Audit Phase: V-DIG (Digital Forensics / Technology Supply Chain)
Target: Choice Hotels International, Inc.
Research Execution Date: 2026-05-01
Audit Prepared: 2026-05-01
Choice Hotels completed a publicly announced, multi-year 100% migration to Amazon Web Services (AWS), permanently closing its final on-premises data centre in January 2024.123 The migration involved decommissioning more than 3,729 physical servers, retiring over 300 legacy applications, and migrating over 250 active applications to AWS.12 Following the $675 million acquisition of Radisson Hotels Americas in 2022, CIO Brian Kirkland enforced a single-cloud AWS strategy and migrated Radisson’s legacy technology stack directly into the Choice AWS environment.35
Choice Hotels’ core reservation system, choiceEDGE, was rebuilt as a cloud-native AWS application handling all global booking telemetry.4 AWS services deployed include Amazon Managed Service for Prometheus (monitoring approximately 25 million metric series per minute), AWS Distro for OpenTelemetry (ADOT), Amazon OpenSearch Service, and Amazon OpenSearch Ingestion, with a stated 40% cost reduction attributed to this architecture.4 Choice Hotels is entirely reliant on AWS as its sole cloud provider, with no residual on-premises infrastructure.123
Choice Hotels is a documented enterprise customer of Finout, an Israeli-headquartered cloud financial management (FinOps) platform.1011 Finout is headquartered in Tel Aviv, Israel. The company raised a $26.3M Series B in May 2024 and subsequently a $40M Series C, with total funding reaching approximately $85M.101136
Finout’s investor base includes Pitango and Team8 venture capital firms.10 Team8 was co-founded by former commanders of IDF Unit 8200; this connection is documented in multiple public sources. Finout’s stated benefit to Choice Hotels includes high-percentage cost allocation and accelerated response to cloud financial anomalies, though the specific performance metrics cited in Finout’s marketing materials have not been independently verified against a Choice Hotels corporate statement. Other named Finout enterprise clients include the New York Times, Lyft, Tenable, and Wiz.30 Finout is integrated into the core FinOps and financial management layer of Choice Hotels’ AWS operations, constituting deep operational integration rather than peripheral use.
Choice Hotels has deployed SmartAction, an AI-powered virtual agent platform for voice, text, and chat automation that is explicitly built on and listed within the NICE inContact developer ecosystem.15 NICE Systems (now NICE Ltd.) is an Israeli-founded company headquartered in Ra’anana, Israel, originating in voice recording and intercept technology for military and intelligence applications before pivoting to enterprise contact centre software. The relationship routes Choice Hotels customer voice interactions, chat logs, and behavioural data through NICE inContact infrastructure.15 The precise contract start date has not been publicly disclosed, but the SmartAction/NICEinContact integration is documented as active in the public marketplace listing.
The prior research memo asserts that technical and contact centre personnel within Choice Hotels’ vendor network possess documented expertise in Verint software for real-time staffing, quality assurance, and call monitoring. The sole cited source for this claim is a 2014 blog post analysing Verint’s acquisition of Kana Communications38 — a pre-2020 document that does not reference Choice Hotels. No direct, confirmed procurement relationship between Choice Hotels and Verint has been identified in publicly available records. This claim is treated as unverified.
In 2021, Choice Hotels selected Okta Identity Cloud for enterprise-wide Identity and Access Management (IAM).14 Okta is a US-headquartered company (San Francisco, CA) and is not of Israeli origin.
Choice Hotels deployed Veza, a data security and authorisation platform, to create a unified “Authorization Graph” linking Okta identities to AWS accounts, microservices, and databases across 14 hotel brands.1213 Veza is US-headquartered (Santa Clara, CA) and is not of Israeli origin. Veza maintains a documented technology partnership with CrowdStrike.20
Check Point security researchers discovered in 2019 an exposed MongoDB database containing approximately 700,000 Choice Hotels guest records caused by a third-party vendor misconfiguration.19 This documents Check Point researchers auditing Choice Hotels’ external attack surface; it does not establish a contractual licensing relationship. A separate claim in prior research that Choice Hotels uses CloudCheckr (a cloud management platform) in environments benchmarked against Check Point Infinity is sourced to a PeerSpot competitor comparison page.26 Competitor comparison pages do not establish that a user of one product uses the other. No direct licensing or subscription relationship between Choice Hotels and Check Point has been identified in publicly available records.
