Digital Domain Audit: Chanel

Target: Chanel Limited / Chanel SAS (privately held; Wertheimer family) Domain: Digital (Digital / Technology) Date: June 2026 Scope: Chanel the company’s own digital/data/cyber/surveillance/AI conduct re Israel. Wertheimer-family vehicle Mousse Partners is attributed to the Wertheimer family, not Chanel corporate.

Enterprise Technology Stack & Vendor Relationships

Chanel operates a hybrid enterprise stack assembled from large US-headquartered platform vendors. Public technical case-study analysis identifies SAP Commerce Cloud as Chanel’s e-commerce platform.¹ Chanel’s customer-relationship management runs on Salesforce: a July 2025 data breach (see Section 7) was confirmed by multiple security outlets to have struck a Chanel Salesforce instance, establishing Salesforce CRM as a component of Chanel’s customer-data stack.²³ These are US-domiciled enterprise vendors (SAP being German-headquartered with global operations); none is an Israeli-origin supplier.

The one identified Israeli-origin vendor in Chanel’s own digital stack is ByondXR, a retail-technology firm founded in 2016 that builds 3D/immersive “virtual store” web experiences for consumer brands. ByondXR’s founder and CEO Noam Levavi publicly lists Chanel among the brands he has worked with (alongside Mercedes, Ferrari, Nike, Hugo Boss, AT&T, Microsoft and Coca-Cola), and trade and startup-directory profiles repeat Chanel as a ByondXR client.⁴⁵ ByondXR is consistently described as an Israeli startup; its co-founders include a former CTO of Unit 8200 of the Israeli Intelligence Corps, and its CEO was named by the Wall Street Journal among the top 100 Israeli tech leaders.⁴⁶ Note on attribution: ByondXR’s own current customer/about pages name Armani, L’Oréal, Lancôme, YSL, Estée Lauder, Kraft Heinz, P&G and LEGO but do not list Chanel; the Chanel association traces to the founder’s stated client history and third-party profiles rather than a Chanel-issued campaign announcement.⁴⁷ No public evidence identified that the engagement is current or material in scale.

No public evidence identified of any other Israeli-origin enterprise vendor (ERP, CRM, e-commerce, payments) embedded in Chanel’s corporate technology stack.

Surveillance, Biometrics & Retail Technology

Chanel’s own customer privacy policy is explicit that the company conducts in-boutique surveillance and biometric processing. The policy states that in its points of sale Chanel may carry out “facial recognition” together with “measurement and analysis of client movements within the boutiques,” with additional notices provided at the relevant points of sale; the policy text indicates these practices apply in certain jurisdictions and notes carve-outs (e.g. not in China).⁸⁹ This is a self-disclosed facial-recognition capability operated by Chanel in its retail estate.

Separately, Chanel’s virtual try-on and in-boutique skin-diagnostic experiences - including the Chanel “Vitality Scanner,” used to assess skin condition before facial treatments - process image data to determine “whether facial or skin patterns are present, and the parameters of those facial patterns.” Chanel states it does not store this data as standard, that storage occurs only with customer consent in the customer’s Chanel account, and that customers can delete it.⁸⁹ Independent commentary on retail facial-recognition flags the general privacy risk of scanning customer faces and transmitting data to outside vendors, the category of conduct Chanel self-discloses.¹⁰

Chanel’s in-boutique “Augmented Retail” programme, built with Farfetch’s “Store of the Future” platform, deploys RFID-enabled racks and fitting-room sensors that detect items and auto-populate wishlists, connected mirrors, a universal client-recognition login at store entry, and paired client-facing and sales-associate apps - a clienteling/data-capture suite linking physical browsing behaviour to customer profiles.¹¹¹² Farfetch is a UK/Portugal-rooted, US-listed platform, not an Israeli vendor.

No public evidence identified that Chanel’s facial-recognition or biometric retail systems are supplied by an Israeli vendor, deployed in Israeli or Israeli-occupied-territory locations, or sold/licensed to Israeli state or security customers.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Chanel’s data-science and machine-learning platform runs on Microsoft Azure: Chanel’s own “Tech Innovation – Data Science Platform Engineer” job specification describes supporting the production of machine-learning projects “on Azure infrastructure,” covering tabular data, optimization, NLP, computer vision and generative AI.¹³ Azure is a US-headquartered hyperscaler.

The July 2025 breach data was held in a Chanel database “hosted by a third-party service provider” in the US, reported to be a Salesforce-hosted environment.²¹⁴ Chanel’s stated data-protection posture is to apply GDPR-grade principles globally via a Data Protection Office.⁹

No public evidence identified that Chanel participates in any Israeli sovereign-cloud programme (e.g. Project Nimbus), hosts data in Israeli cloud regions, or uses an Israeli cloud-infrastructure provider. No public evidence identified of Chanel data-residency arrangements tied to Israel.

