Cartier DIGITAL

Enterprise Technology Stack & Vendor Relationships

Israeli-origin software and services. A Richemont recruitment posting for an Endpoint Protection Engineer specifies hands-on experience with Cortex XDR/XSIAM and lists “Palo Alto PCDRA” as a relevant certification, alongside Microsoft Defender for Endpoint, Intune, Workspace ONE and Tanium, which places Palo Alto Networks tooling inside Richemont’s own disclosed endpoint-security stack across Windows, macOS, iOS and Android devices.¹ Palo Alto Networks was founded in 2005 by Nir Zuk, who served in the Israel Defense Forces’ Unit 8200 signals-intelligence directorate, later built Check Point Software’s United States development office, and founded Palo Alto Networks as a Check Point competitor before relocating back to Israel in 2021 while continuing to work for the company remotely.² A separate, contemporaneous Richemont posting for a Cloud Security Engineer role (Moscavide, Portugal) names AWS, Alibaba Cloud and Google Cloud Platform as the relevant cloud providers and does not name Check Point, Wiz, CyberArk or SentinelOne, so no public evidence identified places those four vendors inside Richemont’s disclosed cloud-security stack.³ no public evidence identified of a Richemont or Cartier licensing, subscription or integration relationship with Nice Ltd.⁴

Scale of dependency. The Endpoint Protection Engineer role is described as managing endpoint security “across Windows, macOS, iOS, and Android” enterprise-wide, placing the Palo Alto Networks-certified tooling (Cortex XDR/XSIAM) within core, group-wide infrastructure rather than a clearly peripheral function, though the posting discloses no contract value, start date or exclusivity, and neither Richemont nor Palo Alto Networks has issued a public statement naming the other as a vendor or customer.¹ Palo Alto Networks’ own footprint in the Israeli technology sector increased materially during this reporting period: following its 11 February 2026 completion of its acquisition of CyberArk Software Ltd, Palo Alto Networks announced plans to secondary-list on the Tel Aviv Stock Exchange, which trade press reported would make it the most valuable company listed on that exchange at an approximately $115 billion market capitalisation, though no public evidence identified connects this corporate-level development to the specific scale or terms of Richemont’s own deployment of Palo Alto Networks tooling.^{5, 6}

Call-centre and workforce systems. A Cartier recruitment posting for a Senior Analyst, Workforce Management (Coral Gables, Florida) asks for “proven experience utilizing WFM systems (Verint, Blue Yonder, Legion, or others),” naming Verint’s workforce-scheduling product line as one of several acceptable systems without confirming which one Cartier has actually deployed.⁷ A separate Cartier CRM Analyst posting (London) names SAP Business Intelligence, SAP Analytics Cloud, Microsoft Power BI and Salesforce Marketing/Service Cloud as the relevant client-data systems and does not mention Verint, Nice, or any other Israeli-origin analytics vendor.⁴

Procurement and integrator relationships. No public evidence identified of a named systems integrator, digital-transformation consultancy or IT-outsourcing partner engaged by Richemont or Cartier that has mandated, recommended or deployed Israeli-origin technology; Richemont’s 2021 announcement that it would migrate its entire enterprise IT infrastructure to Amazon Web Services describes a direct enterprise relationship with AWS rather than a disclosed third-party integrator, and no public evidence identified of any 2025–2026 renewal, expansion or re-tender of that AWS relationship.⁸

Named entities and controlling principals. Cartier SA is wholly owned by Compagnie Financière Richemont SA, the Swiss-listed holding company whose “Jewellery Maisons” also include Van Cleef & Arpels and Buccellati.⁹ Voting control of Richemont rests with Compagnie Financière Rupert, an unlisted Swiss entity that as of 2023 held 522,000,000 Class B shares and 6,263,000 Class A shares - roughly 10% of Richemont’s equity and 51% of its voting rights - and is principally owned and controlled by Johann Rupert.⁹

