Coca-Cola DIGITAL

Enterprise Technology Stack & Vendor Relationships

Coca-Cola Europacific Partners (CCEP) - an independently listed, majority third-party-owned Coca-Cola bottling partner distinct from the parent Coca-Cola Company - selected and deployed CyberArk Privileged Access Manager, Self-Hosted across its Australia/Pacific/Indonesia operations, covering several hundred admin accounts and nearly 1,000 local admin accounts, integrated with SailPoint and Qualys across a hybrid Azure/AWS/Google Cloud environment ^{1, 2, 3}. CyberArk separately announced in June 2024 that Coca-Cola Hellenic Bottling Company (Coca-Cola HBC) - another independent, separately-listed bottling partner - had selected CyberArk for identity security ^{4, 5}. CyberArk is an Israeli-founded, Israel-headquartered (Petah Tikva) cybersecurity firm, and this relationship is documented only at the CCEP and Coca-Cola HBC bottler level, not confirmed for The Coca-Cola Company (parent, NYSE: KO) directly. Palo Alto Networks announced an agreement to acquire CyberArk on 30 July 2025 at an equity value of approximately $25 billion and completed the acquisition on 11 February 2026, with CyberArk remaining an entity organised under the laws of the State of Israel and Palo Alto Networks pursuing a secondary Tel Aviv Stock Exchange listing ^{6, 7}. On 12 May 2026 Palo Alto Networks made generally available Idira, a platform built on CyberArk’s identity-security technology and extended to machine and AI-agent identities ⁸. The CyberArk deployments at Coca-Cola’s bottling partners accordingly now sit inside Palo Alto Networks’ identity-security stack, an Israeli-founded technology lineage that remains in active use. No public evidence identified of a direct CyberArk, Check Point, Wiz, SentinelOne, Nice, Verint, or Claroty contract with The Coca-Cola Company itself. The Coca-Cola Company’s primary disclosed cloud and enterprise-software relationship is with Microsoft: a five-year strategic partnership announced 23 April 2024, carrying a $1.1 billion commitment to Microsoft Cloud/Azure and generative AI (Azure OpenAI Service, Copilot for Microsoft 365), following full migration of Coca-Cola’s applications to Azure ^{9, 10}. The Coca-Cola Company separately worked with AWS Professional Services on Consumer Data Service 2.0, a global consolidation of its marketing- and advertising-technology operations involving the migration of more than one billion consumer records and supporting 112-plus markets, per an AWS case study published in 2024 ¹¹. No public evidence identified of Coca-Cola (parent) being mandated by a systems integrator to deploy Israeli-origin security technology.

Surveillance, Biometrics & Retail Technology

Trax, an Israeli-founded computer-vision and retail-analytics company, lists Coca-Cola among more than 150 CPG customers for shelf-monitoring and image-recognition analytics, with a documented case study covering Coca-Cola Hellenic Russia, where Trax automated brand-compliance audits via image recognition at points of sale ^{12, 13}. The stated commercial application is shelf-share and merchandising-compliance monitoring, not biometric identification of persons. Trigo, an Israeli company founded in 2018 that develops cashierless-retail computer-vision systems, was identified in background research ¹⁴, but No public evidence identified links Trigo, BriefCam, or AnyVision/Oosto facial-recognition or biometric technologies to Coca-Cola as a customer. Coca-Cola Israel, working with the agency Publicis e-dologic, deployed “FaceLook” facial-recognition kiosks built on Face.com technology at its 2011 “Summer Love” consumer marketing event, identifying attendees by face alone and auto-posting content to their Facebook accounts, with tens of thousands of people reported to have used the machines ¹⁵. Separately, a Coca-Cola Freestyle specification sheet listed an embedded camera alongside “future capability for motion sense and facial recognition,” and the AI vendor Quantiphi published - then removed after press inquiry - a case study describing a 2017 Coca-Cola engagement that trained a demographic-detection model on 8,000 to 10,000 images; Coca-Cola stated that camera capabilities were tested in a laboratory setting in 2018 and 2019 and that it has no plans to use cameras in future, and Quantiphi is a U.S./India-based vendor rather than an Israeli one ¹⁶. No public evidence identified of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools used by Coca-Cola. No public evidence identified of indirect delivery of Israeli-origin biometric or surveillance tools to Coca-Cola via bundled managed-security suites beyond the Trax shelf-analytics relationship described above.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified that Coca-Cola (parent) operates, leases, or co-locates data-centre infrastructure within Israel. Microsoft, Coca-Cola’s primary cloud vendor, opened an Azure data-centre region in Israel with operations beginning in early 2022, explicitly to support Israeli data-residency requirements, but no source ties Coca-Cola’s own workloads specifically to that Israeli Azure region ¹⁷. No public evidence identified of Coca-Cola participation in Project Nimbus or any comparable Israeli government or state-backed cloud programme. No public evidence identified that Coca-Cola provides services marketed or contracted for digital sovereignty, data residency, or infrastructure resilience to Israeli state or military institutions.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership, or service agreement between The Coca-Cola Company and the Israeli Ministry of Defence, IDF, or Israeli intelligence agencies for technology, IT, communications, hosting, or analytics services. Secondary, advocacy-adjacent sources assert that Central Bottling Company (Coca-Cola Israel) subsidiary Tara Dairy - which operates a farm in Shadmot Mehola, a settlement in the occupied Jordan Valley acquired by CBC for $39 million in 2004 - supplies dairy products to IDF bases via the Shekem military canteen system; this claim could not be verified against any contemporaneous news article, corporate filing, or procurement record in the underlying company-profile research and must be treated as unverified ¹⁸. No public evidence identified of Coca-Cola’s technology being publicly reported or documented by researchers as deployed for Israeli military, intelligence, or law-enforcement surveillance applications. No public evidence identified of Coca-Cola developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day tools, or digital weapons systems.

