Agoda - Digital Audit

Enterprise Technology Stack & Vendor Relationships

Agoda is a verified customer of Wiz, the Israeli-founded cloud security company acquired by Google in 2025; a published Wiz customer case study confirms Agoda uses Wiz’s Cloud Security Posture Management (CSPM) capabilities across its AWS and Google Cloud environments for visibility into cloud-native subsidiaries, hybrid-cloud security during migration, DevOps deployment monitoring, vulnerability remediation including Log4Shell response, and PCI/SOC2 compliance support ¹. The case study is undated and does not specify when the relationship began, but presents it as current and ongoing ¹. Agoda’s Chief Information Security Officer, Yaron Slutzky, is quoted stating that Wiz “allowed us to consolidate and streamline our capabilities. It gave us much better visibility” ¹. Slutzky’s public speaker biographies describe over 18 years in cybersecurity, prior CISO roles including at the Israeli telecom operator Cellcom, and current activity as a cybersecurity investor ²³. No public evidence identified of Agoda holding direct licensing or subscription relationships with Check Point, SentinelOne, CyberArk, Nice, Verint, or Claroty. Agoda’s core infrastructure is instead a self-built private cloud, built on a Kubernetes-based orchestration platform (“Fleet”), HPE servers, VAST hardware for object storage, and Akamai as CDN vendor, supplemented selectively by AWS and Google Cloud for specific workloads ⁴⁵⁶⁷. No Israeli-origin infrastructure or networking hardware vendors were identified in this reporting. No public evidence identified of Agoda’s systems-integrator or consultancy engagements mandating or recommending Israeli-origin technology.

Surveillance, Biometrics & Retail Technology

No public evidence identified of Agoda use of Trigo, BriefCam, AnyVision/Oosto, Trax, or comparable Israeli-origin facial recognition, biometric, or gait-analysis technology. No public evidence identified of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools in use by Agoda. No public evidence identified of indirect or bundled delivery of such technologies to Agoda via third-party platforms.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Agoda’s private-cloud footprint comprises four data centres - one each in the United States and Europe, and two in Asia - with the majority of its engineering organisation based in Bangkok, Thailand, and company headquarters in Singapore ⁴⁵⁶. No data centre or co-location facility in Israel is identified in this reporting; this is treated as a documented negative finding rather than an absence of search results. No public evidence identified of Agoda participation in Project Nimbus or any comparable Israeli government cloud initiative. No public evidence identified of Agoda providing data-sovereignty, data-residency, or infrastructure-resilience services to Israeli state or military bodies.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of contracts, partnerships, or service agreements between Agoda and the Israeli Ministry of Defence, the IDF, or Israeli intelligence or security agencies. No public evidence identified that Agoda’s commercial technology - a consumer hotel and travel booking platform - has been deployed for military, intelligence, or law-enforcement surveillance applications in Israel or the Occupied Palestinian Territories. No public evidence identified of Agoda developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day tools, or digital weapons systems.

AI, Algorithmic & Autonomous Systems

Agoda’s Tel Aviv-based Data Science team works on pricing and bidding algorithms, anomaly detection, and natural-language processing in support of the company’s core travel-booking business ⁸⁹, a general-purpose commercial application rather than a state or security application. No public evidence identified of Agoda providing AI/ML, computer-vision, or decision-support systems to Israeli state, military, or security bodies. No public evidence identified that Agoda’s AI/ML models have been trained on or given access to civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the Occupied Palestinian Territories. No public evidence identified of autonomous target-generation, automated threat-detection, or autonomous-tracking system provision by Agoda to Israeli military or security forces.

