ExpressVPN DIGITAL

Enterprise Technology Stack & Vendor Relationships

• ExpressVPN states that it joined Kape Technologies on 16 December 2021, and its current press materials continue to describe it as part of Kape since 2021 ^{1, 2}.

• Kape’s 2021 accounts report that it acquired the ExpressVPN business, including assets, liabilities, and service entities, from Access Global Limited and its subsidiaries for total consideration of US$925.8 million ³.

• The acquisition was structured as a hybrid asset-and-share transaction, and the reviewed report refers to two acquired corporate service entities without naming them ³.

• Kape issued 47,782,800 shares to ExpressVPN co-founders Peter Burchhardt and Dan Pomerantz, representing approximately 13.6% of Kape’s enlarged issued share capital at issuance ^{3, 4}.

• The acquisition terms gave Burchhardt a right to appoint one Kape non-executive director while the founders, specified family members, and wholly owned companies collectively retained at least 5% of Kape ordinary shares ^{3, 4}.

• Kape’s 2018 annual report listed three wholly owned Israeli subsidiaries - BestAd Hi Tech Media Limited, Crossrider Advanced Technologies Limited, and Crossrider (Israel) Limited - performing development, technical-support, marketing, and related-party marketing functions ⁵.

• That 2018 disclosure predates Kape’s acquisition of ExpressVPN and does not establish that ExpressVPN received services from those subsidiaries ⁵.

• No public evidence identified of a direct ExpressVPN or Kape licensing, integration, subscription, deployment, or outsourcing relationship involving a specifically identified Israeli-origin enterprise-security vendor.

• No public evidence identified of a named systems integrator, managed-service provider, or digital-transformation consultancy deploying Israeli-origin technology for an ExpressVPN technology programme.

Surveillance, Biometrics & Retail Technology

• No public evidence identified of ExpressVPN’s use of Israeli-origin facial recognition, biometrics, gait analysis, behavioural analytics, predictive-policing, social-media monitoring, sentiment analysis, or workforce-surveillance products.

• No public evidence identified that such technology reaches ExpressVPN through a named managed-security provider or bundled enterprise platform.

• No public evidence identified of ExpressVPN or Kape technology being used for Israeli biometrics, predictive monitoring, Project Nimbus AI services, offensive cyber tooling, or services in settlements.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

• ExpressVPN’s privacy policy identifies Express Technologies Ltd. as headquartered and registered in the British Virgin Islands, operating under BVI law ⁶.

• ExpressVPN’s press materials describe a VPN-server presence across 113 countries and 214 server locations, while the reviewed materials do not identify an Israeli data centre, colocation facility, or Israeli data-residency arrangement ^{2, 6}.

• Supplementary first-party source review identifies an advertised Tel Aviv server location providing Israeli IP addresses. Israel is absent from ExpressVPN’s virtual-location list, whose policy states that omitted locations are physically in the specified country. This supports ordinary consumer VPN infrastructure in Israel, but does not identify the facility, hosting supplier, Israeli state customer, or military deployment ^{7, 8}.

• ExpressVPN represents that personal data are controlled by and stored under ExpressVPN rather than Kape or other related entities, and that legal demands are subject to BVI jurisdiction and law ⁶.

• The same privacy policy permits limited processing by related entities when necessary for its listed purposes while expressly denying a transfer of control to Kape. The policy does not identify an Israeli processing location or establish Israeli state access. Ownership and the existence of Israeli engineering roles alone therefore do not demonstrate surveillance or a transfer of customer-data control ^{6, 9}.

• KPMG’s 2025 assurance report describes ExpressVPN’s RAM-only TrustedServer infrastructure, including configuration updates every 15 minutes and transmission of non-personally-identifiable operational metrics to cloud-hosted Prometheus and Icinga systems ¹⁰.

• The KPMG report does not name the cloud provider, hosting locations, legal jurisdictions, or access-control locations for those monitoring systems ¹⁰.

• ExpressVPN identifies Amazon Web Services as the cloud-infrastructure partner for ExpressKeys and states that the vault password does not leave users’ devices and cannot technically be decrypted by ExpressVPN or AWS ¹¹.

• The ExpressKeys documentation does not identify the AWS region or regions used for the service ¹¹.

• Israel’s Project Nimbus notice identifies AWS and Google as selected public-cloud providers for a government framework involving, among others, the Ministry of Defense and IDF, but does not name ExpressVPN, Kape, Unikmind, Teddy Sagi, or an ExpressVPN-related entity ¹².

• No public evidence identified of ExpressVPN or Kape participation as a prime supplier, marketplace supplier, integrator, or subcontractor in Project Nimbus or another Israeli government cloud programme.

