Audit Phase: V-DIG (Digital Forensics — Cyber-Intelligence & Technology Supply Chain)
Audit Date: 2026-05-01
Prepared for: Internal use
Corporate Scope: Kellogg Company (pre-2023); Kellanova (October 2023–March 2025); Kellanova as wholly owned subsidiary of Mars, Inc. (March 2025–present); WK Kellogg Co (separate entity, out of scope unless separately commissioned)
Critical Limitation Advisory: Live web search was unavailable during the research session underpinning this audit. All findings derive from training-data knowledge with coverage through approximately April 2026. Absence of positive evidence across audit domains is partly attributable to the disclosure gap inherent in consumer goods company SEC filings and to the search tool limitation encountered during research. Findings should be verified against live procurement databases, current Who Profits and AFSC Investigate entries, post-acquisition Mars/Kellanova technology integration filings, and trade press from 2025–2026 before any operational conclusions are drawn.
Kellogg Company underwent a significant structural transformation beginning October 2023, splitting into two independent publicly traded companies: Kellanova (international snacks, crackers, and emerging-market brands) and WK Kellogg Co (North American cereal business, NYSE: KLG).15 Kellanova was subsequently acquired by Mars, Inc. in a transaction valued at approximately $35.9 billion, announced August 20242 and formally completed approximately March 2025.15 As of the audit date, Kellanova operates as a wholly owned subsidiary of Mars, Incorporated. Technology vendor relationships discussed throughout this audit span the 2020–2025 period and encompass legacy Kellogg Company infrastructure as well as the post-split Kellanova entity. WK Kellogg Co’s distinct vendor relationships fall outside this audit’s scope; a separate V-DIG engagement is recommended if WK Kellogg Co is in scope.
Kellogg Company was a long-standing SAP enterprise customer. A publicly documented SAP S/4HANA cloud migration programme was underway from at least 2021 through 2023.46 SAP is a German-headquartered company; while it maintains global R&D operations, it does not fall within the Israeli-origin technology category relevant to this audit. The SAP relationship is noted for completeness and to establish the ERP baseline against which other vendor integrations should be assessed.
Kellogg was a documented Microsoft Azure customer for cloud migration and analytics workloads.5 Microsoft operates significant R&D facilities in Israel and is a participant in Project Nimbus, the Israeli government’s cloud services procurement programme. However, no evidence places Kellogg’s or Kellanova’s workloads specifically on Israeli data centre infrastructure, and Kellogg’s Azure relationship is with Microsoft as a global commercial vendor. The indirect Israeli R&D dimension of the Microsoft relationship is flagged as a potential structural dependency warranting further scrutiny, but no direct evidence of Israeli-routed data processing has been identified.
A systematic review of publicly available customer disclosures, named case studies, and corporate filings for the following Israeli-origin vendors found no public evidence of a named, disclosed licensing or subscription relationship with Kellogg Company or Kellanova:
Important caveat: Consumer goods companies including Kellanova do not enumerate individual cybersecurity or SaaS vendors in SEC 10-K filings.1 Absence of named public evidence does not confirm absence of a commercial relationship — it reflects a structural disclosure gap. Check Point, SentinelOne, and CyberArk publish annual reports with customer case studies; Kellogg/Kellanova does not appear in reviewed instances,789 but these case studies represent only a fraction of each vendor’s customer base.
Palo Alto Networks (PANW) was co-founded by Israeli-born executives and maintains significant R&D operations in Israel. No public evidence identifies Kellogg or Kellanova as a named PANW customer.1 PANW does not publish a comprehensive enterprise customer list; the absence of named evidence is not confirmatory. Given PANW’s dominant market position in enterprise network security, the possibility of an undisclosed commercial relationship cannot be excluded.
Accenture has been publicly associated with digital transformation programmes for major consumer packaged goods (CPG) manufacturers.1 No specific Accenture–Kellogg engagement deploying Israeli-origin technology has been publicly documented. Kellogg/Kellanova’s use of one or more Managed Security Service Providers (MSSPs) for SOC/SIEM operations is structurally likely at enterprise scale; MSSPs frequently deploy Israeli-origin tooling (Check Point, SentinelOne, Palo Alto Networks) as part of bundled service stacks. No public evidence identifies which MSSP(s) Kellogg or Kellanova used, or what tooling those providers deployed. This represents a material structural blind spot for the entire Israeli-origin software assessment.
Following the completion of the Mars/Kellanova acquisition (approximately March 2025),15 Kellanova’s technology stack is being integrated with Mars’s enterprise systems. Mars’s own vendor relationships — including any Israeli-origin tools deployed across Mars’s global infrastructure — will progressively extend to Kellanova infrastructure. No public disclosure of the post-acquisition technology integration roadmap has been identified.17 This gap is flagged as requiring active monitoring.