Prior research asserts that Choice Hotels’ cybersecurity leadership has presented alongside SentinelOne and CyberArk executives at CISO Executive Summits.2122 Attendance at a shared conference does not constitute evidence of a vendor procurement relationship. Prior research also describes Choice Hotels and Wiz as “mutual, high-profile clients of Finout.”30 It is confirmed that both are named Finout customers; co-use of a shared FinOps tool does not establish a direct Choice Hotels–Wiz relationship. No direct, confirmed procurement relationship between Choice Hotels and SentinelOne, CyberArk, or Wiz has been identified in publicly available records.
Prior research references Publicis Sapient,32 Accenture,33 and Capgemini34 as potential integrators involved in Choice Hotels’ cloud transformation. The Accenture citation is a 2015 press release about a generic Oracle hospitality finance product, not a Choice Hotels-specific contract. The Capgemini citation is a general sector white paper. The Publicis Sapient citation is a generic industry services page. The AWS migration was led by internal leadership under CIO Brian Kirkland.3 No public evidence identified of a named external systems integrator mandating or deploying Israeli-origin technology as part of the Choice Hotels AWS migration programme.
In 2025, Choice Hotels announced the introduction of Mews as a cloud-based property management system (PMS) option for international franchisees.18 Mews is headquartered in Amsterdam, Netherlands, and is not of Israeli origin.
Choice Hotels has formally designated Canary Technologies as a “Qualified Choice Vendor.”16 Canary’s platform provides: digital credit card authorisations with fraud prevention, contactless check-in with government ID image capture and verification, digital signatures, mobile room keys (via its acquisition of OpenKey), and AI-driven guest messaging across SMS, WhatsApp, phone, and email.16 The platform captures and retains guest identity documents, financial data, and physical access logs. Canary Technologies is US-headquartered (San Francisco, CA) and is not of Israeli origin.
Prior research asserts that an AWS Travel & Hospitality Resiliency white paper co-locates Choice Hotels (as a digital transformation reference) and AnyVision (as a recommended biometric partner) within the same document.17 The specific co-location of Choice Hotels as a reference client and AnyVision as a promoted solution within the same document cannot be independently verified from available training data without live access to the document. This claim is treated as unverified pending direct document review. No direct procurement or deployment relationship between Choice Hotels and AnyVision/Oosto, BriefCam, Trigo, Trax, or any other Israeli-origin biometric or facial recognition vendor has been identified in publicly available records.
No public evidence identified of Choice Hotels deploying Israeli-origin predictive policing, sentiment analysis, social media monitoring, or workforce surveillance tools. Sources reviewed include corporate press releases, SEC filings (10-K and 8-K), technology trade press (CIO Dive, Hotel Management, Skift), and the Choice Hotels Media Center.37
The NICE inContact relationship via SmartAction constitutes an indirect deployment of Israeli-origin communications analytics infrastructure through a third-party platform provider.15 Customer voice interactions, chat data, and behavioural signals are processed through NICE inContact infrastructure as a condition of the SmartAction integration. No other third-party indirect deployment of Israeli-origin surveillance, biometric, or monitoring technology has been identified.
Choice Hotels completed a 100% migration to AWS in January 2024 and permanently closed all owned or co-located on-premises data centre infrastructure.123 Choice Hotels is a consumer of AWS infrastructure, not a provider of cloud services to third parties. No public evidence identified that Choice Hotels independently operates, leases, or co-locates data centre infrastructure within Israel.