Johann Rupert - Chairman of Compagnie Financière Richemont SA and General Managing Partner of Compagnie Financière Rupert per Richemont’s own 2025 SEC governance exhibit; searched by name together with his other holding companies, Remgro and Reinet, for Israeli defense, cyber or surveillance equity stakes: searched, none found.³

Nikesh Arora - Non-executive Director of Richemont since 2017 and Lead Independent Director since April 2025, per Richemont’s own corporate-governance page, which also states he has served as Chairman and Chief Executive Officer of Palo Alto Networks, Inc. since 1 June 2018; a 2025 SEC exhibit (Annex B, CIK 1235577) independently lists him as “Non-Executive Director; Chairman and CEO of Palo Alto Networks, Inc.,” confirming the dual role from a second, regulatory source.^{2, 3} SEC insider filings (Form 4) reviewed via search show direct Palo Alto Networks holdings in the hundreds of thousands of shares as of a January 2024 transaction, with additional shares held through a family trust; his current total equity stake was not independently confirmed this session.² Richemont’s own corporate-governance page, reopened during a prior expansion run, states in its own text that Arora “was appointed chair of the Strategic Security Committee in November 2025,” confirming that appointment and date directly from the primary source, though the page itself does not name a predecessor or list fellow committee members, so the committee’s full disclosed composition beyond Arora’s chairmanship remains an evidence gap.² The same page separately lists Arora as a Non-executive Director of Uber Technologies, Inc. since June 2025 and as an adviser to Auradyne and Glean Technologies, none of which were linked to Israel in any search conducted this session.²

Palo Alto Networks, Inc. - whose Chairman and Chief Executive Officer, Nikesh Arora, simultaneously serves as Richemont’s Lead Independent Director and, since November 2025, as Chair of Richemont’s own Strategic Security Committee - completed its acquisition of CyberArk Software Ltd, an identity-security company headquartered in Petah Tikva, Israel, on 11 February 2026, with CyberArk shareholders receiving $45.00 in cash and 2.2005 Palo Alto Networks shares for each CyberArk ordinary share, per Palo Alto Networks’ own Form 10-Q for the quarter ended 31 January 2026.^{5, 10} Palo Alto Networks’ Form S-4/A for the transaction describes Israel-specific closing steps including approval under Sections 314 through 327 of the Israeli Companies Law, a planned pre-ruling application to the Israel Securities Authority, and tax rulings sought from the Israel Tax Authority, though the excerpt retrieved this session does not itself confirm a distinct Israeli antitrust or competition-authority clearance separate from those steps.¹¹ On the day the acquisition completed, Palo Alto Networks announced it would pursue a secondary listing on the Tel Aviv Stock Exchange under the ticker “CYBR,” a move trade press reported would make Palo Alto Networks the most valuable company listed on the TASE at an approximately $115 billion market capitalisation, surpassing Teva, Bank Leumi and Bank Hapoalim.⁶ no public evidence identified that Richemont or Cartier holds any equity interest in, or discloses any relationship with, CyberArk Software Ltd itself; the only connection identified this session runs through Nikesh Arora’s dual role as a Richemont director and officer and as Chairman/CEO of CyberArk’s acquirer, Palo Alto Networks.^{2, 5}

Separately, Palo Alto Networks - the same vendor named in Richemont’s own Endpoint Protection Engineer posting - was named as the technology partner in a tender that Danet Communications Ltd, an 80%-owned subsidiary of Tel Aviv Stock Exchange-listed Accel Solutions Group, said it won on 10 March 2026 for what the companies called Israel’s largest network security tender, to protect the critical network infrastructure of an unnamed “major Israeli customer” under a three-year engagement with an option to extend by up to three further years, for estimated cumulative revenue of NIS 250–500 million, with the announcement stating that, as of its release date, no binding purchase orders had been received under the framework.¹² no public evidence identified names Richemont or Cartier as the customer in this tender, and no public evidence identified connects this specific contract to Richemont’s own enterprise relationship with Palo Alto Networks beyond both arising from the same vendor.^{12, 1}

