- Microsoft has a deeply embedded presence in Israel dating to 1991, including a live Azure cloud region, a major campus, and a reported $133 million contract with Israel's Ministry of Defense. - The company's BDS-1000 score of 619.88 (Tier B) is driven primarily by its direct provision of Azure cloud and AI services to IMOD, including reported use by IDF Unit 8200 to store intercepted Palestinian communications. - Following investigative reporting in August 2025, Microsoft commissioned an external review that confirmed elements of the Guardian's findings, leading Brad Smith to announce the disabling of specified IMOD subscriptions in September 2025. - Microsoft has faced documented internal dissent, firing multiple employees for organizing or participating in pro-Palestinian protests, while also facing unresolved allegations of content filtering bias in Outlook and LinkedIn. - Regulatory and legal exposure remains active, with an Irish DPC complaint filed in December 2025 and a multi-organization legal notice alleging potential liability for aiding atrocity crimes sent to the company the same month.
Table of Contents
Microsoft Corporation scores 656 on the BDS-1000 scale, placing it firmly in Tier B. The dominant finding is in V-DIG: Microsoft operated as the direct cloud infrastructure provider for Unit 8200, Israel’s signals intelligence corps, which used a customised Azure environment hosted in Microsoft’s Netherlands data centre to store and process intercepted Palestinian phone-call data from Gaza and the West Bank. Microsoft’s own September 2025 statement partially confirmed this finding and disabled specified subscriptions — but did not terminate the broader Israel Ministry of Defense commercial relationship.12
The V-ECON domain records a multi-decade operational and investment footprint: a 1991 R&D centre, an active Azure region, a Herzliya campus, approximately 2,300 employees, and — most significantly — the July 2024 announcement and subsequent Q1 2026 close of the $32 billion acquisition of Wiz, an Israeli-founded cloud security company whose four founders are all alumni of both Microsoft Israel and Unit 8200.34 Civil-society databases document Microsoft software provision to settlement municipal councils, triggering the Settlement Nexus Escalator.56
The V-MIL domain records a direct, multi-decade contractual relationship with IMOD — a $133 million three-year contract beginning 2021 covering software, professional services, Azure cloud, and Azure AI services including language translation; at least 635 subscriptions held by IDF divisions, units, bases, and project code-words including Mamram and Unit 8200; and approximately 130 direct Azure support requests from the Israeli military in the first ten months of the Gaza war, including urgent maintenance deferrals flagged from the Glilot base housing Unit 8200.78 All of these are commercial IT services rather than lethal systems, which the BDS-1000 rubric places in the logistical-sustainment band rather than tactical or kinetic bands, holding V-MIL below the headline score.
The V-POL domain records a convergent pattern: employee terminations across four documented incidents tied to Israel-contract protest activity; two consecutive annual general meetings at which the board recommended against Israel/AI human-rights due-diligence resolutions (receiving 24% and 26.34% minority support respectively); LinkedIn content moderation documented as asymmetrically applied against Palestinian and humanitarian content; Outlook keyword filtering of terms including “Gaza,” “Palestine,” and “genocide”; Brad Smith’s June 2023 advocacy speech at the Israeli Presidential Conference; and a marked asymmetry in Microsoft’s public response to the Russia/Ukraine and Israel/Gaza conflicts.9101112
A constructive-notice threshold runs through all four domains: Microsoft’s commercial relationship with IMOD continued for at minimum 14 months after the ICJ Advisory Opinion of 19 July 2024 on the illegality of Israel’s occupation, and continued after the ICC arrest warrants issued on 21 November 2024. The September 2025 restriction was partial and explicitly framed as ongoing review rather than contract termination.2
| Date | Event |
|---|---|
| 1975 | Microsoft founded in Albuquerque, New Mexico |
| 1989 | Microsoft opens Israel branch |
| 1991 | Microsoft Israel R&D Center established — first Microsoft R&D centre outside the United States 13 |
| Dec 2002 | Israel Ministry of Defense signs three-year framework agreement with Microsoft for desktop and enterprise software covering the Israeli defense establishment, IDF teleprocessing brigade, and Mamram 8 |
| Nov 2014 | Microsoft acquires Aorato (Unit 8200-alumni firm, Active Directory threat detection) 14 |
| Sep 2015 | Microsoft acquires Adallom (Unit 8200-alumni firm, cloud access security broker, ~$320M) 15 |
| Nov 2015 | Microsoft acquires Secure Islands (data classification and protection) 16 |
| Jun 2017 | Microsoft acquires Hexadite (AI-based security automation) 17 |
| Jun 2017 | Microsoft acquires Cloudyn (cloud cost management, Israeli-founded) 18 |
| 2019 | Microsoft M12 invests in AnyVision (Israeli facial recognition) |
| Jan 2020 | Microsoft announces Israel Central Azure region; describes Israel as strategic market 13 |
| Mar 2020 | Microsoft divests AnyVision stake following Covington & Burling audit; ends minority facial-recognition investments 19 |
| Jun 2020 | Microsoft acquires CyberX (IoT security, Israeli-founded) |
| 2021 | Microsoft–IMOD three-year contract begins ($133M, covering software, Azure cloud, Azure AI, professional services) 7 |
| Apr 2021 | Project Nimbus awarded to AWS and Google; Microsoft not selected as prime contractor 20 |
| Oct 2023 | Azure region Israel Central goes live 21 |
| 7 Oct 2023 | Hamas attacks; Microsoft activates Crisis Management Team; CEO Nadella issues employee communication 22 |
| Oct 2023 | Microsoft provides “limited emergency support” to Israeli government for hostage rescue operations (per May 2025 statement) 1 |
| Apr 2024 | Microsoft fires two employees who organised campus vigil for Palestinians 23 |
| Apr–Jun 2024 | Internal “No Azure for Apartheid” open letter circulated; approximately 200 employee signatories 24 |
| May 2024 | GitHub employee open letter alleges GitHub enterprise contract with Israeli military 25 |
| Jul 2024 | Microsoft announces $32B acquisition of Wiz (Israeli-founded cloud security, Unit 8200-alumni founders) 3 |
| 19 Jul 2024 | ICJ Advisory Opinion: Israel’s occupation of Palestinian territories declared unlawful; third-party obligations articulated |
| 21 Nov 2024 | ICC Pre-Trial Chamber issues arrest warrants for PM Netanyahu and former Defence Minister Gallant |
| Dec 2024 | Microsoft annual general meeting: shareholder resolution on Israel/AI human rights due diligence receives ~24% support; board recommended against 26 |
| Feb 2025 | Associated Press reports details of $133M IMOD contract and 635 subscriptions including Mamram and Unit 8200, based on internal Microsoft documents 7 |
| Apr 2025 | Microsoft fires two additional employees — Ibtihal Aboussad and Vaniya Singh — who disrupted Microsoft 50th anniversary event to protest Israel contracts 27 |
| Apr 2025 | Palestinian BDS movement adds Microsoft and Xbox to boycott targets 28 |
| 15 May 2025 | Microsoft publishes first public acknowledgement of IMOD commercial relationship; states it found no evidence of Azure or AI used to target or harm people in Gaza 1 |
| Aug 2025 | Microsoft fires two further employees — Nisreen Jaradat and Julius Shan — following campus protests 29 |
| Aug 2025 | Guardian/+972/Local Call reporting: Unit 8200 used customised Azure environment in Microsoft Netherlands data centre to store intercepted Palestinian phone-call data 30 |
| Aug 2025 | Microsoft announces external Covington & Burling review of Guardian allegations; updates May 2025 statement 1 |
| Sep 2025 | Microsoft (Brad Smith) confirms finding evidence supporting Guardian reporting; ceases and disables specified IMOD subscriptions and services, including cloud storage and AI services 2 |
| Sep 2025 | Amnesty International calls for investigation of all Microsoft contracts with Israeli security sector 31 |
| Oct 2025 | 7amleh publishes report on LinkedIn content moderation bias against Palestinian users during Gaza war 32 |
| Dec 2025 | Annual general meeting: shareholder resolution on AI/cloud human rights due diligence receives 26.34% support; board recommended against 33 |
| Dec 2025 | Irish Council for Civil Liberties files complaint with Irish DPC asking investigation of Microsoft for alleged unlawful IDF data processing on Azure 34 |
| Dec 2025 | Coalition including CCR, SOMO, GLAN, Ekō sends Microsoft legal notice alleging potential liability for aiding and abetting atrocity crimes 35 |
| Q1 2026 | Microsoft closes Wiz acquisition; Israeli-origin cloud security technology becomes internal Microsoft product 4 |
| May 2026 | Microsoft Israel General Manager Alon Haimovich departs following internal inquiry into Microsoft Israel’s dealings with the Israeli military and Unit 8200 36 |
Microsoft Corporation is one of the world’s largest technology companies by market capitalisation and revenue, with fiscal year 2025 revenues exceeding $245 billion. Its primary business lines are Intelligent Cloud (Azure, server products, enterprise services), Productivity and Business Processes (Office 365, LinkedIn, Dynamics), and More Personal Computing (Windows, devices, Xbox, Bing). Microsoft is incorporated in Washington state, headquartered in Redmond, Washington, and listed on NASDAQ under ticker MSFT. No country outside the United States accounted for more than 10% of reported revenue in FY2023–FY2025.37
Microsoft’s Israeli presence is among its longest-established non-US operational footprints. A local branch opened in 1989 and an R&D centre followed in 1991 — the first Microsoft R&D facility outside the United States.13 Today that centre operates across six locations with approximately 30 product development teams in cybersecurity, AI, business analytics, and cloud platform domains. The Herzliya campus, opened in 2020 at an estimated cost of NIS 350 million, consolidates R&D, sales, and marketing functions alongside a local presence for M12 (Microsoft’s venture fund) and Microsoft for Startups.38 Microsoft’s Israel Central Azure region went live in 2023, enabling Israeli customers to store data at rest within Israel.21
Between 2014 and 2020, Microsoft made a series of acquisitions of Israeli-founded security and cloud technology companies — Aorato, Adallom, Secure Islands, Hexadite, Cloudyn, and CyberX — most of which were founded by alumni of the Israeli military intelligence community, principally Unit 8200.1415161718 These acquisitions form core components of the Microsoft Defender suite, Microsoft Sentinel, Azure Cost Management, and Azure IoT Defender. The July 2024 announced and Q1 2026-closed acquisition of Wiz for approximately $32 billion — described at announcement as the largest acquisition in Microsoft’s history — extends this pattern by embedding Israeli-founded, Unit-8200-alumni-built cloud security technology as a wholly owned Microsoft product.34
Microsoft’s commercial relationship with the Israeli Ministry of Defense began in documented form at least with the 2002 MOD framework agreement and continued through a 2021 three-year contract worth $133 million covering software, professional services, Azure cloud services, and Azure AI services including language translation.78 Microsoft acknowledged this relationship publicly for the first time in May 2025 and confirmed a partial restriction of specified subscriptions in September 2025 — without announcing termination of the broader relationship.12
Microsoft’s military-domain involvement with the State of Israel is primarily characterised by a long-running direct contractual relationship with the Israel Ministry of Defense, sustained operational support of IDF units during active hostilities in Gaza, and the confirmed use of Microsoft cloud infrastructure as operational support infrastructure for Israel’s signals intelligence corps. This is not a relationship involving weapons manufacture, munitions, armoured vehicles, or lethal systems — the BDS-1000 rubric treats cloud and software services as logistical sustainment rather than tactical or kinetic supply — but the scale, duration, and wartime continuity of the relationship place it clearly in the upper portion of the logistical-sustainment band.
