Digital Audit - Burberry Group plc

Domain: Digital / Technology Entity scope: Burberry Group plc (LSE: BRBY), independent. Vendor-domicile rule applied: only genuinely Israeli-domiciled vendors are treated as Israeli-nexus; US/EU/UK-domiciled vendors are attributed to their domicile even if Israeli-founded. Compiled: 2026-06-21 Method: Live web search only

Enterprise Technology Stack & Vendor Relationships

Burberry operates a cloud-native, composable (“MACH”) technology estate. Confirmed vendor relationships:

• AWS - primary cloud infrastructure (e-commerce and data estate).¹
• EPAM Systems - digital-engineering partner since 2014, building/migrating the MACH e-commerce platform on AWS Lambda/microservices.²
• Capgemini - co-delivery partner on the AWS transformation.¹
• Databricks - Data Intelligence Platform hosting ~40 personalisation models.³
• Snowplow Analytics - UK-domiciled behavioural-data platform (real-time clickstream).⁴
• Contentstack (US) headless CMS (implemented by EPAM, ~50 languages); commercetools (Germany) headless commerce engine; Salesforce LiveAgent (chat); Apple (in-store “R World” app, plus RFID authentication chips); IBM (blockchain provenance proof-of-concept).⁵⁶⁷⁸⁹

Israeli-domiciled vendor assessment: No Israeli-domiciled technology-vendor relationship with Burberry was confirmed by live public sources. Searched and not verified: Riskified (Israeli-founded, NYSE/US-Israel) - no Burberry relationship found; Forter (Israeli-founded, NY HQ) - none; Optimove (Israeli, Tel Aviv) - none; Syte (Israeli visual-search AI) - its client list (Farfetch, Nike, M&S) does not include Burberry; NICE (Israeli) - none; Amdocs (Israeli-founded, US HQ) - none.¹⁰

Surveillance, Biometrics & Retail Technology

Burberry has deployed in-store associate technology (“R World,” Apple-partnered) and product-embedded RFID/NFC authentication chips, but no public evidence identifies use of facial recognition, biometric surveillance, or Israeli-origin surveillance technology in its retail estate.⁷ Burberry runs an in-house cybersecurity training programme (first graduates 2021), indicating a preference for in-house capability over outsourced surveillance platforms.¹¹ No public evidence identified of Burberry deploying surveillance technology supplied by Israeli-domiciled vendors.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Burberry’s confirmed primary cloud provider is AWS; Snowplow operates on AWS (Amazon S3), and the EPAM MACH estate runs on AWS services.¹³⁴² No public evidence identifies Azure or Google Cloud as primary/co-primary infrastructure. No public evidence identified of Burberry participating in Israeli sovereign-cloud programmes, Israeli public-sector cloud frameworks, or any data-residency arrangement with Israeli-domiciled cloud providers.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of Burberry holding contracts with, investing in, or procuring technology from defence, intelligence, or security-sector entities domiciled in Israel or linked to Israeli military-technology programmes. Burberry’s confirmed technology partners are all civilian commercial entities with no identified Israeli military or intelligence nexus.

AI, Algorithmic & Autonomous Systems

Burberry’s AI systems use internally built or US/UK-domiciled tooling: Penguin, an internally built generative-AI clienteling platform (transformer/LLM-based; adopted by 100+ client consultants; ~24% uplift in average transaction value in service channels); the Databricks 40-model personalisation/propensity/LTV estate on AWS; and photo-to-product visual search (underlying vendor not publicly named - no evidence of an Israeli visual-AI supplier such as Syte).¹²³¹⁰ Burberry has also explored Unreal Engine for design prototyping.¹³ No public evidence identified of Burberry deploying AI systems supplied by Israeli-domiciled vendors, or AI with military/surveillance applications.

Technology Ecosystem & R&D Footprint

Burberry’s annual ICT spend was estimated at ~$76.9 million (2023), with digital customer experience central to its 2024 “Burberry Forward” plan.¹⁴ It has run innovation-day events with EPAM. No public evidence identified of Burberry holding equity in, or strategic R&D partnerships with, Israeli technology companies, accelerators, or venture funds.

Civil Society Scrutiny & Regulatory History

Civil-society pressure on Burberry over Israel has centred on its Tel Aviv retail stores and an unverified wool-sourcing claim (treated in the Economic audit), not on technology-vendor relationships; no civil-society campaign has publicly identified an Israeli technology-vendor relationship as a concern.¹⁵ No ICO fine or public data-protection enforcement action against Burberry was identified; Burberry’s privacy policy discloses sharing transaction data with unnamed fraud-detection providers.¹¹¹⁶ No regulator has publicly sanctioned Burberry for technology-related conduct as of this audit.

End Notes