Defence, Intelligence & Security Sector Technology Relationships

Chanel is a privately held luxury fashion, fragrance, cosmetics and watch house; it is not a defence, intelligence or security contractor. No public evidence identified of any Chanel-corporate contract, technology licence, or commercial relationship with the Israeli Ministry of Defense, the IDF, Israeli intelligence agencies, or Israeli defence/cyber/surveillance firms.

The only adjacent data point is a personnel/provenance one: Chanel’s identified Israeli retail-tech vendor ByondXR was co-founded by a former CTO of Unit 8200, Israel’s military signals-intelligence unit.⁴ This is a founder-background fact about a commercial retail-experience vendor, not evidence of any Chanel defence/intelligence relationship, and Chanel’s reported engagement concerns consumer virtual-store experiences only.

Attribution context (not Chanel-corporate conduct): the Wertheimer family’s separate investment vehicle, Mousse Partners - a Bermuda/New-York-based family office managing the Wertheimers’ personal wealth, distinct from Chanel the company - has reportedly invested across technology globally.¹⁵ No public source reviewed for this audit confirmed specific Mousse Partners holdings in Israeli defence, intelligence or surveillance technology; this is the family’s investment activity, not Chanel’s, and is recorded here only to delineate attribution, not as Chanel evidence.

AI, Algorithmic & Autonomous Systems

Chanel deploys consumer-facing AI. Its Lipscanner app - Chanel’s first virtual lipstick try-on - uses patented AI/AR and machine learning trained on data about lip shape, size, colour and texture to match shades from any image to Chanel products in real time; Chanel describes more than 18 months of machine-learning development for it.¹⁶¹⁷ Internally, Chanel’s Global Innovation & Transformation / Tech Innovation function builds machine-learning, computer-vision and generative-AI prototypes on its Azure data-science platform, and Chanel actively recruits data scientists and ML engineers in Paris/Neuilly.¹³¹⁸

No public evidence identified that Chanel’s AI/ML systems are built on Israeli AI vendors, trained on data sourced from Israeli surveillance operations, or applied to any military, security or population-targeting use. Chanel’s disclosed AI use is consumer personalisation, beauty diagnostics and retail analytics.

Technology Ecosystem & R&D Footprint

Chanel maintains an in-house technology and data-science R&D footprint centred in the Paris region (Paris and Neuilly-sur-Seine), spanning a Tech Innovation department, a Global Innovation & Transformation programme, and machine-learning/data-science teams.¹³¹⁸ Chanel also holds minority corporate investments, but its disclosed corporate venture/equity portfolio is concentrated in luxury-adjacent and craft sectors - independent watchmaking (F.P. Journe, MB&F at a 25% stake, Romain Gauthier), materials and fashion-tech (Authentic Material, Sulapac, Mantero) - rather than in Israeli technology firms.¹⁹²⁰ Chanel’s named external retail-tech and digital partners identified for this audit are Farfetch (UK/Portugal/US) and ByondXR (Israel), the latter discussed in Section 1.⁴¹¹

No public evidence identified that Chanel-corporate operates an R&D centre in Israel, funds an Israeli technology accelerator, or holds a corporate equity stake in an Israeli technology company. (The Wertheimer family’s Mousse Partners activity is attributed to the family per Section 4, not to Chanel-corporate.)

Civil Society Scrutiny & Regulatory History

Chanel has drawn sustained civil-society scrutiny over its Israel posture, though this is driven primarily by corporate philanthropy and ownership rather than by a specific digital-technology act. In October 2023, Chanel announced a US$4 million donation to organisations providing emergency humanitarian aid to southern Israel after the 7 October Hamas attack, announced internally by CEO Leena Nair and Global Executive Chairman Alain Wertheimer; the donation and the perceived one-sidedness of the company’s public stance prompted BDS-aligned boycott listings and reputational criticism.²¹²²²³ Chanel appears on multiple consumer boycott guides as an Israel-linked target.²³

On the data/digital-regulatory side, Chanel disclosed a breach in 2025: on 25 July 2025 it became aware that an unauthorised party had accessed a US Chanel Inc. client-care database hosted by a third-party provider, exposing names, email addresses, mailing addresses and phone numbers of a subset of US client-care contacts (no financial data).²¹⁴ The incident was part of the ShinyHunters campaign against Salesforce customers - which also hit Dior, Louis Vuitton, Cartier, Tiffany & Co., Adidas, Pandora and others - using vishing/social-engineering to push a malicious connected app rather than exploiting a Salesforce platform vulnerability.³²⁴ No public evidence identified of a regulatory fine (GDPR or otherwise) levied against Chanel for this breach, nor of any regulatory action against Chanel specifically relating to its facial-recognition or biometric retail practices.¹⁴ No public evidence identified of civil-society or regulatory scrutiny of Chanel arising specifically from an Israel-nexus digital, data, surveillance or AI act.

End Notes