Project Nimbus is a $1.2 billion cloud computing contract awarded in April 2021 by the Israeli government, jointly to AWS and Google Cloud.67 The contract obligates AWS and Google to build physical cloud regions within Israel and to provide the Israeli government and defence establishment with “an all-encompassing cloud solution.”67 AWS opened its Israeli infrastructure region in 2023.9 Leaked contract terms reported by +972 Magazine and independently analysed by the Abolitionist Law Center prohibit AWS and Google from denying service to any Israeli government entity — including military and intelligence services — and require providers to secretly notify the Israeli government if a foreign court orders data disclosure.78 The Project Nimbus contract further includes provision of AI and machine learning tools encompassing facial detection, image categorisation, object tracking, and sentiment analysis to the Israeli government.7 Google and Amazon have employed or planned to employ thousands of personnel in Israel in connection with the programme.2728
Choice Hotels does not directly participate in Project Nimbus and is not a party to the contract. It has no documented government cloud role. However, Choice Hotels is entirely reliant on AWS as its sole cloud provider,124 and its financial relationship with AWS is ongoing and operationally total. AWS utilises consolidated enterprise revenue to fund and expand its global infrastructure, including the Israeli AWS region constructed for Project Nimbus purposes.9 Choice Hotels’ AWS consumption contributes to AWS’s consolidated global revenue, a portion of which funds the Israeli region’s ongoing operation and development. This constitutes an indirect financial relationship with Project Nimbus infrastructure through AWS — not direct contractual participation. The precise quantum of Choice Hotels’ annual AWS expenditure is not publicly disclosed in 10-K filings.37
No public evidence identified that Choice Hotels provides services marketed or contracted for Israeli state digital sovereignty, data residency, or infrastructure resilience. Operating franchised hotel properties in Israel requires compliance with Israeli domestic data retention statutes (including the Protection of Privacy Law 5741-1981 and subsequent amendments) governing guest records at those properties, but this is a standard commercial compliance obligation rather than a state cloud services provision role.
No public evidence identified of any contract, partnership, or service agreement between Choice Hotels International and the Israeli Ministry of Defence, the Israel Defense Forces (IDF), Israeli intelligence agencies (Mossad, Shin Bet, Unit 8200, or related bodies), or any Israeli state security body. Sources reviewed include SEC EDGAR filings (10-K, 8-K),37 Choice Hotels investor relations, Israeli Ministry of Defence public procurement announcements, defence trade directories, and major news outlets.
No public evidence identified of Choice Hotels’ technology being publicly reported, confirmed, or documented as deployed for military, intelligence, or law enforcement surveillance within Israel or the occupied Palestinian territories.
No public evidence identified. Choice Hotels is a hospitality franchisor with no publicly documented involvement in offensive cyber capabilities, zero-day exploit development, digital weapons systems, or signals intelligence infrastructure.
The confirmed Finout relationship carries an indirect investor-level connection to Unit 8200 alumni networks through Finout’s investor Team8 venture capital, whose co-founders are former Unit 8200 commanders.10 This is an investor-level structural relationship, not a direct defence or intelligence sector service provision relationship.
Choice Hotels’ documented AI and algorithmic deployments are confined to commercial hospitality applications:
Choice Hotels’ MasteryX technology innovation summit (held April 2025) was publicly characterised as focused on AI and digital hospitality transformation.25 No specific AI system deployments beyond those listed above have been publicly detailed.
No public evidence identified of Choice Hotels providing AI, machine learning, computer vision, or autonomous decision-support systems to any Israeli state, military, or security body.
No public evidence identified of Choice Hotels’ AI models being trained on, or provided access to, civilian population data, intercepted communications, or surveillance-derived datasets from Israel or the occupied territories. Choice Hotels’ AI deployments are trained on commercial hospitality domain data (booking behaviour, customer service interactions, and cloud infrastructure telemetry).
No public evidence identified. Choice Hotels has no publicly documented involvement in autonomous weapons systems, lethal autonomous decision-making platforms, or related dual-use AI research.
No public evidence identified of Choice Hotels operating research and development facilities, engineering offices, innovation laboratories, or accelerator programmes within Israel. Sources reviewed include the Choice Hotels corporate website, LinkedIn company profiles, Israeli corporate registry (limited public access), and technology trade press.
