Costa Coffee - Digital Audit

Enterprise Technology Stack & Vendor Relationships

Costa Coffee is a wholly-owned subsidiary of The Coca-Cola Company, acquired in January 2019 for £3.9 billion ¹. The Costa Coffee technology stack spans loyalty, CRM, analytics, mobile applications, and physical retail technology, with vendor relationships concentrated in the UK, EU, and US.

Costa Coffee - Loyalty, CRM, Analytics, and App Technology

• Costa Coffee uses Comarch Loyalty Management (CLM) as its primary loyalty platform backend for the Costa Coffee Club programme (~6M+ active members), hosted in Comarch’s data centre in Poland ². Comarch also provides Comarch Campaign Management (CCM) and Comarch Business Intelligence ². Comarch SA is a Polish multinational software company (WSE: CMR.WA) headquartered in Kraków, Poland, with no documented presence in Israel ²³.
• Costa Coffee uses HyperFinity (UK-based) as a strategic technology partner for customer analytics and decision intelligence ⁴.
• Costa Coffee uses Vega IT (Serbia-based) as a digital product development partner for loyalty programme backend migration, iOS app (SwiftUI), Android, and QA automation ⁵.
• Costa Coffee uses Contentful (US-based) as its API-first composable content platform for web and mobile app content management supporting global market expansion including US and Japan ⁶.
• Costa Coffee uses Planit (UK/Australia) for multi-functional performance and non-functional testing of the Costa Club app redesign ⁷.
• Costa Coffee is transitioning to MACH (microservices, API-first, cloud-native, headless) architecture with GEP as procurement transformation partner ⁸.
• Costa Coffee operates technology offices in Sofia, Bulgaria and Warsaw, Poland for retail technology and Express operations development ⁹.

Costa Coffee - Physical Technology

• Costa Coffee Smart Café machines use coffee-core components manufactured by Thermoplan AG, a Swiss company, with the machine designed by Costa’s internal R&D team ¹⁰. No Israeli-origin technology vendor has been confirmed in the Smart Café supply chain ¹⁰.
• Costa Express vending machines (13,500+ globally, in 17 markets) use Eseye Hera 604 IoT routers with AnyNet+ multi-operator SIM for global connectivity ¹¹.

Coca-Cola Company - Cloud and AI Infrastructure (Parent Context)

• Coca-Cola holds a $1.1 billion, five-year strategic partnership with Microsoft (announced April 2024), making Azure Coca-Cola’s globally preferred cloud and AI platform, including Microsoft 365, Power BI, Dynamics 365, Defender, Fabric, and Azure OpenAI Service ¹².
• Coca-Cola simultaneously uses Amazon Web Services as a multi-cloud provider for marketing technology (CDS 2.0 solution) and Amazon Aurora databases across 112+ markets ¹³.
• Coca-Cola Consolidated Inc.’s FY2024 10-K confirms membership in CONA Services LLC, which provides a common SAP-based ERP system (“Coke One North America” / CONA System) across 12 major North American Coca-Cola bottlers ¹⁴.
• Coca-Cola HBC uses Dynatrace for application performance monitoring across its hybrid multi-cloud environment ¹⁵.
• Coca-Cola HBC uses Omada Identity for identity governance and administration ¹⁶.
• Coca-Cola HBC uses SS&C Blue Prism RPA for order-to-cash process automation across European operations ¹⁷.
• Coca-Cola HBC uses TeamViewer Frontline xPick augmented reality picking solution (with RealWear HMT-1 AR glasses) for warehouse operations across 17 countries ¹⁸.

CBC / Coca-Cola Israel - Enterprise Infrastructure

• CBC (Coca-Cola Israel) deployed three NetApp HCI systems: (a) a DMZ/customer-facing data centre, (b) Tara dairy production plant, (c) Citrix VDI workloads serving ~6,000 users, with documented results including latency reduction from 120ms to 1ms, 50% hardware/electricity savings, 90% footprint reduction, and 100% uptime ¹⁹²⁰²¹.
• CBC uses SAP as its core enterprise application platform, confirmed via the LinkedIn profile of Oron Gilor, CBC’s Senior Director of Digital Solutions & Applications, who joined from SAP Israel in June 2019 ²².
• CBC uses Citrix VDI virtual desktop infrastructure on NetApp HCI, reducing VDI wait times by more than half ¹⁹.