Jeff Moss - Non-executive Director of Richemont since 2016 and a member of its Strategic Security Committee, per Richemont’s own corporate-governance page, which also states he founded DEF CON and Black Hat Briefings, served as ICANN’s Chief Security Officer (2011–2013), and was a Special Governmental Employee at the US White House Office of the National Cybersecurity Director from 2024 to 2025; searched by name for Israel-specific roles: searched, none found.¹³

Bram Schot, Anton Rupert, Nicolas Bos, Burkhart Grund, Fiona Druckenmiller, Keyu Jin, Wendy Luhabe, Josua Malherbe, Vesna Nevistic, Gary Saage, Patrick Thomas and Jasmine Whitbread - the remaining non-executive and executive directors on Richemont’s board per the company’s own governance page; each searched individually by name together with Israel, defense, cyber, surveillance and settlement-related terms: searched, none found for any of the twelve.¹

Louis Ferla, listed in Richemont’s 2025 SEC governance exhibit as Cartier SA’s own named executive officer, was searched by name for Israel-linked technology or defense ties: searched, none found.³

Act record. Richemont Group (the acting entity) maintains, on its own domain (careers.richemont.com), a live recruitment description naming Palo Alto Networks’ Cortex XDR/XSIAM platform and PCDRA certification as current requirements for an internal endpoint-security role; this was observed during research for this audit, no first-publication date is shown on the page, and whether the underlying vendor relationship is continuing, newly started or ending cannot be established from a job posting alone.¹ Separately, Nikesh Arora’s board seat is a continuing governance relationship between Compagnie Financière Richemont SA (recipient of his services as director) and Palo Alto Networks, Inc. (where he is simultaneously Chairman/CEO); Richemont’s own page states this directorship began in 2017 and remains current as of the page viewed, with his Lead Independent Director title dated to April 2025.^{2, 3} Nikesh Arora’s Strategic Security Committee chairmanship is, on the evidence gathered, a further continuing governance relationship dated to November 2025 on Richemont’s own page, with no end date shown, running in parallel with his continuing Chairman/CEO role at Palo Alto Networks, Inc. and his new, indirect connection - via Palo Alto Networks’ completed acquisition - to CyberArk Software Ltd, an Israeli-domiciled company, as of 11 February 2026.^{2, 5}

Surveillance, Biometrics & Retail Technology

No public evidence identified connecting Cartier or Richemont to Trigo, BriefCam, AnyVision/Oosto, Trax or any other Israeli-origin facial-recognition, biometric, behavioural-analytics or gait-analysis vendor for loss prevention, store analytics or frictionless checkout; neither “Cartier” nor “Richemont” returns a matching entry on Who Profits’ own company-database search, the principal public tracker of corporate links to Israeli settlement and security-technology activity, on repeat checks across multiple research sessions.^{14, 15}

No public evidence identified of Cartier or Richemont use of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring or workforce-surveillance tools.¹⁴

No public evidence identified that any Israeli-origin surveillance, biometric or predictive-analytics technology reaches Cartier or Richemont indirectly via a third-party platform provider or managed security service; the only confirmed third-party platform relationship identified is Richemont’s 2021 enterprise migration to Amazon Web Services, addressed in the following section.⁸

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified that Cartier or Richemont operates, leases or co-locates data-centre infrastructure within Israel.⁸

