Digital Audit: Bolt

Target Identification & Scope

Public sources contain at least three distinct entities operating under the “Bolt” name: Bolt Technology OÜ, a Tallinn-based ride-hailing, micromobility, delivery, and car-sharing platform founded in 2013; Bolt Financial Inc. (bolt.com), a US checkout/fraud-prevention fintech; and Bolt Solutions/Bolt Development Center Ltd/bolttech, an Israeli-founded (2000) P&C insurance-distribution SaaS company with no ownership link to Bolt Technology OÜ ¹²³. This audit treats Bolt Technology OÜ, the mobility platform, as the primary subject given its location-, ride-, and payment-data pipelines ¹⁴. A separately registered “BOLT TECHNOLOGIES LTD” (Israeli company reg. no. 516700291, incorporated 2 Nov 2022, Rosh Ha’ayin) appears in Israel’s corporate registry, but no evidence located ties it corporately to Bolt Technology OÜ ⁵.

Enterprise Technology Stack & Vendor Relationships

No public evidence identified of licensing, subscription, or integration relationships between Bolt and Israeli cybersecurity or analytics vendors such as Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks. Bolt’s own engineering careers page describes its data and cloud stack as built on AWS (Batch, S3, Glue, EC2), Databricks/Spark, IBM Cloud/EKS (Presto), Terraform, Airflow, and Kafka, with no Israeli-origin security or analytics vendor named ⁶. No public evidence identified of systems integrators or IT-outsourcing partners mandating or recommending Israeli-origin technology within Bolt’s vendor stack.

Surveillance, Biometrics & Retail Technology

Bolt operates AI-based facial-recognition driver “Selfie Check”/liveness-detection functionality, introduced around 2020 in connection with a biometric driver-verification funding round ⁷. Bolt’s rider-facing “Rider Verification” facial-selfie and ID-number system was expanded nationwide across South Africa in June 2026, with rider selfies cross-checked against Department of Home Affairs population records via an unnamed “secure verification partner” ⁸⁹. No specific third-party biometric technology vendor is named in any located source; targeted checks for AU10TIX, Onfido, iProov, Microblink, Regula, Smile Identity, and Trulioo in connection with Bolt produced no confirmed vendor attribution, returning only each vendor’s generic marketing material rather than a Bolt partnership announcement ⁷⁸⁹. No public evidence identified of Trigo, BriefCam, AnyVision/Oosto, or Trax computer-vision-checkout technology deployed within Bolt Market grocery-delivery operations. No public evidence identified of predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools of Israeli origin used by Bolt.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Bolt’s backend and data infrastructure is described, via its own engineering documentation, as hosted on AWS, Databricks, and IBM Cloud/EKS, with data-lake storage on Amazon S3, and no Israel-based data-center operation, co-location, or cloud region is referenced ⁶. Bolt’s published privacy policy page functions as a directory of jurisdiction-specific privacy notices and does not disclose specific data-processing locations or cloud regions ¹⁰. No public evidence identified of Bolt participation in Project Nimbus or any comparable Israeli state-backed cloud programme. No public evidence identified of Bolt providing data-sovereignty, data-residency, or infrastructure-resilience services to Israeli state or military institutions.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership, or service agreement between Bolt and the Israeli Ministry of Defence, IDF, or Israeli intelligence/security bodies. No public evidence identified of Bolt’s commercial technology being deployed for military, intelligence, or law-enforcement surveillance in Israel or the Occupied Palestinian Territories. No public evidence identified of Bolt developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day exploit tools, or digital-weapons systems.

AI, Algorithmic & Autonomous Systems

Bolt’s autonomous-vehicle work consists of civilian robotaxi R&D conducted through partnerships with the University of Tartu, Pony.ai, and Stellantis for European driverless ride-hailing trials, with no located Israel nexus ¹. No public evidence identified of Bolt providing AI/ML, computer-vision, or decision-support systems to Israeli state, military, or security bodies. No public evidence identified that Bolt’s AI models were trained on or given access to civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the Occupied Palestinian Territories. No public evidence identified of Bolt providing autonomous target-generation, threat-detection, or tracking systems to Israeli military or security forces.