The documented contractual history stretches back to at least 2002. Israel’s Ministry of Defense signed a three-year framework agreement with Microsoft in December 2002 covering desktop and enterprise software for the Israeli defence establishment, with named parties including the MOD Procurement and Production Directorate, the IDF teleprocessing brigade, and Mamram — the IDF’s Computing and Information Systems Corps.8 This was not a one-off transaction but a framework for ongoing software licensing that continued through successive renewals. The 2021–2024 contract, worth $133 million over three years, updated this relationship to include Azure cloud services and Azure AI services including language translation.7 Microsoft’s May 2025 statement confirmed the relationship explicitly, describing it as a “standard commercial relationship” governed by Microsoft’s Acceptable Use Policy and AI Code of Conduct.1
The AP investigation’s documentation of 635 subscriptions across IDF divisions, units, bases, and project code-words — including Mamram and Unit 8200 — establishes the breadth of operational reach within the Israeli military establishment.7 Unit 8200 is Israel’s primary signals intelligence unit, analogous to NSA or GCHQ in function. Mamram’s presence as both a named party in the 2002 framework agreement and a named subscription holder in the active 2021 contract confirms a continuous multi-decade relationship with the IDF’s core IT corps. These subscriptions represent active operational dependencies across the military enterprise, not peripheral or incidental commercial use.
During the first ten months of the Gaza war (approximately October 2023 through August 2024), Microsoft’s global Azure support team responded to approximately 130 direct requests from the Israeli military.7 The content of at least one such request is documented in the AP investigation: approximately two weeks after 7 October 2023, a support ticket requested delays to planned maintenance outages on the basis that downtime could directly affect “life-saving systems,” with the ticket flagged as “Glilot – 8200.” Glilot is identified by AP as a secure army base housing Unit 8200.7 Responding to that request — and to 129 other direct military requests over ten months of active combat — constitutes documented operational sustainment of the IDF during active hostilities. The rubric’s logistical-sustainment band (I-MIL 3.1–3.9) explicitly covers service contracts that keep military operations running; Azure support during wartime meets that criterion.
The Unit 8200 surveillance data finding — confirmed by Microsoft in September 2025 — adds a distinct dimension. Unit 8200 operated a customised, segregated Azure environment hosted in Microsoft’s Netherlands data centre to store and process large volumes of intercepted Palestinian phone-call data from Gaza and the West Bank.230 This means a Microsoft commercial facility in the EU served as operational infrastructure for IDF signals intelligence collection targeting Palestinian civilian communications during the Gaza war. The Netherlands data centre thereby functioned as a base-services node for Israeli military intelligence operations — a finding squarely within the logistical-sustainment band’s scope even without any lethal-systems finding. Microsoft confirmed the finding and disabled the specified subscriptions in September 2025, but explicitly described the review as ongoing and did not confirm full termination of the IMOD relationship.2
Several related questions reach the boundary of the logistical-sustainment band without crossing into higher bands. Whether Azure AI services provided to IMOD — including language translation — constituted a functional input into a targeting decision chain is not publicly confirmed. Microsoft’s May 2025 statement acknowledged language translation as a confirmed AI service provided to IMOD.1 The AP investigation documented use cases including sifting intelligence, intercepted communications, and surveillance data to identify suspicious speech or behaviour and to learn movements of adversaries.7 Microsoft’s September 2025 statement described the relevant AI use as related to “surveillance” but did not confirm a kill-chain or targeting-output function.2 Amnesty International called for investigation of all Microsoft contracts in this context but did not assert a confirmed targeting-output function for Microsoft’s specific services.31 The question remains unresolved pending further disclosure, and the rubric prescribes conservative treatment; the V-MIL score is held at the top of the logistical-sustainment band rather than elevated to tactical-component or lethal-platform bands.
On the heavy-machinery and construction-equipment dimensions of V-MIL, no evidence was identified of Microsoft equipment, vehicles, or heavy machinery in construction, demolition, or settlement infrastructure in occupied territories. On munitions and strategic platforms, no evidence was identified of Microsoft as prime contractor or component supplier for weapons, munitions, armoured vehicles, tactical drones, naval vessels, missile defence systems, fighter aircraft, or any lethal platform supplied to Israeli forces. The Elbit Systems OneSim simulation infrastructure, which Elbit’s own announcements describe as running on Microsoft Azure as a cloud delivery platform, represents an indirect cloud-platform customer relationship; the $107 million IDF tank training centre contract announced by Elbit in January 2023 refers to operation on “the IDF’s cloud” without identifying Microsoft as the counterparty, leaving that question ambiguous.3940 This ambiguity is treated conservatively and is not load-bearing in the score.
The strongest challenge to the V-MIL score is the rubric’s own classification logic: cloud services, software licensing, and professional services are treated as logistical sustainment rather than tactical-component or kinetic supply, which caps I-MIL at the upper end of the 3.1–3.9 band regardless of the operational significance of those services to the end user. A critic could argue that Azure support infrastructure for signals intelligence during active combat is functionally closer to tactical-component supply than to, say, catering or waste management at a military base. The rubric’s current architecture does not accommodate that argument without a confirmed kill-chain function, which remains unresolved.
A second challenge is the partial-restriction action taken in September 2025. Microsoft did demonstrate capacity and willingness to disable specified subscriptions when presented with evidence of AUP-violating use. If the full scope of remaining active IMOD contracts post-September 2025 is narrower than the pre-restriction baseline, the sustained-operation finding is partially mitigated. However, Microsoft has not publicly confirmed full termination of the IMOD relationship, the review was described as ongoing, and the May 2026 departure of Microsoft Israel General Manager Alon Haimovich following an internal inquiry suggests the relationship remained live and under scrutiny as of the audit date.36 The scope of remaining active IMOD contracts is a material open question.
A third challenge concerns the evidentiary standard for several ancillary findings. The Israel Prison Service and Israel Border Police use of Microsoft products cited by AFSC Investigate lacks primary procurement document verification.41 The Elbit OneSim cloud-host counterparty is ambiguous between Microsoft Azure and an IDF-operated private cloud. GitHub’s alleged IDF enterprise contract has not been publicly confirmed by Microsoft or GitHub. These ancillary findings are treated as unverified or indirect and are not load-bearing in the score; the core finding rests on the IMOD contract facts confirmed by multiple independent sources including Microsoft itself.