Richemont announced in 2021 that it would migrate its entire enterprise IT infrastructure - more than 5,000 virtual machines and 120 SAP instances, plus product-lifecycle-management, e-commerce, supply-chain and accounting systems - to Amazon Web Services, closing its European data centres and migrating further sites in Hong Kong and the United States to AWS by the end of 2022, with no mention of Israel or an Israeli data-centre region in the announcement; a search for any 2025–2026 renewal, expansion or re-tender of this relationship found no public evidence identified.⁸ Amazon Web Services separately opened its own Israel (Tel Aviv) cloud region on 1 August 2023, building three data centres and committing an estimated $7.2 billion of investment through 2037, with disclosed active customers including Bank Hapoalim, Wiz, Israel’s Consumer Protection Authority, Migdal, the Ministry of Transport and Tnuva; Richemont is not named among AWS’s disclosed Israel-region customers, and no public evidence identified specifies which AWS region or regions host Richemont’s migrated workloads.¹⁶ AWS is also one of two vendors, alongside Google Cloud, under Project Nimbus, a roughly $1.2 billion multi-year contract announced in April 2021 to supply cloud computing and AI/machine-learning services to Israeli government agencies including the military and defense establishment; no public evidence identified connects Richemont’s separate commercial AWS enterprise agreement to the Project Nimbus government contract.¹⁷

No public evidence identified of Cartier or Richemont providing services explicitly marketed or contracted to ensure digital sovereignty, data residency or infrastructure resilience for Israeli state institutions or military bodies.¹⁷

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership or service agreement between Cartier or Richemont and the Israeli Ministry of Defence, Israel Defense Forces, Israeli intelligence agencies or other state security bodies.¹

No public evidence identified that any commercially available Cartier or Richemont technology or product has been publicly reported, confirmed by an official source, or documented by researchers as deployed for military, intelligence or law-enforcement surveillance applications within Israel or the occupied territories.¹⁴

No public evidence identified of Cartier or Richemont developing, selling, licensing or maintaining offensive cyber capabilities, zero-day exploit tools or digital weapons systems, nor of any Israeli state deployment of such tools attributable to the company; the only confirmed cybersecurity-related incident involving Cartier identified across research sessions is defensive, not offensive - Cartier’s June 2025 disclosure that an unauthorised party gained “temporary access” to its systems and obtained customers’ names, email addresses and countries, which Cartier said it was investigating with an unnamed external cybersecurity firm after notifying law enforcement.¹⁸

Because no public evidence identified any Cartier or Richemont provision of technology to Israeli state, military or security bodies at any date, the question of whether such provision continued after the 19 July 2024 ICJ advisory opinion or the November 2024 ICC arrest warrants does not arise on the evidence gathered.¹⁴

AI, Algorithmic & Autonomous Systems

No public evidence identified of Cartier or Richemont providing artificial intelligence, machine learning, computer vision or autonomous decision-support systems to Israeli state, military or security bodies.¹⁷

No public evidence identified that any Cartier or Richemont AI model or platform has been trained on, or given access to, civilian population data, intercepted communications or surveillance-derived datasets originating from Israel or the occupied territories.¹⁴

No public evidence identified of Cartier or Richemont providing autonomous target-generation, automated threat-detection or autonomous-tracking systems to Israeli military or security forces.¹⁴

Technology Ecosystem & R&D Footprint

No public evidence identified of a research-and-development facility, engineering office, innovation lab or accelerator programme operated by Cartier or Richemont within Israel; Richemont’s own disclosed research-and-innovation centre, opened within the Microcity technology pole, is located in Neuchâtel, Switzerland, not Israel.⁸

No public evidence identified of Cartier or Richemont acquiring an Israeli-origin technology company or making a strategic investment in an Israeli technology startup or venture fund; repeated searches for Richemont’s venture-investment vehicle, Columbus Venture Capital, and any Israeli portfolio company remained inconclusive and could not be verified against a primary source, so this remains an evidence gap rather than a finding.⁹

No public evidence identified of a significant patent portfolio, licensing agreement or co-development arrangement between Cartier or Richemont and the Technion, Hebrew University, the Weizmann Institute or any other Israeli-domiciled research institution.⁹

Civil Society Scrutiny & Regulatory History

Neither “Cartier” nor “Richemont” returns a matching company entry on Who Profits’ own company-database search, indicating neither name is currently tracked by Who Profits - the leading public database of corporate links to Israeli settlement and occupation-related economic activity - though this is subject to the caveat that the site’s own search parameter did not visibly filter results during any session’s fetch, so the absence of a listing could not be triple-confirmed against a working filtered search.^{14, 15}

