Target: AFRY AB (publ) Research date: 26 October 2026 Evidence period: 2022–2026 Scope: Enterprise technology, Israeli-origin software, cybersecurity, cloud infrastructure, data processing, surveillance, artificial intelligence, defence-sector digital services, research and development, and regulatory scrutiny.
Enterprise Technology Stack & Vendor Relationships
Israeli-origin cybersecurity partnership
On 27 April 2022, AFRY announced a partnership with OTORIO, an Israel-based industrial cybersecurity company, effective from 8 April 2022. The partnership combined AFRY’s industrial engineering and cybersecurity services with OTORIO’s operational technology security and digital risk management capabilities.1
AFRY stated that OTORIO technology would enable improved automated risk assessments and continuous cybersecurity monitoring across industrial environments, including production systems, energy infrastructure and smart infrastructure. The announcement described a client-facing integration of cybersecurity expertise and technology, without disclosing a contract value or identifying individual customer deployments.1
AFRY’s announcement identified OTORIO’s core management team as including former Israel Defense Forces personnel who had worked in the military’s cyber defence unit. The statement establishes the documented background of the supplier’s management, while the disclosed AFRY agreement concerns industrial cybersecurity products and services.1
On 6 March 2025, Armis announced that it had acquired OTORIO. Armis stated that OTORIO’s Titan platform would be integrated into Armis Centrix, combining operational technology and cyber-physical systems security with Armis’s wider cyber exposure management capabilities.2
The Armis announcement identifies support for both cloud-connected and isolated industrial environments, including energy, utilities and manufacturing operations. The acquisition announcement does not identify AFRY as an Armis partner or establish the status of AFRY’s previous OTORIO agreement following the acquisition.2
Other disclosed cybersecurity partnerships
On 4 March 2025, AFRY announced a separate partnership with Advenica and AVEVA Select Scandinavia to provide industrial cybersecurity solutions. The stated offering included secure industrial data transfer and data diode technology, which physically restricts communications to one direction.3
AFRY’s published operational technology cybersecurity services include vulnerability assessments, security architecture, security implementations, penetration testing, managed services, risk management and compliance support for industrial environments.4
Cloud and software vendor capabilities
AFRY’s Cloud Connect service identifies Microsoft Azure, Amazon Web Services, IBM Cloud and Google Cloud as cloud platforms within its technical competence. AFRY also advertises connected-product integration, backend development, containerisation and technologies including Docker and Kubernetes.5
AFRY’s published AI and data analytics offering includes cloud data platforms, data engineering, ETL processing, digital twins, sensor fusion, computer vision and predictive modelling. The company describes its approach as technology-agnostic, with customer-specific selection of data and analytics tools.6
These cloud and software service descriptions establish advertised engineering capabilities but do not identify the vendors used to host AFRY’s own internal systems or establish a procurement relationship with Israeli-origin enterprise software providers.5, 6
Named technology integrations and customers
In May 2024, AFRY announced that Nordic Paper had selected its PaperLine manufacturing execution system for four mills in Sweden and Norway. The agreement covered software configuration, integration, data migration, installation and deployment.7
In February 2024, AFRY announced a partnership with Swedish technology company ClimateView for data-supported municipal climate planning. The announcement identified initial work involving the Swedish municipalities Helsingborg and Eskilstuna.8
Other specified Israeli-origin vendors
No public evidence identified establishing an AFRY licensing, procurement or integration relationship with Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty or Palo Alto Networks.
Internal dependency and procurement scale
No public evidence identified establishing the number of AFRY users, endpoints, industrial systems or customers dependent on OTORIO technology, or the expenditure associated with the partnership.
No public evidence identified establishing whether OTORIO was deployed in AFRY’s internal enterprise infrastructure.
No public evidence identified confirming that the original OTORIO partnership remained commercially active in October 2026.
Surveillance, Biometrics & Retail Technology
Facial recognition and biometric identification
AFRY advertises computer vision, sensor fusion and machine learning among its technical capabilities. Its published applications include industrial quality inspection, manufacturing analytics and measurement using camera-based systems.6
No public evidence identified establishing AFRY’s use or supply of Israeli-origin facial-recognition, biometric identification, gait analysis or frictionless retail technologies from Trigo, BriefCam, AnyVision/Oosto, Trax or comparable vendors.