AI, Algorithmic & Autonomous Systems

Coca-Cola’s disclosed generative-AI activity is conducted through its Microsoft/Azure OpenAI Service partnership for internal marketing, manufacturing, and supply-chain use cases, with no Israeli state, military, or security-body customer or data source identified in the underlying sources ^{9, 10}. No public evidence identified that Coca-Cola’s AI/ML models have been trained on or given access to civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories. Coca-Cola agreed to a pilot project with Palantir Technologies in July 2014, hoping that analysis of customer data would help revive Diet Coke sales in North America, but did not proceed to a full contract, balking at pricing that would have climbed to $18 million in the fifth year and citing a want of industry expertise and a working relationship described as difficult; no evidence indicates the pilot involved Israeli government data or infrastructure ¹⁹. No public evidence identified of Coca-Cola providing autonomous target-generation, automated threat-detection, or autonomous tracking systems to Israeli military or security forces.

Technology Ecosystem & R&D Footprint

“The Bridge” by Coca-Cola, a six-month startup commercialization accelerator that does not take equity stakes, was launched in Tel Aviv in 2014, sourcing Israeli tech startups across AI, VR, cybersecurity, consumer engagement, supply chain, and marketing-innovation themes, before expanding to Mexico City and Atlanta ^{20, 21, 22}; the current operational status of the Tel Aviv program specifically was not confirmed in later-dated sources. Documented Bridge cohort companies include Anagog, a Tel Aviv smartphone-sensor mobility and behavioural-data analytics firm named as one of eleven startups selected on 13 June 2017 ²³, and Cimagine, an Israeli augmented-reality company whose technology Coca-Cola used to visualise coolers, vending machines and point-of-sale material in retail environments and which Snap acquired in December 2016 for a reported $30–40 million, forming Snap’s Israeli development centre ^{20, 24}. Coca-Cola has a relationship with Bringg, an Israeli-American delivery-logistics and orchestration software company founded in Tel Aviv in 2013, as both a client - using the platform to coordinate mom-and-pop retailer restocking - and an investor, participating alongside Aleph VC, Pereg Ventures, Salesforce Ventures, and Ituran in a Series B round and the later $25 million Series C round dated 2017–2019 ^{25, 26}; ongoing client status was not reconfirmed in sources dated after 2020. Coca-Cola Israel (Central Bottling Company) signed a strategic agreement in July 2021 to invest $2 million in Biomilk, an Israeli cultured-milk startup founded by Hebrew University of Jerusalem researchers, to collaborate on cultivated-milk-product development ^{27, 28}; current status of this collaboration was not confirmed in any post-2021 source. No public evidence identified of Coca-Cola operating a dedicated R&D centre or engineering office inside Israel, as distinct from the Bridge accelerator and CBC’s own Israeli manufacturing and franchise operations. No public evidence identified of a patent, licensing, or co-development arrangement between Coca-Cola and Technion, Hebrew University, or the Weizmann Institute beyond the Hebrew University-founded Biomilk collaboration.