A conference-report summary of UN Special Rapporteur Francesca Albanese’s report to the Human Rights Council, “From economy of occupation to economy of genocide” (A/HRC/59/23), describes the report as identifying categories of complicit actors - arms manufacturers, surveillance-technology firms, financial institutions, construction firms, tourism platforms, charities and academic institutions - without naming any specific jewelry, luxury-goods or retail company in that summary; the report’s advance version is dated 30 June 2025, per an independently-opened secondary index of the OHCHR document, and the title and document symbol are independently confirmed via the UN’s own Question of Palestine (UNISPAL) documentation page, while the report was presented to and covered during the Human Rights Council’s 59th session (16 June–11 July 2025), with Albanese holding a press conference on it on 3 July 2025, meaning both “30 June 2025” and general references to a “July 2025” presentation of the same document are compatible with the sourced record rather than contradictory.^{19, 20, 21} The report’s full primary text and annexed company list could not be independently retrieved or checked in any research session to date (direct fetches of the OHCHR PDF and of a civil-society mirror PDF each returned unreadable, encrypted binary content), and this remains an evidence gap rather than a negative finding.²⁰

A January 2020 appeal signed by more than 100 Palestinian civil-society organisations, groups and individuals called on the diamond industry and consumers to boycott that year’s International Diamond Week in Israel, citing a December 2019 International Criminal Court finding of a reasonable basis to believe Israeli forces committed war crimes during the 2014 Gaza conflict and Israel’s role in blocking a broader Kimberley Process definition of “conflict diamond”; the appeal names the Israeli diamond industry generally and does not name Cartier, Richemont, or any specific retail buyer of Israeli-cut diamonds.²²

No public evidence identified of an organised boycott, divestment or sanctions campaign specifically targeting Cartier’s or Richemont’s technology provision to, or commercial relationship with, Israel; repeated searches for Cartier or Richemont on any published “Don’t Buy Into Occupation” or comparable named-company list found no result naming either company, which is recorded here as “searched, none found” rather than as confirmation that no such list exists.¹⁴ The only organised boycott or divestment action identified involving Cartier concerned Russia, not Israel, and its outcome requires correction to the prior framing of this audit: Richemont, including Cartier, publicly announced on 30 March 2022 that it was stepping down from the Responsible Jewellery Council (RJC) after the industry body declined to suspend Russian producers’ certifications following the invasion of Ukraine, with then-Cartier President and CEO Cyrille Vigneron stating “it is not part of our Richemont values to be part of an organization in which some members are supporting conflicts and wars”.²³ Trade press subsequently reported, in an article dated 16 June 2022, that the RJC itself stated “all the Kering and Richemont maisons” had rescinded their March resignations within a few weeks and retained membership, and Cartier’s own current RJC certification profile shows an unbroken sequence of Code of Practices certificates running from 30 October 2019 through 2 November 2028 - including a certificate valid 1 November 2022 to 1 November 2025, immediately followed by the current certificate valid 2 November 2025 to 2 November 2028, granted after an audit the profile associates with October 2025 - with no visible gap in certification across the March 2022 withdrawal episode.^{24, 25} No equivalent Richemont or Cartier statement regarding Israel, Gaza or the occupied Palestinian territories was identified in any search conducted, an asymmetry noted here for the record rather than explained.²³

No public evidence identified of a regulatory inquiry, legal challenge, export-control action, or sanctions-related investigation involving Cartier’s or Richemont’s technology sales or services to Israeli state entities.³

A third-party Israeli retailer, Padani, publishes its own marketing page describing itself as the point of “official service” for Cartier watches in Israel, but the page does not itself state that it is Cartier-authorized, and Cartier’s own boutique/dealer-locator FAQ describes only a generic, undifferentiated “selective network of watch specialists” worldwide with no Israel-specific listing retrievable in any session, so Padani’s implied relationship with Cartier is recorded as unconfirmed by Cartier itself.^{26, 27}