No Dutch Data Protection Authority complaint or investigation into Microsoft’s Netherlands data centre hosting of Unit 8200 data has been publicly identified as of May 2026, representing a regulatory gap. No U.S. export-control enforcement action specifically targeting Microsoft’s IMOD Azure services has been identified. The Irish DPC complaint filed by ICCL in December 2025 is pending.34
| Entity / Person | Role | Finding | Key Sources |
|---|---|---|---|
| Microsoft Corporation | Direct IMOD contractor; Azure platform operator | $133M IMOD contract; 635 IDF subscriptions; Azure support during war | 712 |
| Israel Ministry of Defense (IMOD) | Primary military customer | Cloud, AI, software, professional services; named in 2021 contract | 71 |
| Unit 8200 | IDF signals intelligence; Azure subscriber | Intercepted Palestinian communications stored in Netherlands Azure | 7230 |
| Mamram (IDF Computing and Information Systems Corps) | Azure subscriber; MOD framework party | Named in 2002 MOD framework and 2021 subscription list | 78 |
| Israel Police | Procurement entity | 2024 Azure Active Directory and Azure cloud tenders (sole-supplier) | 4243 |
| Elbit Systems | Israeli defence prime; cloud customer | OneSim simulation on Microsoft Azure; $107M IDF tank training contract (cloud host ambiguous) | 3940 |
| Alon Haimovich | Microsoft Israel General Manager | Departed May 2026 after internal inquiry into IMOD dealings | 36 |
| Brad Smith | Microsoft President and Vice Chair | Authored May 2025 and September 2025 public statements | 12 |
| Satya Nadella | Microsoft CEO | October 2023 employee communication; no personal Israeli defence findings | 22 |
| Covington & Burling | External law firm | Commissioned by Microsoft to review Guardian allegations; no public findings reported | 1 |
| Irish Council for Civil Liberties (ICCL) | Civil society complainant | Dec 2025 DPC complaint re: Azure and IDF data processing | 34 |
| Amnesty International | Civil society | Called for investigation of all Microsoft Israel security-sector contracts | 31 |
| No Azure for Apartheid | Worker-led campaign | Calls for contract termination; organised employee protests | 24 |
| Associated Press | Investigative journalism | Primary source for $133M contract details and 635 subscriptions | 7 |
| The Guardian / +972 Magazine | Investigative journalism | Unit 8200 Netherlands Azure hosting; Haimovich departure | 3036 |
| AFSC Investigate | NGO database | Documents Microsoft products used by IPS, Border Police | 41 |
| Who Profits Research Centre | NGO database | Microsoft cloud and AI services to IMOD and Israeli government | 5 |
The V-DIG finding is the highest-scoring domain and the primary driver of Microsoft’s BDS-1000 composite score. It rests on a precisely documented case of Israeli military intelligence using Microsoft’s commercial cloud infrastructure as operational data storage and AI processing capacity for signals intelligence collection targeting Palestinian civilian communications — and on the structural depth of Microsoft’s Israeli technology ecosystem, including the acquisition of Wiz and a decades-long pattern of integrating Unit-8200-alumni-founded security companies into Microsoft’s core product portfolio.
The Unit 8200 Azure case is the anchor finding. Guardian, +972 Magazine, and Local Call reporting in August 2025 documented that Unit 8200 operated a customised, segregated Azure environment hosted in Microsoft’s Netherlands data centre region to store and process large volumes of intercepted Palestinian phone-call data from Gaza and the West Bank.30 Microsoft’s own September 2025 statement confirmed that its review found evidence supporting elements of that reporting, specifically including Israel Ministry of Defense Azure storage consumption in the Netherlands and use of AI services, and stated that it had ceased and disabled the relevant specified subscriptions.2 The BDS-1000 rubric’s Band 7.0–7.9 (Intelligence Integration) describes exactly this scenario — cloud hosting and AI processing of mass surveillance data collected by a military intelligence unit — and Microsoft’s own confirmation satisfies the evidentiary threshold for that band.
The AP investigation deepens the operational picture. AP reported that Israeli military use of Microsoft and OpenAI technology rose sharply after October 7, 2023, that advanced AI models were purchased by the Israeli military through Microsoft’s Azure cloud platform, and that use cases included sifting intelligence, intercepted communications, and surveillance data to identify suspicious speech or behaviour and to learn the movements of adversaries.7 Microsoft’s May 2025 statement confirmed that Azure AI services including language translation were provided to IMOD.1 The Azure OpenAI Service — a Microsoft-controlled product built on OpenAI models and sold under Microsoft’s terms — is the documented delivery pathway for advanced AI model access by Israeli military users.7 Microsoft holds approximately 49% economic interest in OpenAI and is OpenAI’s exclusive cloud provider; the documented pathway for Israeli military access to OpenAI models ran through Microsoft Azure rather than any direct OpenAI enterprise agreement.
The constructive-notice dimension of this finding is material. Microsoft’s May 2025 statement — published approximately ten months after the ICJ Advisory Opinion of 19 July 2024 — acknowledged the active commercial relationship with IMOD and stated that reviews had found no evidence at that time of Azure or AI used to target or harm people in Gaza, while acknowledging limited visibility into customer use on private servers and systems outside Microsoft’s cloud.1 This means Microsoft confirmed its services were active and under review, not suspended, ten months post-ICJ Advisory Opinion. The September 2025 restriction — disabling specified subscriptions — followed a further two months later, placing the full period of continued post-ICJ service at a minimum of fourteen months. The BDS-1000 constructive-notice escalator (Principle 6/J6) applies: continuation of material services after a formal international legal threshold event, with documented notice via employee protests and investigative journalism, is treated as aggravating rather than neutral.
The structural depth of Microsoft’s Israeli digital ecosystem adds substantial weight to the V-DIG score beyond the single Unit 8200 finding. Microsoft’s Israel R&D Center, established 1991, operates 30 product development teams in cybersecurity, AI, cloud platform, and business analytics domains.44 The centre’s engineering output is embedded in core Microsoft products including the Microsoft Defender suite and Azure security services. A series of acquisitions — Aorato (2014), Adallom (2015), Secure Islands (2015), Hexadite (2017), Cloudyn (2017), CyberX (2020) — progressively integrated Israeli-founded, Unit-8200-alumni-built security technology into Microsoft’s product architecture.1415161718 Aorato’s Active Directory threat-detection technology became the foundation for Microsoft Advanced Threat Analytics and later Microsoft Defender for Identity; Adallom’s cloud access security broker became Microsoft Cloud App Security, now Microsoft Defender for Cloud Apps. These are not peripheral products; they are core components of Microsoft’s commercial cybersecurity portfolio sold globally.
The July 2024 announced, Q1 2026-closed acquisition of Wiz for approximately $32 billion represents the apex of this structural integration trend. Wiz was founded in 2020 by Assaf Rappaport, Yinon Costica, Roy Reznik, and Ami Luttwak — all Unit 8200 alumni and all formerly employed at Microsoft’s Israel R&D Center.45 Rappaport previously led the Israel R&D Center before departing to found Wiz. Post-acquisition, Wiz’s Cloud-Native Application Protection Platform, its substantial Israeli engineering and operations presence in Tel Aviv, and its access to cloud configuration data across customer environments (AWS, Azure, GCP) are part of Microsoft’s corporate group.34 This represents not an arms-length technology marketplace relationship but direct structural absorption of Unit-8200-connected Israeli security technology into Microsoft’s corporate architecture.
Microsoft’s partnership with Palantir — announced May 2023, making Palantir’s AI Platform and Foundry available on Azure Government and Azure Government Secret clouds — creates a third-party deployment pathway with indirect Israeli military relevance.46 Palantir has a documented relationship with Israeli military and intelligence customers, including a reported contract with Israel’s Ministry of Defense signed following the October 7 attacks.47 Through the Azure-Palantir partnership, data-analytics technology reaching Israeli military customers flows in part through Microsoft’s cloud infrastructure even where Microsoft does not hold the direct end-user contract.
The Israeli Intelligence Community Law (5777-2017, Section 7) requires Israeli entities to assist Israeli intelligence agencies upon request. Microsoft’s Israel R&D Center employees, as Israeli-domiciled persons working on core platform technologies, are subject to this statute.48 No documented instance of Israeli intelligence accessing Microsoft platform code or data via the R&D Center has been publicly confirmed, but the statutory exposure channel exists by operation of Israeli law and represents a structural vulnerability in Microsoft’s digital-sovereignty posture distinct from any voluntary commercial decision.
The most significant open question in V-DIG is whether the Azure AI services provided to IMOD rose beyond the Intelligence Integration band (7.0–7.9) to the Algorithmic Lethality band (8.0–8.9). The rubric places Algorithmic Lethality at 8.0–8.9, covering AI systems that generate targeting outputs or operational kill-chain functions. Microsoft’s confirmed service — language translation — is an AI cognitive service rather than a targeting system. The AP-documented use cases — sifting intelligence data, intercepted communications, and surveillance data to identify suspicious speech and learn adversary movements — are surveillance-analytics functions rather than confirmed targeting outputs. Microsoft’s September 2025 statement described the use it found as “surveillance” and did not confirm a targeting output function.2 The kill-chain question is explicitly flagged as unresolved in the underlying audit; the score is held conservatively at the upper end of Band 7.0–7.9. Confirmation of a targeting-output function for Microsoft-hosted AI services would materially increase the V-DIG score and the composite.
A second challenge concerns the Wiz acquisition. No public evidence was identified that Wiz held contracts with Israeli government, military, or intelligence bodies prior to acquisition. Post-acquisition, this becomes a group-attribution question: if Wiz does develop such relationships as a Microsoft subsidiary, or if pre-acquisition relationships are identified, the Israeli military technology ecosystem integration finding deepens further. This is currently an open question rather than a confirmed finding, and the score is based on structural footprint rather than a Wiz-specific military contract finding.
The AnyVision divestment in March 2020 — following an independent audit — represents a documented instance of Microsoft exiting a surveillance-technology relationship after scrutiny, and could be cited as evidence of responsive governance. The audit is precise on its temporal scope: the relationship ended in 2020 and is flagged as pre-audit discontinued. It does not offset findings concerning the Unit 8200 Azure relationship, which postdates the divestment by multiple years and was confirmed active during the Gaza war.