Civil Society Scrutiny & Regulatory History

Central Bottling Company has held the Coca-Cola franchise for Israel for decades, per company and franchise-history records ²⁹. Coca-Cola Company board member David B. Weinberg, an Israeli-American businessman, was elected to the board per company biographical and investor-relations disclosures ^{30, 31}. Weinberg is also President of Digital Bandwidth LLC, an early-stage technology investing affiliate whose disclosed portfolio spans wireless networks, network security and RFID and includes the U.S. companies Alien Technology and NFR Security, the latter acquired by the Israeli firm Check Point Software in December 2006 ^{30, 32}. Who Profits documents that Central Bottling Company (Coca-Cola Israel), through its wholly owned subsidiary Central Beverage Distribution Company, operates a regional distribution centre and cooling houses in the Atarot Industrial Zone in occupied East Jerusalem ¹⁸. Who Profits and AFSC Investigate both document that CBC’s wholly owned subsidiary Tabor Winery (92.5% CBC-owned) sources grapes from vineyards in West Bank settlements, including Gush Etzion and Alon Shvut, and in the occupied Syrian Golan, including the settlements of Ortal and Keshet, in an ongoing arrangement as of the most recent citation update on 14 April 2025 ^{33, 34}. BDS Movement added Coca-Cola to its boycott priority list in November 2024, citing the Atarot distribution centre and Tabor Winery settlement-sourced grapes as grounds ^{35, 36}. Coca-Cola’s official response has been to tell the ADL that it “does not support, endorse or sanction the BDS movement,” and to state on its corporate FAQ that it “does not fund military operations in any country” and is not Israeli-owned, being publicly traded on the NYSE ^{37, 38}. The Washington Post reported on 12 August 2024 on Coca-Cola’s efforts to counter boycott narratives, including a Bangladesh advertising campaign explicitly denying Israeli ties that itself drew backlash ^{39, 40}. A review of the OHCHR-hosted advance edited version of UN Special Rapporteur Francesca Albanese’s report A/HRC/59/23 (“From economy of occupation to economy of genocide”) found no mention of Coca-Cola, Central Bottling Company, or beverage-sector companies by name, with the report’s named-company focus concentrated on arms manufacturers, technology and cloud firms, construction, extractive, financial, and academic sectors ⁴¹. A review of the “Don’t Buy into Occupation IV” report (November 2024) company listing did not surface Coca-Cola among the named companies in available secondary summaries, though the primary document was not independently re-verified line-by-line ⁴². No public evidence identified of Coca-Cola or Central Bottling Company appearing in the UN OHCHR settlement-business database maintained under Human Rights Council resolutions 31/36 and 53/25, as the database itself was not directly searched row-by-row in the underlying research. Secondary reporting on the UN database is in conflict: Israeli media reported in September 2017 that Coca-Cola appeared on a draft Human Rights Council settlement list then being withheld from publication ⁴³, whereas the database as actually published in February 2020 did not name the company. On the shareholder side, the SEC’s Division of Corporation Finance issued a no-action response on 18 January 2017 permitting Coca-Cola to omit a proposal submitted by Holy Land Principles, Inc. that asked the company to report the number of Arab and non-Arab employees in Palestine/Israel across the nine EEO-1 job categories, on the resubmission ground that a substantially similar 2016 proposal had received 2.20 percent of the vote ⁴⁴. The OECD National Contact Point cases located against Coca-Cola concern labour relations rather than Israel, settlements, or technology exports: a U.S. NCP specific instance filed by the IUF on 24 March 2017 over alleged conduct at Coca-Cola Amatil Indonesia, where mediation held 27 February–1 March 2018 failed to bridge the parties’ differences and a final statement issued on 25 May 2018 ⁴⁵; and an Ireland NCP specific instance from the IUF against The Coca-Cola Company/Ballina Beverages, lodged on 21 November 2018 and assessed in August 2021, concerning union recognition, collective bargaining and whistleblowing protections ⁴⁶. In 2025 the Everest ransomware group claimed a breach of Coca-Cola’s Dubai-based Middle East bottling operation, publishing files said to cover 959 employees and to include passport and visa scans, banking and salary records and internal HR documents ^{47, 48}, and a separate actor claimed more than 23 million Salesforce CRM records from Coca-Cola Europacific Partners ⁴⁷; neither company confirmed the incidents, and no Israeli infrastructure or data routing was identified in either. No public evidence identified of any regulatory inquiry, export-control action, or sanctions investigation involving Coca-Cola’s technology sales or services to Israeli state entities.