Digital Audit: Fiverr
Digital Audit: Fiverr International Ltd.
Enterprise Technology Stack & Vendor Relationships
Fiverr is a confirmed customer of Orca Security, an Israeli-founded (Tel Aviv/Portland) cloud security company, using its platform for AWS cloud environment visibility and detection of malware, misconfigurations, exposed secrets, and PII 1. Fiverr’s own promotional engagement with Orca features quotes attributed to Fiverr CISO Shahar Geiger Maor describing the platform’s value for securing Fiverr’s cloud assets 23. This relationship is documented via a case study dated to approximately 2021, and its current, ongoing status has not been independently confirmed beyond that publication date 1. Fiverr is also a confirmed customer of Wing Security, an Israeli SaaS-security company founded in 2020 by a former IDF Chief CISO and a former head of IDF Cyber Operations, with a case study dated July 31, 2023 describing Fiverr’s use of the platform for SaaS vendor-risk assessment, remediation of externally shared files, and ISO 27001 audit-evidence collection 456. Fiverr’s core cloud infrastructure runs on AWS, per language in the Orca case study referencing “AWS and open source tools” 1; a separate, single-source and uncorroborated reference in connection with the Wing Security case study also suggested historical use of Google Cloud, but this claim could not be independently verified 4. No public evidence identified of direct licensing, subscription, or vendor relationships between Fiverr and Check Point, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks as suppliers to Fiverr’s own technology stack. Fiverr is notably absent from Amazon’s own August 2023 press release naming Israeli companies and government bodies using the newly launched AWS Israel (Tel Aviv) Region, a list that includes Amdocs, Bank Hapoalim, Bank Leumi, CyberArk, Wiz, SentinelOne, and Israeli government ministries 7.
Surveillance, Biometrics & Retail Technology
Fiverr operates a mandatory seller identity-verification process requiring a government-issued ID and a selfie/liveness check involving facial-recognition or biometric-comparison technology, as described in Fiverr’s own Help Center documentation 89. The identity of the underlying facial-recognition technology vendor is not publicly disclosed by Fiverr 89. A widely circulated claim that Fiverr uses AU10TIX, an Israeli biometric ID-verification firm and subsidiary of ICTS International, was investigated; direct review of the specific AU10TIX source material cited for this claim contained no mention of Fiverr whatsoever, and the relationship could not be substantiated 10. No public evidence identified of an AU10TIX-Fiverr commercial relationship. No public evidence identified of Fiverr’s use of Trigo, BriefCam, AnyVision/Oosto, or Trax technologies, consistent with Fiverr’s status as a services marketplace with no retail or physical-store footprint requiring loss-prevention biometrics.
Cloud Infrastructure, Data Residency & Sovereign Cloud Participation
No public evidence identified that Fiverr operates or leases data-center infrastructure within Israel. No public evidence identified of Fiverr participation in Project Nimbus or any comparable Israeli government cloud initiative, consistent with Fiverr’s role as a cloud and AI customer rather than a cloud or AI infrastructure provider. No public evidence identified of Fiverr providing data-sovereignty or resilience services to Israeli state institutions or military bodies. Fiverr’s headquarters, senior leadership, and approximately 78% of its global workforce are based in Tel Aviv, Israel, per the company’s own SEC filings 1112. Fiverr collects and processes highly sensitive user data - including government identification, tax documents, addresses, payment information, and biometric selfie data - as part of its identity-verification pipeline 89. Because Fiverr International Ltd. is an Israeli-domiciled public company with the substantial majority of its operations based in Israel, user data processed by or for Fiverr may be subject to Israeli corporate jurisdiction and Israeli legal-access regimes independent of the physical location of hosting servers 1311. A 2026 data-breach report, not confirmed by Fiverr, alleged exposure of tax returns, invoices, driving licenses, and family-member data via a third-party cloud storage vendor 14.