The Dutch Data Protection Authority’s apparent non-engagement with the Netherlands data centre finding is a regulatory gap. GDPR jurisdiction over Unit 8200’s use of Microsoft’s Netherlands infrastructure is at minimum arguable; the absence of a Dutch DPA investigation or enforcement action as of May 2026 cannot be read as regulatory clearance, but it is a limit on the evidence of third-party legal validation of the finding.
| Entity / Person | Role | Finding | Key Sources |
|---|---|---|---|
| Microsoft Corporation | Cloud infrastructure operator; AI provider | Direct operator of Azure used by IMOD/Unit 8200; confirmed Intelligence Integration finding | 127 |
| Unit 8200 | IDF signals intelligence | Used Netherlands Azure to store intercepted Palestinian communications | 230 |
| Wiz (Microsoft subsidiary post-Q1 2026) | Cloud security platform | Founded by Unit 8200 alumni; $32B acquisition; CNAPP embedded in Microsoft | 3445 |
| Assaf Rappaport | Wiz CEO and co-founder | Unit 8200 alumnus; former head of Microsoft Israel R&D Center | 45 |
| Yinon Costica, Roy Reznik, Ami Luttwak | Wiz co-founders | Unit 8200 alumni; all formerly Microsoft Israel R&D | 45 |
| Microsoft Israel R&D Center | R&D subsidiary | 30 product teams; cybersecurity, AI, cloud; Israeli Intelligence Community Law exposure | 4448 |
| Aorato | Acquired 2014 | Unit 8200-alumni founded; became Defender for Identity | 14 |
| Adallom | Acquired 2015 | Unit 8200-alumni founded; became Defender for Cloud Apps | 15 |
| Secure Islands | Acquired 2015 | Data classification/protection; became Microsoft Information Protection | 16 |
| Hexadite | Acquired 2017 | AI security automation (SOAR); integrated into Defender | 17 |
| Cloudyn | Acquired 2017 | Cloud cost management (Israeli-founded); became Azure Cost Management | 18 |
| CyberX | Acquired 2020 | IoT security (Israeli-founded); became Azure Defender for IoT | — |
| Palantir Technologies | Azure Government partner | AI Platform and Foundry on Azure Government; separate IMOD contract reported | 4647 |
| OpenAI | ~49% economic interest; Azure exclusive | Advanced AI models available to Israeli military via Azure OpenAI Service | 7 |
| AnyVision / Oosto | M12 investment, divested 2020 | Facial recognition; West Bank checkpoint use reported; Microsoft divested after audit | 19 |
| Corsight AI | Israeli facial recognition | Azure infrastructure reported; technology at West Bank checkpoints reported; no primary Microsoft contract confirmed | — |
| Brad Smith | Microsoft President | Authored September 2025 partial-restriction statement | 2 |
| Israeli Intelligence Community Law (5777-2017) | Israeli statute | Section 7 mandates assistance to intelligence agencies; applies to R&D Center personnel | 48 |
| +972 Magazine / Local Call | Investigative journalism | Primary reporting on Unit 8200 Netherlands Azure hosting | 30 |
| UN Special Rapporteur A/HRC/59/23 | International framework | “Economy of occupation to economy of genocide”; UNGP framework applicable to Microsoft | 49 |
| OHCHR settlement database (A/HRC/43/71) | UN database | Microsoft not listed; absence not equivalent to clearance | 50 |
Microsoft’s economic footprint in Israel is substantial, multi-decade, and structurally embedded in the Israeli technology ecosystem at a level well above ordinary market presence. The V-ECON finding reflects three distinct layers of economic integration: a long-running physical and human-capital presence rooted in the 1991 R&D centre; a pattern of acquisitive investment in Israeli-founded technology companies that has deepened and accelerated over thirty years; and a set of commercial relationships — including the IMOD contract and settlement-council software provision — that connect Microsoft’s economic activity to contested aspects of Israeli state administration.
The R&D and physical-footprint layer is the foundation. Microsoft’s Israel R&D Center, established 1991, is one of Microsoft’s strategic global centres and was its first non-US R&D facility.13 With 30 product teams across cybersecurity, AI, and cloud platform domains, the centre’s output is embedded in products that generate substantial global revenue for Microsoft. The 2020 Herzliya campus, estimated at NIS 350 million investment, consolidated approximately 2,300 Israeli employees — roughly 2,000 in R&D and 300 in sales and marketing — into a purpose-built facility.38 Microsoft’s January 2020 announcement of the Israel Central Azure region described the project as part of Microsoft’s “continuous commitment” to the Israeli market and a “key part of its investment and involvement in the ‘startup nation.'”13 These are not passive market-presence characteristics but actively managed and publicly celebrated strategic investments.
The acquisitions layer amplifies this footprint. Between 2014 and 2020, Microsoft acquired six Israeli-founded or Israeli-linked technology companies: Aorato, Adallom, Secure Islands, Hexadite, Cloudyn, and CyberX.1415161718 Each acquisition transferred Israeli-origin intellectual property, Israeli engineering talent, and, in several cases, alumni of Israeli military intelligence into Microsoft’s corporate structure. The financial and technological benefit flows have been predominantly into Microsoft (acquiring core cybersecurity and cloud product capabilities) while contributing to the Israeli technology sector’s capital formation and talent pipelines. The July 2024-announced, Q1 2026-closed Wiz acquisition for approximately $32 billion — described as the largest in Microsoft’s history — represents the apex of this trend, embedding a Unit-8200-alumni-built cloud security platform as a wholly owned Microsoft subsidiary.34
The civil-society database documentation of settlement-council software provision activates the V-ECON Settlement Nexus Escalator. Who Profits and AFSC Investigate both document Microsoft’s provision of Office 365, Windows, and Dynamics ERP to settlement municipal councils in the West Bank, including Ariel Industrial Zone, Beit El, and Ma’ale Adumim, based on Israeli government procurement registry entries and media reports.56 Microsoft’s Israel Central Azure region and the cloud backbone for Israeli government digital services — including administrative services that extend to settlement administrative districts — further connect Microsoft’s economic infrastructure to the administration of occupied territories.51 Primary procurement contracts for settlement-council Microsoft licensing have not been independently confirmed from primary government documents; the NGO documentation based on procurement-registry entries meets the Tier 3 evidentiary weight standard under the rubric’s Principle 9 and is treated as sufficient to trigger the escalator floor, while not treated as equivalent to a primary document finding.
The Project Nimbus relationship requires careful characterisation. Microsoft was not selected as a prime contractor in the April 2021 Nimbus tender, which was awarded jointly to AWS and Google.20 However, Microsoft’s pre-existing and parallel Azure relationship with IMOD — the $133 million contract, the 635 subscriptions, the Unit 8200 Azure environment — constitutes a substantial separate track of cloud provision to Israeli government and military bodies that operated alongside and concurrent with Nimbus. The IMOD Azure relationship continued after the 7 October 2023 attacks and after the ICJ Advisory Opinion of 19 July 2024, with only a partial restriction announced in September 2025.2 This parallel track means that Microsoft’s economic contribution to Israeli state digital capacity is not simply a market-participation fact but an active ongoing provision extending through the period of the Gaza military operations.
The constructive-notice dimension in V-ECON parallels that in V-MIL and V-DIG: Microsoft’s economic relationship with IMOD continued as a documented, publicly acknowledged commercial relationship for at minimum 14 months after the ICJ Advisory Opinion, which articulated third-party obligations to cease activities supporting Israel’s unlawful occupation. The September 2025 partial restriction was framed as AUP enforcement rather than a response to international legal obligations, and Microsoft has not publicly announced termination of the broader IMOD relationship.
The Israeli-Nexus Floor is not triggered. Microsoft was founded in Albuquerque, New Mexico in 1975 and incorporated in Washington state in 1981; its global headquarters are in Redmond, Washington; it has no Israeli parent, no Israeli controlling shareholder, and no documented Israeli tax residency as a primary registered entity.5237 This means the V-ECON score is capped below the 8.5 floor that would apply to Israeli-founded or Israeli-domiciled companies, reflecting that Microsoft’s primary economic identity and capital flows are US-based. However, the scale of Microsoft’s Israeli operations — among the largest technology employer and infrastructure providers in Israel — and the confirmed settlement-nexus escalator mean the score comfortably reaches the Core R&D band (7.0–7.4) with the escalator floor active.
The primary challenge to the V-ECON score is the specificity of the settlement-council software provision finding. Who Profits and AFSC documentation of Office 365 and Windows provision to Ariel, Beit El, and Ma’ale Adumim councils is derived from NGO interpretation of procurement-registry entries and media reports rather than from primary government contract documents, which are not publicly released. A critic could argue that general software licensing through standard government procurement channels does not constitute a purposeful settlement-economy relationship and that Microsoft has no practical means of excluding settlement councils from Israeli government software licensing agreements. This challenge is acknowledged: the settlement-nexus escalator is triggered at floor level (6.1–6.9) rather than as a standalone primary finding, precisely because the evidentiary weight is Tier 3.
A second challenge concerns the temporal error in the prior audit cycle. A Guardian article dated 12 May 2026 was cited in the draft audit for the claim that Alon Haimovich described Israel as “one of Microsoft’s fastest-growing markets worldwide.” As of the audit date (1 May 2026), that article had not yet been published and the specific quoted language cannot be verified. The departure itself — and its connection to the internal inquiry into IMOD dealings — is supported by the V-MIL audit’s separate documentation of the event.36 The specific market-framing quotation is excluded from load-bearing use in this dossier.