No public evidence identified of Choice Hotels acquiring or making strategic investments in Israeli-origin technology companies or Israeli venture capital funds. The sole publicly documented major acquisition in the relevant period is the $675 million acquisition of Radisson Hotels Americas in 20225 — a hospitality brand transaction, not a technology acquisition, and not Israeli-origin.
No public evidence identified of significant patent portfolios, licensing agreements, or co-development arrangements between Choice Hotels and Israeli-domiciled entities or Israeli research institutions (Technion, Hebrew University, Weizmann Institute). Sources reviewed include the USPTO patent database (by assignee), WIPO records, and Choice Hotels 10-K intellectual property disclosures.37
Choice Hotels franchises hotel properties within Israel. Documented affiliated properties include locations in Northern Israel (near Achziv Beach), Western Galilee (Eilon), and Tel Aviv, among others.2324 Following the Radisson Hotels Americas acquisition, Choice Privileges loyalty points are integrated with Radisson-branded properties globally, which include properties in Israel.5 Operating franchised properties in Israel requires compliance with Israeli business regulation, tax law, and domestic data retention obligations. No public evidence identified that this physical presence involves specialised technology provision to Israeli security or state bodies.
Choice Hotels launched its tenth annual technology innovation summit, MasteryX, in April 2025, described as focused on the future of hospitality technology including AI applications.25 No Israeli-origin technology partners were identified as named participants or sponsors in the publicly available announcement.
The UN Special Rapporteur report A/HRC/59/23 (Francesca Albanese, 2025) addresses the broader “economy of occupation” and technology sector complicity frameworks.29 This document does not name Choice Hotels specifically. It references AWS and Google in the context of Project Nimbus as part of broader digital infrastructure and supply chain analysis — a characterisation that carries structural relevance to any AWS-dependent enterprise, including Choice Hotels, through the indirect financial relationship described in Section 3 above. No NGO investigation, academic study, or UN report specifically addressing Choice Hotels’ technology relationships with the Israeli state has been identified.
No public evidence identified of organised BDS or divestment campaigns specifically targeting Choice Hotels in connection with its technology provision or Israeli operations. The BDS Movement’s publicly prioritised technology targets as of 2025 include Google, Amazon, Microsoft, HPE, and Elbit Systems.35 Choice Hotels is not named in that document. Choice Hotels’ Israeli hotel portfolio has not generated documented BDS campaign activity in publicly available records.
No public evidence identified of regulatory inquiries, legal challenges, export control actions, or sanctions-related investigations involving Choice Hotels’ technology sales or services to Israeli state entities.
The 2019 data incident — in which approximately 700,000 Choice Hotels guest records were exposed via a third-party vendor’s misconfigured MongoDB database, discovered by Check Point security researchers19 — was a data security matter. It resulted in no confirmed regulatory enforcement action specifically related to Israel, and it documents a security research finding rather than a contractual vendor relationship.
Prior research references Choice Hotels executives’ attendance at CISO Executive Summits hosted by Evanta/Gartner.2122 These are industry professional development events. No regulatory, legal, or civil society significance attaches to this attendance.