No public evidence identifies Kellogg/Kellanova as a named customer of Workday or any other HR platform with Israeli-origin parentage or significant Israeli R&D dependency. Workday is a US-headquartered company and is noted only for completeness.
Kellogg’s is a food manufacturer and brand licensor, not a retail operator. It does not operate consumer-facing retail stores, supermarkets, or checkout environments where facial recognition, frictionless checkout technology, or loss-prevention biometrics would typically be deployed directly. No public evidence has been identified of Kellogg/Kellanova deploying or licensing technology from any of the following Israeli-origin vendors for any application:
Trax (Israeli-origin) provides AI-driven shelf-monitoring, image recognition, and retail execution analytics to consumer packaged goods manufacturers — a category directly applicable to Kellogg/Kellanova’s business model. Trax enables CPG manufacturers to monitor on-shelf product placement, out-of-stock conditions, and planogram compliance using computer vision deployed in third-party retail environments. No public disclosure names Kellogg/Kellanova as a Trax customer in verified sources reviewed; however, Trax does not publish a comprehensive named customer list, and its CPG client base includes major global food manufacturers. This relationship cannot be confirmed or excluded from available public evidence and represents a live evidence gap requiring direct verification.
No public evidence has been identified of Kellogg/Kellanova deploying Israeli-origin predictive analytics, sentiment analysis, social media monitoring, or workforce surveillance tools targeting employees. The company’s publicly documented AI and analytics use is operationally focused on demand forecasting and supply chain functions.16
No public evidence has been identified of Israeli-origin surveillance technology reaching Kellogg/Kellanova indirectly through managed service providers, bundled enterprise suites, or retail partner infrastructure.
No public evidence has been identified of Kellogg Company or Kellanova operating, leasing, or co-locating data centre infrastructure within Israel. Kellogg’s primary cloud migration was oriented around Microsoft Azure and SAP cloud environments with no Israel-specific data residency disclosures in reviewed SEC filings.15 Annual report disclosures do not reference Israeli-territory data infrastructure of any kind.1
Kellogg/Kellanova is a consumer food company and technology consumer, not a technology provider. No public evidence has been identified of Kellogg/Kellanova participating in Project Nimbus, tendering for Israeli government cloud procurement, or contracting with AWS or Google Cloud in any capacity specifically linked to Israeli public sector programmes.13 This sub-category is structurally inapplicable to the company’s business model.
Kellogg/Kellanova does not provide technology services to external parties; it is exclusively a technology consumer. The provision of sovereign cloud, data resilience, or data-processing services to Israeli state institutions is therefore structurally inapplicable. No public evidence identified.
Kellogg has historically distributed and sold branded products in Israel through local distributors. Whether any technology data processing, customer analytics, or digital marketing infrastructure associated with this commercial activity is hosted or processed within Israeli territory is not determinable from public evidence. This question should be directed to Kellanova/Mars legal and privacy compliance teams.
Kellogg/Kellanova is a consumer food and snack manufacturing company. It does not operate in the defence, intelligence, or security technology sector. No public evidence has been identified of any contract, partnership, memorandum of understanding, or service agreement with the Israeli Ministry of Defence, the Israel Defense Forces (IDF), Shin Bet, Mossad, or any Israeli intelligence affiliate.13
No public evidence has been identified of any Kellogg/Kellanova technology, data, or platform being deployed for military, intelligence, or law enforcement surveillance applications within Israel or in the occupied Palestinian territories. Kellogg/Kellanova does not develop, license, or maintain cybersecurity products or technology platforms as commercial offerings; its technology assets are entirely internal and operational in nature.
No public evidence has been identified of Kellogg/Kellanova holding export licences, ITAR registrations, EAR-controlled technology classifications, or any other export-control designation relevant to Israeli state technology procurement. This sub-category is structurally inapplicable.
No public evidence identified. Structurally inapplicable. Kellogg/Kellanova does not develop, sell, or license cybersecurity products of any kind to any party.
Kellogg’s publicly documented AI and data analytics strategy is consumer-operations oriented: applications include demand forecasting, supply chain optimisation, retail shelf performance analytics, and marketing personalisation and targeting.16 These are internal operational tools; Kellogg/Kellanova does not sell, license, or provide AI models or algorithmic systems to third parties.
No public evidence has been identified of Kellogg/Kellanova providing AI, machine learning models, computer vision systems, or autonomous decision-support platforms to Israeli state, military, border control, or security bodies.116
No public evidence has been identified of Kellogg/Kellanova AI models being trained on, or provided access to, civilian population data, intercepted communications, signals intelligence, or surveillance-derived datasets originating from Israel or the occupied Palestinian territories.
No public evidence identified. Structurally inapplicable. Kellogg/Kellanova does not develop autonomous weapons, unmanned systems, or decision-support platforms for lethality applications.