Predictive analytics and monitoring
AFRY advertises predictive modelling, predictive maintenance and sensor-data analytics for industrial and infrastructure customers. These services include equipment monitoring, forecasting and operational optimisation.6
AFRY’s publicly described industrial cybersecurity services include security assessments, vulnerability analysis and ongoing risk management for operational technology systems.4
No public evidence identified establishing AFRY’s use or deployment of Israeli-origin predictive policing, political sentiment monitoring, social-media surveillance or employee-monitoring systems.
Third-party surveillance technology deployment
AFRY’s April 2022 OTORIO announcement establishes a partner-mediated route through which Israeli-origin industrial security technology could form part of AFRY’s client-facing cybersecurity services. The announcement does not identify deployment within law-enforcement surveillance or population-monitoring systems.1
No public evidence identified establishing that Israeli-origin biometric or population-surveillance technology reaches AFRY customers through bundled software, managed security services or subcontracted platforms.
Cloud Infrastructure, Data Residency & Sovereign Cloud Participation
Cloud infrastructure services
AFRY advertises cloud engineering for connected products, including device connectivity, backend applications, data management and cloud-based interfaces. Its published platform competencies include Microsoft Azure, AWS, IBM Cloud and Google Cloud.5
AFRY’s data analytics services include cloud migration, cloud platforms, data integration, real-time processing and machine learning applications. These are presented as services supplied to clients across multiple industries.6
Data processing and exposure
AFRY’s published Cloud Connect offering describes systems extending from sensors and embedded devices to backend services and dashboards. The description establishes technical capability to collect, process and exchange connected-device data.5
AFRY’s AI and data analytics offering includes ETL processing, cloud data pipelines, data storage architecture, forecasting and computer vision. Its published examples include industrial sensor analysis, manufacturing quality inspection and infrastructure optimisation.6
The April 2022 OTORIO announcement identifies the intended use of Israeli-origin industrial cybersecurity technology for automated risk assessment and continuous security feedback. It does not specify the location of the technology’s servers, the categories of customer data transmitted, the recipient legal entities or the jurisdictions governing access to those data.1
Armis’s March 2025 acquisition announcement states that OTORIO Titan would become part of the Armis Centrix security platform and identifies deployment options for isolated or air-gapped industrial environments. It does not disclose AFRY-specific data hosting or processing arrangements.2
Israeli data centres
No public evidence identified establishing that AFRY owns, leases, operates or colocates data centre infrastructure in Israel.
Israeli government cloud programmes
No public evidence identified establishing AFRY participation in Project Nimbus or any other identified Israeli government cloud procurement programme.
Data residency and sovereignty services
No public evidence identified establishing an AFRY contract to provide sovereign cloud infrastructure, data residency services, digital identity infrastructure or infrastructure resilience systems to Israeli government or military institutions.
Israeli jurisdiction over customer data
No public evidence identified establishing that AFRY-controlled customer data, personal information, industrial telemetry or cybersecurity event records are routinely stored, routed or processed through Israeli infrastructure.
No public evidence identified establishing Israeli legal access to AFRY customer data through a specified technology deployment or processing agreement.
Settlement infrastructure
No public evidence identified establishing that AFRY operates digital infrastructure or supplies cloud hosting services within Israeli settlements in occupied Palestinian territory.
Defence, Intelligence & Security Sector Technology Relationships
Documented defence-sector IT engagements
On 4 March 2025, AFRY announced a framework agreement with the Swedish Armed Forces and the Swedish Defence Materiel Administration (FMV) to provide IT consultancy, systems development, testing and information security services.9
The agreement had an initial three-year term, with possible extensions of four additional years. The aggregate framework value for four suppliers was approximately SEK 1.5 billion, while AFRY’s individual order value was not disclosed. The agreement was scheduled to commence in the second quarter of 2025.9
AFRY stated that the agreement would support the development, operation and maintenance of defence-related IT systems and provide specialist resources for information security and digitalisation.9
Other defence engineering activities
In January 2024, AFRY announced an approximately SEK 300 million agreement with Hägglunds to provide engineering services supporting the CV90 military vehicle platform. The agreement was scheduled to begin during the second quarter of 2024 and continue through 2027.10
The Hägglunds announcement describes engineering development, system engineering and programme support for a military vehicle programme. It does not identify an Israeli military customer or an Israeli-origin cybersecurity system.10
Israeli military and intelligence procurement
No public evidence identified establishing a direct AFRY technology contract with the Israeli Ministry of Defence, Israel Defense Forces, Israeli intelligence agencies or Israeli military procurement organisations.