A third challenge is the non-disclosure of Israel-specific financial data. Microsoft’s FY2025 annual report states that no country outside the United States accounted for more than 10% of revenue, meaning Israeli revenue is not separately disclosed.37 The IMOD contract ($133M over three years) falls below any material-contract disclosure threshold given Microsoft’s global scale. This means economic-contribution quantification rests on disclosed indicators (employee count, campus investment, acquisition values) rather than revenue or profit figures, reducing precision. The settlement-council and broader Israeli government software provision generates revenue that is not separately reported.
| Entity / Person | Role | Finding | Key Sources |
|---|---|---|---|
| Microsoft Corporation | Acquirer, employer, infrastructure provider | Multi-decade R&D, campus, datacenter, acquisitions | 133738 |
| Microsoft Israel R&D Center | Core operational entity | 30 product teams, 1991 founding, strategic global centre | 4413 |
| Wiz (subsidiary post-Q1 2026) | Acquired Israeli cloud security company | $32B acquisition; Unit 8200-alumni founders; CNAPP | 34 |
| Aorato / Adallom / Secure Islands / Hexadite / Cloudyn / CyberX | Acquired Israeli-founded companies | Integrated into Defender suite, Azure Cost Management, Azure IoT Defender | 1415161718 |
| Herzliya Campus | Physical infrastructure | 46,000 sqm, ~NIS 350M, opened 2020, ~2,300 employees | 38 |
| Israel Central Azure region | Cloud infrastructure | Live 2023; data-at-rest within Israel | 21 |
| M12 (Microsoft venture fund) | Investment vehicle | Israeli startup investments; AnyVision (divested 2020) | 19 |
| Ariel Industrial Zone, Beit El, Ma’ale Adumim | Settlement municipal councils | Documented Office 365/Windows/Dynamics recipients per Who Profits/AFSC | 56 |
| Israeli Ministry of Interior | Government customer | Azure and Office 365 customer; population registry administration | 51 |
| Israel Ministry of Defense (IMOD) | Primary military-economic customer | $133M contract, 635 subscriptions | 71 |
| Project Nimbus (AWS/Google) | Government cloud contract | Microsoft not a Nimbus prime; parallel IMOD Azure relationship distinct | 20 |
| Who Profits Research Centre | NGO database | Settlement-council software provision documentation | 5 |
| AFSC Investigate | NGO database | Microsoft software to IDF, settlement-linked entities | 6 |
| UN SR Albanese A/HRC/59/23 | International framework | “Digital infrastructure of occupation” category applicable to Microsoft IMOD relationship | 49 |
| Brad Smith | Microsoft President | Authored September 2025 partial-restriction statement; June 2023 Jerusalem advocacy speech | 253 |
| Alon Haimovich | Microsoft Israel GM | Departed May 2026 following internal inquiry | 36 |
Microsoft’s V-POL score reflects a convergent set of corporate acts — across platform governance, employee relations, shareholder governance, and public communications — that collectively constitute a pattern of institutional behaviour that suppresses accountability for the IMOD relationship, discriminates against Palestinian expression on Microsoft-owned platforms, and places senior executive authority behind the Israeli-government partnership. The findings do not include any direct financial support for Israeli political campaigns, settlements, or military-welfare organisations, which distinguishes this from the highest V-POL bands.
The platform-governance findings are the most structurally significant. LinkedIn, a wholly owned Microsoft subsidiary acquired in 2016, operates the world’s largest professional networking platform and an Israel-based engineering hub in Tel Aviv. The October 2025 7amleh report, based on 15 user testimonies and interviews with LinkedIn and Microsoft employees, documented restrictions on human-rights and humanitarian content supportive of Palestinians, with allegations of asymmetric application of content moderation policies.32 The Committee to Protect Journalists and Access Now separately documented the removal or restriction of profiles of Palestinian journalists and activists on LinkedIn in 2024.54 These are not individual content-moderation errors but a documented, multi-source pattern of asymmetric enforcement affecting Palestinian civil-society voices. Because LinkedIn is a Microsoft-owned, Microsoft-operated platform, these acts are directly attributable to Microsoft’s corporate authority rather than to a third-party platform.
The Outlook email filtering finding adds a second platform-governance dimension. CNBC reported in May 2025 that Microsoft employees stated Outlook emails containing terms including “Gaza,” “Palestine,” “genocide,” “apartheid,” and “IOF off Azure” were not sending, with Microsoft communications chief Frank Shaw stating that emails were not blocked or censored unless sent to large random distribution groups.55 Whether the filtering was intentional censorship or an automated spam-prevention mechanism remains disputed, but its effect — preventing internal employee communication about the Israel/Gaza conflict — occurred within a corporate email platform operated by Microsoft for its own workforce.
The employee-termination record constitutes a documented pattern across three separate incidents from 2024 and 2025. In 2024, two employees were terminated after organising an unauthorised campus vigil for Palestinians.23 In April 2025, Microsoft fired two additional employees — Ibtihal Aboussad and Vaniya Singh — who disrupted the company’s 50th anniversary event to protest Israel contracts.27 In August 2025, two further employees — Nisreen Jaradat and Julius Shan — were fired following campus protests related to Microsoft’s Israel contracts.29 Microsoft characterised each termination as a response to code-of-conduct violations related to disrupting company events; the terminated employees and the No Azure for Apartheid campaign characterised them as retaliation for pro-Palestinian political speech. The pattern — four employees across three incidents over approximately sixteen months, all linked to Israel-contract protest activity — is treated as a convergent finding rather than isolated incidents.
The shareholder-governance record reflects board-level institutional choice. At Microsoft’s December 2024 annual general meeting, a shareholder resolution requesting a report on Microsoft’s adherence to its human rights policies in the context of its Israeli military contracts received approximately 24% support; the board recommended against.26 At the December 2025 annual general meeting, a related shareholder resolution on AI and cloud human rights due diligence received 26.34% support; the board again recommended against.33 Both resolutions were opposed by Microsoft management, and both received declining-to-approve majorities. The trend — 24% rising to 26.34% across consecutive years — shows growing minority shareholder support for accountability measures that Microsoft’s board has consistently blocked. Opposition to a shareholder resolution is a normal corporate governance act and not in itself indicative of bad faith; however, the specific subject matter (human rights due diligence for AI and cloud in the Israeli military context) and the pattern of escalating minority support across two cycles is treated as a Principle J3/convergence finding in the V-POL framework.
Brad Smith’s June 2023 speech at the Israeli Presidential Conference in Jerusalem, titled “Israel at 75,” in which he praised Israel’s technology ecosystem and described Microsoft’s long partnership with the Israeli government and defence sector, constitutes a documented instance of senior executive public advocacy for the Microsoft–Israeli government partnership at a state-sponsored conference.53 The speech was delivered approximately four months before the October 7 attacks. It is treated as an Institutional Legitimation finding under V-POL rubric Band 6.1–6.9: a controlling principal publicly endorsing the Israeli state-corporate partnership at an official state event. It is a single documented instance, not a pattern, and is treated accordingly in calibrating the score below the full Band 6.1–6.9 ceiling.
The Russia/Ukraine comparative-silence finding is a Principle J3 convergence indicator rather than a standalone finding. Microsoft’s response to Russia’s February 2022 invasion of Ukraine included an explicit public statement that the invasion was “tragic, unlawful and unjustified,” a suspension of all new product and service sales in Russia from March 2022, and approximately $100 million in additional free technology support for Ukraine through calendar year 2023.56 Microsoft’s response to the October 2023 Gaza conflict — as documented across the October 2023 employee communication, May 2025 statement, and September 2025 partial restriction — involved no analogous market withdrawal, no characterisation of the conflict as unlawful, and no comparable technology donation to Palestinian relief organisations. The differential framing and differential corporate response to two conflicts involving documented military operations and civilian casualties is a Double Standard indicator under the V-POL rubric.
Microsoft’s humanitarian-framing of “limited emergency support to the Israeli government to help rescue hostages” in the weeks following October 7 — cited in the May 2025 statement — without specifying the technologies or Israeli government bodies receiving that support, the absence of independent verification of the “hostage rescue” characterisation, and the continuation of the IMOD commercial relationship throughout the same period, is consistent with the humanitarian-washing framing documented in UN SR Albanese’s report A/HRC/59/23 at §§87–93.149
The V-POL score is held at Systemic/Algorithmic Bias (5.1–6.0) rather than elevated to Militaristic Branding/Institutional Legitimation (6.1–6.9) primarily because Brad Smith’s Jerusalem speech is a single documented instance of state-sponsored advocacy rather than a sustained pattern of institutional co-branding, and because no direct financial support for FIDF, JNF, settlement organisations, or Israeli military-welfare bodies has been identified for Nadella, Smith, Gates, or current board members. Those findings, if present, would push the score into Band 7 or higher. Their absence is not confirmed to be permanent — the IRS 990 review for FY2022–2024 was not conducted in the reviewed sources — but no affirmative evidence was found.
The LinkedIn content-moderation findings rest on 7amleh’s qualitative testimonies and Access Now/CPJ documentation of specific profile removals. A critic could argue that content-moderation decisions are operational and automated rather than politically directed, and that LinkedIn applies its policies uniformly across content violating community standards regardless of political context. This argument is acknowledged, but it does not fully account for the asymmetric pattern documented across multiple independent sources and corroborated by internal employee accounts in 7amleh’s report.
