Gail’s - Digital Audit

Enterprise Technology Stack & Vendor Relationships

Gail’s Bakery’s publicly listed technology stack, as catalogued by aggregator RocketReach, comprises approximately 41 tools that are predominantly of US or UK origin, including AWS/Amazon S3, Cloudflare, Nginx, Amplitude, Google Analytics/Tag Manager/Maps, Microsoft Power BI/Exchange/Office, Freshdesk/Freshworks, MailChimp, Stripe/Stripe Connect, PrestaShop, Nosto, Pusher, and Aspect Software, with no Israeli-origin vendor identified on the list ¹. For physical and operational security, Gail’s partnered with Verkada - a US company headquartered in San Mateo, California, founded in 2016 by Filip Kaliszan, James Ren, Benjamin Bercovitz, and Hans Robertson, with no identified Israeli founding ties - to deploy cloud-managed video security cameras, access control, air-quality sensors, and AI-powered video search and analytics across more than 170 UK locations, announced 7 April 2025 ²³⁴⁵⁶⁷. The Verkada partnership was brokered by UK-based systems integrator Tellivue, which connected Gail’s Head of Property, Brett Parker, with Verkada; no evidence identifies Tellivue as Israeli-domiciled or as having mandated Israeli-origin technology in this engagement ²⁸⁹. Gail’s digital ordering, point-of-sale, and loyalty platform has been provided by UK-based Vita Mojo since a 2021 digital-transformation partnership, an arrangement that remains ongoing ¹⁰¹¹. Vita Mojo’s listed technology partners - Inpulse, Nory, PayPal, ApicBase, and Fourth - include no direct Israeli-origin AI vendor; one Vita Mojo investor, Battery Ventures, maintains a Tel Aviv office among its global offices, but no evidence indicates this constitutes an Israeli technology-provision relationship reaching Gail’s ¹¹. The Verkada video and AI security deployment is described in vendor and trade coverage as covering day-to-day security and operations infrastructure - cameras, access control, and incident investigation - across the full UK store estate, though Verkada itself remains US-headquartered with no identified Israeli ownership, R&D, or data-routing nexus ²³⁴⁵⁶. No public evidence identified of any licensing, subscription, or integration relationship between Gail’s and Israeli-founded cybersecurity vendors such as Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, or Claroty. No public evidence identified of systems integrators or IT outsourcing partners for Gail’s major technology programmes beyond Tellivue.

Surveillance, Biometrics & Retail Technology

The Verkada deployment across Gail’s UK estate includes an AI-powered “search by description” video analytics capability - for example, searching footage by the colour of a shirt or an object - but announcement coverage of the Gail’s rollout does not describe facial recognition as part of the deployment ²³⁴⁵⁶. Verkada as a company separately markets a “Person of Interest Only” Face Search feature across its broader product line, described by Verkada as privacy-constrained because it matches only against an enrolled watchlist of persons of interest rather than performing general population scanning ¹². No public evidence identified that Gail’s has activated or licensed this specific face-search feature within its own deployment. No public evidence identified that Gail’s uses facial recognition, biometric identification, gait analysis, or behavioural analytics products from Israeli vendors such as Trigo, BriefCam, AnyVision/Oosto, or Trax. No public evidence identified of predictive policing, sentiment analysis, social-media monitoring, or workforce surveillance tools of Israeli origin in use at Gail’s. No public evidence identified of Israeli-origin surveillance or biometric technology reaching Gail’s indirectly through bundled product suites from Verkada, Tellivue, or Vita Mojo.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Gail’s publicly identified cloud infrastructure runs on AWS/Amazon S3 and Cloudflare, both US-headquartered providers, per its listed technology stack ¹. No public evidence identified that Gail’s operates, leases, or co-locates data-centre infrastructure within Israel. No public evidence identified of Gail’s participation in Project Nimbus or any comparable Israeli government or state-backed cloud initiative. No public evidence identified that Gail’s provides - as opposed to consumes - cloud, data-sovereignty, or resilience services to any Israeli state or military body, consistent with its position as a retail bakery chain rather than a technology vendor. Whether Vita Mojo, Tellivue, or Verkada route any Gail’s operational or customer data through Israeli-domiciled infrastructure, subsidiaries, or personnel could not be confirmed in either direction, as none of the three vendors was found to have identified Israeli operations ²⁸¹⁰.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership, or service agreement between Gail’s and the Israeli Ministry of Defence, the IDF, Israeli intelligence agencies, or other Israeli state security bodies. No public evidence identified that any Gail’s-deployed commercial technology - Verkada cameras, Vita Mojo point-of-sale, or the loyalty app - has been documented as repurposed for Israeli military, intelligence, or law-enforcement surveillance in Israel or the Occupied Palestinian Territory. No public evidence identified of Gail’s developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day tools, or digital weapons systems. Gail’s camera vendor, Verkada, separately markets government-grade solutions including FedRAMP authorization and a Carahsoft GSA Schedule listing aimed at US public-sector customers, though no evidence ties this government-facing product line to the Gail’s UK retail deployment specifically ¹³.