Defence, Intelligence & Security Sector Technology Relationships
No public evidence identified of contracts, partnerships, or service agreements between Fiverr and the Israeli Ministry of Defence, the IDF, or Israeli intelligence agencies. No public evidence identified of Fiverr’s freelance-marketplace technology being deployed for military, intelligence, or law-enforcement surveillance applications. No public evidence identified of Fiverr developing, selling, licensing, or maintaining offensive cyber capabilities or digital weapons systems. A board-level, controlling-principal finding is relevant here: Fiverr’s Lead Independent Director, Ron Gutler, served as Chairman of NICE Systems Ltd. from May 2002 to February 2013 1516; NICE was founded by former Israeli military intelligence (Unit 8200) officers, and its Cyber and Intelligence business was sold to Elbit Systems, Israel’s largest defense contractor, in 2015 16. Ron Gutler also served on the board of CyberArk Software Ltd. from July 2014 until CyberArk’s acquisition by Palo Alto Networks closed in February 2026 1617. This is documented as a board-interlock disclosure under controlling-principal review criteria rather than evidence of any commercial relationship between Fiverr and CyberArk, and no such commercial relationship was independently identified 1617.
AI, Algorithmic & Autonomous Systems
No public evidence identified of Fiverr providing AI/ML, computer-vision, or autonomous decision-support systems to Israeli state, military, or security bodies. No public evidence identified that Fiverr’s AI models or platforms have been trained on, or given access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories. No public evidence identified of Fiverr providing autonomous target-generation, threat-detection, or tracking systems to Israeli military or security forces.
Technology Ecosystem & R&D Footprint
Fiverr’s Tel Aviv headquarters is a roughly 3,600 square-metre facility housing the bulk of its engineering and R&D staff, with approximately 78% of the company’s global workforce based in Israel 1112. Fiverr has pursued a series of acquisitions of Israeli-origin technology companies: Stoke Talent Ltd., an Israeli freelance-management platform, was acquired on November 2, 2021 for $95 million 18; AutoDS Ltd., a Tel Aviv-headquartered dropshipping-automation company, was acquired on July 31, 2024, with reported deal values ranging from approximately $55.7 million to $92 million across sources 1920. Fiverr also announced, in November 2025, the acquisition of Digis Group, a Ukrainian IT holding company with approximately 220 employees, in a deal reported at an estimated $9–14 million; regional press describes the acquirer as “Israeli Fiverr,” though the acquisition target itself is Ukrainian rather than Israeli 21. No public evidence identified of formal patent, licensing, or co-development arrangements between Fiverr and the Technion, Hebrew University, or the Weizmann Institute.
Civil Society Scrutiny & Regulatory History
Fiverr does not appear in the UN OHCHR settlement-business database, as confirmed via the OpenSanctions mirror of that dataset 2223. Fiverr does not appear in the Who Profits company database based on a direct search of that resource 24. Fiverr is the subject of consumer-facing boycott and BDS-aligned campaigns, including listings maintained by The Witness boycott guide and the Stop the Palestinian Genocide project, citing Fiverr’s Israeli incorporation, Tel Aviv headquarters, workforce concentration in Israel, and company/CEO conduct following October 7, 2023 2526. No evidence identified of any organized campaign specifically targeting Fiverr’s technology relationships, as distinct from its general Israeli corporate identity 2526. Following October 7, 2023, Fiverr co-founded the Lev Echad (“One Heart”) wartime volunteer initiative together with HiBob and monday.com, based at Fiverr’s Tel Aviv headquarters and reported to have mobilized tens of thousands of volunteers supporting displaced Israeli civilians, hostage families, and, per some reporting, soldiers, using an AI-driven aid-matching platform donated by monday.com 272829. Fiverr board member Adam Fisher, head of Bessemer Venture Partners’ Tel Aviv office since 2007, gave a presentation on November 22, 2023 - alongside an IDF spokesperson in uniform - to a group of technology-sector leaders on tactics for the pro-Israel “information war” on social media, including a documented false claim that Amnesty International and Human Rights Watch did not condemn the October 7 attack 3031. Fiverr CEO Micha Kaufman’s only located substantive on-record quote describing “the worst value destruction in Israel’s history,” dated April 5, 2023, concerns Israel’s judicial-overhaul political crisis and predates October 7, 2023; it is not war- or military-technology related 32. No public evidence identified of any OECD National Contact Point complaint, export-control action, or sanctions investigation involving Fiverr’s technology sales or services to Israeli state entities. Isolated, anecdotal user reports of Fiverr account suspensions linked to mentions of Palestine or Gaza exist on Fiverr’s own community forum, but no systematic policy documentation, NGO investigation, or official Fiverr statement confirming a deliberate Palestine-related moderation policy was identified 33.