No public evidence identified establishing that the OTORIO partnership was used to deliver technology to Israeli military or intelligence institutions.
Dual-use cybersecurity technologies
AFRY’s announced OTORIO partnership concerned industrial operational technology security, automated risk assessment and cybersecurity monitoring. The stated applications were industrial facilities, energy infrastructure and smart infrastructure.1
The Swedish Armed Forces framework separately establishes AFRY’s provision of general-purpose IT and information security services to a military customer outside Israel. No public source reviewed establishes that OTORIO technology formed part of that framework.9
Offensive cybersecurity capabilities
No public evidence identified establishing that AFRY develops or supplies zero-day exploit platforms, offensive intrusion tools, spyware, communications interception systems or offensive cyberweapons to Israeli institutions.
No public evidence identified establishing that AFRY-origin digital products have been used by Israeli authorities for cyber offensives or population surveillance.
Weapons-system boundary
The disclosed Hägglunds agreement concerns engineering work on the CV90 military vehicle platform. The available announcement does not establish that AFRY supplied autonomous target-generation software, fire-control AI or other purpose-built kinetic targeting systems; detailed weapons-system engineering falls within the separate Military research domain.10
AI, Algorithmic & Autonomous Systems
Commercial AI capabilities
AFRY advertises machine learning, predictive modelling, computer vision, sensor fusion, digital twins and forecasting among its data and AI services. Published application examples include industrial quality inspection, production optimisation, energy systems, automotive sensor analysis and building energy management.6
Government AI contract
On 20 November 2025, AFRY announced an AI-supported traffic-data analysis contract for the Swiss Federal Roads Office (FEDRO), acting as a subcontractor to ASE AG. The project involves analysing extensive national-road traffic datasets to identify patterns, improve forecasting and support infrastructure planning.11
The announcement establishes AFRY’s participation in a government-facing AI analytics project in Switzerland. It does not establish an Israeli government or military customer.11
AI systems supplied to Israeli institutions
No public evidence identified establishing AFRY’s provision of machine learning, computer vision, language processing, autonomous decision support or AI infrastructure to Israeli military, intelligence or state-security institutions.
Training data
No public evidence identified establishing that AFRY AI models were trained on intercepted Palestinian communications, Israeli intelligence datasets, biometric registries or population-surveillance information originating in occupied Palestinian territory.
Autonomous surveillance and tracking
No public evidence identified establishing AFRY’s provision of autonomous surveillance, person-tracking or behavioural classification systems to Israeli security institutions.
Kinetic targeting and autonomous weapons
No public evidence identified establishing that AFRY supplied AI systems designed primarily for target selection, weapons guidance, automated fire control or kinetic military operations to Israeli military forces.
Technology Ecosystem & R&D Footprint
Company structure and governance
AFRY AB is a Swedish public limited liability company whose class B shares are traded on Nasdaq Stockholm. The company operates under a board and executive management structure governed by Swedish corporate law and applicable listed-company requirements.12
AFRY’s April 2026 annual general meeting re-elected Tom Erixon as Board Chair and confirmed the re-election of eight directors: Viveka Beckeman, Jan Berntsson, Tom Erixon, Magnus Heimburg, Jenny Larsson, Neil McArthur, Åsa Pettersson and Kristina Schauman.13
AFRY’s current board disclosures identify directors’ principal professional positions, previous appointments and declared AFRY shareholdings. These disclosures include industrial, energy, engineering, consulting and corporate governance backgrounds.14
Principal shareholder
AFRY’s published share information identifies two share classes, with class A shares carrying ten votes each and class B shares carrying one vote each. The company identifies ÅForsk Foundation as the principal holder of its unlisted class A shares.15
ÅForsk describes itself as AFRY’s largest shareholder and states that the foundation uses income from its shareholdings to support research and development in fields including infrastructure, energy, industrial processes, safety and environmental technology.16
Controlling-principal technology investments
No public evidence identified establishing that ÅForsk Foundation, AFRY’s Chair or the directors identified in the April 2026 AGM held direct controlling investments in OTORIO, Armis, NSO Group, Cellebrite, Check Point, Verint, NICE, CyberArk or other named Israeli surveillance and intelligence technology companies.