AI, Algorithmic & Autonomous Systems

No public evidence identified of Gail’s providing AI/ML, computer vision, or autonomous decision-support systems to any Israeli state, military, or security body, consistent with Gail’s role as a consumer rather than developer of retail-security AI, exemplified by its use of Verkada’s third-party AI-powered video search and analytics tools ²⁴. No public evidence identified that any Gail’s-associated platform or dataset has been used to train models on, or has ingested, civilian population data, intercepted communications, or surveillance-derived datasets originating in Israel or the OPT. No public evidence identified of Gail’s providing autonomous target-generation, automated threat-detection, or autonomous-tracking systems to Israeli military or security forces, a category not applicable to Gail’s business model as a UK bakery chain.

Technology Ecosystem & R&D Footprint

No public evidence identified of Gail’s operating any research and development centre, engineering office, innovation lab, or accelerator programme in Israel. No public evidence identified of Gail’s itself acquiring any Israeli-origin technology company or making strategic investments in Israeli technology startups or venture funds. Gail’s majority owner, Bain Capital, has separately documented Israeli technology-sector investment activity through its venture arm - Bain Capital Ventures investor Ron Miasnik is described as a co-organiser of an “Israel Tech Mission” and reportedly stated that attendees are “longtime investors in the Israeli startup ecosystem,” having travelled to Israel on a solidarity and investment-continuity trip during the Israel-Hamas war in December 2023 ¹⁴¹⁵. This activity is documented at the level of the parent private-equity firm rather than as a Gail’s corporate act, and no evidence identifies specific Israeli surveillance or defence-technology portfolio company names tied to this trip, nor any flow-through of Gail’s-specific revenue to named Israeli military-technology firms ¹⁴¹⁵. No public evidence identified of patent portfolios, licensing agreements, or co-development arrangements between Gail’s and Israeli-domiciled entities or research institutions such as Technion, Hebrew University, or the Weizmann Institute.

Civil Society Scrutiny & Regulatory History

Gail’s has been the target of organised protest and boycott activity since late 2023–2024, on the stated grounds that the chain was founded by an Israeli-raised baker, Yael “Gail” Mejia - who, per reporting, “no longer has any financial involvement in the company” - and that its majority owner, Bain Capital, “has invested in Israeli tech companies,” with protesters alleging that profits flow to private-equity owners and investors tied to Israeli “war tech” ^16171819. A north London branch of Gail’s was vandalised with red paint and graffiti reading “Boycott Gail’s, funds Israeli tech” ¹⁷²⁰²¹. Haaretz reported that protesters disrupted the opening of a London store around 22 February 2026, repeating the “war tech” funding allegation ¹⁶. Gail’s co-founder and CEO Tom Molnar publicly rejected the Israel-ownership claims as “ridiculous,” stating that Gail’s “proudly has Jewish roots” but “it’s not true it’s Israel-owned” ²²²³. Despite the boycott calls, Jewish Chronicle reporting indicates Gail’s sales grew from approximately £232m to £278m, roughly 20%, over the period in question ¹⁸. Gail’s majority owner since September 2021 is Bain Capital, via Bain Capital Credit and EBITDA Investments, in a deal reported at approximately £200m for Bread Holdings, the parent company of Gail’s Bakery and The Bread Factory ²⁴²⁵²⁶. Gail’s chairman and long-standing shareholder since 2011, Luke Johnson, who reportedly retains a stake of roughly 15%, is described in press coverage as “right-leaning” and has drawn protester attention partly through his public profile, though No public evidence identified of Johnson holding personal investments in Israeli surveillance, cyber, AI, SIGINT, or military-technology firms such as NSO, Cellebrite, Carbyne, AnyVision/Oosto, Wiz, Palantir, Check Point, SentinelOne, or Verint/Nice ¹⁹²⁷. Targeted searches of NGO and UN monitoring resources - including WhoProfits, the AFSC Investigate database, and the OHCHR business-and-human-rights database - returned no matching entries for Gail’s, and Gail’s does not appear in secondary reporting on the OHCHR database of business enterprises involved in Israeli settlement activity, which as of its most recent public update listed 158 enterprises from 11 countries; this audit relied on search-engine and secondary-source coverage rather than a full manual cross-check of the primary OHCHR list ²⁸²⁹³⁰. No public evidence identified of any regulatory inquiry, legal challenge, export-control action, or sanctions investigation involving Gail’s technology sales or services to Israeli state entities. Separately, Gail’s camera vendor Verkada was subject to a 2024 FTC enforcement action and a related US Department of Justice settlement resulting in a $2.95 million penalty and permanent injunction over data-security failures and CAN-SPAM violations; this action concerned Verkada’s general data-security practices and did not involve any Israel-specific nexus or Gail’s-specific data ³¹³².