End Notes
Footnotes
-
https://orca.security/wp-content/uploads/2021/11/Orca-Security-Case-Study-Fiverr.pdf ↩ ↩2 ↩3
-
https://www.facebook.com/OrcaSec/posts/see-why-fiverr-ciso-shahar-maor-values-orcas-cloud-visibility-platform-when-it-c/687996938270776/ ↩
-
https://www.fiverr-insider.com/post/on-crowdsourcing-cybersecurity-a-talk-with-fiverr-s-ciso-shahar-maor ↩
-
https://wing.security/wp-content/uploads/2023/08/Fiverr-Case-Study.pdf ↩ ↩2
-
https://www.calcalistech.com/ctechnews/article/rk2811n11m5 ↩
-
https://www.businesswire.com/news/home/20220330005312/en/Wing-Security-Emerges-Out-of-Stealth-with-Comprehensive-Platform-Addressing-Security-Gaps-Introduced-by-SaaS-Applications ↩
-
https://press.aboutamazon.com/2023/8/aws-launches-infrastructure-region-in-israel ↩
-
https://help.fiverr.com/hc/en-us/articles/13127850435345-Verify-your-identity ↩ ↩2 ↩3
-
https://help.fiverr.com/hc/en-us/articles/13127840321937-ID-verification-Data-protection-and-usage ↩ ↩2 ↩3
-
https://www.sec.gov/Archives/edgar/data/1762301/000117891325000559/zk2532679.htm ↩ ↩2 ↩3
-
https://www.sec.gov/Archives/edgar/data/1762301/000117891324000697/zk2430936.htm ↩ ↩2
-
https://www.sec.gov/Archives/edgar/data/1762301/000104746919003139/a2238508zf-1.htm ↩
-
https://www.cybersecurity-insiders.com/fiverr-data-breach-exposes-sensitive-user-data-via-cloud/ ↩
-
https://www.cyberark.com/company/leadership/ron-gutler/ ↩ ↩2 ↩3 ↩4
-
https://www.paloaltonetworks.com/company/press/2026/palo-alto-networks-completes-acquisition-of-cyberark-to-secure-the-ai-era ↩ ↩2
-
https://en.globes.co.il/en/article-fiverr-buys-israeli-startup-stoke-talent-for-95m-1001389460 ↩
-
https://www.globenewswire.com/news-release/2024/07/31/2921566/0/en/Fiverr-Deepens-eCommerce-Solutions-with-Acquisition-of-Leading-Dropshipping-Automation-Tool-AutoDS.html ↩
-
https://ubn.news/israeli-fiverr-has-purchased-ukrainian-it-group-digis-in-a-deal-potentially-worth-up-to-14m/ ↩
-
https://www.opensanctions.org/datasets/ps_ohchr_settlement/ ↩
-
https://www.ohchr.org/en/press-releases/2025/09/un-human-rights-office-updates-database-businesses-involved-israeli ↩
-
https://www.whoprofits.org/companies/find?Presence=40&Type=List ↩
-
https://palestiniangenocide.org/boycott/companies/fiverr/ ↩ ↩2
-
https://israel21c.org/50000-volunteers-give-from-their-hearts-through-one-heart/ ↩
-
https://jackpoulson.substack.com/p/inside-the-pro-israel-information ↩
-
https://community.fiverr.com/forums/topic/335949-my-account-got-suspended-for-mentioning-a-country/ ↩