Digital Audit: Burger King

Enterprise Technology Stack & Vendor Relationships

No public evidence identified that Burger King or its parent Restaurant Brands International (RBI) holds a licensing, subscription, or integration relationship with Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, Claroty, or Palo Alto Networks. RBI’s confirmed exclusive North American point-of-sale and software provider for Burger King’s traditional restaurants is PAR Technology Corporation (Brink POS, MENU Link), a relationship announced 9 October 2023 ¹. No public evidence identified linking PAR Technology to Israeli-origin technology, an Israeli R&D center, or Israeli acquisitions. RBI’s cybersecurity program, per its FY2024 10-K disclosure, relies on an unnamed managed security service provider and unnamed third-party assessment firms, with no specific vendor names identified in the filing ². Burger King’s digital platforms confirmedly use Amazon Web Services, specifically AWS Cognito for authentication, as identified through a September 2025 security-vulnerability disclosure ³⁴. RBI also maintains a confirmed regional technology partnership with Ant Group of China for mini-program SaaS and Alipay+ payment integration across roughly 1,500 restaurants in eight Asia-Pacific markets, announced 19 December 2021, with no Israeli-origin technology component identified ⁵. No public evidence identified of systems integrators or digital-transformation consultancies engaged by Burger King or RBI mandating or deploying Israeli-origin technology.

Surveillance, Biometrics & Retail Technology

No public evidence identified of Burger King use of facial recognition, biometric identification, or gait-analysis technology sourced from Trigo, BriefCam, AnyVision/Oosto, Trax, or comparable Israeli-origin vendors. Burger King’s 2026-era “Patty” AI drive-thru and headset assistant runs on an OpenAI base model with proprietary in-house architecture layered on top, piloted in 500 restaurants as of March 2026 with a nationwide “BK Assistant” rollout planned by the end of 2026 ⁶⁷⁸. This is an audio-based workforce “friendliness” monitoring and coaching tool rather than a facial-recognition system, and no Israeli-origin vendor has been identified anywhere in its supply chain ⁶⁷⁸. No public evidence identified of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools distinct from the OpenAI-based Patty system. No public evidence identified of Israeli-origin biometric or surveillance technology reaching Burger King indirectly through managed security services or bundled technology suites.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified that Burger King or RBI operates, leases, or co-locates data-center infrastructure within Israel. No public evidence identified of Burger King or RBI participation in Project Nimbus or any comparable Israeli government cloud initiative; Project Nimbus itself is a confirmed $1.2 billion Google/AWS contract with the Israeli government for cloud and AI/ML services, but no connection to Burger King or RBI as customer, vendor, or subcontractor was found ⁹¹⁰. No public evidence identified of Burger King or RBI providing data-sovereignty, data-residency, or infrastructure-resilience services to Israeli state institutions or military bodies; in its enterprise technology stack Burger King functions as a technology customer rather than a technology provider, limiting the applicability of this domain to the company.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership, or service agreement between Burger King or RBI and the Israeli Ministry of Defence, the IDF, or Israeli intelligence agencies. Distinct from technology, Burger King’s Israeli franchisee (Rikamor Ltd. and successor entities) has documented commercial and charitable activity directly supporting Israeli military personnel: in October 2023 the Israeli franchise donated thousands of free meals to IDF soldiers following a “kosher” cheeseburger incident ¹¹¹², and in April 2025 it distributed roughly NIS 480,000 (approximately $128,000) in meal vouchers to active-duty and reservist IDF combat soldiers, an action arising from settlement of an unrelated 2022 kosher-labeling consumer lawsuit ¹³. These are food and charitable transactions rather than digital-technology transactions, and are franchisee-level rather than global-corporate-policy actions per contemporaneous reporting ¹¹. No public evidence identified of Burger King or RBI dual-use technology deployment for military, intelligence, or law-enforcement surveillance in Israel or the Occupied Palestinian Territories. No public evidence identified of Burger King or RBI development, sale, licensing, or maintenance of offensive cyber capabilities or digital-weapons systems.