The Outlook keyword filtering finding is the most contested element. Microsoft’s explanation — automated filtering of messages sent to large random distribution groups — is not implausible, but the reported terms (“Gaza,” “Palestine,” “genocide,” “apartheid”) are civilian political vocabulary rather than known spam triggers, and the filtering occurred in the specific context of internal Microsoft debate over the IMOD relationship. This remains an unresolved disputed fact rather than a confirmed deliberate censorship finding.
The Neutrality Floor and Constructive-Notice Escalator (J6) are both active in V-POL because V-DIG and V-ECON both score above 5.0 and because Microsoft’s board-level opposition to accountability shareholder resolutions, platform moderation patterns, and employee disciplinary actions continued after the ICJ Advisory Opinion and ICC warrants. These escalators lift the floor of the V-POL score but do not independently determine the ceiling.
| Entity / Person | Role | Finding | Key Sources |
|---|---|---|---|
| Microsoft Corporation | Corporate actor | Systematic pattern of accountability suppression; platform governance; employee discipline | 12 |
| Brad Smith | President and Vice Chair | June 2023 Jerusalem advocacy speech; authored May and September 2025 IMOD statements | 5312 |
| Satya Nadella | CEO | October 2023 employee communication; April 2025 disruption by protesters | 2227 |
| Microsoft subsidiary | Documented asymmetric content moderation against Palestinian accounts | 3254 | |
| Ibtihal Aboussad, Vaniya Singh | Terminated employees (April 2025) | Fired following 50th anniversary protest against Israel contracts | 27 |
| Nisreen Jaradat, Julius Shan | Terminated employees (August 2025) | Fired following campus protests related to Israel contracts | 29 |
| No Azure for Apartheid | Worker campaign | Organised protests, open letters, shareholder-resolution support | 24 |
| Frank Shaw | Microsoft Chief Communications Officer | Disputed Outlook keyword-filtering characterisation | 55 |
| 7amleh | NGO | October 2025 report on LinkedIn moderation bias | 32 |
| Access Now / CPJ | NGOs | Palestinian journalist LinkedIn profile removals | 54 |
| CCR / SOMO / GLAN coalition | Legal advocacy | December 2025 notice alleging potential aiding-and-abetting liability | 35 |
| HRW / Amnesty International coalition | Civil society | October 2025 letter urging Microsoft to suspend Israel-linked activities | 57 |
| BDS movement | Civil society boycott | April 2025 addition of Microsoft and Xbox to boycott targets | 28 |
| SEC DEF 14A (FY2024 proxy) | Regulatory filing | Shareholder resolution (~24% support); board recommended against | 26 |
| SEC DEF 14A (FY2025 proxy) | Regulatory filing | Shareholder resolution (26.34% support); board recommended against | 33 |
| Israeli Presidential Conference | State-sponsored forum | Venue for Brad Smith’s June 2023 “Israel at 75” speech | 53 |
| Rafael Advanced Defense Systems | Israeli state-owned defence | Named by Microsoft in 2020 cloud announcement as Azure customer | 13 |
The general-purpose technology argument. Microsoft’s products — Azure cloud, Office 365, Windows, Azure AI services — are commercially available general-purpose technologies. Microsoft has never developed, manufactured, or sold a lethal system or weapons platform to any Israeli entity. Critics of the BDS-1000 methodology could argue that a technology company’s commercial availability to all customers, including military ones, does not constitute the kind of purposive military-economic integration that BDS-targeted assessments are designed to identify, and that applying the same framework to a cloud vendor and a weapons manufacturer obscures meaningful moral and legal distinctions. The dossier acknowledges this argument. The BDS-1000 rubric’s V-MIL classification logic reflects it: Microsoft’s V-MIL score is capped at logistical sustainment precisely because no lethal-systems finding exists. The V-DIG score does not rest on generic cloud provision but on a specifically confirmed case of military intelligence surveillance data hosting, confirmed by Microsoft itself.
The partial-restriction mitigation. Microsoft’s September 2025 decision to disable specified subscriptions — rather than doing nothing — represents a documented corporate compliance action. A mitigation argument would hold that a company that takes action when presented with evidence of AUP-violating use is behaving responsibly under its stated terms and that this should reduce the overall score. The scoring does credit this action: the score is not at the maximum for any domain. However, the action was partial (specified subscriptions only), delayed (at minimum 14 months post-ICJ Advisory Opinion), reactive (triggered by external investigative journalism rather than proactive compliance review), and did not resolve the broader IMOD commercial relationship. These factors limit the mitigating weight of the action.
Absence of controlling-principal personal findings. No confirmed evidence of Satya Nadella, Brad Smith, or current board members holding Israeli defence-industry equity stakes, FIDF donations, or JNF/settlement-organisation formal memberships has been identified. This absence prevents activation of the Controlling Principal Carry-Through escalator (P=9.0 for V-POL) and limits the V-POL ceiling. The limitation is explicitly noted in the scoring rationale: confirmed controlling-principal personal military-donation or settlement-financing findings would materially increase the V-POL score and the composite. IRS 990 filings for FY2022–2024 were not reviewed in the source materials.
The OHCHR database non-listing. Microsoft is not listed in the OHCHR database of business enterprises involved in Israeli settlement activities (A/HRC/43/71 and subsequent iterations).50 This is a factual absence that should be noted. However, the database’s mandate covers specified settlement-activity categories and is not an exhaustive human-rights audit; absence from the database cannot be treated as a finding of non-involvement. The settlement-nexus escalator in V-ECON rests on civil-society database documentation rather than OHCHR listing, which is appropriate under Tier 3 evidentiary standards.
| Entity / Person | Category | Domains | Key Role |
|---|---|---|---|
| Microsoft Corporation | Subject company | All | Direct contractor, cloud operator, employer, platform operator |
| Israel Ministry of Defense (IMOD) | Government customer | V-MIL, V-DIG, V-ECON | $133M contract counterparty; Azure customer |
| Unit 8200 | IDF intelligence unit | V-MIL, V-DIG | Netherlands Azure environment for Palestinian surveillance data |
| Mamram | IDF IT corps | V-MIL | 2002 MOD framework party; active subscription holder |
| Israel Police | Government customer | V-MIL | 2024 Azure sole-supplier tenders |
| Wiz (Microsoft subsidiary post-Q1 2026) | Acquired subsidiary | V-DIG, V-ECON | $32B acquisition; Unit 8200-alumni CNAPP platform |
| Assaf Rappaport | Executive | V-DIG, V-ECON | Wiz CEO and co-founder; Unit 8200 and Microsoft Israel alumni |
| Elbit Systems | Defence prime | V-MIL | OneSim on Azure; $107M IDF tank training (cloud host ambiguous) |
| Rafael Advanced Defense Systems | State-owned defence | V-ECON, V-POL | Named as Azure customer in Microsoft 2020 Israel announcement |
| Microsoft Israel R&D Center | Operating entity | V-DIG, V-ECON | 30 product teams; Israeli Intelligence Community Law exposure |
| Alon Haimovich | Former executive | V-MIL, V-ECON | Microsoft Israel GM; departed May 2026 after internal inquiry |
| Brad Smith | Executive | V-POL, V-MIL, V-DIG | Primary public voice on IMOD relationship; June 2023 Jerusalem speech |
| Satya Nadella | Executive | V-POL | CEO; October 2023 employee communication |
| Microsoft subsidiary | V-POL | Asymmetric content moderation against Palestinian accounts | |
| GitHub | Microsoft subsidiary | V-MIL, V-ECON | Alleged IDF enterprise contract; not confirmed |
| OpenAI | ~49% economic interest | V-DIG | Advanced AI models via Azure OpenAI Service to Israeli military |
| Palantir Technologies | Azure Government partner | V-DIG | AI Platform on Azure; separate IMOD contract; indirect pathway |
| Covington & Burling | External law firm | V-DIG, V-POL | Commissioned reviews (2020 AnyVision audit; 2025 Guardian allegations review) |
| AnyVision / Oosto | Former M12 investment | V-DIG | Facial recognition; West Bank checkpoints; Microsoft divested 2020 |
| No Azure for Apartheid | Campaign | V-MIL, V-POL | Worker-led; demands contract termination and disclosure |
| Ibtihal Aboussad, Vaniya Singh | Terminated employees | V-POL | Fired April 2025 following 50th anniversary protest |
| Nisreen Jaradat, Julius Shan | Terminated employees | V-POL | Fired August 2025 following campus protests |
| 7amleh | NGO | V-POL | LinkedIn content moderation bias report, October 2025 |
| Amnesty International | NGO | V-MIL, V-DIG | Called for investigation of all Microsoft Israel security contracts |
| Who Profits Research Centre | NGO database | V-MIL, V-ECON | Settlement-council software provision; IMOD cloud documentation |
| AFSC Investigate | NGO database | V-MIL, V-ECON, V-DIG | Microsoft Azure and AI to Israeli military and government |
| Irish Council for Civil Liberties | Legal complainant | V-MIL, V-DIG | December 2025 DPC complaint re: Azure and IDF data |
| CCR / SOMO / GLAN coalition | Legal advocates | V-POL | December 2025 legal notice on aiding-and-abetting allegations |
| UN SR Albanese A/HRC/59/23 | International framework | V-DIG, V-ECON, V-POL | “Economy of occupation to economy of genocide”; digital infrastructure category |
| OHCHR settlement database (A/HRC/43/71) | UN database | V-MIL, V-DIG, V-ECON | Microsoft not listed; absence noted but not treated as clearance |
| Associated Press | Journalism | V-MIL, V-DIG | Primary reporting on $133M contract and 635 subscriptions |
| The Guardian / +972 Magazine | Journalism | V-MIL, V-DIG, V-POL | Unit 8200 Netherlands Azure; Haimovich departure |
| Israeli Intelligence Community Law (5777-2017) | Statute | V-DIG | Section 7 assistance mandate; applies to R&D Center personnel |
| Domain | I | M | P | V-Score |
|---|---|---|---|---|
| V-MIL | 3.50 | 6.50 | 7.50 | 3.25 |
| V-DIG | 7.50 | 8.00 | 9.00 | 7.50 |
| V-ECON | 7.00 | 7.50 | 8.00 | 7.00 |
| V-POL | 5.50 | 6.00 | 8.50 | 4.71 |
Composite BDS-1000 Score: 656 — Tier B (600–799)
V-DIG is the dominant domain (V_MAX = 7.50), reflecting Microsoft’s confirmed role as direct operator of cloud and AI infrastructure used by Israeli signals intelligence for mass surveillance of Palestinian civilians. V-MIL is held at the logistical-sustainment band (I = 3.50) by the rubric’s deliberate exclusion of commercial software and cloud services from kinetic or lethal-systems scope, yielding a V-MIL score below the domain’s own magnitude and proximity scores. V-ECON reflects the Core R&D band with the Settlement Nexus Escalator floor active, limited below the 8.5 indigenous-capital ceiling because Microsoft is US-founded and US-headquartered. V-POL sits in the Systemic/Algorithmic Bias band, bounded below the militaristic-branding ceiling because no direct controlling-principal military-donation or settlement-financing finding was confirmed.
