Bluesky DIGITAL

Enterprise Technology Stack & Vendor Relationships

• Bluesky’s Terms of Service identify the service provider as Bluesky Social, PBC.¹

• Bluesky states that it became independent upon formation in 2021, received initial funding from Twitter, and lost its Twitter service agreement in late 2022.^{2, 3}

• Bluesky announced its conversion from a public-benefit LLC to a public-benefit C corporation in July 2023.⁴

• Bluesky’s public FAQ says the company is owned by Jay Graber and the Bluesky team, without publishing ownership percentages, voting rights, a capitalization table, or individual control rights.²

• Bluesky reported an $8 million seed round led by Neo in 2023 and a $15 million Series A led by Blockchain Capital in 2024, while neither announcement disclosed investor ownership stakes or control rights.^{4, 5}

• The reviewed disclosures identify Automattic, Protocol Labs, Alumni Ventures, True Ventures, SevenX, Amir Shevat, Joe Beda, and others as financing participants, but do not establish Israeli state, military, settlement, or security-sector participation.^{4, 5}

• A 2024 secondary technical account reported that Bluesky initially used Amazon Web Services before moving infrastructure on-premises for cost and performance reasons, while retaining an option to scale with AWS; the underlying newsletter was inaccessible in the research shard, so this does not independently confirm a current AWS relationship, AWS region, or Project Nimbus connection.⁶

• No public evidence identified in the reviewed materials of a Bluesky licensing, subscription, integration, reseller, managed-service, or systems-integrator relationship with named Israeli-origin enterprise-technology vendors, including Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks.^{6, 7, 8}

Surveillance, Biometrics & Retail Technology

• Bluesky’s privacy materials describe collection and processing of public posts, unencrypted direct messages, IP-derived general location, device and network identifiers, and usage activity for its services and trust-and-safety functions.^{7, 8}

• Bluesky states that unencrypted direct messages may be accessed for Trust & Safety purposes.⁷

• Bluesky’s 2025 transparency report describes automated spam-detection rules engines paired with human moderation review.⁹

• No public evidence identified in the focused searches that Bluesky uses Israeli-origin facial recognition, biometric identification, gait analysis, retail analytics, predictive policing, sentiment monitoring, social-media monitoring, or workforce-surveillance products.^{7, 8, 9}

• No public evidence identified of a named managed-security, platform, or other third-party provider deploying such surveillance or biometric technology into Bluesky.^{7, 8, 9}

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

• Bluesky states that it operates AT Protocol Relay services, a Bluesky-operated Personal Data Server, an AppServer, and other AT Protocol network services.⁸

• Bluesky’s current Protocol Services page identifies bsky.network as the Relay endpoint and jetstream.us-east.bsky.network as a Bluesky PBC-operated Protocol Services endpoint.¹⁰

• Bluesky’s current public endpoint-source code identifies jetstream.us-east.bsky.network and jetstream.us-west.bsky.network as Bluesky-hosted Jetstream instances, describes Jetstream as a full-network archive and live-streaming service that ingests network records and re-serves them as a JSON stream, and identifies public.api.bsky.app as the public Bluesky AppView.¹¹

• Public routing records identify AS19317 as BLUESKY-SOCIAL-PBC-1, registered to Bluesky Social, PBC, with country/territory listed as the United States.¹²

• A current IPinfo record reports four /24 IPv4 ranges for AS19317 and classifies its observed IPv4 footprint as 100% United States; this is a network-observation record, not a disclosure of physical data-centre placement or data residency.¹³

• Bluesky’s AT Protocol Network Services Privacy Notice says those services process account, device and network, usage, public-profile, and public-post information and may transfer personal information internationally.⁸

• Bluesky’s general privacy policy says personal data may be shared with IT-support and hosting providers, but it does not name those providers or their locations.⁷

• The reviewed privacy, endpoint, and routing disclosures do not identify physical data-centre operators, colocation providers, CDN providers, cloud providers, a processing-country list, security-stack suppliers, payment processors, or a Bluesky subprocessor register.^{7, 8, 10, 11, 12, 13}

• Bluesky’s 2025 transparency report states that the network includes accounts hosted on Bluesky infrastructure and thousands of Personal Data Servers, with a majority hosted independently by third parties.⁹

• This distributed-hosting description does not identify the operators or jurisdictions of every third-party Personal Data Server, including any Personal Data Server in Israel or internationally recognized occupied territory.⁹

• No public evidence identified in the reviewed official privacy notices, endpoint documentation, routing records, and targeted searches that Bluesky user data is stored in, routed through, processed in, or legally accessible from Israel, or through an Israeli-controlled provider.^{7, 8, 10, 11, 12, 13}

• The identified U.S.-East and U.S.-West endpoints and U.S.-observed ASN footprint do not establish complete traffic routes, physical server or backup locations, all third-party Personal Data Server locations, or legal-access arrangements; Bluesky’s notices permit international transfers without identifying destinations.^{7, 8, 9, 11, 13}

• Bluesky’s government-user terms amendment currently applies only to United States and Canadian government users, while inviting other government entities with local-law compatibility concerns to contact Bluesky.¹⁴

• The government-user amendment is a terms mechanism and does not establish an Israeli government contract.¹⁴

• No public evidence identified of Bluesky participation in Project Nimbus, another Israeli government-cloud initiative, or Israeli state or military data-sovereignty and resilience services.^{6, 14}