No public evidence identified establishing that AFRY’s identified controlling principals held board appointments in Israeli military technology companies during the investigated period.
The publicly disclosed AFRY board information does not establish the complete personal, indirect or family-office investment holdings of every director or senior executive.14
Israeli R&D centres
No public evidence identified establishing an AFRY-owned research centre, software engineering office, artificial intelligence laboratory or accelerator programme operating in Israel.
Israeli technology acquisitions
Armis announced its acquisition of OTORIO in March 2025. AFRY’s established connection to OTORIO originated from its earlier commercial partnership, and the acquisition announcement identifies Armis as the acquiring party.1, 2
No public evidence identified establishing that AFRY acquired an Israeli-origin cybersecurity, AI, surveillance or digital infrastructure company.
Research partnerships and intellectual property
No public evidence identified establishing an AFRY patent co-development agreement, technology licence or formally documented research collaboration with Technion, Hebrew University, Weizmann Institute or another Israeli research institution.
No public evidence identified establishing an Israeli-domiciled AFRY patent-holding entity or jointly owned Israeli technology patent portfolio.
Civil Society Scrutiny & Regulatory History
United Nations and civil-society reporting
The United Nations Special Rapporteur’s report A/HRC/59/23, published on 2 July 2025 under the title “From economy of occupation to economy of genocide”, addresses corporate activities connected to the occupied Palestinian territory, including digital infrastructure, surveillance, cloud computing and artificial intelligence.17
No AFRY-specific finding or technology contract was established from the material reviewed in connection with that report.
AFSC Investigate states that its company investigations rely on documented links to military occupation and related human rights violations, drawing on corporate disclosures, government records, reporting and independent verification. The database does not purport to include every Israeli company or every company conducting business in Israel.18
No AFRY-specific investigation or finding was identified in the successfully reviewed AFSC materials.
Israeli-origin cybersecurity supplier
AFRY publicly identified its relationship with Israel-based OTORIO in April 2022, including the company’s former military cyber-defence management background. The primary AFRY announcement concerns industrial cybersecurity integration and does not document settlement operations or an Israeli government procurement contract.1
Post-July 2024 and post-November 2024 continuity
Armis announced its acquisition of OTORIO in March 2025, establishing a change in the supplier’s ownership after the July and November 2024 legal developments. The acquisition announcement does not identify AFRY-specific contracts, continuing purchase orders or deliveries after those dates.2
No public evidence identified establishing that AFRY continued supplying OTORIO or successor technology to an Israeli state institution after 19 July 2024 or November 2024.
Settlement-related digital operations
No public evidence identified establishing AFRY’s direct provision of software, cloud systems, cybersecurity services or digital infrastructure to Israeli settlements in occupied Palestinian territory.
No public evidence identified establishing that AFRY supplied settlement-related digital services indirectly through an identified Israeli reseller, licensee, integrator or subsidiary.
Boycott and divestment campaigns
No public evidence identified establishing an organised boycott, divestment or sanctions campaign specifically directed against AFRY for technology provision to Israeli military institutions or settlement infrastructure.
Company response
AFRY’s April 2022 announcement publicly explains the commercial purpose of its OTORIO partnership. No subsequent AFRY statement specifically addressing allegations concerning Israeli settlement activity or military use of that technology was identified.1
Regulatory and legal proceedings
No public evidence identified establishing an export-control enforcement action, sanctions investigation, procurement challenge or regulatory proceeding against AFRY concerning technology supplied to Israeli government or military institutions.
No public evidence identified establishing a court finding that AFRY’s digital services supported surveillance activities within occupied Palestinian territory.