Israeli-Origin Technology Vendors - Direct Coca-Cola/Costa Use

• No public evidence identified confirming that The Coca-Cola Company, Costa Coffee, or Coca-Cola HBC holds direct licensing, subscription, or integration relationships with Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, Claroty, or Palo Alto Networks.

Surveillance, Biometrics & Retail Technology

Coca-Cola Israel - Facial Recognition (Historical, Pre-2012)

• Coca-Cola Israel’s “Summer Love 2011” event featured FaceLook kiosks integrating Face.com facial recognition technology to auto-post event participants’ photos to their Facebook walls, with Publicis e-dologic as the digital agency that integrated Face.com technology into the kiosks ²³.
• Face.com was an Israeli facial recognition company headquartered in Tel Aviv, founded in 2009 by Gil Hirsch, Yaniv Taigman, Moti Shniberg, and Eden Shochat, and was acquired by Facebook for approximately $55–100 million in June 2012 ²⁴.
• CB Insights independently confirms Coca-Cola’s use of facial recognition for “event marketing in Israel” ²⁵.
• No evidence identified confirming current (post-2012) use by Coca-Cola Israel or Costa Coffee of Face.com technology, its successor products, or other Israeli-origin facial recognition or biometric identification systems.

Israeli AI/Analytics Startups - Coca-Cola Bridge Programme (Historical, 2014)

• Coca-Cola’s inaugural “Bridge” startup engagement programme was launched in Tel Aviv in June 2014, engaging approximately 10 Israeli startups including Neura (AI for IoT behavioural pattern recognition), WeissBeerger (beverage flow-meter analytics for bars/restaurants), W.S.C. Sports (sports video tagging), Bringg (logistics/delivery tracking), DOVe (mobile payment over voice), Ubimo (geo-location and behavioural analytics), SCREEMO, WeFind, PersonalHeroes, and Hachiko ²⁶.
• No public evidence identified confirming that any of these Bridge cohort companies were subsequently contracted by Coca-Cola system-wide, by CBC, or by Costa Coffee for ongoing commercial deployment.

Costa Coffee - Biometric / Surveillance Technology

• No public evidence identified confirming that Costa Coffee has deployed facial recognition, biometric identification, behavioural analytics, or gait analysis technologies - of Israeli origin or otherwise - in any of its stores globally.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Coca-Cola Company - Cloud Platform Choices

• Coca-Cola’s primary cloud is Microsoft Azure under a $1.1B five-year commitment (2024) ¹².
• Coca-Cola uses AWS for marketing technology ¹³.
• Coca-Cola does not use Google Cloud as a primary platform (no case study, press release, or customer reference found).

Google Cloud - Israeli Local Region

• Google Cloud activated Israel’s first local cloud region in October 2022 to serve Israeli government and military customers ²⁷.
• No public evidence identified confirming that Coca-Cola or Costa Coffee routes workloads through Google Cloud’s Israeli local region.

Project Nimbus

• Project Nimbus is a $1.2B cloud services contract between the Israeli government and Google Cloud + Amazon Web Services, providing AI, ML, and cloud infrastructure to Israeli government and military bodies ^28293031.
• Coca-Cola Company and Costa Coffee are NOT named parties to Project Nimbus ^28293031.
• Coca-Cola uses AWS and Azure globally, but was not identified in the Project Nimbus contract documents, annexes, or associated reporting.

CBC / Coca-Cola Israel - Data Centre Operations

• CBC operates a regional distribution centre and cooling houses in the Atarot Industrial Zone, occupied East Jerusalem, through its wholly-owned subsidiary Central Beverage Distribution Company Ltd ³².
• CBC’s NetApp HCI systems are deployed at a DMZ/customer-facing data centre and at the Tara dairy production plant; the specific IT configuration of the Atarot distribution facility is not documented in public sources ¹⁹²⁰²¹.
• No public evidence identified confirming that CBC operates, leases, or co-locates data centre infrastructure within Israel for the purpose of serving Israeli government or military customers.

Data Sovereignty Services

• No public evidence identified confirming that Coca-Cola, Costa Coffee, or CBC provides services explicitly marketed or contracted to ensure digital sovereignty, data residency, or infrastructure resilience for Israeli state institutions or military bodies.

