/preliminary-results/16849079 ↩↩↩↩↩
https://www.nextplc.co.uk/corporate-responsibility/sourcing ↩
https://www.sentinelone.com/customers/ ↩
https://www.cyberark.com/customers/ ↩
https://oosto.com/customers/ ↩
https://traxretail.com/customers/ ↩
https://www.trigo.tech/case-studies ↩
https://www.checkpoint.com/uk/ ↩
https://www.wiz.io/customers ↩
https://www.glassdoor.co.uk/Overview/Working-at-Next-EI_IE3887.11,15.htm ↩↩
https://www.rtih.com/next-plc ↩