Footnotes
-
AFRY, “AFRY enters partnership with leading industrial cyber security company OTORIO”, 27 April 2022. https://afry.com/en/newsroom/press-releases/afry-enters-partnership-leading-industrial-cyber-security-company-otorio ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8 ↩9
-
Armis, “Armis Acquires OTORIO to Expand its Leadership in Operational Technology and Cyber-Physical Security”, 6 March 2025; Armis announcement distributed by Business Wire and reproduced by STT Info. https://www.sttinfo.fi/tiedote/70961597/armis-acquires-otorio-to-expand-its-leadership-in-operational-technology-and-cyber-physical-security?lang=en&publisherId=58763726 ↩ ↩2 ↩3 ↩4 ↩5
-
AFRY, “AFRY, Advenica, and AVEVA Select Scandinavia partners up to enable the highest level of cybersecurity for industry 4.0”, 4 March 2025. https://afry.com/en/newsroom/news/afry-advenica-and-aveva-select-scandinavia-partners-enable-highest-level ↩
-
AFRY, “Cyber Security and IT/OT Systems”, corporate service description, accessed October 2026. https://afry.com/en/services/operations-digital-solutions/cyber-security/cyber-security-and-it/ot-systems ↩ ↩2
-
AFRY, “Cloud Connect”, corporate service description, accessed October 2026. https://afry.com/en/services/product-design-development/internet-things-iot/cloud-connect ↩ ↩2 ↩3 ↩4
-
AFRY, “Data Analytics, BI, & AI”, corporate service description, accessed October 2026. https://afry.com/en/services/operations-digital-solutions/data-analytics-bi-ai ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7
-
AFRY, “Nordic Paper chooses digital solution from AFRY”, 15 May 2024. https://afry.com/en/newsroom/press-releases/nordic-paper-chooses-digital-solution-afry ↩
-
AFRY, “ClimateView and AFRY enter partnership for data-driven green transitions in cities”, 9 February 2024. https://afry.com/en/newsroom/press-releases/climateview-and-afry-enter-partnership-data-driven-green-transitions-in ↩
-
AFRY, “AFRY signs framework agreement with the Swedish Armed Forces and FMV for IT consultancy services”, 4 March 2025. https://afry.com/en/newsroom/press-releases/afry-signs-framework-agreement-swedish-armed-forces-and-fmv-it-consultancy ↩ ↩2 ↩3 ↩4
-
AFRY, “AFRY signs new agreement with Hägglunds – estimated order value 300 MSEK”, 26 January 2024. https://afry.com/en/newsroom/press-releases/afry-signs-new-agreement-hagglunds-estimated-order-value-300-msek ↩ ↩2 ↩3
-
AFRY, “AFRY secures contract for cutting-edge AI-supported traffic data analysis”, 20 November 2025. https://afry.com/en/newsroom/press-releases/afry-secures-contract-cutting-edge-ai-supported-traffic-data-analysis ↩ ↩2
-
AFRY, “AFRY publishes its 2025 Annual and Sustainability Report”, 18 March 2026. https://afry.com/en/newsroom/press-releases/afry-publishes-its-2025-annual-and-sustainability-report ↩
-
AFRY, “Report from AFRY’s Annual General Meeting 2026”, 28 April 2026. https://afry.com/en/newsroom/press-releases/report-afrys-annual-general-meeting-2026 ↩
-
AFRY, “Board of Directors”, corporate governance disclosure, accessed October 2026. https://afry.com/en/investor-relations/corporate-governance/board-directors ↩ ↩2
-
AFRY, “The Share”, investor relations disclosure, accessed October 2026. https://afry.com/en/investor-relations/share ↩
-
ÅForsk Foundation, official foundation website, accessed October 2026. https://aforsk.com/ ↩
-
United Nations Human Rights Council, “From economy of occupation to economy of genocide”, A/HRC/59/23, 2 July 2025; accessible document catalogue hosted by ecoi.net. https://www.ecoi.net/en/document/2126836.html ↩
-
American Friends Service Committee, “AFSC Investigate - Methodology”, accessed October 2026. https://investigate.afsc.org/methodology ↩