Breitling DIGITAL

Enterprise Technology Stack & Vendor Relationships

Breitling’s own privacy and supplier-disclosure documentation names Riskified Ltd. as the vendor to which it discloses customer “Purchasing Data” generated through its e-commerce platform, for the stated purpose of payment-fraud screening, and identifies Riskified’s registered office as being in Tel Aviv, Israel.¹ Riskified Ltd.’s own U.S. Securities and Exchange Commission Form 20-F for fiscal year 2022 confirms it is incorporated under the laws of the State of Israel with principal executive offices at Europe House, Sderot Sha’ul HaMelech 37, Tel Aviv-Yafo, Israel, corroborating the Israeli origin disclosed on Breitling’s own site rather than relying on an inference from the vendor’s name alone.² Breitling’s disclosure states that Riskified aggregates the disclosed purchasing data with other e-commerce transaction data to assess payment legitimacy using automated, predetermined criteria, that the primary copy of this data is retained on Riskified servers in the United States, and that a backup copy is retained on servers in Israel.¹ This relationship is limited, on the evidence available, to a peripheral fraud-screening function rather than core enterprise infrastructure, since no evidence was found of Riskified or any other Israeli vendor being embedded in Breitling’s primary network, cloud platform, or customer-data-analytics stack.¹ A commercial technology-profiling database lists Breitling Switzerland’s confirmed vendor relationships as including Klarna Payments (payment processing, live 2021), Salesforce Chat (conversational support, live 2021), and Microsoft 365 (collaboration, live 2018), none of which is Israeli-founded.³ Searches for a direct Breitling licensing, subscription, or integration relationship with Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, Claroty, or Palo Alto Networks returned no public evidence identified.³ no public evidence identified names a systems integrator, digital-transformation consultancy, or IT outsourcing partner engaged by Breitling for a major technology programme, so no finding can be made on whether such a partner mandated or recommended Israeli-origin technology.³

Mirumee’s own published case study, hosted at mirumee.com/case-study/breitling, identifies Mirumee Software - headquartered in Wrocław, Poland - as the delivery partner that replatformed Breitling’s global e-commerce operations onto Saleor, a composable commerce platform, and quotes Breitling’s own CTO, Rajesh Shanmugasundaram, describing the resulting build as “over 15 services tailored specifically” to Breitling’s needs; a commercial technology-profiling database, Apps Run the World - the same database already cited in this audit as a vendor source - independently publishes a separate “system integrator” profile of Mirumee describing it as “a system integrator and technology consulting firm headquartered in Wroclaw, Poland” with a dated (2019) Breitling implementation record describing delivery of “a headless, composable storefront and personalized global checkout,” listing integrations it attributes to Mirumee’s work covering Contentful, Adyen, Riskified and Avalara.^{4, 5} This qualifies the existing audit finding that “no public evidence identified names a systems integrator, digital-transformation consultancy, or IT outsourcing partner engaged by Breitling for a major technology programme”: two independently published sources - Mirumee’s own case study and Apps Run the World’s separate system-integrator profile - now name Mirumee Software as such a partner for Breitling’s e-commerce platform, though no public evidence identified in this research extends this to a Breitling enterprise-wide technology programme beyond the e-commerce storefront and checkout, and the Mirumee case-study page itself carries no stated publication date.^{4, 5} Saleor’s own published case-study listing corroborates that Breitling “chose Saleor as its global commerce engine within a sophisticated infrastructure built with MACH principles,” without itself naming Mirumee in its case-study text, linking instead to the Mirumee case-study page for further detail.⁶

Mirumee’s case study describes a custom “Global Checkout” service built for Breitling’s global operations that bundles pre-orders, custom straps and extended warranties, tax calculations, shipping rules, delivery scheduling and gift options with, in the case study’s own wording, “fraud protection powered by Riskified,” alongside separately named integrations with Adyen (payments) and SendGrid (email); the Apps Run the World system-integrator profile of Mirumee’s Breitling implementation likewise lists Riskified under “fraud” as one of four third-party integrations (with Contentful, Adyen and Avalara) that Mirumee “led” in the platform build.^{4, 5} Neither source quantifies Riskified’s technical depth of integration (for example, whether it operates via real-time API calls at checkout versus a batch data feed) or describes Riskified as more than one of several named third-party services plugged into the checkout flow; this is consistent with, rather than contradicting, the audit’s characterization of the Riskified relationship as fraud-screening rather than core infrastructure, while showing that the fraud-screening function is positioned in vendor-side marketing material as one explicit named feature of Breitling’s primary global checkout service rather than being described only as a backend data-sharing disclosure, as it is in Breitling’s own supplier-privacy page.^{4, 5, 1}