Where Kellogg/Kellanova uses third-party AI or analytics platforms (e.g., demand-sensing tools, shelf analytics), the Israeli-origin provenance of underlying models or data-processing layers is not determinable from public evidence. The Trax Retail CPG analytics gap (noted in the Surveillance section) is the most proximate unresolved AI supply chain question.16
No public evidence has been identified of Kellogg Company or Kellanova operating R&D facilities, engineering offices, innovation labs, incubators, or accelerator programmes within Israel. Kellogg’s global R&D footprint, as disclosed in annual reports and corporate responsibility reporting, is centred at its Battle Creek, Michigan headquarters, with additional innovation centres in Europe (United Kingdom, Belgium) and Asia-Pacific.1 No Israeli facility is referenced in reviewed corporate filings or responsibility reports.1
No public evidence has been identified of Kellogg/Kellanova acquiring or making strategic investments in Israeli technology startups, Israeli venture funds, or Israel-domiciled technology companies. Kellogg’s notable technology-adjacent transactions during the review period — including the RxBar acquisition (2017) and Parati Group transaction (2018) — are food brand and distribution acquisitions, not technology company investments.1 No venture or corporate-venture-capital arm of Kellogg/Kellanova with Israeli technology investment activity has been publicly disclosed.
The W.K. Kellogg Foundation (WKKF) is a separate philanthropic entity distinct from Kellogg Company and Kellanova. Its endowment and impact-investing disclosures do not, within training-data knowledge, reveal Israeli technology company investments.1 This should be verified separately if foundation investment screening is in scope.
USPTO patent database searches surface Kellogg Company patents concentrated in food science, packaging design, and manufacturing process domains.14 No public evidence has been identified of co-development, cross-licensing, or joint patent arrangements with Israeli-domiciled entities, including Technion – Israel Institute of Technology, Hebrew University of Jerusalem, Ben-Gurion University, or the Weizmann Institute of Science.14
Following the March 2025 acquisition completion,15 Kellanova now operates within Mars’s broader technology ecosystem. Mars’s own R&D footprint, venture investments, and technology vendor relationships — including any Israeli-origin dimensions — become directly relevant to Kellanova’s ongoing technology supply chain profile. The Food Dive reporting on Mars–Kellanova integration planning (2025) does not detail specific vendor decisions or Israeli technology dimensions.17 This integration trajectory requires active monitoring throughout 2025–2026.
The BDS Movement has historically targeted Kellogg’s in relation to labour practices — specifically the October–December 2021 Kellogg’s worker strike in the United States and ongoing union-related concerns — rather than Israel/Palestine technology or operations concerns.111 BDS Movement communications reviewed in training data address Kellogg’s as an employer, not as a technology vendor to Israeli state entities.
Some diffuse consumer boycott calls emerged on social media following October 7, 2023 in the context of broad “boycott Israeli-linked companies” campaigns. However, no verified, organised campaign by a named civil society organisation specifically citing Kellogg’s Israeli technology supply chain relationships has been identified.11 These social media campaigns appear to relate to general brand perception and perceived corporate positioning rather than documented technology or investment relationships.
No public evidence has been identified of regulatory inquiries, export control enforcement actions, sanctions-related investigations, or legal challenges involving Kellogg/Kellanova’s technology sales, data practices, or services to Israeli state entities.13 There is no identified record of relevant actions by the US Department of Commerce Bureau of Industry and Security (BIS), OFAC, the SEC, or EU regulatory authorities in this domain.
Kellogg/Kellanova’s disclosed data privacy compliance is consumer-facing (website cookies, marketing consent, CCPA/GDPR compliance for consumer data).1 No data protection enforcement action or privacy regulatory proceeding relating to Israeli data processing or cross-border data transfer to Israeli entities has been identified.
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0000055067&type=10-K&dateb=&owner=include&count=40 ↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩↩
https://www.reuters.com/markets/deals/mars-acquire-kellanova-deal-valued-about-36-billion-2024-08-14/ ↩
https://news.sap.com/2021/06/kellogg-sap-digital-transformation/ ↩
https://customers.microsoft.com/en-us/story/kellogg-consumer-goods-azure ↩↩↩
https://www.supplychaindive.com/news/kelloggs-sap-s4hana-erp-2023/ ↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001015922&type=20-F ↩↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001816581&type=10-K ↩↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001517396&type=20-F ↩↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001166388&type=10-K ↩
https://investigate.afsc.org/ ↩
https://investigate.afsc.org/ ↩
https://www.mars.com/news-and-stories/press-releases/mars-completes-kellanova-acquisition ↩↩↩
https://consumergoods.com/kelloggs-data-analytics-ai-strategy-2022 ↩↩↩↩
https://www.fooddive.com/news/mars-kellanova-integration-technology-2025/ ↩↩