• No public evidence identified that ExpressVPN provides digital-sovereignty, data-residency, or resilience services to Israeli state institutions or military bodies.

Defence, Intelligence & Security Sector Technology Relationships

• No public evidence identified of a contract, partnership, service agreement, tender award, or memorandum between ExpressVPN/Kape and the Israeli Ministry of Defense, IDF, Israeli intelligence agencies, settlement authorities, or other Israeli security bodies.

• No public evidence identified that ExpressVPN products have been publicly documented as deployed by Israeli military, intelligence, or law-enforcement bodies in Israel or the occupied territories.

• No public evidence identified of ExpressVPN or Kape developing, selling, licensing, or maintaining offensive cyber capabilities, exploit tools, or digital weapons for Israeli state actors.

• The U.S. National Science Foundation’s 2023 portfolio guide lists ExpressVPN as an industry partner in the AVOID project, which contemplated testing routing concepts on the U.S. Defense Research and Engineering Network and connecting work to U.S. Department of Defense commands ¹³.

• The NSF guide does not describe an Israeli customer, Israeli deployment, Israeli state funding, or an Israeli procurement contract awarded to ExpressVPN ¹³.

• U.S. Department of Justice records concerning Daniel Gericke and two other individuals relate to alleged hacking-related services for a foreign government, but neither the DOJ announcement nor the deferred-prosecution agreement identifies ExpressVPN, Kape, or an Israeli entity ^{14, 15}.

• Those DOJ records therefore do not establish a corporate regulatory action against ExpressVPN or an Israel nexus ^{14, 15}.

AI, Algorithmic & Autonomous Systems

• No public evidence identified of ExpressVPN providing AI, machine-learning, computer-vision, or autonomous decision-support systems to Israeli state, military, or security bodies.

• No public evidence identified that ExpressVPN models or platforms were trained on, or given access to, civilian, intercepted-communications, or surveillance-derived data from Israel or the occupied territories.

• No public evidence identified of ExpressVPN’s provision of autonomous target-generation, targeting, or tracking systems.

Technology Ecosystem & R&D Footprint

• Kape’s 2018 report documents Israeli group subsidiaries undertaking development, technical-support, marketing, and related services, but this evidence predates the 2021 ExpressVPN acquisition and does not establish an ExpressVPN R&D function in Israel ⁵.

• In February 2023, Unikmind Holdings Limited stated that it was wholly owned by Teddy Sagi and held approximately 54.8% of Kape’s issued ordinary shares ¹⁶.

• By 28 April 2023, Kape reported that Unikmind was interested in, had acquired, or had agreed to acquire approximately 79.69% of Kape’s issued share capital, ahead of Kape’s scheduled AIM cancellation on 31 May 2023 ¹⁷.

• The reviewed sources do not establish Unikmind’s or Teddy Sagi’s exact current post-delisting shareholding percentage ¹⁷.

• A supplementary current-source check resolves the percentage gap: Unikmind states that it holds 98.63% of Kape’s issued share capital and is wholly owned by Teddy Sagi ¹⁸.

• Kape’s current corporate materials list ExpressVPN alongside Private Internet Access, CyberGhost, Intego, and Webselenese as group brands ¹⁹.

• Kape announced Charles Butler as chief executive officer in November 2023, and its current leadership page lists Butler as CEO and Or Ifrah as CFO ^{20, 21}.

• No public evidence identified in the reviewed disclosures of ExpressVPN acquisitions of Israeli technology companies, investments in Israeli technology funds or startups, or co-development or patent arrangements with Israeli-domiciled companies or research institutions.

• ExpressVPN’s public jobs page lists Tel Aviv-based technical and product roles. Kape’s 2021 accounts identify Israeli Webselenese Ltd. and describe Tel Aviv among the group’s R&D locations. These sources establish Israeli group operations and ExpressVPN-branded recruitment, superseding the narrower initial digital-source search; they do not allocate current headcount or specific customer-data access to Israel ^{9, 3}.

Civil Society Scrutiny & Regulatory History

• No public evidence identified of an organised boycott, divestment, or sanctions campaign specifically grounded in ExpressVPN technology provision to Israeli state bodies or operations in occupied territories.

• No public evidence identified of regulatory inquiries, litigation, export-control actions, or sanctions-related investigations concerning ExpressVPN technology sales or services to Israeli state entities.

• A November 2023 report stated that Teddy Sagi personally donated NIS 1 million to an initiative for families evacuated from the Gaza border and transportation of Israeli soldiers on leave, and the report did not attribute the donation to Kape or ExpressVPN ²².

• A 2016 report stated that Teddy Sagi’s parents donated US$3 million at a Friends of the IDF gala, but it did not identify Sagi personally as the donor or provide an ExpressVPN/Kape connection ²³.