No page located in this research states an explicit publication date for the Mirumee case-study page itself. A companion Mirumee blog post publicizing a joint webinar with Breitling, Saleor, Contentful and Algolia, titled “From Bottleneck to Breakthrough - How Breitling Went MACH,” was retrieved in this research and shows an inferred article date of 11 August 2025 rather than the 9 September 2025 date otherwise reported elsewhere for the same webinar; this date discrepancy could not be resolved within this research and is flagged rather than adjudicated, consistent with the audit’s own note that no firm publication date anchors the case-study page.⁷

Surveillance, Biometrics & Retail Technology

No public evidence identified shows Breitling using facial recognition, biometric identification, behavioural analytics, or gait-analysis technology from Trigo, BriefCam, AnyVision/Oosto, Trax, or any comparable vendor, Israeli or otherwise, in its boutiques or retail operations.³ no public evidence identified shows Breitling using Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools.³ no public evidence identified shows any of the above technologies reaching Breitling indirectly through a third-party platform, managed security service, or bundled enterprise suite.³

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified shows Breitling operating, leasing, or co-locating data-centre infrastructure within Israel.^{8, 9} Breitling’s own disclosures on this point are internally inconsistent: its global privacy policy states that website hosting is provided by AWS and Vercel on servers in Germany and the United States,⁹ while a regional GDPR notice states only that data is transmitted “to our hosting provider and to affiliated companies of Breitling in Switzerland” without naming the provider,⁸ and the privacy policy of sister brand Gallet (also operated by Breitling SA) states that Amazon Web Services hosts its site on servers located in Switzerland.¹⁰ None of these disclosures names Israel as a primary hosting location.^{8, 9, 10} Notwithstanding the absence of primary-hosting ties to Israel, the data-exposure pathway documented above under Enterprise Technology Stack is directly relevant here: Breitling’s own disclosure states that a backup copy of customer purchasing data disclosed to Riskified Ltd. for fraud screening is retained on servers located in Israel, alongside a primary copy on U.S. servers, and that this constitutes a transfer of personal data outside the European Economic Area under Breitling’s own data-protection analysis, which invokes the European Commission’s 31 January 2011 adequacy decision covering transfers to Israel.¹ no public evidence identified shows Breitling participating in any government cloud initiative, including Project Nimbus or a comparable state-backed digital-infrastructure programme, as either a customer or a provider.³ no public evidence identified shows Breitling providing services marketed or contracted to ensure digital sovereignty, data residency, or infrastructure resilience for Israeli state institutions or military bodies; Breitling is a consumer of outside technology services rather than a provider of infrastructure to any government.³

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified shows any contract, partnership, or service agreement between Breitling and the Israeli Ministry of Defence, the Israel Defense Forces, Israeli intelligence agencies, or other state security bodies.³ no public evidence identified shows Breitling’s commercially available technology (principally mechanical and electronic timepieces and an e-commerce platform) being deployed for military, intelligence, or law-enforcement surveillance applications in Israel or the occupied territories.³ no public evidence identified shows Breitling developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day exploit tools, or digital-weapons systems, or any Israeli state deployment of such tools attributed to Breitling.³

AI, Algorithmic & Autonomous Systems

No public evidence identified shows Breitling providing artificial intelligence, machine learning, computer vision, or autonomous decision-support systems to Israeli state, military, or security bodies.³ no public evidence identified shows Breitling’s systems being trained on, or given access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories.³ no public evidence identified shows Breitling providing autonomous target-generation, automated threat-detection, or autonomous-tracking systems to Israeli military or security forces.³

Technology Ecosystem & R&D Footprint

Breitling’s own published research-and-development materials describe its principal laboratory, Breitling Chronométrie, as located in La Chaux-de-Fonds, Switzerland, with no Israeli facility, engineering office, or accelerator programme identified anywhere in the company’s public materials.³ no public evidence identified shows Breitling itself acquiring any Israeli-origin technology company or making a strategic investment in an Israeli technology startup or venture fund.³ This is distinct from the activity of Breitling’s controlling shareholder: CVC Capital Partners, the private-equity firm that acquired an 80% stake in Breitling from the Schneider family in 2017 and the remaining 20% from Théodore Schneider in November 2018,¹¹ separately invested in ironSource Ltd., an Israeli mobile-app-monetization and advertising-technology company, in 2019, according to deal coverage tied to Riskified’s own IPO reporting period; this is a CVC fund-level transaction in a company unconnected to Breitling’s operations, and no public evidence identified connects it to Breitling’s own technology stack or governance.¹² no public evidence identified connects Partners Group Holding AG, which agreed to acquire a significant minority stake in Breitling from CVC Capital Partners Fund VI and Breitling management in October 2021¹³ and became Breitling’s controlling shareholder following a transaction announced 23 December 2022,^{14, 15} to any Israeli cyber, defense, or surveillance portfolio company. No public evidence identified shows any patent portfolio, licensing agreement, or co-development arrangement between Breitling and an Israeli-domiciled entity or research institution such as the Technion, Hebrew University, or the Weizmann Institute.³

