Digital Audit - Etsy Inc.

Domain: Digital / Technology Entity scope: Etsy Inc. (NASDAQ: ETSY) - online marketplace. Etsy’s own corporate technology is in scope; third-party seller tools are attributed to the individual seller, not Etsy corporate. Vendor-domicile rule applies: only genuinely Israeli-domiciled vendors in scope. Compiled: 2026-06-21 Method: Live web search only

Enterprise Technology Stack & Vendor Relationships

Etsy operates a large-scale e-commerce platform ($13.2 billion GMS in 2024 across ~95 million buyers and ~7.5 million active sellers).¹ Its core infrastructure uses MySQL (InnoDB) as the primary datastore, PostgreSQL, Redis, Memcached, and Elasticsearch/OpenSearch, with payments databases sharded via the open-source Vitess framework.² Etsy operates its own internal fraud-detection and transaction-risk systems, with Etsy Payments using internal automated algorithms to monitor suspicious patterns rather than routing fraud decisions through a named external vendor, and tokenising card data at processing.³ No public evidence identified that Etsy has contracted Israeli-domiciled fraud-prevention vendors such as Riskified (Tel Aviv) or Forter (Tel Aviv/New York) for corporate fraud processing - both serve other e-commerce merchants but no Etsy contract is confirmed in public sources.⁴ (Seller-side note: Yotpo - Israeli-founded, US-headquartered - and Namogoo/Wandz.ai - Israeli-domiciled - are used by some independent Etsy sellers via third-party integrations such as Order Desk; no evidence of an Etsy-corporate enterprise contract with either, and seller-side tool adoption is attributed to the individual sellers, not Etsy corporate.⁵⁶) No public evidence identified of any Israeli-domiciled vendor in Etsy’s corporate technology stack.

Surveillance, Biometrics & Retail Technology

Etsy operates no physical retail locations, and no evidence was identified of Etsy deploying facial recognition, biometric surveillance, or in-store retail analytics; its security monitoring is oriented toward online fraud detection using behavioural/transactional signals.³ A California class action alleged Etsy placed standard US ad-tech trackers on its website (Google Ads tags, the Facebook Pixel, a TikTok Tracker) collecting user data without adequate consent under the California Invasion of Privacy Act; none of these are Israeli-domiciled vendors, and the litigation status was not confirmed resolved.⁷ No public evidence identified of Israeli surveillance or biometric technology in Etsy’s corporate operations.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Etsy completed a full migration of its production infrastructure from on-premises data centres to Google Cloud Platform (GCP) in February 2020 (5.5 petabytes, ~2,000 servers), and GCP is its sole primary cloud provider, with no disclosed multi-cloud arrangement with AWS, Azure, or Israeli sovereign cloud services.⁸⁹ Etsy adopted Google Cloud Run for its service platform and uses Google Vertex AI Pipelines and Google Cloud Dataflow for ML training/prototyping (a 2025 ML-platform redesign reported ~50% faster idea-to-experiment).¹⁰¹¹ No public evidence identified of Etsy data residency in Israeli data centres, participation in Israeli sovereign-cloud programmes, or use of Israeli cloud providers.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of Etsy holding contracts with Israeli defence contractors, Israeli intelligence agencies, or the IDF. Etsy is a consumer marketplace company with no disclosed government-defence client base or sector-specific security-technology partnerships; its SEC filings disclose standard cyber-risk language with no specific Israeli security vendor named.¹²

AI, Algorithmic & Autonomous Systems

Etsy has substantially expanded LLM/ML use for search ranking, discovery, and personalisation. Gift Mode (launched January 2024) uses internal ML, human curation, and OpenAI’s GPT-4 to generate 200+ gift-guide archetypes.¹³ In 2025–2026 Etsy announced a formal OpenAI partnership enabling some listings to be purchased inside ChatGPT, and its documentation confirms purchasing via Google Gemini, Google AI Mode, and Microsoft Copilot.¹⁴¹⁵ Etsy uses ML “algotorial” curation to expand human-curated collections and reports ~95% of purchases now originate from the first page of search results (up from 85%) after August 2024 AI-ranking changes.¹⁶ Etsy engineers have tested OpenAI o-series and Google Gemini models for internal use cases.¹⁷ No Israeli AI vendor relationship was identified; all confirmed AI vendor relationships are with US-headquartered companies (OpenAI, Google).

Technology Ecosystem & R&D Footprint

Etsy’s primary engineering function is in Brooklyn, New York, with additional US engineering presence; it has no publicly disclosed R&D office in Israel and has not acquired any Israeli-domiciled or Israeli-founded technology company.¹ Its acquisition history (Adtuitive 2008 US; Trunkt/Lascaux/Grand St 2012 US; A Little Market 2014 France; Blackbird Technologies 2016 US; Reverb 2019 US; Depop 2021 UK; Elo7 2021 Brazil) contains no Israeli company.¹⁸ Blackbird Technologies - acquired September 2016 to enhance AI-powered search/NLP/image ranking - was headquartered in Menlo Park, California (founded 2013), with no Israeli connection.¹⁹²⁰ No Israeli acquisition, joint venture, or R&D centre was identified in Etsy’s corporate history.

Civil Society Scrutiny & Regulatory History

An August 2024 briefing by the Institute for Journalism and Social Change, Global Justice Now, and War on Want found Etsy listing and promoting at least 44 stores operating in 16 illegal Israeli settlements in the occupied West Bank; Etsy Ireland UC (its non-Americas seller-contract subsidiary) was flagged as potentially exposed to Irish anti-money-laundering obligations, and Etsy stated it “shared this information internally with the appropriate teams for review.”²¹²²²³ In November 2023 Etsy restricted listings bearing “from the river to the sea” under its prohibited-items policy citing the phrase’s “co-optation by Hamas,” with reported internal discontent over inconsistent enforcement (an Israeli-flag shirt with a violent slogan reportedly left up), prompting a public petition opposing the moderation.²⁴²⁵ A California class action alleged ad-tracker privacy violations,⁷ and Etsy’s disclosures note potential GDPR exposure, though no specific GDPR or FTC enforcement action against Etsy was identified.²⁶

End Notes