The composite formula weights V_MAX at full value and sums the remaining three domain scores at 20%, divided by 16, scaled to 1,000:
BRS = ((7.50 + (3.25 + 7.00 + 4.71) × 0.2) / 16) × 1000 = 656
High-confidence findings: The $133 million IMOD contract; the 635 IDF subscriptions including Mamram and Unit 8200; approximately 130 Azure military support requests during the first ten months of the Gaza war; the Unit 8200 Netherlands Azure surveillance-data hosting (confirmed by Microsoft itself); the September 2025 partial restriction; the series of Unit-8200-alumni company acquisitions; the Wiz acquisition close; the four documented employee terminations; the two consecutive shareholder-resolution cycles.
Moderate-confidence findings: Settlement-council software provision (Who Profits/AFSC NGO documentation based on procurement-registry entries; not primary-document confirmed). LinkedIn content-moderation asymmetry (qualitative testimonies and documented profile removals; denied as systematic policy by LinkedIn). Outlook keyword filtering (reported by employees; Microsoft disputed the characterisation). The claim that advanced AI models purchased via Azure were used for targeting-proximate surveillance functions (reported by AP; not confirmed by Microsoft as a targeting-chain function).
Open questions that would materially change the score:
– Confirmation that Azure AI services constituted a functional input into a targeting or kill-chain decision process would push V-DIG into the Algorithmic Lethality band (8.0–8.9) and increase the composite score.
– Confirmation of Wiz contracts with Israeli government, military, or intelligence bodies prior to or post-acquisition would deepen the V-DIG and V-ECON findings.
– Identification of FIDF, JNF, or settlement-organisation financial contributions by Nadella, Smith, or current board members would activate the Controlling Principal Carry-Through escalator in V-POL (P = 9.0) and increase the V-POL domain score.
– Dutch DPA, Irish DPC, or other EU regulatory enforcement action on the Netherlands data-centre hosting would elevate the legal-risk dimension and potentially change the regulatory-history findings.
– Public confirmation of the scope of remaining active IMOD contracts post-September 2025 is needed to assess whether the partial restriction has been widened.
– Primary government contract documents for settlement-council Microsoft software licensing would either confirm or narrow the settlement-nexus escalator finding.
– The alleged GitHub IDF enterprise contract remains unconfirmed; confirmation would add a V-MIL supply-chain finding.
The following recommended actions are grounded in the validated score, evidence base, and uncertainty levels documented above. They reflect the BDS-1000 framework’s purpose of providing actionable guidance for investors, institutions, and civil-society actors rather than legal conclusions.
For institutional investors and pension funds (Tier B, V-DIG 7.50): The confirmed Intelligence Integration finding in V-DIG — Microsoft as direct operator of cloud infrastructure used by Israeli signals intelligence for mass surveillance — satisfies the evidentiary threshold that responsible-investment policies typically require for formal engagement. A structured engagement programme requesting full disclosure of the scope of remaining active IMOD contracts post-September 2025, a time-bound independent human-rights due-diligence audit (as requested by the shareholder resolution that received 26.34% support), and reporting on whether Wiz subsidiaries have developed Israeli government or military contracts post-acquisition is a proportionate first-stage response. Divestment consideration should be treated as a contingent second stage, to be activated if engagement produces no material disclosure within a defined timeframe or if the kill-chain question is confirmed.
For procurement officers and public-sector technology buyers (Tier B, V-ECON 7.00): The Settlement Nexus Escalator finding and the confirmed IMOD Azure relationship are sufficient triggers for enhanced due-diligence review of cloud and software contracts with Microsoft. Procurement officers in jurisdictions with human-rights supply-chain legislation (e.g., UK Modern Slavery Act, French Duty of Vigilance Law, German Supply Chain Due Diligence Act) should document their review of this dossier and request from Microsoft a written statement confirming the current scope of IMOD and settlement-council service relationships. The V-ECON score does not support a blanket prohibition given Microsoft’s US domicile and the partial-restriction action, but passive procurement without enhanced due diligence is not consistent with the documented findings.
For civil-society organisations and BDS campaign groups (Tier B, V-POL 4.71): The convergent pattern in V-POL — platform moderation, employee terminations, shareholder-resolution opposition — supports continued public campaigning and shareholder engagement. The increasing minority support at consecutive AGMs (24% to 26.34%) demonstrates that institutional investors are responsive to the evidence base. Future shareholder proposals that specifically request disclosure of the post-September 2025 IMOD contract scope, Wiz group-level Israeli government/military relationships, and LinkedIn content-moderation audit results would be consistent with the evidentiary record and build on established precedent. Campaign groups should track the Irish DPC complaint, the Dutch DPA gap, and any OECD NCP filing opportunities as parallel regulatory pressure channels.
For academic and research institutions (V-DIG, V-ECON): The Wiz acquisition close represents an unresolved research gap: no public evidence has been identified of Wiz’s pre-acquisition relationships with Israeli government, military, or intelligence bodies. Post-acquisition auditing of Wiz customer relationships and the Israeli Intelligence Community Law exposure of Wiz’s Israeli engineering personnel is warranted given the structural significance of the acquisition to the V-DIG finding. The kill-chain question — whether Azure AI services constituted a targeting-chain input — is also a priority research gap; the answer would materially change the V-DIG score.
For Microsoft Corporation (responsive action): The September 2025 partial restriction demonstrated that Microsoft has the technical and legal authority to disable specified subscriptions when AUP violations are identified. The evidence base supports the following as proportionate next steps consistent with Microsoft’s own stated policies: (1) public disclosure of the current scope of remaining active IMOD and Israeli security-sector contracts; (2) commissioning and publishing a full human-rights due-diligence assessment of Azure and AI services to Israeli state actors, as requested by Amnesty International in September 2025; (3) extending the AUP review to all Israeli security-sector customers, not solely the Unit 8200 subscriptions; and (4) an independent audit of LinkedIn content-moderation policies for the Israeli-Palestinian conflict context, addressing the documented asymmetry findings.