CVC’s own press release, published on the cvc.com domain and dated 25 October 2017, states that Skybox Security - described in that release as a Silicon-Valley-based cyber-security management software company co-founded and led by CEO Gidi Cohen - signed a definitive agreement for a $150 million growth-equity investment “led by CVC Capital Partners’ Growth Fund (CVC Growth),” with CVC itself investing $100 million of the total and naming CVC Growth Partners senior managing director Jason Glass and managing partner John Clark as incoming Skybox board members.¹⁶ SecurityWeek’s report of 8 February 2023 adds that “CVC Growth Funds,” together with Pantheon and J.P. Morgan, closed a further $50 million financing round in Skybox around the same date Skybox announced a new CEO, while describing Skybox itself only as a “San Jose” company with no Israel reference in that outlet’s own text.¹⁷

Ynet (dated by file path to February 2025) and Calcalist (24 February 2025, byline Meir Orbach) both independently describe Skybox Security as an Israeli cybersecurity company founded in 2002 by Gidi Cohen (Calcalist additionally names Moshe Meiseles and Eran Reshef as co-founders), employing approximately 100 staff in Israel and roughly 200 in the United States prior to a 24 February 2025 shutdown and liquidation in which Skybox’s business and technology were sold to Israeli cybersecurity firm Tufin; Calcalist’s article explicitly cross-references the earlier financing, stating that “in 2017, CVC Capital Partners led a $150 million funding round for Skybox, investing $100 million of it.”^{18, 19} Taken together with CVC’s own 2017 release, these sources establish that CVC Growth - a growth-equity investment platform that CVC’s own 13 November 2019 press release describes as part of “CVC’s Growth Partners platform” operating “as part of CVC’s global network” - led or co-led two financing rounds (2017 and 2023) in a company that Israeli business press identifies as Israeli-founded and Israeli-headquartered cybersecurity management software; this is a tie, additional to the ironSource ad-tech investment already identified in this audit, between the CVC Growth Partners platform and an Israeli-origin cybersecurity firm, though Skybox’s own published product description addresses attack-surface analytics and security-policy management rather than offensive cyber, defense, or surveillance applications, and no public evidence identified in this research shows Skybox selling to, or being deployed by, any defense, intelligence, or military body.^{16, 17, 18, 19} That same 13 November 2019 CVC press release separately names ironSource as “headquartered in Tel Aviv” and as a CVC Growth Partners Fund I investment, corroborating directly on the cvc.com domain the ironSource/Tel Aviv fact this audit currently sources to Globes.²⁰ no public evidence identified in this research connects CVC Growth Partners - on the evidence located, a distinct fund vehicle and investment team from CVC Capital Partners Fund VI, the vehicle that acquired Breitling in 2017–2018 - to Breitling’s governance, board composition, or technology stack, and no public evidence identified shows Skybox Security’s products being deployed by, sold to, or otherwise connected to Breitling itself.^{16, 17, 18, 19, 20}

Civil Society Scrutiny & Regulatory History

A direct search of Who Profits’ own company database for “Breitling” returned no matching entry among its listed companies.²¹ An attempted fetch of a page on investigate.afsc.org and an attempted fetch of a page on ohchr.org describing the UN database of business enterprises involved in settlement activity both failed to load, so neither source could be searched directly for Breitling in this research; no public evidence identified, with this access limitation noted, shows Breitling named in either database.³ UN Special Rapporteur Francesca Albanese’s report A/HRC/59/23, “From economy of occupation to economy of genocide” (2 July 2025), addresses corporate actors in technology, surveillance, cloud, and AI sectors connected to the occupation, and reporting on the document states that Albanese said she had contacted “all 48 companies named in her report”; this audit could not retrieve the report’s full text or its company annex directly (the available copies returned only non-extractable binary data or a title-only stub page), so the absence of a Breitling mention rests only on secondary search-engine descriptions of the report’s subject matter rather than a direct reading, and is flagged here as an evidence gap rather than a confirmed negative.³ no public evidence identified shows Breitling named in the “Don’t Buy Into Occupation” company lists or any BDS Movement named list.³ no public evidence identified shows an organised boycott, divestment, or sanctions campaign specifically targeting Breitling over technology provision to Israel.³ no public evidence identified shows a regulatory inquiry, legal challenge, export-control action, or sanctions-related investigation involving Breitling’s technology sales or services to Israeli state entities.³ Breitling operates one retail boutique in Israel, located at 18 Tel Aviv Street, Tel Aviv, per Breitling’s own store locator, which places it inside Israel’s internationally recognized territory rather than in East Jerusalem, the West Bank, or the Golan Heights, so no Settlement Nexus issue arises from this location on the evidence available.²²