The following material gaps limit the completeness of this section:
https://investor.choicehotels.com/news/news-details/2024/Choice-Hotels-Becomes-First-Hotel-Company-to-Complete-Total-Data-Center-Migration-to-the-Cloud/default.aspx ↩↩↩↩↩
https://media.choicehotels.com/2024-01-29-Choice-Hotels-Becomes-First-Hotel-Company-to-Complete-Total-Data-Center-Migration-to-the-Cloud ↩↩↩↩↩
https://www.ciodive.com/news/Choice-Hotels-AWS-migration-completion-CIO-Brian-Kirkland/695253/ ↩↩↩↩↩
https://aws.amazon.com/solutions/case-studies/choice-hotels-international-case-study/ ↩↩↩↩
https://www.radissonhotels.com/en-us/corporate/media/press-releases/choice-hotels-acquires-radisson-hotel-group-americas ↩↩↩
https://www.972mag.com/project-nimbus-contract-google-amazon-israel/ ↩↩↩↩
https://abolitionistlawcenter.org/2024/12/02/documents-contradict-googles-claims-about-its-project-nimbus-contract-with-israel/ ↩
https://www.timesofisrael.com/amazon-web-services-to-open-data-centers-in-israel-in-2023/ ↩↩
https://www.insightpartners.com/ideas/finout-cements-finops-leadership-with-40m-series-c-as-category-goes-mainstream/ ↩↩↩↩↩
https://siliconangle.com/2024/05/23/cloud-cost-optimization-startup-finout-reels-26-3m-series-b-funding/ ↩↩↩
https://veza.com/resources/choice-hotels-case-study/ ↩
https://cdn.veza.com/content/uploads/Customer-Journey-Choice-Hotels-2.pdf ↩
https://www.appsruntheworld.com/customers-database/purchases/view/choice-hotels-international-inc-united-states-selects-okta-identity-cloud-for-identity-and-access-management-iam ↩
https://cxexchange.niceincontact.com/en-US/apps/115011/ai-powered-virtual-agents-by-smartaction ↩↩↩↩
https://www.canarytechnologies.com/partners/choice-hotels ↩↩↩
https://d1.awsstatic.com/Industries/Travel%20%26%20Hospitality/travel-and-hospitality-resiliency.pdf ↩
https://www.prnewswire.com/news-releases/choice-hotels-international-introduces-mews-cloud-technology-as-newest-property-management-system-option-for-international-franchisees-302437411.html ↩
https://www.bankinfosecurity.com/choice-hotels-700000-guest-records-exposed-a-12913 ↩↩
https://veza.com/company/press-room/veza-partners-with-crowdstrike-to-deliver-end-to-end-access-security-and-identity-threat-protection-to-stop-the-1-attack-vector-compromised-identity/ ↩
https://www.evanta.com/ciso/minneapolis/minneapolis-ciso-executive-summit-7298 ↩↩
https://www.evanta.com/ciso/phoenix/2019-phoenix-ciso-executive-summit-q4 ↩↩
https://www.israelandyou.com/choice-hotels-in-northern-israel/ ↩
https://www.choicehotels.com/locations ↩
https://media.choicehotels.com/2025-04-09-Shaping-the-Future-of-Hospitality-Technology,-Choice-Hotels-Kicks-Off-MasteryX,-its-10th-Annual-Tech-Innovation-Summit ↩↩
https://www.peerspot.com/products/comparisons/check-point-infinity_vs_cloudcheckr ↩
https://www.jpost.com/bds-threat/google-and-amazon-workers-condemn-israels-project-nimbus-681824 ↩
https://www.jpost.com/jpost-tech/amazon-google-to-employ-thousands-in-israel-for-massive-nimbus-project-669108 ↩
https://www.un.org/unispal/document/a-hrc-59-23-from-economy-of-occupation-to-economy-of-genocide-report-special-rapporteur-francesca-albanese-palestine-2025/ ↩
https://www.cyberark.com/press/cyberark-and-wiz-team-up-to-provide-complete-visibility-and-control-for-cloud-created-identities/ ↩
https://www.publicissapient.com/industries/travel-hospitality ↩
https://newsroom.accenture.com/news/2015/accenture-and-oracle-launch-hospitality-finance-cloud-solution-to-help-clients-improve-financial-management-performance ↩
https://www.capgemini.com/us-en/insights/expert-perspectives/framework-of-the-future-a-modern-approach-travel-and-hospitality-transformation/ ↩
https://bdsmovement.net/Guide-to-BDS-Boycott ↩
https://www.calcalistech.com/ctechnews/article/sjx6w11dva ↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0000315189&type=10-K&dateb=&owner=include&count=10 ↩↩↩↩↩
https://raywang.org/blog/2014-01/news-analysis-verint-announces-intent-acquire-kana-514m ↩
