Digital Audit - Aviva plc

Domain: Digital / Technology Entity scope: Aviva plc (insurer) and Aviva Investors / Aviva Ventures. Vendor-domicile rule applied: only genuinely Israeli-domiciled vendors are in scope; US/EU vendors are out even if Israeli-founded. Compiled: 2026-06-21 Method: Live web search only

Enterprise Technology Stack & Vendor Relationships

Earnix (Israeli-domiciled - confirmed vendor relationship). Earnix Ltd, founded 2001 and headquartered in Ramat Gan / Givatayim, Tel Aviv, Israel, provides SaaS dynamic-pricing, rating, underwriting-analytics, and product-personalisation software.¹ Earnix publicly names Aviva among its leading insurer customers (in a 2025 BusinessWire release on its Zelros acquisition), making it a contemporaneous, vendor-sourced confirmation of a commercial relationship; no Aviva-specific case study detailing scope/modules was located.² This is the one confirmed Israeli-domiciled vendor in Aviva’s operational stack.

Sapiens International (Israeli-domiciled - passive equity holding only, NOT a vendor relationship). Sapiens International Corporation N.V. is domiciled in Holon, Israel.³ Aviva Investors held a passive equity stake in Sapiens (NASDAQ: SPNS) - ~75,986 shares (~0.14%, ~$1.46m) per a 2023 13F filing.⁴⁵ This is an asset-management investment position, not evidence that Aviva uses Sapiens software; no public evidence of Sapiens core-systems deployment at Aviva was identified.

Non-Israeli vendors: Appian (US; contact-centre platform consolidating 22 legacy systems),⁶ hyperexponential / hx Renew (UK; pricing/underwriting, expanded to AI agents Dec 2025),⁷⁸ Dataiku + TCS and McKinsey QuantumBlack (AI/ML across claims),⁹ and Microsoft Azure (US; core cloud).¹⁰ No public evidence identified that Aviva uses Check Point, NICE, or other Israeli-domiciled cybersecurity/contact-centre vendors in its own stack.

Surveillance, Biometrics & Retail Technology

No public evidence identified that Aviva deploys facial recognition, Israeli-originated biometric authentication, or retail-surveillance technology from Israeli-domiciled vendors. Its public fraud/claims-tech disclosures reference AI/ML claims triage (McKinsey QuantumBlack / Dataiku - US) and speech analytics (vendor unspecified), not biometric surveillance.¹¹ No contract with Israeli-domiciled surveillance/biometrics vendors (e.g. AnyClip, Trigo, Corsight, Oosto) was identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Aviva’s core cloud migration centres on Microsoft Azure (US); its Bamboo policy system and wider estate moved to Azure.¹⁰ Aviva’s privacy documentation states data is held primarily in UK infrastructure (a DXC data centre in Reading is referenced), with cross-border transfers only under GDPR safeguards.¹² No public evidence identified of Aviva participating in Israeli sovereign-cloud programmes or routing workloads through Israeli-domiciled cloud providers.

Defence, Intelligence & Security Sector Technology Relationships

CyberCube (US-domiciled). In May 2025, Aviva partnered with CyberCube to deploy AI/LLM-based “Portfolio Threat Actor Intelligence” analysing ransomware-group forensic data to flag vulnerable portfolio companies.¹³¹⁴ CyberCube is headquartered in San Francisco (a Symantec spin-out), noted for completeness given the dual-use nature of the technology.¹⁵ No public evidence identified of Aviva holding a technology-vendor (as opposed to insured-party) relationship with Israeli-domiciled defence/intelligence firms (Check Point, Verint, Cellebrite, NSO, Elbit). Civil-society scrutiny of Aviva’s insurance of Elbit’s UK subsidiary is an insurance matter (treated in Military), not a technology-vendor relationship.

AI, Algorithmic & Autonomous Systems

Aviva’s AI programme rests on non-Israeli vendors: 80+ ML models across claims (McKinsey QuantumBlack), Dataiku as the data-science platform, and hx Renew AI agents (UK).⁹⁸ The one Israeli-domiciled element is Earnix, whose platform includes AI-driven dynamic pricing and automated underwriting; given Earnix names Aviva as a customer, any Earnix deployment would constitute use of Israeli-domiciled AI pricing infrastructure, though the specific capabilities deployed at Aviva are not publicly confirmed.¹¹⁶ No public evidence identified of Aviva using Israeli-domiciled computer-vision/NLP/autonomous-decision AI (e.g. D-ID, AI21 Labs, Mobileye) in its own operations.

Technology Ecosystem & R&D Footprint

Aviva Ventures (Aviva’s corporate VC arm) has made ~47 investments (most recently Tembo Money, Feb 2026; Indico Data, US, Oct 2025); no investment in any Israeli-domiciled insurtech was identified.¹⁷¹⁸ Faye (Tel Aviv-founded travel insurance) appeared in the VC search context, but its Series B investors (Portage, Lumir, F2, Viola, Munich Re Ventures) do not include Aviva Ventures.¹⁹ The Aviva Investors Venture and Growth Capital LTAF (launched Feb 2025) has a UK/Europe/North America mandate - not Israel; no Israeli company investments under it were identified.²⁰ Beyond the passive Sapiens stake, no further Aviva passive holdings in Israeli-domiciled tech firms were surfaced (a fuller 13F review is beyond Digital scope).

Civil Society Scrutiny & Regulatory History

Civil-society scrutiny of Aviva’s Israel-related activity targets its insurance and investment relationships (UAV Engines/Elbit; the $108m Israeli bond purchase), not its technology vendors. Palestine Action / Boycott Bloody Insurance have not specifically targeted Aviva’s use of Israeli tech vendors; Ethical Consumer’s Aviva profile covers arms-company holdings, not Israeli tech procurement.²¹²²²³ No ICO/FCA enforcement, whistleblower disclosure, or parliamentary question on Aviva’s procurement from Israeli-domiciled tech firms was identified. (The $108m Israeli sovereign-bond purchase is an economic-domain matter (Economic), noted here only as a cross-domain signal.)²⁴

End Notes