Named entities, searched by name. CVC Capital Partners - relationship: controlling/majority shareholder of Breitling from 2017 (80% stake) and November 2018 (remaining 20%) until its stake was reduced below majority by Partners Group’s December 2022 transaction, with CVC continuing as a co-investor thereafter - searched for Israeli defense, surveillance, or cyber-intelligence ties: searched, found only CVC’s unrelated 2019 investment in Israeli ad-tech firm ironSource, no defense/surveillance tie found.^{11, 12, 23} Partners Group Holding AG - relationship: acquired a minority stake in Breitling in October 2021 and became Breitling’s controlling/largest shareholder following a transaction announced 23 December 2022 and reported closed 7 April 2023 - searched for Israeli cyber, defense, or surveillance portfolio ties: searched, none found.^{13, 14, 15} Alfred Gantner - relationship: Partners Group co-founder; became Chairman of Breitling’s board of directors following the December 2022/April 2023 transaction - searched for Israeli defense-industry directorships, settlement-organisation affiliation, or related philanthropy: searched, none found.^{14, 24} Daniel Pindur - relationship: CVC Managing Partner; was Chairman of Breitling’s board of directors until he was succeeded by Gantner in the 2022/2023 transaction - searched for Israel-related directorships or regional responsibilities: searched; only unverifiable aggregator-sourced claims were found, which could not be confirmed against any openable primary source within this research and are therefore not asserted here.^{15, 24} Georges Kern - relationship: Breitling CEO from 2017 until the leadership change effective 1 May 2026, after which he became CEO of parent entity “House of Brands” (which also encompasses Universal Genève and Gallet) - searched for Israel-related public statements: searched, none found.²⁵ Jean-Marc Pontroué - relationship: became Breitling CEO effective 1 May 2026, having previously led Panerai and Roger Dubuis within the Richemont group - searched for Israel-related ties: searched, none found.^{25, 26}

Act record. CVC Capital Partners’ acquisition of Breitling: acting entity CVC Capital Partners (Fund VI), recipient/subject Breitling SA, channel CVC’s own press materials and trade-press coverage on the cvc.com and unquote.com domains, earliest dated observation 2017 (80% stake) and November 2018 (remaining 20% from Théodore Schneider), continuing as of the most recent available reporting (25 February 2026, reporting CVC retaining and marking down a residual stake), status continuing as a minority co-investor per that reporting.^{11, 23} Partners Group’s acquisition of Breitling: acting entity Partners Group Holding AG, recipient Breitling SA, channel Partners Group’s and CVC’s own press releases on the partnersgroup.com and cvc.com domains, earliest dated observation 26 October 2021 (agreement for a minority stake acquired from CVC Capital Partners Fund VI and management), latest dated observation 23 December 2022 (announcement of a further stake increase making Partners Group the largest shareholder, reportedly closed 7 April 2023), status continuing and controlling as of the most recent available reporting (25 February 2026).^{13, 14, 15, 23} Appointment of Alfred Gantner as Breitling board chairman: acting entity Partners Group/Breitling, channel Partners Group’s own press release (partnersgroup.com) and trade-press republication (talent4boards.com), dated 23 December 2022, status: Gantner replacing Daniel Pindur as chairman at transaction closing, no subsequent change in chairmanship identified in this research.^{14, 24} Breitling’s leadership transition from Georges Kern to Jean-Marc Pontroué as CEO: acting entity Breitling/House of Brands, channel europastar.com and luxurytribune.com trade-press reporting of the company’s own 20 April 2026 announcement, effective date 1 May 2026, status continuing as of the most recent available reporting.^{25, 26} Breitling’s disclosure and transfer of customer purchasing data to Riskified Ltd.: acting entity Breitling SA, recipient Riskified Ltd. (Tel Aviv, Israel), channel Breitling’s own website (breitling.com domain, privacy-policy/suppliers page), earliest dated observation not stated on the page (no start date given), latest/current dated observation the page as retrieved during this research (31 October 2026), status continuing as of the research date based on the live current policy text, with no evidence found of this disclosure being discontinued.^{1, 2}