AI, Algorithmic & Autonomous Systems

No public evidence identified of Burger King or RBI providing AI/ML, computer-vision, or autonomous decision-support systems to Israeli state, military, or security bodies. Burger King’s own AI tooling - the “Patty”/BK Assistant system - is an internal customer-service and workforce-coaching application built on an OpenAI model, piloted in the US market beginning in 2026 ⁶⁷. No public evidence identified that Burger King or RBI’s AI models have been trained on or granted access to civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the Occupied Palestinian Territories. No public evidence identified of Burger King or RBI provision of autonomous targeting, threat-detection, or tracking systems to Israeli military or security forces.

Technology Ecosystem & R&D Footprint

No public evidence identified of Burger King or RBI-operated R&D facilities, engineering offices, innovation labs, or accelerator programs within Israel. No public evidence identified of Burger King or RBI acquisitions of Israeli-origin technology companies or strategic investments in Israeli technology startups or venture funds. No public evidence identified of significant patent portfolios, licensing agreements, or co-development arrangements between Burger King or RBI and Israeli-domiciled entities or research institutions such as the Technion, Hebrew University, or the Weizmann Institute. RBI’s founding and controlling shareholder is the private-equity firm 3G Capital, and the co-chairs of RBI’s board are Alexandre Behring and Daniel Schwartz, both current or former 3G Capital partners ¹⁴¹⁵. No public evidence identified of personal equity stakes, board roles, or investments by Behring, Schwartz, or RBI’s senior executives in Israeli surveillance, cyber, AI, SIGINT, or military-technology firms such as NSO Group, Cellebrite, Carbyne, AnyVision/Oosto, Wiz, Palantir, Check Point, SentinelOne, Verint, or Nice. Separately, the original 1993 Burger King Israel master franchisee was linked to Israeli-American businessman Meshulam Riklis (Rikamor Ltd.), a major Israeli philanthropic donor and personal friend of former Prime Minister Ariel Sharon, including a personal loan Riklis extended that Sharon used to purchase his Negev ranch in 1972 ¹⁶¹⁷. This historical franchisee tie predates and is unrelated to Burger King’s current, post-2015 Israeli franchise ownership; Riklis died in 2019, and the franchise changed hands in 2010 and again in 2015–16 ¹⁸.

Civil Society Scrutiny & Regulatory History

Burger King, Restaurant Brands International, Rikamor, and PAR Technology do not appear in the OHCHR “List of Companies Linked to Illegal Settlement in the West Bank,” based on direct review of the September 2025 dataset update mirrored via OpenSanctions ¹⁹²⁰. The A/HRC/59/23 report by Special Rapporteur Francesca Albanese (“From economy of occupation to economy of genocide”) lists companies across arms, technology, construction, banking, and other sectors, but a full manual line-by-line review of its annex was not completed, leaving this as an evidence gap rather than a confirmed absence ²¹. The Don’t Buy Into Occupation IV report (November 2024) was reviewed, but its accompanying company-list annex PDF could not be read for textual content, so no confirmation either way could be obtained regarding Burger King or RBI’s presence in that specific list ²². Historically, Israeli franchisee Rikamor Ltd., linked to Meshulam Riklis, opened a Burger King outlet in the Ma’ale Adumim West Bank settlement around August 1999 ²³¹⁸; following threatened boycotts by Arab League member states and Muslim and Arab-American advocacy groups, Burger King Corporation formally canceled Rikamor’s franchise rights for that outlet on 26 August 1999, stating the decision was made “purely on a commercial basis” and not for political reasons ²⁴²⁵. Contemporaneous reporting noted the West Bank outlet initially defied an order to close ²⁶. The 2023–2025 franchisee-level IDF-support donations described above triggered organic criticism from the BDS movement, which characterized Burger King as an “organic boycott target” gaining attention after October 2023 rather than a long-standing official BDS priority target ¹¹¹²¹³. No public evidence identified of any regulatory inquiry, legal challenge, export-control action, or sanctions-related investigation involving Burger King or RBI’s technology sales or services to Israeli state entities. Separately, an independent September 2025 security-research disclosure - not a government or regulatory action - found multiple critical vulnerabilities across bk.com, popeyes.com, and timhortons.com, including misconfigured AWS Cognito authentication, a plaintext-password signup bypass, unencrypted drive-thru voice recordings exposing customer personal data, and hardcoded credentials in a self-install ordering device, all reportedly patched the same day without public acknowledgment of the researchers ³⁴.

End Notes