Technology Ecosystem & R&D Footprint

Agoda, then operating under Priceline/Booking Holdings, opened a Tel Aviv “research center of excellence” reported in November 2014, initially recruiting senior data-science talent to work on pricing algorithms supporting Agoda’s lowest-price-guarantee product ⁸. This followed Priceline’s March 2014 acquisition of the Israeli ad-tech startup Qlika for a reported $15–20 million ¹⁰¹¹¹². Qlika’s “QTree” big-data analysis engine was folded into Agoda’s marketing and pricing systems, and its founding team - including Omri Morgenshtern, later appointed Agoda CEO on 1 July 2022, and Ittai Chorev, later Agoda’s Chief Product Officer - joined Agoda directly ^1314151012. A current Glassdoor listing for Agoda’s Tel Aviv office and Agoda’s own Data Science team career page indicate the office remains active, though no dated confirmation of its current headcount or focus areas was located beyond these undated listings ¹⁶⁹. Agoda’s CEO, Omri Morgenshtern, is an Israeli national raised in Tel Aviv, holds an M.S. in Physics from Tel Aviv University and a B.S. in Physics, Computer Science, and Mathematics from Hebrew University, and is a graduate of the IDF’s Talpiot elite technology R&D program; he co-founded Qlika in 2012 prior to its acquisition ¹³. No public evidence identified of a documented Unit 8200 affiliation for Morgenshtern specifically; Talpiot is a separate, allied IDF technical program, and sources describe close recruiting ties between the two without conflating them ¹³. A Jerusalem Post article reports Agoda’s stated intent to increase its Israeli footprint ¹⁷. No public evidence identified of Israeli venture-fund investments by Agoda or Booking Holdings beyond the Qlika acquisition. No public evidence identified of patent portfolios, licensing agreements, or co-development arrangements between Agoda and Technion, Hebrew University, or the Weizmann Institute.

Civil Society Scrutiny & Regulatory History

Agoda’s parent company, Booking Holdings Inc., is listed in the UN Office of the High Commissioner for Human Rights (OHCHR) database of business enterprises involved in specified settlement activities under Human Rights Council resolution 31/36, most recently updated 30 June 2023 ¹⁸¹⁹. The listing basis, per the independent research organisation Who Profits - a principal source feeder for the OHCHR database - is that the sibling Booking Holdings brand Booking.com, not Agoda itself, lists rental properties in West Bank settlements (24 listings across 12 settlements, including Ma’ale Adumim, Giva’at Ze’ev, and Kalia), in East Jerusalem settlement neighbourhoods (7 listings in Pisgat Ze’ev and Ramat Shlomo, some mislabeled “Israel”), and in the occupied Syrian Golan (152 listings across 28 settlements) ²⁰. Who Profits classifies Booking.com under “Settlement Enterprise” / “Services to the Settlements” within the tourism sector ²⁰. Derivative boycott-tracking listings, including AFSC Investigate and Is-Boycott.com, attribute this settlement-listing evidence to the Booking.com brand and name Agoda only through corporate/group attribution to shared parent Booking Holdings, without citing Agoda-specific settlement listings ²⁰²¹²². A coalition of four NGOs - SOMO, the European Legal Support Center, Al-Haq, and The Rights Forum - filed a criminal complaint against Booking.com with Dutch prosecutors on 23 May 2024, alleging money laundering connected to war crimes through settlement-property rental revenue, citing specific properties including Nof Canaan in Kfar Adumim and Jericho Inn in Vered Yeriho ²³. Booking’s reported response was that it complies with applicable law and that “there are no applicable laws that prohibit listing accommodations in Israeli settlements” ²³. A full-text search of the advance edited version of Special Rapporteur Francesca Albanese’s report A/HRC/59/23 (3 July 2025) for “Booking Holdings,” “Booking.com,” “Agoda,” “Priceline,” and “tourism platforms” returned no direct name matches in the primary document text, though secondary reporting describes the report as addressing how large online tourism platforms “continue normalizing the illegality of Israeli colonies” via a broader database of roughly 1,000 corporate entities not fully reproduced in the retrieved PDF ²⁴. Booking Holdings’ SEC Form 10-K filings for FY2024 and FY2025 disclose ongoing Israeli litigation unrelated to settlements - consumer-protection and competition-law class actions concerning local-tax display, parity contract terms, and non-refundable-booking practices ²⁵²⁶. No public evidence identified of a boycott or divestment campaign targeting Agoda specifically on technology-provision grounds, as distinct from the general settlement-listing and tourism-platform boycott rationale applied to Booking Holdings as a corporate group ²¹. No public evidence identified of export-control actions, sanctions investigations, or regulatory inquiries involving Agoda’s technology sales or services to Israeli state entities.