Technology Ecosystem & R&D Footprint

No public evidence identified of Bolt Technology OÜ operating an R&D centre, engineering office, or accelerator programme in Israel. A company named “BOLT TECHNOLOGIES LTD” was registered in Israel’s corporate registry in Rosh Ha’ayin on 2 Nov 2022, but no evidence connects it corporately to Bolt Technology OÜ, leaving its identity unresolved ⁵. A separate, unrelated Israeli-founded entity, Bolt Solutions Inc. (later Bolt Development Center Ltd/bolttech), partnered with MassChallenge Israel in 2017 to share insurtech expertise and maintains a presence in Petah Tikva, but this company is not corporately linked to Bolt Technology OÜ ²³. No public evidence identified of Bolt Technology OÜ acquiring an Israeli-origin technology company or making strategic investments in Israeli startups or venture funds; Bolt’s known acquisitions (Gotcha micromobility assets in 2021, Last Mile Holdings) are US-based, not Israeli ¹. No public evidence identified of patent portfolios, licensing agreements, or co-development arrangements between Bolt and the Technion, Hebrew University, or the Weizmann Institute.

Civil Society Scrutiny & Regulatory History

A keyword search of the Who Profits database for “Bolt” returned no entry for the ride-hailing company; the only “Bolt” match was an unrelated firearm product line, the DAN.338 Bolt Action Sniper Rifle, manufactured by Israel Weapon Industries, a subsidiary of Naska Industries/SK Group ¹¹. No public evidence identified naming Bolt, Bolt Technology OÜ, or its controlling principals in the OHCHR business-enterprises settlement database update of September 2025 or in the Albanese “From economy of occupation to economy of genocide” report (A/HRC/59/23, 2 Jul 2025) ¹²¹³. Bolt is named as a member platform of the International Alliance of App-Based Transport Workers (IAAWT), a coalition of gig-platform drivers spanning Uber, Lyft, Grab, Ola, Gojek, Didi, Careem, Deliveroo, Just Eat, Free Now, Glovo, DoorDash, Grubhub, and Amazon workers, whose members pledged on 13 March 2024 to boycott Chevron/Texaco/Caltex-branded gas stations in solidarity with the Palestinian BDS National Committee, citing Chevron’s extraction of Eastern Mediterranean gas claimed by Israel ¹⁴. This action names Bolt as a workforce constituency of a driver/labour-union boycott rather than as the target of a boycott campaign directed at Bolt’s own technology provision, and it does not constitute a corporate act by Bolt Technology OÜ itself ¹⁴. No public evidence identified of any organized boycott, divestment, or sanctions campaign directed specifically at Bolt’s technology relationships with Israel. No public evidence identified of regulatory inquiries, export-control actions, or sanctions investigations involving Bolt’s technology sales or services to Israeli state entities.

Israel Market-Entry & Legislative Timeline

In December 2022, Bolt placed driver-recruitment advertisements in Israeli media attempting to launch a “zero commission” private-driver ride-hailing service without prior coordination with Israel’s Ministry of Transportation, a private non-licensed-driver model understood to be illegal under Israeli law at the time and paralleling Yandex’s earlier abortive “Fix” service ¹⁵. Whether this 2022 entry attempt continued, was abandoned, or remains dormant is unresolved, as no dedicated 2023–2025 status report was located ¹⁵. On 19 January 2026, Israel’s Ministerial Committee for Legislation approved a draft “Uber Law” bill to legalize app-based private-vehicle ride-sharing, with Bolt explicitly named alongside Uber, Lyft, and Zulu as an interested company by Knesset legislator Moshe Passal ¹⁶¹⁷¹⁸. On 26–27 March 2026, the Knesset plenum passed the “Uber Law” in its first reading, advancing a legal framework under which Bolt could operate as a licensed ride-hailing platform; the bill retains exclusive street-hail rights for licensed taxis and includes cybersecurity, privacy, and driver-vetting requirements ¹⁶¹⁹. No public evidence identified that Bolt has commenced live commercial operations inside Israel or in West Bank/East Jerusalem settlements under this legislative framework as of the current reporting period.