Defence, Intelligence & Security Sector Technology Relationships

CBC / Coca-Cola Israel - Commercial Distribution in Occupied Territory

• CBC holds the exclusive franchise right to market and distribute Coca-Cola products in Israel, including to “franchisees of international chains, such as McDonald’s, Burger King,” with Israeli District Court case AM 16567 (July–August 2024) confirming this franchise right extends to franchisees operating in occupied Palestinian territories ³³.
• CBC operates the Atarot Industrial Zone distribution facility in occupied East Jerusalem ³².

Direct Military / Intelligence Contracts

• No public evidence identified confirming that The Coca-Cola Company, Costa Coffee, or CBC holds contracts, partnerships, or service agreements directly with the Israeli Ministry of Defence, Israel Defence Forces, Mossad, Shin Bet, or C4I directorate for IT, communications infrastructure, data hosting, or analytics platforms.

Dual-Use Technology Provision

• No public evidence identified confirming that Coca-Cola or Costa Coffee has commercially available technology (products, platforms, or data) that has been publicly reported or documented by researchers as being deployed for military, intelligence, or law enforcement surveillance applications within Israel or occupied territories.

Offensive Cyber and Weapons Technology

• No public evidence identified confirming that Coca-Cola, Costa Coffee, or CBC develops, sells, licenses, or maintains offensive cyber capabilities, zero-day exploit tools, or digital weapons systems.

AI, Algorithmic & Autonomous Systems

AI/ML Provision to State Bodies

• No public evidence identified confirming that Coca-Cola, Costa Coffee, or CBC provides AI, ML, computer vision, or autonomous decision-support systems directly to Israeli state, military, or security bodies.

Coca-Cola’s AI Partnerships

• Coca-Cola’s $1.1B Microsoft partnership includes Azure OpenAI Service, Power BI, Dynamics 365, Microsoft Defender, and Fabric ¹².
• Coca-Cola uses AWS for marketing technology ¹³.

Israeli AI Startups - Coca-Cola Bridge Programme (Historical, 2014)

• Coca-Cola’s 2014 Bridge programme in Tel Aviv engaged Neura (AI for IoT), WeissBeerger (beverage analytics), and Ubimo (geo-behavioural analytics) ²⁶.
• No public evidence identified confirming ongoing commercial deployment of these technologies within the Coca-Cola system post-2014.

Training Data and Model Development

• No public evidence identified confirming that Coca-Cola’s AI models or platforms have been trained on, or provided access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or occupied territories.

Autonomous Systems and Lethality

• No public evidence identified confirming that Coca-Cola, Costa Coffee, or CBC provides autonomous target generation, automated threat detection, or autonomous tracking systems to Israeli military or security forces.

Technology Ecosystem & R&D Footprint

Coca-Cola - Israeli Startup Engagement (Historical, 2014)

• Coca-Cola’s Bridge programme was launched in Tel Aviv in June 2014, engaging 10+ Israeli startups, with technology supporters Cisco, Microsoft, and IBM ²⁶. Coca-Cola executives visited Israel in October 2013; Israeli startup CEOs visited Atlanta in June 2014; Demo Day was held December 2014 ²⁶.
• Coca-Cola was the first foreign non-hi-tech company to join the Israeli Office of the Chief Scientist’s Global Enterprise Collaboration Programme (2007–2008), engaging in R&D with Israeli companies, and contracted with Israeli universities for research and Israeli vendors for water technology solutions under this programme ²⁶.

CBC / Coca-Cola Israel - Israeli Technology Investments

• CBC invested up to $2 million in BioMilk, an Israeli cultured milk food-tech startup, in 2021, with CBC president Yoram Sagy stating the “innovation arm has been working to locate world’s most advanced technologies in food development” ³⁴³⁵.
• CBC signed a 10-year partnership with Brevel, an Israeli microalgae food-tech startup, for functional drinks and dairy alternatives, with Brevel opening a 27,000 sq ft commercial factory in southern Israel ³⁶.
• These investments are in food technology, not surveillance or defence technology.

Coca-Cola - No Israeli R&D Centres Confirmed

• No public evidence identified confirming that The Coca-Cola Company or Costa Coffee operates R&D facilities, engineering offices, innovation labs, or accelerator programmes within Israel. Costa Coffee has confirmed technology offices in Sofia, Bulgaria and Warsaw, Poland - not in Israel ⁹.