Defence, Intelligence & Security Sector Technology Relationships

• No public evidence identified in targeted searches of Israeli government, Ministry of Defence, Israel Defense Forces, Israeli public-procurement, intelligence, police, settlement, or other public-sector sources of a Bluesky account owned by an Israeli state body, or a Bluesky contract, deployment, licence, or service arrangement with such an entity.^{14, 15, 16}

• Two Israeli-government publications located in targeted searches cite non-governmental Bluesky accounts: a 2026 government report cites a Palestine Solidarity Campaign account, and a February 2025 health-intelligence update cites a journalist’s Bluesky account; these citations do not evidence an Israeli public-sector Bluesky account or a government service arrangement.^{15, 16}

• No public evidence identified that Bluesky technology has been documented as deployed by Israeli military, intelligence, law-enforcement, or settlement authorities for surveillance applications.^{2, 3, 9}

• No public evidence identified of Bluesky developing, selling, licensing, or maintaining offensive-cyber or digital-weapons capabilities.^{2, 3, 9}

• Bluesky’s 2024 moderation report recorded 238 legal requests and 146 instances of compliance, identifying German, United States, Brazilian, and Japanese law-enforcement bodies as the principal request sources described in the report.¹⁷

• The 2024 moderation report does not provide a complete country-by-country legal-request list and therefore does not support an Israel-specific legal-access finding.¹⁷

AI, Algorithmic & Autonomous Systems

• Bluesky’s reported automated rules engines are described as spam-detection tools used alongside human moderation review.⁹

• The 2025 transparency report does not identify an Israeli state, military, or security customer, or a Bluesky product supplied for AI or machine learning, computer vision, target identification, autonomous tracking, or related uses.⁹

• No public evidence identified that Bluesky AI models or platforms have been trained on, or granted access to, Israeli or occupied-territory civilian data, intercepted communications, or surveillance-derived datasets.^{8, 9}

• No public evidence identified of autonomous target generation, automated threat detection, or autonomous-tracking provision to Israeli forces.^{8, 9}

Technology Ecosystem & R&D Footprint

• Bluesky’s reviewed public corporate materials do not identify a named subsidiary, parent company, franchisee, sister company, or complete group ownership structure.^{1, 2, 7}

• The privacy policy refers generically to “other Bluesky companies,” without identifying them or describing their ownership structure.⁷

• Bluesky’s FAQ lists Jay Graber, Jeremie Miller, Mike Masnick, and Kinjal Shah as board members.²

• Bluesky announced in July 2026 that Toni Schneider became permanent CEO, with Jay Graber serving as Chief Innovation Officer and board chair.¹⁸

• Bluesky’s March 2026 transition announcement stated that Graber had stepped down as CEO, Schneider had been appointed interim CEO, and the board would search for a permanent CEO.¹⁹

• Schneider states that he remained a True Ventures partner while becoming Bluesky’s interim CEO and had previously invested in and advised Bluesky; True Ventures describes his broad investment remit but does not disclose a Bluesky ownership percentage or a named Israeli surveillance, cybersecurity, cloud, military-technology, or other digital-capability recipient attributable to him.^{19, 20, 21}

• Blockchain Capital identifies Kinjal Shah as a general partner whose work includes investment diligence and portfolio support, while Bluesky’s financing announcement ties her board appointment to Blockchain Capital’s Series A investment.^{5, 22} Those roles do not establish that the firm’s entire portfolio is Shah’s personal investment or that she controls every portfolio company.^{5, 22}

• The completed principal-and-vehicle searches identified no named Israel-linked digital-capability recipient attributable to Graber, Schneider, Miller, Masnick, Shah, or Dorsey through a documented personal holding, board role, or controlled investment vehicle. This is a bounded searched absence rather than proof about undisclosed private holdings or every investment made by True Ventures or Blockchain Capital.^{20, 21, 22}

• No public evidence identified in the focused searches of a Bluesky-operated Israeli R&D centre, engineering office, innovation lab, accelerator programme, Israeli technology-company acquisition, strategic Israeli startup or fund investment, or patent or co-development arrangement with an Israeli-domiciled company or research institution.^{2, 3, 4}

• No Israeli office, subsidiary, R&D centre, registered establishment, or parent entity is identified in the reviewed official corporate sources, although this disclosure-based absence does not establish that none exists.^{1, 2, 3, 4, 7}

Civil Society Scrutiny & Regulatory History

• The reviewed full-text scan found no Bluesky mention in the UN Special Rapporteur’s 2025 report, From economy of occupation to economy of genocide.²³

• The reviewed full-text scan found no Bluesky mention in the OHCHR’s 2025 settlement-business database update.²⁴

• The reviewed materials also found no Bluesky mention in the 2023 OHCHR settlement-business database update or the OHCHR’s September 2025 update announcement.^{25, 26}

• These are document-scoped findings and do not establish absence from other reports, databases, versions, or unreviewed source material.^{23, 24, 25, 26}

• No public evidence identified in the reviewed materials of a Bluesky-specific NGO investigation, organised boycott, divestment or sanctions campaign, regulatory inquiry, legal action, export-control action, or sanctions investigation concerning technology provision to Israeli state entities or operations in occupied territory.^{2, 3, 14, 23, 24, 25, 26}

• No public evidence identified in the reviewed corporate announcements and specified UN materials of Bluesky, its named investors, or disclosed leadership entering an Israeli-state, IDF, intelligence, settlement, lobbying, procurement, or sanctions-related technology relationship.^{4, 5, 19, 23, 25, 26}