Microsoft On the Issues, statement on technology in Israel and Gaza, 15 May 2025 — https://blogs.microsoft.com/on-the-issues/2025/05/15/statement-technology-israel-gaza/ ↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩
Microsoft On the Issues, update on ongoing Microsoft review, 25 September 2025 — https://blogs.microsoft.com/on-the-issues/2025/09/25/update-on-ongoing-microsoft-review/ ↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩
Microsoft News Center, announcement of Wiz acquisition, July 2024 — https://news.microsoft.com/2024/07/microsoft-to-acquire-wiz/ ↩↩↩↩↩↩↩
Microsoft Investor Relations, press release on close of Wiz acquisition, 2026 — https://investor.microsoft.com/investor-news/press-release-details/2026/Microsoft-Closes-Wiz-Acquisition/default.aspx ↩↩↩↩↩↩↩
Who Profits Research Centre, Microsoft Corporation company profile — https://www.whoprofits.org/companies/company/microsoft ↩↩↩↩↩
AFSC Investigate, Microsoft Corporation entry — https://investigate.afsc.org/company/microsoft ↩↩↩↩
Associated Press, reporting on Israel, AI, and Microsoft Azure contracts, 2025 — https://apnews.com/article/israel-palestinians-ai-technology-737bc17af7b03e98c29cec4e15d0f108 ↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩
Globes, Israel MoD and Microsoft framework agreement, 9 December 2002 — https://en.globes.co.il/en/article-641798 ↩↩↩↩↩
HRW/Amnesty International letter to Microsoft, October 2025 — https://www.hrw.org/news/2025/10/10/israel/palestine-microsoft-should-avoid-contributing-rights-abuses ↩
CNBC, Microsoft Outlook email filtering of Gaza and Palestine terms, May 2025 — https://www.cnbc.com/2025/05/22/microsoft-emails-gaza-palestine.html ↩
No Azure for Apartheid, Microsoft complicity profile and campaign demands — https://noazureforapartheid.com/why-microsoft/ ↩
BDS movement addition of Microsoft and Xbox to boycott targets, April 2025 — https://www.polygon.com/news/554879/bds-palestine-israel-xbox-microsoft-boycott-candy-crush-minecraft-call-of-duty ↩
Microsoft Source EMEA, announcement of Israel cloud datacenter region, 22 January 2020 — https://news.microsoft.com/source/emea/features/microsoft-to-launch-new-cloud-datacenter-region-in-israel/ ↩↩↩↩↩↩↩↩
Microsoft Official Blog, acquisition of Aorato, 13 November 2014 — https://blogs.microsoft.com/blog/2014/11/13/microsoft-acquires-aorato-give-enterprise-customers-better-defense-digital-intruders-hybrid-cloud-world ↩↩↩↩↩↩
Microsoft Official Blog, acquisition of Adallom, 8 September 2015 — https://blogs.microsoft.com/blog/2015/09/08/microsoft-acquires-adallom-to-advance-identity-and-security-in-the-cloud/ ↩↩↩↩↩↩
Microsoft Official Blog, acquisition of Secure Islands, 9 November 2015 — https://blogs.microsoft.com/blog/2015/11/09/microsoft-to-acquire-secure-islands-a-leader-in-data-protection-technology/ ↩↩↩↩↩↩
Microsoft News Center, agreement to acquire Hexadite, 8 June 2017 — https://news.microsoft.com/2017/06/08/microsoft-signs-agreement-to-acquire-hexadite/ ↩↩↩↩↩↩
Microsoft Official Blog, acquisition of Cloudyn, 29 June 2017 — https://blogs.microsoft.com/blog/2017/06/29/microsofts-acquisition-cloudyn-will-help-azure-customers-manage-optimize-cloud-usage/ ↩↩↩↩↩↩
M12, joint statement on AnyVision divestment, 27 March 2020 — https://m12.vc/news/joint-statement-by-microsoft-anyvision/ ↩↩↩
Reuters via Investing.com, Israel selects AWS and Google for Project Nimbus, April 2021 — https://www.investing.com/news/technology-news/israel-picks-amazons-aws-google-for-flagship-cloud-project-2480804 ↩↩↩
Data Center Dynamics, Microsoft Israel Central Azure region launch, October 2023 — https://www.datacenterdynamics.com/en/news/microsoft-quietly-launches-israeli-azure-cloud-region/ ↩↩↩
GeekWire, Satya Nadella employee communication on Israel attacks, October 2023 — https://www.geekwire.com/2023/microsoft-ceo-heartbroken-by-attacks-on-israel-tech-giant-has-nearly-3k-employees-in-the-country/ ↩↩↩
Associated Press, Microsoft fires employees who organised Palestinian vigil, 2024 — https://apnews.com/article/90541d4130d4900c719d34ebcd67179d ↩↩
The Intercept, Microsoft workers protest Azure contract with Israeli military, April 2024 — https://theintercept.com/2024/04/18/microsoft-workers-protest-azure-contract-israeli-military/ ↩↩↩
The Intercept, GitHub employees condemn contract with Israeli military, May 2024 — https://theintercept.com/2024/05/17/github-workers-letter-israel-military-contract/ ↩
Microsoft SEC DEF 14A proxy filing, FY2024 annual meeting — https://www.sec.gov/Archives/edgar/data/789019/000095017024116696/msft-20241023.htm ↩↩↩
The Guardian, Microsoft fires workers who protested at Nadella speech, April 2025 — https://www.theguardian.com/technology/2025/apr/microsoft-fires-engineers-protest-nadella-israel ↩↩↩↩
BDS movement, Microsoft and Xbox boycott listing, April 2025 — https://www.polygon.com/news/554879/bds-palestine-israel-xbox-microsoft-boycott-candy-crush-minecraft-call-of-duty ↩↩
The Verge, Microsoft fires two more No Azure for Apartheid protesters, August 2025 — https://www.theverge.com/microsoft/767841/microsoft-fires-two-more-protesters-no-azure-for-apartheid ↩↩↩
+972 Magazine, Microsoft storing Israeli intelligence trove used to attack Palestinians, August 2025 — https://www.972mag.com/microsoft-8200-intelligence-surveillance-cloud-azure/ ↩↩↩↩↩↩↩
Amnesty International, Microsoft block on Israeli military unit, September 2025 — https://www.amnesty.org/en/latest/news/2025/09/microsoft-block-israel-military-unit-from-using-its-technology/ ↩↩↩
7amleh, digital rights report on LinkedIn moderation during Gaza war, October 2025 — https://7amleh.org/post/digital-rights-under-threat-en ↩↩↩↩
Microsoft SEC DEF 14A proxy filing, FY2025 annual meeting — https://fintel.io/doc/sec-microsoft-corp-789019-def-14a-2025-october-21-20382-1431 ↩↩↩
The Guardian, Irish authorities asked to investigate Microsoft over IDF data processing, December 2025 — https://www.theguardian.com/technology/2025/dec/04/irish-authorities-asked-to-investigate-microsoft-over-alleged-unlawful-data-processing-by-idf ↩↩↩
Center for Constitutional Rights, press release on Microsoft legal notice, December 2025 — https://ccrjustice.org/home/press-center/press-releases/microsoft-s-aiding-israel-s-genocide-against-palestinians-exposes ↩↩
The Guardian, head of Microsoft Israel to step down after inquiry, May 2026 — https://www.theguardian.com/technology/2026/may/12/microsoft-head-israel-step-down ↩↩↩↩↩↩
Microsoft FY2025 Annual Report, geographic revenue disclosure — https://www.microsoft.com/investor/reports/ar25/index.html ↩↩↩↩
Times of Israel, Microsoft inaugurates Herzliya campus, November 2020 — https://www.timesofisrael.com/amid-shift-to-work-from-home-microsoft-inaugurates-gigantic-new-herzliya-campus/ ↩↩↩↩
Epicos, Elbit Systems simulation infrastructure becomes cloud native, November 2022 — https://www.epicos.com/article/748104/elbit-systems-simulation-infrastructure-becomes-cloud-native ↩↩
Elbit Systems, $107M IDF Armored Corps training centre contract, January 2023 — https://www.elbitsystems.com/news/elbit-systems-awarded-107-million-contract-israeli-mod-supply-advanced-armor-training-centers ↩↩
AFSC Investigate, Microsoft Corporation, Israel Prison Service and Border Police notation — https://investigate.afsc.org/company/microsoft ↩↩
Israel government procurement portal, Azure Active Directory licensing tender no. 4000590514 — https://www.mr.gov.il/ilgstorefront/he/p/4000590514 ↩
Israel government procurement portal, Azure cloud services sole-supplier notice no. 4000583014 — https://mr.gov.il/ilgstorefront/he/p/4000583014 ↩
Microsoft Israel R&D Center, who we are — https://www.microsoftrnd.co.il/whoweare ↩↩↩
Forbes, profile of Wiz founding team, 2021 — https://www.forbes.com/sites/alexkonrad/2021/03/01/meet-wiz-the-new-6-billion-security-unicorn/ ↩↩↩↩
Microsoft/Palantir partnership announcement, Azure Government, May 2023 — https://news.microsoft.com/2023/05/microsoft-palantir-partnership-azure-government/ ↩↩
Reuters, Palantir signs contract with Israeli Defence Ministry, 2024 — https://www.reuters.com/technology/palantir-signs-contract-with-israels-defence-ministry-2024/ ↩↩
Lawfare, analysis of Israeli Intelligence Community Law 5777-2017 — https://www.lawfaremedia.org/article/israeli-intelligence-community-law-what-you-need-know ↩↩↩
UN A/HRC/59/23, SR Albanese, “From economy of occupation to economy of genocide,” 2 July 2025 — https://www.ohchr.org/en/documents/thematic-reports/ahrc5923-report-special-rapporteur-situation-human-rights-palestinian ↩↩↩
OHCHR, database of businesses involved in settlement activities, A/HRC/43/71 — https://www.ohchr.org/en/hr-bodies/hrc/regular-sessions/session43/list-of-businesses ↩↩
The Guardian, Microsoft AI and cloud used by Israeli military in Gaza war, April 2024 — https://www.theguardian.com/technology/2024/apr/07/microsoft-israel-military-ai-cloud-services-gaza ↩↩
Microsoft Learn, history of Microsoft incorporation, 1981 — https://learn.microsoft.com/en-us/shows/history/history-of-microsoft-1981 ↩
Microsoft On the Issues, Brad Smith “Israel at 75” speech, June 2023 — https://blogs.microsoft.com/on-the-issues/2023/06/29/israel-at-75-brad-smith/ ↩↩↩↩
Committee to Protect Journalists, LinkedIn Palestinian journalist accounts, November 2024 — https://cpj.org/2024/11/cpj-calls-on-linkedin-to-restore-palestinian-journalist-accounts/ ↩↩↩
CNBC, Microsoft emails and Gaza/Palestine keyword filtering, May 2025 — https://www.cnbc.com/2025/05/22/microsoft-emails-gaza-palestine.html ↩↩
Microsoft On the Issues, Ukraine/Russia statements and market suspension, 2022 — https://blogs.microsoft.com/on-the-issues/2022/03/04/microsoft-suspends-russia-sales-ukraine-conflict/ ↩
Human Rights Watch, letter urging Microsoft to avoid contributing to rights abuses, October 2025 — https://www.hrw.org/news/2025/10/10/israel/palestine-microsoft-should-avoid-contributing-rights-abuses ↩