Acquisitions of Israeli Technology Companies

• No public evidence identified confirming that The Coca-Cola Company, Costa Coffee, or CBC has acquired any Israeli-origin technology companies.

Patent and Intellectual Property

• No public evidence identified confirming patent portfolios, licensing agreements, or co-development arrangements between Coca-Cola or Costa Coffee and Israeli-domiciled entities or research institutions (Technion, Hebrew University, Weizmann Institute).

Civil Society Scrutiny & Regulatory History

UN OHCHR Settlement Database

• The OHCHR Business and Human Rights database (List A, current edition A/HRC/60/19, published September 26, 2025) lists 158 companies ³⁷³⁸. The Coca-Cola Company, Costa Coffee Ltd., and Central Bottling Company were not identified within the publicly accessible List A entries reviewed ³⁷³⁸.
• A 2017 Facebook post by Friends of Al-Aqsa claiming Coca-Cola was on a “UN blacklist” referred to a pre-publication draft database (A/HRC/37/39, containing 307 companies) that was subsequently refined to 112 companies in the 2020 published version ³⁹³⁸. No confirmation found that Coca-Cola appeared in the final published database (2020, 2023, or 2025 editions) ³⁹³⁸.

BDS and Campaign Lists

• Coca-Cola (including Costa Coffee) is listed as an “organic boycott target” on the BDS Movement’s “Guide to Boycott and Pressure Corporate Priority Targeting” list ⁴⁰.
• Coca-Cola (including Costa Coffee) is included in the Don’t Buy Into Occupation (DBIO) 2025 report of 104 companies ⁴¹.
• The Friends of Al-Aqsa (UK) has run a #BoycottCocaCola campaign asserting that CBC/Coca-Cola Israel operates in Atarot settlement and that a Coca-Cola factory opened in Gaza in 2016 ³⁹.
• The specific grounds cited in BDS/campaign contexts relate to: (a) CBC’s operation of a distribution facility in Atarot Industrial Zone, occupied East Jerusalem; (b) CBC subsidiary Tabor Winery sourcing grapes from vineyards in West Bank settlements and Syrian Golan Heights; (c) CBC’s investment in settlement-linked dairy operations ³²³⁹.

Who Profits Documentation

• Who Profits (Israeli occupation industry research centre) maintains a database entry for CBC/Coca-Cola Israel documenting: (a) operation of a distribution centre in Atarot Industrial Zone, occupied East Jerusalem; (b) Tabor Winery (100% CBC subsidiary) producing wines from grapes sourced on occupied land in West Bank settlements and Syrian Golan; (c) CBC subsidiary Milco/Tara dairy operating in settlement of Shadmot Mehola in the Jordan Valley; (d) CBC’s distribution to McDonald’s and Burger King franchisees in occupied territories ³².

UN Special Rapporteur Reports

• UN A/HRC/59/23 (Albanese, July 2025) §§36–43 addresses Project Nimbus, surveillance, AI, cloud infrastructure, and Palantir-Israel relationships ⁴². Coca-Cola and Costa Coffee are not named in those paragraphs ⁴².
• The Addendum to A/HRC/59/23 (A/HRC/59/23 Add.1) enumerates state and business obligations but does not name Coca-Cola or Costa Coffee ⁴³.

Regulatory and Legal Actions

• Israeli District Court case AM 16567 (July–August 2024) involves a tax dispute concerning CBC’s franchise rights and its distribution to franchisees of international chains in occupied territories ³³. Coca-Cola is not a named defendant but CBC’s franchise structure in occupied territory is confirmed in the case record ³³.
• No export control actions, sanctions-related investigations, or regulatory inquiries specifically involving Coca-Cola or Costa Coffee’s technology sales or services to Israeli state entities have been identified.

Palantir - Historical and Current Status

• Internal documents reviewed by IPVM confirm that Coca-Cola (along with American Express and Nasdaq) was among Palantir’s top-tier clients that walked away from the company, documented as a 2021 event ⁴⁴.
• No public evidence identified confirming that Coca-Cola or Costa Coffee is a current Palantir client. Palantir SEC filings and customer case studies do not name Coca-Cola.
• Accenture and Palantir announced an expanded global strategic partnership in December 2025, targeting “complex operations of data centre and AI infrastructure programmes” across enterprise clients including consumer goods ⁴⁵. No confirmation found that Coca-Cola is in scope for this partnership ⁴⁵.

End Notes